Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 18 May 2016 10:23:32 +0200
From:      Niklaas Baudet von Gersdorff <stdin@niklaas.eu>
To:        freebsd-pf@freebsd.org, freebsd-questions@freebsd.org
Subject:   Re: `echo <something> | pfctl -mf -` overriding instead of modifying
Message-ID:  <20160518082331.GE99839@box-fra-01.niklaas.eu>
In-Reply-To: <CAGnMC6rDGEULcsx2R2=hzjq_8Y+eLdG+viHT8bnMgt-jMyQPWQ@mail.gmail.com>
References:  <20160518072409.GD99839@box-fra-01.niklaas.eu> <CAGnMC6rDGEULcsx2R2=hzjq_8Y+eLdG+viHT8bnMgt-jMyQPWQ@mail.gmail.com>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
Dewayne Geraghty [2016-05-18 17:46 +1000] :

> Niklaus,
> Would you please reverse the order and advise?  That is try:
>      exec.poststart += "echo 'rdr pass on vtnet0 inet6 proto { udp tcp } to
> vtnet0 port domain ->   $private_ip6' | pfctl -a 'jails/$name' -mf -";
>    exec.poststart += "echo 'rdr pass on vtnet0 inet  proto { udp tcp } to
> vtnet0 port domain ->   $private_ip4' | pfctl -a 'jails/$name' -f -";

If I reverse th order, it is only the last redirect that is applied (in this
case inet). The same things happen if I use `-mf -` for the second entry in the
example above.
    
    Niklaas



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?20160518082331.GE99839>