Re: kern/100879: [pf] PF on Freebsd 6.1-STABLE doesn't block IPv6

2006-07-27 Thread Mark Linimon
Old Synopsis: PF on Freebsd 6.1-STABLE doesn't block IPv6 New Synopsis: [pf] PF on Freebsd 6.1-STABLE doesn't block IPv6 Responsible-Changed-From-To: freebsd-bugs->freebsd-pf Responsible-Changed-By: linimon Responsible-Changed-When: Thu Jul 27 06:58:35 UTC 2006 Responsible-Changed-Why: Over to ma

Re: kern/100879: [pf] PF on Freebsd 6.1-STABLE doesn't block IPv6

2006-07-27 Thread Daniel Hartmeier
Synopsis: [pf] PF on Freebsd 6.1-STABLE doesn't block IPv6 State-Changed-From-To: open->closed State-Changed-By: dhartmei State-Changed-When: Thu Jul 27 09:33:52 UTC 2006 State-Changed-Why: not a bug, submitter agrees. http://www.freebsd.org/cgi/query-pr.cgi?pr=100879 ___

Re: carpdev support from OpenBSD

2006-07-27 Thread Max Laier
On Thursday 27 July 2006 01:28, Nick Barkas wrote: > There is a feature from OpenBSD's carp implementation that allows one to > specify which device a carp interface will use, similar to how vlan > devices are associated to a physical interface with the vlandev option > to ifconfig. The change to s

Re: bin/96150: pfctl(8) -k non-functional

2006-07-27 Thread Max Laier
Synopsis: pfctl(8) -k non-functional State-Changed-From-To: open->closed State-Changed-By: mlaier State-Changed-When: Thu Jul 27 11:56:45 UTC 2006 State-Changed-Why: As described above, this seems to be a misunderstanding. Thanks. http://www.freebsd.org/cgi/query-pr.cgi?pr=96150 ___

Re: nat/outbound traffic not passing in pf on FreeBSD 6.1

2006-07-27 Thread Travis H.
On 7/26/06, Lyndon Nerenberg <[EMAIL PROTECTED]> wrote: In the OpenBSD implementation, the 'nat' statement implicitly enables 'keep state' behaviour, therefore a separate rule is not required. You're right, I was forgetting that his "default block" rule applied only to inbound traffic, otherwis

Re: nat/outbound traffic not passing in pf on FreeBSD 6.1

2006-07-27 Thread Jeffrey Williams
Daniel and all on list, Thank you and mea culpa, I should have tried that first. tcpdump showed no packets coming in from the inside network on em1 (even with pf disabled), although the aggregate port switch saw them. so it is either bad switch configuration (likely, my first time with a Del

PF and VLANs

2006-07-27 Thread Bret J Esquivel
Hi Guys, I've be struggling the past few days setting up a VLAN network. Here is the situation. I have a Netgear 24-port managed switch inside an office building. I'd like to give each tenant its own vlan, which will then go to our FreeBSD router and out to the internet. I had it working fine o