Re: problem with PF tables

2008-03-31 Thread Elliott Perrin
limits are on number of entries in a table but check that and post it and perhaps if Max sees it he can tell you if you have exceeded the limit. Cheers, Elliott Perrin [EMAIL PROTECTED] ___ freebsd-pf@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: need help figuring out if pf is right for me.

2008-03-31 Thread Elliott Perrin
On Mon, 2008-03-31 at 13:51 -0500, Rance Hall wrote: > Ive been tasked with writing a firewall script for a client, and I'm > looking at pf for the firewall. > > so far the only requirement I cant seem to find an example of how to > do is to actually script the pf rules from a shell script. > > T

Re: SSH Session disconnecting with pf

2008-04-07 Thread Elliott Perrin
On Mon, 2008-04-07 at 23:02 +0100, Torsten @ CNC-LONDON wrote: > Hi All > > I'm running FreeBSD stable6.2 on all my servers and in the past one year I > notices a random disconnection of persistent sessions to and from servers > with is running as PF the firewall > > > > At first I was blami

Re: SSH Session disconnecting with pf

2008-04-07 Thread Elliott Perrin
s is very, very wrong, and probably the cause of your issues. This > should be S/SA. That is not very very wrong. Any TCP session starting up should only have the SYN flag set out of SYN FIN ACK RST. As a matter of fact this is in theory a more secure se

Re: SSH Session disconnecting with pf

2008-04-07 Thread Elliott Perrin
On Mon, 2008-04-07 at 17:05 -0700, Jeremy Chadwick wrote: > On Mon, Apr 07, 2008 at 07:17:29PM -0400, Elliott Perrin wrote: > > On Mon, 2008-04-07 at 16:07 -0700, Jeremy Chadwick wrote: > > > On Mon, Apr 07, 2008 at 11:02:33PM +0100, Torsten @ CNC-LONDON wrote: > >

Re: carpdev

2008-04-10 Thread Elliott Perrin
ABLE branches. Tested firewall fail over with my configs using CARP when we started pulling Ethernet plugs resulted in, at most, negligible packet loss while pinging. From the application layer perspective, no sessions experienced any interruption while fail over testing all systems I run CARP on.

Re: Problem with consistent disconnection of IRC sessions

2008-04-24 Thread Elliott Perrin
On Thu, 2008-04-24 at 15:43 -0400, Kevin K wrote: > I am running a basic freebsd 7.0 pf router/firewall for my home computer. On > this same machine I am usually running an IRC (tcp 6667) session. > > It seems as though every 30 minutes to every several hours, my IRC session > disconnects and reco

Re: iptables rule in pf

2008-05-08 Thread Elliott Perrin
On Thu, 2008-05-08 at 01:04 +0300, Oleksandr Samoylyk wrote: > Dear Community, > > I want to move some of our firewalls from Linux/iptables to FreeBSD/pf. > > After reading man pf.conf for a couple of minutes I couldn't find the > realization of such iptables rule in pf: > > iptables -t nat -A P

Re: iptables rule in pf

2008-05-08 Thread Elliott Perrin
On Thu, 2008-05-08 at 11:36 +0300, Oleksandr Samoylyk wrote: > CZUCZY Gergely wrote: > > On Thu, 08 May 2008 11:05:45 +0300 > > Oleksandr Samoylyk <[EMAIL PROTECTED]> wrote: > > > >> CZUCZY Gergely wrote: > >>> On Thu, 08 May 2008 01:04:54 +0300 > >>> Oleksandr Samoylyk <[EMAIL PROTECTED]> wrote:

Re: iptables rule in pf

2008-05-08 Thread Elliott Perrin
On Thu, 2008-05-08 at 13:35 +0200, Daniel Roethlisberger wrote: > Elliott Perrin <[EMAIL PROTECTED]> 2008-05-08: > > On Thu, 2008-05-08 at 11:36 +0300, Oleksandr Samoylyk wrote: > > > CZUCZY Gergely wrote: > > > > On Thu, 08 May 2008 11:05:45 +0300 Oleksand