iptables rule in pf

[CZUCZY Gergely]

On Thu, 08 May 2008 11:36:26 +0300
Oleksandr Samoylyk <oleksandr at samoylyk.sumy.ua> wrote:

> >> That iptables rule worked for any destination.  
> > You cannot rewrite a packet's destination address to _any_ destination.
> > 
> > It's like you cannot submit a package at the post office with the
> > destination address "any". It's just meaningless.
> >   
> 
> However it works with iptables. :)
> 
> What can I do in my situation in order to gain the same functionality by 
> means of pf or other additional daemons?
No, it doesn't. That iptables rule only affects the port number, where it
defaults to the original dst address. So it defaults to something, where as pf
doesn't. With pf you have to explicitly specify the rewritten dst IP.

In my first reply I've told you to read the openbsd FAQ. You haven't done it. I
_strongly_ suggest you, before doing your next reply to the list. go and read
that FAQ. Here's the URL once more, I bet you've lost it under your desk...
http://www.openbsd.org/faq/pf/


-- 
Sincerely,

CZUCZY Gergely
Harmless Digital Bt
mailto: gergely.czuczy at harmless.hu
Tel: +36-30-9702963
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-pf/attachments/20080508/7003a599/signature.pgp