Sometimes I have to set up a LAN inside a pre-existing NAT'd LAN and
traffic from the inner LAN (B) does not make it to the Internet or even
to final, external interface (4).

                 +-------+         +--------+
        LAN B ---+ 1     +         +  Box2  +
                 +  NAT  +         +       4+---> Internet
                 +      2+--LAN A--+3  NAT  +
                 +  Box1 +         +        +
                 +-------+         +--------+

What kind of generic change is needed in PF to get from LAN B through to
the outside?

Setting the IP range for LAN B to match those of LAN A is one option,
but has to be done each time and also may run the risk of collision on
some subnets.

Regards
-Lars

Reply via email to