Re: outgoing divert-to

2011-08-05 Thread Claudio Jeker
On Thu, Aug 04, 2011 at 05:13:01PM -0400, Jiri B wrote: > Hello, > > it is not possible to make use of outgoing traffic with 'divert-to'? No it is not, because the pf_test() in the outgoing path happens to late to be able to divert the packet back to a socket. Some massive changes to pf and the n

outgoing divert-to

2011-08-04 Thread Jiri B
Hello, it is not possible to make use of outgoing traffic with 'divert-to'? # echo 'pass in quick log(all) inet proto tcp to 89.0.0.0/8 divert-to 127.0.0.1 port ' | pfctl - -nf - @0 pass in log (all) quick inet proto tcp from any to 89.0.0.0/8 flags S/SA divert-to 127.0.0.1 p