Re: Migration document for people coming from IPFilter?

2006-04-04 Thread jos . backus
Thanks Peter and mouss for the replies. But I'm still puzzled. I read the description of the rdr directive a number of times and looked at some of the examples but it's still not clear to me how the above proxy and portmap subcommands translate into pf's rdr command. It really looks like there is

em driver OACTIVE flag

2006-04-04 Thread Gabriel Kuri
we have two Pentium III Xeon, OpenBSD 3.8 boxes running pf in transparent bridging mode on our primary and backup Internet links, which is currently fed via an OC-3 (155Mbps) connection to the Internet. On an average day we run 70Mbps/50Mbps (14K pps/13K pps) in/out. after upgrading to OpenBSD

Re: Migration document for people coming from IPFilter?

2006-04-04 Thread Peter N. M. Hansteen
[EMAIL PROTECTED] writes: Thanks Peter and mouss for the replies. Oh, you're welcome, But I'm still puzzled. I read the description of the rdr directive a number of times and looked at some of the examples but it's still not clear to me how the above proxy and portmap subcommands translate

Re: ALTQ, Dummynet, Dynamic Rules

2006-04-04 Thread Trevor Talbot
On Friday, Mar 24, 2006, at 05:27 US/Pacific, Daniel Dias Gonçalves wrote: I use the following rules in the IPFW: $fwcmd add 100 pipe 13 ip from 192.168.0.0/24 to any in $fwcmd add 101 pipe 14 ip from any to 192.168.0.0/24 out $fwcmd pipe 13 config mask src-ip 0x00ff bw 150Kbit/s queue

Re: Migration document for people coming from IPFilter?

2006-04-04 Thread Greg Hennessy
On 3 Apr 2006 22:56:57 -0700, [EMAIL PROTECTED] wrote: Thanks Peter and mouss for the replies. But I'm still puzzled. I read the description of the rdr directive a number of times and looked at some of the examples but it's still not clear to me how the above proxy and portmap subcommands

Re: Migration document for people coming from IPFilter?

2006-04-04 Thread Trevor Talbot
On Sunday, Apr 2, 2006, at 00:26 US/Pacific, [EMAIL PROTECTED] wrote: Is there a document that describes how to translate common IPFilter constructs to pf? This would be helpful for people migrating (like me). Specifically, I'm looking for the pf equivalent of IPFilter's map $ext_if

Re: PF and load

2006-04-04 Thread Henning Brauer
* Per-Olov Sj?holm [EMAIL PROTECTED] [2006-03-31 18:11]: Can PF make use of SMP? no. -- Henning Brauer, [EMAIL PROTECTED], [EMAIL PROTECTED] BS Web Services, http://bsws.de OpenBSD-based Webhosting, Mail Services, Managed Servers, ...