Re: HELP w/ipf, DHCP & postfix

On Fri, Nov 10, 2006 at 10:57:42PM -0800, Pimin wrote:
> Running NetBSD 3.0.1 & postfix 2.3.3.
> 
> Apologies if I'm in the wrong list, being incredible dense and/or not including relevant
> information.
> 
> I've appended the ipf settings for tlp1 (cable).  "Cable" is a DHCP connection.
> When "cable" is up it is my default route.  Postfix has been told (via inet_interfaces)
> that it should use the "DSL" (rockhead.com) line.  Things seem to work well except that 
> I get the following on the "cable" interface:
> 
>      11:58:29.493860 IP rockhead.com.smtp > dsl-189-156-21-235.prod-infinitum.com.mx.2041: \
>         S 1045339041:1045339041(0) ack 331392030 win 32768 <mss 1460,sackOK,nop,nop>
> 
> The "DSL" addr seems to be actually going out the "cable" interface, I get responses
> on the "DSL" interface.
> 
> I don't understand why the "DSL" ip addr is being used on the "cable" interface.
> I must have to do something else to get the "cable" ipaddr to be used on the "cable"
> interface?  The ".smtp" traffic is the only traffic I see with the "DSL" ipaddr.
> (Using "tcpdump -i tlp1 host rockhead.com")
> 
> I use fetchmail to retrieve my "cable" mail so a complete remap of port 25 to "DSL"
> doesn't seem doable.
> 
> I thought the first 7 lines from the ipf.conf file would fix this problem?
> 
> Where did I go wrong?
> 
> TIA,
> Paul
> 
> pass out log quick on tlp1 to tlp0 proto tcp/udp from 209.128.91.40  to any
> pass out log quick on tlp1 to tlp0 proto tcp/udp from 209.128.91.41  to any
> pass out log quick on tlp1 to tlp0 proto tcp/udp from 209.128.91.42  to any
> pass out log quick on tlp1 to tlp0 proto tcp/udp from 209.128.91.43  to any
> pass out log quick on tlp1 to tlp0 proto tcp/udp from 209.128.91.44  to any
> pass out log quick on tlp1 to tlp0 proto tcp/udp from 209.128.91.45  to any
> pass out log quick on tlp1 to tlp0 proto tcp/udp from 209.128.91.46  to any

You may need to specify the default route to which the packet has to be
sent on tlp0:
pass out log quick on tlp1 to tlp0:<routerIP> proto tcp/udp from 209.128.91.46  to any

-- 
Manuel Bouyer <[email protected]>
     NetBSD: 26 ans d'experience feront toujours la difference
--