[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: rdr pass, max-src-conn



On Wed, 7 Sep 2005 20:25:54 +0200
Daniel Hartmeier <[email protected]> wrote:
> > rdr on $ext_if proto tcp from any to 1.2.3.4 port 80 -> 10.10.10.10
> > pass on $ext_if proto tcp from any to 1.2.3.4 port {80,3389}
> 
> Packets will have their destination address replaced with 10.10.10.10
> when filter rules are evaluated (translation always happens first).
> 
> So the pass rule needs to be "to 10.10.10.10" instead of "to 1.2.3.4".
Thanks I'll give this a go. Is there much chance of the two rules being
combined to a single rdr pass ( max-src-conn etc ) in the future?
-- 
http://edd.link9.net - http://irc.is-cool.net