Re: Firewall for IPv6 for ISP PPP connection

2014-04-10 Thread CyberLeo Kitsana
On 04/09/2014 11:07 PM, Khairil Yusof wrote: > I have a home server that also acts as a router/firewall home network. > > re0 is the main network interface connected to the rest of the network > tun0 is the ipv4/ipv6 ppp tunnel connected to ISP via ppp. > fxp0 is spare unused interface. > > With

Re: Using pf and Tor DNS port

2013-03-04 Thread CyberLeo Kitsana
On 03/03/2013 04:47 PM, Robert Simmons wrote: > I am having problems setting up Tor's DNSPort using pf. In FreeBSD > 8.x I was able to just run Tor with the "DNSPort 53" config file > option with no problems. Now, with 9.1, when I run it with that > option, I get a permission denied error when tr

Re: [SOLVED]: nc: connect to b:b:b:b::1:1 port 53 (tcp) failed: Operation timed out

2012-12-29 Thread CyberLeo Kitsana
On 12/29/2012 08:31 AM, Michael Grimm wrote: > Hi -- > > On 29.12.2012, at 13:07, Kimmo Paasiala wrote: >> On Sat, Dec 29, 2012 at 1:54 PM, CyberLeo Kitsana >> wrote: >>> On 12/28/2012 05:59 AM, Michael Grimm wrote: > >>>> I do run both my primar

Re: nc: connect to b:b:b:b::1:1 port 53 (tcp) failed: Operation timed out

2012-12-29 Thread CyberLeo Kitsana
On 12/28/2012 05:59 AM, Michael Grimm wrote: > Hi -- > > I do run both my primary and secondary nameservers (distinct servers) in > FreeBSD jails1 and jail2 as outlined below: > I do see using tcpdump at server1: > > | 00:00:02.066251 xx:xx:xx:xx:xx > yy:yy:yy:yy:yy, ethertype IPv6 (0x86dd), >

PF IPv6 NAT and The Curse of The Invalid Checksum

2012-12-15 Thread CyberLeo Kitsana
Has anyone successfully attempted to NAT IPv6 addresses using PF? I'm running 9.1-RELEASE@2012-12-01, and am trying to cope with my colo provider's provision of a single IPv6 address to feed a few Jails. My fallback approach, via HE Tunnelbroker, is thwarted by the provider's having blocked ICMP e

Re: AltQ nested classes and limits

2012-08-04 Thread CyberLeo Kitsana
On 08/04/2012 06:51 PM, CyberLeo Kitsana wrote: > Hi! > > I'm currently struggling with a little issue with pf and AltQ cbq in > FreeBSD 8.2-RELEASE. > > I'm trying to set up queueing with two different ISP uplinks attached to > my gateway. Note that I am not

AltQ nested classes and limits

2012-08-04 Thread CyberLeo Kitsana
Hi! I'm currently struggling with a little issue with pf and AltQ cbq in FreeBSD 8.2-RELEASE. I'm trying to set up queueing with two different ISP uplinks attached to my gateway. Note that I am not trying to multihome the machine. The machine in question only has two interfaces, so those are tru