Re: IP alias with OpenBSD

2006-05-01 Thread jared r r spiegel
On Mon, May 01, 2006 at 05:55:42AM -0700, Gnat wrote: > I need some help on setting up IP aliasing with NAT. The need is to > create static NAT entries for some users due to a limit of 4 sessions > per Public IP Address for a VPN server. I have 5 addresses from my ISP > and wanted to use these t

Re: PF inadequacy: queue download

2006-05-01 Thread Sean Kamath
[In a message on 01 May 2006 01:51:35 PDT, [EMAIL PROTECTED] wrote:] >This works adequetly (How could it be "better"? Sounds like zealot >speak to me.) if the boxes only function is NAT, but if it also runs >external services queueing inbound traffic on the internal interface >doesn't work, beca

Re: PF inadequacy: queue download

2006-05-01 Thread jared r r spiegel
[EMAIL PROTECTED] wrote: > > works just as good as it possibly could if pf had a "download" queue > > mechanism, if not better. > > This works adequetly (How could it be "better"? Sounds like zealot > speak to me. to answer that, i believe there's no room for discussion there, then. > if the

Re: PF inadequacy: queue download

2006-05-01 Thread Travis H.
On 5/1/06, Can Erkin Acar <[EMAIL PROTECTED]> wrote: On Sun, Apr 30, 2006 at 08:22:51AM -0700, [EMAIL PROTECTED] wrote: > I don't think time spent developing PF or ALTQ could be better spent > developing something other than download queueing. Everyone here seems > to agree it's PF's worst defici

Re: PF inadequacy: queue download

2006-05-01 Thread Can Erkin Acar
On Sun, Apr 30, 2006 at 08:22:51AM -0700, [EMAIL PROTECTED] wrote: > I don't think time spent developing PF or ALTQ could be better spent > developing something other than download queueing. Everyone here seems > to agree it's PF's worst deficiency. Intresting definition for "Everyone". It seems t

IP alias with OpenBSD

2006-05-01 Thread Gnat
I need some help on setting up IP aliasing with NAT. The need is to create static NAT entries for some users due to a limit of 4 sessions per Public IP Address for a VPN server. I have 5 addresses from my ISP and wanted to use these to get around this 4 sessions per WAN IP. Any examples would be

Re: PF inadequacy: queue download

2006-05-01 Thread kestas . j . k
> works just as good as it possibly could if pf had a "download" queue > mechanism, if not better. This works adequetly (How could it be "better"? Sounds like zealot speak to me.) if the boxes only function is NAT, but if it also runs external services queueing inbound traffic on the internal int

Re: PF inadequacy: queue download

2006-05-01 Thread jared r r spiegel
On Sat, Apr 29, 2006 at 05:10:40PM +0200, Stanislaw Halik wrote: > > I can speak for myself - I can't afford both the hardware and the > electricity bill for a separate machine. Maybe downstream limiting isn't > very robust, but IMO is the biggest thing pf/altq lacks. i queue the incoming downs