pf question: "no rdr" problem, upgraded 4.2->4.7

2010-07-15 Thread David Hardy
I'm upgrading a obsd firewall/router to 4.7 from 4.2 and am having to make all kinds of changes, but one I can't figure out is why it's choking on: no rdr on $cus inet proto tcp from to any port www we use a web cache, but want to exempt some clients from being transparently proxied to it. what

Re: pf question: "no rdr" problem, upgraded 4.2->4.7

2010-07-15 Thread John Cosimano
--- David Hardy [Thu, Jul 15, 2010 at 12:09:07PM -0600]: --- > I'm upgrading a obsd firewall/router to 4.7 from 4.2 and am having to make > all kinds of changes, but one I can't figure out is why it's choking on: > > no rdr on $cus inet proto tcp from to any port www > > we use a web cache, but

Re: pf question: "no rdr" problem, upgraded 4.2->4.7

2010-07-15 Thread Peter N. M. Hansteen
David Hardy writes: > no rdr on $cus inet proto tcp from to any port www > > we use a web cache, but want to exempt some clients from being transparently > proxied to it. the quick escape is likely just that - an appropriately placed pass quick or match quick with the appropriate rdr-to, depend