New answers tagged


It seems that: pass out on $ext_if from $int_net to any nat-to $ext_if ... doesn't work, it has to be this: match out on $ext_if from $int_net to any nat-to $ext_if pass on $ext_if from $int_net to any Also, it helps to make sure net.inet.ip.forwarding is set to 1.


It’s not clear to me why you need a static route on your router, but, regardless, you have no rule in your pf.conf that relates to NAT. Try something like the following after your macros in pf.conf: match out on egress from ! ( egress ) nat-to ( egress ) Or: match out on $int_if from ! ( $int_if ) nat-to ( $int_if ) If those don’t work, post the ...

Top 50 recent answers are included