From owner-freebsd-hackers@FreeBSD.ORG Mon Dec 22 12:48:10 2014 Return-Path: Delivered-To: hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id EEFC6DC6 for ; Mon, 22 Dec 2014 12:48:09 +0000 (UTC) Received: from mail-yk0-x233.google.com (mail-yk0-x233.google.com [IPv6:2607:f8b0:4002:c07::233]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id AACBE32C1 for ; Mon, 22 Dec 2014 12:48:09 +0000 (UTC) Received: by mail-yk0-f179.google.com with SMTP id 19so2208651ykq.10 for ; Mon, 22 Dec 2014 04:48:08 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=IRjPxkaLojIP4XItc1fLvhFzU5jLyoVOdzBrvYqKFEk=; b=rhzavli74t5ntWNUdlaT8HxvbAUBvGb49aoMcD6L57eCkelV8pTOayMu2kupT9yZr8 pOv7Pg+ar4D6m610u4m+oxBsjzxy2Bi+Hs2mYN7GVFpZazWQuICNvaOnSc3an6qE+Ywq WWk9AkKU/lR7KL4h6RabAiuggehKzVORkkvECNC1rc7qOLbcAnZdgcbQYdEZ7lXARk43 I6tmCddPJf2bi8X1/hzdJueWatkV8ncy0DPfavNotzrKVlUf7btRbCQ08ZdT/f13we9g l8xU9dp8CEddbn9X7diPYLRawQ4mINFfq1GCj5rwF2rvlWIVpqVde5nad5Eam3yxGv+i NzhQ== MIME-Version: 1.0 X-Received: by 10.236.70.168 with SMTP id p28mr17465650yhd.86.1419252488727; Mon, 22 Dec 2014 04:48:08 -0800 (PST) Received: by 10.170.188.144 with HTTP; Mon, 22 Dec 2014 04:48:08 -0800 (PST) In-Reply-To: References: Date: Mon, 22 Dec 2014 12:48:08 +0000 Message-ID: Subject: Re: Fun with PF & redirection From: krad To: Stephen Hocking X-Mailman-Approved-At: Mon, 22 Dec 2014 14:15:52 +0000 Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 Cc: hackers@freebsd.org X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Dec 2014 12:48:10 -0000 should that be 5044:65334 rather than 65334:5044? also make sure you are not filtering ports 5044-65334 and that the $spoof_port isnt filtered On 21 December 2014 at 20:40, Stephen Hocking wrote: > Hi all, > > I'm using PF on a 10.1 box, and am trying to redirect a range of ports to a > single port, with a rule like this: > > rdr on $ext_if proto tcp from any to any port 65334:5044 -> $spoof_host > port $spoof_port > > spoof_host has been set to 127.0.0.1. > > This does not seem to work. Any ideas? > > > Stephen > _______________________________________________ > freebsd-hackers@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-hackers > To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org" >