Hi everyone,

I've been testing the following with OpenBSD 3.1 and tomorrow I will do an
upgrade to 3.3 if I can't find a solution. The problem is that it will be
night work because it a company firewall.

Anyway, I'm trying to do a route-to together with NAT. The default route
is on rl0 but I have one rule that says

pass in on rl1 route-to rl2:xxx.yyy.zzz.www from 1.2.3.4 to any keep state

I also have a nat rule that says

nat on rl2 from 1.2.3.4 to any -> rl2

I can see packets to go out on rl2 from 1.2.3.4 but the nat rule doesn't
seem to have any effect. The source address is still 1.2.3.4.

Does anyone know if this is an issue with 3.1 or have a misunderstood
something? Will a route-to ignore nat rules?

Thanks in advance,
Nickus

Reply via email to