OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Izaak (izaakmute.ca)
Date: Wed Apr 03 2002 - 14:29:59 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi, with IPF, I could write a rule that referred to a dynamic IP address like
    so:

    map ne0 192.168.1.0/24 -> ne0/32

    However, with PF, I have to write the following instead:

    nat on ne0 from 192.168.1.0/24 to any -> 24.77.8.112

    If I write ne0/32 instead of 24.77.8.112, PF complains that it can't resolve
    ne0/32. I'm not around to administrate this machine very frequently so it
    would be pretty inconvenient if I had to change the address manually in pf.conf
    and nat.conf every time a new one is assigned (via DHCP). I guess I'll write a
    shell script that runs on boot to generate both files after dhclient loads, but
    that has its disadvantages... I'd really prefer the old IPF functionality. Is
    there a way to do this with PF?

    Thanks in advance