pf Transparent Proxy Return

Jason Hunt jhunt at niicommunications.com
Wed Feb 23 15:31:14 GMT 2005


Greetings,

Pretty new to pf, but was wondering how it would be possible to redirect
traffic to a specific site back to port 80 instead of going through 3128.


Using iptables, it is pretty much like so:

$IPTABLES -t nat -I PREROUTING -p tcp --dport 80 -d x.x.x.x/32 -j RETURN

Also in iptables, I could exclude a specific IP from even going through the
proxy:

$IPTABLES -t nat -I PREROUTING -p tcp -s 192.168.x.x --dport 80 -j RETURN

I'm sure this can be done through pf, but was wondering what exactly the
rule would be. 

Is there any good books out on pf?  Or does one believe the man pages from
online are good enough to get a good understanding.  Thanks for the help.






More information about the freebsd-pf mailing list