On 2007/03/08 11:26, [EMAIL PROTECTED] wrote:
> so now i have (maybe) 1 last problem - i want to pass through the 
> connections on disk before the spamd rules take place. but my modified 
> pf.conf  won't parse,  due to an error. i understand *why* but not how 
> to set this up correctly. basically this rule needs to be moved 
> somewhere else:

> #pass in log on $ext_if proto tcp from <spamd-clear> to port smtp
> rdr pass on $ext_if proto tcp from <spamd> to port smtp \
>        -> 127.0.0.1 port spamd
> rdr pass on $ext_if proto tcp from !<spamd-white> to port smtp \
>        -> 127.0.0.1 port spamd

'pass' is a filter rule; these are independent of address translation
rules (nat/rdr).

What you actually want in place of your commented-out 'pass' rule
is 'no rdr' (in that same position, i.e. before the rdr: unlike filter
rules, redirection rules are first-match-wins).

Reply via email to