Hi,
I have a client network with 2 connections to the Internet - we use the one for mail and ssh and the other for everything else.
I have configured the OBSD machine with 3 interfaces (int, ext-mail, ext) and have used the reply-to keyword in pf to ensure that any traffic that comes in over ext-mail returns over ext-mail. The default gateway is a router on the ext subnet.
pass in on $ext_mail reply-to ($ext_mail $router_addr) proto tcp from any to $ext_mail port { pop3, smtp, ssh } keep state
All works as expected (and required)
Now I want to use spamd on the mail. But the redirect to spamd happens before the pass rule above, hence when spamd responds the packets are routed through interface ext instead of ext-mail.
How do I solve this?
Thanks,
Abdul
