Current problem reports assigned to you

2006-09-04 Thread FreeBSD bugmaster
Current FreeBSD problem reports Critical problems Serious problems S Tracker Resp. Description o kern/82271 pf [pf] cbq scheduler cause bad latency f kern/86072 pf [pf] Packet Filter rule

How To Close Ports (OT?)

2006-09-04 Thread Ted Johnson
Hi; I have many ports open for various functions, email, ftp, squid, pound, various instances of zope, etc. Of course, all of them are libel to be attacked. What does one do? My research indicates ALF is a viable option, but I can't find an open source version. I presume putting another box

Re: How To Close Ports (OT?)

2006-09-04 Thread Travis H.
On 9/4/06, Ted Johnson <[EMAIL PROTECTED]> wrote: I have many ports open for various functions, email, ftp, squid, pound, various instances of zope, etc. Of course, all of them are libel to be attacked. What does one do? There's this thing called pf, you should really look into it. Start wit

Re: kern/102647: Using pf stateful rules for inet6 fails for connections originating from the firewall itself to a service running on thesame box

2006-09-04 Thread SUZUKI Shinsuke
Hi, > On Fri, 1 Sep 2006 21:22:45 +0200 > [EMAIL PROTECTED](Max Laier) said: > Thinking about this for a bit we might want to use the patch below > instead. i.e. do the fixup locally in the pfil wrapper instead. This > way other filters don't break if they have adapted to the new wor

Re: kern/102647: Using pf stateful rules for inet6 fails for connections originating from the firewall itself to a service running on thesame box

2006-09-04 Thread SUZUKI Shinsuke
Synopsis: Using pf stateful rules for inet6 fails for connections originating from the firewall itself to a service running on thesame box State-Changed-From-To: open->feedback State-Changed-By: suz State-Changed-When: Tue Sep 5 03:54:33 UTC 2006 State-Changed-Why: patch is proposed by Max Laier

Re: kern/102647: Using pf stateful rules for inet6 fails for connections originating from the firewall itself to a service running on thesame box

2006-09-04 Thread SUZUKI Shinsuke
The following reply was made to PR kern/102647; it has been noted by GNATS. From: SUZUKI Shinsuke <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Cc: freebsd-pf@freebsd.org, [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] Subject: Re: kern/102647: Using pf stateful rules