Re: ICMP redirect

2005-10-12 Thread Daniel Hartmeier
On Fri, Oct 07, 2005 at 07:10:04PM +0100, ed wrote: > Can ICMP packets be redirected using rdr to a RFC1918 host? I gave it a > couple of shots and did not get anywhere, as I can't see any mentions of > it it working in either books or on the web I thought I'd ask here. Yes, you can redirect ICMP

Re: What do you think about PF filtering for encapsulated protocols (e.g pppoe) ?

2005-10-12 Thread Daniel Hartmeier
On Fri, Oct 07, 2005 at 01:54:57AM +0100, mzozd wrote: > The best way to do it seems to be an addon keyword at the scrub > directive in the Traffic Normalization routines > e.g scrub on $interface all strip_pppoe. > The pppoe header striping will take place before any other actions and > will pass

Re: tftp through pf w/nat

2005-10-12 Thread Daniel Hartmeier
On Thu, Oct 06, 2005 at 02:27:56AM -0400, Charles Sprickman wrote: > Is it possible, given the nasty way that tftp works to get natted clients > to talk to an outside tftp server? Not if the external server is as sloppy as you described. They'll have problems with all sorts of NATed clients (not

control the number of pps

2005-10-12 Thread Lucas
List, i want to control the number of packets per second a client can send thru an interface. For example, i want to limit the IP 10.1.1.1 to send a max of just 10 packets per second. Is it possible to achieve this with pf or maybe altq? Lucas

Re: ICMP redirect

2005-10-12 Thread ed
On Wed, 12 Oct 2005 20:11:03 +0200 Daniel Hartmeier <[EMAIL PROTECTED]> wrote: > On Fri, Oct 07, 2005 at 07:10:04PM +0100, ed wrote: > > > Can ICMP packets be redirected using rdr to a RFC1918 host? I gave > > it a couple of shots and did not get anywhere, as I can't see any > > mentions of it it