lgcosta/pf-linux-port
1
0 Fork 0
mirror of https://github.com/lgcosta/pf-linux-port.git synced 2026-11-12 20:28:06 -03:00
Code Issues Packages Projects Releases Wiki Activity

nat: re-route inbound packets whose destination pf rewrote (reverse NAT) instead of delivering them locally

Browse Source
This commit is contained in:
lgcosta committed 2026-11-11 20:17:27 -03:00
1 parent 9c3c4b6bbc
commit d520172753
2 files changed
+50 -1
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

tests/vm/05-nat.sh
+4 -1
View File
@@ -17,8 +17,11 @@ EGRESS_IP=$(pf0 "ip -4 addr show $EGRESS_DEV | grep -o 'inet [0-9.]*' | head -1
pf0 'insmod /opt/pf/pf.ko 2>/dev/null || insmod /tmp/pf.ko; true'
pf0 '/opt/pf/pfctl -e; /opt/pf/pfctl -f /dev/null' >/dev/null
# OpenBSD expands "(egress)" (an interface *group*) into the addresses of all
# its members - on a multi-NIC host that is ambiguous, so the gate uses the
# concrete transit interface (the OpenBSD-recommended form for NAT pools).
cat > /tmp/g05.conf <<C
pass out quick on egress from 10.0.1.0/24 to any nat-to (egress)
pass out quick on egress from 10.0.1.0/24 to any nat-to ($EGRESS_DEV)
pass in quick on ingress proto icmp keep state
pass out quick on egress proto icmp keep state
C