Re: PF NAT, how to forward GRE?

2007-09-28 Thread Peter N. M. Hansteen
Mel [EMAIL PROTECTED] writes:

 I take it you mean gre(4), which defines two IP protocols. So your rules will 
 need to include proto gre or proto mobile to identify the traffic. Something 
 like:
 nat on $wan_if proto gre from $int_if:network to any - ($wan_if)

and don't forget to include a matching pass rule.

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.datadok.no/ http://www.nuug.no/
Remember to set the evil bit on all malicious network traffic
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: PF NAT, how to forward GRE?

2007-09-27 Thread Mel
On Thursday 27 September 2007 02:47:14 Paul Fraser wrote:

 I'd like to forward all incoming GRE traffic on the WAN link to a system
 on the wired network. Could anyone advise how?

I take it you mean gre(4), which defines two IP protocols. So your rules will 
need to include proto gre or proto mobile to identify the traffic. Something 
like:
nat on $wan_if proto gre from $int_if:network to any - ($wan_if)

-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


PF NAT, how to forward GRE?

2007-09-26 Thread Paul Fraser
Hello list,

I've got a box serving as a router between a wired and wireless network,
as well as providing NAT services for a WAN link to the two
aforementioned systems.

I'd like to forward all incoming GRE traffic on the WAN link to a system
on the wired network. Could anyone advise how?

I thought the PF manual was perhaps a bit vague about forwarding
specific protocols (or for that matter, if it's even possible)...

Cheers,

Paul.



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]