From owner-freebsd-questions@FreeBSD.ORG Tue Sep 25 22:22:14 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E672416A417 for ; Tue, 25 Sep 2007 22:22:14 +0000 (UTC) (envelope-from fbsd.questions@rachie.is-a-geek.net) Received: from snoogles.rachie.is-a-geek.net (rachie.is-a-geek.net [66.230.99.27]) by mx1.freebsd.org (Postfix) with ESMTP id A8E2D13C45D for ; Tue, 25 Sep 2007 22:22:14 +0000 (UTC) (envelope-from fbsd.questions@rachie.is-a-geek.net) Received: from localhost (localhost [127.0.0.1]) by snoogles.rachie.is-a-geek.net (Postfix) with ESMTP id AE7191CDEE for ; Tue, 25 Sep 2007 14:22:13 -0800 (AKDT) From: Mel To: freebsd-questions@freebsd.org Date: Wed, 26 Sep 2007 00:22:12 +0200 User-Agent: KMail/1.9.7 References: <200709250946.58855.freebsd@dfwlp.com> In-Reply-To: <200709250946.58855.freebsd@dfwlp.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200709260022.12432.fbsd.questions@rachie.is-a-geek.net> Subject: Re: pf redirect question X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Sep 2007 22:22:15 -0000 On Tuesday 25 September 2007 16:46:58 Jonathan Horne wrote: > i have a server at my office i need to decomission, only problem, there are > a handful of client that are still talking to it. > > i was wondering if it feasable to down the server, take its IP and stick it > on our FreeBSD server, and then use pf with rdr statements to redirect any > traffic from stragglers to the service on the other new server? > > i was trying to to proof it with a line like this in my pf.conf on my > laptop: > > rdr on $ext_if proto tcp from any to $ext_if port 80 -> 10.22.192.131 port > 8080 > > just to see if i could get an http request to my laptop to redirect over to > the 8080 on the other ip, but so far nothing. > > a) is what im trying to do... tcpifically possible? Yes, but a network layout would help. Also, why not put the old IP on the new machine? -- Mel