Siju George <[EMAIL PROTECTED]> writes: > Is PF not capable of letting two users ( with two > differrent computers with 2 differrent IP from the RFC1918 range ) in > the LAN to connect to the Same Windows 2003 remote > desktop server on the Internet and work on it simultaneously??? > > The only workaround to connect to Windows Remote Desktop Server > through PF I know of now is to > use an rdr rule to do port forwarding something like. > > code: > rdr pass on $ext_if inet proto tcp from $Windows_RDServer to any port > 3389 -> $WRD_client1 port 3389
I may be revealing the true abysses of my ignorance here, but would not a reasonable NAT combined with something like pass inet proto tcp from $localnet to $Windows_RDServer port 3389 keep state 'just work'? Does the server need to start connections which are not taken care of by the state information back to the clients? -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://www.blug.linux.no/rfc1149/ http://www.datadok.no/ http://www.nuug.no/ "First, we kill all the spammers" The Usenet Bard, "Twice-forwarded tales"
