[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Bug in pf - 3.6 ?
- To: misc_(_at_)_openbsd_(_dot_)_org
- Subject: Bug in pf - 3.6 ?
- From: "Bc. Radek Krejca" <radek_(_at_)_ceskedomeny_(_dot_)_cz>
- Date: Mon, 4 Apr 2005 13:06:44 +0200
- Organization: STARNET, s. r. o.
- Reply-to: "Bc. Radek Krejca" <radek_(_at_)_ceskedomeny_(_dot_)_cz>
Hello,
I have problem with pf - anchors in OBSD 3.6. I have this pf.conf:
---------------------------------------------------------------------
net_krcka = "10.7.184.2"
net_malek = "10.7.185.2"
scrub in all
altq on rl0 bandwidth 100Mb cbq queue { dflt_rl0, krcka_fast, krcka_slow, malek_fast, malek_slow }
queue dflt_rl0 bandwidth 2128Kb cbq(default)
queue krcka_fast bandwidth 1Mb priority 1
queue krcka_slow bandwidth 64Kb priority 1
queue malek_fast bandwidth 1Mb priority 1
queue malek_slow bandwidth 64Kb priority 1
altq on tl0 bandwidth 100Mb cbq queue { dflt_tl0, krcka_fast_up, krcka_slow_up, malek_fast_up, malek_slow_up }
queue dflt_tl0 bandwidth 2128Kb cbq(default)
queue krcka_fast_up bandwidth 256Kb priority 1
queue krcka_slow_up bandwidth 64Kb priority 1
queue malek_fast_up bandwidth 256Kb priority 1
queue malek_slow_up bandwidth 64Kb priority 1
pass in all
pass out all
anchor krcka out on rl0 from any to $net_krcka
anchor krcka_up out on tl0 from $net_krcka to any
anchor malek out on rl0 from any to $net_malek
anchor malek_up out on tl0 from $net_malek to any
---------------------------------------------------------------------
an following file for anchor.
net = "10.7.184.2"
pass out from any to $net queue krcka_slow
---------------------------------------------------------------------
Now I use command
/sbin/pfctl -a krcka:allow -f /usr/local/etc/rules/krcka
---------------------------------------------------------------------
If I use
pfctl -s all -vv | less
on obsd 3.4 or 3.5, I see traffic for anchor krcka, but in 3.6 no.
Where is problem - is it bug or my mistake?
Thanks
Radek
--
Regards,
Bc. Radek Krejca
radek_(_at_)_ceskedomeny_(_dot_)_cz
http://www.ceskedomeny.cz
http://www.skdomeny.com
http://www.starnet.cz
Visit your host, monkey.org