Re: PF and MS RDP trouble (help!)

2006-04-10 Thread steve
Leonardo Rodrigues wrote: Hello everyone! I'm having a bit of trouble trying to access a Windows 2003 server that is behind an OpenBSD 3.9 -current firewall. From the LAN, I can remote access the 2k3 server easily, by just opening the mstsc and entering the machine's IP (192.168.0.1). The

PF and MS RDP trouble (help!)

2006-04-09 Thread Leonardo Rodrigues
Hello everyone! I'm having a bit of trouble trying to access a Windows 2003 server that is behind an OpenBSD 3.9 -current firewall. From the LAN, I can remote access the 2k3 server easily, by just opening the mstsc and entering the machine's IP (192.168.0.1). The problem is, I want to access the

Re: PF and MS RDP trouble (help!)

2006-04-09 Thread Vijay Sankar
Leonardo Rodrigues wrote: Hello everyone! I'm having a bit of trouble trying to access a Windows 2003 server that is behind an OpenBSD 3.9 -current firewall. From the LAN, I can remote access the 2k3 server easily, by just opening the mstsc and entering the machine's IP (192.168.0.1). The

Re: PF and MS RDP trouble (help!)

2006-04-09 Thread NetNeanderthal
On 4/9/06, Leonardo Rodrigues [EMAIL PROTECTED] wrote: Hello everyone! I'm having a bit of trouble trying to access a Windows 2003 server that is behind an OpenBSD 3.9 -current firewall. From the LAN, I can remote access the 2k3 server easily, by just opening the mstsc and entering the

Re: PF and MS RDP trouble (help!)

2006-04-09 Thread Melameth, Daniel D.
You're using keep state in other places. Why is it missing from pass in on $ext_if proto tcp from any to any port 3389? Leonardo Rodrigues wrote: I'm having a bit of trouble trying to access a Windows 2003 server that is behind an OpenBSD 3.9 -current firewall. From the LAN, I can remote

Re: PF and MS RDP trouble (help!)

2006-04-09 Thread NetNeanderthal
On 4/9/06, Vijay Sankar [EMAIL PROTECTED] wrote: Leonardo Rodrigues wrote: Looks like you may want to do a rdr pass since otherwise you are doing a block drop in quick to all priv_nets and your W2K3 server is on one of those nets. Unless you're assuming the connection was sourced from

Re: PF and MS RDP trouble (help!)

2006-04-09 Thread Leonardo Rodrigues
Thanks for the tips, I was able to log the redirection rules and trace the problem. And there was none at all! PF was working perfectly. The packets were being redirected but I was getting no answer from the 2k3. So, I phoned the sys admin, chatted a little, and found out that he didn't set a