Re: Syntax problem

2003-08-25 Thread Per-Olov Sjöholm
On Monday 25 August 2003 09.29, Daniel Hartmeier wrote: > On Mon, Aug 25, 2003 at 08:04:34AM +0200, Per-Olov Sjöholm wrote: > > The rule simply doesn't work with the () specified. Have I missed > > something ? > > No, that's simply not supported yet. > > I think "(fxp0:broadcast)" would be a slight

Re: setting up timeout per TCP port

2003-08-25 Thread Alexandre Dulaunoy
On Mon, 25 Aug 2003, Craig Barraclough wrote: > On Monday 25 August 2003 17:27, Alexandre Dulaunoy wrote: > > Dear, > > > > I would like to set the timeout of a specific TCP service with pf. It > > seems that the values are globals (tcp.closing and so on...). Is it > > possible to make a timeo

Re: setting up timeout per TCP port

2003-08-25 Thread jared r r spiegel
On Mon, Aug 25, 2003 at 01:44:54AM -0600, jared r r spiegel wrote: > from pf.conf(5): ( line ~200 ) > > These values can be defined both globally and for each rule. When > used on a per-rule basis, the values relate to the number of states > created by the rule, otherwise to the total num

Re: setting up timeout per TCP port

2003-08-25 Thread Craig Barraclough
On Monday 25 August 2003 17:27, Alexandre Dulaunoy wrote: > Dear, > > I would like to set the timeout of a specific TCP service with pf. It > seems that the values are globals (tcp.closing and so on...). Is it > possible to make a timeout for a specific TCP port ? I have looked in > pf.conf(5)

Re: setting up timeout per TCP port

2003-08-25 Thread jared r r spiegel
On Mon, Aug 25, 2003 at 09:27:52AM +0200, Alexandre Dulaunoy wrote: > > I would like to set the timeout of a specific TCP service with pf. It > seems that the values are globals (tcp.closing and so on...). > Is it possible to make a timeout for a specific TCP port ? I have > looked in pf.conf(

Re: Syntax problem

2003-08-25 Thread Cedric Berger
Per-Olov Sjöholm wrote: Hi ! Is there a reason that a rule like this works. block in quick on $ALL_INTERFACES inet from any to $DMZ1_INT:broadcast But not this dynamic update one with "()" block in quick inet from any to ($INTERNET_INT):broadcast The rule simply doesn't work with the

Re: Syntax problem

2003-08-25 Thread Daniel Hartmeier
On Mon, Aug 25, 2003 at 08:04:34AM +0200, Per-Olov Sjöholm wrote: > The rule simply doesn't work with the () specified. Have I missed something ? No, that's simply not supported yet. I think "(fxp0:broadcast)" would be a slightly more logical syntax, as the parentheses go around the information

setting up timeout per TCP port

2003-08-25 Thread Alexandre Dulaunoy
Dear, I would like to set the timeout of a specific TCP service with pf. It seems that the values are globals (tcp.closing and so on...). Is it possible to make a timeout for a specific TCP port ? I have looked in pf.conf(5) but I didn't found nothing about that. Thanks, adulau -- --

Syntax problem

2003-08-25 Thread Per-Olov Sjöholm
Hi ! Is there a reason that a rule like this works. block in quick on $ALL_INTERFACES inet from any to $DMZ1_INT:broadcast But not this dynamic update one with "()" block in quick inet from any to ($INTERNET_INT):broadcast The rule simply doesn't work with the () specified. Have I m

RE: PF filter decisions based on source OS type

2003-08-25 Thread Duncan Matthew Stirling
I think it's such a cool idea, but there are always going to be exceptions, and limitations. For example, I have a number of systems at work that I've patched to appear at different OS then what they are. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of