Re: RDR and NAT Combination with a single interface

2006-08-11 Thread ben
Actually, I did end up getting it to work. The rules I ended up using although expressed differently are pretty much the same as the ones in my previous email. I think I might have made a mistake testing the configuration and it was probably working the entire time. These are the "final" rules I

Re: RDR and NAT Combination with a single interface

2006-08-11 Thread Joachim Schipper
On Thu, Aug 10, 2006 at 11:51:31AM -0700, ben wrote: > I'm attempting to configure pf in a way similar to what is described here: > http://openbsd.org/faq/pf/rdr.html#rdrnat > > The main difference is I want to do this with a single interface and I > want to use it as a load balancing solution. Us

Re: RDR and NAT Combination with a single interface

2006-08-10 Thread Stephen Bosch
Steve Welham wrote: > The painless way to do this is with webservers on non-routable > addresses, NAT and two interfaces. Is that out of the question? > > In any case man pf.conf says: > > "Redirections cannot reflect packets back through the interface they > arrive on, they can only be redirecte

Re: RDR and NAT Combination with a single interface

2006-08-10 Thread Steve Welham
The painless way to do this is with webservers on non-routable addresses, NAT and two interfaces. Is that out of the question? In any case man pf.conf says: "Redirections cannot reflect packets back through the interface they arrive on, they can only be redirected to hosts connected to different

RDR and NAT Combination with a single interface

2006-08-10 Thread ben
I'm attempting to configure pf in a way similar to what is described here: http://openbsd.org/faq/pf/rdr.html#rdrnat The main difference is I want to do this with a single interface and I want to use it as a load balancing solution. Using rdr to redirect across a pool of web servers and using nat