Article View: bit.listserv.openbsd-pf
Article #239Apparent problem with divert-to rule parsing
From: gpontis
Date: Mon, 19 Nov 2012 09:36
Date: Mon, 19 Nov 2012 09:36
16 lines
1529 bytes
1529 bytes
While porting a 4.9 pf.conf to 5.2 I came across something that looks like it might be a bug. The affected line was the pass in rule to send forward FTP requests to the proxy on the firewall. The following rule would not load: pass in quick on $IntIf inet proto tcp to port ftp divert-to lo0 port 8021 The error message was: pf.conf:207: address family mismatch for divert If lo0 is replaced with 127.0.0.1 then it loads and works correctly. However, 127.0.0.1 is properly substituted for lo0 when using rdr-to. George
Technical Details
Message-ID:
<20121119000258.bb7gb148u8oswo8k-tcbagvf@webmail.spamcop.net>Path:
arc1-ca.pugleaf.net!s9ni23758pbb.0!nntp.google.com!npeer02.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrnShow Full Headers
Complete Article Headers
X-Google-Thread: ff4ef,3422c1dba823ab13,start
X-Google-NewGroupId: yes
X-Google-Attributes: gidbffa70e3,domainid0,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
Received: by 10.66.81.98 with SMTP id z2mr2660521pax.19.1353317817320;
Mon, 19 Nov 2012 01:36:57 -0800 (PST)
Path: arc1-ca.pugleaf.net!s9ni23758pbb.0!nntp.google.com!npeer02.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn
From: gpontis@spamcop.net
Newsgroups: bit.listserv.openbsd-pf
Subject: Apparent problem with divert-to rule parsing
Date: 19 Nov 2012 01:36:54 -0800
Organization: None
Lines: 16
Message-ID: <20121119000258.bb7gb148u8oswo8k-tcbagvf@webmail.spamcop.net>
NNTP-Posting-Host: c-98-207-205-23.hsd1.ca.comcast.net
Mime-Version: 1.0
NNTP-Posting-Date: 19 Nov 2012 09:36:55 GMT
X-Received-Bytes: 1153
Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Transfer-Encoding: 7bit