synproxy state with multipath routing

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

synproxy state with multipath routing

Indunil Jayasooriya
Hi Misc,

Can We have synproxy state in pf.conf, when net.inet.ip.multipath=1 is set
in /etc/sysctl.conf


here is my config

in /etc/sysctl.conf

net.inet.ip.forwarding=1        # 1=Permit forwarding (routing) of IPv4
packets
#net.inet.ip.mforwarding=1      # 1=Permit forwarding (routing) of IPv4
multicast packets
net.inet.ip.multipath=1 # 1=Enable IP multipath routing

No /etc/mygate file. I have moved it

mv /etc/mygate /etc/mygate.orig


in /etc/hostname.bge0

!route add -mpath default 1.2.3.4

and

in /etc/hostname.bge1

!route add -mpath default 3.4.5.6


rebooted the OpenBSD box.


I have below 2 lines in pf.conf file. first rule works. but 2 nd rule with
synproxy state does NOT?


pass in quick log on $wan_if inet proto tcp from any to $wan_if \
    port 22 reply-to ($wan_if $wan_gw)


pass in quick log on $wan_if inet proto tcp from any to $wan_if \
    port 22 synproxy state (max-src-conn-rate 1/120) reply-to ($wan_if
$wan_gw)


Why?  seeking answers...




--
cat /etc/motd

Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
Reply | Threaded
Open this post in threaded view
|

Fwd: synproxy state with multipath routing

Indunil Jayasooriya
Resending



Hi Misc,

Can We have synproxy state in pf.conf, when net.inet.ip.multipath=1 is set
in /etc/sysctl.conf


here is my config

in /etc/sysctl.conf

net.inet.ip.forwarding=1        # 1=Permit forwarding (routing) of IPv4
packets
#net.inet.ip.mforwarding=1      # 1=Permit forwarding (routing) of IPv4
multicast packets
net.inet.ip.multipath=1 # 1=Enable IP multipath routing

No /etc/mygate file. I have moved it

mv /etc/mygate /etc/mygate.orig


in /etc/hostname.bge0

!route add -mpath default 1.2.3.4

and

in /etc/hostname.bge1

!route add -mpath default 3.4.5.6


rebooted the OpenBSD box.


I have below 2 lines in pf.conf file. first rule works. but 2 nd rule with
synproxy state does NOT?


pass in quick log on $wan_if inet proto tcp from any to $wan_if \
    port 22 reply-to ($wan_if $wan_gw)


pass in quick log on $wan_if inet proto tcp from any to $wan_if \
    port 22 synproxy state (max-src-conn-rate 1/120) reply-to ($wan_if
$wan_gw)


Why?  seeking answers...




--
cat /etc/motd

Thank you
Indunil Jayasooriya
http://www.theravadanet.net/










--
cat /etc/motd

Thank you
Indunil Jayasooriya
http://www.theravadanet.net/