From owner-freebsd-security  Tue Jul  4  8: 2:33 2000
Delivered-To: freebsd-security@freebsd.org
Received: from gera.nns.ru (gera.nns.ru [195.230.79.10])
	by hub.freebsd.org (Postfix) with ESMTP id 4E54537B7D7
	for <freebsd-security@FreeBSD.ORG>; Tue,  4 Jul 2000 08:02:26 -0700 (PDT)
	(envelope-from abc@nns.ru)
Received: from falcon.nns.ru (daemon@falcon.nns.ru [195.230.79.70])
	by gera.nns.ru (8.9.3/8.9.3) with ESMTP id TAA28088
	for <freebsd-security@FreeBSD.ORG>; Tue, 4 Jul 2000 19:02:20 +0400 (MSD)
	(envelope-from abc@nns.ru)
Received: from localhost (abc@localhost [127.0.0.1])
	by falcon.nns.ru (8.9.3/8.9.3) with ESMTP id TAA30025
	for <freebsd-security@FreeBSD.ORG>; Tue, 4 Jul 2000 19:02:20 +0400 (MSD)
	(envelope-from abc@nns.ru)
Date: Tue, 4 Jul 2000 19:02:20 +0400 (MSD)
From: "Andrey V. Sokolov" <abc@nns.ru>
X-Sender: abc@localhost
To: freebsd-security@FreeBSD.ORG
Subject: Re: Forward to next hop in ipf
In-Reply-To: <200007041441.LAA02739@ns1.via-net-works.net.ar>
Message-ID: <Pine.BSF.4.21.0007041844000.28761-100000@localhost>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=koi8-r
Content-Transfer-Encoding: 8BIT
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

On Tue, 4 Jul 2000, Fernando Schapachnik wrote:

> > I have tested "to" option
> > default gateway is 192.168.0.1
> > The config string is:
> > pass out log quick on ed0 to 192.168.0.2 from 192.168.0.2/32 to any
> > where 192.168.0.2 is my new gateway, but it didn't works!
Excuse me! I make a mistake in the previous letter! ;-)
The config string is:
pass out log quick on ed0 to 192.168.0.2 from 192.168.0.3/32 to any
where 192.168.0.2 is my new gateway and 192.168.0.3/32 is ip-address of
the my host!
> 
> >From the ipf how-to: you would be better off with something like:
> 
> block out log quick on ed0 to <iface> from <ip>/32 to any
> 
> You will be blocking the normal packet and deviating the original one 
> to <iface>. Besides, I can't see the point of "to 192.168.0.2 from 
> 192.168.0.2".
> 
> Good luck!
> 
> 
> Fernando P. Schapachnik
> Administración de la red
> VIA NET.WORKS ARGENTINA S.A.
> fernando@via-net-works.net.ar
> (54-11) 4323-3333
> 





To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message