From owner-freebsd-net@FreeBSD.ORG  Mon Apr 16 12:04:36 2007
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
X-Original-To: freebsd-net@freebsd.org
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id B136016A400
	for <freebsd-net@freebsd.org>; Mon, 16 Apr 2007 12:04:36 +0000 (UTC)
	(envelope-from tarkhil@webmail.sub.ru)
Received: from mail.sub.ru (mail.sub.ru [88.212.205.2])
	by mx1.freebsd.org (Postfix) with SMTP id 7E5B913C487
	for <freebsd-net@freebsd.org>; Mon, 16 Apr 2007 12:04:35 +0000 (UTC)
	(envelope-from tarkhil@webmail.sub.ru)
Received: (qmail 32157 invoked from network); 16 Apr 2007 16:09:54 +0400
Received: from unknown (HELO localhost) (88.212.205.2)
	by mail.sub.ru with SMTP; 16 Apr 2007 16:09:54 +0400
X-Virus-Scanned: by amavisd-new at mail.sub.ru
Received: from unknown ([88.212.205.2])
	by localhost (mail-new.sub.ru [88.212.205.2]) (amavisd-new, port 10024)
	with SMTP id IkhZ0ngjzxOi; Mon, 16 Apr 2007 16:09:51 +0400 (MSD)
Received: from unknown (HELO ?192.168.139.47?) (tarkhil%sub.ru@192.168.139.47)
	by techno.sub.ru with SMTP; 16 Apr 2007 12:09:50 -0000
Message-ID: <46236649.7000406@webmail.sub.ru>
Date: Mon, 16 Apr 2007 16:04:25 +0400
From: Alex Povolotsky <tarkhil@webmail.sub.ru>
User-Agent: Thunderbird 1.5.0.9 (X11/20070104)
MIME-Version: 1.0
To: Max Laier <max@love2party.net>
References: <46226AD3.3030806@webmail.sub.ru>
	<200704161359.26059.max@love2party.net>
In-Reply-To: <200704161359.26059.max@love2party.net>
Content-Type: text/plain; charset=KOI8-R; format=flowed
Content-Transfer-Encoding: 7bit
Cc: freebsd-net@freebsd.org
Subject: Re: Please help with PF-based redirector
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Apr 2007 12:04:36 -0000

Max Laier wrote:
> On Sunday 15 April 2007 20:11, Alex Povolotsky wrote:
>   
>> Hello!
>>
>> I'm trying to set up a box as round-robin TCP proxy. Of course, I'm
>> trying to do everything on kernel-level.
>>
>> This simple setup
>>
>> rdr on sk0 proto tcp from any to any port = smtp -> <outbound> port 25
>> round-robin
>>
>> should work. At least, I thought so.
>>
>> However, attempt to connect to port 25 yielded unexpected result. pfctl
>> -s state shows
>>
>> self tcp 89.108.94.212:25 <- 89.108.94.91:25 <-
>> 89.108.94.211:56975       CLOSED:SYN_SENT
>>     
>
> Your test hosts seem to be on the same subnet.  This does not work as you 
> seems to think.  In the same broadcast domain it is not possible for the 
> pf box to forward the packet on behalf of the sending host (otherwise it 
> would confuse the recipient or the switch).  Instead it emits icmp 
> redirects which are ignored in a normal setup.
>
> You have to separate the two networks in order for redirect to work the 
> way you want it to.
>   

Okay, thanks a lot, I'll give a try

Alex.