View Single Post
Old 17th December 2009
J65nko J65nko is offline
Administrator
 
Join Date: May 2008
Location: Budel - the Netherlands
Posts: 4,132
Default

You cannot move the re1 interface from 10.0.0.0/24 to 192.168.0.0/24 when re0 is already using 192.168.0.0/24. That doesn't work in the BSDs

Both interfaces, re0 and re1 have to be on different networks. If the D-link hands out a 192.168.0.0/24 address by DHCP to re0 then using a 10.0.0.0 network for re1is a good choice.

Re: throughput

I suspect the userland PPPoE you used was the culprit. Just try this setup first and check which download speed your laptop gets now.
We still have other possibilities to explore, but first check whether my recommendation works. Then we always can fall back on it, when the other alternatives like kernel PPPoE don't work out

RE: your pf

J65nko's first rule for a pf ruleset:

Start with block log all as the default policy. This will block both in and outgoing traffic.
In a second terminal as root do:
Code:
tcpdump -eni pflog0
Any blocked packets will show up in the tcpdump output, which is a great help in fixing your ruleset.
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump
Reply With Quote