As far as I know, pf = no; an http (or ip) proxy = yes.

But, please explain how you expect www.google.com:p2 to work when client
wants www.google.com:p1 (meaning www.google.com:80)?


-----Original Message-----
From: Karel Galuska <[EMAIL PROTECTED]>
To: scott <[EMAIL PROTECTED]>
Cc: misc@openbsd.org
Subject: Re: pf change destination port for outgoing traffic
Date: Wed, 9 Apr 2008 11:46:34 +0200
Mailer: Microsoft Outlook Express 6.00.2900.3138
Delivered-To: [EMAIL PROTECTED]

any public server on the Internet


----- Original Message ----- 
From: "scott" <[EMAIL PROTECTED]>
To: "Karel Galuska" <[EMAIL PROTECTED]>
Cc: <misc@openbsd.org>
Sent: Wednesday, April 09, 2008 11:24 AM
Subject: Re: pf change destination port for outgoing traffic


> When you say, "...b.b.b.b represents every server the client wants," do
> you mean (i) every server from a known set of servers, or do you mean
> (ii) any server --public and private-- on the Internet?
>
>
> -----Original Message-----
> From: Karel Galuska <[EMAIL PROTECTED]>
> To: misc@openbsd.org
> Subject: pf change destination port for outgoing traffic
> Date: Wed, 9 Apr 2008 08:23:50 +0200
> Mailer: Microsoft Outlook Express 6.00.2900.3138
> Delivered-To: [EMAIL PROTECTED]
>
> Hi all,
> I use OpenBSD as a firewall with nat function for local network.
> For special reason now I need change some destination ports for outgoing
> traffic to every
> internet server.
>
> For example when internal PC a.a.a.a wants to connect internet server 
> b.b.b.b
> on port p1 I need transparently redirect connection to port p2 of the same
> internet server b.b.b.b.
> But b.b.b.b represents every internet server, which client wants to 
> connect.
>
> Could you please help me construct the pf rule?
>
> Thanks
> Karel

Reply via email to