Re: IPv6 config for PF

2011-08-04 Thread Mohacsi Janos
On Mon, 1 Aug 2011, Michael Proto wrote: On Fri, Jul 29, 2011 at 8:11 PM, Chris wrote: Hello, I'm having a heck of a time trying to get PF to work with IPv6 on a few FreeBSD machines, mainly regarding NDP and RAs. Does anyone have a sample ruleset they can share for a server system that ha

Re: IPv6 day, PF and IPv6 fragments

2011-06-08 Thread Mohacsi Janos
Dear All On Tue, 7 Jun 2011, Gary Palmer wrote: Hi, I noticed after running test-ipv6.com at home that I was getting 2011-06-07 20:35:55.588335 rule 279/0(match): block in on gif0: 2001:4998:0:6::11 > : frag (0|1424) 80 > 62594: . 0:1392(1392) ack 1 win 8211 2011-06-07 20:35:55.588521 rule 2

Re: NAT64 support in pf?

2011-01-23 Thread Mohacsi Janos
Hi, nat64 code for OpenBSD has been developed: http://ecdysis.viagenie.ca/download.html This should be ported to FreeBSD, since uses BSD license. Janos Mohacsi Head of HBONE+ project Network Engineer, Deputy Director of Network Planning and Projects NIIF/HUNGARNET, HUNGARY Key 70EF9882: DEC2 C

Re: Base import proposal: relayd

2010-05-27 Thread Mohacsi Janos
Dear All, I would appricate the fixes in ports tree first. I use relayd for a while on FreeBSD 7 stable. I have problem with the tcp checking. Janos Mohacsi Head of HBONE+ project Network Engineer, Deputy Director of Network Planning and Projects NIIF/HUNGARNET, HUNGARY Key 70EF9882: DEC2 C685

pf behaviour changes - must be documented

2009-11-19 Thread Mohacsi Janos
>Submitter-Id: current-users >Originator:Mohacsi Janos >Organization: NIIF >Confidential: no >Synopsis: pf behaviour changes - must be documented >Severity: non-critical >Priority: low >Category: kern >Class: doc-bug >Release:

Re: Crazy Question - IPv6 to IPv4 and vice versa

2008-09-02 Thread Mohacsi Janos
On Tue, 2 Sep 2008, Michael K. Smith - Adhost wrote: Hello All: I'm wondering if it would be possible to create a mapping between an "outside" IPv6 address and an "inside" IPv4 NAT (or round-robin group, to take it to the next logical step) or vice versa? This would be on a FreeBSD 7.0 i

Re: pf (+ relayd?) as lvs replacement

2008-04-25 Thread Mohacsi Janos
storage for IP address, then you are out of luck - better to change other software... Best Regards, Janos Mohacsi On Fri, 25 Apr 2008 17:06:21 +0200 (CEST) Mohacsi Janos <[EMAIL PROTECTED]> wrote: On Fri, 25 Apr 2008, CZUCZY Gergely wrote: Hello, A somewhat similar

Re: pf (+ relayd?) as lvs replacement

2008-04-25 Thread Mohacsi Janos
On Fri, 25 Apr 2008, CZUCZY Gergely wrote: Hello, A somewhat similar can be achived using relayd, but this kind of load balancing shouldn't be done on L2/L3 level. This kind of load balancing should be done on Layer7 with some application level load balancers. That way you can also do mor

Re: pf+ipv6 bug?

2007-11-14 Thread Mohacsi Janos
Hi, You should consider adding rules to allow ICMPv6 neighbor solicitation and neighbor advertisement anyway for proper IPv6 operations. ICMPv6 filtering recomendations is documented in RFC 4890 since ICMPv6 is not so auxiliary in IPv6 than in IPv4. The problem is, that this is not documented

pr=112579 probably misfiled

2007-07-10 Thread Mohacsi Janos
Dear All, I have submitted a PR a while ago about the pf examples in /usr/share/examples/pf. I thought it is related to the documentation since you can find some examples - documentation in /usr/share/examples. Can you tell me /usr/share/examples/pf is under doc or under pf control? Best Reg