Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have multiple IP addresses aliased on my external interface and I am trying to forward from one of those IPs to an internal address for port 80.

My (sanitised) config is as follows:

set limit states 100000
set block-policy return

set skip on lo

# Define interfaces
ext_if = "fxp0"
int_if = "fxp1"

# Define networks
int_net = "192.168.0.0/24"
ext_net = "0.0.0.208/27"
int_ip = "192.168.0.253"
ext_ip = "0.0.0.211"
svr_ip = "0.0.0.214"
pbx_ip = "0.0.0.213"

block all
pass inet proto icmp all
pass on $int_if from $int_net to any keep state
pass out on $ext_if to any keep state

# Outbound NAT
pass out on $ext_if from $int_net to any nat-to $ext_ip keep state

pass in on $svr_ip proto tcp from any to any port 80 rdr-to 192.168.0.200 keep state

Attempts to connect from outside to ...214 are getting refused, have I missed something?

share|improve this question
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.