Troubles with anchors

2007-03-05 Thread Vladimir Kapustin
Hi all! Making a script for turning on/off Internet for our clients I have the following trouble: Some of our clients may need a real IP-adress. Sometimes pairs of internal/external IP may change. For these needs i put in pf.conf the following strings: #nat on $ext_if from to any -> 192.168.1.2

shaping bittorrent?

2007-03-05 Thread Aaron Seelye
Hello, I'm wondering if there are any easy or at least documented ways to shape bittorrent traffic with pf. If not, is there any way without writing software to do it? I've searched the mailing list, and google, it would seem that it's all port based, and more and more clients are using non

Re: Tracing packets passing through PF

2007-03-05 Thread Tom Judge
Volker Werth wrote: On 12/23/-58 20:59, Tom Judge wrote: The packet is not getting filtered it leaves the host and passes on the wire to the default gateway. There are no issues with the traffic being filtered by the originating hosts firewall, the problem is that the ESP packets next hop is no

Re: Re: Tracing packets passing through PF

2007-03-05 Thread Volker Werth
On 12/23/-58 20:59, Tom Judge wrote: > The packet is not getting filtered it leaves the host and passes on the > wire to the default gateway. There are no issues with the traffic being > filtered by the originating hosts firewall, the problem is that the ESP > packets next hop is not being modifie

Re: home router with internal services available question

2007-03-05 Thread Volker
On 12/23/-58 20:59, [EMAIL PROTECTED] wrote: > I had a basic NAT setup that was almost working. dhcp requests on my > lan were not > getting answered by the gateway host. > > I looked at the firewall rules and figured it was because there wasn't a > specific way to > handle port 67 data (if shou

Current problem reports assigned to you

2007-03-05 Thread FreeBSD bugmaster
Current FreeBSD problem reports Critical problems Serious problems S Tracker Resp. Description o kern/82271 pf [pf] cbq scheduler cause bad latency o kern/92949 pf [pf] PF + ALTQ problems

Re: Tracing packets passing through PF

2007-03-05 Thread Tom Judge
Greg Hennessy wrote: I have the following rules on lo0: Have you tried an set skip with a default block log all ? Greg The packet is not getting filtered it leaves the host and passes on the wire to the default gateway. There are no issues with the traffic being filtered by the origin