Re: pf rdr-to outgoing to local port issues

2011-03-21 Thread Claudio Jeker
On Mon, Mar 21, 2011 at 02:45:35PM +0100, Henning Brauer wrote: > * jirib [2011-03-21 09:55]: > > On Sat, 19 Mar 2011 21:28:09 +0100 > > Henning Brauer wrote: > > > > it was working for me - rdr-to outbound to a daemon on the firewall > > > > itself, but I deleted that virtual machine... > > > >

Re: pf rdr-to outgoing to local port issues

2011-03-21 Thread Henning Brauer
* jirib [2011-03-21 09:55]: > On Sat, 19 Mar 2011 21:28:09 +0100 > Henning Brauer wrote: > > > it was working for me - rdr-to outbound to a daemon on the firewall > > > itself, but I deleted that virtual machine... > > >rdr-to is usually applied inbound. If applied > > > outbound

Re: pf rdr-to outgoing to local port issues

2011-03-21 Thread jirib
On Sat, 19 Mar 2011 21:28:09 +0100 Henning Brauer wrote: > > it was working for me - rdr-to outbound to a daemon on the firewall > > itself, but I deleted that virtual machine... > > > >rdr-to is usually applied inbound. If applied > > outbound, rdr-to to a local IP address is n

Re: pf rdr-to outgoing to local port issues

2011-03-19 Thread Henning Brauer
* jirib [2011-03-19 00:38]: > On Fri, 25 Feb 2011 10:21:20 +0100 > Henning Brauer wrote: > > > * william dunand [2011-02-25 05:26]: > > > > pass out log(matches) quick inet proto tcp from any to > > > > 89.176.141.250 port = www rdr-to 127.0.0.1 port 8080 > > > I think rdr-to is meant to be use

Re: pf rdr-to outgoing to local port issues

2011-03-18 Thread jirib
On Fri, 25 Feb 2011 10:21:20 +0100 Henning Brauer wrote: > * william dunand [2011-02-25 05:26]: > > > pass out log(matches) quick inet proto tcp from any to > > > 89.176.141.250 port = www rdr-to 127.0.0.1 port 8080 > > I think rdr-to is meant to be use on inbound rules. > > we allow rdr-to out

Re: pf rdr-to outgoing to local port issues

2011-02-25 Thread Henning Brauer
* william dunand [2011-02-25 05:26]: > > pass out log(matches) quick inet proto tcp from any to 89.176.141.250 port > > = www rdr-to 127.0.0.1 port 8080 > I think rdr-to is meant to be use on inbound rules. we allow rdr-to outbound too now. it has caveats, and - surprise! - they are described in

Re: pf rdr-to outgoing to local port issues

2011-02-24 Thread william dunand
> pass out log(matches) quick inet proto tcp from any to 89.176.141.250 port = > www rdr-to 127.0.0.1 port 8080 I think rdr-to is meant to be use on inbound rules.