On Fri, Jan 06, 2012 at 02:51:07AM +0000, Gerald McNulty wrote:

> Is this something that requires further pf rules? Or something in the C
> code?

I think you're describing

  http://lists.freebsd.org/pipermail/freebsd-net/2011-March/028225.html

With pf, you could try to reroute the replies to the loopback interface:

  pass out on $ext_if reply-to lo0 inet proto tcp user {uid} keep state

Maybe first start by matching on a specific IP (e.g. 100.100.100.5) instead
of the uid, as a test.

HTH,
Daniel
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[email protected]"

Reply via email to