Hello, 2009/1/5 Jorge Valbuena <jorg...@gmx.net>: > 1. Why so many NAT rules ?
LAN accessable from rl1 has some common web servers that must be accessed only from its internal network. Those servers has IPs 10.0.11.0/24. I can connect only one device to that internal network, so I can obtain only one IP address. This is some kind of a network policy of that LAN - to use NAT. These are 2 rules (to NAT both "home" interfaces: rl0 & ath0). 2 other NAT rules are for Internet. > 2. Your BSD Server only for home router and firewall device ? At the moment - yes. Later I'll install squid, samba, configure FTP & install some torrent client. > 3. You should read OpenBSD FAQ and PF FAQ already done :) forgot to say so. > 4. type man afterboot, from the command line. the same :) > > BSD FAQ: > > http://www.openbsd.org/faq/index.html > > PF FAQ: > http://www.openbsd.org/faq/pf/index.html > > After reading this, you should have a clear vision of your configuration. Well, at the moment the configuration is quite clear to me, remember, I have configured network by myself :) But I have never configured network on OpenBSD (and on any router at all), and have never tried to troubleshoot any network errors. -- BR, Sergey Khentov