Re: Cascading pf firewalls with both nat and no nat

2010-03-01 Thread Christopher Ahrens
>Internal firewall > 10.1.2.1/24 xl0 (connected to workstation) > 10.1.0.2/24 xl1 (connected to external firewall) > gateway is 10.1.0.1 > >External firewall > 10.1.0.1/16 re0 (connected to internal firewall) > 10.0.2.1/24 re1 (connected to server) Your IP addresses on the firewall are messin

Re: Cascading pf firewalls with both nat and no nat

2010-03-01 Thread System Administrator
On 1 Mar 2010 at 21:01, Thomas Schwarz-Gulden wrote: > Hi, > > Interface re0 of the external firewall is configured as > 10.1.0.1/16. That's your problem, see below. > netstat -rn > on external firewall lists 10.1/16 with flags UC. > > So I think that anything with a destination like > 10.1.x.

Re: Cascading pf firewalls with both nat and no nat

2010-03-01 Thread Thomas Schwarz-Gulden
Hi, Interface re0 of the external firewall is configured as 10.1.0.1/16. netstat -rn on external firewall lists 10.1/16 with flags UC. So I think that anything with a destination like 10.1.x.x would be sent there, including anything to 10.1.2.1. Am I wrong? Original-Nachricht

Re: Cascading pf firewalls with both nat and no nat

2010-03-01 Thread Laurent CARON
On 01/03/2010 18:26, tsg12...@gmx.de wrote: What am I doing wrong? Any hints would be appreciated. Thank you very much in advance. Hi, Has the external fw a route to 10.1.2.1/24 ?