Hi,
I am trying to understand the differences between route-to and reply-to
in pf. Have not found any good examples in man(pf.conf) or Google.
2 wan connections, I want the traffic from the internal lan ($lan) to go
through the wan1 ($wan1) connection via NAT. Wan1 is not the default
route, I use route-to, right?? How is this working together with NAT?
And are the replies making it through back to the internal clients
without any more rules?
# 4.1 so default keep state/flags S/SA
.
.
block in
pass out
nat on $wan1 from $lan:network to any -> $wan1:0
pass in on $lan route-to ($wan1 $gw1) proto tcp from $lan:network to \
any port $ports
Ok, now I want to redirect http traffic on $wan1 to an internal server,
is this the time to use reply-to??
.
.
rdr on $wan proto tcp from any port 80 -> 172.16.90.5
pass in on $wan1 reply-to ($wan1 $gw1) proto tcp from any to \
172.16.90.5 port 80
Is this enough to make it work, or are additional rules needed?
Will this affect traffic going trough wan2 which is the default route?
/Johan
