As far as I know, pf = no; an http (or ip) proxy = yes. But, please explain how you expect www.google.com:p2 to work when client wants www.google.com:p1 (meaning www.google.com:80)?
-----Original Message----- From: Karel Galuska <[EMAIL PROTECTED]> To: scott <[EMAIL PROTECTED]> Cc: misc@openbsd.org Subject: Re: pf change destination port for outgoing traffic Date: Wed, 9 Apr 2008 11:46:34 +0200 Mailer: Microsoft Outlook Express 6.00.2900.3138 Delivered-To: [EMAIL PROTECTED] any public server on the Internet ----- Original Message ----- From: "scott" <[EMAIL PROTECTED]> To: "Karel Galuska" <[EMAIL PROTECTED]> Cc: <misc@openbsd.org> Sent: Wednesday, April 09, 2008 11:24 AM Subject: Re: pf change destination port for outgoing traffic > When you say, "...b.b.b.b represents every server the client wants," do > you mean (i) every server from a known set of servers, or do you mean > (ii) any server --public and private-- on the Internet? > > > -----Original Message----- > From: Karel Galuska <[EMAIL PROTECTED]> > To: misc@openbsd.org > Subject: pf change destination port for outgoing traffic > Date: Wed, 9 Apr 2008 08:23:50 +0200 > Mailer: Microsoft Outlook Express 6.00.2900.3138 > Delivered-To: [EMAIL PROTECTED] > > Hi all, > I use OpenBSD as a firewall with nat function for local network. > For special reason now I need change some destination ports for outgoing > traffic to every > internet server. > > For example when internal PC a.a.a.a wants to connect internet server > b.b.b.b > on port p1 I need transparently redirect connection to port p2 of the same > internet server b.b.b.b. > But b.b.b.b represents every internet server, which client wants to > connect. > > Could you please help me construct the pf rule? > > Thanks > Karel