PF PF rdr pass question

S

Sylgeist

Can I get confirmation of my understanding of the FreeBSD pf? I'm trying to rdr a port using:
Code: 
rdr pass inet proto tcp from any to $ext_if port X -> $int_ip
That works fine, but I was hoping to add options like (max-src-conn 10) to the rule. Am I correct that I would need to split out the redirect and pass rule to do that?

Thanks!
 
Sylgeist said:
Am I correct that I would need to split out the redirect and pass rule to do that?
Click to expand...
Yes. The rdr pass causes all other filter rules to be ignored. And you can't add those options to the rdr pass line.
Code: 
     If the pass modifier is given, packets matching the translation rule are
     passed without inspecting the filter rules:
 
You must log in or register to reply here.
Back
Top