Re: NPF NAT Hairpinning

[christos%astron.com@localhost (Christos Zoulas)]

In article <loom.20160704T175143-43%post.gmane.org@localhost>,
Ryan Brackenbury  <ryan.brackenbury%gmail.com@localhost> wrote:
>Christos Zoulas <christos <at> astron.com> writes:
>
>> 
>> ext_if= your external interface
>> internalwww= the ip address of the internal web server
>> 
>> map $ext_if dynamic $internalwww port 80 <- inet4($ext_if) port 80
>> 
>> 
>
>I had this in my setup already, actually. I played around with testing 
>inet4($ext_if) vs. just $ext_if, both without success. My npf.conf is based 
>off of the soho example in /usr/share/examples/npf/, so I don't think I'm 
>doing anything bizarre that would alter the nat behaviour.

You need to put explicit pass rules to allow that traffic too. Also use
npflog to see what's going on and tcpdump. I know that works; I use it
for a minecraft server and and xbox one.

christos