Re: Redirect all traffic to new server

2016-11-01 Thread Stuart Henderson
On 2016-10-31, Jeff Ross wrote: >> The example with received-on will fix this. > > That worked--I'll try to extend that for the other types of traffic I > have on the existing server. Careful you don't open up a mail relay if you do that with SMTP. The traffic you'll get after, say 24h after DN

Re: Redirect all traffic to new server

2016-10-31 Thread Jeff Ross
On 10/31/16 11:48 AM, Jeff Ross wrote: On 10/31/16 7:54 AM, Jan Stary wrote: On Oct 30 11:28:55, jr...@openvistas.net wrote: Hi all, I'm moving to a new server hosted at m5 and I'm ready to pull the trigger on making the switch. In the past doing this sort of move I've run into dns update del

Re: Redirect all traffic to new server

2016-10-31 Thread Jeff Ross
On 10/31/16 7:54 AM, Jan Stary wrote: On Oct 30 11:28:55, jr...@openvistas.net wrote: Hi all, I'm moving to a new server hosted at m5 and I'm ready to pull the trigger on making the switch. In the past doing this sort of move I've run into dns update delays--even with the ttl on my dns set to

Re: Redirect all traffic to new server

2016-10-31 Thread Jeff Ross
On 10/31/16 12:10 AM, Philipp Buehler wrote: Am 30.10.2016 18:28 schrieb Jeff Ross: It seems like I should be able to use pf to redirect all inbound traffic except ssh to the new server. I tried redirecting web traffic as a test with the following rule in pf.conf: #pass all non-ssl web traffic

Re: Redirect all traffic to new server

2016-10-31 Thread Jan Stary
On Oct 30 11:28:55, jr...@openvistas.net wrote: > Hi all, > > I'm moving to a new server hosted at m5 and I'm ready to pull the trigger on > making the switch. > > In the past doing this sort of move I've run into dns update delays--even > with the ttl on my dns set to 300, there is a lot of e-ma

Re: Redirect all traffic to new server

2016-10-30 Thread Philipp Buehler
Am 30.10.2016 18:28 schrieb Jeff Ross: It seems like I should be able to use pf to redirect all inbound traffic except ssh to the new server. I tried redirecting web traffic as a test with the following rule in pf.conf: #pass all non-ssl web traffic to luna pass in quick proto tcp to port www r