Re: forwarding loop

Article View: bit.listserv.openbsd-pf

Article #243

Back to bit.listserv.openbsd-pf Previous Next

#243

From: Daniel Hartmeier
Date: Mon, 14 Jan 2013 10:05

18 lines
1743 bytes

On Sat, Jan 12, 2013 at 08:03:41AM +0100, Leslie Jensen wrote:

> New suggested rule that gives syntax error
> # rdr in on $int_if inet proto tcp from ! $proxy to any port
> $proxy_services -> $proxy $proxyport tag rdr_proxy

1) Remove "in" (rdr implies incoming direction)
2) Remove "tag rdr_proxy" (newer OpenBSD syntax, not needed here)
3) Add "port" after the "->" part (not optional)

So it reads:

rdr on $int_if inet proto tcp from ! $proxy to any port $proxy_services -> $proxy port $proxyport

Which loads fine for me on 8.3-RELEASE-p4.

HTH,
Daniel

Technical Details

Message-ID: <20130114095023.GC8895@insomnia.benzedrine.cx>

Path:

arc1-ca.pugleaf.net!s9ni7529pbb.0!nntp.google.com!border1.nntp.dca.giganews.com!backlog1.nntp.ams.giganews.com!border3.nntp.ams.giganews.com!border1.nntp.ams.giganews.com!nntp.giganews.com!news.nobody.at!feeder.erje.net!eu.feeder.erje.net!news2.arglkargh.de!news.glorb.com!npeer02.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn

References: <50F10ACD.9090605@eskk.nu>

Show Full Headers

Complete Article Headers

X-Google-Thread: bffa70e3,65dda175aebfa248
X-Google-Attributes: gidbffa70e3,public,usenet
X-Google-NewGroupId: yes
X-Google-Language: ENGLISH,ASCII-7-bit
X-Received: by 10.66.84.164 with SMTP id a4mr2134223paz.26.1358655004054;
        Sat, 19 Jan 2013 20:10:04 -0800 (PST)
Path: arc1-ca.pugleaf.net!s9ni7529pbb.0!nntp.google.com!border1.nntp.dca.giganews.com!backlog1.nntp.ams.giganews.com!border3.nntp.ams.giganews.com!border1.nntp.ams.giganews.com!nntp.giganews.com!news.nobody.at!feeder.erje.net!eu.feeder.erje.net!news2.arglkargh.de!news.glorb.com!npeer02.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn
From: daniel@benzedrine.cx (Daniel Hartmeier)
Newsgroups: bit.listserv.openbsd-pf
Subject: Re: forwarding loop
Date: 14 Jan 2013 02:05:29 -0800
Organization: None
Lines: 18
Message-ID: <20130114095023.GC8895@insomnia.benzedrine.cx>
References: <50F10ACD.9090605@eskk.nu>
NNTP-Posting-Host: localhost.newsguy.com
Mime-Version: 1.0
NNTP-Posting-Date: 14 Jan 2013 10:05:30 GMT
X-Received-Bytes: 1121
Bytes: 1457
X-Original-Bytes: 1353
Content-Type: text/plain; charset=us-ascii

Reply to Parent Message