Re: can't add a port forwarding

2008-11-15 Thread mouss
Bastien Semene wrote: Hi everyone, I'm currently facing a weird problem. I have a pf box acting as a gateway for some services and want to add a port forwarding for https. So I added the following rule : rdr pass on $ext_if proto tcp from any to any port 443 -> $atlas_ip //variables are co

Re: bidirectional NAT in PF?

2008-09-08 Thread mouss
David DeSimone wrote: I think I am using the wrong terminology. I should probably call it "double NAT" to differentiate it. "binat" works fine but it still only changes ONE of the IP's being translated (the source IP). In PF, you can use "nat" to translate the source IP, and "redir" to change

Re: pf how-to: Single public IP --> many private NAT'd HTTPS servers

2008-01-21 Thread mouss
Doug Poland wrote: I see what you are getting it. I told pf to simply route all https requests to a fixed private IP. When I pointed my browser at the FQDN, firefox told me I had a certificate problem... i.e., the certificate returned was not the one expected. So, is the bottom line, one *c