Re: Error with sample PF code

[ Please choose one mailinglist, freebsd-pf is appropriate - MOVED ]

On Saturday 18 December 2004 05:49, sam wrote:
> Hi,
>
> I found some sample code in the man pf page (just scoll down to the end
> of the page, you will see it).
>
> After compiled it and give it a shoot, it returned error:
>
> # pfctl -sn
> nat on tun0 inet from 192.168.9.0/24 to any -> (tun0) round-robin
> nat on tun0 inet from 192.168.4.0/24 to any -> (tun0) round-robin
> nat on tun0 inet from 172.16.0.0/24 to any -> (tun0) round-robin
> rdr on tun0 inet proto tcp from any to 1.2.3.4 port = 3000 ->
> 192.168.4.254 port 25
>
> # ./a.out
> ./a.out <gwy addr> <gwy port> <ext addr> <ext port>
>
> ./a.out 192.168.4.254 25 1.2.3.4 3000
> a.out: DIOCNATLOOK: No such file or directory

That's ENOENT which simply means that pf was not able to find a state that 
matches your lookup. You should have an *open* connection to have a state 
around. Crosscheck with $pfctl -ss

> I may be have overlooked something.
>
> Your suggestion is highly appreciated.

-- 
/"\  Best regards,                      | mlaier_at_freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier_at_EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News