[pfSense] DNS-based inbound NAT?

2014-12-14 Thread Mike Bobkiewicz
Hello, we have a problem: we´re running a pfSense 2.1.5 firewall with a single WAN address in front of a DMZ zone with two web servers. What we now want to do is that pfSense redirects a http call to server1.example.com to webserver 1 and a http call to server2.example.com to webserver 2. We

Re: [pfSense] DNS-based inbound NAT?

2014-12-14 Thread Yehuda Katz
HTTP Host headers are not even seen by the firewall unless some type of Deep Packet Inspection is running or the firewall is the destination and runs a proxy to the other servers. The alias method suggested will not work in this case (as you found) because pfSense does not check the host headers.

Re: [pfSense] DNS-based inbound NAT?

2014-12-14 Thread Brian Henson
I second using a reverse proxy for this. You can use the squid package or even use the Mod_security and proxy pass directive On Sun, Dec 14, 2014 at 1:44 PM, Yehuda Katz yeh...@ymkatz.net wrote: HTTP Host headers are not even seen by the firewall unless some type of Deep Packet Inspection is