Re: Route traffic back out same interface

2006-07-24 Thread Ashley Moran
On Friday 21 July 2006 17:46, Jason Dixon wrote: > I believe you're looking for "reflection". If you're using the IP > instead of the hostname, either TCP proxying or the "rdr / nat / no > nat" combination should work. > > http://www.openbsd.org/faq/pf/rdr.html#reflect Thanks Jason That is

Re: Route traffic back out same interface

2006-07-24 Thread Ashley Moran
On Friday 21 July 2006 17:39, Stuart Henderson wrote: > split dns (or /etc/hosts, but split dns is likely to be easier to > find in the future when it changes address...) and issue the cert for > the name rather than IP address? Hi Stuart I changed the hosts file on the server in the end. Turns

Re: Route traffic back out same interface

2006-07-21 Thread Jason Dixon
On Jul 21, 2006, at 12:26 PM, Ashley Moran wrote: Hi We have a website on a server in our DMZ that hits a webservice over SSL identified by an external IP. However, the webservice is on the same box. PF won't route requests to the external IP that come in on the DMZ interface back out o

Re: Route traffic back out same interface

2006-07-21 Thread Stuart Henderson
On 2006/07/21 17:26, Ashley Moran wrote: > I've tried making it hit the internal DMZ IP of the web server, but then you > get trust errors because the certificate is not issued for 10.0.0.15. split dns (or /etc/hosts, but split dns is likely to be easier to find in the future when it changes addr

Route traffic back out same interface

2006-07-21 Thread Ashley Moran
Hi We have a website on a server in our DMZ that hits a webservice over SSL identified by an external IP. However, the webservice is on the same box. PF won't route requests to the external IP that come in on the DMZ interface back out of the same interface, so we can't hit it. I've tried ma