[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
pf.conf/nat question
- To: misc_(_at_)_openbsd_(_dot_)_org
- Subject: pf.conf/nat question
- From: Michael Teter <mt_bsd_(_at_)_yahoo_(_dot_)_com>
- Date: Thu, 3 Apr 2003 10:44:52 -0800 (PST)
Howdy.
I'm getting the following error when I try to parse my
pf.conf:
/etc/pf.conf:74: translation address expands to
multiple IPs of this address family
Let me explain what I'm trying to do. Keep in mind
that I have made effort to read man pages, online
docs, and tutorials. I think I'm close.
I would like to setup a firewall/nat router that
presents 4 IP addresses to the world. For testing
purposes I'm using the following "external" IPs:
10.1.72.13 - the general address that outbound traffic
(from my internal network of 10.2.0.0/24 will be
natted to, except for the following special cases:
10.1.72.14 - this will be binatted to 10.2.0.14
10.1.72.15 - binatted to 10.2.0.15
10.1.72.16 - binatted to 10.2.0.16
I believe I have to have hostname.rl0 (my external
interface) set something like this:
inet 10.1.72.13 0xffffff00 10.1.72.155
inet alias 10.1.72.14 0xffffffff
inet alias 10.1.72.15 0xffffffff
inet alias 10.1.72.16 0xffffffff
I think that hostname.rl0 may be part of the problem.
I'm not clear on the usage after reading the
hostname.if manpage. Comments very welcome here.
In my pf.conf, the nat section, I have the following:
nat on rl0 inet from 10.2.0.0/24 to any -> rl0
binat on rl0 from 10.2.0.14 to any -> 10.1.72.14
binat on rl0 from 10.2.0.15 to any -> 10.1.72.15
binat on rl0 from 10.2.0.16 to any -> 10.1.72.16
Thanks for any help or reference to further info.
MT
Yahoo! Tax Center - File online, calculators, forms, and more
http://tax.yahoo.com
Visit your host, monkey.org