Prohibiting outbound traffic

2004-10-23 Thread Björn Ketelaars
Hello, In an effort to redirect some ports (6881:6999) to one of my computers (10.0.0.101) I’m using pf.conf given beneath. Everything inbound works fine. There is just one strange ‘thing’ when I’m monitoring pflog0, I’m receiving messages which indicate that outbound traffic originating from p

OBSD Load balancing.

2004-10-23 Thread Matt Sellers
Hello..! I know this has been brough up on the list as of recent and even address by Daniel himself, but im still lacking in the ability on how to manipulate PF to do some things with route-to "load bancing" setup. Im currently using the example: http://www.openbsd.org/faq/pf/pools.html#outexampl

loose state match - logged

2004-10-23 Thread i.t Consulting
no problems here - just curious: Oct 23 08:51:59 yak /bsd: pf: loose state match: TCP x.x.x.x:80 x.x.x.x:80 207.46.98.139:1494 [lo=3575768324 high=3575785124 win=65535 modulator=1611764520] [lo=4268367800 high=4268429135 win=16800 modulator=2941226047] 10:10 R seq=3575768324 ack=4268367800 len=

Re: Top 10 reasons IPTABLES is better than PF

2004-10-23 Thread Ed
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 21 Oct 2004 10:37:56 -0700 Jeff Simmons <[EMAIL PROTECTED]> wrote: > Well, someone DID mention porting PF to Linux. (Just for grins, take a > look at the Linux QOS/traffic shaping subsystem, and then imagine > getting PF to interface with THAT

Re: Top 10 reasons IPTABLES is better than PF

2004-10-23 Thread R. Payne
I guess the lesson here is: No more witty cynicisms unless you intend to also translate it into other languages to make sure everyone knows you are only joking. A couple of people now have spent god-knows how long responding to your every point to prove how wrong you are. IOW: It was only a jo