Re: SSH from admin machine

2004-11-09 Thread Daniel Hartmeier
On Tue, Nov 09, 2004 at 11:57:26PM +0100, messmate wrote: > But WHERE can i get a recent documentation about PF ?? The official PF User's Guide is an excellent start: http://www.openbsd.org/faq/pf/index.html There's a french translation, too: http://www.openbsd.org/faq/pf/fr/index.html Da

Re: SSH from admin machine

2004-11-09 Thread messmate
On Mon, 8 Nov 2004 18:39:53 +0100 Henning Brauer <[EMAIL PROTECTED]> wrote: >* [EMAIL PROTECTED] <[EMAIL PROTECTED]> [2004-11-07 >19:59]:> On Sun, 7 Nov 2004, messmate wrote: >> > pass in quick on $internal proto tcp from $TRUST_IP to any port = >22> > flags S keep state >> remove the = sign >> pa

Re: syntax differences

2004-11-09 Thread Daniel Hartmeier
On Tue, Nov 09, 2004 at 09:11:08PM +0100, messmate wrote: > "pass in on vr0 inet proto tcp from any to 192.168.12.15 port = 3128 > keep state" and > "pass out on tun0 inet proto tcp from any to any port = www keep > state" > The rules here above seems ok. > But this rule : > # Autorise SSH > "

Re: Viewing authpf rules loaded

2004-11-09 Thread Daniel Hartmeier
On Tue, Nov 09, 2004 at 05:17:42PM -0300, Fernando Braga wrote: > fmbraga:783$ sudo pfctl -a authpf -sA > authpf/f_neus(16509) The full anchor name is literally 'authpf/f_neus(16509)', consisting of authpf, the user name and the pid, including the slash and the parentheses, try $ sudo pfctl -a

Viewing authpf rules loaded

2004-11-09 Thread Fernando Braga
Hi, I'm using OpenBSD 3.6-release, just installed. I want to view authpf rules loaded for one of my users. Have been trying this: fmbraga:782$ sudo pfctl -sA authpf fmbraga:783$ sudo pfctl -a authpf -sA authpf/f_neus(16509) fmbraga:784$ sudo pfctl -a authpf/f_neus -sr pfctl: DIOCGETRULES: Inval

Re: ALT question...

2004-11-09 Thread Darek Eliasz
> Hi, > > I was wondering if the following makes sense: > > altq on $ext_if cbq bandwidth $caudal_subida queue \ > { prioridad_7, prioridad_6, prioridad_5, prioridad_1 } > queue prioridad_7 bandwidth 60% priority 7 cbq(red, borrow) > queue prioridad_6 bandwidth 60% prior

syntax differences

2004-11-09 Thread messmate
Hi all, can anybody explain what's the difference bewteen the syntax ( sign '=') between this rules : "pass in on vr0 inet proto tcp from any to 192.168.12.15 port = 3128 keep state" and "pass out on tun0 inet proto tcp from any to any port = www keep state" The rules here above seems ok. But th

More questions on ALTQ.

2004-11-09 Thread Mario Lopez
Hi, I have being all the afternoon playing arround with ALTQ and I have finally done this configuration, I have a couple of doubts that I dont know if they make sense, first is the ALTQ percentages (check another message), my question is mainly regarding who ALTQ works. My problem is... with th

ALT question...

2004-11-09 Thread Mario Lopez
Hi, I was wondering if the following makes sense: altq on $ext_if cbq bandwidth $caudal_subida queue \ { prioridad_7, prioridad_6, prioridad_5, prioridad_1 } queue prioridad_7 bandwidth 60% priority 7 cbq(red, borrow) queue prioridad_6 bandwidth 60% priority 6 cbq(red, borro

Re: Problems configuring ALTQ trying to limit emule bandwidth.

2004-11-09 Thread Darek Eliasz
> I am trying to configure a simple firewall with nat and altq bandwidth > control to limit some services (emule) and give higher priority to other > services (web, dns and email). > > What am I doing wrong?, emule sucks all the available bandwidth and adsl > line is unsusable. As you can see I hav

Re: Problems configuring ALTQ trying to limit emule bandwidth.

2004-11-09 Thread mzozd
Hello Mario, you could try a few things in order to limit the incoming/outgoing bandwidth for your network. You can easily limit your outgoing bandwidth, but there is a problem with incoming (downstream) bandwidth control. If you run e-mule on any machine in your local network (not the gateway

Re: altq on what interface on a bridged setup

2004-11-09 Thread Darek Eliasz
> At 11.55 08/11/2004, you wrote: > > > [router]-->[ext_if]-->[inf_if]-->[LAN] > > > bridge > > > > > > Should I only apply queueing on the ext_if? > > > >The problem is when datas are knocking at the door of a NIC, they're > >already here, and it's too late to preserve ban

RE: RDR rule for ftp-proxy

2004-11-09 Thread Maat, Steve
Clears things up. Moved list to a table and all works as expected. Thanks SM -Original Message- From: Daniel Hartmeier [mailto:[EMAIL PROTECTED] Sent: Monday, November 08, 2004 8:43 PM To: Maat, Steve Cc: [EMAIL PROTECTED] Subject: Re: RDR rule for ftp-proxy On Mon, Nov 08, 2004 at 05:

Problems configuring ALTQ trying to limit emule bandwidth.

2004-11-09 Thread Mario Lopez
Hi, I am trying to configure a simple firewall with nat and altq bandwidth control to limit some services (emule) and give higher priority to other services (web, dns and email). What am I doing wrong?, emule sucks all the available bandwidth and adsl line is unsusable. As you can see I have tr