Article View: bit.listserv.openbsd-pf
Article #241Re: Apparent problem with divert-to rule parsing
From: gpontis
Date: Mon, 19 Nov 2012 17:05
Date: Mon, 19 Nov 2012 17:05
25 lines
1907 bytes
1907 bytes
> > The following rule would not load: > > > > pass in quick on $IntIf inet proto tcp to port ftp divert-to lo0 port > 8021 > > > > The error message was: > > > > pf.conf:207: address family mismatch for divert > > > > If lo0 is replaced with 127.0.0.1 then it loads and works correctly. > > However, 127.0.0.1 is properly substituted for lo0 when using rdr-to. > > > > George > > It would be nice if this worked, though it looks like it's non-trivial > to do (rdr-to is parsed in a different way to divert-to) - however, I'd > like to make sure that at least the documentation for ftp-proxy is > correct, did you find this rule in documentation somewhere? The only place where I found divert-to being referenced was in the ftp-proxy documentation, and it was shown with "127.0.0.1". It was I that made the switch to lo0, to be consistent with other rules in the pf.conf. Geo.
Technical Details
Message-ID:
<20121119113619.mggdavbeqsw04ksk-tcbagvf@webmail.spamcop.net>Path:
arc1-ca.pugleaf.net!s9ni25460pbb.0!nntp.google.com!news.glorb.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrnShow Full Headers
Complete Article Headers
X-Google-Thread: ff4ef,3422c1dba823ab13
X-Google-NewGroupId: yes
X-Google-Attributes: gidbffa70e3,domainid0,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
Received: by 10.66.88.200 with SMTP id bi8mr2809678pab.27.1353344734033;
Mon, 19 Nov 2012 09:05:34 -0800 (PST)
Path: arc1-ca.pugleaf.net!s9ni25460pbb.0!nntp.google.com!news.glorb.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn
From: gpontis@spamcop.net
Newsgroups: bit.listserv.openbsd-pf
Subject: Re: Apparent problem with divert-to rule parsing
Date: 19 Nov 2012 09:05:32 -0800
Organization: None
Lines: 25
Message-ID: <20121119113619.mggdavbeqsw04ksk-tcbagvf@webmail.spamcop.net>
NNTP-Posting-Host: c-98-207-205-23.hsd1.ca.comcast.net
Mime-Version: 1.0
NNTP-Posting-Date: 19 Nov 2012 17:05:33 GMT
X-Received-Bytes: 1520
Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Transfer-Encoding: 7bit