Re: rdr vs pass

[<jabbott@abbotts.org>]

Right, that is what he is talking about.  What I am asking is; is this a good thing?  

--ja

On Tue, 1 Mar 2005, Rolen, Mark E. wrote:

> 
> >On Tue, 2005-03-01 at 14:38:57 -0600, jabbott@abbotts.org proclaimed...
> >> What is the opinion of the list?
> >To redirect traffic IN on one interface OUT another, you need rdr.
> >To permit this behavir, you ALSO a rule to permit/deny/etc.
> 
> 
> 
> In newer versions of pf, you can just:
> 
> rdr pass on $ext_if ....
> 
> and skip creating pass rules to cover the rdr.
> 
> Regards,
> Mark
> 
> 
>  
> 

--