Re: Prioritized ack and getting bandwidth stats

2003-09-14 Thread Ron Rosson
I have the prioritizing empty ACKs working.. but it is adding the stats to it is where I am having a problem. -Ron On Sun September 14 2003 09:27 am, you wrote: > On Sunday, September 14, 2003 8:59 AM, [EMAIL PROTECTED] wrote: > > I am trying to get bandwidth stats of my 3 legged firewall. The >

Re: tag problem with brconfig - OpenBSD 3.3

2003-09-14 Thread Henning Brauer
On Sat, Sep 13, 2003 at 09:46:35AM +0300, yanko wrote: > I use OpenBSD 3.3 and I can not add tag to rule. > > bash# brconfig bridge0 rule pass in on rl0 src 1:2:3:4:5:6 tag hello > invalid rule: pass in on rl0 src 1:2:3:4:5:6 tag hello > > What can be the problem? tagging in bridge is not suppor

pfr_update_stats: assertion failed

2003-09-14 Thread Daniel Cox
I have a router running OpenBSD 3.3 RELEASE. - it uses a negated statement: block in from ! These messages have been appearing in the system log since I started using the table - (I just haven't noticed until now, because everything else seems to be working fine). 'pfr_update_stats: assertion fai

Is tagging on isakmpd planed?

2003-09-14 Thread Alejandro G. Belluscio
Hello pf, I always get my ideas just on the crunch pre Release ;-). The question is if it is planned to be able to tag packets on the isakmpd SA. Since all the packets get mixed into enc0, it's very difficult to filter an attack from a brain dead client's lan. If we could tag at least the origin

RE: NAT - PF order

2003-09-14 Thread Shadi Abou-Zahra
> > hopefully this is not a millionth repetition of a subject but after > > reading the PF FAQ and some of the mail archives i am still > > confused about how bridging, NATing and PFing all work together. > > the exact path of the packets through the NICs is still a little > >unclear to me. may

Re: tcpdump and rule -1/0

2003-09-14 Thread Asenchi
Andy, Sorry for the delay in responding, it has been a tough couple of days. I have spent limited time on your problem, I apologize, but in looking at it and reading as much as I could about this situation, I don't see what the problem is. It is probably something simple that I just can't se

Re: Prioritized ack and getting bandwidth stats

2003-09-14 Thread j knight
Hey Ron, Ron Rosson wrote: altq on $external priq bandwidth 356Kb queue { q_pri, q_def } queue q_pri priority 7 queue q_def priority 1 priq(default) #altq on $external cbq queue { external } You have two "altq on $external" lines which is probably where your problem is. There can only be one que

RE: Prioritized ack and getting bandwidth stats

2003-09-14 Thread Melameth, Daniel D.
On Sunday, September 14, 2003 8:59 AM, [EMAIL PROTECTED] wrote: > I am trying to get bandwidth stats of my 3 legged firewall. The firewall is > attached to an ADSL link so I have setup rules for to Priority Ack to > maintain performance. but when I uncomment the rules that are commented > below

Prioritized ack and getting bandwidth stats

2003-09-14 Thread Ron Rosson
I am trying to get bandwidth stats of my 3 legged firewall. The firewall is attached to an ADSL link so I have setup rules for to Priority Ack to maintain performance. but when I uncomment the rules that are commented below I get errors. Can anyone see what I am doing wrong. The stats I am tr

Re: syn-proxy & application-level-proxy

2003-09-14 Thread Markus Friedl
On Thu, Sep 11, 2003 at 05:03:25PM +0200, Cedric Berger wrote: > So all that's missing is time to design it properly and implement it > correctly, right? i'm going to do something like this, remind me if i forget.