NAT setup

Peter N. M. Hansteen · *nix forums addict Joined: 19 Feb 2005 Posts: 86

mihai.secasiu@denixsolutions-dot-com.no-spam.invalid (noobsd) writes:

bsdguy · *nix forums beginner Joined: 09 Feb 2005 Posts: 9

yes, you might add some rules to block some spoofing atempts
like this :

table <rfc1918> const { 192.168.0.0/16, 172.16.0.0/12,
10.0.0.0/8 }
block in quick on $ext_if from <rfc1918> to any
block out quick on $ext_if from any to <rfc1918>

noobsd · *nix forums beginner Joined: 03 Mar 2005 Posts: 6

thanks

any other options that might be usefull to put in pf.conf ?

bsdguy · *nix forums beginner Joined: 09 Feb 2005 Posts: 9

try it by adding this to your pf.conf

ext_if="rl1"
int_if="rl0"

nat on $ext_if from $int_if/24 to any -> $ext_if

change the values for ext_if and int_if to fit your system. ext_if is
the interface that connects your server to internet and int_if is the
interface that connects your server with your internal network.

for more information about how to use OpenBSD's packet filter take a
look at :

pfctl
the command that you can use to control the packet filter

and
pf.conf
(5) the configuration file for the packet filter.

noobsd · *nix forums beginner Joined: 03 Mar 2005 Posts: 6

I'm tring to set up a NAT firewall on my OpenBSD server.
can anyone help me with some instructions ?

Google