pf rule?

Hello I have a sshd/ftpd/httpd server box, 4.9 stable; and I want to log all blocked packets, and send them to /var/log/pfblocklog to be read with tcpdump. What and where should be the rule? # $OpenBSD: pf.conf,v 1.49 2009/09/17 06:39:03 jmc Exp $ # set skip on lo ### Agregadas por mi: (a

Re: pf rule?

Cheers, >> >> Wesley. >> >> On Wed, 20 Jul 2011 01:09:09 -0700, fqui nonez >> wrote: >>> Hello >>> >>> I have a sshd/ftpd/httpd server box, 4.9 stable; and I want to log all >>> blocked packets, and send them to /var/log/pfblocklog to b

Re: pf rule?

2011/7/20 fqui nonez : > 2011/7/20 Andres Perera : >> On Wed, Jul 20, 2011 at 8:49 AM, fqui nonez wrote: > >>>>> On Wed, 20 Jul 2011 01:09:09 -0700, fqui nonez >>>>> wrote: >>>>>> Hello >>>>>> >>>>>&g

ftpd server

Hello I have a ftpd server box, OBSD-4.9, and pflog shows: Aug 29 10:11:03.520900 rule 3/(match) pass in on rl0: 190.87.195.241.2732 > 192.168.5.2.21: S 2008995709:2008995709(0) win 65535 Aug 29 10:15:52.825409 rule 3/(match) pass in on rl0: 190.87.195.241.3190 > 192.168.5.2.21: S 409025537:4090

Re: ftpd server

2011/9/1 Bryan Irvine : > On Tue, Aug 30, 2011 at 11:38 PM, fqui nonez wrote: >> Hello >> >> I have a ftpd server box, OBSD-4.9, and pflog shows: >> >> Aug 29 10:11:03.520900 rule 3/(match) pass in on rl0: >> 190.87.195.241.2732 > 192.168.5.2.21: S 200899

Lenovo ThinkPad Edge 14 i330

Hello I have a Compaq Presario 3019US working correctly with OBSD-4.7, and i have recived a ThinkPad Edge 14 i330 (4 processors) as a present; it has Windows 7. The parttions do not finish at the end of cilinders by defaults. My question is if you recomend keeping Windows 7 beside to OBSD working

Re: Donations

2010/12/5 Adam M. Dutko : >> > Are you planning on having the OpenBSD development team perform some >> > sort of illegal activity soon? >> > >> > If not, you shouldn't be worried about Paypal. >> > > You're discussing intent. Intent is a tricky thing that in the past lawyers > had to jump through

Re: Donations

2010/12/5 L. V. Lammert : > On Sun, 5 Dec 2010, Dmitrij D. Czarkoff wrote: > >> > On Sun, 5 Dec 2010, Randal L. Schwartz wrote: >> > I agree totally that there are a lot of idiots running parts of the US >> > system, but at least they ARE predictable. >> >> Being predictable is just not enough. Har

Re: Donations

2010/12/5 Theo de Raadt : >> Ever head of Don Quixote? THe moral of the storey - pick the battles you >> have a chance of winning and avoid the rest. > > Such an American viewpoint. Well, revising old documents, the word America was not used by the Government of US; but after I and II world war;

Re: Donations

2010/12/7 ropers : >> 2010/12/5 Theo de Raadt : >>> Such an American viewpoint. > > On 7 December 2010 08:02, fqui nonez wrote: >> Well, revising old documents, the word America was not used by the >> Government of US; but after I and II world war; when Euro

Re: is SHA256 file used or not ?

2011/2/8 Mihai Popescu : > Hi Henning, > > It looks like you are in a bad mood. Please read my entire post and > don't cut and paste out of context. > Man, if you do not want to answer, please don't. You have spent a lot > of time bitching and no time to give a damn clear answer. > It's not my prob

ftpd intrusion?

Hello I have a ftpd server OBSD-4.9, and i found this: # last ftp ftp 62.234.84.203.hostway.com.au Thu May 12 12:40 - 12:40 (00:00) <--(it is not me) Could it means that i have an intrusion in the server? Where should i see? and what should i care, please? # ls -laR /home/f

Re: ftpd intrusion?

2011/5/12 fqui nonez : > Hello > > I have a ftpd server OBSD-4.9, and i found this: > > # last > ftp ftp 62.234.84.203.hostway.com.au Thu May 12 12:40 - > 12:40 (00:00) <--(it is not me) > > Could it means that i have an intrusion in the server? &g

authlog messages

hello i founded messages on authlog of a OBSD-4.6, i have not seen it before, and i was not able to find information at archives and google. Mar 9 02:20:25 OpenBSD kdeinit: gethostby*.getanswer: asked for "srx.main.ebayrtm.com IN ", got type "SOA" Mar 9 02:47:32 OpenBSD kdeinit: gethostby*.

Re: authlog messages

2010/3/13 fqui nonez : > hello > > i founded messages on authlog of a OBSD-4.6, i have not seen it > before, and i was not able to find information at archives and google. > > Mar 9 02:20:25 OpenBSD kdeinit: gethostby*.getanswer: asked for > "srx.main.ebayrtm.com IN

Re: authlog messages

2010/3/14 Adriaan : > It is a failing name lookup. Just like the following done with dig > from the command line: > > Adriaan ok, thank you very much.