Effectiveness of pf against port scans

2005-06-17 Thread Daniel Hamlin
Kudos to the PF developers. Here is an interesting metric from a production /16 network, running OpenBSD 3.6: 96% of blatant TCP port-scan related traffic stopped by pf's max-src-state feature. After tuning pf's max-src-states for our environment and "normal" traffic loads, we measured how ma

restore: Tape block size problem?

2005-07-27 Thread Daniel Hamlin
I am attempting to perform and verify a backup on a server, per the instructions in the FAQ, but am getting this error: restore: Tape block size (32758) is not a multiple of dump block size (1024) Is there something I'm doing wrong or is this a hardware problem? This is the first backup attem

Problem detecting fxp in March 2 snapshot

2006-03-08 Thread Daniel Hamlin
My Intel network card, which works under 3.8, is not detected in the March 2 snapshot (I tried some previous snapshots as well, same issue). Any hints or suggestions would be appreciated! Dan Hamlin OpenBSD 3.8 (GENERIC) #138: Sat Sep 10 15:41:37 MDT 2005 [EMAIL PROTECTED]:/usr/src/sys/ar

Stability of bge on 3.8 SMP

2006-03-22 Thread Daniel Hamlin
I have a server acting as a router/firewall (dmesg below) that stopped passing traffic on one network card after being up for ~4 months. The card was unpingable, and I believe the console said "watchdog timeout". Since the connection was down, I didn't take the time to write down the message,

Re: Stability of bge on 3.8 SMP

2006-03-23 Thread Daniel Hamlin
Daniel Hamlin wrote: I have a server acting as a router/firewall (dmesg below) that stopped passing traffic on one network card after being up for ~4 months. The card was unpingable, and I believe the console said "watchdog timeout". Since the connection was down, I didn't t

Re: Migration to PF - some questions

2005-09-08 Thread Daniel Hamlin
Stephan A. Rickauer wrote: Gaby vanhegan wrote: > $if_in="xl0" $if_out="xl1" pass in on $if_in keep state pass out on $if_out keep state Ok, let's stick to that example. Imagine a firewall having three interfaces connecting Internet, LAN and DMZ. When I would like to allow SMTP traffic t

Big discrepancy between df and du "used space" values (3.8)

2005-11-08 Thread Daniel Hamlin
I'm trying to track down why /var is full, and df and du report major differences (or else I'm reading something wrong, in which case I submit to the verbal beatings). Pay attention to what it says for /var. Running OpenBSD 3.8 GENERIC as a firewall. Why does df report 8G used, and du report

SOLVED: Re: Big discrepancy between df and du "used space" values (3.8)

2005-11-08 Thread Daniel Hamlin
Ted Unangst wrote: On 11/8/05, Daniel Hamlin <[EMAIL PROTECTED]> wrote: I'm trying to track down why /var is full, and df and du report major differences (or else I'm reading something wrong, in which case I submit to the verbal beatings). Pay attention to what it says f

Re: Windows CLI FTP and OBSD 3.9 ftp-proxy

2006-02-02 Thread Daniel Hamlin
Joachim Schipper wrote: On Thu, Feb 02, 2006 at 11:21:02AM +1100, Karl Kopp wrote: Hi Everyone! I just upgraded one of our firewalls from 3.0 OBSD (I know, I know, I've been busy, for 4 years :) to 3.8 (which took 30 mins - LOVE that!). I've also added ftp-proxy from current to handle all ou