On Mon, Oct 09, 2017 at 03:39:41AM -0700, Aaron J. Grier wrote: > On Sat, Oct 07, 2017 at 07:33:45PM +1100, Paul Ripke wrote: > > Ok, I've bitten the bullet and switched to npf and altq. Setup seems > > to be working so far, and it's fixed another annoyance I recently > > noticed: ipf was blocking in-bound syn-acks from select remote sites. > > 99% of sites were fine, a handful of sites broke. It's all fine with > > npf. > > got an example of conf files? or is it separately using npf.conf and > altq.conf?
Nope, just separately using npf.conf & altq.conf. Seems to work as expected, at least after I figured out pr/52609, which caught me by surprise. -- Paul Ripke "Great minds discuss ideas, average minds discuss events, small minds discuss people." -- Disputed: Often attributed to Eleanor Roosevelt. 1948.
