Re: questions about daniel hartmeier's pf.conf example ...

2005-04-25 Thread Russell Fulton
> Something that I notice is that daniel allows all outgoing TCP and UDP > traffic regardless of where it is going. > > Question: Isn't this a bad thing ? I would have thought it is best > practice to only allow incomming and outgoing connections > _explicitly_. With the reason being some OS upl

Re: questions about daniel hartmeier's pf.conf example ...

2005-04-25 Thread Michiel van Baak
On 17:47, Mon 25 Apr 05, alex wilkinson wrote: > Hi all, > > I am following daniel hartmeier's example pf.conf > [http://www.benzedrine.cx/pf.conf]. > > Something that I notice is that daniel allows all outgoing TCP and UDP > traffic regardless of where it is going. > > Question: Isn't this a ba

Re: questions about daniel hartmeier's pf.conf example ...

2005-04-25 Thread Remy Heiden
Depends on how paranoid you are. Personally I don't really care, and it's a lot easier when using new apps. If on the other hand you don't care about changing your pf-config every time you use a new app or when you're playing with the ports that it uses, go ahead. Remy On 4/25/05, alex wilkins

Re: questions about daniel hartmeier's pf.conf example ...

2005-04-25 Thread Eduardo Tongson
> Question: Isn't this a bad thing ? I would have thought it is best > practice to only allow incomming and outgoing connections > _explicitly_. With the reason being some OS upload information to > base camp (redmond) for statistical analsyis. No if you are the only one behind the pf box or you

Re: questions about daniel hartmeier's pf.conf example ...

2005-04-25 Thread Jason Dixon
On Apr 25, 2005, at 4:17 AM, alex wilkinson wrote: Hi all, I am following daniel hartmeier's example pf.conf [http://www.benzedrine.cx/pf.conf]. Something that I notice is that daniel allows all outgoing TCP and UDP traffic regardless of where it is going. Question: Isn't this a bad thing ? I would

Re: questions about daniel hartmeier's pf.conf example ...

2005-04-25 Thread eric
On Mon, 2005-04-25 at 17:47:29 +0930, alex wilkinson proclaimed... > Question: Isn't this a bad thing ? I would have thought it is best > practice to only allow incomming and outgoing connections > _explicitly_. With the reason being some OS upload information to > base camp (redmond) for statist

Re: questions about daniel hartmeier's pf.conf example ...

2005-04-25 Thread alex wilkinson
On 4/25/05, eric <[EMAIL PROTECTED]> wrote: > ...and when you try to use a PASV ftp connection, things die. Yes, I noticed this. What is the best method in to allow FTP connections out with PF ? Regards - Alex

SysAdmin - Failover Firewalls with OpenBSD and CARP

2005-04-25 Thread Jason Dixon
As reported on the OpenBSD Journal last week, the May issue of SysAdmin has an article entitled "Failover Firewalls with OpenBSD and CARP". I've worked with the publishers to get it released online for non-subscribers, and they've generously responded. If anyone has any corrections or suggest

RE: State/queue question

2005-04-25 Thread Peter Huncar
Sure, this mail helped me A LOT ;o) although it wasn't for me ;) I'm meditating about how to create rules and/or queues for my router for a long time. "I misunderstood how this worked as well" ;o) Thank you ;o) hunci > -Original Messag

bridging question ...

2005-04-25 Thread alex wilkinson
Hi all, I am currently setting up a sokeris 4501 as a WAP/PPPoE gateway. It is currently set up and working well, however, I really don't know if it is set up efficiently. I have read in OpenBSD's FAQ that one should only filter in on *one* interface when bridging. In my context I'm trying to exp

questions about daniel hartmeier's pf.conf example ...

2005-04-25 Thread alex wilkinson
Hi all, I am following daniel hartmeier's example pf.conf [http://www.benzedrine.cx/pf.conf]. Something that I notice is that daniel allows all outgoing TCP and UDP traffic regardless of where it is going. Question: Isn't this a bad thing ? I would have thought it is best practice to only allow