From owner-freebsd-questions@FreeBSD.ORG  Sat Jan 14 17:58:02 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 8B30016A41F;
	Sat, 14 Jan 2006 17:58:02 +0000 (GMT) (envelope-from leon@trusc.net)
Received: from cluster1.trusc.net (clgw.trusc.net [196.25.95.198])
	by mx1.FreeBSD.org (Postfix) with ESMTP id F17D243D46;
	Sat, 14 Jan 2006 17:58:00 +0000 (GMT) (envelope-from leon@trusc.net)
Received: from [192.168.255.25]
	by cluster1.trusc.net (Exim 4.60 0 (FreeBSD 5.3)) protocol: esmtp
	id 1Expes-000Pod-Ip ; Sat, 14 Jan 2006 19:57:52 +0200
Message-ID: <43C93B80.7080406@trusc.net>
Date: Sat, 14 Jan 2006 19:57:20 +0200
From: Leon Botes <leon@trusc.net>
Organization: TruscTechnologies
User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: freebsd-questions@freebsd.org,  freebsd-pf@freebsd.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Spam-Score: -1.4 (-)
Cc: 
Subject: What is wrong with these pf rules?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: leon@trusc.net
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 14 Jan 2006 17:58:02 -0000

binat on $dig_if from $dmz_srv to any -> $dig_ip2
binat on $dsl1_if from $dmz_srv to any -> $dsl1_ip2
binat on $dsl2_if from $dmz_srv to any -> $dsl2_ip2
rdr on $dig_if inet proto tcp from any to $dig_ip2 port { 25, 80, 81, 
110 } -> $dmz_srv
rdr on $dsl1_if inet proto tcp from any to $dsl1_ip2 port { 25, 80, 110 
} -> $dmz_srv
rdr on $dsl2_if inet proto tcp from any to $dsl2_ip2 port { 25, 80, 110 
} -> $dmz_srv

$dig_if, $dsl1_if, dsl2_if are all connected to the net via routers.
The rule works for whichever interface the default route points to.
How can i get pf to return incoming connections out the same interface 
they arrived on?

-- 
Regards
Leon