I can't connect my DMZ webserver!

2003-03-30 Thread dreamer
hi! Follow is my network. rl0 xl0 ||-- DMZ(webserver, dns, ftp) router--| OBSD3.2 | ||-- client rl1 Problem is my webserver(win2000). This webserver have 3 sites. my pf.conf is

Re: I can't connect my DMZ webserver!

2003-03-30 Thread Daniel Hartmeier
On Sun, Mar 30, 2003 at 10:15:50PM +0900, dreamer wrote: If i telnet to my webserver, i can connecto to 80 port. ex)telnet www.xxx.xx.xx 80 GET / HTTP/1.0 = I can found page not found! The problem is not with pf or the redirection, but name based virtual hosting at the web server. If you

antispoof vs. ip aliases

2003-03-30 Thread Srebrenko Sehic
$ cat /etc/hostname.fxp0 inet 10.0.3.20 255.0.0.0 NONE inet alias 10.1.3.20 255.0.0.0 inet alias 10.2.3.20 255.0.0.0 inet alias 10.3.3.20 255.0.0.0 inet alias 10.4.3.20 255.0.0.0 inet alias 10.5.3.20 255.0.0.0 $ grep antispoof

Re: antispoof vs. ip aliases

2003-03-30 Thread Henning Brauer
On Sun, Mar 30, 2003 at 06:16:10PM +0200, Srebrenko Sehic wrote: $ cat /etc/hostname.fxp0 inet 10.0.3.20 255.0.0.0 NONE inet alias 10.1.3.20 255.0.0.0 inet alias 10.2.3.20 255.0.0.0 inet alias 10.3.3.20 255.0.0.0 inet alias

Re: antispoof vs. ip aliases

2003-03-30 Thread Srebrenko Sehic
On Sun, Mar 30, 2003 at 06:29:09PM +0200, Henning Brauer wrote: yes, that is known. I don't see a real world problem with this; the effect is zero as skip steps solve that nicely. Hurray for skip-steps then ;) However, imagine having tons of aliases; resulting filter rules might get a bit

Re: antispoof vs. ip aliases

2003-03-30 Thread Henning Brauer
On Sun, Mar 30, 2003 at 06:45:36PM +0200, Srebrenko Sehic wrote: On Sun, Mar 30, 2003 at 06:29:09PM +0200, Henning Brauer wrote: yes, that is known. I don't see a real world problem with this; the effect is zero as skip steps solve that nicely. Hurray for skip-steps then ;) However, imagine

NEWBIE: alias or vlan?

2003-03-30 Thread s c o t t
Hello, I have some questions about extending my home LAN. System: OpenBSD 3.2 +latest security patches applied. Dual Linksys TX100 Nics. One connected to DSL modem, one connected to LAN. PF configured to NAT my internal network. My nextdoor neighbor gave me a Cisco 350 wireless access point so