Date: Wed, 23 May 2007 14:07:36 +0200 From: peter@bsdly.net (Peter N. M. Hansteen) To: freebsd-pf@freebsd.org Subject: Re: source limiting NATed connections Message-ID: <87wsyzvj3r.fsf@thingy.datadok.no> In-Reply-To: <200705231206.50584.freebsdpf@academ.org> (Vasily Ivanov's message of "Wed, 23 May 2007 12:06:50 %2B0700") References: <200705231206.50584.freebsdpf@academ.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Vasily Ivanov <freebsdpf@academ.org> writes: > When I try to put rule like this: "nat on $ext_if from $private_net to any -> > $nat_addr (source-track rule, max-src-states 10)" into pf.conf I get > a "syntax error" message. Put the source tracking part in your pass rules instead. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://www.blug.linux.no/rfc1149/ http://www.datadok.no/ http://www.nuug.no/ "First, we kill all the spammers" The Usenet Bard, "Twice-forwarded tales" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?87wsyzvj3r.fsf>