Thanks for the tcpdump switches. I don't know what was going on with the switches that I was using, but when I used yours, I started to get debugging info, which revealed some strange behaviour.
>From there I started to re-read (again) the docs and found and tried TCP Proxying which worked like a charm. Next time I'll try to keep my posted rules to a minimum as requested. Thanks for the help. best regards, Reid --- Stuart Henderson <[EMAIL PROTECTED]> wrote: > On 2006/02/26 14:13, Reid Nichol wrote: > > > > inet ------ andrew ------ xander > > | > > ------------ users > > > > Everything is working, NAT, RDR for the other stuff, just not the > web > > server. I've tried some variations for rdr used rdr pass, etc, but > > nothing in the logs. I use: > > a simple 'tcpdump -n port 80' on xander will show if the packets > arrive > there or not. > > > Here is andrews pf.conf: > > rdr pass on $ext_if proto tcp from any to any port 80 -> $xander > port 80 > > I couldn't identify whether you were using the 'log' rules to debug > where a basic problem with the redirect lies, or whether the problem > is > that the logging isn't working. But this creates an implicit 'pass' > rule > so if it's the latter, you probably wanted to write 'rdr pass log'. > > Just my #0.02, but it's quite a complex ruleset to be looking at > while > debugging a problem. You might want to simplify and just use the bare > minimum rules for the problem you're trying to fix. It might help > illuminate the problem and, even if it doesn't, it's easier for > people > to help if they have fewer rules to read. Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
