Transparent bridge rdr SSH traffic

2006-09-27 Thread Johan
Hi, We are trying to put an OpenBSD server (3.9 with all patches) between an ADSL modem and a commercial firewall. Using transparent bridge and PF, is it possible to redirect all SSH traffic arriving at sis0 to 127.0.0.1 on the OpenBSD server and pass all other traffic the the existing firewal

Re: Transparent bridge rdr SSH traffic

2006-09-27 Thread Thomas Börnert
yes i tried, but it doesn't work, you need an ip adress on sis0 Thomas On Wed, 2006-09-27 at 22:23 +0200, Johan wrote: > Hi, > > We are trying to put an OpenBSD server (3.9 with all patches) between an > ADSL modem and a commercial firewall. > Using transparent bridge and PF, is it possible to

Re: Transparent bridge rdr SSH traffic

2006-09-27 Thread Jason Dixon
On Sep 27, 2006, at 4:23 PM, Johan wrote: Hi, We are trying to put an OpenBSD server (3.9 with all patches) between an ADSL modem and a commercial firewall. Using transparent bridge and PF, is it possible to redirect all SSH traffic arriving at sis0 to 127.0.0.1 on the OpenBSD server and

Re: Transparent bridge rdr SSH traffic

2006-09-27 Thread John Brooks
How about adding a third nic to both the openbsd and firewall, give them their own private network addresses, then redirect the ssh traffic from firewall to openbsd over this new network forgive my poor attempts at modifying your drawing ;-) -- John Brooks [EMAIL PROTECTED] ... > Any help, hint

Re: Transparent bridge rdr SSH traffic

2006-09-27 Thread Karsten McMinn
On 9/27/06, Jason Dixon <[EMAIL PROTECTED]> wrote: Think about it. How would sshd communicate with you without an IP address? Seems to defy the laws of TCP/IP. I'd concede that its more akin to "bending" than defying laws (RFCs). with enough will and some legwork you might be able to get fu

Re: Transparent bridge rdr SSH traffic

2006-09-28 Thread Johan L
Karsten McMinn skrev: On 9/27/06, Jason Dixon <[EMAIL PROTECTED]> wrote: Think about it. How would sshd communicate with you without an IP address? Seems to defy the laws of TCP/IP. I'd concede that its more akin to "bending" than defying laws (RFCs). with enough will and some legwork you

Re: Transparent bridge rdr SSH traffic

2006-09-28 Thread Guido Tschakert
Johan L wrote: > Karsten McMinn skrev: >> On 9/27/06, Jason Dixon <[EMAIL PROTECTED]> wrote: >>> >>> Think about it. How would sshd communicate with you without an IP >>> address? Seems to defy the laws of TCP/IP. >> >> I'd concede that its more akin to "bending" than defying laws (RFCs). >> >> w