From owner-freebsd-pf@FreeBSD.ORG Tue Mar 29 16:58:17 2011 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6C628106566B for ; Tue, 29 Mar 2011 16:58:17 +0000 (UTC) (envelope-from gibblertron@gmail.com) Received: from mail-vx0-f182.google.com (mail-vx0-f182.google.com [209.85.220.182]) by mx1.freebsd.org (Postfix) with ESMTP id 22CCB8FC15 for ; Tue, 29 Mar 2011 16:58:16 +0000 (UTC) Received: by vxc34 with SMTP id 34so367607vxc.13 for ; Tue, 29 Mar 2011 09:58:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=kKx0x1FYmPT4ILjOx8EEUc72ZhYgQI+hR9hG6BYhnJQ=; b=GU6DZ4p/9ymNnK1XRK+VnVmFtU/mytqEK0pSJfCln78CVD1ImV1hGplUZrBsMZEA5k Li3uFLI0YRXWUxjkvDXsRwzCXyrDZ9wqZuN34gGA9rANIIg/bIg3GdDrtaeRMc8idXIw axEpCM9lW2tdnShfa0vkOgAr6X/dMP6AbAIas= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=Kc5Akl58y2nTkYK702gW75nRlYHT/P3NjLGq6hTfj+BXWMRMwPHGvPA5Zxbhqv+n6I pjuyJdp2WenneT4cT0n8DJj0cJclc9n6gmhL8ZPCo2mXmTU5j8x9GxGdL/3dshlWVZBl rPunMugLYtbtAM9QPoVD+t4v6djSVihwzg3zs= MIME-Version: 1.0 Received: by 10.220.45.134 with SMTP id e6mr190395vcf.55.1301416003492; Tue, 29 Mar 2011 09:26:43 -0700 (PDT) Received: by 10.220.161.147 with HTTP; Tue, 29 Mar 2011 09:26:43 -0700 (PDT) In-Reply-To: <4D91BF90.2080608@eskk.nu> References: <4D8E11CB.2070501@eskk.nu> <4D90075A.3030300@gmail.com> <4D91BF90.2080608@eskk.nu> Date: Tue, 29 Mar 2011 09:26:43 -0700 Message-ID: From: Patrick To: freebsd-pf@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: Subject: Re: Lost in rules! X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Mar 2011 16:58:17 -0000 Just wanted to confirm that you compiled Squid with SQUID_PF set... On Tue, Mar 29, 2011 at 4:16 AM, Leslie Jensen wrote: > > > On 2011-03-28 05:58, Vilem Kebrt wrote: >> >> Dne 26.3.2011 17:18, Leslie Jensen napsal(a): >>> >>> block drop in log quick proto ipv6 all >>> >>> block drop out log quick proto ipv6 all >> >> Hi Leslie, >> imho these rules will "drop random everything" , definition of ipv6 in >> PF is inet6 :) and they are quick so no other rules aply. >> >> block drop in on $ext_if inet6 all >> block drop out on $ext_if inet6 all >> >> should be these rules i think. >> William >> > > Thank you! > > That cured some of the problem. > > The remaining problem is that the squid transparency is not working. > I can set proxy in my browser and it will use squid. But it seems that my > rdr rule is no used. > > I've tried starting squid manually with squid -NCd10 but there's no > indication of any errors. > > I'm also running > =A0tcpdump -s 256 -n -e -tttt -i pflog0 > > But I cannot see any of the outgoing packets getting detected by pf and s= ent > to the proxy. > > Do you have any suggestions on how to log more information? > > Thanks > > /Leslie > > _______________________________________________ > freebsd-pf@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-pf > To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org" >