In one of those examples, you define $int_if as hme0 but in the other it's xl1.
Other than that, consider adding another pass rule.. or changing the match rule to a pass.
pass out on $ext_if from !($ext_if) to any nat-to ($ext_if)
...or match+pass:
match out on $ext_if from !($ext_if) to any nat-to ($ext_if)
pass out on $ext_if all
Good luck.
|