From owner-freebsd-pf@FreeBSD.ORG Sun Feb 10 16:47:27 2008 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id D539516A421 for ; Sun, 10 Feb 2008 16:47:27 +0000 (UTC) (envelope-from amb@amb.kiev.ua) Received: from simq2-srv.bellnexxia.net (simq2.bellnexxia.net [206.47.199.152]) by mx1.freebsd.org (Postfix) with ESMTP id 7CE4413C478 for ; Sun, 10 Feb 2008 16:47:27 +0000 (UTC) (envelope-from amb@amb.kiev.ua) Received: from simip9.srvr.bell.ca ([206.47.199.87]) by simmts12-srv.bellnexxia.net (InterMail vM.5.01.06.13 201-253-122-130-113-20050324) with ESMTP id <20080210154627.ECAA1586.simmts12-srv.bellnexxia.net@simip9.srvr.bell.ca> for ; Sun, 10 Feb 2008 10:46:27 -0500 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Ao8CABarrkecIr7C/2dsb2JhbACBWaRe Received: from stjhnbsu84w-156034190194.nb.aliant.net (HELO amb.homeunix.org) ([156.34.190.194]) by alconsout.srvr.bell.ca with ESMTP; 10 Feb 2008 10:46:19 -0500 Received: from server.amb.kiev.ua ([10.15.25.2] helo=amb.kiev.ua) by amb.homeunix.org with esmtp (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JOENl-0009FV-2n for freebsd-pf@freebsd.org; Sun, 10 Feb 2008 11:46:17 -0400 Message-ID: <47AF1C49.2020104@amb.kiev.ua> Date: Sun, 10 Feb 2008 11:46:17 -0400 From: Andrew Birukov User-Agent: Thunderbird 2.0.0.9 (X11/20080122) MIME-Version: 1.0 To: freebsd-pf@freebsd.org Content-Type: text/plain; charset=KOI8-R; format=flowed Content-Transfer-Encoding: 7bit X-SA-Exim-Connect-IP: 10.15.25.2 X-SA-Exim-Rcpt-To: freebsd-pf@freebsd.org X-SA-Exim-Mail-From: amb@amb.kiev.ua X-SA-Exim-Scanned: No (on amb.homeunix.org); SAEximRunCond expanded to false Subject: PF TOS and keep state X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 10 Feb 2008 16:47:27 -0000 I have 2 pf.conf - one of them is working properly, but another one is not working at all. Could you please help me to explain why? FreeBSD 7.0-RC2 This pf.conf is working fine. -------------------------------------------------------- ext_if="xl0" altq on $ext_if priq bandwidth 520Kb queue { traf, torrent, ssh} queue torrent priority 0 queue traf priority 1 priq(default) queue ssh priority 2 pass in on $ext_if all no state pass out quick on $ext_if proto tcp from any to any port 22 \ no state queue ssh pass out quick on $ext_if proto tcp from 10.15.25.2 to any tos 0x2 \ no state queue torrent pass out on $ext_if all no state ---------------------------------------------------------- This pf.conf is not working properly. Queue torrent isn't matching packets. ---------------------------------------------------------- ext_if="xl0" altq on $ext_if priq bandwidth 520Kb queue { traf, torrent, ssh} queue torrent priority 0 queue traf priority 1 priq(default) queue ssh priority 2 pass in on $ext_if all pass out quick on $ext_if proto tcp from any to any port 22 \ queue ssh pass out quick on $ext_if proto tcp from 10.15.25.2 to any tos 0x2 \ queue torrent pass out on $ext_if all queue traf ----------------------------------------------------------- I see the differens between those two pf.conf. The first one is not using "keep state", the second is using it. Is it possible to use both options "tos" and "keep state" at the same time? -- Andrew Biriukov amb@amb.kiev.ua From owner-freebsd-pf@FreeBSD.ORG Mon Feb 11 11:07:11 2008 Return-Path: Delivered-To: freebsd-pf@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id BBF2916A4F6 for ; Mon, 11 Feb 2008 11:07:11 +0000 (UTC) (envelope-from owner-bugmaster@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 4CB7513C4D3 for ; Mon, 11 Feb 2008 11:07:11 +0000 (UTC) (envelope-from owner-bugmaster@FreeBSD.org) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id m1BB7BoP007485 for ; Mon, 11 Feb 2008 11:07:11 GMT (envelope-from owner-bugmaster@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id m1BB7Ap1007479 for freebsd-pf@FreeBSD.org; Mon, 11 Feb 2008 11:07:10 GMT (envelope-from owner-bugmaster@FreeBSD.org) Date: Mon, 11 Feb 2008 11:07:10 GMT Message-Id: <200802111107.m1BB7Ap1007479@freefall.freebsd.org> X-Authentication-Warning: freefall.freebsd.org: gnats set sender to owner-bugmaster@FreeBSD.org using -f From: FreeBSD bugmaster To: freebsd-pf@FreeBSD.org Cc: Subject: Current problem reports assigned to freebsd-pf@FreeBSD.org X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Feb 2008 11:07:11 -0000 Current FreeBSD problem reports Critical problems S Tracker Resp. Description -------------------------------------------------------------------------------- o kern/111220 pf [pf] repeatable hangs while manipulating pf tables 1 problem total. Serious problems S Tracker Resp. Description -------------------------------------------------------------------------------- o kern/82271 pf [pf] cbq scheduler cause bad latency o kern/92949 pf [pf] PF + ALTQ problems with latency o kern/110698 pf [pf] nat rule of pf without "on" clause causes invalid o bin/116610 pf [patch] teach tcpdump(1) to cope with the new-style pf o kern/117827 pf [pf] [panic] kernel panic with pf and ng o kern/120281 pf [request] lost returning packets to PF for a rdr rule 6 problems total. Non-critical problems S Tracker Resp. Description -------------------------------------------------------------------------------- o sparc/93530 pf [pf] Incorrect checksums when using pf's route-to on s o kern/93825 pf [pf] pf reply-to doesn't work o kern/106400 pf [pf] fatal trap 12 at restart of PF with ALTQ if ng0 d s conf/110838 pf tagged parameter on nat not working on FreeBSD 5.2 o kern/114095 pf [carp] carp+pf delay with high state limit o kern/114567 pf [pf] LOR pf_ioctl.c + if.c f kern/116645 pf [request] pfctl -k does not work in securelevel 3 o kern/118355 pf [pf] [patch] pfctl help message options order false -t f kern/119661 pf [pf] "queue (someq, empy_acks)" doesn't work o kern/120057 pf [patch] Allow proper settings of ALTQ_HFSC. The check 10 problems total. From owner-freebsd-pf@FreeBSD.ORG Mon Feb 11 16:35:17 2008 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id CB04416A420 for ; Mon, 11 Feb 2008 16:35:17 +0000 (UTC) (envelope-from spomerg@cwu.EDU) Received: from charybdis.cts.cwu.edu (charybdis.cts.cwu.edu [198.104.67.152]) by mx1.freebsd.org (Postfix) with ESMTP id B215613C459 for ; Mon, 11 Feb 2008 16:35:17 +0000 (UTC) (envelope-from spomerg@cwu.EDU) Received: from CONVERSION-CWU-DAEMON.CHARYBDIS.CTS.CWU.EDU by CHARYBDIS.CTS.CWU.EDU (PMDF V6.3-x13 #31358) id <01MR5WD90F7K0004FQ@CHARYBDIS.CTS.CWU.EDU> for freebsd-pf@freebsd.org; Mon, 11 Feb 2008 08:35:17 -0800 (PST) Received: from hermes.cwu.edu (hermes.cwu.edu [172.16.21.28]) by CHARYBDIS.CTS.CWU.EDU (PMDF V6.3-x13 #31358) with ESMTP id <01MR5WD8OYOW0004UN@CHARYBDIS.CTS.CWU.EDU> for freebsd-pf@freebsd.org; Mon, 11 Feb 2008 08:35:16 -0800 (PST) Received: from cwugate1-MTA by hermes.cwu.edu with Novell_GroupWise; Mon, 11 Feb 2008 08:35:16 -0800 Date: Mon, 11 Feb 2008 08:35:02 -0800 From: Gavin Spomer To: freebsd-pf@freebsd.org Message-id: <47B008B60200009000013BFB@hermes.cwu.edu> MIME-version: 1.0 X-Mailer: Novell GroupWise Internet Agent 7.0.2 HP Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: quoted-printable Content-disposition: inline Subject: Re: Current problem reports (Newbie Question) X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Feb 2008 16:35:17 -0000 I have no idea what I'm supposed to do when I get this email. Am I = supposed to stop using pf until it gets patched or what? - Gavin >>> FreeBSD bugmaster 02/11/08 3:07 AM >>> Current FreeBSD problem reports Critical problems S Tracker Resp. Description ---------------------------------------------------------------------------= ----- o kern/111220 pf [pf] repeatable hangs while manipulating pf = tables 1 problem total. Serious problems S Tracker Resp. Description ---------------------------------------------------------------------------= ----- o kern/82271 pf [pf] cbq scheduler cause bad latency o kern/92949 pf [pf] PF + ALTQ problems with latency o kern/110698 pf [pf] nat rule of pf without "on" clause causes = invalid o bin/116610 pf [patch] teach tcpdump(1) to cope with the = new-style pf o kern/117827 pf [pf] [panic] kernel panic with pf and ng o kern/120281 pf [request] lost returning packets to PF for a rdr = rule 6 problems total. Non-critical problems S Tracker Resp. Description ---------------------------------------------------------------------------= ----- o sparc/93530 pf [pf] Incorrect checksums when using pf's = route-to on s o kern/93825 pf [pf] pf reply-to doesn't work o kern/106400 pf [pf] fatal trap 12 at restart of PF with ALTQ if = ng0 d s conf/110838 pf tagged parameter on nat not working on FreeBSD = 5.2 o kern/114095 pf [carp] carp+pf delay with high state limit o kern/114567 pf [pf] LOR pf_ioctl.c + if.c f kern/116645 pf [request] pfctl -k does not work in securelevel = 3 o kern/118355 pf [pf] [patch] pfctl help message options order = false -t f kern/119661 pf [pf] "queue (someq, empy_acks)" doesn't work o kern/120057 pf [patch] Allow proper settings of ALTQ_HFSC. The = check=20 10 problems total. _______________________________________________ freebsd-pf@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org" From owner-freebsd-pf@FreeBSD.ORG Tue Feb 12 01:46:05 2008 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 2453816A417 for ; Tue, 12 Feb 2008 01:46:05 +0000 (UTC) (envelope-from cbuechler@gmail.com) Received: from an-out-0708.google.com (an-out-0708.google.com [209.85.132.245]) by mx1.freebsd.org (Postfix) with ESMTP id DB8AE13C467 for ; Tue, 12 Feb 2008 01:46:04 +0000 (UTC) (envelope-from cbuechler@gmail.com) Received: by an-out-0708.google.com with SMTP id c14so1305920anc.13 for ; Mon, 11 Feb 2008 17:46:04 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=fhyCS1IRSkjmN1vZiamHpkNFeb6K4ufPJFRnv6JUkDM=; b=EiIbrBGndksyphFTp2bdWt/Edm80K50kii+7uOaFKAjZbplwhEIju1tgB1/mi2Jr6HDE2pSUi9CTkPTTzV1ohVaVJzGmqWTGHzhGQTaN8Mu1WyrA7SgFQ858W2MQld0sd3bq1BhfFq1WhyWWp29NHxspfr+6Pn+pQtpOjNImCzI= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=GW6XdwIXN+DTiwTqjnKijziJDdLDL3IA1nDgwAPfUDcvaf9wZGrRhnt7vWC7zbREh8dzQRveHhVa/3ulGYxZulc7ApyjHw4Y64PEmO3T8nATlDE/NK70KUwsqoypKcbLUl5/SxClxtOy2YXpZXqea9pIoTCbTTXzy+2mBEmcp8U= Received: by 10.100.111.5 with SMTP id j5mr1349692anc.100.1202779100146; Mon, 11 Feb 2008 17:18:20 -0800 (PST) Received: by 10.100.242.5 with HTTP; Mon, 11 Feb 2008 17:18:20 -0800 (PST) Message-ID: Date: Mon, 11 Feb 2008 20:18:20 -0500 From: "Chris Buechler" To: "Gavin Spomer" In-Reply-To: <47B008B60200009000013BFB@hermes.cwu.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <47B008B60200009000013BFB@hermes.cwu.edu> Cc: freebsd-pf@freebsd.org Subject: Re: Current problem reports (Newbie Question) X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Feb 2008 01:46:05 -0000 On Feb 11, 2008 11:35 AM, Gavin Spomer wrote: > I have no idea what I'm supposed to do when I get this email. Am I supposed to stop using pf until it gets patched or what? > If you don't know what to do with it, ignore it. :) No, no need to stop using it, those are just open bugs on pf. The pf bugs get emailed automatically to the pf list periodically, the networking bugs to the net list, etc. I believe it's intended as a reminder of open issues for the developers. Chris From owner-freebsd-pf@FreeBSD.ORG Tue Feb 12 06:26:58 2008 Return-Path: Delivered-To: freebsd-pf@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0A2BF16A41B; Tue, 12 Feb 2008 06:26:58 +0000 (UTC) (envelope-from remko@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id D39ED13C442; Tue, 12 Feb 2008 06:26:57 +0000 (UTC) (envelope-from remko@FreeBSD.org) Received: from freefall.freebsd.org (remko@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id m1C6Qv5r007878; Tue, 12 Feb 2008 06:26:57 GMT (envelope-from remko@freefall.freebsd.org) Received: (from remko@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id m1C6Qvjt007874; Tue, 12 Feb 2008 06:26:57 GMT (envelope-from remko) Date: Tue, 12 Feb 2008 06:26:57 GMT Message-Id: <200802120626.m1C6Qvjt007874@freefall.freebsd.org> To: hw@ksue.edu.ua, remko@FreeBSD.org, freebsd-pf@FreeBSD.org From: remko@FreeBSD.org Cc: Subject: Re: kern/110698: [pf] nat rule of pf without "on" clause causes invalid packed chksum X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Feb 2008 06:26:58 -0000 Synopsis: [pf] nat rule of pf without "on" clause causes invalid packed chksum State-Changed-From-To: open->closed State-Changed-By: remko State-Changed-When: Tue Feb 12 06:26:56 UTC 2008 State-Changed-Why: Daniel asked for feedback in aug 2007, but I didn't see a reply at all. Make this : feedback timeout. http://www.freebsd.org/cgi/query-pr.cgi?pr=110698 From owner-freebsd-pf@FreeBSD.ORG Tue Feb 12 07:01:05 2008 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1940116A418 for ; Tue, 12 Feb 2008 07:01:05 +0000 (UTC) (envelope-from remko@elvandar.org) Received: from galain.elvandar.org (galain.elvandar.org [217.148.169.56]) by mx1.freebsd.org (Postfix) with ESMTP id CEC8313C455 for ; Tue, 12 Feb 2008 07:01:04 +0000 (UTC) (envelope-from remko@elvandar.org) Received: from localhost.we-dare.net ([127.0.0.1] helo=galain.elvandar.org) by galain.elvandar.org with esmtpa (Exim 4.67) (envelope-from ) id 1JOoa3-000NiE-Oh; Tue, 12 Feb 2008 07:25:23 +0100 Received: from 194.74.82.3 (SquirrelMail authenticated user remko) by galain.elvandar.org with HTTP; Tue, 12 Feb 2008 07:25:23 +0100 (CET) Message-ID: <56794.194.74.82.3.1202797523.squirrel@galain.elvandar.org> In-Reply-To: References: <47B008B60200009000013BFB@hermes.cwu.edu> Date: Tue, 12 Feb 2008 07:25:23 +0100 (CET) From: "Remko Lodder" To: "Chris Buechler" User-Agent: SquirrelMail/1.4.13 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Cc: freebsd-pf@freebsd.org Subject: Re: Current problem reports (Newbie Question) X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: remko@elvandar.org List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Feb 2008 07:01:05 -0000 On Tue, February 12, 2008 2:18 am, Chris Buechler wrote: > On Feb 11, 2008 11:35 AM, Gavin Spomer wrote: >> I have no idea what I'm supposed to do when I get this email. Am I >> supposed to stop using pf until it gets patched or what? >> > > If you don't know what to do with it, ignore it. :) > > No, no need to stop using it, those are just open bugs on pf. The pf > bugs get emailed automatically to the pf list periodically, the > networking bugs to the net list, etc. I believe it's intended as a > reminder of open issues for the developers. > > Chris *replacing hats with bugmeister one* Correct; we send out periodic reminders to interested parties / groups who know most of the "product / area of attention" to hopefully resolve open items. For PF problems the best assignee group is freebsd-pf (PF mailinglist) because all the guru's and people interested in PF are there... So as Chris said; no need to stop using PF on FreeBSD at all, but if you are interested or able to fix certain problems.. please do not hesitate to share that with the rest of the PF group :-) Cheers, Remko -- /"\ Best regards, | remko@FreeBSD.org \ / Remko Lodder | remko@EFnet X http://www.evilcoder.org/ | / \ ASCII Ribbon Campaign | Against HTML Mail and News From owner-freebsd-pf@FreeBSD.ORG Fri Feb 15 20:32:13 2008 Return-Path: Delivered-To: freebsd-pf@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E446516A418 for ; Fri, 15 Feb 2008 20:32:13 +0000 (UTC) (envelope-from lorenzhelleis@yahoo.com.br) Received: from web53701.mail.re2.yahoo.com (web53701.mail.re2.yahoo.com [206.190.37.22]) by mx1.freebsd.org (Postfix) with SMTP id A278313C447 for ; Fri, 15 Feb 2008 20:32:13 +0000 (UTC) (envelope-from lorenzhelleis@yahoo.com.br) Received: (qmail 1914 invoked by uid 60001); 15 Feb 2008 20:05:31 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.br; h=X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type:Message-ID; b=AHP7YYNqfYkH+1Y4T46rifmomVmzBxgHbmIgv2PmknwOHJkHeM0kf4LlkOmPOILJDuvSStDUMLJgd8kTiGEZgriHBRSo2ClhaQzKcmVe7q7J9AKDhLB9Nb2uaGq4pb7E6xnPgSiXS3wT18/nB8Fp6rjEI30ak/8LsLO/p/rgFNM=; X-YMail-OSG: StWycvEVM1kEz64mvi4W_H7DImwArmCJzp6cjK6xyIjpM_41xGDOOkRekHuBEbciSFum5Reo8fJzY11E.8OR4n19gQKVbUJrFZ1EWXl9HeWRe1TFWMdGMk.z0MjQ.Q-- Received: from [200.189.112.13] by web53701.mail.re2.yahoo.com via HTTP; Fri, 15 Feb 2008 12:05:31 PST X-Mailer: YahooMailRC/818.31 YahooMailWebService/0.7.162 Date: Fri, 15 Feb 2008 12:05:31 -0800 (PST) From: Lorenz Helleis To: freebsd-pf@FreeBSD.org MIME-Version: 1.0 Message-ID: <519105.93127.qm@web53701.mail.re2.yahoo.com> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: Subject: Congestion X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Feb 2008 20:32:14 -0000 Can someone explain the CONGESTION "variable" ( pfctl -si ) for me ? =0A= =0ASometimes when this "variable" is higher than the normal, the firewall d= rop some connections. How can I solve this problem ?=0A=0ADo I need to set = another limit ?=0A=0Asorry about my english mistakes :(=0A=0Athanks=0A=0A = =0A=0A=0A=0A=0A Abra sua conta no Yahoo! Mail, o =C3=BAnico sem limite= de espa=C3=A7o para armazenamento!=0Ahttp://br.mail.yahoo.com/