On 09/09/15 15:39, jean-yves boisiaud wrote:
the rule :pass in quick on em2 inet proto icmp from any to em2:network becomes : pass in quick on em2 inet proto icmp from any to em2:network \ reply-to (em2 $em2_gw) where $em2_gw is the IP of our provider's router.
Just an addition in case you have traffic originating from the same network (don't reply through the gateway), before that rule you can also add:
pass in quick on em2 inet proto icmp from em2:network reply-to em2
