Re: pf macro syntax problems

2004-06-30 Thread Russell Sutherland
* Francis A. Vidal ([EMAIL PROTECTED]) [29 Jun 2004 21:47]: I think you're missing a comma in between $host1 and $host2. It should be: all_hosts = { $host1, $host2 } The commas do not seem to matter. The issue is that when the variables $host1 and $host2 are of the format:

Re: pf macro syntax problems

2004-06-30 Thread j knight
Francis A. Vidal wrote: I think you're missing a comma in between $host1 and $host2. It should be: all_hosts = { $host1, $host2 } This hasn't been true for some time. The comma is optional. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Russell

Re: slightly OT - software for testing FW rule sets.

2004-06-30 Thread Chris Todd
There's a commercial product called Firewall Informer, made by Blade Software (http://www.blade-software.com/), and several open source scripts, one of which is firewall tester (http://ftester.sourceforge.net/). HI Folks, Yesterday I changed the software that generates to rule sets for

Re: slightly OT - software for testing FW rule sets.

2004-06-30 Thread Sean
If you just need packet generation, take a look at nemesis and hping2. Sean Russell Fulton wrote: HI Folks, Yesterday I changed the software that generates to rule sets for our perimeter firewall, and yew, you guessed it, there was one minor problem. The real problem was that

Synproxy broken on latest snapshots?

2004-06-30 Thread Kevin
Unable to get synproxy working using snapshot dated June 28, previously was using one from about 2 weeks ago which also did not work. TCP handshake is never completed, state remains PROXY:DST until the client times out. Modulate or keep state works as normal. Am I missing something? I've used

Re: pfctl ruleset optimizer. testers needed

2004-06-30 Thread Mike Frantzen
The second version of the diff has been put up. With feedback from dhartmei@, cedric@ and [EMAIL PROTECTED] Plus a few bugs fixed from the people who submitted their rulesets. I NEED MORE RULESETS. I've found things with a ruleset as small as 12 lines. So please send me your rulesets no