Re: rdr and TOS

2003-02-03 Thread Ed White
On Monday 03 February 2003 10:53, Kremlyn Vostok wrote:
 The 'route-to' function may be what you're after.  Let us know how it
 goes :-)

I got a kernel panic with this ruleset:

HOST=x.x.x.x

# Redirect HOST
pass out quick on dc0 route-to lo0 inet proto tcp from any to $HOST port 25 
keep state
pass out quick on dc0 route-to lo0 inet proto tcp from any to $HOST port 80 
keep state

# Black Hole Host
pass out quick all keep state 

pass out quick on lo0 all
pass in quick on lo0 all

block in quick inet proto tcp all
block in quick inet proto udp all
block in quick inet proto icmp all
block in quick all 


After pfctl -f pf.route I tryed telnet x.x.x.x 25 and got kernel panic.
Note that savecore said me I haven't enough space to save the core, but it's 
strange because I have 128 Mb RAM, 200 Mb swap and gigs on /var...

What I'm missing ?.


Ed







Re: rdr and TOS

2003-02-03 Thread Daniel Hartmeier
Can't reproduce it with -current anymore, I assume you were using an
older version. Can you retry with -current?

Daniel