Re: pf BUG?

2007-03-29 Thread Volker
On 12/23/-58 20:59, KES wrote: > Hello > > I start to use ADSL > My net work has next sturcture: > CPU -iIP rl0 -SERVER -tun0--- > INET > > I have next pf rules > > 1) drop all > 2) pass in quick on tun0 all > 3) pass out quick on tun0 all > 4) pass in on rl0 from $iIp to any > 5) pass

Re: Why Does This Packet Match This Rule?

2007-03-29 Thread Drew Tomlinson
On 3/28/2007 12:58 PM Greg Hennessy wrote: (and the rest). What am I missing? From the rule snippets posted, 'keep state' & 'keep state flags S/SA' comes to mind. You should endeavour to keep state on each and every rule and only establish tcp state on the 3 way handshake. Thank yo

Re[2]: pf BUG?

2007-03-29 Thread KES
You wrote 29 марта 2007 г., 16:15:40: V> On 12/23/-58 20:59, KES wrote: >> Hello >> >> I start to use ADSL >> My net work has next sturcture: >> CPU -iIP rl0 -SERVER -tun0--- > INET >> >> I have next pf rules >> >> 1) drop all >> 2) pass in quick on tun0 all >> 3) pass out quick on tu

Re: How to balance my own outgoing traffic?

2007-03-29 Thread Sunil Sunder Raj
Hi, Load balancing outgoing traffic will not be a problem in any setup. But the biggest problems you will face is ssh sessions and websites like rapidshare. You will start the session with 1 ip address and suddenly the round robin rule will take your traffic out with another ip address. This w