Updated -current recently which left my internal network unusable. The
system was forwarding packets but not doing NAT. Turns out the problem
was that the external interface, which is a dhcp assigned (via the
ISP) interface was no longer being assigned to the egress group. And
my NAT rule is:

============================================
match out on egress inet from !(egress:network) to any nat-to (egress:0)
============================================

Which has worked for a very long time. It still works if a manually
assign the interface to the egress group, but it was always automatic
previously and there's no change in the docs to indicate this still
shouldn't be the case.

Chris

Reply via email to