Re: PF and forwarding to dmz

2007-07-04 Thread Karl O. Pinc
On 07/04/2007 03:54:57 AM, Norman Maurer wrote: Hi all, we are on the way to migrate some linux firewall to a pf firewall. After I read the pf faq and manual pages I'm still not sure whats the best way to replace iptables "FORWARD" rules. It seems to me that I need one "in" and one "out" rule f

Re: PF and forwarding to dmz

2007-07-04 Thread Peter N. M. Hansteen
Norman Maurer <[EMAIL PROTECTED]> writes: > It seems to me that I need one "in" and one "out" rule for each > FORWARD rule. Is this right ? not necessarily. you can have rules which are not explicitly bound to an interface, such as webserver = "194.54.107.19" webservices = "{ www, https }" blo

PF and forwarding to dmz

2007-07-04 Thread Norman Maurer
Hi all, we are on the way to migrate some linux firewall to a pf firewall. After I read the pf faq and manual pages I'm still not sure whats the best way to replace iptables "FORWARD" rules. It seems to me that I need one "in" and one "out" rule for each FORWARD rule. Is this right ? Is it