Current problem reports assigned to freebsd-pf@FreeBSD.org

2009-06-01 Thread FreeBSD bugmaster
Note: to view an individual PR, use: http://www.freebsd.org/cgi/query-pr.cgi?pr=(number). The following is a listing of current problems submitted by FreeBSD users. These represent problem reports covering all versions including experimental development code and obsolete releases. S Tracker

Re: State Mismatch and tcp.closed

2009-06-01 Thread Martin Turgeon
Max Laier a écrit : Can you please post your ruleset. I suspect there is something wrong with it. By the way, I noticed that your are using a 127/8 addresse for your web server. Are you - by chance - running in a jail of kinds? In that case you might need "set skip on lo0" to avoid troubles.

Moving the pf rc.d scripts to run before netif

2009-06-01 Thread Doug Barton
Howdy, As you can see below, I've made a change to the order of execution of the rc.d scripts in 8-current (soon to be 8-release) to run all of the firewalls, including pf, before the network is up. However the following PR gives an example of why this might be bad: http://www.freebsd.org/cgi/que

Re: Moving the pf rc.d scripts to run before netif

2009-06-01 Thread Max Laier
On Monday 01 June 2009 20:38:45 Doug Barton wrote: > Howdy, > > As you can see below, I've made a change to the order of execution of > the rc.d scripts in 8-current (soon to be 8-release) to run all of the > firewalls, including pf, before the network is up. However the > following PR gives an exa

Connect to port 5432

2009-06-01 Thread Ali Faiez Taha
Dear Sirs. What I need to redirect connections from any Internet valid IP and port 5432 to one intranet server running (PostgreSQL Database) on 5432 port ? I am using FreeBSD 7.2 with PF firewall. The rule on Linux iptables now is: iptables -t nat -A PREROUTING -p tcp -s 0/0 -d AAA.BBB

Re: Connect to port 5432

2009-06-01 Thread Espartano
2009/6/1 Ali Faiez Taha : >        Dear Sirs. > > What I need to redirect connections from any Internet valid IP and port 5432 > to one intranet server running (PostgreSQL Database) on > 5432 port ? > I am using  FreeBSD 7.2 with PF firewall. > > The rule on Linux iptables now is: > > iptables -t

Re: Connect to port 5432

2009-06-01 Thread Miroslav Lachman
Ali Faiez Taha wrote: Dear Sirs. What I need to redirect connections from any Internet valid IP and port 5432 to one intranet server running (PostgreSQL Database) on 5432 port ? I am using FreeBSD 7.2 with PF firewall. The rule on Linux iptables now is: iptables -t nat -A PREROUTING

Re: Moving the pf rc.d scripts to run before netif

2009-06-01 Thread Doug Barton
Max Laier wrote: > On Monday 01 June 2009 20:38:45 Doug Barton wrote: >> Howdy, >> >> As you can see below, I've made a change to the order of execution of >> the rc.d scripts in 8-current (soon to be 8-release) to run all of the >> firewalls, including pf, before the network is up. However the >>

Re: kern/135162: [pfsync] pfsync(4) not usable with GENERIC kernel

2009-06-01 Thread linimon
Old Synopsis: pfsync(4) not usable with GENERIC kernel New Synopsis: [pfsync] pfsync(4) not usable with GENERIC kernel Responsible-Changed-From-To: gnats-admin->freebsd-pf Responsible-Changed-By: linimon Responsible-Changed-When: Tue Jun 2 02:28:18 UTC 2009 Responsible-Changed-Why: Over to mainta