Thread: nat HELP
View Single Post
  #8   (View Single Post)  
Old 2nd February 2009
dextro dextro is offline
Port Guard
 
Join Date: Dec 2008
Posts: 21
Default

I have no "block in" in pf.conf so the need to pass has been removed. But you have been humored I added the pass rule and same result, game does not work.

pf.conf is now
Code:
# macros
ext1="nfe0"
ext2="ngeth0"
int1="rl0"

pc1="10.0.0.2"
pc2="10.0.0.3"

# options
#set block-policy return
#set loginterface $ext_if
set skip on lo

# scrub
scrub in

# nat/rdr
nat on $ext1 from !($ext1) -> ($ext1:0)
#binat on $ext1 from $pc1 to any -> $ext1
#nat on $ext2 from !($ext2) -> ($ext2:0)
rdr-anchor "miniupnpd"

# uTorrent
rdr on $ext1 proto tcp from any to any port 45853 -> $pc1

# Apache
rdr on $ext1 proto tcp from any to any port 1337 -> $pc1

# Remote Desktop
rdr on $ext1 proto tcp from any to any port 3389 -> $pc1

# Hamachi
rdr on $ext1 proto {tcp, udp} from any to any port 39004 -> $pc1

# Red Alert 2 / Yuri's Revenge
#rdr on $ext_if proto tcp from any to any port {3840, 4005, 4808, 4810, 4995, 7000, 7001, 7002} -> $comp1
#rdr on $ext_if proto udp from any to any port {1234, 1235, 1236, 1237, 4000, 5400} -> $comp1

# Tiberian Sun
rdr on $ext1 proto {tcp, udp} from any to any port 1234 -> $pc1

# Xbox Live
#rdr on $ext_if proto udp from any to any port 88 -> $comp2
rdr on $ext1 proto {tcp, udp} from any to any port 3074 -> $pc2

#rdr on $ext_if proto {tcp, udp} from any to any port 1:65535 -> $comp1

anchor "miniupnpd"

pass in on $ext1 inet proto { tcp, udp } from any to $pc1 port 1234
EDIT1:

Quote:
Packet before the rdr rule is processed:

* Source address: 192.0.2.1
* Source port: 4028 (arbitrarily chosen by the operating system)
* Destination address: 24.65.1.13
* Destination port: 80

Packet after the rdr rule is processed:

* Source address: 192.0.2.1
* Source port: 4028
* Destination address: 192.168.1.5
* Destination port: 8000
My money is on that being the problem, any way to stop PF from altering packets?

Last edited by dextro; 2nd February 2009 at 08:58 AM.
Reply With Quote