[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ipfilter
Subject:    Re: option: tag
From:       Necati Ersen Siseci <siseci () gmail ! com>
Date:       2005-11-08 7:26:53
Message-ID: 848f55ff0511072326o4c2453feu () mail ! gmail ! com
[Download RAW message or body]

Hello,
You can use IPF tags like this
pass in log quick on fxp0 all keep state keep frags set-tag (log=1)pass out log quick \
on fxp0 all keep state keep frags set-tag (log=1) And ipmon appends log linelog-tag 1
08/11/2005 09:06:40.523477 fxp0 @0:9 p 192.168.1.1,52969 ->123.123.123.123,22 PR tcp \
len 20 84 -AP K-S K-F OUT log-tag 1 You can use tag option with ipnat.
rdr xl1 192.168.9.1/255.255.255.255 port 8080 -> 10.0.0.2 port 8080tcp round-robin \
tag "RDR_1"map xl1 from 10.0.0.0 mask 255.255.255.0 to any \
->192.168.6.190/255.255.255.255 portmap tcp/udp 1025:65535 tag "MAP_1" But, when we \
use tags for map, nat is not running. Sincerely,
--N. Ersen SISECIhttp://www.enderunix.orghttp://www.acikkod.org


Pts, 2005-11-07 tarihinde 15:49 +0100 saatinde, Nicolas Saurbier yazdı:Hi,>> how \
shall a filter using the tag-option look like? Can't get ipf to load my ipf.conf.> \
Can any1 please provide an example?>> Cheerz>> NIC>>


[prev in list] [next in list] [prev in thread] [next in thread]