Re: pf DIOCNATLOOK on redirected gre packets

2006-08-29 Thread Damien Miller
On Tue, 29 Aug 2006, Raja Subramanian wrote: Hi All, I'm in the process of writing a pptp proxy for PF and am a fair way through it. I'm redirecting GRE packets from PF to the proxy using: rdr on $wan proto gre from $lan:network to \ any - 127.0.0.1 GRE packets are

Re: pf DIOCNATLOOK on redirected gre packets

2006-08-29 Thread Damien Miller
On Tue, 29 Aug 2006, Raja Subramanian wrote: A (more complicated) alternative would be to teach pf to pull out either the GRE key (rfc2980) and/or eGRE call id (rfc2637) fields and stuff them into the space used by the port numbers. IIRC both are uint32, so they should fit. This will give

pf DIOCNATLOOK on redirected gre packets

2006-08-28 Thread Raja Subramanian
Hi All, I'm in the process of writing a pptp proxy for PF and am a fair way through it. I'm redirecting GRE packets from PF to the proxy using: rdr on $wan proto gre from $lan:network to \ any - 127.0.0.1 GRE packets are hitting my proxy at 127.0.0.1, but I'm unable to