Hi list,

I'm trying to set up a simple rdr rule in pf (7.0-RELEASE-p5).

I have two hosts - host a (192.168.0.250) and host b (192.168.0.10) - in
a local network and want to forward one port from host a to host b.

host a is the pf host. This is the rule to redirect traffic from host a
to b:

rdr proto tcp from any to 192.168.0.250 port 23 -> 192.168.0.10
pass log (all) proto tcp from any to 192.168.0.10 port 23 synproxy state

If I try to get a telnet connection from my client 192.168.0.51 the
connection gets stuck and nothing happens. This is the output of tcpdump
on the pflog0 interface:

# tcpdump -netttvvi pflog0
000000 rule 0/0(match): pass in on sis0: (tos 0x10, ttl 64, id 26668,
offset 0, flags [DF], proto TCP (6), length 60) 192.168.0.51.54460 >
192.168.0.10.23: [|tcp]
000266 rule 0/0(match): pass out on sis0: (tos 0x10, ttl 64, id 25527,
offset 0, flags [DF], proto TCP (6), length 44) 192.168.0.51.54460 >
192.168.0.10.23:  tcp 24 [bad hdr length 0 - too short, < 20]

Anybody has an idea whats wrong here?


Regards,
Matthias
_______________________________________________
freebsd-pf@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to