TCP Reflection (continued)

2002-10-31 Thread Jason Dixon
Hi all- I've just completed a new OBSD 3.1 build, and am trying to get some form of tcp reflection working on this system. I know that the best choice would be to create a DMZ... this is not a study in best practices, this is an effort to get this feature _working_. I've attempted to get this

Re: TCP Reflection (continued)

2002-10-31 Thread Daniel Hartmeier
On Thu, Oct 31, 2002 at 01:26:36PM -0500, Jason Dixon wrote: nat on $int_if proto tcp from $int_net to $server port 80 - $int_if /etc/nat.conf:22: syntax error pfctl: syntax error in file: nat rules not loaded Yes, pf in 3.1 doesn't allow to specify ports in nat rules, that was added

Re: TCP Reflection (continued)

2002-10-31 Thread Daniel Hartmeier
On Thu, Oct 31, 2002 at 08:01:40PM +0100, Daniel Hartmeier wrote: dc1 does have 192.168.1.0 netmask 255.255.255.0 assigned, right? Oh, 192.168.1.0 is not a valid address for a host in that network, it's the broadcast address (all host bits zero). Try 192.168.1.1 instead... Daniel

Re: TCP Reflection (continued)

2002-10-31 Thread Jason Dixon
dc0 (external) -J. On Thu, 2002-10-31 at 16:29, Zafer Dastan wrote: which interface (dc0 or dc1) contains $server (10.109.10.97/32) ip address ? Daniel Hartmeier wrote: On Thu, Oct 31, 2002 at 01:26:36PM -0500, Jason Dixon wrote: nat on $int_if proto tcp from $int_net to $server