Re: Cascading pf firewalls with both nat and no nat

2010-03-01 Thread Christopher Ahrens
>Internal firewall > 10.1.2.1/24 xl0 (connected to workstation) > 10.1.0.2/24 xl1 (connected to external firewall) > gateway is 10.1.0.1 > >External firewall > 10.1.0.1/16 re0 (connected to internal firewall) > 10.0.2.1/24 re1 (connected to server) Your IP addresses on the firewall are messin

Re: Cascading pf firewalls with both nat and no nat

2010-03-01 Thread System Administrator
On 1 Mar 2010 at 21:01, Thomas Schwarz-Gulden wrote: > Hi, > > Interface re0 of the external firewall is configured as > 10.1.0.1/16. That's your problem, see below. > netstat -rn > on external firewall lists 10.1/16 with flags UC. > > So I think that anything with a destination like > 10.1.x.

Re: Cascading pf firewalls with both nat and no nat

2010-03-01 Thread Thomas Schwarz-Gulden
Hi, Interface re0 of the external firewall is configured as 10.1.0.1/16. netstat -rn on external firewall lists 10.1/16 with flags UC. So I think that anything with a destination like 10.1.x.x would be sent there, including anything to 10.1.2.1. Am I wrong? Original-Nachricht

Re: Cascading pf firewalls with both nat and no nat

2010-03-01 Thread Laurent CARON
On 01/03/2010 18:26, tsg12...@gmx.de wrote: What am I doing wrong? Any hints would be appreciated. Thank you very much in advance. Hi, Has the external fw a route to 10.1.2.1/24 ?

Cascading pf firewalls with both nat and no nat

2010-03-01 Thread tsg12345
Hi list, I have a working setup with 2 cascaded firewalls (OpenBSD 4.5 on my external firewall, 4.6 on my internal firewall). NAT is done on the external interface of the internal firewall (which is connected to the external firewall). Now I want to exclude one of the workstations behind the int