PF-NAT

2006-11-30 Thread Artyom Viklenko
Hi, All! PF-NAT in FreeBSD does not support multiple instances of pptp connections from internal network. If it will be improved in some time in the future? What about using libalias in pf or if it possible to use ng_nat in pf? May be I'm klueless... please, point me in right direction. :) --

Re: PF-NAT

2006-11-30 Thread Gilberto Villani Brito
Look this options: http://www.openbsd.org/faq/pf/options.html in your pf.conf. Gilberto 2006/11/30, Artyom Viklenko <[EMAIL PROTECTED]>: Hi, All! PF-NAT in FreeBSD does not support multiple instances of pptp connections from internal network. If it will be improved in some time in the future?

Re: PF-NAT

2006-11-30 Thread Artyom Viklenko
> Look this options: http://www.openbsd.org/faq/pf/options.html in your > pf.conf. Sorry, which option exactly you mention? > > Gilberto > > 2006/11/30, Artyom Viklenko <[EMAIL PROTECTED]>: >> Hi, All! >> >> PF-NAT in FreeBSD does not support multiple >> instances of pptp connections from inter

Re: PF-NAT

2006-11-30 Thread Gilberto Villani Brito
Maybe this: set limit option value Set various limits on pf's operation. * frags - maximum number of entries in the memory pool used for packet reassembly (scrub rules). Default is 5000. * src-nodes - maximum number of entries in the memory pool used for tracking source IP address

Re: PF-NAT

2006-11-30 Thread Daniel Hartmeier
On Thu, Nov 30, 2006 at 02:03:57PM -0200, Gilberto Villani Brito wrote: > Try change this options. None of those will help if you really want two concurrent PPTP connections to the same external peer. pf doesn't look into the payload of PPTP packets and hence can't decide which internal peer to

Re: PF-NAT

2006-11-30 Thread Aristeu Gil Alves Jr
There's no way to share various PPTP client conections to the same PPTP server. pf nat only can handle one at the time, since there's no dst and src port to make more than one nat state. Thats what I heard. -- Aristeu Gil Alves Jr ___ freebsd-pf@freebsd

Re: PF-NAT

2006-11-30 Thread Scott Ullrich
On 11/30/06, Daniel Hartmeier <[EMAIL PROTECTED]> wrote: On Thu, Nov 30, 2006 at 02:03:57PM -0200, Gilberto Villani Brito wrote: > Try change this options. None of those will help if you really want two concurrent PPTP connections to the same external peer. pf doesn't look into the payload of

Fwd: PF-NAT

2006-11-30 Thread Aristeu Gil Alves Jr
The solution I know is to make a vpn tunnel between the firewall and the PPTP server and allow the clients use the vpn tunnel. ___ freebsd-pf@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "

opinion on this ruleset

2006-11-30 Thread Daniel
I was wondering if I could get some opinions on this ruleset please - Basically, I have FreeBSD6.1, running an IRC server on ports 6697, 7000, 6659 thorough to 6671, , 27888. I am also running a nameserver, so have opened TCP and UDP 53. I also want incoming on port 80 and 22. I have about

Re: opinion on this ruleset

2006-11-30 Thread Gergely CZUCZY
On Sun, Nov 26, 2006 at 01:35:57PM -, Daniel wrote: > I was wondering if I could get some opinions on this ruleset please - > > Basically, I have FreeBSD6.1, running an IRC server on ports 6697, 7000, > 6659 thorough to 6671, , 27888. I am also running a nameserver, so have > opened TCP

Re: PF-NAT

2006-11-30 Thread Sten Daniel Sørsdal
Aristeu Gil Alves Jr wrote: > There's no way to share various PPTP client conections to the same > PPTP server. pf nat only can handle one at the time, since there's no > dst and src port to make more than one nat state. > > Thats what I heard. There is no src/dst port but there is Call ID in the

Re: PF-NAT

2006-11-30 Thread Daniel Hartmeier
On Fri, Dec 01, 2006 at 12:25:13AM +0100, Sten Daniel Sørsdal wrote: > Just about any cheap home firewall can do it these days, i > wonder why the open source community is reluctant to take advantage. The "if a $50 commercial box can do it, why can't pf?" argument pops up every now and then, mayb