RE: Easy port forwarding question

[a b]

>For whatever reason, I simply can't get this to work. I tried your two
>rdr rules, reloaded them into ipnat, but I am still unable to connect to
>the webserver from my client. For clarity's sake, let me draw a picture
>of my setup:

You also need correspoding rules in ipf.conf to actually allow this traffic
to pass through.

RDR is a two-phase process. Once you get it to work, you'll wonder how you
could have ever done without it.

It's one of the coolest freatures in IPFilter.

[a b]

>-I need to avoid running the webserver as root at all costs. Port 80 is
>reserved for use by root, so I need to find another way to get access to
>port 80.

I do not believe it matters that port 80 is a privileged port; what does
matter is under which user the process listening on port 80 listens -- and
that user in your case should be "httpd" -- just a regular user with zilch
of extra privileges.

[Jett Tayer]

openbsd apache???