I was used to do this easily but it4s failing now.
Xl0 = 10.10.100.254
Xl1=internet
This is my /etc/pf.conf
# interface externa WAN
ext_if="xl1"
# interface interna LAN
int_if="xl0"
#set skip on lo
#scrub in
rdr on xl1 proto tcp from any to xl1 port 8101 -> 10.10.100.21 port 8101
rdr on xl0 proto tcp from any to 10.10.100.254 port 81 -> 10.10.0.2 port 80
#
# NAT
#
#nat on $ext_if from !($ext_if) -> ($ext_if:0)
nat on $ext_if from 10.10.0.0/16 -> $ext_if
pass in all
pass out all
#pass quick on $int_if no state
#antispoof quick for { lo $int_if }
Note:
I can access http://10.10.0.2
It fails when I try to access http://10.10.100.254:81
What4s wrong folks?
# pfctl -sn
nat on xl1 inet from 10.10.0.0/16 to any -> 200.162.41.34
rdr on xl1 inet proto tcp from any to 200.162.41.34 port = 8101 ->
10.10.100.21 port 8101
rdr on xl0 inet proto tcp from any to 10.10.100.254 port = 81 -> 10.10.0.2
port 80
#
# dmesg
OpenBSD 4.3 (CMT) #1: Mon Sep 22 15:25:18 BRT 2008
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/CMT
cpu0: Intel(R) Pentium(R) 4 CPU 2.13GHz ("GenuineIntel" 686-class) 2.13 GHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CF
LUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,x
TPR
real mem = 1072697344 (1023MB)
avail mem = 1033314304 (985MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 06/16/05, BIOS32 rev. 0 @ 0xfd5b6,
SMBIOS rev. 2.33 @ 0x3ff77000
(46 entries)
bios0: vendor IBM version "-[KEE134AUS-1.34]-" date 06/16/2005
bios0: IBM CORPORATION -[84824RU]-
bios0: ROM list: 0xc0000/0x9000 0xc9000/0x1000 0xca000/0x1000 0xcb000/0x9c00
0xd 5000/0x2000 0xd7000/0x2000
0xd9000/0x800 0xd9800/0x800
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel 82875P Host" rev 0x02
ppb0 at pci0 dev 3 function 0 "Intel 82875P CSA" rev 0x02
pci1 at ppb0 bus 2
em0 at pci1 dev 1 function 0 "Intel PRO/1000CT (82547GI)" rev 0x00: irq 5,
addre ss 00:11:25:7f:86:28
ppb1 at pci0 dev 28 function 0 "Intel 6300ESB PCIX" rev 0x02
pci2 at ppb1 bus 3
bge0 at pci2 dev 1 function 0 "Broadcom BCM5703 Alt" rev 0x10, BCM5703 B0
(0x110 0): irq 11, address
00:10:18:16:14:1b
brgphy0 at bge0 phy 1: BCM5703 10/100/1000baseT PHY, rev. 3
bge1 at pci2 dev 2 function 0 "Broadcom BCM5703 Alt" rev 0x10, BCM5703 B0
(0x110 0): irq 11, address
00:10:18:16:0e:8a
brgphy1 at bge1 phy 1: BCM5703 10/100/1000baseT PHY, rev. 3
ahd0 at pci2 dev 4 function 0 vendor "Adaptec", unknown product 0x808f rev
0x10: irq 11
ahd0: aic7901, U320 Wide Channel A, SCSI Id=7, PCI-X 50-66MHz, 512 SCBs
scsibus0 at ahd0: 16 targets
sd0 at scsibus0 targ 0 lun 0: <IBM-ESXS, VPR036W3-ETS10FN, S370> SCSI2
0/direct fixed
sd0: 34715MB, 34401 cyl, 3 head, 688 sec, 512 bytes/sec, 71096640 sec total
sd1 at scsibus0 targ 6 lun 0: <IBM-ESXS, VPR036W3-ETS10FN, S370> SCSI2
0/direct fixed
sd1: 34715MB, 34401 cyl, 3 head, 688 sec, 512 bytes/sec, 71096640 sec total
uhci0 at pci0 dev 29 function 0 "Intel 6300ESB USB" rev 0x02: irq 11
uhci1 at pci0 dev 29 function 1 "Intel 6300ESB USB" rev 0x02: irq 5
"Intel 6300ESB WDT" rev 0x02 at pci0 dev 29 function 4 not configured
"Intel 6300ESB APIC" rev 0x02 at pci0 dev 29 function 5 not configured
ehci0 at pci0 dev 29 function 7 "Intel 6300ESB USB" rev 0x02: irq 11
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1
ppb2 at pci0 dev 30 function 0 "Intel 82801BA Hub-to-PCI" rev 0x0a
pci3 at ppb2 bus 4
vga0 at pci3 dev 2 function 0 "ATI Radeon VE QY" rev 0x00
wsdisplay0 at vga0 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
xl0 at pci3 dev 7 function 0 "3Com 3c905C 100Base-TX" rev 0x78: irq 5, address
0 0:0a:5e:63:7e:2e
exphy0 at xl0 phy 24: 3Com internal media interface
xl1 at pci3 dev 8 function 0 "3Com 3c905C 100Base-TX" rev 0x78: irq 11,
address 00:0a:5e:63:7d:72
exphy1 at xl1 phy 24: 3Com internal media interface
ichpcib0 at pci0 dev 31 function 0 "Intel 6300ESB LPC" rev 0x02: 24-bit timer
at 3579545Hz
pciide0 at pci0 dev 31 function 1 "Intel 6300ESB IDE" rev 0x02: DMA, channel 0
c onfigured to compatibility,
channel 1 configured to compatibility
atapiscsi0 at pciide0 channel 0 drive 0
scsibus1 at atapiscsi0: 2 targets
cd0 at scsibus1 targ 0 lun 0: <HL-DT-ST, DVD-RAM GSA-H58N, 1.01> SCSI0 5/cdrom
r emovable
cd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
pciide0: channel 1 disabled (no drives)
pciide1 at pci0 dev 31 function 2 "Intel 6300ESB SATA" rev 0x02: DMA, channel
0 configured to native-PCI,
channel 1 configured to native-PCI
pciide1: using irq 5 for native-PCI interrupt
ichiic0 at pci0 dev 31 function 3 "Intel 6300ESB SMBus" rev 0x02: irq 5
iic0 at ichiic0
admtm0 at iic0 addr 0x2d: 47m192
adt0 at iic0 addr 0x2e: adm1027 rev 0x6a
spdmem0 at iic0 addr 0x50: 512MB DDR SDRAM ECC PC3200CL3.0
spdmem1 at iic0 addr 0x51: 512MB DDR SDRAM ECC PC3200CL3.0
usb1 at uhci0: USB revision 1.0
uhub1 at usb1 "Intel UHCI root hub" rev 1.00/1.00 addr 1
usb2 at uhci1: USB revision 1.0
uhub2 at usb2 "Intel UHCI root hub" rev 1.00/1.00 addr 1
isa0 at ichpcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
spkr0 at pcppi0
midi0 at pcppi0: <PC speaker>
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
biomask ff65 netmask ff65 ttymask ffe7
mtrr: Pentium Pro MTRR support
softraid0 at root
ahd0: target 0 synchronous with period = 0x8, offset =
0x7f(RDSTRM|DT|IU|RTI|QAS )
ahd0: target 6 synchronous with period = 0x8, offset =
0x7f(RDSTRM|DT|IU|RTI|QAS )
root on sd0a swap on sd0b dump on sd0b
#
