On 2007/03/08 11:26, [EMAIL PROTECTED] wrote: > so now i have (maybe) 1 last problem - i want to pass through the > connections on disk before the spamd rules take place. but my modified > pf.conf won't parse, due to an error. i understand *why* but not how > to set this up correctly. basically this rule needs to be moved > somewhere else:
> #pass in log on $ext_if proto tcp from <spamd-clear> to port smtp > rdr pass on $ext_if proto tcp from <spamd> to port smtp \ > -> 127.0.0.1 port spamd > rdr pass on $ext_if proto tcp from !<spamd-white> to port smtp \ > -> 127.0.0.1 port spamd 'pass' is a filter rule; these are independent of address translation rules (nat/rdr). What you actually want in place of your commented-out 'pass' rule is 'no rdr' (in that same position, i.e. before the rdr: unlike filter rules, redirection rules are first-match-wins).