Current problem reports assigned to you

2006-12-04 Thread FreeBSD bugmaster
Current FreeBSD problem reports Critical problems Serious problems S Tracker Resp. Description o kern/82271 pf [pf] cbq scheduler cause bad latency o kern/92949 pf [pf] PF + ALTQ problems

Re: newbie to pf

2006-12-04 Thread Niklas Saers
Hi guys, On 12/4/06, Daniel Bye <[EMAIL PROTECTED]> wrote: From reading the excellent documentation at the OpenBSD site, I think you are missing a `pass' rule for your redirected traffic. Yes, I was. I've substituted "rdr" for "rdr pass" that I believe should work great for ssh, https and mysq

Fixing up pf for passive mode

2006-12-04 Thread Kevin Kutzko
I am curious how i could set my pf firewall to allow passive mode connections via random ports. I get "illegal port range" when trying to connect / directory list on an external ftp site. I have some general ideas as to how i could remedy this but i thought i'd post it here first. Thanks in a

Re: Fixing up pf for passive mode

2006-12-04 Thread Gergely CZUCZY
On Mon, Dec 04, 2006 at 01:10:03PM -0500, Kevin Kutzko wrote: > I am curious how i could set my pf firewall to allow passive mode connections > via random ports. I get > "illegal port range" when trying to connect / directory list on an external > ftp site. > > > I have some general ideas as t

Re: opinion on this ruleset

2006-12-04 Thread Travis H.
On Thu, Nov 30, 2006 at 06:40:45PM +0100, Gergely CZUCZY wrote: > ($ext_if) translates to an ip address of the interface, > and not to all addresses on the interface. Are you sure? To get a single address, I use ($ext_if:0). > > pass in inet proto icmp all icmp-type $icmp_types keep state > wron

Re: newbie to pf

2006-12-04 Thread Daniel Bye
On Mon, Dec 04, 2006 at 12:36:09PM +0100, Niklas Saers wrote: > > The main problem turned out to be the ADSL router, not pf. The > forwarded data was not being forwarded correctly, but a flash update > and reconfig later the data are coming in fine and being forwarded > just fine. > > What I'm wo