Re: How to tell if IPF is running?

2006-01-24 Thread jdow
Ack, it looks like it would limp through doing the simple job wanted. The good news is that I can make it work. The bad news is that it's apparently so much simpler with the Linux iptables facilities. I can see I have a bunch of reading to do before setting up to replace the firewall machine. Tha

Re: How to tell if IPF is running?

2006-01-24 Thread Peter N. M. Hansteen
"jdow" <[EMAIL PROTECTED]> writes: > Which tool would be able to do this sort of thing best and how might it > have been done. PF has most of the bits you need built in, see eg http://www.bgnett.no/~peter/pf/en/bruteforce.html (part of a PF tutorial). For weeding out old table entries, you mig

Re: How to tell if IPF is running?

2006-01-19 Thread jdow
From: "Erik Norgaard" <[EMAIL PROTECTED]> Nce writeup. I do have one question at the bottom. I used IPF on FBSD until there was some bug in IPF for 5.x some version that forced me to switch after an upgrade. The bug has been fixed since but I have found no reason to go back. There are two th

Re: How to tell if IPF is running?

2006-01-19 Thread Peter
--- Erik Norgaard <[EMAIL PROTECTED]> wrote: > Peter wrote: > > --- Erik Norgaard <[EMAIL PROTECTED]> wrote: > > > >> Gable Barber wrote: > >>> On 1/18/06, Peter <[EMAIL PROTECTED]> wrote: > Switch over to pf. > > >>> Why do you suggest PF over IPF? > >>> > >>> Hope I am not starting a

Re: How to tell if IPF is running?

2006-01-19 Thread Erik Norgaard
Peter wrote: --- Erik Norgaard <[EMAIL PROTECTED]> wrote: Gable Barber wrote: On 1/18/06, Peter <[EMAIL PROTECTED]> wrote: Switch over to pf. Why do you suggest PF over IPF? Hope I am not starting a war here.. but I am genuinely interested in the opinions. I used IPF on FBSD until there

Re: How to tell if IPF is running?

2006-01-18 Thread Peter
--- Erik Norgaard <[EMAIL PROTECTED]> wrote: > Gable Barber wrote: > > On 1/18/06, Peter <[EMAIL PROTECTED]> wrote: > >> > >> Switch over to pf. > >> > > Why do you suggest PF over IPF? > > > > Hope I am not starting a war here.. but I am genuinely interested in > the > > opinions. > > I used I

Re: How to tell if IPF is running?

2006-01-18 Thread Gable Barber
On 1/18/06, Erik Norgaard <[EMAIL PROTECTED]> wrote: > > Gable Barber wrote: > > On 1/18/06, Peter <[EMAIL PROTECTED]> wrote: > >> > >> Switch over to pf. > >> > > Why do you suggest PF over IPF? > > > > Hope I am not starting a war here.. but I am genuinely interested in the > > opinions. > > I us

Re: How to tell if IPF is running?

2006-01-18 Thread Erik Norgaard
Gable Barber wrote: On 1/18/06, Peter <[EMAIL PROTECTED]> wrote: Switch over to pf. Why do you suggest PF over IPF? Hope I am not starting a war here.. but I am genuinely interested in the opinions. I used IPF on FBSD until there was some bug in IPF for 5.x some version that forced me to

Re: How to tell if IPF is running?

2006-01-18 Thread Peter
--- Gable Barber <[EMAIL PROTECTED]> wrote: > On 1/18/06, Peter <[EMAIL PROTECTED]> wrote: > > > > > > Switch over to pf. > > > > > > > > > Why do you suggest PF over IPF? All I can say is that I remember using ipf when I was on OpenBSD 2.9. At 3.0 it went to pf and ever since then I've been ex

Re: How to tell if IPF is running?

2006-01-18 Thread Gable Barber
On 1/18/06, Peter <[EMAIL PROTECTED]> wrote: > > > Switch over to pf. > > > > Why do you suggest PF over IPF? Hope I am not starting a war here.. but I am genuinely interested in the opinions. Gable ___ freebsd-questions@freebsd.org mailing list http://

Re: How to tell if IPF is running?

2006-01-18 Thread Gable Barber
> > > > Yes, incorrectly, if you have any rules with the log key word, then you > can se if you get any entries in your log files. I would have default > rules first in my rule set: > >block log in all >block log out all > > And then pass what I positively know is good. > > Cheers, Erik >

Re: How to tell if IPF is running?

2006-01-18 Thread Peter
--- Gable Barber <[EMAIL PROTECTED]> wrote: > Howdy List... > I am trying to figure out if ipf is running for certain. FreeBSD > 6.0-RELEASE > . > > > > I added the following to /etc/rc.conf : > > ipfilter_enable="YES" > ipmon_enable="YES" > ipmon_flags="-Dsvn" > ipnat_enable="YES" > ipfs_ena

Re: How to tell if IPF is running?

2006-01-18 Thread Erik Norgaard
Gable Barber wrote: Howdy List... I am trying to figure out if ipf is running for certain. FreeBSD 6.0-RELEASE . I added the following to /etc/rc.conf : ipfilter_enable="YES" ipmon_enable="YES" ipmon_flags="-Dsvn" ipnat_enable="YES" ipfs_enable="YES" I added a rule file /etc/ipf.conf , and f

Re: How to tell if IPF is running?

2006-01-18 Thread chris
ipf runs as a kernel module or compiled into the kernel you will never see it running as a normal program you will know it is running by testing your firewall to make sure it does what it was meant to do > Howdy List... > I am trying to figure out if ipf is running for certain. FreeBSD > 6.0-RELEA

How to tell if IPF is running?

2006-01-18 Thread Gable Barber
Howdy List... I am trying to figure out if ipf is running for certain. FreeBSD 6.0-RELEASE . I added the following to /etc/rc.conf : ipfilter_enable="YES" ipmon_enable="YES" ipmon_flags="-Dsvn" ipnat_enable="YES" ipfs_enable="YES" I added a rule file /etc/ipf.conf , and flushed/reloaded ipf wi