[Bug 212384] pfsync(4) bulk update fail

2016-10-27 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=212384 --- Comment #1 from patf...@davenulle.org --- Hello, My firewalls are now in production and it appears that with a lot of states (~600 000 here). The pfsync bulk works fine just using /etc/rc.d/pfsync. So there is something wrong when the

[no subject]

2016-10-27 Thread James Morris
Hi, I have a FreeBSD server (A) with 2 NICs Each NIC is connected to a different network: igb0: 10.0.0.10/24 igb1: 10.10.10.10/24 The default gateway on the server is 10.0.0.1 The two networks can communicate using a router (10.0.0.1). I have a server (B) running on 10.10.10.100 which on

Forcing a route using pf

2016-10-27 Thread James Morris
Hi, I have a FreeBSD server (A) with 2 NICs Each NIC is connected to a different network: igb0: 10.0.0.10/24 igb1: 10.10.10.10/24 The default gateway on the server is 10.0.0.1 The two networks can communicate using a router (10.0.0.1). I have a server (B) running on 10.10.10.100 which only allo

Re: Forcing a route using pf

2016-10-27 Thread James Morris
Yes, I learned that just now. Link: https://imgur.com/gallery/i8EbX [http://i.imgur.com/BXmiWvE.jpg?fb] Diagram imgur.com Imgur: The most awesome images on the Internet. Best, James From: K

Re: Forcing a route using pf

2016-10-27 Thread Kurt Jaeger
Hi! On Server A: route add -host 10.10.10.100 10.0.0.1 On Server B: route add -net 10.0.0.0/24 10.10.10.1 -- p...@opsec.eu+49 171 3101372 4 years to go ! ___ freebsd-pf@freebsd.org mailing list https://lists.freeb

Re: Forcing a route using pf

2016-10-27 Thread James Morris
Hi, While this does solve the issue of pushing traffic through igb0, however any income connections to igb1 from server B also get shunted out igb0. I was wondering if there is a way to do this in pf. This way I can say for any outbound connections to B use igb0, but if B contacts me on igb1

[Bug 196314] pf nested inline anchors does not work

2016-10-27 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=196314 Martin Beran changed: What|Removed |Added CC||martin.be...@kernun.cz --- Comment