Re: OpenBSD www

Ya... Everything run fine now :) On 5/25/07, Konrad Merz <[EMAIL PROTECTED]> wrote: I had the same problem like Ikmal but now is alright! 2007/5/25, Ioan Nemes <[EMAIL PROTECTED]>: > No problem here. > > Ioan > > > > >>> "Ikmal Ahmad" <[EMAIL PROTECTED]> 05/25 1:18 pm >>> > Hi, > > http://www.

Re: OpenBSD www

I had the same problem like Ikmal but now is alright! 2007/5/25, Ioan Nemes <[EMAIL PROTECTED]>: No problem here. Ioan >>> "Ikmal Ahmad" <[EMAIL PROTECTED]> 05/25 1:18 pm >>> Hi, http://www.openbsd.org/ Forbidden You don't have permission to access / on this server. Apache/1.3.34 Server

Re: OpenBSD www

No problem here. Ioan >>> "Ikmal Ahmad" <[EMAIL PROTECTED]> 05/25 1:18 pm >>> Hi, http://www.openbsd.org/ Forbidden You don't have permission to access / on this server. Apache/1.3.34 Server at www.openbsd.org Port 80 anything wrong there? On http://openbsd.org/ was ok. -- Thanks & Rega

Re: solar power / openbsd handheld

We have a need for a low power OpenBSD device or handheld that can connect to a small SCADA device (serial or USB) to collect some temperature and voltage data, plus control one light switch, on a remote solar powered wifi repeater tower. Any suggestions on the lowest powered OpenBSD runnable box

Re: ftpd passive port range

well i figure if active ftp can work many connectsion off one data port why cant passive ftp i see no problems with it, after all, all the control connections terminate on one port why cant the data On 24/05/07, Darren Spruell <[EMAIL PROTECTED]> wrote: On 5/24/07, Lawrence Horvath <[EMAIL PR

OpenBSD www

Hi, http://www.openbsd.org/ Forbidden You don't have permission to access / on this server. Apache/1.3.34 Server at www.openbsd.org Port 80 anything wrong there? On http://openbsd.org/ was ok. -- Thanks & Regards, Ikmal aka EvoIVGSR http://www.leakage.org/ http://root.justdied.com/mylife/ h

Re: CVS hosed

* Emilio Perea <[EMAIL PROTECTED]> [2007-05-24 12:39:51]: > On Thu, May 24, 2007 at 11:33:15AM -0500, Travers Buda wrote: > > Well since nobody has posted this to misc@ yet, I suppose I will. > > It's obvious that CVS is currently in a state of being completely > > hosed. > > The email I got from

Re: ipsec vpn and intermittent session timeouts...

Sounds a little like: http://marc.info/?l=openbsd-misc&m=117915053113185&w=2 I was privately requested to try an upgrade to 4.1-stable. I have not had the opportunity to do so and I seem to be having a little trouble building 4.1-stable at the moment... -Steve S.

ipsec vpn and intermittent session timeouts...

I cant seem to figure out why my sessions time out when I bring my site-to-site vpn up. I'm using "isakmpd -K -T"on both sides, then run ipsecctl -f /etc/ipsec.conf to bring the vpn up. My tunnel comes up fine and traffic passes on the enc0 interface and everything is great. When I look at ipsecctl

Re: Spamd default behaviour of accepting everything

On 5/24/07, Henning Brauer <[EMAIL PROTECTED]> wrote: ... the table totally contradicts the text... kind of funny :) Perhaps that's why the current internet-draft for the revision of RFC 2821 has this in the table: DATA I: 354 -> data -> S: 250 E: 5

Re: No text cursor on OpenBSD/i386 4.1

Chris S wrote: > On 5/24/07, Jeff Quast <[EMAIL PROTECTED]> wrote: >> try: >> >> printf "\033c\033[?25h" >> >> on the command line? > > I was wondering, would this problem justify a bug report? probably, but not necessarily with OpenBSD. :) I saw this problem a few days ago, figured it was a str

Re: Spamd default behaviour of accepting everything

* Bob Beck <[EMAIL PROTECTED]> [2007-05-24 17:13]: > > yes, but not in response to the DATA command (what I was talking about) > > but after. > > > > no, you're wrong. right from rfc 2821: > 8< > DATA > I: 354 -> data -> S: 250 > E: 552, 554, 451, 452 >

Re: General Question about OpenBSD

>>> "Greg Thomas" <[EMAIL PROTECTED]> 05/25 8:25 am >>> On 5/24/07, Timo Schoeler <[EMAIL PROTECTED]> wrote: > thus Ben Calvert spake: > > On May 24, 2007, at 1:13 PM, Karl R. Balsmeier wrote: > > > >> Suzuki Kawasaki wrote: > >>> If OpenBSD is the most uber secure why does it run on Solaris? > >>>

Re: sysjail and networking

On 5/23/07, Michael <[EMAIL PROTECTED]> wrote: PS: The last news at the sysjail homepage are quite old. I found a bug on sparc64 and already reported it, no answer so far, just wondering if maybe someone knows if the project still active and in development? i have been wondering that myself. L

Re: General Question about OpenBSD

On 5/24/07, Timo Schoeler <[EMAIL PROTECTED]> wrote: thus Ben Calvert spake: > On May 24, 2007, at 1:13 PM, Karl R. Balsmeier wrote: > >> Suzuki Kawasaki wrote: >>> If OpenBSD is the most uber secure why does it run on Solaris? >>> >>> http://www.openbsd.org was running Apache on Solaris when las

Re: Calgary hackathon need: UPS

>If someone in Calgary has a spare 1000-2000VA UPS which we could >borrow for the duration of the hackathon, we would really appreciate >it. We would need it starting today. > >Thanks. > > Fixed.

Re: General Question about OpenBSD

thus Ben Calvert spake: On May 24, 2007, at 1:13 PM, Karl R. Balsmeier wrote: Suzuki Kawasaki wrote: If OpenBSD is the most uber secure why does it run on Solaris? http://www.openbsd.org was running Apache on Solaris when last queried at 18-May-2007 19:52:41 GMT - refresh now Site Report A

Re: General Question about OpenBSD

On May 24, 2007, at 1:13 PM, Karl R. Balsmeier wrote: Suzuki Kawasaki wrote: If OpenBSD is the most uber secure why does it run on Solaris? http://www.openbsd.org was running Apache on Solaris when last queried at 18-May-2007 19:52:41 GMT - refresh now Site Report Also, is someone going to

Re: General Question about OpenBSD

Suzuki Kawasaki wrote: If OpenBSD is the most uber secure why does it run on Solaris? http://www.openbsd.org was running Apache on Solaris when last queried at 18-May-2007 19:52:41 GMT - refresh now Site Report Also, is someone going to change the topic on #openbsd on all servers worldwide? /t

Re: No text cursor on OpenBSD/i386 4.1

On 5/24/07, Jeff Quast <[EMAIL PROTECTED]> wrote: try: printf "\033c\033[?25h" on the command line? I was wondering, would this problem justify a bug report? Greetings, Chris

Re: CVS hosed

Timo Schoeler wrote: >>> www.openbsd.org also seems to be having problems. I get a 403 Forbidden >>> error whenever I try to access it. >> >> try http://openbsd.org/ > > this is a mirror; using it does not fix www :) > > http://www.openbsd.org/4.1_packages/i386.html works though.

www mirror

hi misc@, I just realized that my www mirror has emptied itself with the last CVS update, and it looks like other mirrors are having problems as well. I am currently restoring a dump from a few hours ago, a www mirror should be when you read this at: http://www.evilkittens.org/mirror/OpenBS

Re: General Question about OpenBSD

On Thu, May 24, 2007 at 03:45:37PM -0400, Suzuki Kawasaki wrote: > If OpenBSD is the most uber secure why does it run on Solaris? because we don't trust our own os, and secretly all run mirbsd. that's why. we just happened to come across some free solaris cd's and decided the webserver was going to

Re: General Question about OpenBSD

> If OpenBSD is the most uber secure why does it run on Solaris? If you actually really cared about this, you would have found the answer in the FAQ by yourself. > Also, is someone going to change the topic on #openbsd on all servers > worldwide? I don't know. I am not wasting time on irc. Miod

Re: General Question about OpenBSD

RTFF On 5/24/07, Suzuki Kawasaki <[EMAIL PROTECTED]> wrote: > > If OpenBSD is the most uber secure why does it run on Solaris? > > http://www.openbsd.org was running Apache on Solaris when last queried at > 18-May-2007 19:52:41 GMT - refresh now Site Report > > Also, is someone going to change the

Re: General Question about OpenBSD

On Thu, May 24, 2007 at 03:45:37PM -0400, Suzuki Kawasaki wrote: > If OpenBSD is the most uber secure why does it run on Solaris? > > http://www.openbsd.org was running Apache on Solaris when last queried at > 18-May-2007 19:52:41 GMT - refresh now Site Report RTFFAQ: http://openbsd.org/faq/faq8.

Re: Syslogd problems with local4/OpenLDAP logs

On Thu, 24 May 2007, neustream wrote: Thanks all for your help. I was using vim with tabs converted to spaces in my vimrc. I edited /etc/syslog.conf with vi and used tabs between local4.* and path. Works now! Great! I'd call that pretty good support, ~ 3.5 hours from your original post t

Re: General Question about OpenBSD

On Thu, May 24, 2007 at 03:45:37PM -0400, Suzuki Kawasaki wrote: > If OpenBSD is the most uber secure why does it run on Solaris? FAQ 8.18 At the moment, the mirrors, including www.openbsd.org, are down due to a CVS problem.. So here is the source link: http://openbsd.org/faq/faq8.html#wwws

General Question about OpenBSD

If OpenBSD is the most uber secure why does it run on Solaris? http://www.openbsd.org was running Apache on Solaris when last queried at 18-May-2007 19:52:41 GMT - refresh now Site Report Also, is someone going to change the topic on #openbsd on all servers worldwide? /topic Secure for the past

Re: Syslogd problems with local4/OpenLDAP logs

Thanks all for your help. I was using vim with tabs converted to spaces in my vimrc. I edited /etc/syslog.conf with vi and used tabs between local4.* and path. Works now! Diana Eichert wrote: On Thu, 24 May 2007, Darren Spruell wrote: You've got tabs, or spaces between your local4.* an

dmesg of X4100 with acpi enable for both bsd and bsd.mp

Here both dmesg with acpi enable if anyone is interested or if that any use for anyone. Any interest on current? Thanks Daniel OpenBSD 4.1 (GENERIC) #874: Sat Mar 10 19:09:51 MST 2007 [EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC real mem = 3757625344 (36

Re: Syslogd problems with local4/OpenLDAP logs

On Thu, 24 May 2007, Darren Spruell wrote: You've got tabs, or spaces between your local4.* and path? DS Yea someone else with the the same comment as mine for the original poster see this thread related to syslog configuration for slapd http://www.openldap.org/lists/openldap-softwar

Re: kern.nfiles / lsof / fstat

On 5/24/07, Peter Thoenen <[EMAIL PROTECTED]> wrote: Hallo: Was troubleshooting a ulimits problem and ran into this ... can anybody explain to me why kern.nfiles, lsof, and fstat don't even come close to the same numbers? It is my understanding they all list open files on the system. 07-05-24

Re: Syslogd problems with local4/OpenLDAP logs

On 5/24/07, neustream <[EMAIL PROTECTED]> wrote: Hi, I'm having problems getting log messages from syslogd for local4 messages. In syslog.conf, I added: local4.*/var/log/ldap.log I issued a restart for syslogd: kill -HUP `cat /var/run/syslog.pid` I compiled OpenLDAP:

Re: ftpd passive port range

On 5/24/07, Lawrence Horvath <[EMAIL PROTECTED]> wrote: I am trying to confine my ftp to a smaller port range by editing net.inet.ip.porthifirst=49152 net.inet.ip.porthilast=65535 is there anything else that uses these variables other than ftpd? and would it be possible to force ftpd into using

ftpd passive port range

I am trying to confine my ftp to a smaller port range by editing net.inet.ip.porthifirst=49152 net.inet.ip.porthilast=65535 is there anything else that uses these variables other than ftpd? and would it be possible to force ftpd into using port 20 as its passive port? this is on 4.0 generic --

kern.nfiles / lsof / fstat

Hallo: Was troubleshooting a ulimits problem and ran into this ... can anybody explain to me why kern.nfiles, lsof, and fstat don't even come close to the same numbers? It is my understanding they all list open files on the system. 07-05-24 12:37:59 /root # sysctl -a | grep nfiles kern.nfil

Re: Syslogd problems with local4/OpenLDAP logs

Ok..well I am thinking, if I have: local4.*/var/log/ldap.log in syslog.conf and I issue: kill -HUP `cat /var/run/syslog.pid` Then this command should work: logger -p local4.info Hello World and log to /var/run/ldap.log. When I issue: logger -p mail.info Hello World I get "Hello Wo

Re: CVS hosed

On Thu, May 24, 2007 at 11:33:15AM -0500, Travers Buda wrote: > Well since nobody has posted this to misc@ yet, I suppose I will. > It's obvious that CVS is currently in a state of being completely > hosed. The email I got from the cron job for this morning's csup update has 64,633 "Delete" lines

Re: CVS hosed

www.openbsd.org also seems to be having problems. I get a 403 Forbidden error whenever I try to access it. try http://openbsd.org/ this is a mirror; using it does not fix www :)

Re: CVS hosed

On 5/24/07, stuart van Zee <[EMAIL PROTECTED]> wrote: www.openbsd.org also seems to be having problems. I get a 403 Forbidden error whenever I try to access it. try http://openbsd.org/

Re: Syslogd problems with local4/OpenLDAP logs

Thanks all for your help! Well yes slapd runs when I issue: /usr/local/libexec/slapd -u _openldap -g _openldap -f /etc/openldap/slapd.conf With "ps ax | grep slapd", I get: 3347 ?? Is 0:00.03 /usr/local/libexec/slapd -u _openldap -g _openldap -f /etc/openldap/slapd.conf With "netstat

Re: CVS hosed

a leet sauce os for my b2000. > > -- > Travers Buda > > > __ NOD32 2290 (20070524) Information __ > > This message was checked by NOD32 antivirus system. > http://www.eset.com

Re: Syslogd problems with local4/OpenLDAP logs

On Thu, 24 May 2007, neustream wrote: Yes..I forgot to mention I did a: touch /var/log/ldap.log Yes but that the _openldap user have write access to the log file? -- Antoine

Re: Syslogd problems with local4/OpenLDAP logs

On Thursday 24 May 2007 11:23, neustream wrote: > Yes..I forgot to mention I did a: > > touch /var/log/ldap.log > > as root. > > I added, to newsyslog.conf > > /var/log/ldap.log root:wheel 640 7250 * Z > > as well. Not sure whether this is helpful. Does slapd start properly wi

CVS hosed

Well since nobody has posted this to misc@ yet, I suppose I will. It's obvious that CVS is currently in a state of being completely hosed. I'm foaming at the mouth to get that new hppa code... my c360 is all setup to bootstrap me a leet sauce os for my b2000. -- Travers Buda

Re: Syslogd problems with local4/OpenLDAP logs

Yes..I forgot to mention I did a: touch /var/log/ldap.log as root. I added, to newsyslog.conf /var/log/ldap.log root:wheel 640 7250 * Z as well. Vijay Sankar wrote: On Thursday 24 May 2007 10:58, neustream <[EMAIL PROTECTED]> wrote: Hi, I'm having problems getting lo

Re: Syslogd problems with local4/OpenLDAP logs

On Thursday 24 May 2007 10:58, neustream <[EMAIL PROTECTED]> wrote: > Hi, > > I'm having problems getting log messages from syslogd for local4 > messages. > > In syslog.conf, I added: > > local4.*/var/log/ldap.log > > I issued a restart for syslogd: > > kill -HUP `cat /var/r

Calgary hackathon need: UPS

If someone in Calgary has a spare 1000-2000VA UPS which we could borrow for the duration of the hackathon, we would really appreciate it. We would need it starting today. Thanks.

Syslogd problems with local4/OpenLDAP logs

Hi, I'm having problems getting log messages from syslogd for local4 messages. In syslog.conf, I added: local4.*/var/log/ldap.log I issued a restart for syslogd: kill -HUP `cat /var/run/syslog.pid` I compiled OpenLDAP: --with-syslog --with-debug I start OpenLDAP wit

Re: No text cursor on OpenBSD/i386 4.1

On 5/24/07, Jeff Quast <[EMAIL PROTECTED]> wrote: try: printf "\033c\033[?25h" on the command line? That didn't help, I also tried switching the reset and enable cursor commands, to no avail. I also tried the command 'reset' at the shell. But thanks, still.

Re: No text cursor on OpenBSD/i386 4.1

That didn't help, I also tried switching the reset and enable cursor commands, to no avail. I also tried the command 'reset' at the shell. On 5/24/07, Jeff Quast <[EMAIL PROTECTED]> wrote: On 5/23/07, Chris S <[EMAIL PROTECTED]> wrote: > After the installation I had to find out that there is > n

Re: Spamd default behaviour of accepting everything

> yes, but not in response to the DATA command (what I was talking about) > but after. > no, you're wrong. right from rfc 2821: 8< DATA I: 354 -> data -> S: 250 E: 552, 554, 451, 452 E: 451, 554, 503 8< explicitly - if I decide something is wro

[OT]Re: Virtual interface

On Thu, 24 May 2007, Stuart Henderson wrote: On 2007/05/24 14:33, Michael wrote: Do you know if this is possible with FreeBSD jail? No, I think you'd want each jail to have a separate routing table and virtual interfaces for what you're trying to do. FreeBSD jail and sysjail are chroot-plus

Dell Optilex 320

Hey, im trying to install OpenBSD 4.1/i386 in a Dell Optilex 320, Pentium D 3.0Ghz CPU, Broadcom ethernet controller, OHCI controller and so on.. The only way to boot from /bsd is enabling acpi, but, when I prompted to install, upgrade or shell my usb keyboard doesnt work. There is any ad

Re: Spamd default behaviour of accepting everything

On May 24, 2007, at 8:35 AM, Henning Brauer wrote: * Bob Beck <[EMAIL PROTECTED]> [2007-05-24 08:22]: rfc 2821 specifically forbids this behaviour. The DATA command can fail at only two points in the protocol exchange: - If there was no MAIL, or no RCPT, command, or all such command

Re: Virtual interface

On 2007/05/24 14:33, Michael wrote: > Hi, > > Fernando Quintero schrieb: > > What if you use something like QEMU? > > it's in the ports and you could create a openbsd box with Pf and more > > and then try probe your stuff. > > if you attach the virtual interface to a tap interface it could works.

Re: Spamd default behaviour of accepting everything

* Bob Beck <[EMAIL PROTECTED]> [2007-05-24 08:22]: > > rfc 2821 specifically forbids this behaviour. > > > > > > The DATA command can fail at only two points in the protocol exchange: > > > >- If there was no MAIL, or no RCPT, command, or all such commands > > were rejected, the serve

Re: Virtual interface

Hi, Fernando Quintero schrieb: > What if you use something like QEMU? > it's in the ports and you could create a openbsd box with Pf and more > and then try probe your stuff. > if you attach the virtual interface to a tap interface it could works. I've tried qemu. It is nice but REALLY slow. You

Re: Virtual interface

Hi, Renaud Allard schrieb: > Unfortunately, this doesn't work on sysjail. > I think the next version of sysjail should support "dedicated" IP, but I > have no clue on when it will be out. Thats just too bad. The project seems neglected too at the moment so I wonder if that feature will ever come a

Re: Weird dmesg on X4100 M2

On Thu, May 24, 2007 at 05:31:26AM -0400, Daniel Ouellet wrote: > Hi, > > Here is some weird dmesg on a new install on a Sun X4100 X2 brand new > out of the box. > > Hopefully it is helpful to clear some errors and may be as well to know > if I should do anything special. > > I am just startin

Re: Virtual interface

What if you use something like QEMU? it's in the ports and you could create a openbsd box with Pf and more and then try probe your stuff. if you attach the virtual interface to a tap interface it could works. 2007/5/24, Michael <[EMAIL PROTECTED]>: > > Hi, > > Gordon Ross schrieb: > > You mean so

Re: Virtual interface

Gordon Ross wrote: On 24 May 2007 at 08:44, in message <[EMAIL PROTECTED]>, > Michael > <[EMAIL PROTECTED]> wrote: >> Hi, >> >> since noone seems to either read the mail "sysjail and networking" >> because it is to long or got no clue either I'd like to shorten the >> question. >> >> Is it pos

Re: i386 -> amd64 after motherboard swap

On 2007/05/24 11:51, Toni Mueller wrote: > Hi, > > On Wed, 02.05.2007 at 16:47:50 +0100, Stuart Henderson <[EMAIL PROTECTED]> > wrote: > > Moving a running system from i386 -> amd64 is _possible_ but there are > > potential problems in doing so; a clean install is always preferable. > > this mak

Re: 4GB limits per system, or processor

mickey wrote: currently memory above 4G is not supported there either. and yes same note about bios mapping it funky applies for amd64 machines too. Thanks! Last question. so, removing 4 and leaving 4GB then, even if the system may use less, it's not going to make it crash is it? Meaning, it

Business to Business E-Mail

Is your business being found on the web? This e-mail was sent to you via cantfindit.com . cantfinditcom _ _ _ _ _ _ Thousa

Re: Virtual interface

Hi, Gordon Ross schrieb: > You mean something like: > > ifconfig xl0 alias 192.168.1.2 ? No, everything that gets send out initially using xl0 will be tagged with the main IP of xl0 if not explicitly specified otherwise like you can do with ping -I. In case when using sysjails and using ping or

Re: 4GB limits per system, or processor

On Thu, May 24, 2007 at 06:05:40AM -0400, Daniel Ouellet wrote: > mickey wrote: > >On Thu, May 24, 2007 at 05:38:18AM -0400, Daniel Ouellet wrote: > >>I guess as well that the 4GB limit is per system, not per processor > >>right? I assume wrong when I added memory in that box looks like. > > > >as

Re: 4GB limits per system, or processor

mickey wrote: On Thu, May 24, 2007 at 05:38:18AM -0400, Daniel Ouellet wrote: I guess as well that the 4GB limit is per system, not per processor right? I assume wrong when I added memory in that box looks like. assuming this is i386 -- it's 3.75G physical memory per system. also depending on

Re: Dual-port Gigabit SX NICs?

Hi, On Tue, 08.05.2007 at 01:14:09 +0200, Joachim Schipper <[EMAIL PROTECTED]> wrote: > On Mon, May 07, 2007 at 04:23:00PM -0500, K K wrote: > > Am I the only one having a difficult time keeping track of which cards > > on the "Supported hardware" list are merely tolerated, and which > > vendors/

Re: i386 -> amd64 after motherboard swap

Hi, On Wed, 02.05.2007 at 16:47:50 +0100, Stuart Henderson <[EMAIL PROTECTED]> wrote: > Moving a running system from i386 -> amd64 is _possible_ but there are > potential problems in doing so; a clean install is always preferable. this makes me curious. How do you do it? How would you go about d

Re: 4GB limits per system, or processor

On Thu, May 24, 2007 at 05:38:18AM -0400, Daniel Ouellet wrote: > I guess as well that the 4GB limit is per system, not per processor > right? I assume wrong when I added memory in that box looks like. assuming this is i386 -- it's 3.75G physical memory per system. also depending on your bios it

4GB limits per system, or processor

I guess as well that the 4GB limit is per system, not per processor right? I assume wrong when I added memory in that box looks like. I get this from top. Obviously, I am loosing 5GB out of this. hmmm. OpenBSD 4.1 load averages: 0.09, 0.09, 0.07 05

Weird dmesg on X4100 M2

Hi, Here is some weird dmesg on a new install on a Sun X4100 X2 brand new out of the box. Hopefully it is helpful to clear some errors and may be as well to know if I should do anything special. I am just starting to test these to put them in productions soon, but I may hold back a bit bas

Re: How to pf rdr to the same interface?

On Thu, May 24, 2007 at 09:36:25AM +0200, Federico Giannici wrote: > I have a firewall with two interfaces, internal and external. > I have to redirect some traffic coming from the internal interface to a > given host in the internal lan. > > It doesn't work, and I have just noticed this text in

Re: Virtual interface

>>> On 24 May 2007 at 08:44, in message <[EMAIL PROTECTED]>, Michael <[EMAIL PROTECTED]> wrote: > Hi, > > since noone seems to either read the mail "sysjail and networking" > because it is to long or got no clue either I'd like to shorten the > question. > > Is it possible to create virtual netwo

Virtual interface

Hi, since noone seems to either read the mail "sysjail and networking" because it is to long or got no clue either I'd like to shorten the question. Is it possible to create virtual network interfaces that act like they were real physical interfaces? I want to be able to set PF rules for in/out

How to pf rdr to the same interface?

I have a firewall with two interfaces, internal and external. I have to redirect some traffic coming from the internal interface to a given host in the internal lan. It doesn't work, and I have just noticed this text in the pf.conf man page: Redirections cannot reflect packets back through t