howto use route-to with pf and carp

2016-08-13 Thread niya levi
hi i have two firewalls running pf and carp, i have apcupsd and ntp running on the firewalls, both connect to apcupsd and ntp servers on my lan , the firewalls also send mail to my internal mail server at regular intervals, the firewall when in slave mode loses all connectivity through the

pf how to redirect bittorent

2016-05-26 Thread niya levi
i have setup deluge with 57000 for the incoming port and 57001 for the out going port on a headerless box do i need something like this to redirect to bittorent traffic in pf.conf match in on egress proto { udp, tcp } from any to any port 57000 rdr-to $TORRENTBOX match in on $INT_IFACE proto { udp,

how is a table of blocked addresses synchronized between redundant firewalls

2016-05-21 Thread niya levi
hi everyone i have two firewalls tied together with carp, i understand that state tables are synchronized between the firewalls with pfsync, are user created tables also synchronized, if not how is this done ? shadrock

pf queue bandwidth estimation

2016-05-12 Thread niya levi
using broadbandspeedchecker.co.uk i measured the bandwidth on my virgin media line, the download speed varied form as low as 20Mb/sec up to 50Mb/sec depending on the time of day the test was run, what will be the result if i put a value for the queue bandwidth which is greater or lesser the the max

unable to add tun interface to bridge

2016-04-23 Thread niya levi
hi everyone i am trying to setup openvpn with tun on a bridge (openbsd 5.9), i tried the following but got an Invalid argument error, ifconfig tun0 create ifconfig bridge0 create ifconfig bridge0 add em0 ifconfig bridge0 add tun0 ifconfig: bridge0: tun0: Invalid argument what is the correct way t