View Single Post

   
  #6 (permalink)  
Old 02-16-2008, 06:23 AM
itln.stln
 
Posts: n/a
Default Re: Building a OpenBSD Gateway Router

Ok I have configured PF and I still am not able to talk to the outside
world except on the OpenBSD machine itself. I am even using the example
rules from the PF User's Guide and still nothing. If anyone can shed
some light on this it would be really great.

Here is the pf.conf file:

# macros
int_if = "fxp1"
ext_if = "fxp0"

tcp_services = "{ 22, 113 }"
icmp_types = "echoreq"

priv_nets = "{ 127.0.0.0/8, 192.168.0.0/16}"

comp3 = "192.168.0.3"

# options
set block-policy return
set loginterface $ext_if

# scrub
scrub in all

# nat/rdr
nat on $ext_if from $int_if:network to any -> ($ext_if)
rdr on $int_if proto tcp from any to any port 21 -> 127.0.0.1 \
port 8021

# filter rules
block all

pass quick on lo0 all

block drop in quick on $ext_if from $priv_nets to any
block drop out quick on $ext_if from any to $priv_nets

pass in on $ext_if inet proto tcp from any to ($ext_if) \
port $tcp_services flags S/SA keep state

pass in on $ext_if inet proto tcp from port 20 to ($ext_if) \
user proxy flags S/SA keep state

pass in inet proto icmp all icmp-type $icmp_types keep state

pass in on $int_if from $int_if:network to any keep state
pass out on $int_if from any to $int_if:network keep state

pass out on $ext_if proto tcp all modulate state flags S/SA
pass out on $ext_if proto { udp, icmp } all keep state


Oh by the way I'm trying to get a bunch of windows machines to work with
this if that helps to pin point the issue.

Thank you very much.
Reply With Quote