How to redirect email for pptp users?

[ddvzlnz]

Greetings all.

I'm a little new to pfSense and I really like it.  I am however stuck.

I have a static WAN address.  I have a 10 dot Lan address and I have pptp users on a 172.16.45.128/25  network.  The pptp IP range is not associated with a physical NIC.  PPTP is working fine.  All of the pptp users come in from the outside.

I need to intercept all port 25 out traffic from pptp users and have that traffic forwarded to a single external email server (a static routable IP off of my network) which will in turn forward it to the final destination.  I have been trying to do this with the beta-1, but I can't seem to get there from the gui.  If I were going to put in in a pf.conf I'd just

rdr on $all_tun_if  proto tcp
        from <tun_ip_addr_list>to any port 25 -> $ext_email_server_ip

But I can't edit the pf.conf in pfSense because it gets overwritten often.
Is there a way to do this in the WebGui  or is there a way to do it in the XML file?  Has it been done before and I've missed it in my searches?  Any pointers  greatly appreciated.

Thank you.</tun_ip_addr_list>

[jeroen234]

Firewall: NAT: Port Forward: Edit
Interface ptpp
External address any
Protocol tcp
External port range smtp smtp
NAT IP the ip of youre mail server
Local port smtp
Description ptpp smtp redirect

[ddvzlnz]

Thank you. I just tried that (even reboted) and no dice.  I am reinstalling and trying again.

[hoba]

That kind of redirect was broken in the last versions and should work with the upcoming release again. Scott just fixed that 2 days ago. However I'm not sure if that will work for pptp users.

[ddvzlnz]

Thanks. Yes it is broken.  I do it on my openbsd boxes with a redirect.  Darn, so close…

Is there a way I can add a couple of lines to the pf.conf and have it stick?

[sullrich]

This was fixed over the weekend for LAN redirects.  Try a snapshot image from ~sullrich.

[ddvzlnz]

Thank you.  I actually did a clean reload this morning using

http://www.pfsense.com/~sullrich/1.0-BETA1-TESTING-SNAPSHOT-2-5-06/pfSense.iso

dated  05-Feb-2006 21:59  31.3M

Is that the one?

[sullrich]

Hrm.  I can't remember if that made it into that one or not.  I'll roll another testing image shortly.

[ddvzlnz]

That would be great. You roll it, I'll test it.

[ddvzlnz]

Should I test the pfsense.iso dated 08-Feb-2006 18:53  31.3M
at http://www.pfsense.com/~sullrich/1.0-BETA1-TESTING-SNAPSHOT-2-8-06/pfSense.iso  ?

[sullrich]

Yes, please do.

[ddvzlnz]

No, it still does not pass email according to the rule in port forwarding in the port forward nat section. (does port forward work for outbound??)  On outbound NAT there is no pptp to choose from in the inteface drop down.  I guess this would be analagous to using squid and forwarding those packets somewhere.  Should I try editing the config file?