From owner-freebsd-pf@FreeBSD.ORG Wed Apr 13 20:30:19 2005 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B4B9316A4CE for ; Wed, 13 Apr 2005 20:30:19 +0000 (GMT) Received: from rproxy.gmail.com (rproxy.gmail.com [64.233.170.194]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0FDDC43D3F for ; Wed, 13 Apr 2005 20:30:19 +0000 (GMT) (envelope-from dinzdale@gmail.com) Received: by rproxy.gmail.com with SMTP id j1so234954rnf for ; Wed, 13 Apr 2005 13:30:18 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=M+t+2DD7HGAA1Ev0k2RfI2iqfeaOjZx+NRldh0a3TsHhEwdWcEVE0dDKiyP6Gm4shZuZ3Ub7+xJxHt/iYKVzTqB8WPs2+iFoDu/pWtAbRCMXmw+upiCT/aWh/uOJiE0mXzbTCnKAvQ00TMhkJJI8vTf02T0BNsFJNKxaHtXZ7Ys= Received: by 10.38.65.1 with SMTP id n1mr1013894rna; Wed, 13 Apr 2005 13:30:16 -0700 (PDT) Received: by 10.38.11.55 with HTTP; Wed, 13 Apr 2005 13:30:16 -0700 (PDT) Message-ID: Date: Wed, 13 Apr 2005 22:30:16 +0200 From: stephen To: Vlad GALU In-Reply-To: <79722fad05041312472ac3a460@mail.gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline References: <79722fad05041312472ac3a460@mail.gmail.com> cc: freebsd-pf@freebsd.org Subject: Re: pflog and traffic via gif_if X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: stephen List-Id: Technical discussion and general questions about packet filter (pf) List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Apr 2005 20:30:19 -0000 On 4/13/05, Vlad GALU wrote: > On 4/13/05, stephen wrote: > You're not allowing any ipencap traffic on your tun interface. One > more thing: you have "block in on $ext_if all" twice. > Ah yeah... I do have it correct in my pf.conf, it was because i was replacing all the variables back to what they should be.. must've lost concentration as I was sending this mail just as my ride home arrived. Can you tell me more about allowing ipencap please?