"The Book of PF" exists, physical copies documented

2007-12-19 Thread Peter N. M. Hansteen
Dear friends,

I have just taken delivery of my box of /The Book of PF/[1] author's
copies, and I'm finding I'm a bit at a loss for words when it comes to
describing the feeling.  The thing exists.  And it feels great to
finally see the thing for real. (OK, I cheated a bit and had five
copies printed locally for OpenCON[2], but these are the real ones,
slightly different binding)

We didn't manage to release the book the same date as OpenBSD 4.2
(yes, that was the original plan), but the thing has been written,
printed and should be on its way to all those who preordred as well as
to better bookshops everywhere.  I'm not directly involved in
distribution and can not make any guarantees about when you'll get
yours (a slightly more experienced author has written an explanation
of that[3] - only this one was printed in Ann Arbor, Michigan, USA),
but even if it's late for the holidays I hope you'll enjoy your copy
and find the book useful.

Now of course the usual factors interfered even with the author
copies.  There is a thing about courier companies and 18th century
buildings.  Even faced with a relatively small one such as the one I
live in, DHL managed to make two attempts at delivery at the disused
entrance clearly marked 'deliveries at the other door please', so the
delivery finally happened at my office - also located in a 18th
century building, but at least one where the DHL people have been
before. But it finally arrived and life's good :)

One interesting factoid (fsvo) is that this happened within hours of
the twenty-five thousandth unique visitor (since EuroBSDCon 2006 that
is) hitting the book's predecessor, the online PF tutorial[4].

So happy hacking holidays everyone, 

[1] http://nostarch.com/pf.htm, also see 
http://www.bsdly.net/~peter/freshbooks.jpg
or (slightly faster) http://home.nuug.no/~peter/freshbooks.jpg
[2] http://www.undeadly.org/cgi?action=article&sid=20071207191612
- that's me completely obscured at the back to the right in 
the third picture (ok, I'm in a few others ;))
[3] http://marc.info/?l=openbsd-misc&m=105723966516199&w=2
[4] http://home.nuug.no/~peter/pf/
-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.datadok.no/ http://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.


Re: pf pocket reference book?

2005-04-10 Thread Kimi Ostro
On Apr 9, 2005 4:08 AM, Steven Schubiger <[EMAIL PROTECTED]> wrote:
> Hi
> 
> My question is, whether it would be of any interest to anyone,
> if basic/extended pf "syntax" would get published in an O'Reilly book,
> assigned to the category "pocket references", along with some specific
> pf.conf examples and documentation; and at last, some sample usages of
> pfctl et al.
> 
> Could we divert the "profit" over to the development of pf?
> I don't have a great financial urge to do it, since I earn already too
> much... err, enough money. :-)
> 
> Steven
> 

Pocket reference would be great, especially with diagrams, seeing how
packets flow from one interface to another; packet forwarding, packet
forwarding with NAT, packet forwarding with RDR, packet forwarding
with BINAT.

It could probably fill 8 pages, if I go by the size of my Regular
Expression Pocket Reference book.

thanks
-- 
spamassassinexception


Re: pf pocket reference book?

2005-04-10 Thread Steven P Schubiger
On  9 Apr, Allie D wrote:

: I think the idea is sound but instead of pf.conf examples maybe pfctl
: examples for basic and advanced scenarios.

They do correlate, but it seems, in my point of view, to propagate
confusion, if we'd intermix pf.conf with pfctl.

Steven


Re: pf pocket reference book?

2005-04-09 Thread Allie D
I think the idea is sound but instead of pf.conf examples maybe pfctl examples 
for basic and advanced scenarios.
Steven Schubiger([EMAIL PROTECTED])@Sat, Apr 09, 2005 at 05:08:11AM +0200:
> Hi
> 
> My question is, whether it would be of any interest to anyone,
> if basic/extended pf "syntax" would get published in an O'Reilly book, 
> assigned to the category "pocket references", along with some specific
> pf.conf examples and documentation; and at last, some sample usages of
> pfctl et al.
> 
> Could we divert the "profit" over to the development of pf?
> I don't have a great financial urge to do it, since I earn already too
> much... err, enough money. :-) 
> 
> Steven

-- 
Allie D.
Allnix, LLC.
http://www.allnix.net


pf pocket reference book?

2005-04-09 Thread Steven Schubiger
Hi

My question is, whether it would be of any interest to anyone,
if basic/extended pf "syntax" would get published in an O'Reilly book, 
assigned to the category "pocket references", along with some specific
pf.conf examples and documentation; and at last, some sample usages of
pfctl et al.

Could we divert the "profit" over to the development of pf?
I don't have a great financial urge to do it, since I earn already too
much... err, enough money. :-) 

Steven


[book announcement] Building Firewalls with OpenBSD and PF

2003-07-03 Thread Jacek Artymiak
devguide.net is taking orders for "Building Firewalls with OpenBSD and 
PF" by Jacek Artymiak

http://www.devguide.net/books/buildingfirewallswithopenbsdandpf/

Best regards,

Jacek Artymiak

PS. This message was sent with Daniel's permission.  Thank you, Daniel!



Re: Request for review: PF book section

2002-12-28 Thread Michael Lucas
Yes, it's rude to follow up on myself, but I'm being drowned by email:

See http://www.blackhelicopters.org/~mwlucas/openbsd.html if you want
to know about the book.  Please don't mail me with "when will it be
out" and suchforth, I'll just point you there.

==ml

On Sat, Dec 28, 2002 at 03:49:55PM -0500, Michael Lucas wrote:
> Hello,
> 
> As some on this list know, I'm writing a book on OpenBSD.
> 
> Most of the book I can test myself -- I can sit and build ports and do
> installs all day long, after all.  The sections on PF are a little
> more problematical, however, as I don't exactly have a wide variety of
> real networks to muck around with.
> 
> As such, I'm requesting additional reviewers for the PF chapters of
> the book.  At the moment it's written as one chapter, but I plan to
> break it up into 2-3 chapters as it's 22,000 words long.  It's not an
> exhaustive treatment of PF, but does cover what I see as the most
> popular parts.
> 
> I cannot post a public URL, as that would be "prior publication" and
> invalidate my contract with my publisher.  If you would be willing to
> do this review, however, please contact me and I will send you the
> chapter.
> 
> I would need any completed feedback by 1-15-03.
> 
> Regards,
> Michael
> 
> -- 
> Michael Lucas [EMAIL PROTECTED], [EMAIL PROTECTED]
> http://www.oreillynet.com/pub/q/Big_Scary_Daemons
> 
>Absolute BSD:   http://www.AbsoluteBSD.com/

-- 
Michael Lucas   [EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.oreillynet.com/pub/q/Big_Scary_Daemons

   Absolute BSD:   http://www.AbsoluteBSD.com/




Request for review: PF book section

2002-12-28 Thread Michael Lucas
Hello,

As some on this list know, I'm writing a book on OpenBSD.

Most of the book I can test myself -- I can sit and build ports and do
installs all day long, after all.  The sections on PF are a little
more problematical, however, as I don't exactly have a wide variety of
real networks to muck around with.

As such, I'm requesting additional reviewers for the PF chapters of
the book.  At the moment it's written as one chapter, but I plan to
break it up into 2-3 chapters as it's 22,000 words long.  It's not an
exhaustive treatment of PF, but does cover what I see as the most
popular parts.

I cannot post a public URL, as that would be "prior publication" and
invalidate my contract with my publisher.  If you would be willing to
do this review, however, please contact me and I will send you the
chapter.

I would need any completed feedback by 1-15-03.

Regards,
Michael

-- 
Michael Lucas   [EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.oreillynet.com/pub/q/Big_Scary_Daemons

   Absolute BSD:   http://www.AbsoluteBSD.com/




Re: Book.

2002-10-18 Thread Henning Brauer
On Fri, Oct 18, 2002 at 08:14:25AM -0400, Michael Lucas wrote:
> On Fri, Oct 18, 2002 at 01:56:30PM +0200, Henning Brauer wrote:
> > On Fri, Oct 18, 2002 at 07:43:56AM -0400, Michael Lucas wrote:
> > > So, Dan, are you planning to rework the whole pf tool suite for 3.3,
> > > as you did between 3.1 and 3.2?  That'll tell me how many pages I can
> > > spend on it... if the user-visible interface is still flopping around,
> > > I have to trim the page count I'm planning for it.
> > There's a big thing coming I'm currently coding on, though that's an
> > extension. I think we will add quite a few extensions, but the existing
> > stuff should be fairly stable - but you never know for sure. perhaps we have
> > THE idea how everything is better...
> 
> [replying to both Henning and Dan]
> 
> Thanks for the info.
> 
> Extensions are cool, and if you guys have an inspiration on how to do
> everything perfectly and cause packet-filtering world peace, certainly
> do it.  :-)

yes, we invent world peace, is that news? ;-)

> (/me looks at outline, sees chapter on altq, and kills it.  Ah, well,
> maybe that'll keep *this* book under 600 pages...)

or just be patient for a few weeks and re-add or merge that chapter ;-)


-- 
Henning Brauer, BS Web Services, http://bsws.de
[EMAIL PROTECTED] - [EMAIL PROTECTED]
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)



msg00254/pgp0.pgp
Description: PGP signature


Re: Book.

2002-10-18 Thread Michael Lucas
On Fri, Oct 18, 2002 at 01:56:30PM +0200, Henning Brauer wrote:
> On Fri, Oct 18, 2002 at 07:43:56AM -0400, Michael Lucas wrote:
> > So, Dan, are you planning to rework the whole pf tool suite for 3.3,
> > as you did between 3.1 and 3.2?  That'll tell me how many pages I can
> > spend on it... if the user-visible interface is still flopping around,
> > I have to trim the page count I'm planning for it.
> 
> There's a big thing coming I'm currently coding on, though that's an
> extension. I think we will add quite a few extensions, but the existing
> stuff should be fairly stable - but you never know for sure. perhaps we have
> THE idea how everything is better...

[replying to both Henning and Dan]

Thanks for the info.

Extensions are cool, and if you guys have an inspiration on how to do
everything perfectly and cause packet-filtering world peace, certainly
do it.  :-)

(/me looks at outline, sees chapter on altq, and kills it.  Ah, well,
maybe that'll keep *this* book under 600 pages...)

-- 
Michael Lucas   [EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.oreillynet.com/pub/q/Big_Scary_Daemons

   Absolute BSD:   http://www.AbsoluteBSD.com/




Re: Book.

2002-10-18 Thread Daniel Hartmeier
On Fri, Oct 18, 2002 at 01:56:30PM +0200, Henning Brauer wrote:

> There's a big thing coming I'm currently coding on, though that's an
> extension. I think we will add quite a few extensions, but the existing
> stuff should be fairly stable - but you never know for sure. perhaps we have
> THE idea how everything is better...

Let's put it this way: I wouldn't plan too many pages on altq
configuration :)

Seriously, there are no plans to change significant parts in pf
configuration around. And any future plans will be compared to the
amount of work caused to update documentation.

Daniel




Re: Book.

2002-10-18 Thread Henning Brauer
On Fri, Oct 18, 2002 at 07:43:56AM -0400, Michael Lucas wrote:
> So, Dan, are you planning to rework the whole pf tool suite for 3.3,
> as you did between 3.1 and 3.2?  That'll tell me how many pages I can
> spend on it... if the user-visible interface is still flopping around,
> I have to trim the page count I'm planning for it.

There's a big thing coming I'm currently coding on, though that's an
extension. I think we will add quite a few extensions, but the existing
stuff should be fairly stable - but you never know for sure. perhaps we have
THE idea how everything is better...




Re: Book.

2002-10-18 Thread Michael Lucas
On Fri, Oct 18, 2002 at 09:38:56AM +0200, Daniel Hartmeier wrote:
> On Thu, Oct 17, 2002 at 05:34:19PM -0500, Juan Antonio Torres Zúñiga wrote:
> 
> > This mail it's for Daniel, Do you think write a book about PF? 
> 
> A whole book is a lot of work :) There's probably not a large enough
> market for a traditionally published book (there aren't many paper books
> about OpenBSD in general, even) and for a non-commercial publication,
> time is the limit, as I can't afford that many weeks worth of unpaid
> work.

There's not enough in PF to make a whole book.  However, I'm hoping to
include a couple chapters on it in my OpenBSD book.  Worst case, I
plan to put in recipies on how to pass traffic of various protocols
across various "styles" of pf firewall.

So, Dan, are you planning to rework the whole pf tool suite for 3.3,
as you did between 3.1 and 3.2?  That'll tell me how many pages I can
spend on it... if the user-visible interface is still flopping around,
I have to trim the page count I'm planning for it.

==ml

-- 
Michael Lucas   [EMAIL PROTECTED], [EMAIL PROTECTED]
http://www.oreillynet.com/pub/q/Big_Scary_Daemons

   Absolute BSD:   http://www.AbsoluteBSD.com/




Re: Book.

2002-10-18 Thread Daniel Hartmeier
On Fri, Oct 18, 2002 at 10:03:16AM -0700, Sacha Ligthert wrote:

> PS: Daniel, will you be at BSDconEurope?

Yes, I just registered. Today's the last day of early registration, so
anyone still undecided, make up your minds. And I'm looking forward to
meeting you there :)

  http://2002.eurobsdcon.org/

Daniel




Re: Book.

2002-10-18 Thread Sacha Ligthert
On Fri, 18 Oct 2002, Daniel Hartmeier wrote:
> A whole book is a lot of work :) There's probably not a large enough
> market for a traditionally published book (there aren't many paper books
> about OpenBSD in general, even) and for a non-commercial publication,
> time is the limit, as I can't afford that many weeks worth of unpaid
> work.
Writing the book would probarbly stall development.
If it wouldn't stall development newfeatures won't end up in the book.

> Let's put it this way: I can always work on improving the man
> pages and FAQ in smaller chunks,
I think thats sufficient, but I think the initial post was asking for a
step-to-step guide in Building PF firewalling rules.

Sacha

PS: Daniel, will you be at BSDconEurope?

--
  " Bebe mi semen, bebelo hasta el fin "
Hocico - Sucios Pensamientos




Re: Book.

2002-10-18 Thread Daniel Hartmeier
On Thu, Oct 17, 2002 at 05:34:19PM -0500, Juan Antonio Torres Zúñiga wrote:

> This mail it's for Daniel, Do you think write a book about PF? 

A whole book is a lot of work :) There's probably not a large enough
market for a traditionally published book (there aren't many paper books
about OpenBSD in general, even) and for a non-commercial publication,
time is the limit, as I can't afford that many weeks worth of unpaid
work. Also, there's the question of what topics to include. For people
familiar with TCP/IP[1] and BSD internals[2], pf documentation could be
more technical and concise, while making the basics of TCP/IP and BSD
accessable to readers without these preconditions would be more of a
challenge. Let's put it this way: I can always work on improving the man
pages and FAQ in smaller chunks, and if O'Reilly or AW comes knocking on
the door, I'll seriously think about it, but I don't hold my breath :)

Daniel

[1] TCP/IP Illustrated, Volume 1, The Protocols
W. Richard Stevens, Addison-Wesley, ISBN 0201633469
[2] The Design and Implementation of the 4.4BSD Operating System
McKusick, Bostic, Karels & Quarterman, Addison-Wesley,
ISBN 0201549794




Book.

2002-10-17 Thread Juan Antonio Torres Zúñiga
Hello.

I´m a new OpenBSD user and I very impresed with it.

This mail it´s for Daniel, Do you think write a book about PF? 

Juan Antonio Torres Zúñiga