Hello List,

I have opbsd box (3.9). I need to make this box as a router. I have
two network cards. One internal, and other external. External card has
it's own ip address, let's say 1.2.3.4 (static). Internal card also
has it's own static IP - 192.168.1.1 with dhcp server running on it.
So I need nat to reach the internet.

pf is enabled and running, ip forwarding is also enabled:
net.inet.ip.forwarding=1

here are pf rules:

pfctl -s nat
nat on vr0 inet from 192.168.1.0/24 to any -> 1.2.3.4


While NAT is not working, I've these rules.


pfctl -s rules
scrub in on vr0 all fragment reassemble
scrub in on vr1 all fragment reassemble
scrub out on vr0 all fragment reassemble
scrub out on vr1 all fragment reassemble
pass in log all
pass out log all

It looks like internal network is working, but there is no routing
between vr0 (external) and vr1 (internal) network cards. But if
understand correctly - I don't need to route or bridge these
interfaces if I use NAT?

Please, give any advice or link.

Thanks for any comments.

Regards,

Tautvydas

Reply via email to