On Jul 14, 2008, at 10:28 PM, Parvinder Bhasin wrote:
On Jul 14, 2008, at 10:00 PM, Ryan McBride wrote:
On Mon, Jul 14, 2008 at 09:48:22PM -0700, Parvinder Bhasin wrote:
<snip>
what gives?
Oh, I missed this before:
pass in on $ext_if proto tcp from any to 75.36.44.22 port 80
pass in on $ext_if proto tcp from any to 75.36.44.23 port 25
Filtering happens AFTER translation, so you need to filter on the
real
addresses of the hosts, not the alias addresses.
Hmm by real ip do you mean internal ips of the servers??
Yes.
--
bk