Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 23 Jan 2017 05:45:53 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-pf@FreeBSD.org
Subject:   [Bug 215041] [pf] Handshake to certain (fixed) hosts is dropped
Message-ID:  <bug-215041-17777-2HTuCH0kdZ@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-215041-17777@https.bugs.freebsd.org/bugzilla/>
References:  <bug-215041-17777@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=215041

Max <maximos@als.nnov.ru> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |maximos@als.nnov.ru

--- Comment #6 from Max <maximos@als.nnov.ru> ---
(In reply to bsd from comment #3)

int_if="em0"
ext_if="re0"

rdr on $int_if inet proto tcp from any to any port www -> 127.0.0.1 port 3128

pass in quick on $int_if route-to lo0 inet proto tcp from any to 127.0.0.1 port
3128 keep state
pass all


Why "route-to"?..
It's just 
 rdr pass on $int_if inet proto tcp from any to any port www -> 127.0.0.1 port
3128
or
 rdr on $int_if inet proto tcp from any to any port www -> 127.0.0.1 port 3128
 pass in quick on $int_if inet proto tcp from any to 127.0.0.1 port 3128
or
 rdr on $int_if inet proto tcp from any to any port www tag PROXY -> 127.0.0.1
port 3128
 pass in quick on $int_if tagged PROXY


And there is something weird in your pflog-filtered.pcap...

Can you show full network and PF configs? ...and bridge0 dump?

-- 
You are receiving this mail because:
You are the assignee for the bug.


Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-215041-17777-2HTuCH0kdZ>