Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 26 Jul 2010 22:05:45 +0800
From:      Denny Lin <dennylin93@hs.ntnu.edu.tw>
To:        Justin <justin@sk1llz.net>
Cc:        freebsd-pf@freebsd.org
Subject:   Re: pf synproxy
Message-ID:  <20100726140545.GB72163@mail.hs.ntnu.edu.tw>
In-Reply-To: <4C4D7EED.4060704@sk1llz.net>
References:  <4C4D7EED.4060704@sk1llz.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Jul 26, 2010 at 05:26:21AM -0700, Justin wrote:
>    Hello all - I've tried searching the list but it seems something is 
> broken and I'm getting 500 errors. Alas,
> 
>  Is there something unique about using synproxy in a gateway style 
> firewall that isn't outlined in the PF manuals? Here's the scenario:
> 
> Internet -> em0 | pf rules | em1 -> target host.

Synproxy does not work when on bridges.

>From pf.conf(5):
Rules with synproxy will not work if pf(4) operates on a if_bridge(4).

-- 
Denny Lin



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20100726140545.GB72163>