From owner-freebsd-net@freebsd.org Sun Aug 18 12:31:09 2019 Return-Path: Delivered-To: freebsd-net@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 8F112C6429 for ; Sun, 18 Aug 2019 12:31:09 +0000 (UTC) (envelope-from meka@tilda.center) Received: from mail.tilda.center (srv02.tilda.center [199.247.21.11]) by mx1.freebsd.org (Postfix) with ESMTP id 46BGcr3CfSz4VC9; Sun, 18 Aug 2019 12:31:07 +0000 (UTC) (envelope-from meka@tilda.center) Received: from hal9000.home.meka.rs (109-92-168-5.dynamic.isp.telekom.rs [109.92.168.5]) by mail.tilda.center (Postfix) with ESMTPSA id 70D081162E; Sun, 18 Aug 2019 14:31:06 +0200 (CEST) Date: Sun, 18 Aug 2019 14:31:05 +0200 From: Goran =?utf-8?B?TWVracSH?= To: Andrew White Cc: Kristof Provost , freebsd-net@freebsd.org Subject: Re: pf (rules and nat) + (ipfw + dummynet) Message-ID: <20190818123105.7i3drolb5jq6ggxt@hal9000.home.meka.rs> References: <20190817215151.GA8888@vega.codepro.be> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="p7esvjpxz3g42tnc" Content-Disposition: inline In-Reply-To: User-Agent: NeoMutt/20180716 X-Rspamd-Queue-Id: 46BGcr3CfSz4VC9 X-Spamd-Bar: -------- Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of meka@tilda.center designates 199.247.21.11 as permitted sender) smtp.mailfrom=meka@tilda.center X-Spamd-Result: default: False [-8.23 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; R_SPF_ALLOW(-0.20)[+mx]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; DMARC_NA(0.00)[tilda.center]; TO_DN_SOME(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; NEURAL_HAM_SHORT(-0.97)[-0.966,0]; SIGNED_PGP(-2.00)[]; FREEMAIL_TO(0.00)[gmail.com]; RCVD_NO_TLS_LAST(0.10)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; ASN(0.00)[asn:20473, ipnet:199.247.16.0/21, country:US]; RCVD_COUNT_TWO(0.00)[2]; IP_SCORE(-2.96)[ip: (-9.68), ipnet: 199.247.16.0/21(-4.79), asn: 20473(-0.27), country: US(-0.05)] X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Aug 2019 12:31:09 -0000 --p7esvjpxz3g42tnc Content-Type: text/plain; charset=utf-8 Content-Disposition: inline On Sun, Aug 18, 2019 at 01:15:17PM +0100, Andrew White wrote: > https://github.com/opnsense/src/commit/7514cc670601b566f30e0386ef8885660a27aa5a#diff-f038606be7fc68e05878b9cdbb32e21f I already talked to this commiter, and this is also PfSense patch, but for 11.0-RELEASE. That's the second thing we tried (first was understanding what Apple did). As for PfSense guys, I can not be any louder: https://twitter.com/meka_floss/status/1163035309224992768. If anyone knows how to reach PfSense people willing to help upstream their patch, I'm really glad to hear about them. --p7esvjpxz3g42tnc Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE1WIFkXy2ZeMKjjKEWj1TknovrLYFAl1ZRQUACgkQWj1Tknov rLZV4w//dvDv8896NqjbaKJWH20woyMwSlDvqqJmSgI8iOBp43VT32ST6/ZCACI1 iUnFUT0aS0RBV4b/43ItBqt/DSm7lgc5BGocr7f6x7491QYTY2Mk52STq41cc9Fm yJ81AhJY/G2xvUkbMCjTOEovXhF2PuMxRMU4gZyN0R8xpmWnx8IV1bwlW1t6VHMA jZyr97SQWj8/uAFCwAhBbHN8s4tjYbpaIjMIKAqvP0WwnKvP+9+GwENuazigJYnC XsI7G4R+fencIHQNI6guaQ+qbBXHzUU4VjE5xc2FJLaV2/D5WexfQCDoQLh2Cv3v UK72qCZX5M/tD/oZNLx73K1QFFJh+ZIREfKAZ6+H2eo48gr+9d8uwBbUn70ks1ie rfzyE3nciXM7mmo9TlzH0MUZKpaIK3wMqNFtJRmEt685Au1Pz9i95jC+bKeXcyMJ 3nHL1D4jImD1zGe62JWFdlZIuQzFCnYy1eGJ1+ZpXlDZ/gmXTPd+q1jJ8xTcnc+S S6g7gKjiBYuHT4hfMhIDRVtRT0zlq1xrPIyZ73yP8CKPrFaDbDb+SBDaReeg3O+a SLzcZ4/ZoxpnXSlw0eepNVJ6eeEoO7p8rsmvWVlU5JeEUboiuAxJo7IXuNu8tq1s uUwku3hlVNK7Z7dhv9UTlSevbx1tjtRaLPNccnAUP51MV720M7c= =JBWQ -----END PGP SIGNATURE----- --p7esvjpxz3g42tnc--