On Sat, Nov 29, 2003 at 06:10:06PM +0100, Thelmo Loisio wrote:
> On Fri, 2003-11-28 at 18:23, Greg Hennessy wrote:
> 
> > Is your perimeter gateway doing address xlation for source address you are
> > using ? 
> 
> Don't take me wrong, but... of course nat is working ;)
> 
> My problem is that i don't know why when running in bridge environment
> the rdr to 127.0.0.1 doesn't work anymore.

because the bridged packets do not actually make it to the ip stack
the work around is to add an explicit 'route-to lo0' to your pass rule:

for instance:

rdr on $int_if from $int_net to ! $int_net port 80 -> 127.0.0.1 port 3128
...
pass in on $int_if route-to lo0 from $int_net to 127.0.0.1 port 3128
                   ^^^^^^^^^^^^

Can

Reply via email to