On Saturday, Jul 26, 2003, at 19:55 US/Pacific, Melameth, Daniel D. wrote:

Newbie running 3.3 stable with pf, dhcpd and isakmpd...

...recently upgraded to stable in the hopes of curing some ill that I have... and now I ask for peer review...

The following snippets DO NOT work fine under 3.3 stable (on similar machine):

nat on $ext inet proto udp from $ipp port = 5004 to $ipc -> $ext port 5004
nat on $ext inet proto udp from $ipp port = 5567 to $ipc -> $ext port 5567

# pfctl -s all
...
nat on ep1 inet proto udp from 172.30.0.127 port = 5004 to 191.255.255.1 -> 223.255.255.1 port 5004:35859
nat on ep1 inet proto udp from 172.30.0.127 port = 5567 to 191.255.255.1 -> 223.255.255.1 port 5567:48917

Did you upgrade pfctl too? It had a bug that caused it to set the second port incorrectly.


For what you're doing, using the static-port option instead of a specific port should also work.

Reply via email to