Dimitri Georganas wrote:

[EMAIL PROTECTED] wrote:

[...]
<SNAP>

Yes I tried that also.
$Int2:network was a hint from the #pf - IRC Channel at Freenode.

Kind regards,
Sebastian

Well since you said you tried with minimal pf.conf as well and it didn't work, you may want to try this minimal conf which does work.


ext_if="sis0" int_if="wi0" scrub in all

nat on $ext_if from !($ext_if) -> ($ext_if:0)

block in on $ext_if   MISTAKE HERE pass out on $ext_if  keep state
block in on wi0 inet
pass in on wi0 inet from <friends> to any keep state

friends is assumed to be a table with ip's listed that should have wireless access.

corrected:

ext_if="sis0" int_if="wi0" scrub in all

nat on $ext_if from !($ext_if) -> ($ext_if:0)

block in on $ext_if
pass out on $ext_if  keep state
block in on wi0 inet
pass in on wi0 inet from <friends> to any keep state

friends is assumed to be a table with ip's listed that should have wireless access.

Reply via email to