Re: Q: Problems forwarding traffic using pf ...

2024-06-07 Thread Why 42? The lists account.
Sorry about the delay in replying, i was travelling ... On Fri, May 24, 2024 at 06:04:25PM +0200, Peter N. M. Hansteen wrote: > ... > > May 23 10:32:13.267374 rule 1/(match) pass in on em0: 192.168.178.166.56334 > > > 192.168.178.11.54321: udp 7 > So this last one never leaves, right? Right. >

Re: Q: Problems forwarding traffic using pf ...

2024-05-24 Thread Zé Loff
On Fri, May 24, 2024 at 06:04:25PM +0200, Peter N. M. Hansteen wrote: > On Thu, May 23, 2024 at 11:14:20AM +0200, Why 42? The lists account. wrote: > > pfctl reports: > > # pfctl -vvs rules | grep @ > > @0 block return log all > > @1 pass in log on em0 inet proto udp from 192.168.178.16

Re: Q: Problems forwarding traffic using pf ...

2024-05-24 Thread Peter N. M. Hansteen
On Thu, May 23, 2024 at 11:14:20AM +0200, Why 42? The lists account. wrote: > pfctl reports: > # pfctl -vvs rules | grep @ > @0 block return log all > @1 pass in log on em0 inet proto udp from 192.168.178.166 to any tag UDP > @2 pass out log on ure0 all flags S/SA tagged UDP > > I

Re: Q: Problems forwarding traffic using pf ...

2024-05-24 Thread Why 42? The lists account.
Hi Guys, Thanks for the feedback, to address your points: 1> Possibly stupid question, but did you set the sysctl(s) to enable forwarding? Yes I tried this pf rule change with version 4 forwarding (net.inet.ip.forwarding) both enabled and disabled. Either way the pf "pass out tagged" rule is

Re: Q: Problems forwarding traffic using pf ...

2024-05-23 Thread Zé Loff
On Thu, May 23, 2024 at 08:24:03PM +0300, Kapetanakis Giannis wrote: > On 23/05/2024 20:18, Peter N. M. Hansteen wrote: > > On Thu, May 23, 2024 at 11:14:20AM +0200, Why 42? The lists account. wrote: > > > I need to quickly create a solution for forwarding multicast traffic > > > between two system

Re: Q: Problems forwarding traffic using pf ...

2024-05-23 Thread Kapetanakis Giannis
On 23/05/2024 20:18, Peter N. M. Hansteen wrote: On Thu, May 23, 2024 at 11:14:20AM +0200, Why 42? The lists account. wrote: I need to quickly create a solution for forwarding multicast traffic between two systems, so I though perhaps I could use pf to do just that by writing some rules along th

Re: Q: Problems forwarding traffic using pf ...

2024-05-23 Thread Peter N. M. Hansteen
On Thu, May 23, 2024 at 11:14:20AM +0200, Why 42? The lists account. wrote: > I need to quickly create a solution for forwarding multicast traffic > between two systems, so I though perhaps I could use pf to do just that > by writing some rules along the lines of: > > 1. pass in on iface A pro

Q: Problems forwarding traffic using pf ...

2024-05-23 Thread Why 42? The lists account.
Hi All, I need to quickly create a solution for forwarding multicast traffic between two systems, so I though perhaps I could use pf to do just that by writing some rules along the lines of: 1. pass in on iface A proto UDP ... tag mcast 2. pass out on iface B tagged mcast And anoth