Basic NAT server setup

2013-05-30 Thread Joe Moog
I'm building a server to handle outbound NAT to the internet using FreeBSD 9.1 and its built-in distribution of pf. What I want to be able to do is NAT three unique internal (private) VLANs to three unique public IPs. Our current setup utilizes a single external IP address for all three internal

Re: misc/179033: [dc] dc ethernet driver seems to have issues with some multiport card and mother board combinations

2013-05-30 Thread John Baldwin
On Thursday, May 30, 2013 1:12:14 am YongHyeon PYUN wrote: > On Wed, May 29, 2013 at 08:58:10PM -0700, Mr. Clif wrote: > > Sorry for the confusion Pyun, > > > > I started looking at it in the context of pfsense, but they rejected my > > bug report which was understandable because it's an upstream

Re: Create pkey on FreeBSD 9.1

2013-05-30 Thread John Baldwin
On Thursday, May 30, 2013 3:29:46 am Alex Liptsin wrote: > Hi John. > > I did it, but there is no ping between the vlans. Ping without VLANs on that ports pass. Unfortunately I do not have an IB setup to test this. I also don't know how IB treats vlans (e.g. does it use an 802.1(q) type header

Re: how to bind ppp to definite tun device?

2013-05-30 Thread Matthias Apitz
El día Thursday, May 30, 2013 a las 02:48:52PM +0300, Zeus Panchenko escribió: > hi, > > may somebody help with the subject, please? > > is there way to bind tun device which ppp creates/uses to the definite > one, let's say tun0 ? to avoid interface appointment change (in case I > need binding

how to bind ppp to definite tun device?

2013-05-30 Thread Zeus Panchenko
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 hi, may somebody help with the subject, please? is there way to bind tun device which ppp creates/uses to the definite one, let's say tun0 ? to avoid interface appointment change (in case I need binding WAN on tunN) for example OpenVPN allows to set

Re: IPFW tablearg questions

2013-05-30 Thread Andreas Nilsson
On Thu, May 30, 2013 at 1:01 PM, Paul A. Procacci wrote: > > The question: > > Why can't you add a skipto to the default rule (65535)? > > http://lists.freebsd.org/pipermail/freebsd-ipfw/2007-June/003067.html > > > I also consider using tablearg with divert, but manpage is contradicting > > itself

Re: IPFW tablearg questions

2013-05-30 Thread Paul A. Procacci
> The question: > Why can't you add a skipto to the default rule (65535)? http://lists.freebsd.org/pipermail/freebsd-ipfw/2007-June/003067.html > I also consider using tablearg with divert, but manpage is contradicting > itself in regards to divert with tablearg: > " divert port >

Re: kern/179083: [netmap] [patch] Invalid index calucation in netmap macro expansion

2013-05-30 Thread Mark Linimon
The following reply was made to PR kern/179083; it has been noted by GNATS. From: Mark Linimon To: bug-follo...@freebsd.org Cc: Subject: Re: kern/179083: [netmap] [patch] Invalid index calucation in netmap macro expansion Date: Thu, 30 May 2013 02:58:04 -0500 - Forwarded message from Lui

Re: kern/179083: [netmap] [patch] Invalid index calucation in netmap macro expansion

2013-05-30 Thread linimon
Synopsis: [netmap] [patch] Invalid index calucation in netmap macro expansion State-Changed-From-To: open->closed State-Changed-By: linimon State-Changed-When: Thu May 30 07:58:15 UTC 2013 State-Changed-Why: apparently the code is correct and the comments are wrong. The comments will be fixed so

Re: kern/179083: [netmap] [patch] Invalid index calucation in netmap macro expansion

2013-05-30 Thread Luigi Rizzo
On Thu, May 30, 2013 at 07:43:47AM +, lini...@freebsd.org wrote: > Old Synopsis: Invalid index calucation in netmap macro expansion > New Synopsis: [netmap] [patch] Invalid index calucation in netmap macro > expansion > > Responsible-Changed-From-To: freebsd-bugs->freebsd-net > Responsible-Ch

Re: kern/179083: [netmap] [patch] Invalid index calucation in netmap macro expansion

2013-05-30 Thread linimon
Old Synopsis: Invalid index calucation in netmap macro expansion New Synopsis: [netmap] [patch] Invalid index calucation in netmap macro expansion Responsible-Changed-From-To: freebsd-bugs->freebsd-net Responsible-Changed-By: linimon Responsible-Changed-When: Thu May 30 07:43:27 UTC 2013 Responsi

RE: Create pkey on FreeBSD 9.1

2013-05-30 Thread Alex Liptsin
Hi John. I did it, but there is no ping between the vlans. Ping without VLANs on that ports pass. Host1: [root@qa-h-vrt-030-006 ~]# ifconfig ib0.100 create [root@qa-h-vrt-030-006 ~]# ifconfig ib0.100 11.195.30.1/16 up [root@qa-h-vrt-030-006 ~]# ifconfig em0: flags=8843 metric 0 mtu 1500

IPFW tablearg questions

2013-05-30 Thread Andreas Nilsson
Hello, I started to test some more features of IPFW, namely skipto and fwd, both in conjunction with tablearg. The question: Why can't you add a skipto to the default rule (65535)? I also consider using tablearg with divert, but manpage is contradicting itself in regards to divert with tablearg: