Re: net.inet.tcp.tso=0

2015-03-18 Thread el kalin
i can 't start the pool without ipf and i get an i/o error when starting ipf with the pool rule… On Tue, Mar 17, 2015 at 9:05 AM, Brad Spencer wrote: > >yea=E2=80=A6 that's what thought=E2=80=A6 > >i did read all the man pages i could find on any bsd for the ipf tools > and >none m

Re: net.inet.tcp.tso=0

2015-03-18 Thread el kalin
i think i got it… the ipf needs to run first. so i start it with the rule to block the hash of ranges like this: block in quick on if0 from hash/666 to any this complains that: ioctl(add/insert rule): No such process ignoring this for now and starting ippool. after ippool loads the hash (confir

Re: NPF syntax

2015-03-18 Thread J. Lewis Muir
On 3/17/15 6:34 PM, Mindaugas Rasiukevicius wrote: Hi, Mindaugas. First, let me say thank you for your excellent work on NPF! > "D'Arcy J.M. Cain" wrote: >> I have decided to give up on pf after banging my head against >> the wall (and the OBSD mailing list) and try npf but I >> can't figure ou

Re: npf and multiple maps based on destination address

2015-03-18 Thread Harry Waddell
On Mon, 16 Mar 2015 00:47:43 + Mindaugas Rasiukevicius wrote: > Harry Waddell wrote: > > > > I'm trying to have npf ( on the latest netbsd 7 beta ) > > map address onto either an internal dmz network based on the > > destination address being in a fairly large table ( several hundred > > e