Hello John:
Those rules look fine. Do you have a corresponding nat statement so
that the traffic going back out is NAT'd to a routable address?
Regards,
Mike
--
Michael K. Smith - CISSP, GISP
Chief Technical Officer - Adhost Internet LLC mksm...@adhost.com
w: +1 (206) 404-9500 f: +1 (206)
Hello Wadner:
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Wadner Cadet
Sent: Thursday, August 07, 2008 12:41 PM
To: pf@benzedrine.cx
Subject: Problem with carp group failover
Hi,
I am experiencing an issue with my two OpenBSD firewalls. I
Hello:
Every so often we see a run of these messages where the address
'x.x.x.x' below is a CARP interface address. There will be a
corresponding message for each of the 62 CARP interfaces on the machine.
This server is the backup in a failover pair (not load balanced). The
addresses are on the
Hello Daniel:
I've included responses in-line below.
-Original Message-
From: Daniel Hartmeier [mailto:[EMAIL PROTECTED]
Sent: Friday, December 15, 2006 12:16 AM
To: Michael K. Smith - Adhost
Cc: pf@benzedrine.cx
Subject: Re: Problems with PF Sync.
On Thu, Dec 14, 2006 at 02:47:16PM
Hello All:
We are using two pf-enabled devices in failover/standby (not load
balanced) on FreeBSD. We are using CARP and PFSync for their respective
tasks. Everything appears to be working on the CARP side and our
interface groups correctly fail together when one goes down.
Our problem is with
:31, Michael K. Smith - Adhost
wrote:
Hello All:
We are using PF on FreeBSD to Round-Robin across multiple mail
servers.
We would like to be able to remove a server from the round-robin pool
based upon its application state *and/or* its physical state. So, if
server x is down
Hello All:
We are using PF on FreeBSD to Round-Robin across multiple mail servers.
We would like to be able to remove a server from the round-robin pool
based upon its application state *and/or* its physical state. So, if
server x is down, or not responding on port 25, it's removed from the
Hello Luca:
-Original Message-
From: Luca Corti [mailto:[EMAIL PROTECTED]
Sent: Tuesday, December 12, 2006 1:20 PM
To: Michael K. Smith - Adhost
Cc: pf@benzedrine.cx
Subject: Re: PF - Removing Server from Pool when Service is Down
On Tue, 2006-12-12 at 10:31 -0800, Michael K. Smith
Hello All:
We are looking at pulling in a listing of about 70,000 IP entries (most
of them are hosts, not subnets) into a PF Table. Is there any hard
limitation to the configuration size or ability to parse through
something that large?
Regards,
Mike
