Re: OpenBSD 3.0, NAT, and pptp

[Rémi Guyomarch <rguyom@pobox.com>]

On Sun, Dec 02, 2001 at 01:01:54PM -0800, Steve Jost wrote:
> Well, I disabled the GRE in my kernel and it still does not work. Here
> are the rules for the forwarding in my nat.conf (by the way, its 1723
> that needs to be forwarded).
>  
> rdr on de0 proto gre from 216.175.121.211/32 to 158.222.46.214/32 port 0
> ->   192.168.110.5 port 0
> rdr on de0 proto tcp from 216.175.121.211/32 to 158.222.46.214/32 port
> 1701 ->       192.168.110.5 port 1701
> rdr on de0 proto udp from 216.175.121.211/32 to 158.222.46.214/32 port
> 1701 ->    192.168.110.5 port 1701
>  
> What am I doing wrong?

You forgot to NAT outgoing packets.

I would use :

binat on de0 from 192.168.110.5 to 216.175.121.211 proto 47 -> de0
binat on de0 from 192.168.110.5 to 216.175.121.211 proto tcp -> de0
binat on de0 from 192.168.110.5 to 216.175.121.211 proto udp -> de0

-- 
Rémi