| From | Subject | Date |
|---|---|---|
| Martin Pelikán | Re: 4.7 pf
Agreed.
I also think it would be nice to provide more commented examples *in
the default* pf.conf. Rules for just basic NAT are quite carefully
hidden in pf.conf(5) at somewhere about 85%, so why not just add
something like:
# simple NAT setting
#match out inet from ($int_interface) to any nat-to ($out_interface)
# simple redirection of port 80 through NAT to your web server
#pass in proto tcp from any to ($out_interface) port 80 rdr-to $web_server
Or something like so. It would also be ...
| Apr 30, 3:55 am 2010 |
| Rod Whitworth | Re: 4.7 pf
I can't agree with that. Quite often we have people wanting (probably
the commonest) a home firewall and these folk are the ones who will
rarely do binat. Besides that all the examples of NAT in the pf.conf
manpage and the upcoming pf FAQ use the match action without ever
I want to pursue that a bit further.
Here is the 4.7 pf.conf:
===
# $OpenBSD: pf.conf,v 1.49 2009/09/17 06:39:03 jmc Exp $
#
# See pf.conf(5) for syntax and examples.
# Remember to set net.inet.ip.forwarding=1 ...
| Apr 29, 11:54 pm 2010 |
| Seth Wright | Using IPv6 subnets in smtpd.conf rules
Okay, I'm officially stumped. Can someone lend me a clue as to what,
if anything, I'm doing wrong in the following scenario?
I was playing around with smtpd(8) configuration options the other
day, and tried to write an "accept" rule in smtpd.conf for an IPv6
subnet. However, when I tried to verify the config I got an error:
seth@fw ~ $ grep 2001 /etc/mail/smtpd.conf
accept from 2001:470:8:1ee::/64 for all relay
seth@fw ~ $ smtpd -n
smtpd: inet_net_pton: Address family not supported by ...
| Apr 29, 11:13 pm 2010 |
| Gilles Chehade | Re: Using IPv6 subnets in smtpd.conf rules
Hi Seth,
It is a known issue, I actually had pulled the code for inet_net_pton()
from NetBSD many months ago, when I first realized inet6 masks were not
working in smtpd, but then I got sucked into other stuff and forgot it.
I'll review the diff again ... :-)
Thanks,
Gilles
--
Gilles Chehade
freelance developer/sysadmin/consultant
http://www.poolp.org
| Apr 29, 11:31 pm 2010 |
| Seth Wright | Re: Using IPv6 subnets in smtpd.conf rules
Thanks!
--seth
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
| Apr 30, 9:21 am 2010 |
| CMCCO | Project Management seminars in KSA
LIST OF OUR SERVICES:
Dear Sir/Madam,
Our company "Construction Management Consultant" is organizing the following
Project Management seminars in KSA:
Upcoming Seminars in Jeddah-KSA
Description Start Date End Date
FIDIC Conditions of Contract & Claims Management 8/5/201010/5/2010
Professional Procurement Management 8/5/201010/5/2010
Professional Project Management ( PMP certification preparation)
8/5/201010/5/2010
Project Estimation & Cost Control & Access ...
| Apr 29, 7:59 pm 2010 |
| previous day | today | next day |
|---|---|---|
| April 29, 2010 | April 30, 2010 | May 1, 2010 |
