Re: pf stopped working i think...

2005-06-07 Thread j knight
Jon Simola wrote: On 6/5/05, b h [EMAIL PROTECTED] wrote: Or, could someone please point out something I might have missed/case of the stupids? block log all pass quick on lo all antispoof quick for lo The documentation explicitly says not to use antispoof on loopback interfaces. And

Re: pf stopped working i think...

2005-06-07 Thread b h
--- Jon Simola [EMAIL PROTECTED] wrote: On 6/5/05, b h [EMAIL PROTECTED] wrote: Or, could someone please point out something I might have missed/case of the stupids? block log all pass quick on lo all antispoof quick for lo The loopback interface is lo0, not lo. And you

Re: Keep state + bridge weirdness

2005-06-07 Thread Kelley Reynolds
On Jun 6, 2005, at 4:25 PM, Jason Dixon wrote: On Jun 6, 2005, at 3:00 PM, Kelley Reynolds wrote: On Jun 6, 2005, at 9:27 AM, Jason Dixon wrote: Sorry, missed your comment before about only having that one rule. Well, I'm sure that the rule you've posted will cause you headaches since

Re: Keep state + bridge weirdness

2005-06-07 Thread Jason Dixon
On Jun 6, 2005, at 3:00 PM, Kelley Reynolds wrote: On Jun 6, 2005, at 9:27 AM, Jason Dixon wrote: Sorry, missed your comment before about only having that one rule. Well, I'm sure that the rule you've posted will cause you headaches since it's filtering on all interfaces. Try the following

Re: pf stopped working i think...

2005-06-07 Thread Jon Simola
On 6/6/05, b h [EMAIL PROTECTED] wrote: Is there any possible way that this is a new change? Because I swear, it worked before, and my pf.conf didn't change. Seems strange that I would go in there and remove all those zeros but I've done some weird stuff before. I've just had it

limitation of PF while forwarding ports --help

2005-06-07 Thread Siju George
Hi all, After a lot of seeking and reading and doing I have this doubt :-) Is PF not capable of letting two users ( with two differrent computers with 2 differrent IP from the RFC1918 range ) in the LAN to connect to the Same Windows 2003 remote desktop server on the Internet and work on it

Re: pf stopped working i think...

2005-06-07 Thread b h
--- j knight [EMAIL PROTECTED] wrote: Jon Simola wrote: On 6/5/05, b h [EMAIL PROTECTED] wrote: Or, could someone please point out something I might have missed/case of the stupids? block log all pass quick on lo all antispoof quick for lo The documentation explicitly says

viewing packet data with tcpdump?

2005-06-07 Thread Rick Barter
I use tcpdump to trouble-shoot my firewall, set up my rules, etc. I found the -x option which dumps the packet in hex. Can I view the packet data with tcpdump or do I need to install Ethereal or something? Any help is appreciated. rvb

Fwd: Re: pf stopped working i think... WORKS. specifying loopback device lo no longer works in pf.conf though

2005-06-07 Thread b h
--- b h [EMAIL PROTECTED] wrote: Date: Tue, 7 Jun 2005 11:30:51 -0700 (PDT) From: b h [EMAIL PROTECTED] Subject: Re: pf stopped working i think... To: j knight [EMAIL PROTECTED], pf@benzedrine.cx --- j knight [EMAIL PROTECTED] wrote: Jon Simola wrote: On 6/5/05, b h [EMAIL