PF防火墙，单网卡绑定双IP做NAT。

frsky

rc.conf

ifconfig_fxp0="inet 222.222.222.111 netmask 255.255.255.0"
ifconfig_fxp0_alias0="inet 222.222.222.222 netmask 255.255.255.255"
ifconfig_fxp1="inet 192.168.1.1 netmask 255.255.255.0"
ifconfig_fxp2="inet 192.168.0.1 netmask 255.255.255.0"



pf.conf

ext_if="fxp0"
ext_if1="222.222.222.222"       
int_if="fxp1"       
int1_if="fxp2"       
scrub in all
nat on $ext_if from $int_if:network to any -> ($ext_if)
nat on $ext_if1 from $int1_if:network to any -> ($ext_if1)

rdr on $ext_if proto tcp from any to 222.222.222.111 port 23:65535 -> 192.168.1.2
rdr on $ext_if1 proto tcp from any to 222.222.222.222 port 23:65535 -> 192.168.0.2





请帮我看下这个规则，目前
rdr on $ext_if proto tcp from any to 222.222.222.111 port 23:65535 -> 192.168.1.2这条规则正常。
如果把pf.conf里的ext_if="fxp0" 修改为 ext_if="222.222.222.111"就不正常了。

目前rdr on $ext_if1 proto tcp from any to 222.222.222.222 port 23:65535 -> 192.168.0.2
这条规则不正常，请大家帮我分析下如何修改。

frsky

灵机一动，居然想到办法了。根本不需要定义另外一个IP地址的接口，因为他使用fxp0