Date: Wed, 9 Feb 2011 11:16:46 +0000 From: Daniel Bye <freebsd-questions@slightlystrange.org> To: freebsd-questions@freebsd.org Subject: Re: pf, binat, rdr, and one ip Message-ID: <20110209111646.GD3267@catflap.slightlystrange.org> In-Reply-To: <4D51CD05.8040003@herveybayaustralia.com.au> References: <4D515148.3000009@herveybayaustralia.com.au> <20110208151849.GC3267@catflap.slightlystrange.org> <4D51CD05.8040003@herveybayaustralia.com.au>
next in thread | previous in thread | raw e-mail | index | archive | help
--FoLtEtfbNGMjfgrs Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Feb 09, 2011 at 09:08:53AM +1000, Da Rock wrote: > On 02/09/11 01:18, Daniel Bye wrote: > >On Wed, Feb 09, 2011 at 12:20:56AM +1000, Da Rock wrote: > > =20 > >>A very quick question. > >> > >>PF firewall. One static public IP. About 6 servers on the internal > >>network (dmz). One server binat in the pf.conf, the rest redirected. > >> > >>Possible? Or would it die in the hole? > >> =20 > >I guess you're concerned about performance and resource usage? If so, th= is > >may be helpful. > > > >http://www.openbsd.org/faq/pf/perf.html > > > >Dan > > =20 > Useful info to have, thanks. But no, I'm interested in if the binatting= =20 > will interfere with the rdr's (or vice versa). Ah, I see. I don't know, is the straight answer - I've never needed to use both together. A bit of idle googling seems to suggest it's possible, but I don't have time right now to dig any deeper. Dan --=20 Daniel Bye _ ASCII ribbon campaign ( ) - against HTML, vCards and X - proprietary attachments in e-mail / \ --FoLtEtfbNGMjfgrs Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (FreeBSD) iEYEARECAAYFAk1Sd54ACgkQixf5fBYiFmoK/QCg3wL1RNAah56r6mJtnqwAUYwn mScAoLvWCQ0aM1s5zhWIMn0xmlckg8Rt =f3aL -----END PGP SIGNATURE----- --FoLtEtfbNGMjfgrs--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20110209111646.GD3267>