Re: Look for an ipfw example using NPTv6

2019-06-20 Thread Jan Bramkamp
On 18.06.19 22:00, Michael Sierchio wrote: I'm looking for a simple firewall example using nptv6 to translate link-local addresses to match the prefix assigned by my ISP. I'll be using stateful rules and allowing only outbound traffic. If you have a snippet, I'l be grateful. Thanks. This soun

Re: Missing sysctl net.inet.ip.fw.dyn_keep_states on FreeBSD 11.2

2018-05-22 Thread Jan Bramkamp
On 21.05.18 16:39, Julian Elischer wrote: On 21/5/18 2:45 am, Andrey V. Elsukov wrote: On 20.05.2018 11:00, 藍ĉŒşç‘‹ wrote: Hello, I upgraded my desktop system from FreeBSD 11.2-BETA1 last week, and I found the sysctl 'net.inet.ip.fw.dyn_keep_states' got removed. I upgraded it again to FreeBSD 11

Re: IPFW: more "orthogonal? state operations, push into 11?

2016-08-05 Thread Jan Bramkamp
On 05/08/16 06:36, Julian Elischer wrote: I ended up having to do this via an ugly use of skiptos where packets I wanted to forward, were identified early and then sent to a duplicate set of rules which also did the divert, but then did the forward. I think there were about 25 rules duplicated

Re: IPFW: more "orthogonal? state operations, push into 11?

2016-08-04 Thread Jan Bramkamp
On 04/08/16 18:12, Julian Elischer wrote: On 4/08/2016 6:50 PM, Andrey V. Elsukov wrote: On 04.08.16 06:42, Julian Elischer wrote: so it's a combination of #1 and #2 in my list. I think I originally thought of having just #1. A combination is less useful for me as you need to do: 20 skipto

Re: ipfw divert filter for IPv4 geo-blocking

2016-07-25 Thread Jan Bramkamp
On 25/07/16 16:28, Dr. Rolf Jansen wrote: I have written a ipfw divert filter daemon for IPv4 geo-blocking. It is working flawlessly on two server installations since a week. Anyway, I am still in doubt whether I do the blocking in the correct way. Once the filter receives a packet from the

Re: IPFW: more "orthogonal? state operations, push into 11?

2016-06-08 Thread Jan Bramkamp
On 07/06/16 10:00, Andrey V. Elsukov wrote: On 07.06.16 09:31, wishmaster wrote: With the following patch you will be able create two different states, I think, and solve your task with NAT and dynamic rules: https://reviews.freebsd.org/D6674 Will there be the patch in the 11-RELEASE? Hi, t

Re: Network goes down when installing ipfw

2016-03-11 Thread Jan Bramkamp
On 11/03/16 13:46, Kulamani Sethi wrote: Dear all, I am using ipfw3. When i am installing ipfw driver in windows-7 machine the network goes down. If uninstall that driver again then network comes automatically. That means ipfw driver does not support. I have also digitally si

Re: FreeBSD max pipe size?

2014-11-18 Thread Jan Bramkamp
On 14.10.2014 00:13, Michael Sierchio wrote: > On Mon, Oct 13, 2014 at 2:46 PM, Jack Barber wrote: > >> I am trying to set up dummynet with FreeBSD 9.3 and a 10 GB Fibre over >> ethernet NIC (ix drivers). >> >> Dummynet appears to have a limit of 1.25 gigabits a second, and when I >> start settin

Re: HEADS UP: Merging projects/ipfw to HEAD

2014-10-05 Thread Jan Bramkamp
On 04.10.2014 14:35, Alexander V. Chernikov wrote: > Hi, > > I'm going to merge projects/ipfw branch to HEAD in the middle of next > week. > > What has changed: > > Main user-visible changes are related to tables: > > * Tables are now identified by names, not numbers. There can be up to > 65k tabl