Re: pfsync is version 3 in RELENG_7

2008-03-06 Thread clemens fischer
Andrew Thompson: > Ollivier Robert wrote: > >> According to clemens fischer: >> >> > "In RELENG_7 - pf is at OpenBSD 4.1" >> > >> > shouldn't pfsync be of a more recent version, then? >> >> Yes, you need pfflowd 0.7 to understand pfsync3. > > I'm listed as the port maintainer but havnt updated i

Re: pfsync is version 3 in RELENG_7

2008-03-06 Thread Andrew Thompson
On Thu, Mar 06, 2008 at 07:47:12PM +0100, Ollivier Robert wrote: > According to clemens fischer: > > "In RELENG_7 - pf is at OpenBSD 4.1" > > > > shouldn't pfsync be of a more recent version, then? > > Yes, you need pfflowd 0.7 to understand pfsync3. I'm listed as the port maintainer but havnt

Re: pfsync is version 3 in RELENG_7

2008-03-06 Thread Ollivier Robert
According to clemens fischer: > "In RELENG_7 - pf is at OpenBSD 4.1" > > shouldn't pfsync be of a more recent version, then? Yes, you need pfflowd 0.7 to understand pfsync3. -- Ollivier ROBERT -=- FreeBSD: The Power to Serve! -=- [EMAIL PROTECTED] Darwin sidhe.keltia.net Version 9.2.0: Tue Feb

Re: pfsync is version 3 in RELENG_7

2008-03-06 Thread clemens fischer
On Thu, 06 Mar 2008 18:38:11 +0100 clemens fischer wrote: > i get this: > > # pfflowd -D > No export target defined > -1 > pfflowd[40130]: pfflowd listening on pfsync0 > pfflowd[40130]: Unsupported pfsync version 3, exiting > > although http://pf4freebsd.love2party.net/ states: > > "

pfsync is version 3 in RELENG_7

2008-03-06 Thread clemens fischer
'uname -rms' -> FreeBSD 7.0-STABLE i386 i am looking for a way to get traffic statistics. with "device pf{,log,sync}" in the kernel config, i have the pfsync device, and net/pfflowd should analyze the state changes from pf. i get this: # pfflowd -D No export target defined -1 pfflo

RE: Confusion about FTP through PF

2008-03-06 Thread Michael K. Smith - Adhost
Hello Jeremy (et. al.): We found the issue and I wanted to share the solution. As before, this rule worked as expected: # -- pass in quick on $vlan2_if inet proto tcp from any to port { ftp, 49152:65535 } modulate state flags S/SA # -- However, when the following rule was in place, we couldn'

Re: pf + ftp troubles.

2008-03-06 Thread Jeremy Chadwick
On Thu, Mar 06, 2008 at 03:57:39PM +0200, Andrey A. Belashkov wrote: > Hello. > I need setup non standart nat rules by pf for ftp. > All outgoing ftp connections must nat behind 172.16.5.10 address > assigned by mpd to ng0. > > I setup mpd, interface is up and if i use as source address 172.16.5.1

pf + ftp troubles.

2008-03-06 Thread Andrey A. Belashkov
Hello. I need setup non standart nat rules by pf for ftp. All outgoing ftp connections must nat behind 172.16.5.10 address assigned by mpd to ng0. I setup mpd, interface is up and if i use as source address 172.16.5.10 for ftp all is fine. But ftp function in php cant choose source address, so i n

Please help me with my config

2008-03-06 Thread Alaor Barroso de Carvalho Neto
Hi guyz, let me explain what I have. I work in a school, we have access to the internet, two internal networks (academic and administrative) and we have to connect to some servers in another school because we share databases and to video-conference. I have a FreeBSD box with PF and squid, i want al