Re: Using ALTQ without PF in FreeBSD

2008-05-12 Thread Jille Timmermans
Hello, Diego Salvador wrote: To Whom It May Concerned: Hi! Is it possible to use ALTQ in FreeBSD without PF? I know it is possibly to use ALTQ with IPFW (another firewall), Because what I want to achieve is to build a QoS system/machine in a Diffserv or Intserv network without firewall. It s

Current problem reports assigned to freebsd-pf@FreeBSD.org

2008-05-12 Thread FreeBSD bugmaster
Current FreeBSD problem reports Critical problems S Tracker Resp. Description o kern/111220 pf [pf] repeatable hangs while manipulating pf tables 1 problem total. Serious problems S Tracker

Re: Using ALTQ without PF in FreeBSD

2008-05-12 Thread Diego Salvador
Hi Jille, Building a DiffServ domain network will require DiffServ Code Point (DSCP) values or bits for packet marking and re-marking for QoS. PF only supports Type-of-Service (TOS) bits. Thanks, Diego Salvador Diego Salvador wrote: > To Whom It May Concerned: > > Hi! Is it possible to use

Re: Using ALTQ without PF in FreeBSD

2008-05-12 Thread Max Laier
Hello Diego, On Monday 12 May 2008 07:41:30 Diego Salvador wrote: > Hi! Is it possible to use ALTQ in FreeBSD without PF? Because what I > want to achieve is to build a QoS system/machine in a Diffserv or > Intserv network without firewall. It seems like ALTQ is tightly coupled > with PF. I have r

Re: Using ALTQ without PF in FreeBSD

2008-05-12 Thread Diego Salvador
Hi Max, Thanks for your reply and explanation! I now understand why ALTQ is in PF-mode. What are the things needed to be done in order ALTQ to be SMPng compliant? What is the use of the option ALTQ_NOPCC in the kernel? This is described to be used for SMP kernels? Yes, I will look also on the p

Re: Using ALTQ without PF in FreeBSD

2008-05-12 Thread Max Laier
Diego, please don't top post! On Monday 12 May 2008 16:06:16 Diego Salvador wrote: > Thanks for your reply and explanation! I now understand why ALTQ is in > PF-mode. What are the things needed to be done in order ALTQ to be > SMPng compliant? I haven't looked at the classifier code in a while.

Re: do not work nested unnamed anchor

2008-05-12 Thread Max Laier
Hello Igor, it seems this is a general problem and I can't figure out the cause of it, ATM. It seems that it is the same in OpenBSD (and has been for quite some time, too). Daniel, Ryan, any ideas? Attached is a transcript from OpenBSD 4.3 inside of qemu trying the verbatim pf.conf(5) examp

pf + GeoIP

2008-05-12 Thread Ansar Mohammed
Hello All, Does anyone have any scripts on integrating pf with GeoIP? Is there an extension api? ___ freebsd-pf@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "[EMAIL PROTECTED]"

smtp not working with state modulation

2008-05-12 Thread Mark Pagulayan
Hi Guys, OS: FreeBSD 7.0-RELEASE I am having trouble Allowing external request SMTP through the firewall with "module state". But with "keep state" it is working fine. Here is my rules below in pf: ext_if="em1" int_if="em0" scrub in on $ext_if block in log on $ext_if a

Re: smtp not working with state modulation

2008-05-12 Thread Jeremy Chadwick
On Tue, May 13, 2008 at 01:53:31PM +1200, Mark Pagulayan wrote: > OS: FreeBSD 7.0-RELEASE > I am having trouble Allowing external request SMTP through the firewall > with "module state". But with "keep state" it is working fine. modulate state is known to be broken; use keep state instead. Here'

RE: smtp not working with state modulation

2008-05-12 Thread Mark Pagulayan
Thanks for the reply Jeremy. This is a big help. Cheers, Mark -Original Message- From: Jeremy Chadwick [mailto:[EMAIL PROTECTED] Sent: Tuesday, 13 May 2008 3:03 p.m. To: Mark Pagulayan Cc: freebsd-pf@freebsd.org Subject: Re: smtp not working with state modulation On Tue, May 13, 2008

Re: Using ALTQ without PF in FreeBSD

2008-05-12 Thread Diego Salvador
Max Laier <[EMAIL PROTECTED]> wrote: Diego, please don't top post! On Monday 12 May 2008 16:06:16 Diego Salvador wrote: > Thanks for your reply and explanation! I now understand why ALTQ is in > PF-mode. What are the things needed to be done in order ALTQ to be > SMPng compliant? I haven't loo