On Jul 14, 2008, at 10:28 PM, Parvinder Bhasin wrote:

On Jul 14, 2008, at 10:00 PM, Ryan McBride wrote:

On Mon, Jul 14, 2008 at 09:48:22PM -0700, Parvinder Bhasin wrote:
<snip>
what gives?

Oh, I missed this before:

pass in on $ext_if proto tcp from any to 75.36.44.22 port 80
pass in on $ext_if proto tcp from any to 75.36.44.23 port 25

Filtering happens AFTER translation, so you need to filter on the real
addresses of the hosts, not the alias addresses.

Hmm by real ip do you mean internal ips of the servers??


Yes.

--
bk

Reply via email to