On 2006-08-26 20:31, "J.D. Bronson" <[EMAIL PROTECTED]> wrote:
> At 07:59 PM 8/26/2006, you wrote:
> >I'd go for the simpler syntax of:
> >
> >MYADDR:
> > ! /sbin/ipf -y
>
> well that didnt work either. what a pain. :(
>
> tun0: Warning: /etc/ppp/ppp.linkup: ! /sbin/ipf -y: Invalid comman
At 07:59 PM 8/26/2006, you wrote:
I'd go for the simpler syntax of:
MYADDR:
! /sbin/ipf -y
well that didnt work either. what a pain. :(
tun0: Warning: /etc/ppp/ppp.linkup: ! /sbin/ipf -y: Invalid command
perhaps its time to write a script and simply reference the script
from ppp.
On 2006-08-26 19:46, "J.D. Bronson" <[EMAIL PROTECTED]> wrote:
> Ok guys...now that I have ipfilter working...I need to run a few
> commands in /etc/ppp/ppp;linkup and cant figure out the syntax...
>
> % cat /etc/ppp/ppp.linkup
>
> # It is no longer necessary to re-add the default route here as our
Ok guys...now that I have ipfilter working...I need to run a few
commands in /etc/ppp/ppp;linkup and cant figure out the syntax...
% cat /etc/ppp/ppp.linkup
# It is no longer necessary to re-add the default route here as our
MYADDR:
! sh -c "/sbin/ipnat -CF -f /etc/ipnat.conf"
! sh -c "/sbin/
On 2006-08-26 18:52, "J.D. Bronson" <[EMAIL PROTECTED]> wrote:
> At 06:37 PM 8/26/2006, Giorgos Keramidas wrote:
> >Cool! If this is indeed the fix, let us know :)
> >
> >If you also feel like it and you are not limited by contract or
> >other things, I'd be interested to see how you modified IP F
At 06:37 PM 8/26/2006, Giorgos Keramidas wrote:
Cool! If this is indeed the fix, let us know :)
If you also feel like it and you are not limited by contract or
other things, I'd be interested to see how you modified IP Filter
to make it use a "block by default" policy.
Regards,
Giorgos
This
On 2006-08-26 17:48, "J.D. Bronson" <[EMAIL PROTECTED]> wrote:
>At 05:19 PM 8/26/2006, Giorgos Keramidas wrote:
>> You are implicitly blocking all traffic on the lo0 interface (by the
>> modified default policy to "block" all traffic, and missing an
>> explicit rule to allow lo0 traffic).
>>
>> Whe
On Saturday, August 26, 2006 at 8:02:10 PM, J.D. confabulated:
> I got a full load of 6.1p4 installed and all built. I have pppoe and
> ipfilter running almost perfect.
> Clients can use the machine (as a router) and get out perfectly!
> No issues with network performance at all. I am very pleas
At 05:19 PM 8/26/2006, Giorgos Keramidas wrote:
You are implicitly blocking all traffic on the lo0 interface (by the
modified default policy to "block" all traffic, and missing an explicit
rule to allow lo0 traffic).
When a system tries to connect to itself, it uses lo0/127.0.0.1 and this
is no
On 2006-08-26 17:10, "J.D. Bronson" <[EMAIL PROTECTED]> wrote:
> At 05:07 PM 8/26/2006, Giorgos Keramidas wrote:
> >Weird. This doesn't seem ot include *ANY* block rules at all.
> >
> >Is this a standard 6.1 installation, or do you have local IP Filter
> >modifications (like, for instance, a modif
At 05:07 PM 8/26/2006, Giorgos Keramidas wrote:
Weird. This doesn't seem ot include *ANY* block rules at all.
Is this a standard 6.1 installation, or do you have local IP Filter
modifications (like, for instance, a modified 'default' rule which
blocks everything, instead of allowing everything)
On 2006-08-26 16:05, "J.D. Bronson" <[EMAIL PROTECTED]> wrote:
> At 03:40 PM 8/26/2006, Giorgos Keramidas wrote:
>
> >Don't show us the ipf.conf file you are using, but the output of:
> >
> >% ipfstat -hni
> >% ipfstat -hno
> >
> >Then we can really know what rules you have loaded in IP Fi
At 04:05 PM 8/26/2006, J.D. Bronson wrote:
# ipfstat -hni
2 @1 pass in quick on bge0 all keep state keep frags
# ipfstat -hno
1 @1 pass out quick on bge0 all keep state keep frags
1 @2 pass out quick on tun0 proto tcp from any to any flags S/FSRPAU
keep state keep frags
1 @3 pass out quick on
At 03:40 PM 8/26/2006, Giorgos Keramidas wrote:
Don't show us the ipf.conf file you are using, but the output of:
% ipfstat -hni
% ipfstat -hno
Then we can really know what rules you have loaded in IP Filter.
# ipfstat -hni
2 @1 pass in quick on bge0 all keep state keep frags
# ipf
On 2006-08-26 15:02, "J.D. Bronson" <[EMAIL PROTECTED]> wrote:
> I got a full load of 6.1p4 installed and all built. I have
> pppoe and ipfilter running almost perfect.
>
> Clients can use the machine (as a router) and get out
> perfectly! No issues with network performance at all. I am
> very ple
15 matches
Mail list logo