From owner-freebsd-pf@FreeBSD.ORG Sat Jan 12 07:23:10 2008 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E1AA016A419 for ; Sat, 12 Jan 2008 07:23:10 +0000 (UTC) (envelope-from fox@verio.net) Received: from dfw-smtpout2.email.verio.net (dfw-smtpout2.email.verio.net [129.250.36.42]) by mx1.freebsd.org (Postfix) with ESMTP id BE87B13C448 for ; Sat, 12 Jan 2008 07:23:10 +0000 (UTC) (envelope-from fox@verio.net) Received: from [129.250.36.64] (helo=dfw-mmp4.email.verio.net) by dfw-smtpout2.email.verio.net with esmtp id 1JDahy-0005s5-8e for freebsd-pf@freebsd.org; Sat, 12 Jan 2008 07:23:10 +0000 Received: from [129.250.40.241] (helo=limbo.int.dllstx01.us.it.verio.net) by dfw-mmp4.email.verio.net with esmtp id 1JDahy-0000Rx-5J for freebsd-pf@freebsd.org; Sat, 12 Jan 2008 07:23:10 +0000 Received: by limbo.int.dllstx01.us.it.verio.net (Postfix, from userid 1000) id E50598E296; Sat, 12 Jan 2008 01:23:07 -0600 (CST) Date: Sat, 12 Jan 2008 01:23:07 -0600 From: David DeSimone To: freebsd-pf@freebsd.org Message-ID: <20080112072307.GB25623@verio.net> Mail-Followup-To: freebsd-pf@freebsd.org References: <4784F7E3.3060508@rodhouse.org> <1199919114.59461.10.camel@xenon> <1a5f1a2d0801100501j664f6b81sebe866b986a05500@mail.gmail.com> <1199977668.36543.12.camel@xenon> <1a5f1a2d0801100910r1316d24dibb2b12720dfda207@mail.gmail.com> <1200009515.36543.27.camel@xenon> <1a5f1a2d0801101837r338b5453m7a8f673e3b03833e@mail.gmail.com> <1200021436.36543.40.camel@xenon> <1a5f1a2d0801110518i398793a9u84a4c8924f62bcde@mail.gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii; x-action=pgp-signed Content-Disposition: inline In-Reply-To: <1a5f1a2d0801110518i398793a9u84a4c8924f62bcde@mail.gmail.com> Precedence: bulk User-Agent: Mutt/1.5.9i Subject: Re: Forwarding another host X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Jan 2008 07:23:11 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rodrique Heron wrote: > > Yep! I understand perfectly, now is there anything I can do on the pix side > to allow the traffic back to HOST-A ? This seems the wrong question to ask. Shouldn't you instead be wondering, how can you get the PIX to forward connections to HOST-B instead of to HOST-A? The PIX is a full firewall with NAT features, so it can perform the NAT instead of your BSD box, and since it is the default gateway for return traffic, will have no trouble applying the translation in both directions. I realize this is a FreeBSD mailng list, but you should go for the simplest solution, because complex solutions tend to fail in complex ways. - -- David DeSimone == Network Admin == fox@verio.net "This email message is intended for the use of the person to whom it has been sent, and may contain information that is confidential or legally protected. If you are not the intended recipient or have received this message in error, you are not authorized to copy, dis- tribute, or otherwise use this message or its attachments. Please notify the sender immediately by return e-mail and permanently delete this message and any attachments. Verio, Inc. makes no warranty that this email is error or virus free. Thank you." --Lawyer Bot 6000 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFHiGrbFSrKRjX5eCoRAma/AJwJUY1t0WL7C0b1S5M+IDAvFdODTwCdGcH/ nVtNURikbji5A9RMtPI3DoE= =S5sQ -----END PGP SIGNATURE-----