View Single Post
  #1   (View Single Post)  
Old 20th June 2014
rawshack rawshack is offline
New User
 
Join Date: Dec 2011
Posts: 3
Default pf - Internet seem slow

Hi forum,

I think this is my first post since I registered, I'm sorry for that. I almost always search the web first before posting. I already setup my home Openbsd NAT gateway. I can browse some sites with no problem but others seems getting timeout, it wont load the page, most of it are bank sites I cannot login and some ipad games. Not sure where to start investigating the problem. my setup is Openbsd 5.5 with two nics one attached to linksys wifi router which I disabled the wifi and make it bridge to my gateway (4) pppoe0 and other dhcp for local switch and in my switch I attached a wifi router in AP mode wich I disabled dhcp. If it is oky to name the bank or even the ipad games? below are my basic setup of my openbsd NAT.

Code:
 
set limit states 100000
set limit frags 5000
set block-policy return

set skip on lo

int_if= "re0"
ipad="192.168.1.200"
localnet=$int_if:network

table <thinkpad>  {192.168.1.214, 192.168.1.215}

block return    # block stateless traffic
pass            # establish keep-state

block return in on ! lo0 proto tcp to port 6000:6010
match out on egress inet from $localnet to any nat-to (egress:0) port 1024:65535

block in all
block in quick inet proto tcp from ! <thinkpad> to 192.168.1.1 port 22
pass out quick inet from $localnet to egress keep state
pass in inet proto icmp all icmp-type echoreq
pass in on re0
Reply With Quote