On Thu, 08 May 2008 01:04:54 +0300 Oleksandr Samoylyk <[EMAIL PROTECTED]> wrote:
> Dear Community, > > I want to move some of our firewalls from Linux/iptables to FreeBSD/pf. > > After reading man pf.conf for a couple of minutes I couldn't find the > realization of such iptables rule in pf: > > iptables -t nat -A PREROUTING -i ethX -d ! my.smtp.server -p tcp --dport > 25 -j DROP block in on $interface proto tcp from any to ! my.smtp.server port 25 > iptables -t nat -A PREROUTING -i ethX -p tcp --dport 2525 -j DNAT > --to-destination :25 rdr on $interface proto tcp from any to port 2525 -> <the_destionation_you_have_omitted> port 25 > How it can be rewriting in pf.conf? be sure to read the openbsd faq: http://www.openbsd.org/faq/pf pf works quite differently then iptables, it has a different logic. you will get used to it. just forget these "tables" which you've got used to with iptables. -- Sincerely, CZUCZY Gergely Harmless Digital Bt mailto: [EMAIL PROTECTED] Tel: +36-30-9702963
signature.asc
Description: PGP signature
