What am I doing wrong here? Just a very basic #FreeBSD pf NAT config, but the src address isn't being updated:
scrub in all
nat pass on tun0 from tun0:network to any -> (vtnet0)
pass all
Timeline
Post
Remote status
Context
3
@lattera VPN related, eh? I was setting up a rule recently on a server with an OpenVPN and I put the rule on tun0 and it didn't match anything. Looked with tcpdump, it wasn't there.
It was on the real physical interface the VPN was coming over.
wtf?
It was on the real physical interface the VPN was coming over.
wtf?
@feld could you share a (sanitized) copy of your config?
@lattera I don't have anything with NAT, this was just me ensuring that only a specific source network could interact with an IP address on a loopback with the traffic coming over the VPN tunnel. Just a simple pass quick rule that I wanted bound to the vpn interface.... *sigh*