From owner-freebsd-pf@FreeBSD.ORG  Tue Nov 29 23:56:34 2005
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
X-Original-To: freebsd-pf@freebsd.org
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 68AD416A422
	for <freebsd-pf@freebsd.org>; Tue, 29 Nov 2005 23:56:34 +0000 (GMT)
	(envelope-from forrie@forrie.com)
Received: from forrie.com (c-24-62-224-187.hsd1.nh.comcast.net [24.62.224.187])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 231E043E1E
	for <freebsd-pf@freebsd.org>; Tue, 29 Nov 2005 23:54:15 +0000 (GMT)
	(envelope-from forrie@forrie.com)
Received: from [192.168.1.98] (monster.forrie.com [192.168.1.98])
	(authenticated bits=0)
	by forrie.com (8.13.4/8.13.4) with ESMTP id jATNs4fU013715
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Tue, 29 Nov 2005 18:54:04 -0500 (EST)
	(envelope-from forrie@forrie.com)
Message-ID: <438CEA8E.1060109@forrie.com>
Date: Tue, 29 Nov 2005 18:55:58 -0500
From: Forrest Aldrich <forrie@forrie.com>
User-Agent: Thunderbird 1.5 (Windows/20051129)
MIME-Version: 1.0
To: Daniel Hartmeier <daniel@benzedrine.cx>
References: <438CE6CA.2030508@forrie.com>
	<20051129234513.GG23781@insomnia.benzedrine.cx>
In-Reply-To: <20051129234513.GG23781@insomnia.benzedrine.cx>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: ClamAV 0.87/1198/Tue Nov 29 05:05:20 2005 on server.forrie.com
X-Virus-Status: Clean
Cc: freebsd-pf@freebsd.org
Subject: Re: Variable parsing difference between OpenBSD and FreeBSD?
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 29 Nov 2005 23:56:34 -0000

Interestingly, when I "nmap" my server (public ip) from the private 
network, I find SSH.

Which, ironically, is the ONLY service I don't have configured or 
redirected in the pf.conf file.



Daniel Hartmeier wrote:
> On Tue, Nov 29, 2005 at 06:39:54PM -0500, Forrest Aldrich wrote:
>
>   
>> On FreeBSD-6-STABLE if I use:
>>
>> tcp_services = "imap imaps http https"
>> rdr pass on $ext_if inet proto tcp from any to $ext_ad \
>>   port { $tcp_services } -> $server
>>
>> it fails.
>>     
>
> I can't confirm that, it works for me (substituting $ext_if, $ext_ad and
> $server with simple values) on 6-release and -stable. What error do you
> get, precisely? Are you sure $tcp_services is the only difference to
> your working ruleset?
>
> Daniel
>