From owner-freebsd-pf@FreeBSD.ORG Mon Jan 21 16:32:15 2008 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 454BF16A419 for ; Mon, 21 Jan 2008 16:32:15 +0000 (UTC) (envelope-from doug@polands.org) Received: from hrndva-omtalb.mail.rr.com (hrndva-omtalb.mail.rr.com [71.74.56.123]) by mx1.freebsd.org (Postfix) with ESMTP id 076DF13C4D9 for ; Mon, 21 Jan 2008 16:32:14 +0000 (UTC) (envelope-from doug@polands.org) Received: from corinth.polands.org ([75.87.219.217]) by hrndva-omta06.mail.rr.com with ESMTP id <20080121161705.LGWK2392.hrndva-omta06.mail.rr.com@corinth.polands.org> for ; Mon, 21 Jan 2008 16:17:05 +0000 Received: from omnihp.polands.org (ammon.polands.org [172.16.1.7]) by corinth.polands.org (8.13.8/8.13.8) with ESMTP id m0LGH4T6035598 for ; Mon, 21 Jan 2008 10:17:04 -0600 (CST) (envelope-from doug@polands.org) Message-ID: <4794C5A8.8040402@polands.org> Date: Mon, 21 Jan 2008 10:17:44 -0600 From: Doug Poland User-Agent: Thunderbird 2.0.0.9 (X11/20071117) MIME-Version: 1.0 To: freebsd-pf@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: ClamAV 0.88.4/5507/Mon Jan 21 08:34:07 2008 on corinth.polands.org X-Virus-Status: Clean Subject: pf how-to: Single public IP --> many private NAT'd HTTPS servers X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jan 2008 16:32:15 -0000 Hello, I've googled, read pf.conf(5) and the pf tutorial/faq, and experimented, but a working configuration eludes me. Here's my environment: Firewall: FreeBSD 6.2-STABLE pf 1 public (routable) IP address HTTPS: FreeBSD 7.0-PRERELEASE Listening on 3 private (RFC-1918) IPs Apache22 w/SSL and name-based virtual hosts I would like to redirect incoming https traffic to a specific https server. So far, I've experimented with various rdr options pf.conf. I've even tried to create an address pool, but to no avail. This is a rather high-level explanation and I didn't want to clutter this email with pf/DNS/apache syntax that is not working. I'm open to other solutions if pf is not capable of doing the job. I have an idea of how apache and mod_rewrite "might" get me there but wanted to try pf first. -- Regards, Doug