Hi all,
I'd like to use binat rules with tables. For example:
table <IPExterna> persist file
"/var/securityhome/securityfiles/objects/user/IPExterna"
table <enrutador1> persist file
"/var/securityhome/securityfiles/objects/user/enrutador1"
binat on $DMZ_if from <enrutador1> to any -> <IPExterna>
where:
#cat /var/securityhome/securityfiles/objects/user/IPExterna
#10.0.0.10
#cat /var/securityhome/securityfiles/objects/user/enrutador1
#192.168.0.10
It doesn't work. But it works:
binat on $DMZ_if from 192.168.0.10 to any -> 10.0.0.10
Why?
I've read "man pf.conf" and it says:
Tables can be used as the source or destination of filter rules, scrub
rules or translation rules such as nat or rdr (see below for details on
the various rule types). Tables can also be used for the redirect ad-
dress of nat and rdr rules and in the routing options of filter rules,
but only for round-robin pools.
But... why tables can't be used with binat?
Thanks
--
Abel Talaversn Estevez
Ingeniero Superior de Telecomunicaciones
Analista de Proyectos
OpenWired
Caballero 87 - Bajos
08029 - Barcelona
Tel. 93 495 0990
Fax. 93 419 4591
http://www.openwired.com
