Re: New Translation Options in PF

2009-09-06 Thread Stuart Henderson
On 2009-09-05, Scott McEachern wrote: > Anathae Townsend wrote: >> match out on external from to any nat-to (external) round-robin >> >> Should round-robin be showing up in the rule? >> >> > Remove the parentheses on external and it will use the first IP assigned > to external and not use rou

Re: New Translation Options in PF

2009-09-05 Thread Scott McEachern
Anathae Townsend wrote: match out on external from to any nat-to (external) round-robin Should round-robin be showing up in the rule? Remove the parentheses on external and it will use the first IP assigned to external and not use round-robin. -- - RSM http://www.erratic.ca

Re: New Translation Options in PF

2009-09-05 Thread Jussi Peltola
On Sat, Sep 05, 2009 at 05:37:58AM -0600, Anathae Townsend wrote: > match out on external from to any nat-to (external) round-robin IIRC it's been that way as long as I can remember, if you only have one address round-robin doesn't really do anything. -- Jussi Peltola

New Translation Options in PF

2009-09-05 Thread Anathae Townsend
My OpenBSD 4.6 current firewall is currently designed to service three internal networks, 192.168.0.0/24, 192.168.1.0/24, 192.168.2.0/24. I have assigned the group external to my connection to my isp. Using the following, I'm able to have internal connections to use network address translation w