> > On Monday 19 January 2004 17:22, Tillman Hodgson wrote:
> > > You've pretty much wore out the "play with the config files" route.
> > > Let's try getting some data by finding out what is actually happening
> > > so we can figure out what's wrong. Can you post what the traffic on the
> > > other interface looks like when you're trying to go out from
> > > 192.168.0.0/24

All right people, it works :)
In fact, my only mistake was those rules (keep state):

pass in quick all keep state
pass out quick all keep state

My final working configuration:

# /etc/ipnat.rules
map tun1 192.168.0.0/24 -> 0/32 proxy port ftp ftp/tcp
map tun1 192.168.0.0/24 -> 0/32 portmap tcp/udp auto
map tun1 192.168.0.0/24 -> 0/32
map tun0 192.168.1.0/24 -> 0/32 proxy port ftp ftp/tcp
map tun0 192.168.1.0/24 -> 0/32 portmap tcp/udp auto
map tun0 192.168.1.0/24 -> 0/32

# /etc/ipf.rules
pass out quick on tun0 to tun1:@tun1_GW from 192.168.0.0/24 to any
pass in quick all
pass out quick all

Yeah :) I'm happy :)
All right, now I can work on filtering things...

Thanks a lot everybody.

Antoine

_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to