Re: Flush ICMP and UDP flooders

2007-06-28 Thread LI Xin
Abdullah Ibn Hamad Al-Marri wrote: > Hello, > > I would like to block ICMP and UDP flooders who exceed a reasonable number. > > #- Rate Limit UDP (150 per host) > pass proto udp to any port $udp_services keep state > pass in quick proto udp from any to any \ > keep state \ > (max-src-conn 1,max

Re: pf(4) status in 7.0-R

2007-06-03 Thread LI Xin
Max Laier wrote: [...] > How do people feel about removing ftp-proxy from the base altogether? I > think it's better off in ports anyway. Opinions? /me vote for this. Cheers, -- Xin LI <[EMAIL PROTECTED]> http://www.delphij.net/ FreeBSD - The Power to Serve! signature.asc Description:

Re: PF & Windows Vista

2007-02-06 Thread LI Xin
Kevin K. wrote: > I am using FreeBSD 6.2-release w/ PF. Everything seems to be okay, except > the fact that Windows Vista machines cant get through the network. I have > tried many things, including just using a skeleton PF configuration and I'm > still having trouble. > > Just curious if anyone h

Re: pf.os out of date?

2007-01-02 Thread LI Xin
Hi, Abdullah Al-Marrie wrote: > Hello, > > Max, could you please update the pf.os since it's out of date, it > doesn't cover FreeBSD 6.1, 6.2, 7.0 ..etc. > > Maybe other linux and Vista as well needed to be updated? Since I did the previous update so I'd like to try to explain the thing. The p

Re: whitelists clients still being greylisted

2006-11-05 Thread LI Xin
Dan Langille wrote: > On 6 Nov 2006 at 9:13, LI Xin wrote: > >> Dan Langille wrote: >>> Hi folks, >>> >>> I'm setting up spamd with pf, and I'm finding that whitelisted IP >>> addresses are still being greylisted. For example: >&g

Re: whitelists clients still being greylisted

2006-11-05 Thread LI Xin
Dan Langille wrote: > Hi folks, > > I'm setting up spamd with pf, and I'm finding that whitelisted IP > addresses are still being greylisted. For example: Er? Have you mounted fdescfs as /dev/fd? I think this should be documented. Cheers, -- Xin LI <[EMAIL PROTECTED]> http://www.delphi