On Thu, 08 May 2008 11:36:26 +0300 Oleksandr Samoylyk <[EMAIL PROTECTED]> wrote:
> >> That iptables rule worked for any destination. > > You cannot rewrite a packet's destination address to _any_ destination. > > > > It's like you cannot submit a package at the post office with the > > destination address "any". It's just meaningless. > > > > However it works with iptables. :) > > What can I do in my situation in order to gain the same functionality by > means of pf or other additional daemons? No, it doesn't. That iptables rule only affects the port number, where it defaults to the original dst address. So it defaults to something, where as pf doesn't. With pf you have to explicitly specify the rewritten dst IP. In my first reply I've told you to read the openbsd FAQ. You haven't done it. I _strongly_ suggest you, before doing your next reply to the list. go and read that FAQ. Here's the URL once more, I bet you've lost it under your desk... http://www.openbsd.org/faq/pf/ -- Sincerely, CZUCZY Gergely Harmless Digital Bt mailto: [EMAIL PROTECTED] Tel: +36-30-9702963
signature.asc
Description: PGP signature
