I have FreeBSD 12.1-RELEASE router with 3 interfaces:

  • LAN HOME(192.168.22.)
  • LAN WORK(192.168.11.)
  • WAN(

My router connect to NordVPN over OpenVPN as a client (creates new TUN0 with address

I want now to nat only one host from LAN_HOME ( to internet over the NordVPN.

I try to setup this with PF and this rule :

nat on tun0 inet from to any ->

with no luck.

Thank you, for any advice.

  • You would need policy-routing in place, lookup the route-to in man pf.conf. On FreeBSD it should be normally working together with nat, IIRC.
    – poige
    Apr 13, 2021 at 1:18
  • I check this route-to, but i can't set it up correctly i think.
    – cr4shydlo
    Apr 13, 2021 at 10:16


You must log in to answer this question.

Browse other questions tagged .