OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: PF rdr question

From: Edward Neville (Edward.NevilleUK-plc.net)
Date: Tue Aug 03 2004 - 10:02:53 CDT

> ifconfig fxp0 inet 83.146.42.163 alias
> ifconfig fxp0 inet 83.146.42.164 alias
>
> since you say that mail is working--maybe you have the alias
> for 163 but not 164?

I made the mistake of not aliasing the IP address before when I tried BINAT,
then I realised that RDR was a more secure approach and made better use of
the /28 IP space that we have.

  ifconfig fxp0 inet 83.146.42.163 netmask 255.255.255.240 alias
  ifconfig fxp0 inet 83.146.42.164 netmask 255.255.255.240 alias

Im really racking my brains here.

I really can't see what is going wrong here.

pfctl -s state:

self tcp 192.168.1.1:22 <- 192.168.1.33:25646 ESTABLISHED:ESTABLISHED
self tcp 192.168.1.1:22 <- 192.168.1.33:19167 ESTABLISHED:ESTABLISHED
self udp 192.168.1.1:53 <- 192.168.1.33:5458 NO_TRAFFIC:SINGLE
self udp 192.168.1.1:53 <- 192.168.1.33:26237 NO_TRAFFIC:SINGLE

Does this help at all?

--
Regards,
Ed.