On 11/22/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:

The current NAT rules in the PF router setup as:

# pfctl -a NATRULES -sn
nat on sis0 inet from 192.168.1.0/24 to any -> (sis0) round-robin
nat on sis0 inet from 172.17.3.0/24 to any -> (sis0) round-robin
nat on sis0 inet from 10.1.10.0/24 to any -> (sis0) round-robin

I m connected to the 172.17.3.0/24 network. The local freebsd server is 
connected to 10.1.10.0/24 network.

And the PF router is already setup as a default gateway.

How can I modify the PF rules so that I can login from 172.17.3.0/24 to 
10.1.10.0/24 network?

Your connection attempt will match the second nat rule. A quick way to
avoid that would be adding a nat rule such as below first (nat rules
are always first match):

no nat from 172.17.3.0/24 to 10.1.10.0/24

--
Jon
_______________________________________________
freebsd-pf@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to