On Thu, Nov 23, 2006 at 12:38:05PM +1100, [EMAIL PROTECTED] wrote:
> The PF router I setup is an Internet router that allow people access the 
> Internet.
> But in the mean time, this PF router also connected to a local freebsd server.
> As a user behind the PF router, i also want to ssh into the local freebsd 
> server (10.1.10.2).
> But currently I m not able to ssh into this local server thru the PF router. 
> 
> The current NAT rules in the PF router setup as:
> 
> # pfctl -a NATRULES -sn
> nat on sis0 inet from 192.168.1.0/24 to any -> (sis0) round-robin
> nat on sis0 inet from 172.17.3.0/24 to any -> (sis0) round-robin
> nat on sis0 inet from 10.1.10.0/24 to any -> (sis0) round-robin
> 
> I m connected to the 172.17.3.0/24 network. The local freebsd server is 
> connected to 10.1.10.0/24 network.
> 
> And the PF router is already setup as a default gateway.
> 
> How can I modify the PF rules so that I can login from 172.17.3.0/24 to 
> 10.1.10.0/24 network?

Are they both on the LAN side of the PF box?

I assume sis0 is the WAN interface, but you don't say which is which.

You will need an interface alias on each network, and you will need to do 
something like:

pass quick on $lan_if from $lan_if:network to $lan_if:network

That rule will expand to each network, so you can communicate between them 
through the router.
-- 
"Cryptography is nothing more than a mathematical framework for
discussing various paranoid delusions." -- Don Alvarez
<URL:http://www.subspacefield.org/~travis/> -><-
_______________________________________________
freebsd-pf@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to