Re: npf syntax: port ranges, negation of a condition, and map rules

2020-10-30 Thread Rocky Hotas
On ott 29 10:16, Michael van Elst wrote: > The "port forwarding case" only handles single ports. You need > separate map commands for each port. After several errors, I was wondering in fact if this was the reason. Thanks for clarifying this! Rocky

Re: npf syntax: port ranges, negation of a condition, and map rules

2020-10-29 Thread Michael van Elst
rockyho...@firemail.cc (Rocky Hotas) writes: >In particular, for example, >map $myif dynamic proto tcp $myhost port 33434-33435 <- $myif port 55000-55001 >doesn't work: ># npfctl reload >/etc/npf.conf:41:92: port range is not valid near '55001' The "port forwarding case" only handles single

Re: npf syntax: port ranges, negation of a condition, and map rules

2020-10-28 Thread Rocky Hotas
On ott 28 12:22, Martin Husemann wrote: > There is an example in /usr/share/examples/npf/host-npf.conf: > > # Allow being tracerouted > pass in proto udp to any port 33434-33600 This is a single use (but thanks! I forgot this example file). My case is double, because I would like to map

Re: npf syntax: port ranges, negation of a condition, and map rules

2020-10-28 Thread Martin Husemann
On Wed, Oct 28, 2020 at 12:16:36PM +0100, Rocky Hotas wrote: > 1) How to represent port ranges? I tried with > > beginning_port:end_port (which for example is used in OpenBSD's pf) > beginning_port,end_port > beginning_port-end_port > > $port_range = { beginning_port, end_port } > > but none of

npf syntax: port ranges, negation of a condition, and map rules

2020-10-28 Thread Rocky Hotas
Hello! After browsing the available documentation for npf, I did not find any hints about some issues. 1) How to represent port ranges? I tried with beginning_port:end_port (which for example is used in OpenBSD's pf) beginning_port,end_port beginning_port-end_port $port_range = {

Re: NPF syntax

2015-03-18 Thread J. Lewis Muir
On 3/17/15 6:34 PM, Mindaugas Rasiukevicius wrote: Hi, Mindaugas. First, let me say thank you for your excellent work on NPF! D'Arcy J.M. Cain da...@netbsd.org wrote: I have decided to give up on pf after banging my head against the wall (and the OBSD mailing list) and try npf but I can't

Re: NPF syntax

2015-03-17 Thread rudolf
D'Arcy J.M. Cain wrote: On Mon, 16 Mar 2015 20:37:16 +0100 rudolf net...@eq.cz wrote: Are you using an older version of NPF? This seems like 3) in this email from two years ago: https://mail-index.netbsd.org/netbsd-users/2013/04/13/msg012733.html I am running NetBSD 6.1.5_PATCH. I guess that

Re: NPF syntax

2015-03-17 Thread Mindaugas Rasiukevicius
D'Arcy J.M. Cain da...@netbsd.org wrote: I have decided to give up on pf after banging my head against the wall (and the OBSD mailing list) and try npf but I can't figure out the syntax. I followed the example at http://www.netbsd.org/~rmind/npf/ but I keep getting errors when I validate. I

Re: NPF syntax

2015-03-17 Thread D'Arcy J.M. Cain
On Mon, 16 Mar 2015 20:37:16 +0100 rudolf net...@eq.cz wrote: Are you using an older version of NPF? This seems like 3) in this email from two years ago: https://mail-index.netbsd.org/netbsd-users/2013/04/13/msg012733.html I am running NetBSD 6.1.5_PATCH. I guess that doesn't have the most

NPF syntax

2015-03-16 Thread D'Arcy J.M. Cain
I have decided to give up on pf after banging my head against the wall (and the OBSD mailing list) and try npf but I can't figure out the syntax. I followed the example at http://www.netbsd.org/~rmind/npf/ but I keep getting errors when I validate. I reduced npf.conf to the following two lines:

Re: NPF syntax

2015-03-16 Thread Andy Ruhl
On Mon, Mar 16, 2015 at 6:52 AM, D'Arcy J.M. Cain da...@netbsd.org wrote: I have decided to give up on pf after banging my head against the wall (and the OBSD mailing list) and try npf but I can't figure out the syntax. I followed the example at http://www.netbsd.org/~rmind/npf/ but I keep

Re: NPF syntax

2015-03-16 Thread rudolf
D'Arcy J.M. Cain wrote: [...] table friends type tree file /VEX/general/pf/friends.list table enemies type tree file /VEX/general/pf/enemies.list This gives me this error: # npfctl validate npfctl: table '0' is already defined If I remove one line I get this: # npfctl validate table 0 type

Re: NPF syntax

2015-03-16 Thread D'Arcy J.M. Cain
On Mon, 16 Mar 2015 18:26:58 GMT Gerard Lally lists+netbsd.us...@netmail.ie wrote: At date and time Mon, 16 Mar 2015 09:52:07 -0400, D'Arcy J.M. Cain wrote: # npfctl validate /etc/npf.conf:11:3: syntax error near 'alg' I am using the example config almost verbatim except for the table