Article View: pl.comp.os.bsd
Article #21874Re: altq co zrobile zle - dlugie
From: Tomasz Sowa
Date: Thu, 28 Oct 2010 22:44
Date: Thu, 28 Oct 2010 22:44
33 lines
1860 bytes
1860 bytes
Dnia Tue, 26 Oct 2010 18:03:04 +0200, KZ napisał(a):
> ip_gate = "9.9.9.9"
> ext_if = "xl0"
> flag1 =""
> flag = "flags S/SA keep state (source-track global, max-src-states 100, if-bound)"
wyrzuć: source-track global, max-src-states 100
[...]
> set loginterface $ext_if
> set loginterface $int_if
>
> set optimization aggressive
> set block-policy drop
> set require-order yes
> set limit frags 300000
> scrub in all fragment reassemble
> scrub out all fragment reassemble
>
> #antispoof for $int_if
> #antispoof for $ext_if
z powyższego zostaw tylko set block-policy drop
[...]
> to dziala ale strasznie muli
reszta wygląda w miare dobrze, chociaż można te regułki czytelniej zapisać
--
Tomek
http://www.ttmath.org
Technical Details
Message-ID:
<1tpqhxn6u3v5b.dlg@torpi.slimaczek.pl>Path:
mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!news.gazeta.pl!newsfeed.pionier.net.pl!news.dialog.net.pl!not-for-mailReferences:
<19xf4jfw8bz2d.1mbnznwx0bxq$.dlg@40tude.net> <5he47ed4px54.dlg@torpi.slimaczek.pl> <7kp5l9qfmenc.dlg@torpi.slimaczek.pl> <1fjv94ckmvk9k$.faj8ujhlivdp$.dlg@40tude.net> <2ot26z1i6bl8$.dlg@torpi.slimaczek.pl> <1jws37gzmzwgz$.c21i56u4tydj$.dlg@40tude.net>Show Full Headers
Complete Article Headers
Path: mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!news.gazeta.pl!newsfeed.pionier.net.pl!news.dialog.net.pl!not-for-mail From: Tomasz Sowa <ts@ttmath.NOSPAM.org> Newsgroups: pl.comp.os.bsd Subject: Re: altq co zrobile zle - dlugie Date: Fri, 29 Oct 2010 00:44:41 +0200 Organization: Dialog Net Lines: 33 Message-ID: <1tpqhxn6u3v5b.dlg@torpi.slimaczek.pl> References: <19xf4jfw8bz2d.1mbnznwx0bxq$.dlg@40tude.net> <5he47ed4px54.dlg@torpi.slimaczek.pl> <7kp5l9qfmenc.dlg@torpi.slimaczek.pl> <1fjv94ckmvk9k$.faj8ujhlivdp$.dlg@40tude.net> <2ot26z1i6bl8$.dlg@torpi.slimaczek.pl> <1jws37gzmzwgz$.c21i56u4tydj$.dlg@40tude.net> Reply-To: ts@ttmath.NOSPAM.org NNTP-Posting-Host: dynamic-81-168-143-46.ssp.dialog.net.pl Mime-Version: 1.0 X-Trace: news.dialog.net.pl 1288305887 21694 81.168.143.46 (28 Oct 2010 22:44:47 GMT) X-Complaints-To: abuse@dialog.net.pl NNTP-Posting-Date: Thu, 28 Oct 2010 22:44:47 +0000 (UTC) User-Agent: 40tude_Dialog/2.0.15.1pl Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit