using pfctl -s labels and keep state for traffic accounting

2007-07-03 Thread Roman Bogorodskiy
Hi, I'm going to use pf's label feature for traffic accounting, i.e. creating an anchor for being able to add/remove rules with labels on fly and parse the output of pfctl -s labels. However, I spotted some problems with such an approach. When using 'keep state' it seems to have some limitations.

Re: pf 4.1 Update available for testing

2007-07-03 Thread Nate Lawson
Eygene Ryabinkin wrote: > Nate, Max, good day. > > Wed, Jun 20, 2007 at 07:26:09PM +0400, Eygene Ryabinkin wrote: >> Fine, thanks! So, you're happy with the way the problem was fixed? >> I see that another function that uses tbr_callout is tbr_timeout, >> but it will not be called before tbr_set.

Re: ALTQ + CBQ -> http & ftp

2007-07-03 Thread Gilberto Villani Brito
On 03/07/07, Andrei Manescu <[EMAIL PROTECTED]> wrote: Hello everyone. Probabily this is not the first email on this topic, so I'll be brief: I have the following queues: altq on xl0 cbq bandwidth 5000Kb queue { def, ftp, http, ssh, icmp, ack } queue ack bandwidth 50Kb priority 7 cbq(borrow) qu

Re: pf 4.1 Update available for testing

2007-07-03 Thread Nate Lawson
Eygene Ryabinkin wrote: > Nate, Max, good day. > > Wed, Jun 20, 2007 at 11:04:23PM +0400, Eygene Ryabinkin wrote: >> This error can potentially be responsible to the weird bandwidth >> values I am having with the altq on my notebook. The issue is >> described on the thread >> http://lists.freeb

Re: pf 4.1 Update available for testing

2007-07-03 Thread Eygene Ryabinkin
Nate, Max, good day. Wed, Jun 20, 2007 at 11:04:23PM +0400, Eygene Ryabinkin wrote: > This error can potentially be responsible to the weird bandwidth > values I am having with the altq on my notebook. The issue is > described on the thread > http://lists.freebsd.org/pipermail/freebsd-current/2

ALTQ + CBQ -> http & ftp

2007-07-03 Thread Andrei Manescu
Hello everyone. Probabily this is not the first email on this topic, so I'll be brief: I have the following queues: altq on xl0 cbq bandwidth 5000Kb queue { def, ftp, http, ssh, icmp, ack } queue ack bandwidth 50Kb priority 7 cbq(borrow) queue ssh bandwidth 50Kb priority 6 { ssh_login, ssh_bulk }

Re: Current problem reports assigned to you

2007-07-03 Thread Max Laier
I'll ask all owners of pf-related PRs to reevaluate the problem in light of the update. It's unlikely that fixes can easily be backported, but I will try if positive feedback is available. -- FreeBSD Status reports due: 07/07/07 :-) /"\ Best regards, | [EMAIL PROTECTED]

Re: HEADSUP: pf 4.1 import

2007-07-03 Thread Max Laier
In case you wondered, too. The signature on my last message was bad because the ?list? applied the following cleanup: -Content-Type: text/x-diff; charset="iso-8859-6"; - name="pf.41.tcpdump_local.diff" +Content-Type: text/x-diff; + charset="iso-8859-6"; + name="pf.41.tcpdump_lo

Re: HEADSUP: pf 4.1 import

2007-07-03 Thread Max Laier
On Tuesday 03 July 2007, Max Laier wrote: > Users of pf should hold off a bit as I plan to commit a tiny ABI break > after the update is finished in order to be able to add netgraph > support in the future. After that a full "buildworld buildkernel > installkernel installworld mergemaster"-run is

Re: HEADSUP: pf 4.1 import

2007-07-03 Thread Max Laier
On Tuesday 03 July 2007, Thomas Quinot wrote: > * Max Laier, 2007-07-03 : > > in the course of this afternoon (CEST) I'll import the OpenBSD 4.1 > > version of pf. The build might break for a short time, but I'll try > > to keep it as short as possible. > > Thanks Max! Is there a place on the web

Re: HEADSUP: pf 4.1 import

2007-07-03 Thread Thomas Quinot
* Max Laier, 2007-07-03 : > in the course of this afternoon (CEST) I'll import the OpenBSD 4.1 version > of pf. The build might break for a short time, but I'll try to keep it > as short as possible. Thanks Max! Is there a place on the web that lists interesting new features and fixes in that

HEADSUP: pf 4.1 import

2007-07-03 Thread Max Laier
All, in the course of this afternoon (CEST) I'll import the OpenBSD 4.1 version of pf. The build might break for a short time, but I'll try to keep it as short as possible. Users of pf should hold off a bit as I plan to commit a tiny ABI break after the update is finished in order to be able