>>> Alex Trull <[EMAIL PROTECTED]> 09/02/08 3:22 PM >>>
> > Gavin,
> >
> > Could mean you've maxed out your connection states pf
> >
> > if you've got a default amount of states, that means a 10k
> > state limit - check the
ce? I'd
like to know; every bit of added learning is a plus for me. :)
- Gavin
___
freebsd-pf@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
only allows me one page of
search results for some reason. I have also Googled a bit and have finally
posted here. Very confused.
Gavin Spomer
Systems Programmer
Brooks Library
Central Washington University
___
freebsd-pf@freebsd.org mailing list
http
Synopsis: [patch] teach tcpdump(1) to cope with the new-style pflog(4) output
State-Changed-From-To: open->feedback
State-Changed-By: gavin
State-Changed-When: Fri Jun 13 14:05:10 UTC 2008
State-Changed-Why:
To submitter: it looks like this PR is no longer relevent to
RELENG_7 after the imp
I have no idea what I'm supposed to do when I get this email. Am I supposed to
stop using pf until it gets patched or what?
- Gavin
>>> FreeBSD bugmaster <[EMAIL PROTECTED]> 02/11/08 3:07 AM >>>
Current FreeBSD problem reports
Critical problems
S Tracke
>>> Vadym Chepkov <[EMAIL PROTECTED]> 01/31/08 12:23 PM >>>
Gavin,
That doesn't make sense to me, everything seems to be normal.
Could you send output of uname -a ?
uname -a:
FreeBSD myhostname.cwu.edu 6.2-RELEASE FreeBSD 6.2-RELEASE #6: Fri Jan 25
>>> Vadym Chepkov <[EMAIL PROTECTED]> 01/29/08 12:06 PM >>>
Gavin,
I have never had to do anything like this and nevertheless I have /dev/pf
I have pf compiled into the kernel, so I wouldn't blame it on "must be
module" either.
Could you send me, please, t
>>> David DeSimone <[EMAIL PROTECTED]> 01/28/08 3:50 PM >>>
Gavin Spomer <[EMAIL PROTECTED]> wrote:
>
> Although it was new to me, a couple of quick glances at man pages and
> experiments produced a /dev/pf for me.
Can you tell us what it was that you
boxes filled up with this thread! ;)
Now I'm having fun dinking around with the pf.conf. One thing I really dig so
far about pf versus the firewall I use on my SuSE machines (iptables), is that
I don't have to reboot for changes to take effect. Way happy about that! :)
- Gavin
>>&
>>> Gary Palmer <[EMAIL PROTECTED]> 01/25/08 2:41 PM >>>
>Geez, I'm so embarrassed. This is the first time I've ever run dmesg. Lots
> of stuff in there; anything in particular I'm looking
>for? I see "link_elf: symbol altq_remove undefined" 6 times at the end.
> Before that I see "pid 34
2. cd /usr/src
3. make buildkernel KERNCONF=MACHINEHOSTNAME
4. make installkernel KERNCONF=MACHINEHOSTNAME
5. shutdown -r now
Well, the weekend is upon us. We can continue this on Monday, if you're
still willing. Thanks for the extra effort.
- Gavin
__
>>> Gary Palmer <[EMAIL PROTECTED]> 01/25/08 1:47 PM >>>
On Fri, Jan 25, 2008 at 11:45:00AM -0800, Gavin Spomer wrote:
> My mistake, I DO have pf.ko:
> # ls /boot/kernel/pf.ko
> -r-xr-xr-x 1 root wheel 184K Jan 25 09:33 kernel/pf.ko
>I wa
" when I run kldload.
Sigh, shouldn't be this difficult. ;)
- Gavin
>>> Gavin Spomer 01/25/08 11:08 AM >>>
>>> Jeremy Chadwick <[EMAIL PROTECTED]> 01/25/08 10:05 AM >>>
On Fri, Jan 25, 2008 at 09:54:19AM -0800, Gavin Spomer wrote:
>
>>> Jeremy Chadwick <[EMAIL PROTECTED]> 01/25/08 10:05 AM >>>
On Fri, Jan 25, 2008 at 09:54:19AM -0800, Gavin Spomer wrote:
> I followed your instructions to a "T" and then after I rebooted, I double
> checked everything to make sure I didn't do
&g
(?) question: Is there a way to manually create /dev/pf or can it be
copied from another system?
Thanks for taking the time to help this quasi-newbie. :)
- Gavin
>>> Jeremy Chadwick <[EMAIL PROTECTED]> 01/25/08 9:08 AM >>>
1) Remove the following lines from your ker
>>> Tommy Pham <[EMAIL PROTECTED]> 01/25/08 7:56 AM >>>
Hi Gavin,
Have you rebuilt world or is it a clean install? Update the src to
RELENG_6_2 patch 9 via cvs? If I remember correctly, a clean install
of 6.2-RELEASE from the cD should have the require pf device. Y
Thanks Jeremy. See more below.
>>> Jeremy Chadwick <[EMAIL PROTECTED]> 01/25/08 8:12 AM >>>
On Fri, Jan 25, 2008 at 07:43:54AM -0800, Gavin Spomer wrote:
> I did it via the command line:
> make buildkernel KERNCONF=MACHINEHOSTNAME
> make insta
d for me to see where
I went wrong. I seem to have all the
components of pf except /dev/pf. I have /sbin/pfctl, /etc/pf.conf,
/boot/kernel/pf.ko, /boot/kernel/pflog.ko and the
appropriate stuff I mentioned in /etc/rc.conf and probably others as well. I
just don't have /dev/pf. How doe
pf_enable="YES"
pf_rules="/etc/pf.conf"
pf_flags=""
pflog_logfile="/var/log/pflog"
3. I rebooted and tried pfctl -e again. No dice. Gr.
I am using 6.2-RELEASE. What's a guy gotta do to get a firewall around here? ;)
Gavin Spomer
Systems P
Hi all,
I've been playing with this for a while to get it working and below is
my status. First, my setup - (NB, all servers mentioned are running
6-STABLE). I have a FreeBSD tri-homed gateway/router which is where I'm
trying to run spamd. On one NIC of the router I have my modem, the
second
20 matches
Mail list logo