Re: pf icmp redirect question

2014-06-02 Thread Marko Cupać
On Fri, 30 May 2014 19:32:32 +0100 André Lucas wrote: > Or if you're concerned about the the ICMP messages related to PMTUd, > they're automatically forwarded as part of the connection state > tracking IIRC. > > -Andr__ > That was my main concern, thanx for clarifying. -- Marko Cupać

Re: pf icmp redirect question

2014-05-30 Thread André Lucas
On 30 May 2014 19:13, System Administrator wrote: > On 30 May 2014 at 13:56, Sebastian Benoit wrote: > > > Marko Cupa??(marko.cu...@mimar.rs) on 2014.05.30 11:32:14 +0200:> > > Assuming that $pub_web ip address is used exclusively for web server > > > access, and no other ports are redirected to

Re: pf icmp redirect question

2014-05-30 Thread System Administrator
On 30 May 2014 at 13:56, Sebastian Benoit wrote: > Marko Cupa??(marko.cu...@mimar.rs) on 2014.05.30 11:32:14 +0200: > > Hi, > > > > let's say for example I have web server on internal network, and I > > have redirected tcp port 80 from firewall to it: > > > > pass in on $ext_if inet proto tcp fr

Re: pf icmp redirect question

2014-05-30 Thread Sebastian Benoit
Marko Cupa??(marko.cu...@mimar.rs) on 2014.05.30 11:32:14 +0200: > Hi, > > let's say for example I have web server on internal network, and I have > redirected tcp port 80 from firewall to it: > > pass in on $ext_if inet proto tcp from any to $pub_web port 80 \ >rdr-to $priv_web >From the wo

pf icmp redirect question

2014-05-30 Thread Marko Cupać
Hi, let's say for example I have web server on internal network, and I have redirected tcp port 80 from firewall to it: pass in on $ext_if inet proto tcp from any to $pub_web port 80 \ rdr-to $priv_web Assuming that $pub_web ip address is used exclusively for web server access, and no other p