Re: authpf method with a HTTP Server?

hi, what you are trying to achieve is very is easy with using captive portal. But i think you want to write web interface for authpf. There was some discussion about authpf web interface in 2004[1] which gives you an idea about it's feasible. [1] http://www.monkey.org/openbsd/archive/misc/04

Re: pf rules to allow tlds

et, beside they are changing from time to time, I wish I could use domains, if this is an option please let me know :) -- Regards, -Abdullah Ibn Hamad Al-Marri Arab Portal http://www.WeArab.Net/ ___ freebsd-pf@freebsd.org mailing list http://lists.freeb

Re: Rules must be in order

Hi, error says what sohuld you do: "/etc/pf.conf:13: Rules must be in order: options, normalization, queueing," Your pf rules order is wrong. The order should be like...Queue->NAT->Filtering... new pf.conf ; --- ext_if="lnc0" # replace with actual external interface name i.e., dc0 int_if="lnc

Re: pf and policy routing

Hi, you can use PF's route-to options for Policy routing.. On 6/22/06, Sébastien AVELINE <[EMAIL PROTECTED]> wrote: Hi, I would like to have some advises on pf. I'd like to use pf for clustering a firewall and using pfsync. Actually I use a Linux Box to do this. The problem is that I have sp

Re: PF - ftp passive mode.

Hi, you need following rules++ pass in on em0 proto tcp from any to 192.168.0.2 port 21 keep state pass in on em0 proto tcp from any to 192.168.0.2 port 49512 >< 65535 keep state and your FTP server's Passive ports interval must be 49152:65535 ? On 5/12/06, Gilberto Villani Brito <[EMAIL PROTE

Re: Something is wrong

Hi, does lan_to_int includes port 19336 or 8081? On 5/4/06, Aguiar Magalhaes <[EMAIL PROTECTED]> wrote: List, I have a lot of Windows Internet Explorer browsers in the LAN and they are marked to use the proxy at 3128 port. The pf and squid are in the same machine. I'm not using transparent pro

Re: selective logging of what pf is rejecting?

Hi, do you see the packets with tcpdump with -i $ext_if options? #tcpdump -ttt -n -i rl0 icmp for icmp packets.. 2005/9/9, bob self <[EMAIL PROTECTED]>: > Max Laier wrote: > > >On Friday 09 September 2005 21:17, Huzeyfe Onal wrote: > > > > > >>hi, >

Re: selective logging of what pf is rejecting?

hi, you can use tcpdump to watch pf action, why it drop or accept packets. try to use tcpdump -i pflog0 -e ps: pflogd must be running... also read http://www.openbsd.com/faq/pf/logging.html 2005/9/9, bob self <[EMAIL PROTECTED]>: > > My pf.conf file looks something like this > > block in all

Re: Windows authpf client

hi, nice idea for newbie windows users..I think it's hard to teach using Putty Think as a newbie, I want a program. -user id , password and connect button -browse for certificate and connect button -Minimize system tray options.. -Disconnect button etc... On 8/24/05, Kenneth Kalmer <[EMAIL

Re: Kernel Packet Travel Guide

http://homepage.mac.com/quension/pf/flow.png ? On 8/23/05, Kenneth Kalmer <[EMAIL PROTECTED]> wrote: > > Guys > > I'm busy doing some research on replacing iptables with pf. I've asked > some questions earlier and recieved some insightful answers, thanks > for those. > > I did some googling re

Re: nmap

hi, try to use scrub packets using scrub with options... like scrub in on $ext_if On 8/22/05, Márcio Luciano Donada <[EMAIL PROTECTED]> wrote: > > Aguiar Magalhaes escreveu: > > >List, > > > >How can I block nmap options using PF ?? > > > >Thanks... > > > Good Day, > A good ideia is you