Re: Fwd: pf problems

2005-08-05 Thread Max Laier
Sergey, On Friday 05 August 2005 13:29, Sergey Lapin wrote: > Hi, all: <...> > Test case: > (done from Linix machine from 1.1.1.128/25) > > tcpreplay -e 1.1.1.133:255.255.255.255 -i eth0 packet > (where packet is random captured UDP packet using tcpdump -peni) > > or > > tcpreplay -e 1.1.1.133:10.

Re: Can rdr rules include flags?

2005-08-05 Thread Max Laier
Michael, On Friday 05 August 2005 09:25, Michael Dexter wrote: > This a general PF question but I am using it in the FreeBSD environment. > > I am using an rdr rule to forward http traffic to a jail. > > rdr pass on $ext_if inet proto tcp from any to $ext_if port 8080 -> > $www_ad port 80 > > Fro

Re: PF ioctl(DIOCADDADDR) possible bug

2005-08-05 Thread Daniel Hartmeier
On Fri, Aug 05, 2005 at 03:06:19PM +0400, Boris Polevoy wrote: > In step 2 ioctl(DIOCADDADDR) do not check pool ticket value, and there is > possible situation of malicious or failure > address pool addition whithout geting pool ticket from another process. > > Is it bug or not? Yes, I think it

Fwd: pf problems

2005-08-05 Thread Sergey Lapin
Hi, all: Configuration: (all addresses fake, 1.1.1.x - from ISP1, 2.2.2 - from ISP2) # grep ifconfig /etc/rc.conf ifconfig_xl0="inet 1.1.1.254 netmask 255.255.255.128" ifconfig_xl0_alias0="inet 2.2.2.2 netmask 255.255.255.128" ifconfig_xl1="inet 192.168.255.1 netmask 255.255.255.255" ifconfig_vlan0

PF ioctl(DIOCADDADDR) possible bug

2005-08-05 Thread Boris Polevoy
Hello, All! I found some possible problem in funcion pf_ioctl.c/pfioctl() in FreeBSD 5.4-RELEASE PF. To add PF rdr (nat) rule in active ruleset we have to do several steps: 1) get pool ticket with ioctl(DIOCBEGINADDRS); 2) create addresses pool with several ioctl(DIOCADDADDR); 3) get ticket for

Re: Problem on altq rules

2005-08-05 Thread Chris Dionissopoulos
Hi, I have installed freeBSD 5.4 and built a custom kernel with the ALTQ options, the proble is when load the ruleset I get the following error: /etc/pf.conf:21: syntax error altq on $ext_if priq bandwith 128Kb queue { q_pri, q_dev } Is "bandwidth" not "bandwith". _

Problem on altq rules

2005-08-05 Thread Jorge Dionisio
Forget my previous e-mail, I'm stupid, just typo errors in the rules... ___ freebsd-pf@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Problem on altq rules

2005-08-05 Thread Jorge Dionisio
Hi, I have installed freeBSD 5.4 and built a custom kernel with the ALTQ options, the proble is when load the ruleset I get the following error: /etc/pf.conf:21: syntax error /etc/pf.conf:22: queue q_pri has no parent /etc/pf.conf:22: errors in queue definition /etc/pf.conf:23: queue q_def has n

Can rdr rules include flags?

2005-08-05 Thread Michael Dexter
Hello, This a general PF question but I am using it in the FreeBSD environment. I am using an rdr rule to forward http traffic to a jail. rdr pass on $ext_if inet proto tcp from any to $ext_if port 8080 -> $www_ad port 80 From what I can tell, an accompanying "pass" entry such as the follo