Re: PF FAQ example ruleset

2010-06-18 Thread Stuart Henderson
On 2010/06/18 09:32, Sean Kennedy wrote: > Note: I did not want to send a DIFF since these are Examples for the PF FAQ, > and not updates for -release. If you think they should go in the FAQ, you would need to send a diff for the FAQ so we can see how you'd fit them in.. > > Su

Re: PF FAQ example ruleset

2010-06-18 Thread Sean Kennedy
xed-address 10.16.1.202; option host-name "wince-hh-two"; } host pxe-client { hardware ethernet 02:03:04:05:06:07; filename "pxeboot"; next-server 10.16.1.1; } } dhcpd.conf These are just examples, but they work for me.

Re: PF FAQ example ruleset

2010-06-16 Thread Rod Whitworth
Bump! On Sun, 13 Jun 2010 12:34:55 +0100, Stuart Henderson wrote: >On 2010/06/13 21:01, Rod Whitworth wrote: >> On Sun, 13 Jun 2010 10:48:49 +0100, Stuart Henderson wrote: >> >> >On 2010/06/13 17:31, Rod Whitworth wrote: >> >> On Sun, 13 Jun 2010 07:44:26 +0100, Jason McIntyre wrote: >> >> >> >

Re: PF FAQ example ruleset

2010-06-13 Thread Stuart Henderson
On 2010/06/13 21:01, Rod Whitworth wrote: > On Sun, 13 Jun 2010 10:48:49 +0100, Stuart Henderson wrote: > > >On 2010/06/13 17:31, Rod Whitworth wrote: > >> On Sun, 13 Jun 2010 07:44:26 +0100, Jason McIntyre wrote: > >> > >> >On Sun, Jun 13, 2010 at 12:36:52PM +1000, Rod Whitworth wrote: > >> >> T

Re: PF FAQ example ruleset

2010-06-13 Thread Rod Whitworth
On Sun, 13 Jun 2010 10:48:49 +0100, Stuart Henderson wrote: >On 2010/06/13 17:31, Rod Whitworth wrote: >> On Sun, 13 Jun 2010 07:44:26 +0100, Jason McIntyre wrote: >> >> >On Sun, Jun 13, 2010 at 12:36:52PM +1000, Rod Whitworth wrote: >> >> The rule: >> >> pass in on $int_if inet proto tcp to any

Re: PF FAQ example ruleset

2010-06-13 Thread Stuart Henderson
On 2010/06/13 17:31, Rod Whitworth wrote: > On Sun, 13 Jun 2010 07:44:26 +0100, Jason McIntyre wrote: > > >On Sun, Jun 13, 2010 at 12:36:52PM +1000, Rod Whitworth wrote: > >> The rule: > >> pass in on $int_if inet proto tcp to any port ftp \ > >> rdr-to 127.0.0.1 port 8021 > >> > >> in the ex

Re: PF FAQ example ruleset

2010-06-13 Thread Jason McIntyre
On Sun, Jun 13, 2010 at 05:31:39PM +1000, Rod Whitworth wrote: > > > >if the point of that rule is the same as the point of the rule in > >ftp-proxy(8), then the rule should really match the man page (which uses > >"quick") or vice versa. > > Note that the ftp-proxy manpage does "pass in quick" wi

Re: PF FAQ example ruleset

2010-06-13 Thread Rod Whitworth
On Sun, 13 Jun 2010 07:44:26 +0100, Jason McIntyre wrote: >On Sun, Jun 13, 2010 at 12:36:52PM +1000, Rod Whitworth wrote: >> The rule: >> pass in on $int_if inet proto tcp to any port ftp \ >> rdr-to 127.0.0.1 port 8021 >> >> in the example ruleset on http://www.openbsd.org/faq/pf/example1.ht

Re: PF FAQ example ruleset

2010-06-12 Thread Jason McIntyre
On Sun, Jun 13, 2010 at 12:36:52PM +1000, Rod Whitworth wrote: > The rule: > pass in on $int_if inet proto tcp to any port ftp \ > rdr-to 127.0.0.1 port 8021 > > in the example ruleset on http://www.openbsd.org/faq/pf/example1.html > does not work for active ftp from NATted hosts. > > There a

PF FAQ example ruleset

2010-06-12 Thread Rod Whitworth
The rule: pass in on $int_if inet proto tcp to any port ftp \ rdr-to 127.0.0.1 port 8021 in the example ruleset on http://www.openbsd.org/faq/pf/example1.html does not work for active ftp from NATted hosts. There are three solutions which all work. A> make it "pass in quick ." B> move th