Re: [PATCH] NAT lookups upgrade for FreeBSD and OpenBSD

2013-04-02 Thread Eliezer Croitoru
ANY config example?? Eliezer On 04/01/2013 03:35 PM, Amos Jeffries wrote: Current OpenBSD implementation of PF divert-to works similarly to TPROXY and only requires a getsockname() lookup to locate the TCP packet original destination. The work by Marios with some additional tweaks discovered

Re: [PATCH] NAT lookups upgrade for FreeBSD and OpenBSD

2013-04-02 Thread Amos Jeffries
On 2/04/2013 5:13 p.m., Eliezer Croitoru wrote: ANY config example?? Eliezer On 04/01/2013 03:35 PM, Amos Jeffries wrote: Current OpenBSD implementation of PF divert-to works similarly to TPROXY and only requires a getsockname() lookup to locate the TCP packet original destination. The work

Re: [PATCH] Bug 3643: Connection Auth redesign

2013-04-02 Thread Alex Rousskov
On 03/28/2013 12:41 AM, Amos Jeffries wrote: New patch attached with the above small changes to conn-auth included. Thanks for addressing all of my concerns, Alex.

Re: [PATCH] NAT lookups upgrade for FreeBSD and OpenBSD

2013-04-02 Thread Eliezer Croitoru
On 04/02/2013 12:19 PM, Amos Jeffries wrote: On 2/04/2013 5:13 p.m., Eliezer Croitoru wrote: ANY config example?? Eliezer On 04/01/2013 03:35 PM, Amos Jeffries wrote: Current OpenBSD implementation of PF divert-to works similarly to TPROXY and only requires a getsockname() lookup to locate