Re: rdr with tos filteropt

2020-12-24 Thread Oleksandr Kryvulia
23.12.20 22:05, Özkan KIRIK пишет: > Hi, > > I'm trying to rdr packages that has tos lowdelay only. > But pf.conf doesn't support filteropt in rdr syntax. > I need to write a rule like below: > rdr proto tcp from 10.0.0.0/24 to any tos lowdelay -> 127.0.0.1 port 8080 > > Is it possible to do anyway

Re: pf and tap(4) interfaces

2020-10-13 Thread Oleksandr Kryvulia
On 14.10.20 04:37, tech-lists wrote: > > Hello, > > On Tue, Oct 13, 2020 at 08:26:23PM +0300, Oleksandr Kryvulia wrote: >>> >>> [snip] >>> block all >>> pass in quick on $ext_if inet proto tcp from any to ($ext_if) port 22 >>> pas

Re: pf and tap(4) interfaces

2020-10-13 Thread Oleksandr Kryvulia
On 13.10.20 19:07, tech-lists wrote: > Hi, > > Is it possible to have a ruleset allowing unfiltered access to a tap > interface, but filtered on the real interface it's bridged to? > > Let's say there are these: > > ext_if="ix0" # real external ip, on a /29 int_if="igb0" # internal ip > 10.0.0.2/8