rdr + reply-to, some solution ?

Chris Buechler cbuechler at gmail.com
Mon Jun 28 21:33:30 UTC 2010


On Mon, Jun 28, 2010 at 5:12 PM, Luiz Gustavo S. Costa
<luizgustavo at luizgustavo.pro.br> wrote:
> Hi all.
>
> I know there is a problem in using rdr with the reply-to, I usually
> use some software to "rdr", as the rinetd, but it's not a pretty
> solution.
>
> Is there any alternative?
>
> Below is an example of what I'm talking about.
>
> # Nat section
> rdr on $if_ext2 proto tcp from any to 200.x.x.x port 80 -> 192.168.1.100
> # Rules section
> pass in $if_ext2 reply-to ($if_ext2 $gw_ext2) proto tcp from any to
> 200.x.x.x port 80
>

That rule won't match traffic from that rdr. The dest has to be the
192.168.1.100 IP.


More information about the freebsd-pf mailing list