93b8 [PF] binat-to not passing traffic out - The FreeBSD Forums
The FreeBSD Forums  

Go Back   The FreeBSD Forums > Server & Networking > Firewalls

Firewalls IPFW, PF, IPF (but not limited) related discussion

Reply
 
Thread Tools Display Modes
  #1  
Old September 16th, 2012, 03:23
n1k0 n1k0 is offline
Junior Member
 
Join Date: Sep 2012
Posts: 1
Thanks: 0
Thanked 0 Times in 0 Posts
Default binat-to not passing traffic out

Hello. I have am working on getting a router setup using pf, and I am having some trouble using binat-to. I have two servers that both need to be on port 80, so I am using binat-to to redirect everything from one ip address to one server with a rule like this:

Code:
pass quick on $ext_if from $web_serv to any binat-to $web_ip
Then, for the other server, I am just using port forwarding using this rule:

Code:
pass in on $ext_if proto tcp from any to $ext_if port $web_port \
rdr-to $wiki port $web_port
Traffic can pass out fine for the $wiki, but for the $web_serv using the binat-to rule, I can reach the server from outside, but I cannot reach outside the network from the server (for instance, installing new packages or updating).

I am just learning about this stuff, and I think there is probably a conflict the rules, but I can't figure out how to correctly pass traffic out from the $web_serv using the binat-to rule.

Could anyone point me in the right direction?
Reply With Quote
  #2  
Old September 17th, 2012, 12:52
SirDice's Avatar
SirDice SirDice is online now
Moderator
 
Join Date: Nov 2008
Location: Rotterdam, Netherlands
Posts: 13,847
Thanks: 48
Thanked 2,061 Times in 1,890 Posts
Default

You can't redirect both servers from port 80 this way. It's simply not going to work.
__________________
Senior UNIX Engineer at Unix Support Nederland
Experience is something you don't get until just after you need it.
Reply With Quote
Reply

Tags
binat, firewall problem, pf

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
passing arguments to pxeboot.0 harm Networking 1 April 23rd, 2013 12:52
[PF] Problem passing Kerberos (UDP port 88) muzinim Firewalls 1 March 21st, 2012 20:21
Passing an address from a browser to a program shuxuef Off-Topic 12 January 1st, 2012 14:42
[Solved] Passing arguments to thread in C Business_Woman Userland Programming & Scripting 7 July 29th, 2011 20:35
[Solved] Passing in options to make? feralape Installation and Maintenance of FreeBSD Ports or Packages 5 March 24th, 2010 20:33


All times are GMT +1. The time now is 10:50.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2013, vBulletin Solutions, Inc.
The mark FreeBSD is a registered trademark of The FreeBSD Foundation and is used by The FreeBSD Project with the permission of The FreeBSD Foundation.
Web protection and acceleration provided by CloudFlare
0