authpf usernames logged into squid

2004-09-16 Thread tech
Has anyone had any luck passing authpf usernames to squid logs? Bill

RE: Carp address !as source IP

2004-09-16 Thread Steven S.
Jason Opperisano wrote: > On Thu, 2004-09-16 at 08:58, Steven S. wrote: > > the above seems to be the result of a blocked packet with "set > block-policy return" or a "block return ..." rule ...SYN goes out but > SYN-ACK coming back in gets a RST... I have no such policies. It is my understandin

Re: Carp address !as source IP

2004-09-16 Thread Jason Opperisano
On Thu, 2004-09-16 at 08:58, Steven S. wrote: > Greetings, > > I'm experiencing an interesting problem and I'm googled out. > > Trying to get mail from a firewall which is the carp master to an internally > hosted e-mail server. The mail server is using a private IP address and the > firewall is

source tracking radix entries

2004-09-16 Thread Jeff Wilson
I'm running 3.5 -stable with dynamic entries in radix tables, and I want to do source tracking per IP. Is this possible? I have a 20-bit subnet behind pf and I've broken authenticated IPs into 8 23-bit radix tables. (I am not running NAT, but I will use anonymous IP's for my example): 00:# ta

Carp address !as source IP

2004-09-16 Thread Steven S.
Greetings, I'm experiencing an interesting problem and I'm googled out. Trying to get mail from a firewall which is the carp master to an internally hosted e-mail server. The mail server is using a private IP address and the firewall is using a "binat" rule to translate a public carp IP to the p

Re: Penetration Testing

2004-09-16 Thread m0nst3r
Well if you want to pen-test, there are a range of tools available, depends on your experience, and breadth of knowledge too. On the automated front you could try using Nessus, but again, interpretation of the results will depend on your knowledge and experience. For example you may want to test

Re: pf pauses in sending traffic

2004-09-16 Thread Henning Brauer
* Claudio Jeker <[EMAIL PROTECTED]> [2004-09-14 14:02]: > I think you got hit by a fxp bug that was fixed after 3.5. The problem was > that somehow the fxp card did no longer generate an interrupt and so the > watchdog timer reseted the card after 20 seconds. This only happened on > havily loaded l