Can rdr rules include flags?

[Max Laier]

Michael,

On Friday 05 August 2005 09:25, Michael Dexter wrote:
> This a general PF question but I am using it in the FreeBSD environment.
>
> I am using an rdr rule to forward http traffic to a jail.
>
> rdr pass on $ext_if inet proto tcp from any to $ext_if port 8080 ->
> $www_ad port 80
>
>  From what I can tell, an accompanying "pass" entry such as the
> following is not needed and is perhaps ignored.

yes, unless you remove the pass option from the rdr-rule.

> pass in on $ext_if inet proto tcp from any to $ext_if port 80 flags
> S/SA \ modulate state
>
> Is there any way to apply flags to rdr traffic to limit protocols or ports?

Just like that.  Don't apply the pass option on the rdr-rule and use stateful 
pass/block rules to further limit down the redirection.

-- 
/"\  Best regards,                      | mlaier at freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier at EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-pf/attachments/20050806/b621d46c/attachment.bin