Best way to edit FreeBSD config files whithout breaking pfSense ?

marcello

Hello
I need to edit /etc/inetd.conf to manually add tcp proxying with netcat, as explained in http://doc.pfsense.org/index.php/Inbound_Load_Balancing#Lack_of_NAT_Reflection.

Can I just go ahead and add the missing entries ?

Will it mess with the rest of pfSense core ? (I am not talking about packages, as I don't use them)

Will it survive a pfsense upgrade like 2.0 -> 2.1

Generally, is there a pfSense way of modyfing the underlying FreeBSD system without breaking thins ? ???

jimp

You'd have to modify the pfSense code that generates inetd.conf - don't edit it directly or your changes will be lost.

dhatz

Just a quick note to suggest that you try socat instead of netcat, if you want to use it for proxying (search the forum for more)

And yes, you'll need to change the source code (https://github.com/bsdperimeter/pfsense)

marcello

I get the idea of nat redirection wit socat,
as seen in http://aplawrence.com/Girish/socat.html

socat TCP-LISTEN:5000,fork TCP-CONNECT:23.3.4.45:25

but I don't see actually actually I can make it
work with loadbalancing.

Since the requests coming from a public IP adress are sent by the load balancer to two differents lan IP, I would need to have two different socat command but listening on the same port ?

I don't see how such a setup is possible, so I will look if can achieve the same http load balancing feature with HA proxy or a Reverse Squid.