On Sat, Nov 29, 2003 at 06:10:06PM +0100, Thelmo Loisio wrote: > On Fri, 2003-11-28 at 18:23, Greg Hennessy wrote: > > > Is your perimeter gateway doing address xlation for source address you are > > using ? > > Don't take me wrong, but... of course nat is working ;) > > My problem is that i don't know why when running in bridge environment > the rdr to 127.0.0.1 doesn't work anymore.
because the bridged packets do not actually make it to the ip stack the work around is to add an explicit 'route-to lo0' to your pass rule: for instance: rdr on $int_if from $int_net to ! $int_net port 80 -> 127.0.0.1 port 3128 ... pass in on $int_if route-to lo0 from $int_net to 127.0.0.1 port 3128 ^^^^^^^^^^^^ Can