Volodymyr Kostyrko skrev 2012-11-26 21:50:


rdr pass proto tcp from any to any port ftp -> 127.0.0.1 port 8021

# redirect www trafic to proxy
rdr on $int_if inet proto tcp from $internal_net to any port
$proxy_services -> $proxy port 8080

I could be wrong here but I think you have a loop. You are redirecting
from local interface to local interface i.e. the result of redirect is
still subject for redirect. Could you try one of the following:

1. Make this a `rdr in on $int_if`.

2. Make this a `rdr pass ... -> 127.0.0.1 port 8080`. I prefer this way
so port for transparent forwarding is unreachable except when explicitly
redirecting to it.

Personally I newer allow such ambiguity in my configs.


Thanks!

I'll try it out. I need to wait until tonight, the machine is in use at the moment.

#1 I see your point.

#2 this rule is for intended ftp traffic. That's why I'm sending to another port number.

/Leslie
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Reply via email to