Setting up multiple web servers behind Packet Filter (PF)
 

I have an OpenBSD 3.4 machine running Packet Filter (PF). It has two network cards, rl0 (10.11.12.13) and dc0 (192.168.1.2).

I have two web servers behind the firewall, www.foo.com (192.168.1.3) and www.bar.com (192.168.1.4).

How can I setup PF's rules to send the traffic to the correct web server?

Thanks!

Not a Linux - Security question. Probably more appropriate in the *BSD Forum.

Thread moved to *BSD - Forum

You need two external IPs, or you need to setup a port other than 80 on the firewall for one of them.

Do you have more 10.11.12.* addresses that you could assign to the external interface of the firewall?

Your last option would be to run the firewall in "bridged" mode, but that would require a router in front of it to send the packets to the right place. The router would be directing traffic to each webserver, the OpenBSD box would just filter it.

If you provide more details, we can explain exactly how to set it up.