pflow and NAT

2014-01-23 Thread Tor Houghton
Hello, I've been using pflow in a non-NAT environment (btw, thanks for both the pf support and the other OS softflowd), but now I'd like to use it in a NAT configuration. Is there a particular way pflow needs to be configured to see which of the NAT'ed hosts are talking to which external

Re: pflow and NAT

2014-01-23 Thread Andy
You need to place the pflow directive on rules on the inside interface not on the outside interface to see RFC1918 addresses. Rules on the outside interface are processed 'post' nat.. NB; 'keep state' is the default, so you don't need to define this unless you are explicitly setting something

Re: pflow and NAT

2014-01-23 Thread Florian Obser
You want revision 1.30 of if_pflow.c export the original aka untranslated address in pflow ok florian@ henning@ ~ http://www.openbsd.org/cgi-bin/cvsweb/src/sys/net/if_pflow.c#rev1.30 (and by that I don't mean you should backport it to 5.2, upgrading to 5.4 will be much easier - alot has

Re: pflow and NAT

2014-01-23 Thread Andy
Awesome, didn't know this had been done :) On Thu 23 Jan 2014 09:29:38 GMT, Florian Obser wrote: You want revision 1.30 of if_pflow.c export the original aka untranslated address in pflow ok florian@ henning@ ~ http://www.openbsd.org/cgi-bin/cvsweb/src/sys/net/if_pflow.c#rev1.30 (and

Re: pflow and NAT

2014-01-23 Thread Tor Houghton
On Thu, Jan 23, 2014 at 09:29:38AM +, Florian Obser wrote: You want revision 1.30 of if_pflow.c export the original aka untranslated address in pflow ok florian@ henning@ ~ http://www.openbsd.org/cgi-bin/cvsweb/src/sys/net/if_pflow.c#rev1.30 (and by that I don't mean you should