nat on nve0 inet from 172.24.0.0/24 to any -> (nve0) round-robin static-port pass quick on tun0 all [root@worm ~]# tcpdump -n -e -ttt -i tun0 host 66.249.93.104 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on tun0, link-type NULL (BSD loopback), capture size 96 bytes 000000 AF IPv4 (2), length 88: 172.24.0.6 > 66.249.93.104: ICMP echo request, id 53913, seq 23, length 64 1. 004178 AF IPv4 (2), length 88: 172.24.0.6 > 66.249.93.104: ICMP echo request, id 53913, seq 24, length 64