synproxy and states

Andy Hilker ah at crypta.net
Thu Jun 16 20:14:52 GMT 2005


Hi,

You (Jon Simola) wrote:
> If that's a bridge config, synproxy will not work. It's not possible
> to tell from the documentation you provided.

No, it is the pf box is acting as gateway.
But the reply packet from webserver is dropped at the dmz interface.
If I allow this reply explicitly, synproxy works. Obviously I have a problem
with state table entries.

bye,
Andy 


More information about the freebsd-pf mailing list