Subject: Re: HELP w/pf (was ipf, DHCP & postfix)
To: Pimin <pimin@rockhead.com>
From: Sigmund Skjelnes <skjelnes@robin.no>
List: netbsd-help
Date: 11/12/2006 10:03:22
Sat, 11,.11.2006 kl. 10.30 -0800, skrev Pimin:
> Tobias wrote:
>
> > I don't think that kind of routing setup can be made with ipf.
> > The provider will only route traffic originating from it's own
> > ip address space due to spoofing issues.
> > It might work if you switch to pf. (there's a kernel module available)
> > Look at the pf.conf manual page and the reply-to keyword in
> > particular.
> >
> > -Tobias
>
> I misstated the sequence, the traffic on the "cable" interface (tlp1) is
> in response to incoming traffic on the "DSL" interface (tlp0). I need
> to redirect the packets with the "DSL" src addr to the "DSL" interface.
> These pf rules compile but, don't seem to do what I need:
>
> ext_if="tlp1"
> int_if="re0"
> dsl_if="tlp0"
> dsl_ip="209.128.91.40/29"
>
> set debug loud
>
> pass out on $ext_if reply-to $dsl_if proto tcp from {$dsl_ip} to any
> pass out on $ext_if reply-to $dsl_if proto udp from {$dsl_ip} to any
>
> Clues about what I'm doing wrong are appreicated.
>
> TIA,
> Paul
>
>
>
> >Pimin wrote:
> >
> >> Running NetBSD 3.0.1 & postfix 2.3.3.
> >>
> >> Apologies if I'm in the wrong list, being incredible dense and/or not including relevant
> >> information.
> >>
> >> I've appended the ipf settings for tlp1 (cable). "Cable" is a DHCP connection.
------------------ snip, snip ----------------
Maybe it's an proxy server you need. Just an suggestion.
Cincerely,
Sigmund