problems configuring port access

[gred]

Hello,

The situation: for some reasons, we need to run tinyproxy on the router.
I've built static tinyproxy daemon on some other FreeBSD server, copied it to the system, configured, and started.
I've added these rules to the firewall:

pass in quick on fxp0 reply-to (fxp0 194.44.xxx.xx) inet proto tcp from any to 194.44.xxx.xx port = 8888 flags S/SA keep state label "USER_RULE" ridentifier 1668184153
pass in quick on em0 reply-to (em0 95.215.xxx.xx) inet proto tcp from any to 95.215.xxx.xx port = 8888 flags S/SA keep state label "USER_RULE" ridentifier 1668184385

the problem is when I enable firewall, all rules works but the rules for port 8888, which tinyproxyd is listenning on.

the daemon itself works, I've confirmed it by disabling firewall 'pfctl -d' and trying to connect to the router port 8888
this went ok.

when I try to connect to it on loopback - it also works ok.

the problem is when I enable firewall, all rules works but the rules for port 8888, which tinyproxyd is listenning on.

need help.
thanks.

[stephenw10]

I assume those are rules created by the webgui?

And the reply-to values are the gateways? The destinations are the WAN IPs?

Steve