Hello, I want to add tinyproxy to my ruleset below (port 3128) as
a transparent proxy.

All my efforts just yield 'access denied.'  I've sent a request to
misc OpenBSD but when I found this list thought the question would 
be more appropriate here.

Thanks!

------8<-------cut here-------8<------

ext_if="rl0"
int_if="xl0"

set block-policy return
set loginterface $ext_if
set skip on lo
scrub in
nat on $ext_if from !($ext_if) -> ($ext_if:0)
block in log all
pass out keep state
antispoof quick for { lo $int_if }
pass in on $ext_if inet proto tcp from any to ($ext_if) port { 22, 113
} flags S/SA keep state
pass in inet proto icmp all icmp-type echoreq keep state
pass quick on $int_if


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

Reply via email to