Does keep state modify packet anyhow?

Hello, list. I have a strange problem, we work with one application that connecting to remote server at start-up(and remote server connect back to the app). The problem is, that when I uncomment keep state option in rule: pass from $lan #keep state in pf.conf its seems that remote server can't

FTP problem

Hello, Gergely. > try to use pftpx instead of ftp-proxy, it's available from ports. > Bye, > Gergely Czuczy I tried switch to pftpx and got same result. Last messages: Dec 7 17:02:05 fw-spb pftpx[7306]: client limit (100) reached, refusing connection from 10.10.1.70 Dec 7 17:02:47 fw-spb pf

ftp-proxy problem

Hello, all. We got a heavy load server with pf mostly doing nat and redirection. [EMAIL PROTECTED] -r 6.1-RELEASE [EMAIL PROTECTED] -sr | wc -l 546 [EMAIL PROTECTED] -ss | wc -l 9452 Traffic is about 8 Mb/s. /etc/inetd.conf: ftp-proxy stream tcp nowait root /usr/libexec/ftp

transparent proxy on bridge

Hello list. I'm planning to configure pf in bridged environment(using if_bridge on 6.1), so I have question if transparent proxy will work? Is the any working config, or some known issues? TIA, Roman Gorohov. ___ freebsd-pf@freebsd.org mailing

Re: pf altq on bge

oto udp from any to any port $dns_ports keep state queue q_dns > pass out quick proto { tcp, udp } from to any port { 161, 162 } > keep state queue q_dns > pass in quick proto tcp from any to $main_ip port $http_ports flags > S/SA synproxy state queue q_web > pass out quick proto

how to include bytes and srcip into pf report

Hello, freebsd-pf. Is there any way to make pf, generate reports including srcip and bytes for rules like "pass in log-all quick on $ext_if proto tcp from any to $me port 80"? -- Roman Gorohov mailto:[EMAIL PROTECTED] ___ freebsd-pf@f