Re: freebsd 7.1 pf route-to connection stall

2009-03-02 Thread Tom Uffner
Link wrote: Thanks for your reply. Tried rules you`ve listed. Does not help I`ve checked with tcpdump packets are still going out using default route. hmm. it sounds like packets aren't matching the rules. at this point all I can suggest is adding an explicit "pass log all" as the first r

Re: freebsd 7.1 pf route-to connection stall

2009-03-02 Thread Link
Tom Uffner пишет: Zinevich Denis wrote: "pass in on $if_bce0 route-to ($if_bce0 $if_bce0_gw) to any" will not work. But anyway question is not in syntax of rules, because nobody touched it and it was working on 6.3, 7.1-p2, but not on 7.1-p3 Network is quite simple. Server has 2 cards bce0 an

Re: freebsd 7.1 pf route-to connection stall

2009-02-28 Thread Tom Uffner
Zinevich Denis wrote: "pass in on $if_bce0 route-to ($if_bce0 $if_bce0_gw) to any" will not work. But anyway question is not in syntax of rules, because nobody touched it and it was working on 6.3, 7.1-p2, but not on 7.1-p3 Network is quite simple. Server has 2 cards bce0 and bce1 bce0 - 172.2

Re: freebsd 7.1 pf route-to connection stall

2009-02-28 Thread Zinevich Denis
"pass in on $if_bce0 route-to ($if_bce0 $if_bce0_gw) to any" will not work. But anyway question is not in syntax of rules, because nobody touched it and it was working on 6.3, 7.1-p2, but not on 7.1-p3 Network is quite simple. Server has 2 cards bce0 and bce1 bce0 - 172.20.51.10 bce1 - 172.20.1

Re: freebsd 7.1 pf route-to connection stall

2009-02-27 Thread Tom Uffner
Link wrote: Tom Uffner wrote: i'm having trouble making sense of that rule. could you explain (or maybe draw a simple diagram) what you are trying to accomplish with it? Seems that i found problem. And I`m going to post it to freebsd bugs. you're probably better of staying on freebsd-pf

freebsd 7.1 pf route-to connection stall

2009-02-27 Thread Link
Hello all, my problems begun after migration from free 6.3 to 7.1 I use only one rule: pass out on $if1 route-to ($if0 $if0_gw) from $if0 to any After upgrade to 7.0 i found that i should add "no state" Now using scp i can download from server, but i can`t upload via $if0 interface. Connection