From owner-freebsd-pf@FreeBSD.ORG Sat Aug 19 07:04:38 2006 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 6050016A4DA for ; Sat, 19 Aug 2006 07:04:38 +0000 (UTC) (envelope-from ozgur.ozdemircili@gmail.com) Received: from wx-out-0506.google.com (wx-out-0506.google.com [66.249.82.225]) by mx1.FreeBSD.org (Postfix) with ESMTP id E6B1943D4C for ; Sat, 19 Aug 2006 07:04:37 +0000 (GMT) (envelope-from ozgur.ozdemircili@gmail.com) Received: by wx-out-0506.google.com with SMTP id i27so906483wxd for ; Sat, 19 Aug 2006 00:04:37 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:user-agent:x-accept-language:mime-version:to:subject:content-type:content-transfer-encoding; b=UlhJd+S282b8AvLeZZq4QwhZqG0btlo+CBRA6Ao4vcQuqq8zXcbTiPZQa+G53t7NdXYUTYAmUTA2BffBzUnUm2zqhnF2lkmMXnC9XXHAs+f4Qo60pW0+rYLez1zcsDj3Vsp99eWvwwUvY1Ju2R0SzL9xc0BR8GwYhXEbPM2N7DU= Received: by 10.70.69.11 with SMTP id r11mr6074783wxa; Sat, 19 Aug 2006 00:04:36 -0700 (PDT) Received: from ?192.168.10.102? ( [212.156.215.120]) by mx.gmail.com with ESMTP id 8sm15306wra.2006.08.19.00.04.32; Sat, 19 Aug 2006 00:04:35 -0700 (PDT) Message-ID: <44E6FD75.1050205@gmail.com> Date: Sat, 19 Aug 2006 10:00:53 -0200 From: Ozgur Ozdemircili User-Agent: Debian Thunderbird 1.0.2 (X11/20060423) X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-pf@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Subject: Divert X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 19 Aug 2006 07:04:38 -0000 Hello, As an old ipfw user Im trying to switch my firewalls to pf.My network is as shown below: Clientnetwork ------ Freebsd fw ----- modem l l l l l l w2003 Rras------- I normally have rule on ipfw that lets my divert a port(for example 1863 ) into a win 2003 server machine which has routing and remote access enabled. This gives me the chance to sniff the copy of all the all the conversations in the network as a part of company policy. In ipfw I used: ipfw add divert $w2003 tcp from $clients to me eq 1863 How can I get this done in Pf? Thank you.