syslog shows still open?

2003-12-30 Thread greg
Don't know what I am missing but running scans of a 3.4 stable box (updated 12/21) shows udp port 514 open. I block by default, added these two rules to see if I could make it go away. Pretty standard box with 1 internet connection, a DMZ and a lan interface. The Internet interface has ip aliase

Impossible ftp-proxy problem

2003-12-30 Thread Ghazan Haider
I am running OpenBSD 3.4 as firewall on one machine, and have tried for weeks to get ftp-proxy to run. Ive tried evey example in the howtos. I can use the ftp sites from the OpenBSD itself, but not from an internal computer. I dont get error messages except a rare "pf nat lookup failed 127.0.0.1:4

Re: Example pf configs?

2003-12-30 Thread Greg Hennessy
On 30 Dec 2003 04:55:55 -0800, [EMAIL PROTECTED] (stan) wrote: >I've treid starting with the default /etc/of.conf, and >/usr/share/pf/faq-example1 without much success. Can anyone point me to >some good examples? https://solarflux.org/pf/ > >Is htere any way to convert my old ipf.bat rules to

Re: PF Logging FAQ clarification

2003-12-30 Thread Jim Mays
This is interesting because I've wondered about this some. I have been on broadband for many years. When I started, I only had one computer. Back then my local cable company was called TCI and they forced me to name my computer something really strange. If the computer was not named correctly, I

Re: Example pf configs?

2003-12-30 Thread Per-Olov Sjöholm
Hi ! Here is an old pf.conf I found that u can use as an example or template (it will work in OpenBSD 3.4)... Hope it will give you some hints. By the way... The examples in OpenBSD 3.4 is not bad and should be easy to use as a template. Note that some rows are market out and not used. The co

RE: PF Logging FAQ clarification

2003-12-30 Thread Small, Jim
Jim, I think the theory is that if you have/get cable in you house/apartment/condo/etc... that you can't just hook up a broadband splitter, plugin your computer, and surf the net. Instead, you must call your cable provider and have them "activate" your connection (something to do with splitter???

Re: Example pf configs?

2003-12-30 Thread Max Laier
On Tuesday 30 December 2003 14:44, Oskar Eyb wrote: > > Can anyone point me to some good examples? > > Try the nice PF user guide: http://openbsd.org/faq/pf/index.html https://solarflux.org/pf/ - has a big (but undocumented) real-life example section. -- Best regards,

Re: Example pf configs?

2003-12-30 Thread Oskar Eyb
> Can anyone point me to some good examples? Try the nice PF user guide: http://openbsd.org/faq/pf/index.html -- Oskar

Re: FW: pf rules advice

2003-12-30 Thread Greg Hennessy
On 29 Dec 2003 20:57:34 -0800, [EMAIL PROTECTED] (stan) wrote: > >I'm seting up a OpenBSD 3.4 machine to replace an older OpenBSD machine as my >firewall for the home LAN. I'm conected via a cablemodem which seesm to be >quite a hostile environment these days. So I'd like some advice on my pf >rul

Re: PF Logging FAQ clarification

2003-12-30 Thread Jim Mays
I am on broadband, and my IP is on 24.x.x.x currently. When do I have a 10.x.x.x address and when do they switch me to the 24.x.x.x? Why do they do this? I do block all such traffic with a rule that is: NoRouteIPs "{127.0.0.0/8, 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8}" block in log quick on

Example pf configs?

2003-12-30 Thread stan
I'm still trying to configure a working pf configuration, without success. I'm building a 3.4 OpenBSD machine to replace an old OpenBSD machine that used ipf, and seperate nat. I have a meium sized home network that connects via a cablemode. The cablenmode apppears (based upon existin laogfiles) t

RE: PF Logging FAQ clarification

2003-12-30 Thread Small, Jim
Jim, If you have a cable broadband connection, this is probably nothing to be concerned about. Many cable broadband providers, including mine, initially give you a private IP address (10.x.x.x) via DHCP, and then later switch you to a public IP (typically 24.x.x.x if you are in North America). I