Re: Dynamically adding entry in a table

2011-03-09 Thread Tom Uffner
quentin.narvor wrote: I'd like to dump (dup-to operation) all traffic from a subset of hosts belonging to my internal network. This subset of hosts will be stored in a table. I have another table referring to blacklisted hosts (ie botnets, etc). When a packet goes through the firewall with desti

can you assign or associate carp to a real interface? (carp + carpdev)

2011-03-09 Thread kevin
Hello, According to OpenBSD's PF manual, located here : http://www.openbsd.org/faq/pf/carp.html It describes a directive that can be passed to CARP , called "carpdev", which "specifies the physical network interface that belongs to this redundancy group" My question is that ,

commit for PF ftp proxy bug (bin/154469) ?

2011-03-09 Thread Kurt Jaeger
Hi! Can someone have a look at http://www.freebsd.org/cgi/query-pr.cgi?pr=154469 and do the commit ? It's only a small change to flush the output buffers of the ftp-proxy, but it's tested and works. -- p...@opsec.eu+49 171 3101372 9 years to go ! __

Re: multiple loginterface

2011-03-09 Thread Daniel Hartmeier
On Wed, Mar 09, 2011 at 09:41:17AM +, Michael wrote: > I was thinking about something else, please correct me if I'm wrong. I'm > using two interfaces to get online on a regular basis, one is gsm and > another one is wifi. > I want to monitor both of them at any given time so I thought I nee

Dynamically adding entry in a table

2011-03-09 Thread quentin.narvor
Hi, I'd like to dump (dup-to operation) all traffic from a subset of hosts belonging to my internal network. This subset of hosts will be stored in a table. I have another table referring to blacklisted hosts (ie botnets, etc). When a packet goes through the firewall with destination host = an IP

RE: multiple loginterface

2011-03-09 Thread Greg Hennessy
As long as PF is enabled and you haven't done a 'set skip on interface'. Putting block log all' at the start of the policy will catch everything hitting the default deny and adding 'log' to the access rules will record everything else. If you're using the platform as a multihomed firewall, it

Re: multiple loginterface

2011-03-09 Thread Michael
On 09/03/2011 09:29, Greg Hennessy wrote: What's the likely use case ? Jails ? I was thinking about something else, please correct me if I'm wrong. I'm using two interfaces to get online on a regular basis, one is gsm and another one is wifi. I want to monitor both of them at any given time

RE: multiple loginterface

2011-03-09 Thread Greg Hennessy
What's the likely use case ? Jails ? > -Original Message- > From: owner-freebsd...@freebsd.org [mailto:owner-freebsd- > p...@freebsd.org] On Behalf Of Michael > Sent: 08 March 2011 11:44 PM > To: freebsd-pf@freebsd.org > Subject: multiple loginterface > > Hi, > > Is it possible to set mu