It is not easy to explain. On PCs are special custom based aplications which

changes destination port of outcoming traffic and I need put it back to port

80.
Now I use http proxy, but I wanted remove it and use simly pf. So, you mean

using proxy is the only way?
Karel
----- Original Message -----

From: "scott" <8f27e956@gmail.com>

To: "Karel Galuska"

Cc:

Sent: Wednesday, April 09, 2008 12:01 PM

Subject: Re: pf change destination port for outgoing traffic
> As far as I know, pf = no; an http (or ip) proxy = yes.

quoted text
>

> But, please explain how you expect www.google.com:p2 to work when client

> wants www.google.com:p1 (meaning www.google.com:80)?

>

>

> -----Original Message-----

> From: Karel Galuska

> To: scott <8f27e956@gmail.com>

> Cc: misc@openbsd.org

> Subject: Re: pf change destination port for outgoing traffic

> Date: Wed, 9 Apr 2008 11:46:34 +0200

> Mailer: Microsoft Outlook Express 6.00.2900.3138

> Delivered-To: 8f27e956@gmail.com

>

> any public server on the Internet

>

>

> ----- Original Message -----

> From: "scott" <8f27e956@gmail.com>

> To: "Karel Galuska"

> Cc:

> Sent: Wednesday, April 09, 2008 11:24 AM

> Subject: Re: pf change destination port for outgoing traffic

>

>

>> When you say, "...b.b.b.b represents every server the client wants," do

>> you mean (i) every server from a known set of servers, or do you mean

>> (ii) any server --public and private-- on the Internet?

>>

>>

>> -----Original Message-----

>> From: Karel Galuska

>> To: misc@openbsd.org

>> Subject: pf change destination port for outgoing traffic

>> Date: Wed, 9 Apr 2008 08:23:50 +0200

>> Mailer: Microsoft Outlook Express 6.00.2900.3138

>> Delivered-To: 8f27e956@gmail.com

>>

>> Hi all,

>> I use OpenBSD as a firewall with nat function for local network.

>> For special reason now I need change some destination ports for outgoing

>> traffic to every

>> internet server.

>>

>> For example when internal PC a.a.a.a wants to connect internet server

>> b.b.b.b

>> on port p1 I need transparently redirect connection to port p2 of the

>> same

>> internet server b.b.b.b.

>> But b.b.b.b represents every internet server, which client wants to

>> connect.

>>

>> Could you please help me construct the pf rule?

>>

>> Thanks

>> Karel