bridging, pf, and rdr

[Max Laier]

On Saturday 11 August 2007, Tieres White wrote:
> I have a bridging firewall in place using FreeBSD 6.1, if_bridge, and
> pf. I'd like to be able to block IP addresses by default on the bridge,
> but selectively allow people through.  This is easily accomplished with
> a table, however it would be nice if I could also alert people as to
> why they aren't currently allowed access through the firewall.  rdr
> rules would appear to accomplish this, but for some reason, it just
> doesn't seem to work.
>
> Has anyone here done anything like this?  Do you have any suggestions?

There was a good description on the dragonfly wiki (which is MIA at the 
moment).  Here is a google cache link: 
http://www.google.com/search?q=cache:JvXtjCKxbjYJ:wiki.dragonflybsd.org/index.cgi/HowtoFilteringBridge+pf+rdr+bridge&hl=en&ct=clnk&cd=8

-- 
/"\  Best regards,                      | mlaier at freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier at EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part.
Url : http://lists.freebsd.org/pipermail/freebsd-net/attachments/20070811/b81566f8/attachment.pgp