NEWBIE: alias or vlan?

2003-03-30 Thread s c o t t
Hello, I have some questions about extending my home LAN. System: OpenBSD 3.2 +latest security patches applied. Dual Linksys TX100 Nics. One connected to DSL modem, one connected to LAN. PF configured to NAT my internal network. My nextdoor neighbor gave me a Cisco 350 wireless access point so h

Re: antispoof vs. ip aliases

2003-03-30 Thread Henning Brauer
On Sun, Mar 30, 2003 at 06:45:36PM +0200, Srebrenko Sehic wrote: > On Sun, Mar 30, 2003 at 06:29:09PM +0200, Henning Brauer wrote: > > yes, that is known. I don't see a real world problem with this; the effect > > is zero as skip steps solve that nicely. > Hurray for skip-steps then ;) However, ima

Re: antispoof vs. ip aliases

2003-03-30 Thread Srebrenko Sehic
On Sun, Mar 30, 2003 at 06:29:09PM +0200, Henning Brauer wrote: > yes, that is known. I don't see a real world problem with this; the effect > is zero as skip steps solve that nicely. Hurray for skip-steps then ;) However, imagine having tons of aliases; resulting filter rules might get a bit ugl

Re: antispoof vs. ip aliases

2003-03-30 Thread Henning Brauer
On Sun, Mar 30, 2003 at 06:16:10PM +0200, Srebrenko Sehic wrote: > $ cat /etc/hostname.fxp0 > inet 10.0.3.20 255.0.0.0 NONE > inet alias 10.1.3.20 255.0.0.0 > inet alias 10.2.3.20 255.0.0.0 > inet alias 10.3.3.20 255.0.0.0 > inet alias 1

antispoof vs. ip aliases

2003-03-30 Thread Srebrenko Sehic
$ cat /etc/hostname.fxp0 inet 10.0.3.20 255.0.0.0 NONE inet alias 10.1.3.20 255.0.0.0 inet alias 10.2.3.20 255.0.0.0 inet alias 10.3.3.20 255.0.0.0 inet alias 10.4.3.20 255.0.0.0 inet alias 10.5.3.20 255.0.0.0 $ grep antispoof /etc/pf.c

Re: I can't connect my DMZ webserver!

2003-03-30 Thread Daniel Hartmeier
On Sun, Mar 30, 2003 at 10:15:50PM +0900, dreamer wrote: > If i telnet to my webserver, i can connecto to 80 port. > ex)telnet www.xxx.xx.xx 80 > GET / HTTP/1.0 > => I can found page not found! The problem is not with pf or the redirection, but name based virtual hosting at the web server. If you

I can't connect my DMZ webserver!

2003-03-30 Thread dreamer
hi! Follow is my network. rl0 xl0 ||-- DMZ(webserver, dns, ftp) router--| OBSD3.2 | ||-- client rl1 Problem is my webserver(win2000). This webserver have 3 sites. my pf.conf is fo