Mipam wrote:

> With ipf on outbound traffic it's first ipf, then ipnat.
> About pf i'm not sure.

With pf it seems that it is nat first and then filtering,
for both directions.

> Anyway, nat on pf is working fine here, ftp-proxy also runs here.
> Maybe show the rules you use to nat?

It's all in http://www.rinta-aho.org/pr-pf/

Teemu

-- 
teemu@rinta-aho.org -+- http://www.rinta-aho.org