smtpd crashes because of a config problem?

2010-09-02 Thread Didier Wiroth
Hello,
My smtpd crashes at regular intervals and I don't understand why. May
be I misconfigured it ...

I have a central public mail host that forwards every incoming mail to
inside host.
The host mail.wiroth.net forwards every incoming mail to donkey.wiroth.net.

Thanks for your help!!
Didier

Here is the main public mail host's smtpd.conf:
---
listen on lo0
listen on bge1 port 25 tls enable auth

map aliases { source db /etc/mail/aliases.db }
map secrets { source db /etc/mail/secrets.db }

hostname mail.wiroth.net

accept from all for domain *.wiroth.net relay via 158.64.58.6 tls enable auth
accept from all for domain wiroth.net relay via 158.64.58.6 tls enable auth
accept from local for all relay
-

Here is the error message:
---
mx cavin01.kuleuven.be prio 30.17
mx cavin02.kuleuven.be prio 30.17
lookup_a cavin.kuleuven.be:0
Q_BOUNCE: 0: done
lookup_a success
lookup_a kromsin.cc.kuleuven.be:0
lookup_a success
lookup_a limbak.cc.kuleuven.be:0
lookup_a success
lookup_a cavin03.kuleuven.be:0
lookup_a success
lookup_a cavin01.kuleuven.be:0
lookup_a success
lookup_a cavin02.kuleuven.be:0
lookup_a success
lookup_mx success
mta: connect 134.58.240.2
lookup_ptr 134.58.240.2
lookup_ptr success
mta: entering smtp phase
 220-cavin02.test.kulnet.kuleuven.be ESMTP (KULeuven)
 221 2.0.0 donkey.wiroth.net Closing connection
mta_event: leaving
Q_RELAY: 0: done
Q_RELAY: sleep 6451s
 220 cavin02.test.kulnet.kuleuven.be ESMTP (KULeuven)
 EHLO mail.wiroth.net
 250-cavin02.test.kulnet.kuleuven.be
 250-PIPELINING
 250-SIZE 2100
 250-ETRN
 250-ENHANCEDSTATUSCODES
 250-8BITMIME
 250 DSN
 MAIL FROM:
 RCPT TO:mede...@kuleuven.be
 DATA
 250 2.1.0 Ok
 550 5.1.1 mede...@kuleuven.be: Recipient address rejected:
undeliverable address: Recipient verification failed
mta: new status for mede...@kuleuven.be: 550 5.1.1
mede...@kuleuven.be: Recipient address rejected: undeliverable
address: Recipient verification failed
daTcg4aN: to=mede...@kuleuven.be, delay=7,
relay=rhcavin02.kulnet.kuleuven.be [134.58.240.2], stat=RemoteError
(5.1.1 mede...@kuleuven.be: Recipient addres
s rejected: undeliverable address: Recipient verification failed)
mta_event: leaving
daTcg4aN: bounce recipient mede...@kuleuven.be not contactable, bounce dropped
Q_RELAY: 1: done
Q_RELAY: sleep 6447s
smtp_new: incoming client on listener: 0x82b20800
lookup_ptr 88.215.149.23
lookup_ptr success
session_pickup: greeting client
command: EHLO   args: pppoe-88-215-149-23.helios.ru
command: MAIL FROM  args: wjc...@dierenhulpzondergrenzen.com
command: RCPT TOargs: did...@wiroth.net
aux 
R|wjc...@dierenhulpzondergrenzen.com|did...@wiroth.net||did...@wiroth.net|158.64.58.6||starttls||secrets
smtpd in free(): error: chunk is already free
mail transfer agent exiting
smtp server exiting
lookup agent exiting
mail delivery agent exiting
control process exiting
mail filter exiting
lost child: queue terminated; signal 6
parent terminating



MENSAJE DEL PRESIDENTE FELIPE CALDERÓN HINOJOSA SOBRE INFRAESTRUCTURA HOSPITALARIA.

2010-09-02 Thread Presidencia de la República
Si no es este tu correo o si deseas cancelar la suscripcisn haz clic aqum

Si no puedes visualizar este correo, haz clic aqum

[IMAGE]

[IMAGE]

[IMAGE]

[IMAGE]

Cuarto
Informe de Gobierno

Hola:

www.informe.gob.mx

[IMAGE]

Mensaje
del Presidente

[IMAGE]

[IMAGE]

[IMAGE]

[IMAGE]

Si no es este tu correo o si deseas cancelar la suscripcisn haz clic aqum

Si no puedes visualizar este correo, haz clic aqum

[IMAGE]



LINARES EN BUENOS AIRES

2010-09-02 Thread difusion-esa
[IMAGE]

La Escuela sistimica Argentina es una institucisn que desarrolla
actividades de formacisn de Terapeutas familiares sistimicos,
investigacisn y asistencia psicolsgica.

Director: Dr. Horacio Serebrinsky - Director Acadimico: Dr. Marcelo R.
Ceberio

LINARES EN BUENOS AIRES

SEMINARIO 2010

TICNICAS Y TACTICAS

DE LA TERAPIA SISTIMICA

Dr. Juan Luis LINARES
Midico y Psicslogo. Doctor en Medicina. Fue Presidente Asociacisn Europea
de Terapia Familiar. Dirige Master Terapia Familiar Universidad Autsnoma
de Barcelona. Es Jefe de Servicio de Terapia Familiar del Hospital San
Pau Barcelona y Director de la Escuela de Terapia Familiar del Hospital
de San Pau Barcelona. Es Profesor titular de la Universidad Autsnoma de
Barcelona y Autor de numerosos artmculos y libros de la especialidad como
Identidad y Narrativa, Tras la honorable fachada, Ser y hacer en
Terapia Sistimica (con Marcelo R. Ceberio), entre otros.

Jueves 16 de septiembre, de 15 a 21hs.

Actividad arancelada

INFORMES E INSCRIPCION:

Fray Justo S. M. de Oro 1843 (1414) Bs. As. Te/Fax: 4774-2875/6112
4899-1053

E-Mail: i...@escuelasistemica.com.ar / Web: www.escuelasistemica.com.ar



MENSAJE DEL PRESIDENTE FELIPE CALDERÓN HINOJOSA SOBRE INFRAESTRUCTURA CARRETERA.

2010-09-02 Thread Presidencia de la República
Si no es este tu correo o si deseas cancelar la suscripcisn haz clic aqum

Si no puedes visualizar este correo, haz clic aqum

[IMAGE]

[IMAGE]

[IMAGE]

[IMAGE]

Cuarto Informe de Gobierno

Hola:

www.informe.gob.mx

[IMAGE]

[IMAGE]
[IMAGE]

[IMAGE]

[IMAGE]

[IMAGE]

[IMAGE]

Si no es este tu correo o si deseas cancelar la suscripcisn haz clic aqum

Si no puedes visualizar este correo, haz clic aqum

[IMAGE]



只要会说华语,就可以在家赚钱!!

2010-09-02 Thread hxuyiul25
bb



ANDAMIOS TRIBUNAS VALLAS GRADAS ESCALERAS - misc

2010-09-02 Thread Diego Scioli
TRIBUNAS METALICAS
   
 GRADAS MOVILES

 ESCENARIOS -PASARELAS
   
 VALLAS METALICAS

 ANDAMIOS TUBULARES
  
  ELEVADOR DE DURLOCK

  MONTACARGAS-ELEVADORES

  ESCALERAS MOVILES

  HERRAMIENTAS PARA LA CONSTRUCCION

 CABALLETES EXTENSIBLES

Visite
www.nuevosairesnet.com.ar

  E- mails

  infonuevosai...@coopenetcolon.com.ar

   nuevosairesandam...@hotmail.com



1 Portabanner Completo $160 | 2 Portabanners Completos $240 y Mas... misc@openbsd.org

2010-09-02 Thread Proshop Graphics
o;?   si no visualiza imagenes habilitelas en el explorador o haga click
aqui  [http://www.smtp-go.com.ar/smtpgo/link.php?M=1018018N=80L=46F=T]

PROMOCIONES SEPTIEMBRE

1 PORTA BANNER

1 Porta banner 1.90x0.90 mts. (estructura)
 +
 1 ImpresiC3n en Lona Front.
 +
 1 Bolso de Transporte


$160 + IVA

No incluye diseC1o, envC-o ni IVA.

2 PORTA BANNERS

2 Porta banners 1.90x0.90 mt. (estructuras)
 +
 2 Lonas Impresas en Lona Front.
 +
 2 Bolsos de Transporte


$240 + IVA

No incluye diseC1o, envC-o ni IVA.

PROMO 2 PORTABANNER + BANNER COLGANTE

2   Porta banners 1.90x0.90 mts (estructuras)
 + 2 Lonas Impresas en Lona Front.
 + 1 Banner impreso en lona front para colgar de 1.80x0.80 mts.
 + Bolso de Transporte



$300 + IVA

No incluye diseC1o, envC-o ni IVA.

1 PORTA BANNER EXTERIOR

Porta Banner preparado para exterior totalmente desarmable:
 Medida: 1.90x0.90.
 Base desarmable de 9 kgs.
 Posee ruedas para transportarlo armado.
 + ImpresiC3n en lona front.
 + Bolso de transporte.


$300 + IVA

No incluye diseC1o, envC-o ni IVA.

PROMOCIONES VALIDAS HASTA EL 31 DE SEPTIEMBRE DE 2010

011 4855-0495 | 4857-3191
 Nextel ID: 54*132*3395

ven...@proshop-graphics.com.ar

www.proshop-graphics.com.ar



Francisco Iturri 142 - (Chacarita) - C.A.B.A. | Lunes a Viernes de 10:00 a
18:00 hs.


CompartC- esta informaciC3n con un amigo
[http://www.smtp-go.com.ar/smtpgo/sendfriend.php?M=1018018C=4a6b4a3e6932f8d68d183f0398e6941bL=25N=80F=1i=43]


 Para darse de baja de la suscripciC3n DesuscrC-beme de esta lista de
contactos
[http://www.smtp-go.com.ar/smtpgo/link.php?M=1018018N=80L=31F=T]
[mailto:i...@proshop-graphics.com.ar?subject=dar de baja mi correo]


Potenciado por smtpGO.com.ar
Haz clic aquoacute; para desuscribirte:
http://www.smtp-go.com.ar/smtpgo/unsubscribe.php?M=1018018C=4a6b4a3e6932f8d68d183f0398e6941bL=25N=80



Fun Time

2010-09-02 Thread Sonia
 Hai,

A man got 2 wishes from GOD. He asked for the Best wine and Best Woman.
Next moment, he had the Best Wine and Mother Teresa next to him.

Moral : BE SPECIFIC

Many more funny jokes for fun. Do visit http://funtime.net.in/jokes
http://funtime.net.in/jokes

Regards

Sonia
-
---
Disclaimer

This message was intended for  misc@openbsd.org Dated 02/09/2010 .  If you do
not wish to receive this type of email from me in the future, please click
here to unsubscribe mailto:unsubscr...@funtime.net.in?subject=unsubscribe. I
am located at 27/62, royal complex. mau. M.P. - 264871



pf redirect problem

2010-09-02 Thread Timothy Beyer
Hello,

I'm having trouble setting up a redirect rule and I'm not sure where I'm going
wrong.  My redirect line and filter rules look like:

rdr on $ext_nic proto tcp from any to 38.xxx.xxx.213 - 192.168.1.227
pass in on $ext_nic proto tcp from any to 192.168.1.227 port ssh queue ssh
pass in on $ext_nic proto tcp from any to 192.168.1.227 port www queue www

The output of 'pfctl -s nat' is:

nat on fxp0 inet from 192.168.1.0/24 to any - 38.xxx.xxx.206
nat on fxp0 inet from 192.168.2.0/24 to any - 38.xxx.xxx.207
nat on fxp0 inet from 192.168.3.0/24 to any - 38.xxx.xxx.208
nat on dc3 inet from 192.168.1.0/24 to any - 192.168.10.156
nat on fxp0 inet from 192.168.10.15 to any - 38.xxx.xxx.206
rdr on fxp0 inet proto tcp from any to 38.xxx.xxx.209 - 192.168.1.16
rdr on fxp0 inet proto tcp from any to 38.xxx.xxx.210 - 192.168.1.21
rdr on fxp0 inet proto tcp from any to 38.xxx.xxx.212 - 192.168.1.12
rdr on fxp0 inet proto tcp from any to 38.xxx.xxx.211 - 192.168.1.24
rdr on fxp0 inet proto tcp from any to 38.xxx.xxx.213 - 192.168.1.227

All of the other redirects are working.  I see my filter rule in the output
from 'pfctl -s rules' but I can't connect via ssh from an external network
after reloading pf.conf.  Any insight would be very much appreciated.  I've
posted my full conf at http://pastebin.com/TZa0WzE0 if needed.

Thanks,

Tim



Re: pf redirect problem

2010-09-02 Thread sven falempin
tcpdump on pflog will probably help (see the FAQ)

2010/9/2 Timothy Beyer timot...@titaniumant.com

 Hello,

 I'm having trouble setting up a redirect rule and I'm not sure where I'm
 going
 wrong.  My redirect line and filter rules look like:

 rdr on $ext_nic proto tcp from any to 38.xxx.xxx.213 - 192.168.1.227
 pass in on $ext_nic proto tcp from any to 192.168.1.227 port ssh queue ssh
 pass in on $ext_nic proto tcp from any to 192.168.1.227 port www queue www

 The output of 'pfctl -s nat' is:

 nat on fxp0 inet from 192.168.1.0/24 to any - 38.xxx.xxx.206
 nat on fxp0 inet from 192.168.2.0/24 to any - 38.xxx.xxx.207
 nat on fxp0 inet from 192.168.3.0/24 to any - 38.xxx.xxx.208
 nat on dc3 inet from 192.168.1.0/24 to any - 192.168.10.156
 nat on fxp0 inet from 192.168.10.15 to any - 38.xxx.xxx.206
 rdr on fxp0 inet proto tcp from any to 38.xxx.xxx.209 - 192.168.1.16
 rdr on fxp0 inet proto tcp from any to 38.xxx.xxx.210 - 192.168.1.21
 rdr on fxp0 inet proto tcp from any to 38.xxx.xxx.212 - 192.168.1.12
 rdr on fxp0 inet proto tcp from any to 38.xxx.xxx.211 - 192.168.1.24
 rdr on fxp0 inet proto tcp from any to 38.xxx.xxx.213 - 192.168.1.227

 All of the other redirects are working.  I see my filter rule in the output
 from 'pfctl -s rules' but I can't connect via ssh from an external network
 after reloading pf.conf.  Any insight would be very much appreciated.  I've
 posted my full conf at http://pastebin.com/TZa0WzE0 if needed.

 Thanks,

 Tim




--
 No doubt it is one of the functions of art to replace religious faith by
the effective ingredient of beauty. At least beauty must have the power of a
poem, that is to say of a crime.



Re: pf redirect problem

2010-09-02 Thread Timothy Beyer
Here's some log output.  I forgot to note this is on OpenBSD 4.2.  The first
entry is a successful connection to one of the working redirects.  Connection
attempts to the redirect I'm trying to add don't show up in the log even after
adding a log directive in the filter rules.

-T


 tcpdump: listening on pflog0, link-type PFLOG
Sep 02 15:00:13.263016 rule 24/(match) pass in on fxp0: 75.xxx.xxx.209.51635 
192.168.1.16.22: [|tcp] (DF)
Sep 02 15:00:14.783786 rule 0/(match) block in on fxp0: 208.xxx.xxx.236.32780
 38.xxx.xxx.206.53:[|domain]
Sep 02 15:00:15.529433 rule 0/(match) block in on fxp0: 208.xxx.xxx.236.32780
 38.xxx.xxx.206.53:[|domain]
Sep 02 15:00:16.279410 rule 0/(match) block in on fxp0: 208.xxx.xxx.236.32780
 38.xxx.xxx.206.53:[|domain]
Sep 02 15:00:17.779913 rule 0/(match) block in on fxp0: 208.xxx.xxx.236.32780
 38.xxx.xxx.206.53:[|domain]
Sep 02 15:00:18.529400 rule 0/(match) block in on fxp0: 208.xxx.xxx.236.32780
 38.xxx.xxx.206.53:[|domain]
Sep 02 15:00:19.279498 rule 0/(match) block in on fxp0: 208.xxx.xxx.236.32780
 38.xxx.xxx.206.53:[|domain]
Sep 02 15:00:20.780050 rule 0/(match) block in on fxp0: 208.xxx.xxx.236 
38.xxx.xxx.206: icmp: echo request
Sep 02 15:00:21.529443 rule 0/(match) block in on fxp0: 208.xxx.xxx.236 
38.xxx.xxx.206: icmp: echo request
Sep 02 15:00:22.28 rule 0/(match) block in on fxp0: 208.xxx.xxx.236 
38.xxx.xxx.206: icmp: echo request

From: sven falempin [sven.falem...@gmail.com]
Sent: Thursday, September 02, 2010 2:05 PM
To: Timothy Beyer
Cc: misc@openbsd.org
Subject: Re: pf redirect problem

tcpdump on pflog will probably help (see the FAQ)

2010/9/2 Timothy Beyer
timot...@titaniumant.commailto:timot...@titaniumant.com
Hello,

I'm having trouble setting up a redirect rule and I'm not sure where I'm
going
wrong.  My redirect line and filter rules look like:

rdr on $ext_nic proto tcp from any to 38.xxx.xxx.213 - 192.168.1.227
pass in on $ext_nic proto tcp from any to 192.168.1.227 port ssh queue ssh
pass in on $ext_nic proto tcp from any to 192.168.1.227 port www queue www

The output of 'pfctl -s nat' is:

nat on fxp0 inet from 192.168.1.0/24http://192.168.1.0/24 to any -
38.xxx.xxx.206
nat on fxp0 inet from 192.168.2.0/24http://192.168.2.0/24 to any -
38.xxx.xxx.207
nat on fxp0 inet from 192.168.3.0/24http://192.168.3.0/24 to any -
38.xxx.xxx.208
nat on dc3 inet from 192.168.1.0/24http://192.168.1.0/24 to any -
192.168.10.156
nat on fxp0 inet from 192.168.10.15 to any - 38.xxx.xxx.206
rdr on fxp0 inet proto tcp from any to 38.xxx.xxx.209 - 192.168.1.16
rdr on fxp0 inet proto tcp from any to 38.xxx.xxx.210 - 192.168.1.21
rdr on fxp0 inet proto tcp from any to 38.xxx.xxx.212 - 192.168.1.12
rdr on fxp0 inet proto tcp from any to 38.xxx.xxx.211 - 192.168.1.24
rdr on fxp0 inet proto tcp from any to 38.xxx.xxx.213 - 192.168.1.227

All of the other redirects are working.  I see my filter rule in the output
from 'pfctl -s rules' but I can't connect via ssh from an external network
after reloading pf.conf.  Any insight would be very much appreciated.  I've
posted my full conf at http://pastebin.com/TZa0WzE0 if needed.

Thanks,

Tim




--
 No doubt it is one of the functions of art to replace religious faith by the
effective ingredient of beauty. At least beauty must have the power of a poem,
that is to say of a crime.



Te Regalamos la CCNA

2010-09-02 Thread CentralTECH.com.ar
Si no puede ver este Newsletter correctamente, o desea ver la version HTML
completa presione en el SIGUIENTE LINK
http://www.editorialpoulbert.com.ar/Newsletter/2010/08_agosto/ccna/news_ccna.html

-
Te regalamos la CCNA

Si, creelo!!!
Comprando tu carrera CCNP llevate de regalo la Carrera CCNA

-
CCNP
CN - Conceptos en Networking - E-Learning
ROUTE - Implementing Cisco IP Routing - 32 hs
SWITCH - Implementing Cisco IP Switched Networks - 28 hs
TSHOOT - Troubleshooting and Maintaining Cisco IP Networks - 28 hs
WC Workshop Certificacisn Internacional CCNP - 16 hs.
Duracion Total: 104 hs.
Examenes a preparar: 
642-902
https://learningnetwork.cisco.com/community/certifications/ccnp/route?tab=overview
642-813
https://learningnetwork.cisco.com/community/certifications/ccnp/switch?tab=overview
642-832
https://learningnetwork.cisco.com/community/certifications/ccnp/tshoot?tab=overview

-
CCNA (regalo)
CN - Conceptos en Networking - E-Learning
CCND1 - Interconnecting Cisco Networking Devices Part 1 v1.0 - 28 hs.
CCND2 - Interconnecting Cisco Networking Devices Part 2 v1.0 - 28 hs.
WC - Workshop Certificacisn Internacional CCNA - 16 hs.
Duracion Total: 64 hs.
Examenes a preparar: 
640-822 http://www.cisco.com/web/learning/le3/current_exams/640-822.html
640-816 http://www.cisco.com/web/learning/le3/current_exams/640-816.html

-
Encontranos en...
http://www.centraltech.tv/ http://www.facebook.com/centraltech
http://twitter.com/centraltech_ct

Argentina - Bs As.: +54 (11) 5031-2233
Espana - Madrid: +34 (91) 143-6077
Mexico - Dis. Fed.: +52 (55) 1163-8760
USA - Miami: +1 (786) 718-1991

Lavalle 348 - Piso 6 - (C1043AAF) Buenos Aires, Argentina |
masi...@centraltech.com.ar http://www.centraltech.com.ar/



































Si no desea continuar recibiendo nuestros Newsletters,
http://mail.ctnewsletter.com.ar:20080/lists/?p=unsubscribeuid=d5455857107744a807f1328c3108d84c

Para cambiar sus opciones de envio
http://mail.ctnewsletter.com.ar:20080/lists/?p=preferences

Visite nuestra politica de PRIVACIDAD
http://mail.ctnewsletter.com.ar:20080/lists/privacidad.html


--
Powered by CTNewsletter, mail.ctnewsltter.com.ar --



Re: pf redirect problem

2010-09-02 Thread Evgeniy Sudyr
Timothy,

I don't see where is you pass rules for redirected traffic on for both
external and internal (if you don`t skip it) interfaces ?

You have to add these pass rules to pf, it's pretty straightforward.

--
Thanks!
Evgeniy Sudyr


pass in on $ext_nic proto tcp from any to 192.168.1.227 port ssh queue ssh
pass in on $ext_nic proto tcp from any to 192.168.1.227 port www queue www


On Fri, Sep 3, 2010 at 1:12 AM, Timothy Beyer timot...@titaniumant.com
wrote:
 Here's some log output. B I forgot to note this is on OpenBSD 4.2. B The
first
 entry is a successful connection to one of the working redirects.
B Connection
 attempts to the redirect I'm trying to add don't show up in the log even
after
 adding a log directive in the filter rules.

 -T


 B tcpdump: listening on pflog0, link-type PFLOG
 Sep 02 15:00:13.263016 rule 24/(match) pass in on fxp0: 75.xxx.xxx.209.51635

 192.168.1.16.22: [|tcp] (DF)
 Sep 02 15:00:14.783786 rule 0/(match) block in on fxp0:
208.xxx.xxx.236.32780
 38.xxx.xxx.206.53:[|domain]
 Sep 02 15:00:15.529433 rule 0/(match) block in on fxp0:
208.xxx.xxx.236.32780
 38.xxx.xxx.206.53:[|domain]
 Sep 02 15:00:16.279410 rule 0/(match) block in on fxp0:
208.xxx.xxx.236.32780
 38.xxx.xxx.206.53:[|domain]
 Sep 02 15:00:17.779913 rule 0/(match) block in on fxp0:
208.xxx.xxx.236.32780
 38.xxx.xxx.206.53:[|domain]
 Sep 02 15:00:18.529400 rule 0/(match) block in on fxp0:
208.xxx.xxx.236.32780
 38.xxx.xxx.206.53:[|domain]
 Sep 02 15:00:19.279498 rule 0/(match) block in on fxp0:
208.xxx.xxx.236.32780
 38.xxx.xxx.206.53:[|domain]
 Sep 02 15:00:20.780050 rule 0/(match) block in on fxp0: 208.xxx.xxx.236 
 38.xxx.xxx.206: icmp: echo request
 Sep 02 15:00:21.529443 rule 0/(match) block in on fxp0: 208.xxx.xxx.236 
 38.xxx.xxx.206: icmp: echo request
 Sep 02 15:00:22.28 rule 0/(match) block in on fxp0: 208.xxx.xxx.236 
 38.xxx.xxx.206: icmp: echo request
 
 From: sven falempin [sven.falem...@gmail.com]
 Sent: Thursday, September 02, 2010 2:05 PM
 To: Timothy Beyer
 Cc: misc@openbsd.org
 Subject: Re: pf redirect problem

 tcpdump on pflog will probably help (see the FAQ)

 2010/9/2 Timothy Beyer
 timot...@titaniumant.commailto:timot...@titaniumant.com
 Hello,

 I'm having trouble setting up a redirect rule and I'm not sure where I'm
 going
 wrong. B My redirect line and filter rules look like:

 rdr on $ext_nic proto tcp from any to 38.xxx.xxx.213 - 192.168.1.227
 pass in on $ext_nic proto tcp from any to 192.168.1.227 port ssh queue ssh
 pass in on $ext_nic proto tcp from any to 192.168.1.227 port www queue www

 The output of 'pfctl -s nat' is:

 nat on fxp0 inet from 192.168.1.0/24http://192.168.1.0/24 to any -
 38.xxx.xxx.206
 nat on fxp0 inet from 192.168.2.0/24http://192.168.2.0/24 to any -
 38.xxx.xxx.207
 nat on fxp0 inet from 192.168.3.0/24http://192.168.3.0/24 to any -
 38.xxx.xxx.208
 nat on dc3 inet from 192.168.1.0/24http://192.168.1.0/24 to any -
 192.168.10.156
 nat on fxp0 inet from 192.168.10.15 to any - 38.xxx.xxx.206
 rdr on fxp0 inet proto tcp from any to 38.xxx.xxx.209 - 192.168.1.16
 rdr on fxp0 inet proto tcp from any to 38.xxx.xxx.210 - 192.168.1.21
 rdr on fxp0 inet proto tcp from any to 38.xxx.xxx.212 - 192.168.1.12
 rdr on fxp0 inet proto tcp from any to 38.xxx.xxx.211 - 192.168.1.24
 rdr on fxp0 inet proto tcp from any to 38.xxx.xxx.213 - 192.168.1.227

 All of the other redirects are working. B I see my filter rule in the
output
 from 'pfctl -s rules' but I can't connect via ssh from an external network
 after reloading pf.conf. B Any insight would be very much appreciated.
B I've
 posted my full conf at http://pastebin.com/TZa0WzE0 if needed.

 Thanks,

 Tim




 --
 B No doubt it is one of the functions of art to replace religious faith by
the
 effective ingredient of beauty. At least beauty must have the power of a
poem,
 that is to say of a crime .





--
--
With regards,
Eugene Sudyr