Re: NAT logging and limits using pf

2014-10-10 Thread Stuart Henderson
On 2014-10-08, Henning Brauer hb-open...@ml.bsws.de wrote: * Stuart Henderson s...@spacehopper.org [2014-10-05 22:49]: Normal PF logging isn't particularly well-suited to CGNAT-type requirements, in order to record both the internal address and the nat mapping you need to log both the inbound

Re: NAT logging and limits using pf

2014-10-08 Thread Henning Brauer
* Stuart Henderson s...@spacehopper.org [2014-10-05 22:49]: Normal PF logging isn't particularly well-suited to CGNAT-type requirements, in order to record both the internal address and the nat mapping you need to log both the inbound and outbound packets and piece it together from the two

Re: NAT logging and limits using pf

2014-10-05 Thread Kapetanakis Giannis
On 03/10/14 19:07, Russell Sutherland wrote: I am trying to determine whether using an OpenBSD system to perform institutional NAT for our wireless users would be a viable option. At the present time we are evaluating the A10 Thunder CGN appliance. There are a few issues for which I would

Re: NAT logging and limits using pf

2014-10-05 Thread Stuart Henderson
On 2014-10-03, Russell Sutherland russell.sutherl...@utoronto.ca wrote: I am trying to determine whether using an OpenBSD system to perform institutional NAT for our wireless users would be a viable option. At the present time we are evaluating the A10 Thunder CGN appliance. There are a few

NAT logging and limits using pf

2014-10-03 Thread Russell Sutherland
I am trying to determine whether using an OpenBSD system to perform institutional NAT for our wireless users would be a viable option. At the present time we are evaluating the A10 Thunder CGN appliance. There are a few issues for which I would like to get some input for those using pf for NAT