pf loopback rdr 解决内网nat上网发布内网web网站时，内网用户自己不可访问的问题。 - bluesky

pf loopback rdr 解决内网nat上网发布内网web网站时，内网用户自己不可访问的问题。

int_if="rl0"
cnc_if="rl2"

internal_net="192.168.0.0/16"

cnc_addr="21.10.4.6"
web_server = "192.168.200.144"
routerip = "192.168.200.101"
intnet = "192.168.0.0/16"

no nat on $int_if from $int_if to $internal_net
nat on $int_if proto tcp from $internal_net to $web_server port www -> ($int_if)
nat on $cnc_if from $internal_net to any -> ($cnc_if)

rdr on $int_if proto tcp from $internal_net to $cnc_addr port www -> $web_server port www
rdr pass on $cnc_if proto tcp from any to $cnc_addr port {20,21,80} -> $web_server