freebsd-pf mailing list

FromSubjectsort iconDate
Jean Dupre Jul 3, 3:42 pm 2009
budsz
Problem PF and HFSC
Hello, I try to use PF under FreeBSD 7.2-STABLE. Here my config file: # Variable global ifint0="rl0" ifext0="rl1" ipcl = "{ 192.168.100.1, 192.168.100.2, 192.168.100.3, 192.168.100.4, 192.168.100.5, \ 192.168.100.6, 192.168.100.7, 192.168.100.8, 192.168.100.11, 192.168.100.12, \ 192.168.100.100 }" ipunlimit = "{ !192.168.1.0/30, !192.168.100.200 }" scrub in all altq on $ifint0 hfsc bandwidth 1Mb queue { downstream } queue downstream bandwidth 10% priority 0 hfsc (upp...
Jul 3, 12:51 pm 2009
Vitaliy Vladimirovich
ALTQ traffic shaping problem
  Hi, All!  I have installed FreeBSD 7.2 with pf as firewall and NAT with ALTQ for traffic shaping. This is my test system on VMWare.  Below my pf.conf. All works perfectly except, shaping.  I want limit outbound (128Kb) and inbound (800Kb) traffic to and from Internet for two computers. I have configured queues on interfaces as is write below. But in real I have only half of specified speed in pf.conf.   ext_if="le0" int_if="le1" lan="172.16.1.0/24" pc1="172.16.1.2...
Jul 3, 7:34 am 2009
Dimitry Andric
Re: Extremely simple redirect rule doesnt appear to be working
Please post your pf.conf, or it will rather difficult to see what is wrong. _______________________________________________ freebsd-pf@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org"
Jul 3, 6:46 am 2009
Balázs Mátéffy
Re: Extremely simple redirect rule doesnt appear to be working
Hi there, I think you should check pfctl -sr and pfctl -sn that your rules are ok, and you don't deny that traffic explicitly. However, I don't want to start a war, but on a machine I experienced that with FreeBSD 7.0 or 7.1 the pf redirections didn't work, after a minor release update, the problem went away with the same ruleset! (I think it was 7.0 and updated to 7.1 to get it working again) But rdr pass should add the permitting access rule for your redirection entry. Maybe logging can h...
Jul 3, 6:13 am 2009
previous daytodaynext day
July 2, 2009July 3, 2009July 4, 2009