From owner-freebsd-pf@FreeBSD.ORG Sun Jan 2 21:57:04 2011 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8515D1065679 for ; Sun, 2 Jan 2011 21:57:04 +0000 (UTC) (envelope-from jay@experts-exchange.com) Received: from mail.experts-exchange.com (mail.experts-exchange.com [72.29.183.251]) by mx1.freebsd.org (Postfix) with ESMTP id 61EDF8FC0A for ; Sun, 2 Jan 2011 21:57:04 +0000 (UTC) Received: from mail.experts-exchange.com (localhost [127.0.0.1]) by mail.experts-exchange.com (Postfix) with ESMTP id DFBBCCA74F6; Sun, 2 Jan 2011 13:57:03 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d= experts-exchange.com; h=content-transfer-encoding:content-type :content-type:mime-version:user-agent:from:from:subject:subject :date:date:references:in-reply-to:message-id:received:received :received; s=ee; t=1294005423; x=1295819823; bh=tusx0b8yVZ8B45xO IfwovB80felXClB2B96fcs32QMk=; b=Z+FqsLgjDQ5F4Ln2XeQDFAzsD1J04HRF 6cJsP8ZGUr38etpO+1OBBju5itTWyg5p5leRVQ5epPThQkuRtMCH8YIyJAeymsvH C3U3I2Dc0DKTR8TLnDlS5PEU+G50SwU239pIQMR+lDBoxAd7g+516PMxauCUH9Pm CERD+SY5ikM= X-Virus-Scanned: amavisd-new at experts-exchange.com Received: from mail.experts-exchange.com ([127.0.0.1]) by mail.experts-exchange.com (mail.experts-exchange.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4z9sh15nUmkL; Sun, 2 Jan 2011 13:57:03 -0800 (PST) Received: from mail.experts-exchange.com (localhost [127.0.0.1]) by mail.experts-exchange.com (Postfix) with ESMTP id 9FEE5CA74D5; Sun, 2 Jan 2011 13:57:03 -0800 (PST) Received: from 24.205.246.163 (SquirrelMail authenticated user jay) by mail.experts-exchange.com with HTTP; Sun, 2 Jan 2011 13:57:03 -0800 Message-ID: <4aff223f1053b2cf89f32eb89a184643.squirrel@mail.experts-exchange.com> In-Reply-To: <4D20DD02.2090605@my.gd> References: <8fb3caa1300a9fcc5c2f23a70ade23a8.squirrel@mail.experts-exchange.com> <4D208AE2.6000402@my.gd> <3020c1e8b0ecb5e9bacb1033ddea2b3e.squirrel@mail.experts-exchange.com> <4D20BAEB.10101@my.gd> <5275a39aa1849d38d509a42b627dd4b0.squirrel@mail.experts-exchange.com> <4D20DD02.2090605@my.gd> Date: Sun, 2 Jan 2011 13:57:03 -0800 From: jay@experts-exchange.com To: "Damien Fleuriot" User-Agent: SquirrelMail/1.4.20 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Cc: freebsd-pf@freebsd.org Subject: Re: transparent proxy X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 02 Jan 2011 21:57:04 -0000 Is there a way to see what the rule is doing? It didn't have any effect. I've been trying different combinations, sometimes targeting 192.168.103.2. One test locked up the host. > On 1/2/11 9:04 PM, jay@experts-exchange.com wrote: >> Here I want : >> >> nn:nn:nn.nnnnnn IP 127.0.0.1.51791 > 192.168.103.2.80: Flags [S], ack >> ... >> >> int_if="lo0" >> ext_if="ed0" >> >> pass in on $int_if route-to ($int_if 127.0.0.1) from 192.168.103.1 keep >> state >> >> But no good (it's not able to sync) : >> > > How do things go when using synproxy in your pass rule ? > > Something like: pass in log on $int_if route-to ($int_if 127.0.0.1) from > 192.168.103.1 synproxy state > >