Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have multiple IP addresses aliased on my external interface and I am trying to forward from one of those IPs to an internal address for port 80.

My (sanitised) config is as follows:

set limit states 100000
set block-policy return

set skip on lo

# Define interfaces
ext_if = "fxp0"
int_if = "fxp1"

# Define networks
int_net = ""
ext_net = ""
int_ip = ""
ext_ip = ""
svr_ip = ""
pbx_ip = ""

block all
pass inet proto icmp all
pass on $int_if from $int_net to any keep state
pass out on $ext_if to any keep state

# Outbound NAT
pass out on $ext_if from $int_net to any nat-to $ext_ip keep state

pass in on $svr_ip proto tcp from any to any port 80 rdr-to keep state

Attempts to connect from outside to ...214 are getting refused, have I missed something?

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.