View Single Post
  #4   (View Single Post)  
Old 27th June 2014
roggy roggy is offline
Port Guard
 
Join Date: Nov 2013
Posts: 41
Default

Already tried anyway rdr do with version 5.4 of the PF but not working.
I read the documentation, I tried several ways but could not.
I wish someone analyze my pf.conf below to know where I am going wrong.
Code:
srv01_int = 192.168.42.11
srv02_int = 192.168.42.12
srv02_ext = 200.200.200.10
srv03_ext = 200.200.200.13
srv04_int = 192.168.42.13
host_fw = 200.200.200.2

# BINAT
match on $ext_if from $srv02_int to any binat-to $srv02_ext
pass on $ext_if from $srv02_int to any binat-to $srv02_ext

# NAT
match out on $ext_if from $srv01 to any nat-to $host_fw
pass out on $ext_if from $srv01 to any nat-to $host_fw

# RDR
pass in on $ext_if proto udp from any to $srv03_ext port 59925 rdr-to $srv04_int port 59925 
pass in on $ext_if proto tcp from any to $srv03_ext port 80 rdr-to $srv04_int port 80

# Deny Policy
block in log all
block out log all

# Traffic Loopback
pass in quick on lo0 all
pass out quick on lo0 all

# Ancor FTP
anchor "ftp-proxy/*"

# Rules srv01
pass log quick from $srv01_int to any keep state

# Rules srv04
pass log quick proto tcp from any to $srv04_int port { 80 59925 } keep state
Thanks!

Last edited by ocicat; 27th June 2014 at 11:16 PM. Reason: Please use [code] & [/code] tags when posting configuration file contents.
Reply With Quote