[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: PF parsing problem?



MzOzD wrote:

Hello,

I *think* there is a parsing problem in pf. Consider the following rule:


rdr on $ext_if inet proto tcp from <outside_to_ssh> to $ext_if port 6620 -> 192.168.10.2 port 22


where outside_to_ssh is the following table:

table <outside_to_ssh> persist file "/etc/pf/conf/outside_to_ssh", containing a single entry -> 0.0.0.0/0

The redirect rule is not working when 0.0.0.0/0 is defined in a table (any type of table).

On the contrary,

rdr on $ext_if inet proto tcp from 0.0.0.0/0 to $ext_if port 6620 -> 192.168.10.2 port 22 works fine.


Hi MzOzd,

This is covered in the archives. Please see this post: http://tinyurl.com/2g9rt [groups.google.com]

I have this on my "todo" list for inclusion in the faq as it's come up a couple times now.



.joel