Skip to content

Instantly share code, notes, and snippets.

@dlangille
Last active August 29, 2020 21:49
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save dlangille/6be88511b778e79c645daf2d8d9fd4de to your computer and use it in GitHub Desktop.
Save dlangille/6be88511b778e79c645daf2d8d9fd4de to your computer and use it in GitHub Desktop.
from /etc/pf.conf:
PUBLIC="ix2"
MYSELF="163.237.218.22"
nat on ix2 from 10.163.0.0/24 to any -> 163.237.218.22
pass in all
$ sysctl net.inet.ip.forwarding
net.inet.ip.forwarding: 1
In the jail:
telnet google.ca 80
Trying 172.217.4.227...
^C
From the host:
$ sudo tcpdump -ni ix2 port 80
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ix2, link-type EN10MB (Ethernet), capture size 262144 bytes
21:19:15.559588 IP 10.163.0.10.51267 > 172.217.6.99.80: Flags [S], seq 3915516635, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 3849673648 ecr 0], length 0
21:19:16.592423 IP 10.163.0.10.51267 > 172.217.6.99.80: Flags [S], seq 3915516635, win 65535, options [mss 1460,nop,wscale 6,sackOK,TS val 3849674682 ecr 0], length 0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment