Jay Moore wrote: > Put another way: do I need the redirect with the pass rule for spamd?
As others pointed out already, the answer to this is "yes". However, since somewhen between 3.3 and -current, rdr also takes a "pass" statement to make things shorter at the expense of not having all "pass"es in the filtering section of your pf.conf anymore. So, instead of using rdr inet proto tcp from <spamd> to any port smtp -> 127.0.0.1 port 8025 you might want to try (if you're using 3.4/-current) rdr pass on $ExtIF inet proto tcp from <spamd> to any port smtp -> \ 127.0.0.1 port 8025 (I also put the ``on $ExtIF'' in since I doubt that the <spamd> table contains spammers from within you LAN.) See the TRANSLATION chapter in pf.conf(5) for details. Moritz
