From owner-freebsd-pf@FreeBSD.ORG Fri Oct 13 09:13:56 2006 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2844216A407 for ; Fri, 13 Oct 2006 09:13:56 +0000 (UTC) (envelope-from solinym@gmail.com) Received: from py-out-1112.google.com (py-out-1112.google.com [64.233.166.179]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2DA9C43D5E for ; Fri, 13 Oct 2006 09:13:53 +0000 (GMT) (envelope-from solinym@gmail.com) Received: by py-out-1112.google.com with SMTP id o67so970182pye for ; Fri, 13 Oct 2006 02:13:52 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=rhXhWPy2AqjJEPLypNI6bvd1T5Nr7MSrkdMkIXWdJPJ6LbW91iimjmcY8ser+UcJYRlF5feOcWLA9y+hIqcHcz+8S4UZ9xOCTgiEQo/mKtRiqMPamcDW2L4iJrFScAPpxE7pcwSxj4ypGEofNJrPynUdic+En1X9qPPJpVI4xfg= Received: by 10.35.21.9 with SMTP id y9mr5258681pyi; Fri, 13 Oct 2006 02:13:52 -0700 (PDT) Received: by 10.35.35.8 with HTTP; Fri, 13 Oct 2006 02:13:52 -0700 (PDT) Message-ID: Date: Fri, 13 Oct 2006 04:13:52 -0500 From: "Travis H." To: "B. Cook" In-Reply-To: <56217.24.161.8.173.1159492654.squirrel@mail.poklib.org> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <56217.24.161.8.173.1159492654.squirrel@mail.poklib.org> Cc: freebsd-pf@freebsd.org Subject: Re: Transparent proxy with ! and table issues.. X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Oct 2006 09:13:56 -0000 I know this has been a while, but I didn't see a proper response in the thread. I suspect that the gateway is unset or improperly set on the routes associated with the alias. I'm not familiar with squidclient, but It looks like all requests are going through the squid proxy. The common pattern seems to be that all the queries to .53 fail, and the only one to .52 succeeded. I'm not sure why you think any of these queries should _not_ go through the rdr rules, since they are all in and none are in , so they all match rdr rules. -- "The obvious mathematical breakthrough would be the development of an easy way to factor large prime numbers.'' [sic] -- Bill Gates -><- GPG fingerprint: 9D3F 395A DAC5 5CCC 9066 151D 0A6B 4098 0C55 1484