Re: OpenBSD3.3 PF dhcp dhcrelay vlans

2003-09-05 Thread Ed White
On Friday 05 September 2003 01:11, Henning Brauer wrote: > thanks for proving that you don't understand what you are doing. > "my dick is bigger than yours" doesn't work when modifying memory > aloocation affecting shitz in kernel land. Wonderbar ! Ed

PF -> tags <- bridge

2003-09-05 Thread Ed White
Hi, quoting from http://www.openbsd.org/34.html "packet tagging (e.g. filter on tags added by bridge based on MAC address) " Please tell me everything about it ;-) Ed

Re: PF -> tags <- bridge

2003-09-05 Thread Henning Brauer
On Fri, Sep 05, 2003 at 12:14:53PM +0200, Ed White wrote: > quoting from http://www.openbsd.org/34.html > > "packet tagging (e.g. filter on tags added by bridge based on MAC address) " > > Please tell me everything about it ;-) simple. from brconfig(8): # brconfig bridge0 rule pass in on f

Re: PF -> tags <- bridge

2003-09-05 Thread Ed White
On Friday 05 September 2003 13:03, Henning Brauer wrote: > We also modified the matching so that _every_ matching rule sets the > tag, not just the last one. This means multiple tags for one packet, right ? Ed

Re: PF -> tags <- bridge

2003-09-05 Thread Can Erkin Acar
On Fri, Sep 05, 2003 at 03:16:05PM +0200, Ed White wrote: > On Friday 05 September 2003 13:03, Henning Brauer wrote: > > We also modified the matching so that _every_ matching rule sets the > > tag, not just the last one. > > This means multiple tags for one packet, right ? No, there is only one

adapter

2003-09-05 Thread Ed White
ehm... I know this is the right place to ask about network interfaces experiences... so I'm wondering if anyone had good results with USB (wireless/ethernet) network adapters on OpenBSD. I've an old laptop with only one PCMCIA slot and would like to add 1 ethernet and 1 wireless adapter... so

RE: OpenBSD3.3 PF dhcp dhcrelay vlans

2003-09-05 Thread Amir Seyavash Mesry
Whoa, wait a minute, I wasn't attempting to insult anyone, why did you reply like that? I was just offering a solution I thought may help, and I posted it to this list so if I was wrong someone could say so, but I wasn't trying to say I am the authority on it or anything otherwise I would not have

Re: PF -> tags <- bridge

2003-09-05 Thread Henning Brauer
On Fri, Sep 05, 2003 at 03:16:05PM +0200, Ed White wrote: > On Friday 05 September 2003 13:03, Henning Brauer wrote: > > We also modified the matching so that _every_ matching rule sets the > > tag, not just the last one. > > This means multiple tags for one packet, right ? no. one tag per packet

Re: OpenBSD3.3 PF dhcp dhcrelay vlans

2003-09-05 Thread Henning Brauer
while pointing out that this can be changed via ukc is helpfull, 32786 is just insanity. sorry, it doesn't work like that. do some math. see how much kernel memory you waste. use your tools and see what you really need. hint: it's most likley 2048 or 4096 max. we've had posts to our mailing lists

Re: adapter

2003-09-05 Thread Jolan Luff
On Fri, Sep 05, 2003 at 04:33:57PM +0200, Ed White wrote: > > ehm... I know this is the right place to ask about network interfaces > experiences... so I'm wondering if anyone had good results with USB > (wireless/ethernet) network adapters on OpenBSD. USB wifi adapters don't work. Most have

RE: OpenBSD3.3 PF dhcp dhcrelay vlans

2003-09-05 Thread Amir Seyavash Mesry
Thank you Henning, That's what I was looking for from my original post. :D. That also explains to me why when I set it to 64 instead of 32 it didn't boot, lol. I never could figure that one out until now. Also, the NMBCLUSTERS , is megabytes, kilobytes, bytes or some other measurement. Am

Re[2]: adapter

2003-09-05 Thread Alejandro G. Belluscio
Hello Jolan, Friday, September 5, 2003, 11:53:39 AM, you wrote: Jolan> On Fri, Sep 05, 2003 at 04:33:57PM +0200, Ed White wrote: >> >> ehm... I know this is the right place to ask about network interfaces >> experiences... so I'm wondering if anyone had good results with USB >> (wireless/ethe

Re: OpenBSD3.3 PF dhcp dhcrelay vlans

2003-09-05 Thread Henning Brauer
On Fri, Sep 05, 2003 at 11:47:58AM -0400, Amir Seyavash Mesry wrote: > Thank you Henning, That's what I was looking for from my original post. :D. > That also explains to me why when I set it to 64 instead of 32 it didn't > boot, lol. I never could figure that one out until now. Also, the > NMBCLUS

Re: PF -> tags <- bridge

2003-09-05 Thread Ed White
On Friday 05 September 2003 16:46, Henning Brauer wrote: > @1 pass in from 1.1.1.1 tag test > @2 pass in from 1.1.1.1 > > assuming a packet from 1.1.1.1 comes in: > the last matchin rule is @2. it does not have a "tag" statement. > but: @1 matched before, and even given it is not last (final) match

Re: PF -> tags <- bridge

2003-09-05 Thread Henning Brauer
On Fri, Sep 05, 2003 at 06:59:20PM +0200, Ed White wrote: > On Friday 05 September 2003 16:46, Henning Brauer wrote: > > @1 pass in from 1.1.1.1 tag test > > @2 pass in from 1.1.1.1 > > > > assuming a packet from 1.1.1.1 comes in: > > the last matchin rule is @2. it does not have a "tag" statement.

Using rdr to (partially) sandbox infected clients

2003-09-05 Thread Mike Lewinski
The pf user's guide mentions redirection primarily for incoming traffic but tonight I had an unusual situation to deal with where an unknown client somewhere on a 150 square mile wireless LAN was infected with Welchia. I played with rdr to force this person's outbound http requests to all