port fowarding

[frenchface]

So I want to forward port 22 from my wan (xl3) to my lan (xl0). The client computer i want to forward is 192.168.253.10

pass in log from xl3 proto tcp from any to any port 22 rdr-to 192.168.253.10 port 22

But thats not enough, if I do tcpdump on the client I do see the request however it will not connect.

I did see something about match command. Is that something that I need to do?

[wilfried]

That's an invalid syntax, change the pass in from xl3 to pass in on xl3
You also probably want to nat outgoing traffic

pass in on xl3 inet proto { tcp udp } from any to (xl3) port ssh rdr-to 192.168.253.10
pass out on xl3
match out on xl3 from !(xl3) nat-to (xl3:0)

[rocket357]

Originally Posted by wilfried

You also probably want to nat outgoing traffic

And if you're doing nat, don't forget to run:

sysctl net.inet.ip.forwarding=1
echo "net.inet.ip.forwarding=1" >>/etc/sysctl.conf

and the same if you're using ipv6:

sysctl net.inet6.ip6.forwarding=1
echo "net.inet6.ip6.forwarding=1" >>/etc/sysctl.conf