RE: Proper Syntax for Limiting Ports per user group.

2002-08-09 Thread Amir Seyavash Mesry
Is there anyway to compile the current pf into a 3.1 release? Amir Seyavash Mesry [EMAIL PROTECTED] LSI Logic Corporation http://www.lsilogic.com/ Raid Support Test Technician 6145-D Northbelt Parkway Norcross, GA 30071 678-728-1211 NOTICE: This communication may contain privileged or other co

Re: Proper Syntax for Limiting Ports per user group.

2002-08-09 Thread Daniel Hartmeier
On Fri, Aug 09, 2002 at 01:10:13PM -0400, Amir Seyavash Mesry wrote: > Is there anyway to compile the current pf into a 3.1 release? There are many dependencies you'd have to backport as well, which themselves have dependencies, etc. Unless you want to spend an afternoon cursing, I recommend ei

Re: Proper Syntax for Limiting Ports per user group.

2002-08-09 Thread Daniel Hartmeier
On Fri, Aug 09, 2002 at 12:09:07PM -0400, Amir Seyavash Mesry wrote: > Can some one tell me what the proper syntax is for using the user & > group parameters in OpenBSD 3.1 & PF. This feature was added after the 3.1 release, so you'll need -current to use it. > pass out proto tcp from fxp0 port

Pass In for out Syntax

2002-08-09 Thread Amir Seyavash Mesry
Ok I got another Q. I know Cisco has this for it's routers, what I want to know is how would I implement it on openbsd. Here is what the rule does. A packet goes out on if0 on port 22, which causes port 22 to open for incoming traffic on if0 to the same ip it is now outgoing. Or A packet goes out

Re: Pass In for out Syntax

2002-08-09 Thread Philipp Buehler
On 09/08/2002, Amir Seyavash Mesry <[EMAIL PROTECTED]> wrote To [EMAIL PROTECTED]: > Ok I got another Q. > I know Cisco has this for it's routers, what I want to know is how would > I implement it on openbsd. > Here is what the rule does. > A packet goes out on if0 on port 22, which causes port 22

RE: Pass In for out Syntax

2002-08-09 Thread Amir Seyavash Mesry
Kinda close unless I am reading the pf.conf man page wrong, where I have been reading it again and again. It keeps state for that data stream, be it out going or incoming. What I am asking is how to do this. Keep state for outgoing on port X and open incoming for port X & keep state for it. And do

RE: Proper Syntax for Limiting Ports per user group.

2002-08-09 Thread Amir Seyavash Mesry
LOL, ok I will wait, btw if I move to current, that it not the same as snapshot is it. And if I move to current can I upgrade to 3.2 when it comes out? Iknow it's OT, but I was curious. Amir Seyavash Mesry [EMAIL PROTECTED] LSI Logic Corporation http://www.lsilogic.com/ Raid Support Test Technici

Proper Syntax for Limiting Ports per user group.

2002-08-09 Thread Amir Seyavash Mesry
Title: Message Can some one tell me what the proper syntax is for using the user & group parameters in OpenBSD 3.1 & PF. here is and example rule. pass out proto tcp from fxp0 port 3 >< 5 to any port 3 >< 5 modulate statepass out proto udp from fxp0 port 3 >< 5 to an

Re: Proper Syntax for Limiting Ports per user group.

2002-08-09 Thread Daniel Hartmeier
On Fri, Aug 09, 2002 at 02:07:12PM -0400, Amir Seyavash Mesry wrote: > LOL, ok I will wait, btw if I move to current, that it not the same as > snapshot is it. And if I move to current can I upgrade to 3.2 when it > comes out? You can either install a snapshot (which is -current from a couple of