>>>>> "Gleb" == Gleb Smirnoff <gleb...@freebsd.org> writes:

    Gleb> Can you please try attached patch? I hope it'll fix the
    Gleb> panic.

Have been running this without the rule change, to see if it doesn't
introduce any adverse effects. So far so good. When I'm back from
holiday (this Saturday), I'll enable the bad keyword.


    Gleb> No idea on how good will your rule work, however.

I have no idea either! A bit harder to test, the goal was to make
games/voip udp work a bit better without having to allocate ports.

I think I could just write:

  nat on egress from any to any -> (egress) round-robin sticky-address

instead of what I have now:

  nat pass on egress proto udp from any port $voip_ports to any -> (egress) 
static-port
  nat pass on egress from any to any -> (egress) sticky-address


--
All the best,

Berend de Boer

Attachment: pgpKtvmdA5uZp.pgp
Description: OpenPGP Digital Signature

Reply via email to