Re: NAT / RDR Questions

2006-02-03 Thread Jon Simola
On 2/2/06, Tim Pushor [EMAIL PROTECTED] wrote: Sorry to keep pestering, but this is kind of a show stopper for me. Does anyone have any ideas? If it's a serious show stopper you can probably find a lot of consultants who would certainly be willing to help. Somehow ask pf to NAT the outbound

Re: set skip on lo0 (FreeBSD 5.4)

2006-02-03 Thread Jon Simola
On 2/2/06, Joe Barnett [EMAIL PROTECTED] wrote: set skip on lo0 causes a syntax error resulting in rules not being loaded. The same rule works fine on my OpenBSD 3.8 machines. Possibly the Pf code in FreeBSD 5.4 predate the inclusion of set skip on ? Correct. 6.0-RELEASE has the PF code from

Re: set skip on lo0 (FreeBSD 5.4)

2006-02-03 Thread Alec Berryman
Jonathan Weiss on 2006-02-03 08:11:46 +0100: Possibly the Pf code in FreeBSD 5.4 predate the inclusion of set skip on ? Yes, set skip is not supported on 5.4. I think that even 6.0 does not support it. You may find freebsd-pf@freebsd.org a better place to find out. I can't comment

Re: NAT / RDR Questions

2006-02-03 Thread Tim Pushor
Karl O. Pinc wrote: On 02/02/2006 07:02:25 PM, Jon Simola wrote: On 2/2/06, Tim Pushor [EMAIL PROTECTED] wrote: Sorry to keep pestering, but this is kind of a show stopper for me. Does anyone have any ideas? If it's a serious show stopper you can probably find a lot of consultants who

Re: NAT / RDR Questions

2006-02-03 Thread Michiel van Baak
Can't you use IAX2? I trashed all SIP did providers and switched to IAX2 and haven't been happier with my system since -- Michiel van Baak http://michiel.vanbaak.info [EMAIL PROTECTED] GnuPG key: http://pgp.mit.edu:11371/pks/lookup?op=getsearch=0x7E0B9A2D Why is it drug addicts and computer

UDP to port 0

2006-02-03 Thread Jonas Davidsson
Pf does not seem to allow UDP packets destined for port 0 out, TCP packets to the same port pass without problems. If nothing else, this breaks nmaps os-detection mode. with 'pass quick on em0' #hping -2 -n -p 0 192.168.1.10 HPING 192.168.1.10 (em0 192.168.1.10): udp mode set, 28 headers + 0