Re: [ot] xmpp server (was 'can't do suitable block in firewall')

2010-04-22 Thread Leonardo Carneiro - Veltrac
Lars Nooden wrote: On 04/19/2010 09:12 PM, Leonardo Carneiro - Veltrac wrote: ... the gateway features does not work 100% yet (at least in the server that i use) There are additional solutions. One is to work with the contacts to get them set up with XMPP clients, since the gateway

Re: can't do suitable block in firewall

2010-04-22 Thread Leonardo Carneiro - Veltrac
Shane Lazarus wrote: Heya Seems to me that you should probably allow traffic out to the $proxy via the $dmz_if at some point... For that matter, allow from the $proxy back in through the $dmz_if and out... Something like: # tables table msn_rdr persist const file /etc/pf.conf.d/msn-rdr

Re: can't do suitable block in firewall

2010-04-21 Thread Lars Nooden
On 04/19/2010 09:12 PM, Leonardo Carneiro - Veltrac wrote: ... the gateway features does not work 100% yet (at least in the server that i use) There are additional solutions. One is to work with the contacts to get them set up with XMPP clients, since the gateway function is there only

Re: can't do suitable block in firewall

2010-04-20 Thread Leonardo Carneiro - Veltrac
Shane Lazarus wrote: Heya On Tue, Apr 20, 2010 at 5:43 AM, Leonardo Carneiro - Veltrac lscarne...@veltrac.com.br mailto:lscarne...@veltrac.com.br wrote: My OpenBSD firewall has 4 interfaces: 2 lan, 1 wan and 1 dmz. What i'm trying to do is: 1. Allow some hosts to use

Re: can't do suitable block in firewall

2010-04-20 Thread Leonardo Carneiro - Veltrac
Hi Shane, Heya and others. I tried a new setup, using tables (look more eficient than using a thousan rules to each variable). But is still failing :( # tables table msn-rdr persist const file /etc/pf.conf.d/msn-rdr table msn-allow persist const file /etc/pf.conf.d/msn-allow #

Re: can't do suitable block in firewall

2010-04-20 Thread Leonardo Carneiro - Veltrac
Leonardo Carneiro - Veltrac wrote: Hi Shane, Heya and others. I tried a new setup, using tables (look more eficient than using a thousan rules to each variable). But is still failing :( # tables table msn-rdr persist const file /etc/pf.conf.d/msn-rdr table msn-allow persist

Re: can't do suitable block in firewall

2010-04-20 Thread Leonardo Carneiro - Veltrac
Leonardo Carneiro - Veltrac wrote: Leonardo Carneiro - Veltrac wrote: Hi Shane, Heya and others. I tried a new setup, using tables (look more eficient than using a thousan rules to each variable). But is still failing :( # tables table msn-rdr persist const file

Re: can't do suitable block in firewall

2010-04-20 Thread Stuart Henderson
On 2010-04-20, Leonardo Carneiro - Veltrac lscarne...@veltrac.com.br wrote: I'm well aware that nat occurs before the filtering, but what about redirections that does not involve nat? translation = NAT = Network Address Translation = nat and rdr and binat rules. Since translation

can't do suitable block in firewall

2010-04-19 Thread Leonardo Carneiro - Veltrac
Hi everyone. I'm trying to get some control of the MSN protocol in my network. My OpenBSD firewall has 4 interfaces: 2 lan, 1 wan and 1 dmz. What i'm trying to do is: 1. Allow some hosts to use MSN; 2. Redirect the MSN connections of some hosts from the LAN interfaces to a MSN proxy in the

Re: can't do suitable block in firewall

2010-04-19 Thread Lars Nooden
On 04/19/2010 08:43 PM, Leonardo Carneiro - Veltrac wrote: Hi everyone. I'm trying to get some control of the MSN protocol in my network. Upgrade to XMPP (jabber). http://xmpp.org/about/ If you need client software, pidgin is one option available in ports

Re: can't do suitable block in firewall

2010-04-19 Thread Leonardo Carneiro - Veltrac
Hi Lars and others. I already have a XMPP server on my network, and it replaces MSN in almost every task, but the gateway features does not work 100% yet (at least in the server that i use). For this, i still need MSN for some tasks, which is the point of the rules i'm trying to setup. Tks

Re: can't do suitable block in firewall

2010-04-19 Thread Lars Nooden
On 04/19/2010 09:12 PM, Leonardo Carneiro - Veltrac wrote: ... I already have a XMPP server on my network, and it replaces MSN in almost every task, but the gateway features does not work 100% yet (at least in the server that i use)... Which features and which server? /Lars

Re: can't do suitable block in firewall

2010-04-19 Thread Leonardo Carneiro - Veltrac
I use the Openfire xmpp server. But adding new contacts via a msn gateway is a real headache. I'm thinking about moving to ejabberd. Anyway, what i really need right now is to setup the selective redirect to the msn so some users go through the msn-proxy, some just go, and the rest just don't