RE: redirecting to different networks

2006-03-21 Thread Steven S
Gustavo A. Baratto wrote: .. FW2 is ready, and the IP for DNS2 is already assigned... So, while DNS2 server is not ready, is it possible to setup FW2, so DNS queries from the external world can be redirected to DNS1? It would be basically an rdr reflection on the external interface,

Re: ftp-proxy, and one nic: oh my...

2006-03-21 Thread Travis H.
rdr pass on $extif proto tcp from any to any port 21 - 127.0.0.1 port 8021 This makes inbound packets destined to port 21 on your box go to the proxy. But they'll be blocked because you don't have a pass rule anywhere to allow them. block drop in log quick on $extif from $privnets to any

Re: redirecting to different networks

2006-03-21 Thread Karl O. Pinc
Gustavo A. Baratto wrote: .. FW2 is ready, and the IP for DNS2 is already assigned... So, while DNS2 server is not ready, is it possible to setup FW2, so DNS queries from the external world can be redirected to DNS1? How about a really simple bind config that uses FORWARD to send all

pf HFSC queues

2006-03-21 Thread unixservers team
Hello friends I've tried to setup a traffic shaper on FreeBSD (5.4) using pf. The strange thing is that when I define queues the sum of all queues sometimes is not higher that the interface bandwidth but I have error when loading pf rule (pfctl -f pf.conf), saying that the sum of realtime

Re: pf HFSC queues

2006-03-21 Thread Anthony Oteri
I did experience a problem, which sounded similar to this, In my case it was because I did not explicitly state the bandwidth of some of the child queues. When I went back and explicitly hardcoded the bandwith for every child queue, it worked. It may be good if you post this part of the pf.conf

Re: redirecting to different networks

2006-03-21 Thread Gustavo A. Baratto
Well... this actually works: rdr on $ext_if proto {udp tcp} from any to DNS2_IP port 53 - DNS1_IP nat on $ext_if proto {tcp,udp} from any to DNS1_IP port 53 - $ext_if But the man pf.conf says: -- Redirections cannot reflect packets back through the interface they arrive on, they can