On Wed, 7 Sep 2005 20:25:54 +0200
Daniel Hartmeier <[EMAIL PROTECTED]> wrote:
> > rdr on $ext_if proto tcp from any to 1.2.3.4 port 80 -> 10.10.10.10
> > pass on $ext_if proto tcp from any to 1.2.3.4 port {80,3389}
>
> Packets will have their destination address replaced with 10.10.10.10
> when filter rules are evaluated (translation always happens first).
>
> So the pass rule needs to be "to 10.10.10.10" instead of "to 1.2.3.4".
Thanks I'll give this a go. Is there much chance of the two rules being
combined to a single rdr pass ( max-src-conn etc ) in the future?
--
http://edd.link9.net - http://irc.is-cool.net
