Code:
INTERNET
|
|
-------|------------
external
192.168.1.9
NBSD
router
192.168.2.1
internal
-------|------------
|
|
|
switch
internal Lan
192.168.2.0/24
Your internal LAN clients should have 192.168.2.1 as their default gateway. The default gateway always is on the same net as the client using the default gateway.
Your NAT rule is not correct. You should NAT on the external interface:
Code:
nat on $ext_if from $localnet to any -> ($ext_if)