virtual interface for rdr/nat

2003-10-20 Thread Justin Ma
If 'gwy' gets a packet from $client to $int_if, it will rdr and nat it so that 'other' will receive a packet from $ext_if to $other, like so: rdr $int_if from $client to $int_if - $other nat $ext_if from $client to $other - $ext_if int_if client -- |gwy|

rdr pass

2003-10-20 Thread Ed White
Hi, I'm wondering if it's possible to define a user/group for rdr pass rules on 3.4. Suppose this only-one-ruleset rdr pass on $if proto tcp from any to $if port 21 - $if port 8021 Note: same interface, simply change the port. If I'm not wrong rdr pass should create a state entry, so the

Re: RFC#12 - PF version

2003-10-20 Thread Henning Brauer
On Mon, Oct 20, 2003 at 06:55:02PM +0200, Ed White wrote: Request to introduce a public revision number to PF and pfctl. no. I had code doing this, and even pfctl erroring out with a nice message if kernel and userland are out of sync, but theo refused it. -- Henning Brauer, BS Web Services,

Re: RFC#12 - PF version

2003-10-20 Thread Johan Helsingius
I had code doing this, and even pfctl erroring out with a nice message if kernel and userland are out of sync, but theo refused it. Why? Julf

Re[2]: RFC#12 - PF version

2003-10-20 Thread Max Laier
Monday, October 20, 2003, 7:44:52 PM, Henning Brauer wrote: Request to introduce a public revision number to PF and pfctl. HB no. HB I had code doing this, and even pfctl erroring out with a nice message HB if kernel and userland are out of sync, but theo refused it. That's strange. Why? I