Subject: Re: HELP w/pf (was ipf, DHCP & postfix)
To: Pimin <pimin@rockhead.com>
From: Sigmund Skjelnes <skjelnes@robin.no>
List: netbsd-help
Date: 11/12/2006 10:03:22
Sat, 11,.11.2006 kl. 10.30 -0800, skrev Pimin:
> Tobias wrote:
> 
> > I don't think that kind of routing setup can be made with ipf.
> > The provider will only route traffic originating from it's own
> > ip address space due to spoofing issues.
> > It might work if you switch to pf. (there's a kernel module available)
> > Look at the pf.conf manual page and the reply-to keyword in
> > particular.
> >
> > -Tobias
> 
> I misstated the sequence, the traffic on the "cable" interface (tlp1) is 
> in response to incoming traffic on the "DSL" interface (tlp0).   I need 
> to redirect the packets with the "DSL" src addr to the "DSL" interface.
> These pf rules compile but, don't seem to do what I need:
> 
>     ext_if="tlp1"
>     int_if="re0"
>     dsl_if="tlp0"
>     dsl_ip="209.128.91.40/29"
>     
>     set debug loud
> 
>     pass out on $ext_if reply-to $dsl_if proto tcp from {$dsl_ip} to any  
>     pass out on $ext_if reply-to $dsl_if proto udp from {$dsl_ip} to any
> 
> Clues about what I'm doing wrong are appreicated.
> 
> TIA,
> Paul
> 
> 
> 
> >Pimin wrote:
> >
> >> Running NetBSD 3.0.1 & postfix 2.3.3.
> >> 
> >> Apologies if I'm in the wrong list, being incredible dense and/or not including relevant
> >> information.
> >> 
> >> I've appended the ipf settings for tlp1 (cable).  "Cable" is a DHCP connection.

------------------ snip, snip ----------------

Maybe it's an proxy server you need. Just an suggestion.

Cincerely,
Sigmund