Re: 答复: Openbsd6.1 as firewall can access the internet but the LAN behind it cannot

2017-06-22 Thread Edgar Pettijohn
http://www.openbsd.org/faq/pf/example1.html Follow the above links guidance and you should have no problem. ⁣Sent from BlueMail ​ On Jun 22, 2017, 4:56 AM, at 4:56 AM, lu jian wrote: > >According to the page http://www.openbsd.org/faq/pf/nat.html, NAT is a >way to map an entire network(or netwo

Re: 答复: Openbsd6.1 as firewall can access the internet but the LAN behind it cannot

2017-06-22 Thread Bastien Durel
Le jeudi 22 juin 2017 à 06:21 +, lu jian a écrit : > # The line i put here > pass out on fxp0 inet from 192.168.0.0/24 to any nat-to 10.198.1.150 Your egress interface is pppoe0, not fxp0 in my pf.conf, I have : match out on pppoe0 inet from $lan nat-to (pppoe0:0) -- Bastien

答复: Openbsd6.1 as firewall can access the internet but the LAN behind it cannot

2017-06-22 Thread lu jian
According to the page http://www.openbsd.org/faq/pf/nat.html, NAT is a way to map an entire network(or networks) to a single IP address. Ideally, 192.168.0/24 should map to the address of interface which connects to the uplink ISP. So I put the following line to /etc/pf.conf: # cat /etc/pf.con