Egregoros

What am I doing wrong here? Just a very basic #FreeBSD pf NAT config, but the src address isn't being updated:

scrub in all

nat pass on tun0 from tun0:network to any -> (vtnet0)

pass all

#Networking

@lattera VPN related, eh? I was setting up a rule recently on a server with an OpenVPN and I put the rule on tun0 and it didn't match anything. Looked with tcpdump, it wasn't there.

It was on the real physical interface the VPN was coming over.

wtf?

@feld could you share a (sanitized) copy of your config?

@lattera I don't have anything with NAT, this was just me ensuring that only a specific source network could interact with an IP address on a loopback with the traffic coming over the VPN tunnel. Just a simple pass quick rule that I wanted bound to the vpn interface.... *sigh*

@feld got it working: pfctl -F all

stale states suck. ;-)