Re: Trouble using :peer modifier correctly

2008-03-31 Thread Girish Venkatachalam
On 02:29:58 Mar 31, Nick Davey wrote: > Does it matter that the subnet mask is configured as a /30, or is it the > media type that controls this behavior? Is there any way to use this > mechanism on an ethernet interfaces? Ethernet is a broadcast medium. The :peer specifier works only for point t

Re: Trouble using :peer modifier correctly

2008-03-31 Thread Girish Venkatachalam
On 13:49:15 Mar 31, Egbert Krook wrote: > On Mon, Mar 31, 2008 at 02:29:58AM -0400, Nick Davey wrote: > > On Mon, Mar 31, 2008 at 12:16 AM, Theo de Raadt <[EMAIL PROTECTED]> > > >:peer Translates to the point to point interface's peer > > > > > > That won't work. Your fxp is no

Re: Trouble using :peer modifier correctly

2008-03-30 Thread Egbert Krook
On Mon, Mar 31, 2008 at 02:29:58AM -0400, Nick Davey wrote: > Does it matter that the subnet mask is configured as a /30, or is it the > media type that controls this behavior? Is there any way to use this > mechanism on an ethernet interfaces? > > On Mon, Mar 31, 2008 at 12:16 AM, Theo de Raadt <

Re: Trouble using :peer modifier correctly

2008-03-30 Thread Nick Davey
Does it matter that the subnet mask is configured as a /30, or is it the media type that controls this behavior? Is there any way to use this mechanism on an ethernet interfaces? On Mon, Mar 31, 2008 at 12:16 AM, Theo de Raadt <[EMAIL PROTECTED]> wrote: > > We're trying to use the :peer modifier

Re: Trouble using :peer modifier correctly

2008-03-30 Thread Theo de Raadt
> We're trying to use the :peer modifier to minimize the number of macros > in our pf configuration files. > > For some reason we can't get it to work: > > # cat /etc/pf.conf > set skip on lo > > block log > > pass in quick on fxp0 inet proto tcp from fxp0:peer to fxp0 port ssh > > # pfctl -n

Trouble using :peer modifier correctly

2008-03-30 Thread Egbert Krook
Hello, We're trying to use the :peer modifier to minimize the number of macros in our pf configuration files. For some reason we can't get it to work: # cat /etc/pf.conf set skip on lo block log pass in quick on fxp0 inet proto tcp from fxp0:peer to fxp0 port ssh # pfctl -n -f /etc/pf.conf no