Доброго времени суток
проблема такая
не могу из инета попасть по впн в локалку
в качестве впн сервера мпд5, конфиг рабочий
связь в провайдером по vpn
вот конфиг pf

int_if = "fxp0"
ext_if = "re0"
vpn_if = "ng0"
ports = "{21 25 80 110 443 1723}"
router = "192.168.0.1"

set block-policy return
set loginterface re0
set loginterface ng0

set skip on lo
scrub in all

table <local> {192.168.0.0/24}

nat on $vpn_if from <local> to any -> ($vpn_if)
nat on $ext_if from <local> to any -> ($ext_if)
no nat on $vpn_if proto gre all

block on $vpn_if all
block on $ext_if all

pass out keep state

antispoof quick for { lo $int_if }

block in on $vpn_if proto tcp from any to any port {ssh}
block in on $ext_if proto tcp from any to any port {ssh}

pass in on $vpn_if proto {udp, icmp} all keep state

pass on $vpn_if proto udp from any port 53 to any
pass on $vpn_if proto udp from any to any port 53

pass in on $int_if proto tcp from <local> to any port $ports flags S/SA keep state
pass out on $int_if proto tcp from any port $ports to <local> flags S/SA keep state

pass on $vpn_if proto tcp from any port 1723 to any flags S/SA keep state
pass on $vpn_if proto tcp from any to any port 1723 flags S/SA keep state
pass on $vpn_if inet proto gre from any to any

pass in on $ext_if proto tcp from 10.0.0.1 port {1723 1023} to any flags S/SA keep state

• настройка pf для досупа по vpn из инета,artemrts, 18:52 , 28-Дек-09

>[оверквотинг удален]
>pass on $vpn_if proto udp from any port 53 to any
>pass on $vpn_if proto udp from any to any port 53
>
>pass in on $int_if proto tcp from <local> to any port $ports flags S/SA keep state
>pass out on $int_if proto tcp from any port $ports to <local> flags S/SA keep state
>
>pass on $vpn_if proto tcp from any port 1723 to any flags
>S/SA keep state
>pass on $vpn_if proto tcp from any to any port 1723 flags
>S/SA keep state

А почему пасс к $vpn_if? У тебя что демон мпд "висит" на этом интерфейсе??
Но это все равно не решит проблему. На форуме здесь поднималась подобная проблема. Поищи. Это решается путем запуска стартап скриптов мпд и якорей пакетного фильтра.

>pass on $vpn_if inet proto gre from any to any
>
>pass in on $ext_if proto tcp from 10.0.0.1 port {1723 1023} to
>any flags S/SA keep state