Re: pf tagging and matching over more than one interface ...

2005-11-11 Thread Mark Patruck
00, Wild Karl-Heinz wrote: > In message "pf tagging and matching over more than one interface ..." >on 11.11.2005, David fire <[EMAIL PROTECTED]> writes: > > Df> you only tag the package to port 1194 in both case and you are allowing > only > Df> tagge

Re: pf tagging and matching over more than one interface ...

2005-11-11 Thread Wild Karl-Heinz
In message "pf tagging and matching over more than one interface ..." on 11.11.2005, David fire <[EMAIL PROTECTED]> writes: Df> you only tag the package to port 1194 in both case and you are allowing only Df> tagged packaged to ports 22, 80, 443 Port 1194 on wan_if is ha

Re: pf tagging and matching over more than one interface ...

2005-11-11 Thread David fire
hi you only tag the package to port 1194 in both case and you are allowing only tagged packaged to ports 22, 80, 443 David 2005/11/11, Karl-Heinz Wild <[EMAIL PROTECTED]>: > > I try to tag a connection on the wan_if and > accordingly on the tag I'll restrict the > access on an other interface li

pf tagging and matching over more than one interface ...

2005-11-11 Thread Karl-Heinz Wild
I try to tag a connection on the wan_if and accordingly on the tag I'll restrict the access on an other interface like. an example ... pass in quick on wan_if proto tcp from to port 1194 tag NORM keep state pass in quick on wan_if proto tcp from to port 1194 tag POWER keep state pass in