Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 13 Apr 2007 15:44:57 +0400
From:      Alex Povolotsky <tarkhil@webmail.sub.ru>
To:        FreeBSD-Net mailing list <freebsd-net@freebsd.org>
Subject:   redirecting pf example
Message-ID:  <461F6D39.2020407@webmail.sub.ru>

next in thread | raw e-mail | index | archive | help
Hello!

I'm trying to set up a box as round-robin TCP proxy. Of course, I'm 
trying to do everything on kernel-level.

This simple setup

rdr on sk0 proto tcp from any to any port = smtp -> <outbound> port 25 
round-robin

should work. At least, I thought so.

However, attempt to connect to port 25 yielded unexpected result. pfctl 
-s state shows

self tcp 89.108.94.212:25 <- 89.108.94.91:25 <- 
89.108.94.211:56975       CLOSED:SYN_SENT

connection never established, and no IP packet ever sends out to 
89.108.94.212:25

I don't understand this thing. Maybe someone can point me to my error?

(firewall rules a quite permissive, in fact, they are pass in quick and 
pass out quick for all interfaces. attempt to telnet to port 25 outside 
works ok)

Alex.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?461F6D39.2020407>