View Single Post
  #1   (View Single Post)  
Old 10th October 2013
bsd_matt bsd_matt is offline
Port Guard
Join Date: Oct 2013
Posts: 12
Default pf = Perfectly Frustrating? =)

I am working at a web-host. I have pf setup (using rdr-to) to redirect internet IP's to the local LAN. The problem is that the local boxes see my Internet addy as the source and not the clients internet addy. Traffic is still getting routed correctly, but my SQL logs all show access from _myIP_ and not the real IP.

i.e. My internet IP range = :
gateway =
www mapped to:
mysql =
ftp =

When a client hits our web-server or sql box the logs on these boxes show "connection from" (which is the mapping from pf.conf for that 'service')
I want it to show: "connection from" or the clients actual IP

I have been mucking around with the pf.conf rules changing rdr-to into nat-to (and others...) but nothing 'fixes' it.

History: We have an old OpenBSD4.8 box that is currently running as our firewall/gateway. It does this behaviour as desired. I only see this issue on a new OBSDv5.3 that we are trying to migrate to.

Help... please!
Reply With Quote