Re: pf DIOCNATLOOK on redirected gre packets

2006-08-29 Thread Damien Miller
On Tue, 29 Aug 2006, Raja Subramanian wrote: > > A (more complicated) alternative would be to teach pf to pull out > > either the GRE "key" (rfc2980) and/or eGRE "call id" (rfc2637) fields > > and stuff them into the space used by the port numbers. IIRC both are > > uint32, so they should fit. Thi

Re: pf DIOCNATLOOK on redirected gre packets

2006-08-29 Thread Raja Subramanian
On 8/29/06, Damien Miller <[EMAIL PROTECTED]> wrote: It looks like you are hitting this code in pf_ioctl.c: ... Maybe this test should be: ... to ignore the port numbers for non-TCP/UDP. That worked! Thanks Damien! A (more complicated) alternative would be to teach pf to pull out either

Re: pf DIOCNATLOOK on redirected gre packets

2006-08-29 Thread Damien Miller
On Tue, 29 Aug 2006, Raja Subramanian wrote: > Hi All, > > I'm in the process of writing a pptp proxy for PF and > am a fair way through it. > > I'm redirecting GRE packets from PF to the proxy using: >rdr on $wan proto gre from $lan:network to \ >any -> 127.0.0.1 > > GRE packet

pf DIOCNATLOOK on redirected gre packets

2006-08-28 Thread Raja Subramanian
Hi All, I'm in the process of writing a pptp proxy for PF and am a fair way through it. I'm redirecting GRE packets from PF to the proxy using: rdr on $wan proto gre from $lan:network to \ any -> 127.0.0.1 GRE packets are hitting my proxy at 127.0.0.1, but I'm unable to interrogat