Re: Easy Question From Newbie

2006-08-21 Thread Ivan Levchenko
actually, could you please tell whats the difference? thanks in advance. On 8/20/06, Kian Mohageri <[EMAIL PROTECTED]> wrote: On 8/18/06, Ivan Levchenko <[EMAIL PROTECTED]> wrote: > You need to either load the pf kernel module, which can be done by adding > pf_load="YES" to /boot/loader.conf

Never Ask Questions On A Friday Afternoon

2006-08-21 Thread beno
Hi; Let me try this again. Here's the beginning of my pf.conf: 1. # SETTING THE STAGE 2. # macros 3. ext_if="vr0" 4. int_if="lo0" 5. http_ports="80 8080 7080" 6. ssh_ports="22" 7. ftp_ports="21 8021 7021" 8. smtp_ports="25" 9. pop3_ports="110" 10. https_ports="443" 11. imap_ssl_ports="993 143" 12

Re: Never Ask Questions On A Friday Afternoon

2006-08-21 Thread Daniel Hartmeier
On Mon, Aug 21, 2006 at 10:47:17AM -0400, beno wrote: > Apparently, it doesn't like *one* my nested macros in line #16 (it likes > all the others) and it doesn't like the CIDR netmask in line 22. Someone > suggested I research the archives concerning the latter "where this > known problem was a

Re: Never Ask Questions On A Friday Afternoon

2006-08-21 Thread beno
Daniel Hartmeier wrote: If you don't care about that, the short answer is that the '/' in the CIDR notation makes a difference, and you'll have to accept this as a parser peculiarity. Alternatively you can send in a patch or request your money back. You mean, NOBODY has dealt with this problem

Re: Never Ask Questions On A Friday Afternoon

2006-08-21 Thread Jeremy C. Reed
> Let me try this again. Here's the beginning of my pf.conf: > > 1. # SETTING THE STAGE > 2. # macros > 3. ext_if="vr0" > 4. int_if="lo0" > 5. http_ports="80 8080 7080" > 6. ssh_ports="22" > 7. ftp_ports="21 8021 7021" > 8. smtp_ports="25" > 9. pop3_ports="110" > 10. https_ports="443" > 11. imap_s

Re: Never Ask Questions On A Friday Afternoon

2006-08-21 Thread Max Laier
On Monday 21 August 2006 17:47, beno wrote: > Daniel Hartmeier wrote: > > If you don't care about that, the short answer is that the '/' in the > > CIDR notation makes a difference, and you'll have to accept this as a > > parser peculiarity. Alternatively you can send in a patch or request > > your

Re: Never Ask Questions On A Friday Afternoon

2006-08-21 Thread Daniel Hartmeier
On Mon, Aug 21, 2006 at 11:47:08AM -0400, beno wrote: > You mean, NOBODY has dealt with this problem before?! Are there no > work-arounds?? What does everyone else do when faced with this problem?? *plonk* Daniel ___ freebsd-pf@freebsd.org mailing lis

Re: Never Ask Questions On A Friday Afternoon

2006-08-21 Thread beno
Max Laier wrote: 22. directv_ip_addresses="69.19.0.0/17" 23. shadday_ip_addresses="" 24. ssh_ip_addresses="{" $shinjiru_ip_addresses $directv_ip_addresses $shadday_ip_addresses "}" Here's what I get when I try to load it: server167# pfctl -f /etc/pf.conf /etc/pf.conf:24: syntax error pfctl: Synt

Re: Never Ask Questions On A Friday Afternoon

2006-08-21 Thread Bill Marquette
On 8/21/06, beno <[EMAIL PROTECTED]> wrote: > Daniel supplied the pointer to one (of several) threads on this matter > above. > You must be referring to this URL: http://marc.theaimsgroup.com/?t=11484264352&r=1&w=2 Unfortunately, it doesn't load, so that's not of any use. Loads here, your I

Re: Never Ask Questions On A Friday Afternoon

2006-08-21 Thread beno
Bill Marquette wrote: Loads here, your ISP must be blocking it. Here's the subect lines from that thread and the authors for you to Google - should be able to find this thread on any number of mailing list archive sites. 1. 2006-05-26 Re: Recursive macro expansion problems openbsd-p Daniel Har

Re: Never Ask Questions On A Friday Afternoon

2006-08-21 Thread Max Laier
On Monday 21 August 2006 19:32, beno wrote: > Bill Marquette wrote: > > Loads here, your ISP must be blocking it. Here's the subect lines > > from that thread and the authors for you to Google - should be able > > to find this thread on any number of mailing list archive sites. > > > > 1. 2006-05

Re: Never Ask Questions On A Friday Afternoon

2006-08-21 Thread beno
Max Laier wrote: printf 'list="{ 10/8, 192.168.0/24 }"\npass from $list to any\n' | pfctl -nvf- list = "{ 10/8, 192.168.0/24 }" pass inet from 10.0.0.0/8 to any pass inet from 192.168.0.0/24 to any I'm sure I misunderstand. Here is *my* code: shinjiru_ip_addresses="202.71.102.114 202.71.10

Current problem reports assigned to you

2006-08-21 Thread FreeBSD bugmaster
Current FreeBSD problem reports Critical problems Serious problems S Tracker Resp. Description o kern/82271 pf [pf] cbq scheduler cause bad latency f kern/86072 pf [pf] Packet Filter rule

Re: Never Ask Questions On A Friday Afternoon

2006-08-21 Thread Michal Mertl
beno wrote: > Max Laier wrote: > > printf 'list="{ 10/8, 192.168.0/24 }"\npass from $list to any\n' | > > pfctl -nvf- > > > > list = "{ 10/8, 192.168.0/24 }" > > pass inet from 10.0.0.0/8 to any > > pass inet from 192.168.0.0/24 to any > > > I'm sure I misunderstand. Here is *my* code: > > shi