[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

pf.conf/nat question



Howdy.

I'm getting the following error when I try to parse my
pf.conf:
/etc/pf.conf:74: translation address expands to
multiple IPs of this address family

Let me explain what I'm trying to do.  Keep in mind
that I have made effort to read man pages, online
docs, and tutorials.  I think I'm close.

I would like to setup a firewall/nat router that
presents 4 IP addresses to the world.  For testing
purposes I'm using the following "external" IPs:
10.1.72.13 - the general address that outbound traffic
(from my internal network of 10.2.0.0/24 will be
natted to, except for the following special cases:
10.1.72.14 - this will be binatted to 10.2.0.14
10.1.72.15 - binatted to 10.2.0.15
10.1.72.16 - binatted to 10.2.0.16

I believe I have to have hostname.rl0 (my external
interface) set something like this:
inet 10.1.72.13 0xffffff00 10.1.72.155
inet alias 10.1.72.14 0xffffffff
inet alias 10.1.72.15 0xffffffff
inet alias 10.1.72.16 0xffffffff

I think that hostname.rl0 may be part of the problem. 
I'm not clear on the usage after reading the
hostname.if manpage.  Comments very welcome here.

In my pf.conf, the nat section, I have the following:
nat on rl0 inet from 10.2.0.0/24 to any -> rl0
binat on rl0 from 10.2.0.14 to any -> 10.1.72.14
binat on rl0 from 10.2.0.15 to any -> 10.1.72.15
binat on rl0 from 10.2.0.16 to any -> 10.1.72.16

Thanks for any help or reference to further info.
MT
Yahoo! Tax Center - File online, calculators, forms, and more
http://tax.yahoo.com



Visit your host, monkey.org