mail archive Technical discussion and general questions about packet filter (pf)
freebsd-pf.freebsd.org
(List home) (Recent threads) (174 other FreeBSD lists)
Subscription Options
- RSS or Atom: Read-only subscription using a browser or aggregator. This is the recommended way if you don't need to send messages to the list. You can learn more about feed syndication and clients here.
- Conventional: All messages are delivered to your mail address, and you can reply. To subscribe, send an email to the list's subscribe address with "subscribe" in the subject line, or visit the list's homepage here.
- Low traffic list: less than 3 messages per day
- This list contains about 7,013 messages, beginning Sep 2004
- 0 messages added yesterday
Technical discussion and general questions about packet filter (pf)
August 2008
need help with keep state and shaping (8 Replies)
news — 121761187401 Aug 2008*
ext_if="bge0" int_if="bge1" pass out quick on $ext_if from 10.0.0.1 to any queue upload1 pass out quick on $int_if from any to 10....
FreeBSD bugmaster — 121784801904 Aug 2008
Current FreeBSD problem reports Critical problems S Tracker Resp. Description o kern/111220 pf [pf] repeatable hangs while manipulating pf tables 1 pr...
Ismail OZATAY — 121788306804 Aug 2008
Hi there, Today i tried to make a policy routing with pf on freebsd 7 server for my second internet connection but couldn't do it. My default gw i...
pf and torrent clients (1 Reply)
Vitaliy Vladimirovich — 121803815606 Aug 2008*
Hi, All. I have one question about pf. In my LAN some users use torrent clients. This torrent client create states with 86400s timeoutes. But when use...
TECO DRYER — 121805883106 Aug 2008
vegetable dr Sender: "TECO DRYER" Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit...
Rodrique Heron — 121809850507 Aug 2008*
I'm a running a Apache reverse proxy on PF+CARP, one node as master the other backup. I want a active/active setup, but since I don't have a h...
Nejc Škoberne — 121812563907 Aug 2008
Hello, I have a server with multiple jails of different types (service jails, user jails, ...). In my rc.conf I have (the relevant parts): # Host ifco...
FreeBSD bugmaster — 121845282211 Aug 2008
Current FreeBSD problem reports Critical problems S Tracker Resp. Description o kern/111220 pf [pf] repeatable hangs while manipulating pf tables 1 pr...
syn flood, tcpdump readings (5 Replies)
Tom Huppi — 121846808011 Aug 2008*
I have been using 'pf' for about 8 months now, and it has been rock solid and a real pleasure to use. I built it into: FreeBSD 6.3-PRERELEASE ...
Why the old version of pf? (6 Replies)
Redd Vinylene — 121846821511 Aug 2008*
Hello hello! Just curious why FreeBSD 7 has to use an old version of pf? There's been so many improvements! I'd very much like to use the new ...
Alexandre Biancalana — 121881083515 Aug 2008
Hi list, I'm experiencing some problems with blocked connections because of bad states but I need some more information about why this is happenin...
why BAD state messages (4 Replies)
Alexandre Biancalana — 121882144615 Aug 2008*
Hi list, I'm experiencing some problems with blocked connections because of bad states but I need some more information about why this is happenin...
FreeBSD bugmaster — 121905761418 Aug 2008
Current FreeBSD problem reports Critical problems S Tracker Resp. Description o kern/111220 pf [pf] repeatable hangs while manipulating pf tables 1 pr...
Volker — 121909914218 Aug 2008
Hi! Last week I discovered an LOR on 7-STABLE (last build: 2008-Aug-17, RELENG_7). I can easily recreate the problem when running a synproxy state rul...
Morgan Wesström — 121921919020 Aug 2008
Hi. For five years I've used ALTQ to shape the upload of my DSL connection and it has worked very well. All details can be found further down in t...
Question about icmp (1 Reply)
Leslie Jensen — 121925765920 Aug 2008*
When setting up PF I found the recommendation to use the following rule to allow ICMP to pass. # macros icmp_types="echoreq" # filter rules ...
A problem with variable (1 Reply)
Leslie Jensen — 121925866020 Aug 2008*
I've defined a variable proxyport = "{ 8080 }" The rule rdr on $int_if inet proto tcp from $internal_net to any / port $proxy_services -...
port stealth mode? (8 Replies)
Leslie Jensen — 121929653021 Aug 2008*
Hello I've done some testing with Steve Gibsons "Shields up" https://www.grc.com/x/ne.dll?bh0bkyd2 These tests lists the ports as closed...
Limiting bandwidth (5 Replies)
Erik Danielsson — 121930481621 Aug 2008*
Hello, I'm using PF together with ALTQ, but my need of limiting bandwidth has changed. I need to be able to limit the bandwidth from/to a certain ...
Nejc Škoberne — 121965704325 Aug 2008
Hello, I have a central FreeBSD 7.0 router running pf with SERVERS and USERS1 and USERS2 networks attached to it. I also have some Sybase SQL servers ...
FreeBSD bugmaster — 121966241525 Aug 2008
Current FreeBSD problem reports Critical problems S Tracker Resp. Description o kern/111220 pf [pf] repeatable hangs while manipulating pf tables 1 pr...
ALTQ and shaping an existing session (3 Replies)
Rajkumar S — 121986703427 Aug 2008*
Hi, I have configured pf/altq to shape traffic in my freebsd box. rule fragments are as below. altq on rl0 cbq bandwidth 512Kb queue { lanRoot } altq ...
Squid/ Danguardian + Transparent Bridge (2 Replies)
James Shupe — 121988597528 Aug 2008*
I've been trying to get pf to transparently redirect all incoming traffic on port 80 to port 8080 on a bridge to pass through to Dansguardian. Thi...
Jeremy Chadwick — 121989577828 Aug 2008
- End forwarded message - James forgot to CC the list when replying; I got his permission to forward this. His problem seems to be when using rdr whil...
pf and mxge (5 Replies)
ben wilber — 122020598131 Aug 2008*
Hello, I'm trying to use PF on a machine with an mxge(4) interface and am having some difficulty. With my ruleset loaded, any TCP session that get...