... <lists-openbsdtech@bsws.de> wrote: * Girish Venkatachalam <girishvenkatachalam@gmail.com> [2008-05-12 18:18]: Right now anyway you cannot test since the hackathon in Japan has changed the NAT code completely. So I have to rewrite the kernel bits. but before we actually have to complete and commit that :) Can i have a preview of the changess. I am...

... <lists-openbsdtech@bsws.de> wrote: * Girish Venkatachalam <girishvenkatachalam@gmail.com> [2008-05-12 18:18]: Right now anyway you cannot test since the hackathon in Japan has changed the NAT code completely. So I have to rewrite the kernel bits. but before we actually have to complete and commit that :) Can i have a preview of the changess. I am interested since ...

* Girish Venkatachalam <girishvenkatachalam@gmail.com> [2008-05-12 18:18]: Right now anyway you cannot test since the hackathon in Japan has changed the NAT code completely. So I have to rewrite the kernel bits. but before we actually have to complete and commit that :) -- Henning Brauer, hb@bsws.de, henning@openbsd.org BS Web Services, http://bsws.de Full-Service ISP - Secure ...

On Wed, May 14, 2008 at 03:36:32AM +0200, Henning Brauer wrote: * Ermal Lugi <ermal.luci@gmail.com> [2008-05-13 18:24]: Can i have a preview of the changess. I am interested since am customizing shaping code of pfSense but do not want to have the hassle of difficult maintaining it in the long run. why don't you guys just wait for a few days. We regularly email ...

...finally got around to testing the pptp nat passthrough patch. Hello Stefan, Amazing! Many... doyle to this, as per the pptp-proxy(8) manual page: --------------- # $OpenBSD: pf.conf,v 1.35 2008/02/...from !($ext_if) -> ($ext_if:0) rdr-anchor "pptp-proxy/*" rdr pass on $int_if proto ... between this line being printed: <#>16781312 pptp server close and this line being ...

...it as well (I maintain the net/pptp port). My pleasure. The reason I did...finally got around to testing the pptp nat passthrough patch. I'm just gonna post...no explicit hostroute) still goes through the NAT: My traceroute [v0.72] jack.stsp.... doyle to this, as per the pptp-proxy(8) manual page: --------------- # $OpenBSD: pf.conf,v 1.35 2008/02/...

... wrote: ok, we have some pf pptp implementations now to look ...a patch for NAT that should workaround PPTP NAT passthrough problems...appriciated, Ermal ? pf_pptp_HEAD.diff Index: pf.c =================================================================== RCS file: /cvs/src...until a pluggable framework for NAT is finished */ + if (ntohs(th...

ok, we have some pf pptp implementations now to look at ... a patch for NAT that should workaround PPTP NAT passthrough problems.... appriciated, Ermal ? pf_pptp_HEAD.diff Index: pf.c =================================================================== RCS file: /cvs/src/...ctl_type = ntohs(hptr->type); + + /* Verify PPTP Control Message */ + if ((ntohs(hptr->...

... a patch for NAT that should workaround PPTP NAT passthrough problems....'ed port number choosen by pf(4) for a connection. This ... appriciated, Ermal ? pf_pptp_HEAD.diff Index: pf.c =================================================================== RCS file: /cvs/src/...pptpCallIds))) + return; + + /* Move up to PPTP message header */ + hptr = (struct pptpMsgHead...

... you are making here is that pf is imperfect because it fails to...OpenBSD kernel provisions to handle a PPTP quirk that only manifests itself in... much about performance of the pptp NAT use case, I'd ... your concerns are about: The patch under review is adding three ... I have much experience in pf coding and code auditing, but I... if it helps getting the patch in). -- stefan http://stsp.name...