from man pf.conf:

>            When the address of an interface (or host
>            name) changes (under DHCP or PPP, for instance), the ruleset must
>            be reloaded for the change to be reflected in the kernel.  Sur-
>            rounding the interface name (and optional modifiers) in parentheses
>            changes this behaviour.  When the interface name is surrounded by
>            parentheses, the rule is automatically updated whenever the inter-
>            face changes its address.

Another way: using mpd, create an linkup-script and re-load pf rules
from there (like it's possible with ppp).

Greetings,

Volker


On 2005-11-28 14:29, Josh Finlay wrote:
> Here's the full scenario,
> 
> I'm running q3server (/usr/ports/games/q3server), bound to an external ip on 
> iface ng0.. but LAN clients can't connect to it when its bound to an external 
> iface (dont know why? had problems like this since i started using pf...)
> 
> By default it binds to localhost
> So I need to at least tell it to bind to an ip (can't bind to multiple)
> If I tell it bind to 192.168.0.x - internet clients can't get in
> if I tell it to bind to 58.104.249.xx - lan clients can't get in
> 
> So what I want to do is bind it to 58.104.249.xx and then re-direct 
> 192.168.0.x on port 27960, to 58.104.249.xx port 27960... but the problem is 
> the 58.104.249.xx ip is dynamic, so how do I create a RDR rule that will be 
> valid an interface rather than an IP?
> 
> ie.
> rdr pass on $IntIF inet proto udp to port 27960 -> [the ip currently assigned 
> to ng0 here] port 27960
> 
> any suggestions?
> I'm hoping this is a total no-brainer ;)
> _______________________________________________
> freebsd-pf@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> 
_______________________________________________
freebsd-pf@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to