I just had to reinstall my OS X a while ago. Currently, this Mac Mini was used as a NAT router. It uses its Wifi to connect to the dorms internet, and is supposed to dish the data thru its ethernet port:
Dorms Wifi —> Mac Mini —> Airport Express in bridge mode —> iPhone, Macbook, etc
The reason why I need this is that the dorms enforces a rule, which allows only one Mac address to be registered with their router. So in order to grant access to more devices, I need to use a NAT router. But here comes the tricky part. At some time, I wish to use a broadband dongle to offer the internet. Previously, I used the following dirty configuration file to manage that kind of „switching“ connection:
nat on en1 from en0:network to any -> (en1)
nat on en2 from en0:network to any -> (en2)
nat on ppp0 from en0:network to any -> (ppp0)
pass in from any to any
pass out from any to any
You can tell, I never used pfctl before, and only needed a dirty but working way of being able to switch my currently nat’ed internet… x)
But here is the problem.
With the new OS X update, the configuration files for pfctl changed. Which means, I am in a loss again.
When I try to append a similar block, but pointing to /etc/pf.anchors/SUBnet instead, I get syntax errors about the order of rules…so I am confused for good.
How do I add the „dirty“ hack from above into my pf.conf in order to keep NATing my internet?
Oh yeah, and Internet Sharing on OS X is broken. the dhcp service used does not dish out a proper lease, meaning that Non-Apple clients are doomed.