Re: RELENG_8 pf stack issue (state count spiraling out of control)

2011-05-02 Thread Janne Snabb
On Tue, 3 May 2011, Vlad Galu wrote: > Disabling scrubbing altogether seems like a good next step. I used to get all kinds of strange problems when I tried scrubbing on FreeBSD 8.1. Especially with IPv6 traffic. After I disabled scrubbing altogether I have had zero problems. The IP & TCP stacks b

Re: RELENG_8 pf stack issue (state count spiraling out of control)

2011-05-02 Thread Vlad Galu
On Tue, May 3, 2011 at 8:01 AM, Jeremy Chadwick wrote: > On Tue, May 03, 2011 at 07:22:10AM +0200, Vlad Galu wrote: > > On Tue, May 3, 2011 at 3:58 AM, Jeremy Chadwick < > free...@jdc.parodius.com>wrote: > > > > > (Please keep me CC'd as I'm not subscribed to freebsd-pf. And > apologies > > > for

Re: RELENG_8 pf stack issue (state count spiraling out of control)

2011-05-02 Thread Jeremy Chadwick
On Tue, May 03, 2011 at 07:22:10AM +0200, Vlad Galu wrote: > On Tue, May 3, 2011 at 3:58 AM, Jeremy Chadwick > wrote: > > > (Please keep me CC'd as I'm not subscribed to freebsd-pf. And apologies > > for cross-posting, but the issue is severe enough that I wanted to make > > it known on -stable)

Re: RELENG_8 pf stack issue (state count spiraling out of control)

2011-05-02 Thread Jeremy Chadwick
On Tue, May 03, 2011 at 01:06:34AM -0400, Jason Hellenthal wrote: > On Mon, May 02, 2011 at 06:58:54PM -0700, Jeremy Chadwick wrote: > >(Please keep me CC'd as I'm not subscribed to freebsd-pf. And apologies > >for cross-posting, but the issue is severe enough that I wanted to make > >it known on

Re: RELENG_8 pf stack issue (state count spiraling out of control)

2011-05-02 Thread Vlad Galu
On Tue, May 3, 2011 at 3:58 AM, Jeremy Chadwick wrote: > (Please keep me CC'd as I'm not subscribed to freebsd-pf. And apologies > for cross-posting, but the issue is severe enough that I wanted to make > it known on -stable) > > The below issue I'm describing is from a machine running 8.2-PREREL

Re: RELENG_8 pf stack issue (state count spiraling out of control)

2011-05-02 Thread Jason Hellenthal
Jeremy, On Mon, May 02, 2011 at 06:58:54PM -0700, Jeremy Chadwick wrote: >(Please keep me CC'd as I'm not subscribed to freebsd-pf. And apologies >for cross-posting, but the issue is severe enough that I wanted to make >it known on -stable) > >The below issue I'm describing is from a machine ru

RELENG_8 pf stack issue (state count spiraling out of control)

2011-05-02 Thread Jeremy Chadwick
(Please keep me CC'd as I'm not subscribed to freebsd-pf. And apologies for cross-posting, but the issue is severe enough that I wanted to make it known on -stable) The below issue I'm describing is from a machine running 8.2-PRERELEASE (RELENG_8) using src dated Tue Feb 15 05:46:02 PST 2011. Pl

Re: blocking facebook

2011-05-02 Thread Edwin L. Culp W.
On Mon, May 2, 2011 at 9:41 AM, Zhu Sha Zang wrote: > I'm trying to block facebook access only using PF in FreeBSD 8.2. > > But putting the name or the ip returned with the command host > www.facebook.com i can't deny any user to connect facebook. I found a way to block it with pf but didn't have

Re: blocking facebook

2011-05-02 Thread Vlad Galu
On Mon, May 2, 2011 at 4:41 PM, Zhu Sha Zang wrote: > I'm trying to block facebook access only using PF in FreeBSD 8.2. > > But putting the name or the ip returned with the command host > www.facebook.com i can't deny any user to connect facebook. > > Some trick to do that? > > You could simply bl

Re: blocking facebook

2011-05-02 Thread bfreek
could you provide us with the rules involved? -- Sent with Sparrow On Montag, 2. Mai 2011 at 16:41, Zhu Sha Zang wrote: > I'm trying to block facebook access only using PF in FreeBSD 8.2. > > But putting the name or the ip returned with the command host > www.facebook.com i can't deny any user

Re: blocking facebook

2011-05-02 Thread Kevin Wilcox
On Mon, May 2, 2011 at 10:41, Zhu Sha Zang wrote: > I'm trying to block facebook access only using PF in FreeBSD 8.2. > > But putting the name or the ip returned with the command host > www.facebook.com i can't deny any user to connect facebook. > > Some trick to do that? > > Thanks for now. Sho

Re: blocking facebook

2011-05-02 Thread dennis berger
I've blocked myspace and facebook using those networks. blockedremotehosts=" {69.63.176.0/20,63.135.80.0/20,216.178.32.0/20,194.97.156.0/24} " best, -dennis Am 02.05.2011 um 16:41 schrieb Zhu Sha Zang: > I'm trying to block facebook access only using PF in FreeBSD 8.2. > > But putting the n

blocking facebook

2011-05-02 Thread Zhu Sha Zang
I'm trying to block facebook access only using PF in FreeBSD 8.2. But putting the name or the ip returned with the command host www.facebook.com i can't deny any user to connect facebook. Some trick to do that? Thanks for now. ___ freebsd-pf@freebsd

Current problem reports assigned to freebsd-pf@FreeBSD.org

2011-05-02 Thread FreeBSD bugmaster
Note: to view an individual PR, use: http://www.freebsd.org/cgi/query-pr.cgi?pr=(number). The following is a listing of current problems submitted by FreeBSD users. These represent problem reports covering all versions including experimental development code and obsolete releases. S Tracker