Re: relayd and "src track"

2008-05-17 Thread Michał Koc
Due to some problems witch patch formatting in mail agent it is also available at http://www.prime.pl/relayd.diff regards MichaE Koc Pierre-Yves Ritschard pisze: >> + if (rdr->conf.flags & F_STICKY) >> + if (ioctl(env->sc_pf->dev, DIOCCLRSRCNODES, 0) == -1) >> +

Re: relayd and "src track"

2008-05-17 Thread Michał Koc
Hi, Looking into pf_ioctl.c and pfvar.h I've found that there is an undocumented (for some unknown reason) IOCTL - DIOCKILLSRCNODES. Further investigation revealed that it's purpose is to remove single node from source tracking tree. So the simplest way is find out what connections should be re

Re: relayd and "src track"

2008-05-16 Thread Pierre-Yves Ritschard
> + if (rdr->conf.flags & F_STICKY) > + if (ioctl(env->sc_pf->dev, DIOCCLRSRCNODES, 0) == -1) > + fatal("sync_table: cannot clear the tree of source > tracking nodes"); > + >free(addlist); > >log_debug("sync_table: table %s: %d added, %d de

Re: relayd and "src track"

2008-05-16 Thread Michał Koc
Hi, actually it is enough to clear the tree of source tracking nodes right after syncing tables, so the sticky-address is stored again. Unfortunately there is one disadvantage, all sources will be flushed, so some connections can be assigned to different hosts. But I think it's better then lea

relayd and "src track"

2008-04-17 Thread Per-Olov Sjöholm
Hi Is it possible to handle PF "src track" from relayd. If I use "sticky connections" in relayd (NOT layer 7) and one target host dissappear, then it seems like "src track" comes into play. When one target host (for example 10.0.0.1 below) goes down I want to clear all src track info from PF r