Two ISP

2003-02-07 Thread jorge
Hi:
is possibility puts two pf box in two phisycal link and balanced load ?

ISP 1 ---Box 1-|
|-LAN
ISP 2Box 2-|


Thanks...




Compendium of pf rules (Was: RFC#1 - chmod pf.conf )

2003-02-07 Thread Adam Shephard
  i have a good idea, how about an obfuscated
 pf.conf contest?
 
 I have a better idea. How about an unobfuscated
 pf.conf contest.
 Clearest ruleset style wins. I'll buy the beer.

Sorry about the double post. Damn enter key!

SecurityFocus did something on their mailing list a
while back that was really helpful.

They asked all of their users who were using IPTABLES
to send in their list of rules with clear comments
explaining each rules. Once it looked like everything
was received, they sent out a zip files containing all
the files.

Any interest in something like that for pf?

__
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com




Re: Compendium of pf rules (Was: RFC#1 - chmod pf.conf )

2003-02-07 Thread Chris H
thats a great idea.

- Original Message - 
From: Adam Shephard [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, February 07, 2003 9:51 AM
Subject: Compendium of pf rules (Was: RFC#1 - chmod pf.conf )


   i have a good idea, how about an obfuscated
  pf.conf contest?
  
  I have a better idea. How about an unobfuscated
  pf.conf contest.
  Clearest ruleset style wins. I'll buy the beer.
 
 Sorry about the double post. Damn enter key!
 
 SecurityFocus did something on their mailing list a
 while back that was really helpful.
 
 They asked all of their users who were using IPTABLES
 to send in their list of rules with clear comments
 explaining each rules. Once it looked like everything
 was received, they sent out a zip files containing all
 the files.
 
 Any interest in something like that for pf?
 
 __
 Do you Yahoo!?
 Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
 http://mailplus.yahoo.com
 
 
 
 




Will this work with PF?

2003-02-07 Thread Amir Seyavash Mesry
http://www.research.att.com/~smb/papers/fnat.pdf

Can they do this with pf?

Amir Seyavash Mesry 
[EMAIL PROTECTED] 
LSI Logic Corporation 
http://www.lsilogic.com/ 
Raid Support Test Technician 
6145-D Northbelt Parkway 
Norcross, GA 30071 
678-728-1211 

NOTICE: This communication may contain privileged or other confidential
information. If you are not the intended recipient, or believe that you have
received this communication in error, please do not print, copy, retransmit,
disseminate, or otherwise use the information. Also, please indicate to the
sender that you have received this communication in error, and delete the
copy you received. Thank you.






Re: Will this work with PF?

2003-02-07 Thread Laurent Cheylus
Amir Seyavash Mesry [EMAIL PROTECTED] wrote :

 http://www.research.att.com/~smb/papers/fnat.pdf
 
 Can they do this with pf?

Please consult the mailing-list before sending an issue already discussed a few
days ago.

See http://marc.theaimsgroup.com/?t=10445241411r=1w=2 about PF and count
NATed hosts.

Foxy.

-- 
Laurent Cheylus [EMAIL PROTECTED] OpenPGP ID 0x5B766EC2




Re: Compendium of pf rules (Was: RFC#1 - chmod pf.conf )

2003-02-07 Thread Adam Shephard
--- Daniel Hartmeier [EMAIL PROTECTED] wrote:
 So, I'm willing to contribute, but I'm not offering
 to review two dozen
 uncommented production rulesets all by myself :)
 
 Daniel

I'd be more than happy to help review the rulesets but
I'm pretty new to pf. Been using it about a month.
Guess that's why I like the idea of seeing everybody's
rulesets. :-)

If anybody else is up for it though, I'd be glad to
help.

Adam

__
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com




Re: Compendium of pf rules (Was: RFC#1 - chmod pf.conf )

2003-02-07 Thread Jason Houx
Daniel  pf list

I like this idea { wiki } that is.  Using the list would be fine 
but the wiki is better.  I have been using pf since 3.0 and have a pretty 
solid feel for --current and --stable rule-sets and think this would be a 
good chance to get some community rule-sets ready for examples, seeing how 
a lot has been added to pf since 3.2 props to you pf developers.

just my .02ยข on this subject.

Jason Houx


On Fri, 7 Feb 2003, Daniel Hartmeier wrote:

 On Fri, Feb 07, 2003 at 09:51:48AM -0800, Adam Shephard wrote:
 
  They asked all of their users who were using IPTABLES
  to send in their list of rules with clear comments
  explaining each rules. Once it looked like everything
  was received, they sent out a zip files containing all
  the files.
  
  Any interest in something like that for pf?
 
 I can't speak for the subscribers, you'd have to comment on whether
 you'd like to do this on the mailing list itself.
 
 Maybe a Wiki like http://www.obsd.pronym.org/wiki/ would be simpler,
 people could just put their rulesets on a page and others could edit
 them and add comments inline.
 
 We tend to get a fair amount of requests of the type here's my ruleset,
 please comment on it. If everyone is willing to contribute their
 comments (and not just post their rulesets, waiting for comments, not
 reading other poster's rules), I guess it would be useful, and we might
 collect the most interesting rulesets for the documentation.
 
 So, I'm willing to contribute, but I'm not offering to review two dozen
 uncommented production rulesets all by myself :)
 
 Daniel
 




PF feature

2003-02-07 Thread jorge
Hi:
i need the feature and power the PF, but i need also FreeVRRP...

is possible install PF in FreeBSD ?

(i am install Freevrrp in openbsd 3.1 and 3.2, compiles ok, but a the
run command /usr/local/sbin/freevrrpd say:

freevrrp: cannot set multicast TTL [IP_MULTICAST_TTL] ...
 )

Thanks.
(sorry if is considered OT)