Re: Label-based accounting and keeping state won't mix.

2005-08-03 Thread Sven Ingebrigt Ulland
On Tue, Aug 02, 2005 at 10:27:57PM +0200, Henning Brauer wrote: > * Tihomir Koychev <[EMAIL PROTECTED]> [2005-08-02 12:11]: > > > Does this mean that basic label-based IP accounting > > > won't mix with > > > keeping state at all? > > no, states have a pointer back to the rule that created it and

lots of state searches with little traffic ????

2005-08-03 Thread Russell Fulton
Hi Folks, We have recently installed syweb to monitor our firewalls (we have two bridges in parallel) between two core switches and and external switch). At the moment one is unplugged fom its internal switch but is still connected to the second and both are running pfsync. Both machines are r

Re: setting source ip on multiple aliases

2005-08-03 Thread Karl O. Pinc
On 08/02/2005 12:58:42 PM, quel wrote: I am trying to find the appropriate way to set the external ip used. I have a user who wants their outbound traffic to all go out their ip. This sounds like you are running an application, like apache, on the box and want different virtual hosts to go o

Re: setting source ip on multiple aliases

2005-08-03 Thread Kevin
On 8/2/05, quel <[EMAIL PROTECTED]> wrote: > I am trying to find the appropriate way to set the external ip used. I > have a user who wants their outbound traffic to all go out their ip. This > way they have their reverse appropriate. > > ifconfig snip: > inet 69.13.34.82 netmask 0xf

lots of state searches with little traffic ????

2005-08-03 Thread Russell Fulton
Hi Folks, We have recently installed syweb to monitor our firewalls (we have two bridges in parallel) between two core switches and and external switch). At the moment one is unplugged fom its internal switch but is still connected to the second and both are running pfsync. Both machines are r

Re: Label-based accounting and keeping state won't mix.

2005-08-03 Thread Tihomir Koychev
--- Henning Brauer <[EMAIL PROTECTED]> wrote: > * Tihomir Koychev <[EMAIL PROTECTED]> > [2005-08-02 12:11]: > > > Does this mean that basic label-based IP > accounting > > > won't mix with > > > keeping state at all? > > no, states have a pointer back to the rule that > created it and update >

Re: Label-based accounting and keeping state won't mix.

2005-08-03 Thread Henning Brauer
* Sven Ingebrigt Ulland <[EMAIL PROTECTED]> [2005-08-03 09:23]: > On Tue, Aug 02, 2005 at 10:27:57PM +0200, Henning Brauer wrote: > > * Tihomir Koychev <[EMAIL PROTECTED]> [2005-08-02 12:11]: > > > there is patch in current > > > http://www.openbsd.org/cgi-bin/cvsweb/src/sbin/pfctl/pfctl.c > > > wh

Re: setting source ip on multiple aliases

2005-08-03 Thread quel
On Tue, 2 Aug 2005, Kevin wrote: On 8/2/05, quel <[EMAIL PROTECTED]> wrote: I am trying to find the appropriate way to set the external ip used. I have a user who wants their outbound traffic to all go out their ip. This way they have their reverse appropriate. ifconfig snip: inet