pf (3.3-stable) with reply-to

From: Bob Farro (bobfarro_at_example.com)
Date: 09/23/03 

Date: Tue, 23 Sep 2003 13:00:48 +0100

Hi guys,
I have a machine running OpenBSD33-stable bridging between my LAN and a router,
with a DSL connection also attached to that machine. i.e.

LAN-----$int_if|OpenBSD|$ext_if-----Cisco Router
                -------
                $dsl_if
                   |
                   |
            DSL router ($dsl_ip)

I want traffic sent to the DSL router to go back out that way (the default
route on the box points to the Cisco), so I have set up a few rules like:

nat on $dsl_if from $int_net to any -> $dsl_if
rdr on $dsl_if proto tcp from any to $dsl_if port 443 -> 1.1.1.1 port 443
rdr on $dsl_if proto tcp from any to $dsl_if port 110 -> 1.1.1.2 port 110
rdr on $dsl_if proto tcp from any to $dsl_if port 143 -> 1.1.1.2 port 143
rdr on $dsl_if proto tcp from any to $dsl_if port 1677 -> 1.1.1.3 port 1677
pass in quick on $dsl_if reply-to ( $dsl_if $dsl_ip ) proto tcp \
   from any to any port smtp keep state
pass in quick on $dsl_if reply-to ( $dsl_if $dsl_ip ) proto tcp \
   from any to any port { 443, 110, 143, 1677 } keep state

However neither the SMTP (localhost) or the rdr ports work externally.

I can see the packets coming in on the $dsl_if from a tcpdump session, but
that's it, nothing in the state table.

Have I missed something obvious?

Thanks, Bob

Relevant Pages

  • Re: ADSL Ethernet Connection
    ... >If your ISP uses PPPoE then the Router, not the PC will make the ... >DSL connection. ... The Router would have the MTU value of 1492, ... 2000Pro wizard only admits to dial-up accounts. ...
    (microsoft.public.win2000.general)
  • Re: Can connect to web site with server 2003 but not with XP workstati
    ... Networking, Internet, Routing, VPN Troubleshooting on ... The server the workstations connect to can ... > packet size on their router) is correct for their system. ... The DSL connection is shared through a Linksys ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Need advise about remote access VPN hardware
    ... Nokia IP350 box connected to a DSL connection. ... The laptop users will be given a DSL connection (or ISDN if DSL is not ... available in their region) and are going to use the Checkpoint ... ethernet router for their internet connection (note: ...
    (comp.security.firewalls)
  • Re: Sharing DSL between 2 PCs and Router/Modem
    ... I have a DSL connection over a Zoom X5 5554 ... >router and on the PC so it can also connect independently to the net? ... Internet connection and know how to configure the computers and the ... Please post any reply as a follow-up message in the news group ...
    (microsoft.public.windowsxp.network_web)
  • Re: 2 NICs on one computer
    ... > I have a DSL connection directly from the modem to the motherboard NIC ... > well as share files between the itself and the first computer. ... I really would like not to use a router but will if necessary. ...
    (microsoft.public.windowsxp.network_web)