Thanks Dear Friends I will fix it, it is great, I have only one mistake in my new pf.conf About private and public IPs, you says true Can I optimiz this pf.conf? Thanks in advance On Nov 13, 2011 2:36 PM, "David Walker" <davidianwal...@gmail.com> wrote:
> Hey. > > On 06/11/2011, Gholam Mostafa Faridi <mostafafar...@gmail.com> wrote: > > > > NAT1 = "10.10.10.194" > > > > paltalk1 = "{ 192.168.0.20, 192.168.0.21, 192.168.0.22 }" > > > > match out on egress inet from !(paltalk1) to any nat-to (NAT1) > > > > much different is in NAT rule , and other things is simillar old pf. > > > > I have 27 valid IPs or static IPs , and I have to put many lines in my > > pf.conf > > > > > > I want three invalid IPs assigned to one Valid or static IP. for > example > > if my valid IP is 10.10.10.1 , I need these IPs 192.168.0.1 , > > 192.168.0.2 , 192.168.0.3 assigned to 10.10.10.1 > > > > > > this is my net work digram > > | > > | > > | > > ------------|------------ > > 10.10.10.192/27 > > external > > > > OpenBSD pf firewall > > > > internal > > 192.168.168.0.1/24 > > ------------|------------ > > | > > | > > | > > > > > http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf&sektion=5&manpath=OpenBSD+5.0#EXAMPLES > > Looking really quickly this is wrong: > > match out on egress inet from !(paltalk1) to any nat-to (NAT1) > > ! == NOT > $ == MACRO > > match out on egress inet from ($paltalk1) to any nat-to ($NAT1) > > BTW, they are public and private addresses, not valid and invalid. > Static is something different again (does not change in contrast to > dynamic, i.e. DHCP), > > > best wishes, > > mfaridi > > > > Action learning is an educational process whereby the participant > studies their own actions and experience in order to improve > performance. Learners acquire knowledge through actual actions and > repetitions, rather than through traditional instruction. > > http://en.wikipedia.org/wiki/Action_learning > > To study and not think is a waste. To think and not study is dangerous. > > http://en.wikiquote.org/wiki/Confucius > > Best wishes.