Re: bridge changes traffic interface for pf, but not for tcpdump

2005-07-06 Thread j-fron . q . public
I've been informed, if I understand correctly, that bridge isn't intended to do what I want to do with it. FWIW, anyone who is interested, I'm hanging up the modification effort at "half complete," because it accomplishes everything I need. That is, I'm interested in blocking traffic to the ro

Re: OpenBSD "Visible" Bridge and NAT box -- strangeness and questions

2005-07-06 Thread j-fron . q . public
I want to thank the people who have responded recommending authpf. That seems like a nice add-on, as it will allow me to block all access to the LAN from wireless clients until they have logged in to the router. It's a trade-off, of course, as I had not intended to allow wireless clients SSH a

Re: pflog0, ICMP rule 4294967295/3(short)

2005-07-06 Thread j-fron . q . public
> To: misc@openbsd.org > Subject: Re: pflog0, ICMP rule 4294967295/3(short) John L. Scarfone wrote: > On Wed, Mar 09, 2005 at 07:42:16PM -0500, Jim Fron said: >> John L. Scarfone wrote: >> > On Tue, Mar 08, 2005 at 08:49:18PM -0500, Jim Fron mentioned: >> >> OpenBSD on le0: >> >> ...0800 60: