I broke outbound NAT *and need ideas how to fix

[fastfish]

I was trying to configure a IPsec VPN and in my efforts to try to get that to work I managed to break outbound nat.  All my 1to1 ip's are going out as the router ip.

I have tried to undo what I did in configuring ipsec to no avail.

thx

fast

[doktornotor]

Nice announcement.

[fastfish]

Sry for being unclear.  Looking for tips on how to fix or where to start looking.  PFSense novice here.

[cmb]

Testing via what? Web traffic? Running Squid or similar?

[fastfish]

I have a web/mail… server on one ip.  Getting spf errors.  And if i use the command line program links whatismyip.com it shows as router ip not webserver ip.

[cmb]

If you're running Squid with transparent proxying, that would make the HTTP requests show up as the WAN IP. But no other traffic.

Go to Diagnostics>States while the mail server is sending something and filter for its internal IP. What do the SMTP states look like? Check the NAT there.

[muswellhillbilly]

Sorry to say it at this late stage, but this really illustrates the importance of taking a regular backup of your running config. Especially before making any changes.