Re: Error with sample PF code

From: Max Laier <max_at_love2party.net>
Date: Sat, 18 Dec 2004 05:56:53 +0100
[ Please choose one mailinglist, freebsd-pf is appropriate - MOVED ]

On Saturday 18 December 2004 05:49, sam wrote:
> Hi,
>
> I found some sample code in the man pf page (just scoll down to the end
> of the page, you will see it).
>
> After compiled it and give it a shoot, it returned error:
>
> # pfctl -sn
> nat on tun0 inet from 192.168.9.0/24 to any -> (tun0) round-robin
> nat on tun0 inet from 192.168.4.0/24 to any -> (tun0) round-robin
> nat on tun0 inet from 172.16.0.0/24 to any -> (tun0) round-robin
> rdr on tun0 inet proto tcp from any to 1.2.3.4 port = 3000 ->
> 192.168.4.254 port 25
>
> # ./a.out
> ./a.out <gwy addr> <gwy port> <ext addr> <ext port>
>
> ./a.out 192.168.4.254 25 1.2.3.4 3000
> a.out: DIOCNATLOOK: No such file or directory

That's ENOENT which simply means that pf was not able to find a state that 
matches your lookup. You should have an *open* connection to have a state 
around. Crosscheck with $pfctl -ss

> I may be have overlooked something.
>
> Your suggestion is highly appreciated.

-- 
/"\  Best regards,                      | mlaier_at_freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier_at_EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News

Received on Sat Dec 18 2004 - 03:57:04 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:24 UTC