Apparent problem with divert-to rule parsing

Thread View: bit.listserv.openbsd-pf

2 messages

[T] Back to Threads [V] Tree View [G] Group Articles

2 total messages Started by gpontis Mon, 19 Nov 2012 09:36

#239

Author: gpontis
Date: Mon, 19 Nov 2012 09:36

16 lines
1529 bytes

While porting a 4.9 pf.conf to 5.2 I came across something that looks  
like it might be a bug. The affected line was the pass in rule to send  
forward FTP requests to the proxy on the firewall.

The following rule would not load:

pass in quick on $IntIf inet proto tcp to port ftp divert-to lo0 port 8021

The error message was:

pf.conf:207: address family mismatch for divert

If lo0 is replaced with 127.0.0.1 then it loads and works correctly.  
However, 127.0.0.1 is properly substituted for lo0 when using rdr-to.

George

Re: Apparent problem with divert-to rule parsing

#240

Author: Stuart Henderson
Date: Mon, 19 Nov 2012 10:32

22 lines
1876 bytes

On 2012/11/19 00:02, gpontis@spamcop.net wrote:
> While porting a 4.9 pf.conf to 5.2 I came across something that looks
> like it might be a bug. The affected line was the pass in rule to
> send forward FTP requests to the proxy on the firewall.
> 
> The following rule would not load:
> 
> pass in quick on $IntIf inet proto tcp to port ftp divert-to lo0 port 8021
> 
> The error message was:
> 
> pf.conf:207: address family mismatch for divert
> 
> If lo0 is replaced with 127.0.0.1 then it loads and works correctly.
> However, 127.0.0.1 is properly substituted for lo0 when using rdr-to.
> 
> George

It would be nice if this worked, though it looks like it's non-trivial
to do (rdr-to is parsed in a different way to divert-to) - however, I'd
like to make sure that at least the documentation for ftp-proxy is
correct, did you find this rule in documentation somewhere?

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads