Re: pf does not pass esp?

[Jason Ish <jason@codemonkey.net>]

On Thu, Mar 21, 2002 at 04:33:43PM +0100, Rickard Borgmäster wrote:
> On Thu, 21 Mar 2002 16:15:47 +0100
> Rickard Borgmäster <doktorn@realworld.nu> hit the keyboard and punched:
> 
> > From W2K-Client I can ping mailserver. However, it seems as the OpenBSD
> > box does the reply. If I telnet port 25 on mailserver, I reach OpenBSD
> > sendmail instead of the mailserver on 10.0.0.1 :-(
> 
> Oh, think I was a bit fast on the "send" button there...
> 
> Somehow, it seems OpenBSD box thinks it should reply to request made
> to 213.88.128.161 since it has this address as alias. In the perfect
> world, it should now that it should be forwarded to 10.0.0.1.

What do your rules look like?  Doing nat/binat on enc0 may help you out.