Re: PF misbehaving counters + code reuse

2010-09-10 Thread Martin Pelikan
Hello tech@, please test this; I sent it to some folks but it looks like they were busy... On Thu, Sep 02, 2010 at 06:07:57PM +0200, Henning Brauer wrote: > this diff I like. get 2 or 3 ppl to test and I'll commit it :) -- Martin Pelikan Index: net/pf.c ===

Re: PF misbehaving counters + code reuse

2010-09-01 Thread Martin Pelikan
Hello, this is a new version based on corrections by henning@ with few more things added. I'm not sure whether the type changes in pfvar.h won't break anything, but it would be nice to have the types uniform. Any comments or suggestions? -- Martin Pelikan Index: net/pf.c

PF misbehaving counters + code reuse

2010-09-01 Thread Martin Pelikán
Hello tech@ I've noticed different behavior of pf rule counters between IPv4 and IPv6. The easiest ruleset would look like: block match on em0 inet6 tag potazmo match on em0 inet tag ausfahrt pass on em0 from any to any tagged potazmo pass on em0 from any to any tagged ausfahrt where ping4s are c