pf(4) port?

2003-01-09 Thread Nicolas Christin
Hello, I would like to know if anyone knows of a port (or a porting project in progress) of OpenBSD's pf(4) to FreeBSD. I couldn't find anything... (I know some guy started porting it to NetBSD, but haven't seen anything FreeBSD-related.) Best regards, -- Nicolas To Unsubscribe: send mail to [

What is my next step as a script kiddie ? (DDoS)

2003-01-09 Thread Josh Brooks
Hello, With the help of people in this group I have largely solved my problems - by simply placing in rules to drop all packets except the ones going to ports/services that are actually in use on the destination, I have found that even during a large attack (the kinds that used to cripple me) I h

Re: What is my next step as a script kiddie ? (DDoS)

2003-01-09 Thread .
> With the help of people in this group I have largely solved my problems - > by simply placing in rules to drop all packets except the ones going to > ports/services that are actually in use on the destination, I have found > that even during a large attack (the kinds that used to cripple me) I ha

PPTP tunneling over PPPoE link

2003-01-09 Thread Brett Glass
I'm having trouble doing something which I'd THOUGHT would just work... but it's not. Any help would be much appreciated. Here's the story. A client's LAN is connected to the Internet via a FreeBSD firewall/router. The FreeBSD box is using PPPoE (userland PPP plus NetGraph PPPOE) to connect to

Re: PPTP tunneling over PPPoE link

2003-01-09 Thread Julian Elischer
mpd can do both pppoe and pptp. On Thu, 9 Jan 2003, Brett Glass wrote: > I'm having trouble doing something which I'd THOUGHT would just work... but it's >not. Any help would be much appreciated. > > Here's the story. A client's LAN is connected to the Internet via a FreeBSD >firewall/router.

Re: PPTP tunneling over PPPoE link

2003-01-09 Thread Brett Glass
At 07:10 PM 1/9/2003, Julian Elischer wrote: >mpd can do both pppoe and pptp. I've tried mpd, and its PPTP seems to be incompatible with XP and with some Macs. (It doesn't die completely, but runs at a crawl.) If it worked (and if the scripting language were more robust) I'd switch to it in a s

ip6fw suggestion

2003-01-09 Thread David Malone
I just got caught by a subtle problem with ip6fw. You can legally say: allow icmp from any to any and ip6fw doesn't complain, but this allows IPv4 ICMP in IPv6 packets, which is pretty meaningless. This seems to be because ip6fw uses getprotobyname to convert names into numbers. Of course,