RE: Source Tracking in PF

2003-12-15 Thread Dom De Vitto
Cheers Ryan! This is a big step towards DDoS proofing OpenBSD! Dom - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Dom De Vitto Tel. 07855 805 271 http://www.devitto.com mailto:[EMAIL PROTECTED] - - - - - - - -

Re: Source Tracking in PF

2003-12-15 Thread Henning Brauer
On Sun, Dec 14, 2003 at 07:29:14PM -0800, Peter Hessler wrote: I was wondering if there was a way to use similar rules with ALTQ. E.G. Evenly split a queue for each source-ip on a /24. Allow each to use unused bandwidth, but guarantee each gets a fair percentage (in this example, each ip

fastroute/route-to on enc0 interface

2003-12-15 Thread Pillai, Gopakumar (Gopu)
Hi All, I am running 3.2 stable. This is what I am trying to achieve: I have specified say 192.168.1.0/24 network to be on a VPN. But only authenticated users are allowed over VPN, rest all should go clear. Lets say 192.168.1.32 is authenticated and 192.168.1.33 is not. The common part of the

Re: pf/Linux/Scrub

2003-12-15 Thread j knight
Per olof Ljungmark wrote: I was reading about OpenVPN in order to make a possible test bed when I came across the following statement: * If run through a firewall using OpenBSDs packet filter PF and the filter rules include a scrub directive, you may get problems talking to Linux hosts over