Re: blocking gnutella

[EMAIL PROTECTED] (Jason Dixon) wrote in message news:<[EMAIL PROTECTED]>... > On Sep 14, 2004, at 3:33 PM, Bryan Irvine wrote: > > > I can't seem to get gnutella to break. > > > > gnutella = "{" 6346 6348 8436 "}" > > block out quick proto { udp tcp } from any to any port $gnutella > > block in q

Re: DHCP pf and bridges

itinerant <[EMAIL PROTECTED]> wrote in message news:<[EMAIL PROTECTED]>... > Hello There, > I'm a complete newbie to OpenBSD - a veteran from FreeBSD attracted by > the green grass of pf for a new firewall. Here's the rub - simple setup > with nic connected to internet, nic connected to sub

Re: relaydb

> On Sat, Mar 20, 2004 at 08:01:49PM +0100, the entity calling itself Jacek > Artymiak stated: >> >> >I have a single file being used by relaydb. It contains whitelist and >> >blacklist. >> > >> >Currently running pf fine with a spamd table containing many spam >> >addresses. >> >Using spamd-setup

relaydb

I have a single file being used by relaydb. It contains whitelist and blacklist. Currently running pf fine with a spamd table containing many spam addresses. Using spamd-setup wtih RBL list and local spamassasin entries. How do I delete an IP from the blacklist ? How do I add an IP to the whit

Pf relaydb redirect

Hello, I have been working with relaydb to create my own blacklist. Had some problems at first but found changing the configuration file for spamassassin from report_safe 1 to report_safe 0 fixed it. My relaydb file is now being generated. Looking at the web page about relaydb http://www.benzed

Something like pfstat for multiple interfaces

Hello, Does anybody know of a way to capture statistics on multiple interfaces running pf Recently ran into a product called Hatchet that has a nice html interface to view pf statistics of log files block, pass etc... It can also display graphs produced by pfstat. However it looks like pfstat d

Re: How to redirect a port 3128 to the net 80

> On Fri, Feb 13, 2004 at 03:17:08PM -0600, Brent Bolin wrote: > >> Never was able to get squid running on the firewall. Setup firewall to >> use >> round-robin direct connections. >> >> Without going around and changing all the workstations from using t

Re: How to redirect a port 3128 to the net 80

> jared r r spiegel wrote: > >> On Fri, Feb 13, 2004 at 03:17:08PM -0600, Brent Bolin wrote: >> >>>Without going around and changing all the workstations from using the >>> proxy, >>>is there a way I can redirect lan connections to the firew

How to redirect a port 3128 to the net 80

Hello, Never was able to get squid running on the firewall. Setup firewall to use round-robin direct connections. Without going around and changing all the workstations from using the proxy, is there a way I can redirect lan connections to the firewall to port 3128 to the net on port 80.

Help with pf round-robin from firewall using squid

Hello all, Is it possible to get round-robin load balancing running with squid using two T1 on the firewall ? rl0 = lan interface rl1 = wan one interface rl2 = wan two interface These rules work fine for web surfing with no proxy - pfctl -sn pfctl -sr nat on rl1 inet proto tcp from 192.168.50

Re: Connections from pf firewall to the net

[EMAIL PROTECTED] (Brent Bolin) wrote in message news:<[EMAIL PROTECTED]>... > Hello, > > I am able to use round-robin from the lan -> net but not able to ssh from > the firewall to the net. > > Currently using these rules to accomplish this - > > lan_net =

Re: NAT + Passive FTP problems...

[EMAIL PROTECTED] (Drain Fade) wrote in message news:<[EMAIL PROTECTED]>... > I'm having a problem hitting my FTP server via passive FTP from the > outside world. I have the right ports bring forwarded from the external > if and I'm just not seeing where this is breaking (too bad you can't > tur

Connections from pf firewall to the net

Hello, I am able to use round-robin from the lan -> net but not able to ssh from the firewall to the net. Currently using these rules to accomplish this - lan_net = "192.168.0.0/24" int_if = "dc0" ext_if1 = "fxp0" ext_if2 = "fxp1" ext_gw1 = "68.146.224.1" ext_gw2 = "142.59.76.1" # nat outgoi

Problems getting from the pf firewall host to anything on the net through nat

Trying to configure pf to use round-robin outbound. Currently setup with two T1 gateways. Works fine from the internel network, but I get this from the firewall - Trying 2001:4f8:0:2::e... ftp: connect to address 2001:4f8:0:2::e: No route to host Trying 204.152.184.73... ftp: connect to address