Sewan <[EMAIL PROTECTED]> writes:

> rdr on $ext_if proto tcp to 212.175.219.188/32 port 80 -> 172.15.254.207 

the next question then is, what's the matching pass rule?

> rule for this operation, if i use same rdr rule with changing destination ip
> to an iis web server inside LAN, it works, but when i change to this web
> server (2003-apache-php one) it don't work

once again, take a very close look at your pass rules.  it could even
be that the redirected traffic matches that a different pass rule than
you think, and the traffic that doesn't pass matches no pass rule.

tcpdump is your friend, and ruleset walkthroughs can be fun as well as
enlightening.

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.datadok.no/ http://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.

Reply via email to