Re: Need a PF consultant

2020-06-21 Thread David Mehler
connect no route to host thing again. While the original focus of my question was IPv6 would you be willing to assist me with my general configuration? As I said I can go in to much more detail on this. Thanks. Dave. On 6/21/20, Kristof Provost wrote: > On 21 Jun 2020, at 23:11, David Mehler wro

Need a PF consultant

2020-06-21 Thread David Mehler
Hello, Anyone a pf expert wanting to make some extra money? I'm in need of consulting, I'm having an issue with my PF configuration, I've got a much longer message with output and netstat and all that, if anyone is interested email me privately with rates and I'll send the details, but in brief I

working pf Asterisk configuration

2020-03-17 Thread David Mehler
Hello, I've got a 12.1 system with a jail. In this jail i'm wanting to run an Asterisk server. Does anyone have a working pf firewall configuration for a similar setup? Last time I attempted this I got 5060 to work, but there was no audio at all. Thanks. Dave.

Re: FreeBSD 12, pf, and Dual IP stack?

2019-06-05 Thread David Mehler
Hello, Thanks everyone for your help so far. I have several questions. First, from the numbers: 2001:14f8:0200:0004: :::0004 2001:14f8:0200:0004: :::0005 it looks like the address breaks at 4 the system is the first four segments, and anything after is hostbased, is th

Re: FreeBSD 12, pf, and Dual IP stack?

2019-06-05 Thread David Mehler
Hello, So your setup looks like mine except I only have one ipv4 and one ipv6 interface, how do I alias the ipv6 address space I have? I don't know how to hex split. Thanks. Dave. On 6/5/19, Kurt Jaeger wrote: > Hi! > >> Yes, an ifconfig on my vtnet0 interface does show the ipv6 address and >>

Re: FreeBSD 12, pf, and Dual IP stack?

2019-06-04 Thread David Mehler
Hello Kurt, Thank you for your reply. Yes, an ifconfig on my vtnet0 interface does show the ipv6 address and it has prefixlen 64 I'm assuming that's what your refering to? Can you clarify your meaning about ipv6 aliases? Thanks. Dave. On 6/4/19, Kurt Jaeger wrote: > Hi! > >> I'm running a vps

FreeBSD 12, pf, and Dual IP stack?

2019-06-04 Thread David Mehler
Hello, I'm running a vps running FreeBSD 12 with pf as firewall. I've got a public ipv4 and a public ipv6 address, the latter is not going through a tunnel broker. I can not wrap my head around ipv6 probably because I'm use to decimal representations and ipv4 addressing. If anyone has a primer I

FreeBSD 10.3, pf, and rtp, definite firewall issue

2017-03-21 Thread David Mehler
Hello, I've included my firewall rules below. Can someone take a look at them and give me an assessment? They are working for the most part except with asterisk in a jail and rtp. I've got a single server a vps and one public IP. On the server (Freebsd 10.3 trying to decide whether to go 11 op

malware list as input for pf blocklist

2017-03-16 Thread David Mehler
Hello, Is anyone using malwarepatrol.net as a blocklist for pf? If so, how did you get that going? Thanks. Dave. ___ freebsd-pf@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "freebsd-pf-u

pf rules sanity check

2017-03-03 Thread David Mehler
Hello, Can someone take a look at these rules and let me know where I'm going wrong? I'm running a 10.3 system that was working great, but now I've added some jails to it and am noticing two behaviors. The first is that whenever I bring up a new jail and it gets an ip address I have to do a pfct

pf and a natted jailed web server

2017-03-01 Thread David Mehler
Hello, I'm running FreeBSD 10.3 in a vps. I've got one public IP and am running a jail server using /etc/jail.conf. My problem is I'm trying to pass in port 8080 traffic in to the jailed web server which then goes to port 80 which the jailed web server has a web server listening on. My problem i

Working pf ftp configurations

2015-10-19 Thread David Mehler
Hello, If anyone is using freebsd 10 I suppose, pf, and using a system as an ftp client or using the system to protect jails or other systems on a network, providing them ftp access to the net, via ftp-proxy can you share your configurations? What I've got is not working, initially I had a single

FreeBSD 10, pf and ftp

2015-10-14 Thread David Mehler
Hello, I've got pf and ftp-proxy loading, the latter is listening on 127.0.0.1:8021 and I've got the below rules. Any ftp traffic from the host to an ftp server is not working. Can someone tell me where I messed up with the proxy? Thanks. Dave. # # pf.conf rules # Establish a block by default f

Re: Rules sanity check

2015-10-13 Thread David Mehler
Hello, Thanks. How do I get icmpv6 going? That is certainly a problem I'm having. Thanks. Dave. On 10/13/15, Kristof Provost wrote: > >> On 13 Oct 2015, at 05:51, David Mehler wrote: >> Some things I know definitely aren't working is the ipv6 allowing of >>

Rules sanity check

2015-10-12 Thread David Mehler
Hello, I'm back to pf after a number of years with mainly Linux servers. I'm running FreeBSD 10 on a machine with pf. I'm hoping someone can give my rules such as they are a sanity check? Some things I know definitely aren't working is the ipv6 allowing of ssh and http, ipv6 ping doesn't work giv

new firewall config

2009-12-15 Thread David Mehler
Hello, I'm writing a new firewall for an 8.0 machine. It's a gateway box, it runs an ftp proxy, dhcp and dns services and ntp. It also routes. Other than that it should block everything else. I've got the below rules, and am wondering since it works if it's the most efficient it can be or if there