RE: RDR question

"French, David" <[email protected]>
Newsgroups gmane.comp.security.firewalls.ipfilter
Message-ID <0B10F79ACCAB6E4B94D9B848F3F63A2E32BFAF@SDGEXEVS09.corp.intuit.net>
Thanks.  I don't have it currently setup and was looking at this for a
solution, only workable if stream for redir is new.  I was hoping
someone would be able to tell me before I had to do the setup / monitor
what it did.

Anyway, thanks.

	--Dave

> -----Original Message-----
> From: Steve Clark [mailto:[email protected]]
> Sent: Thursday, May 01, 2008 4:15 AM
> To: French, David
> Cc: [email protected]
> Subject: Re: RDR question
> 
> French, David wrote:
> > Can anyone tell me if RDR works were it initiates a new connection
for
> > the redirected traffic?  That is, I have
> >
> >
> >
> >             rdr e1000g0 0.0.0.0/0 port 5000 -> 192.168.11.12 port
5000
> >
> >
> >
> > Does the traffic in on e1000g0 to port 5000 start a new connection
from
> > the ipfilter host to 192.168.11.12 port 5000?  Or does it just
modify
> > the packet in some way (header re-write)?  I really need to know if
a
> > new connection is created from the ipfilter host with new seq
numbers.
> >
> >
> >
> > Thanks,
> >
> >             --Dave
> >
> >
> >
> >
> >
> >
> >
> Hi Dave,
> 
> Pretty sure it just rewrites the destination address. If u have access
> to tcpdump u can verify easily by
> dumping the traffic going out to the redirected address.
> 
> HTH,
> Steve
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.