Re: bidirectional counters for pf

2003-06-19 Thread Damien Miller
Damien Miller wrote: Daniel Hartmeier wrote: On Wed, Jun 18, 2003 at 07:49:52PM +1000, Damien Miller wrote: Comments? I guess the additional two numbers don't bloat the state entry too much. I'm not doing any accounting, so I'm not sure if this is a problem, but the numbers a:b will be

Queing on ADSL ACK's

2003-06-19 Thread Elijah Savage
I hate to post this again but I was having some problem with bounced messages from the list so I had to subscribe from another address. Any help would be appreciated. Or if anyone see's anything wrong with my pf.conf it would be highly appreciated if it was pointed out to me. I tried to setup

Re: Queing on ADSL ACK's

2003-06-19 Thread Volker Kindermann
I tried to setup queing based on the faq and website. But I just can't get it to work. Downloading is great but as soon as I start to upload my speed drops way down to about the same speed as the upload. I have played around with the queue statements and bandwidth settings but no luck. I am

RE: Queing on ADSL ACK's

2003-06-19 Thread Elijah Savage
Nah my adsl link does not require PPOE thank GOODNESS. -Original Message- From: Volker Kindermann [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 10:54 AM To: Elijah Savage Cc: [EMAIL PROTECTED] Subject: Re: Queing on ADSL ACK's I tried to setup queing based on the faq and

Re: Queing on ADSL ACK's

2003-06-19 Thread Trevor Talbot
On Thursday, Jun 19, 2003, at 06:30 US/Pacific, Elijah Savage wrote: I tried to setup queing based on the faq and website. But I just can't get it to work. Downloading is great but as soon as I start to upload my speed drops way down to about the same speed as the upload. I have played around

Re: ESP protocol and Transparent bridge w/ PF

2003-06-19 Thread Trevor Talbot
On Monday, Jun 16, 2003, at 13:16 US/Pacific, David Chubb wrote: I have set net.inet.esp.enable=1 in the sysctl.conf (and rebooted to make sure the changes took). This is just to enable support on the box itself. It doesn't affect packet passing. However to connect to a remote RDP (Remote

authpf head|tail rule placement

2003-06-19 Thread Kevin R. Smith
Hi all, Using OBSD3.3, I'm trying to add a couple of rules for a user using the authpf mechanism. The rules need to go atop my normal ruleset (as defined in my pf.conf), and I don't see how to achieve this documented anywhere. Put another way: the default placement for rules added via authpf is

Re: authpf head|tail rule placement

2003-06-19 Thread Daniel Hartmeier
On Thu, Jun 19, 2003 at 03:04:17PM -0700, Kevin R. Smith wrote: FWIW, in the 3.2 docs it was done using [head|tail], though I couldn't find great documentation on that either--my efforts at apply 3.2 syntax in 3.3 have failed. Presumably this feature still exists, and I'm not seeing how to

Re: ESP protocol and Transparent bridge w/ PF

2003-06-19 Thread Damian McGuckin
On Thu, 19 Jun 2003, Trevor Talbot wrote: I did add the following rules to the pf.conf and reloaded them, however they do no good. pass out on $ext proto esp from $ournet to any pass in on $ext proto esp from any to any If you are BINATing or RDRing, you may need the patches that are

Re: Queing on ADSL ACK's

2003-06-19 Thread David Le Corfec
On Thursday 19 June 2003 23:21, Trevor Talbot wrote: pass in on $ext_if proto tcp from any to $ext_if flags S/SA keep state queue (q_def, q_pri) You probably don't want this one, since you have the more-selective rule above. Isn't it just unneeded to add queuing rules for inbound packets

Re: Queing on ADSL ACK's

2003-06-19 Thread Trevor Talbot
On Thursday, Jun 19, 2003, at 17:14 US/Pacific, David Le Corfec wrote: On Thursday 19 June 2003 23:21, Trevor Talbot wrote: pass in on $ext_if proto tcp from any to $ext_if flags S/SA keep state queue (q_def, q_pri) You probably don't want this one, since you have the more-selective rule above.