Closed subject "PF & BLOCK MP3 (AVI)"

2005-07-20 Thread alex-bsd
Hi Daniel & Jeremie I have already closed this theme last week! Just answered on the yesterday's message. I enough for a long time use PF and squid and in general I cope with blocking of that that I want. If developers consider that this functionality will negatively affect reliability and sa

RE: PF & BLOCK MP3 (AVI)

2005-07-20 Thread Greg Hennessy
> > Sorry for being rude, but you went too far this time. > You weren't rude Jeremie, I would have been even less charitable but you beat me to it. Greg ___ freebsd-pf@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-p

Re: PF & BLOCK MP3 (AVI)

2005-07-20 Thread Daniel Hartmeier
On Wed, Jul 20, 2005 at 09:20:13PM +0400, alex-bsd wrote: > Presence this function in IPTABLES is very convenient for them. I'm not sure, but could it be that you over-estimate 'convenience' in this case? Because it appears to be rather simple to add a http proxy to the mix which solves the pro

Re: PF & BLOCK MP3 (AVI)

2005-07-20 Thread Jeremie Le Hen
Hi Alex, > I not absolutely understand, how we can play with Daniel. > In the work I do not use Linux. > Many my friends use Linux as gateway. > Presence this function in IPTABLES is very convenient for them. > This function IPTABLES is used by them enough for a long time, any > problems connect

Re: PF & BLOCK MP3 (AVI)

2005-07-20 Thread alex-bsd
I not absolutely understand, how we can play with Daniel. In the work I do not use Linux. Many my friends use Linux as gateway. Presence this function in IPTABLES is very convenient for them. This function IPTABLES is used by them enough for a long time, any problems connected with use of this o

RE: 5.x ipdivert.ko with pf and natd?

2005-07-20 Thread Greg Hennessy
> I did not succeed with this question with the main questions list. > > I would like to use natd with packet filter under FreeBSD 5.4. > One has to ask *why* ? When pf comes with inbuilt address translation. Greg ___ freebsd-pf@freebsd.org maili

Re: 5.x ipdivert.ko with pf and natd?

2005-07-20 Thread Max Laier
On Wednesday 20 July 2005 15:28, Michael Dexter wrote: > I would like to use natd with packet filter under FreeBSD 5.4. Why? What does natd provide that PF's internal NAT engine does not? Note that PF does not provide any means of using divert sockets. In order to use natd you have to use IPFW

5.x ipdivert.ko with pf and natd?

2005-07-20 Thread Michael Dexter
Hello, I did not succeed with this question with the main questions list. I would like to use natd with packet filter under FreeBSD 5.4. The rc.conf man page states that I want: natd_enable="YES" and that "if the kernel was not built with options IPDIVERT, the ipdivert.ko kernel module will

Re: PF NAT and DNS

2005-07-20 Thread Jeremie Le Hen
Hi Alberto, > Does PF NAT have support for DNS ALG as described in > RFC 2694 - DNS extensions to "Network Address > Translators" (changing IP addresses in DNS payloads > for certain DNS traffic types based on NAT entries)? AFAIK, no, this is not supported, and this is not planned to be. > If n

PF NAT and DNS

2005-07-20 Thread Alberto Alesina
Hi all, Does PF NAT have support for DNS ALG as described in RFC 2694 - DNS extensions to "Network Address Translators" (changing IP addresses in DNS payloads for certain DNS traffic types based on NAT entries)? If not, what is the PF recommended way for avoiding issues with DNS/NAT when the DNS

RE: NAT problem with icmp

2005-07-20 Thread Greg Hennessy
> Hi, > Here is simple explanation : > This is my pf.conf > > extif="{ ed0 }" > extip="{ (ed0) }" > table { 192.168.1.0/24 } > nat on $extif from to any -> $extip pass all The syntax for the nat statement above doesn't look right. > I want to ping from my lan stations to a public dns serve