On Sat, Nov 29, 2003 at 06:10:06PM +0100, Thelmo Loisio wrote:
> On Fri, 2003-11-28 at 18:23, Greg Hennessy wrote:
>
> > Is your perimeter gateway doing address xlation for source address you are
> > using ?
>
> Don't take me wrong, but... of course nat is working ;)
>
> My problem is that i don't know why when running in bridge environment
> the rdr to 127.0.0.1 doesn't work anymore.
because the bridged packets do not actually make it to the ip stack
the work around is to add an explicit 'route-to lo0' to your pass rule:
for instance:
rdr on $int_if from $int_net to ! $int_net port 80 -> 127.0.0.1 port 3128
...
pass in on $int_if route-to lo0 from $int_net to 127.0.0.1 port 3128
^^^^^^^^^^^^
Can