Re: rdr clarification

2005-10-31 Thread Henning Brauer
* Chris Smith <[EMAIL PROTECTED]> [2005-10-30 15:50]: > On Saturday 29 October 2005 03:34 pm, ed wrote: > > > rdr pass on $ext_if proto tcp from to $ext_ad3 port > > > ldap -> $server_1 port ldap > > > > > > ...where $server_1 is on the other side of $int_if, still needs a > > > pass out rule on

Re: rdr clarification

2005-10-30 Thread Chris Smith
On Saturday 29 October 2005 03:34 pm, ed wrote: > > rdr pass on $ext_if proto tcp from to $ext_ad3 port > > ldap -> $server_1 port ldap > > > > ...where $server_1 is on the other side of $int_if, still needs a > > pass out rule on $int_if. The "rdr pass" does not extend through to > > the destina

Re: rdr clarification

2005-10-29 Thread ed
On Fri, 28 Oct 2005 13:14:16 -0400 Chris Smith <[EMAIL PROTECTED]> wrote: > rdr pass on $ext_if proto tcp from to $ext_ad3 port > ldap -> $server_1 port ldap > > ...where $server_1 is on the other side of $int_if, still needs a pass > out rule on $int_if. The "rdr pass" does not extend through

rdr clarification

2005-10-28 Thread Chris Smith
It seems I've been misunderstanding pf's rdr statement. Originally I thought that it would redirect from the source to the dest with an implied keep state, and when the pass was added (rdr pass ...) that additional filtering rules were bypassed. In actual operation it appears that the passing a