Re: OBSD 3.1 binat issue

[Dries Schellekens <gwyllion@ace.ulyssis.org>]

On Wed, 12 Jun 2002, Roderick Scott Corporation wrote:

> EXT_IF = "fxp0"
> INT_IF = "fxp1"
> DMZ_IF = "fxp2"
>
> # ________ external ip block
> EXT_IP     = "123.123.123.106"
> EXT_IP1    = "123.123.123.107"
> EXT_IP2    = "123.123.123.108"
>
> # ________ network definitions
> EXT_NW  = "123.123.123.64/26"
> DMZ_NW  = "192.168.1.0/24"
> INT_NW  = "192.168.0.0/24"
>
> # ___________ define servers on DMZ
> WWW_SERVER  = "192.168.71.108"
> MAIL_SERVER = "192.168.71.107"
>
> # ___________ NAT the private network
> nat on $EXT_IF from $INT_NW to any -> $EXT_IP
>
> # ___________ bi-directional 1:1 NAT between alias IPs and DMZ
> binat on $EXT_IF from $MAIL_SERVER to any -> $EXT_IP1
> binat on $EXT_IF from $WWW_SERVER  to any -> $EXT_IP2

This looks fine. What's your pf.conf? Perhaps you're blocking stuff.


Dries
-- 
Dries Schellekens
email: gwyllion@ulyssis.org