From owner-freebsd-security Tue Jul 4 7:43:45 2000 Delivered-To: freebsd-security@freebsd.org Received: from ns1.via-net-works.net.ar (ns1.via-net-works.net.ar [200.10.100.10]) by hub.freebsd.org (Postfix) with ESMTP id 7692337B5A2 for ; Tue, 4 Jul 2000 07:43:40 -0700 (PDT) (envelope-from fpscha@ns1.via-net-works.net.ar) Received: (from fpscha@localhost) by ns1.via-net-works.net.ar (8.9.3/8.9.3) id LAA02739; Tue, 4 Jul 2000 11:41:34 -0300 (GMT) From: Fernando Schapachnik Message-Id: <200007041441.LAA02739@ns1.via-net-works.net.ar> Subject: Re: Forward to next hop in ipf In-Reply-To: from "Andrey V. Sokolov" at "Jul 4, 0 06:05:13 pm" To: abc@nns.ru (Andrey V. Sokolov) Date: Tue, 4 Jul 2000 11:41:34 -0300 (GMT) Cc: freebsd-security@FreeBSD.ORG Reply-To: Fernando Schapachnik X-Mailer: ELM [version 2.4ME+ PL40 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org En un mensaje anterior, Andrey V. Sokolov escribió: [Charset koi8-r unsupported, filtering to ASCII...] > IMHO "fastroute" is option for make a stealth forwarding without a ttl > decrementing. You are right. > I have tested "to" option > default gateway is 192.168.0.1 > The config string is: > pass out log quick on ed0 to 192.168.0.2 from 192.168.0.2/32 to any > where 192.168.0.2 is my new gateway, but it didn't works! From the ipf how-to: you would be better off with something like: block out log quick on ed0 to from /32 to any You will be blocking the normal packet and deviating the original one to . Besides, I can't see the point of "to 192.168.0.2 from 192.168.0.2". Good luck! Fernando P. Schapachnik Administración de la red VIA NET.WORKS ARGENTINA S.A. fernando@via-net-works.net.ar (54-11) 4323-3333 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message