From owner-freebsd-pf@FreeBSD.ORG  Mon Jul  3 18:50:46 2006
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
X-Original-To: freebsd-pf@freebsd.org
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 33BD916A412
	for <freebsd-pf@freebsd.org>; Mon,  3 Jul 2006 18:50:46 +0000 (UTC)
	(envelope-from Vikash.Badal@is.co.za)
Received: from morpheus.is.co.za (morpheus.is.co.za [196.35.45.229])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 402AF43D99
	for <freebsd-pf@freebsd.org>; Mon,  3 Jul 2006 18:50:37 +0000 (GMT)
	(envelope-from Vikash.Badal@is.co.za)
Received: from morpheus.is.co.za (localhost.is.co.za [127.0.0.1])
	by morpheus.is.co.za (Postfix) with ESMTP id 4325EF19E6
	for <freebsd-pf@freebsd.org>; Mon,  3 Jul 2006 20:50:35 +0200 (SAST)
Received: from ZABRYSVISMFW.af.didata.local (zajnbisit.mfw.is.co.za
	[196.26.2.106])
	by morpheus.is.co.za (Postfix) with ESMTP id 1515BF19CF
	for <freebsd-pf@freebsd.org>; Mon,  3 Jul 2006 20:50:35 +0200 (SAST)
Received: from zabrysvisex03.af.didata.local (Not Verified[10.1.8.13]) by
	ZABRYSVISMFW.af.didata.local with NetIQ MailMarshal (v5.5.6.5)
	id <BA03ba63f8>; Mon, 03 Jul 2006 20:51:01 +0200
Received: from ZABRYSVISEX04.af.didata.local ([10.1.8.148]) by
	zabrysvisex03.af.didata.local with Microsoft SMTPSVC(6.0.3790.211); 
	Mon, 3 Jul 2006 20:50:34 +0200
X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Date: Mon, 3 Jul 2006 20:50:34 +0200
Message-ID: <740109F1ED7BA14EB02307DEF26487AB0580EC9F@ZABRYSVISEX04.af.didata.local>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: Inspecting a gre tunnel passing through a freebsd pf firewall ?
Thread-Index: Acae0ZCvQ8AzYhVaRK6TXJtY28xNcQ==
From: "Vikash Badal" <Vikash.Badal@is.co.za>
To: <freebsd-pf@freebsd.org>
X-OriginalArrivalTime: 03 Jul 2006 18:50:34.0906 (UTC)
	FILETIME=[9142B7A0:01C69ED1]
X-AV-Checked: ClamAV using ClamSMTP
Subject: Inspecting a gre tunnel passing through a freebsd pf firewall ?
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 03 Jul 2006 18:50:46 -0000


Greetings,

Is it possible to inspect and filter a gre tunnel passing through a pf
based freebsd firewall ?

I would like to rate limit certain traffic (syn, http etc) that is
encapsulated in the gre tunnel passing thru the freebsd firewall?

Is this possible ? If so how ?=20

Thanks
Vikash
Please note: This email and its content are subject to the disclaimer as =
displayed at the following link http://www.is.co.za/disc.asp. Should you =
not have Web access, send a mail to disclaimers@is.co.za and a copy will =
be emailed to you.