bit.listserv.openbsd-pf Google Group

Re: german t-com´s vdsl

2009-11-07T13:25:47Z

Am 07.11.2009 um 07:08 schrieb Tobias Wigand:
Did you have a look at XORP
[link]
?
So, your linux box is not involved in none-IPTV traffic via VDSL?
Axel
---
axel....@chaos1.de PGP-Key:29E99DD6 +49 151 2300 9283 computing @
chaos claudius

Re: german t-com´s vdsl

2009-11-07T13:09:43Z

Hi,
Yes I had but there was no IGMP Proxy functionality. It was on the TODO
list though.
It just does Multicast Routing / IGMP proxying, announces the few nets
that have to be routed via Vlan8 dynamically and firewalls itself with
user unfriendly IPTables ;)
On a sidenote, I would order the cheapest IPTV VDSL offer. The others

Re: german t-com´s vdsl

2009-11-07T06:48:05Z

Assuming the same technical infrastructure is used for that offer: yes.
I have always found the guys at the onlinekosten.de forum to be very
helpful, maybe you can ask there to know for sure.
Never tried that.
Anyway the HowTo is outdated and does not work anymore for IPTV. Vlan8
is used for Multicast now and the required IGMP version is v3 there.

Re: german t-com´s vdsl

2009-11-05T10:06:51Z

Am 22.01.2008 um 09:12 schrieb Tobias Wigand:
2 questions come into mind:
- Does the new IP-only (w/o IPTV) offer (started in Sep-2009 by German
Telekom)
still requires the vlan setup?
- How does the vlan setup interferes with a carp/pfsync configuration?
Axel
---
axel....@chaos1.de PGP-Key:29E99DD6 +49 151 2300 9283 computing @

Virgin Hate: Virgin Forced Clips

2009-11-03T12:35:00Z

============================== ============================== =============
========= My sister lose her virginity with me (video)
=========
VVVVVVVVVVVVVVVVVVVVVVVVVVVVVV VVVVVVVVVVVVVVVVVVVVVVVVVVVVVV VVVVVVVVVVVV
========= ENTER HERE:
=========
========= [link]

Re: syntax error while using scrub with OpenBSD 4.6

2009-10-28T13:07:12Z

[link]

Re: syntax error while using scrub with OpenBSD 4.6

2009-10-28T13:06:37Z

Yes, you've hit the one small flag day change in OpenBSD 4.6 - try
match in all scrub (reassemble tcp)
or some variation (some other parameters are possible). It's in the
official docs, but not all the other resources out there that your
favorite search engine will turn up have caught up with the news yet.

Re: syntax error while using scrub with OpenBSD 4.6

2009-10-28T12:48:44Z

On Wed, 28 Oct 2009 00:29:58 -0700 (PDT)
The way to use scrub has changed for 4.6.
"scrub" is now an option to a normal rule.
match in all scrub
[link]
- Robert

Re: syntax error while using scrub with OpenBSD 4.6

2009-10-28T09:41:56Z

On Wed, 28 Oct 2009 01:10:08 -0700 (PDT)
remove "fragment" as that's not a supported option in the scrub context.
have a look at the pf.conf manpage.
- Robert

syntax error while using scrub with OpenBSD 4.6

2009-10-28T08:37:52Z

Hello all,
[ the formerly post was not complete because of my web-session was crashed ].
i am fairly new to OpenBSD. I use it for a home router and firewall.
Following the recommendations, i want to use the scrub keyword.
But regardles how i write it into the pf.conf and check it with pfctl
i get a syntax error message.

syntax error while using scrub with OpenBSD 4.6

2009-10-28T08:19:06Z

Hello all,
i am fairly new to OpenBSD. I use it for a home router and firewall.
Following the recommendations, i want to use the scrub keyword.
But regardles how i write it into the pf.conf and check it with pfctl
i get a syntax error message.
I tried several syntax:
scrub all
scrub in all
After using google and other ressources for hours i found a changeset

Using PF on Multiple Gateways

2009-10-21T12:29:56Z

hello ,
I wondered if anyone could assist me in writing a simple packet filter firewall on my OpenBSD v4.5.
All I intend doing is to have two firewalling machine on a separate network :
192.168.1.1
ext_if = xl0 (dhcp) // Internet interface
int_if=xl1 // Internatl interface
192.168.2.20

TCP Sequence numbers changing

2009-10-12T16:02:01Z

Hi,
I have a suspicion that route-to is changing sequence numbers on TCP packets.
My pf-based router is set up so that packets travelling between
internal hosts and the internet get routed through a separate IPS box:
imagine the IPS as basically a plugin to the router, and packets get
temporarily diverted through it on their way out.

Re: access to outlook web access through Openbsd

2009-10-08T06:55:22Z

and has that server a default gateway (your openbsd box)?
Michael K. Smith - Adhost schrieb:

RE: access to outlook web access through Openbsd

2009-10-07T16:57:35Z

Hello John:
Those rules look fine. Do you have a corresponding nat statement so
that the traffic going back out is NAT'd to a routable address?
Regards,
Mike