Re: pf issues with a web-server

2008-02-04 Thread scott
iginal Message- From: Bales, Tracy <[EMAIL PROTECTED]> To: misc@openbsd.org Subject: pf issues with a web-server Date: Mon, 4 Feb 2008 00:31:33 -0600 rdr on $ext_if proto tcp from any to any port 80 -> $web_server

Re: pf issues with a web-server

2008-02-04 Thread Imre Oolberg
Hi! If i understood correctly all your stuff behind pf firewall is in the 192.168.0.0/24 subnet and when trying to access your webserver from one of the workstations it doesnt work. My guess is that you are using public nameserver which resolves webserver's name to the ip address which is you

Re: pf issues with a web-server

2008-02-04 Thread johan beisser
Your pass rule for the web server is screwed up, so it won't match. The rule after it matches and should permit it to pass. On Feb 3, 2008, at 10:31 PM, Bales, Tracy wrote: # macros ext_if="dc0" int_if="dc1" web_server="192.168.0.4" # scrub scrub in # nat nat on $ext_if from !($ext_if) to a

Re: pf issues with a web-server

2008-02-03 Thread Richard Toohey
On 4/02/2008, at 7:31 PM, Bales, Tracy wrote: I have the following network configuration: InternetFirewallNetwork SwitchWeb-Server I've looked at the OpenBSD pf FAQ and tried the inetd(8) with nc (1) suggestion but...it blocks web access to the internet. I've just got

pf issues with a web-server

2008-02-03 Thread Bales, Tracy
I have the following network configuration: InternetFirewallNetwork SwitchWeb-Server Windows XP Desktop #1 Windows XP Desktop #2 Windows XP Desktop #3 Wireless AP.Windows XP Laptop #1 Windows XP Laptop #2 Ubuntu Laptop Windows XP Work Laptop My firewall is a Su