i have a freebsd 5.4 server
ifconfig
fxp0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=8<VLAN_MTU>
inet 195.xxx.157.214 netmask 0xffffffe0 broadcast 195.228.157.223
inet6 fe80::211:11ff:fe56:ec80%fxp0 prefixlen 64 scopeid 0x1
inet6 3ffe:401c:430::1 prefixlen 64
ether 00:11:11:56:ec:80
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
nat on $ext_if from 127.1.0.0/16 to any -> ($ext_if)
i just realised that in my jail every second connection is working.
i check the pfctl -ss
self tcp 127.1.0.1:53321 -> 10.0.0.4:61360 ->
195.228.157.253:6667 SYN_SENT:CLOSED
wtf??
why 10.0.0.4? The last week we tested some vpn-s here and then i use
this ip temporary for testing, after i delete it
ifconfig fxp0 add -alias 10.0.0.4 0xffffff00
but the pf use it for NAT like it is still exists there
i changed my rules
nat on $ext_if from 127.1.0.0/16 to any -> 195.xxx.157.214
now it is working but my question is why pf still use this ip even it
is no more exists there
(i reloaded the ruleset and flushed the state table before)
(sorry for my english)
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
