[Bug 236819] [tcpdump] capsicum-related changes broke reading IPsec ESP decryption keys from a file

2019-04-02 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=236819 --- Comment #4 from Ed Maste --- (In reply to Ed Maste from comment #3) >From the man page: > The file is opened upon receiving the first ESP packet, so > any special permissions that tcpdump may have been given > should already have been

[Bug 236819] [tcpdump] capsicum-related changes broke reading IPsec ESP decryption keys from a file

2019-04-02 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=236819 --- Comment #3 from Ed Maste --- (In reply to Eugene Grosbein from comment #2) Reproduced here: % tcpdump --version tcpdump version 4.9.2 libpcap version 1.9.0 OpenSSL 1.0.2o-freebsd 27 Mar 2018 # ktrace -i tcpdump -E 'file foo' -s0 -np

Re: need help with ipfw nat to pf nat migration

2019-04-02 Thread Artem Viklenko via freebsd-net
Hi! On 02.04.19 10:03, Victor Sudakov wrote: Sergey Akhmatov wrote: I'm trying to migrate some firewall rules from ipfw to pf. As pf does NAT first and filtering after NAT, I have a problem doing the following: 1. All 192.168.0.0/16 addresses should be translated to the real IP of the externa

Re: need help with ipfw nat to pf nat migration

2019-04-02 Thread Victor Sudakov
Sergey Akhmatov wrote: > > > > I'm trying to migrate some firewall rules from ipfw to pf. As pf does > > NAT first and filtering after NAT, I have a problem doing the following: > > > > 1. All 192.168.0.0/16 addresses should be translated to the real IP of > > the external interface. > > > > 2.