On Sat, Mar 24, 2012 at 10:03:19AM +0400, Andrey N. Oktyabrski wrote: > On 24.03.12 09:06, Andrey N. Oktyabrski wrote: > >PF NAT do not work with tun0 > This is not correct: it works but only day or two.
This is normal if your ppp connection does not come with a static IP address. You should use a rule only specifying the interface name (tun0) in that case; this one should do the trick: nat on $ext_if inet from !($ext_if) -> ($ext_if:0) The 'inet' keyword prevents pf from nating IPv6 traffic. -- Francois Tigeot