|
Re: routing wireless traffic to lan
|
04/29/2014 4:44 AM
post110076
|
Re: routing wireless traffic to lan
Nick,
can you help me?
I have some problems to write what you suggested me.
I try to execute the command pfctl -s all I get this output:
TRANSLATION RULES:
nat on ppp0 from <natRangeTable> to any -> (ppp0) round-robin
nat on en5 from <natRangeTable> to any -> (en5) round-robin
rdr-anchor "dnsRedirect1" all
rdr-anchor "dnsRedirect2" all
rdr-anchor "dnsRedirect3" all
rdr-anchor "dnsRedirect4" all
FILTER RULES:
scrub in all no-df fragment reassemble
scrub out on mam0 all max-mss 968 fragment reassemble
pass out all keep state
pass in quick on mam0 all keep state
pass in quick on mep0 all keep state
pass in quick on mhp0 all keep state
pass in quick on en5 all keep state
block drop in on uap0 all
block drop in quick on uap0 from any to (mam0:network)
block drop in quick on uap0 from any to (mhp0:network)
block drop in quick on uap0 from any to (ppp0)
block drop in quick on uap0 from any to (en5:network)
pass in quick on uap0 inet proto udp from any port = bootpc to 255.255.255.255 port = bootp keep state
pass in quick on uap0 inet from any to 255.255.255.255 keep state
pass in quick on uap0 inet proto udp from any to 239.255.255.250 port = 1900 keep state
pass in quick on uap0 proto tcp from any to any port = 8100 keep state
pass in quick on uap0 inet from any to 224.0.0.0/4 keep state
pass in quick on uap0 proto udp from any to (uap0) port 49152:65535
anchor "dialUpTrigger" all
pass in quick inet proto icmp all icmp-type echoreq keep state
No queue in use
STATES:
self tcp 127.0.0.1:65515 -> 127.0.0.1:4444 ESTABLISHED:ESTABLISHED
self tcp 192.168.0.100:65486 -> 173.194.35.7:80 TIME_WAIT:TIME_WAIT
...............
As I write you I have internet connection on en5 (192.168.0.100) and I'd like to nat the traffic from wireless uap0 to
en5 (so wireless clients with ip 192.168.1.X can go to internet).
You suggested me to add this rule:
nat on uap0 from 192.168.1.0/24 to any -> (en5)
There are two problems:
1. I don't know which is the configuration file for pfctl (the file /etc/pf.conf) contains only comments). ho can I
discover the current configuration file?
2. Where do I have to insert the new nat rule?
It seems to me that there is some rules which are in conflit con the new nat rule.
Thanks
|
|
|