Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have multiple IP addresses aliased on my external interface and I am trying to forward from one of those IPs to an internal address for port 80.

My (sanitised) config is as follows:

set limit states 100000
set block-policy return

set skip on lo

# Define interfaces
ext_if = "fxp0"
int_if = "fxp1"

# Define networks
int_net = "192.168.0.0/24"
ext_net = "0.0.0.208/27"
int_ip = "192.168.0.253"
ext_ip = "0.0.0.211"
svr_ip = "0.0.0.214"
pbx_ip = "0.0.0.213"

block all
pass inet proto icmp all
pass on $int_if from $int_net to any keep state
pass out on $ext_if to any keep state

# Outbound NAT
pass out on $ext_if from $int_net to any nat-to $ext_ip keep state

pass in on $svr_ip proto tcp from any to any port 80 rdr-to 192.168.0.200 keep state

Attempts to connect from outside to ...214 are getting refused, have I missed something?

share|improve this question

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.