Re: Problem with pf and ng0 interface.

2003-12-10 Thread Max Laier
> > pass in quick on { rl0,rl2,ng0 } proto tcp from $myIP to any keep state > > > > If i try to load pf.conf with this rule, when mpd is not active, pf > > give me a syntax error: > > > > /usr/local/etc/pf.conf:14: unknow interface ng0 > > > > How can I load pf.conf also without have mpd program lo

Re: Loadbalancing problem...

2003-12-10 Thread j knight
Kahlil Erwin S. Talledo wrote: Hi all, I have 2 adsl connection... and i decided to do loadbalancing with pf on openbsd 3.4 and i have the following pf.conf rules... [ snip ] everything is working well... only problem is that i cant seem to ping from the gateway/firewall itself.. but the c

Optimizing transparent bridge

2003-12-10 Thread Michael H. Semcheski
Hello, Our lab is running a 3.4 transparent bridging firewall. Its got a 100mb/s interface on the internal and external interfaces, and a pretty decent amount of bandwidth on the external. The connection comes out of the wall on a crossover and into xl0. Out of xl1 it goes to a $35 10/100

Loadbalancing problem...

2003-12-10 Thread Kahlil Erwin S. Talledo
Hi all, I have 2 adsl connection... and i decided to do loadbalancing with pf on openbsd 3.4 and i have the following pf.conf rules... === lan_net = "192.168.0.0/24" int_lan = "vr0" ext_if1 = "dc0" ext_if2 = "dc1" ext_gw1 = "192.168.10.254

RE: pf <---> iptables

2003-12-10 Thread Dom De Vitto
On the speed front, I've saw a PF user post complain that he can only get 980kb/s with PF and GigE interfaces. Henning, I believe pointed out that that is 98% of maximum for the media speed, and most other firewalls are *a lot* slower on the same hardware. Others have gotten > GigE filtering with

Re: pf <---> iptables

2003-12-10 Thread Philipp Buehler
On 09/12/2003, Arno Hechenberger <[EMAIL PROTECTED]> wrote To [EMAIL PROTECTED]: > Is anyone out there who knows real arguments for iptables or pf ? I > should evaluate a packet filter for acompany with 73 internet accesses > points where one of this should become suitable. > > Thanks in advance f