RDR and two outgoing connections

2004-04-09 Thread pierre-yves ritschard
Hi i'm using this setup: Leased line 1Lease line 2 == | | |---| | | | OpenBSD 3.5 |

[patch] allow multiple tags in tagged statement

2006-03-31 Thread Pierre-Yves Ritschard
This patch allows multiple tags in the tagged statement, like this: pass out all on $ext proto tcp tagged { ADMIN, DEV } I find it useful when using tags extensively. Hi, I hope someone finds this as useful as I do. --- parse.y.origWed Mar 15 20:01:04 2006 +++ parse.y Thu Mar

Re: [patch] allow multiple tags in tagged statement

2006-03-31 Thread Pierre-Yves Ritschard
* Per-Olov Sjöholm ([EMAIL PROTECTED]) wrote: On Friday 31 March 2006 12.45, you wrote: This patch allows multiple tags in the tagged statement, like this: pass out all on $ext proto tcp tagged { ADMIN, DEV } I find it useful when using tags extensively. Hi, I hope someone finds this

state-policy floating not honored ?

2006-11-09 Thread Pierre-Yves Ritschard
Hi pf@, I might be getting rusty but I'm having a problem with a really simple ruleset on a really recent -current OpenBSD The firewall has two carped interfaces and is running pfsync. The ruleset goes like this: ext=trunk0 set state-policy floating table mailservers const { ... } set skip on

Re: state-policy floating not honored ?

2006-11-09 Thread Pierre-Yves Ritschard
* Pierre-Yves Ritschard ([EMAIL PROTECTED]) wrote: Hi pf@, I might be getting rusty but I'm having a problem with a really simple ruleset on a really recent -current OpenBSD The firewall has two carped interfaces and is running pfsync. The ruleset goes like this: ext=trunk0 set state

Re: state-policy floating not honored ?

2006-11-09 Thread Pierre-Yves Ritschard
* Daniel Hartmeier ([EMAIL PROTECTED]) wrote: On Thu, Nov 09, 2006 at 03:11:55PM +0100, Pierre-Yves Ritschard wrote: It works as expected but this looks like a 'state-policy ifbound' behavior right ? I tested this with latest (11/7) current available on my mirror and the behavior

Re: Kernel panic on dup-to, to localhost

2006-12-20 Thread Pierre-Yves Ritschard
Johan Allard wrote: Hi there, I just managed to get a kernel dump on a basic clean installed OpenBSD 4.0 with the following settings: ifconfig lo1 create ifconfig lo1 inet 1.1.12.1 netmask 255.255.255.0 echo pass in on ne3 dup-to (lo1 1.1.12.1) inet all keep state /etc/pf.conf pfctl -e