Date: Wed, 18 May 2016 10:23:32 +0200 From: Niklaas Baudet von Gersdorff <stdin@niklaas.eu> To: freebsd-pf@freebsd.org, freebsd-questions@freebsd.org Subject: Re: `echo <something> | pfctl -mf -` overriding instead of modifying Message-ID: <20160518082331.GE99839@box-fra-01.niklaas.eu> In-Reply-To: <CAGnMC6rDGEULcsx2R2=hzjq_8Y%2BeLdG%2BviHT8bnMgt-jMyQPWQ@mail.gmail.com> References: <20160518072409.GD99839@box-fra-01.niklaas.eu> <CAGnMC6rDGEULcsx2R2=hzjq_8Y%2BeLdG%2BviHT8bnMgt-jMyQPWQ@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Dewayne Geraghty [2016-05-18 17:46 +1000] :
> Niklaus,
> Would you please reverse the order and advise? That is try:
> exec.poststart += "echo 'rdr pass on vtnet0 inet6 proto { udp tcp } to
> vtnet0 port domain -> $private_ip6' | pfctl -a 'jails/$name' -mf -";
> exec.poststart += "echo 'rdr pass on vtnet0 inet proto { udp tcp } to
> vtnet0 port domain -> $private_ip4' | pfctl -a 'jails/$name' -f -";
If I reverse th order, it is only the last redirect that is applied (in this
case inet). The same things happen if I use `-mf -` for the second entry in the
example above.
Niklaas
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20160518082331.GE99839>