Re: Bot? / pf question

2011-01-05 Thread Adam Vande More
On Wed, Jan 5, 2011 at 1:48 PM, Mark Moellering wrote: > That's an excellent point. A span port from the upstream switch/router > > Since I am going to be setting up a mail server sometime next week and have > to keep things like this in mind; > would it make sense to run pf and block all outboun

Re: Bot? / pf question

2011-01-05 Thread Ryan Coleman
Yes and no. You want to leave ftp open, too, just in case for port upgrading/downloading, plus you would want to do monitoring across the wire (Nagios or something, maybe?). You could, though, do a dual-NIC setup and have one be a private network LAN for the servers if you aren't already conside

Re: Bot? / pf question

2011-01-05 Thread Mark Moellering
On 05-Jan-11 1:44 PM, Kevin Wilcox wrote: On 5 January 2011 13:25, David Brodbeck wrote: On Wed, Jan 5, 2011 at 8:15 AM, Kevin Wilcox wrote: To really see what your machine is doing, consider taking a look at the network flows. pfflowd, netflowd, ipaudit and a host of others can get you flow

Re: pf question

2008-09-09 Thread Bruce Cran
On Tue, 9 Sep 2008 00:17:39 -0500 (CDT) Scott Bennett <[EMAIL PROTECTED]> wrote: > I'm just starting to play around with pf to get it to handle NAT > for a LAN, and I've just discovered that I don't know how to get pf > to reload /etc/pf.conf after I make changes to it. "pfctl -d -e" > doesn

Re: pf question

2008-09-08 Thread Artis Caune
On Tue, Sep 9, 2008 at 8:17 AM, Scott Bennett <[EMAIL PROTECTED]> wrote: > I'm just starting to play around with pf to get it to handle NAT for > a LAN, and I've just discovered that I don't know how to get pf to reload > /etc/pf.conf after I make changes to it. "pfctl -d -e" doesn't do it, an

RE: pf question

2008-09-08 Thread joeb
: Tuesday, September 09, 2008 1:18 PM To: freebsd-questions@freebsd.org Subject: pf question I'm just starting to play around with pf to get it to handle NAT for a LAN, and I've just discovered that I don't know how to get pf to reload /etc/pf.conf after I make changes to it

pf question

2008-09-08 Thread Scott Bennett
I'm just starting to play around with pf to get it to handle NAT for a LAN, and I've just discovered that I don't know how to get pf to reload /etc/pf.conf after I make changes to it. "pfctl -d -e" doesn't do it, and neither does "pfctl -d; pfctl -e". Is there a way to do it besides rebootin

Re: pf question

2006-01-12 Thread Matthew Seaman
Richard C. Isaacson wrote: Dick Davies wrote: On 12/01/06, Vasile Cristescu <[EMAIL PROTECTED]> wrote: does pf has something like " ipfw -d show " ? I don't know. What does 'ipfw -d show' do? Are you asking if you can print out rules? pfctl -sr -v '-d' in ipfw includes the dynamic

Re: pf question

2006-01-12 Thread Richard C. Isaacson
Are you asking if you can print out rules? pfctl -sr -v Dick Davies wrote: On 12/01/06, Vasile Cristescu <[EMAIL PROTECTED]> wrote: does pf has something like " ipfw -d show " ? I don't know. What does 'ipfw -d show' do? -- Rasputin :: Jack of All Trades - Master of Nuns http://numb

Re: pf question

2006-01-12 Thread Dick Davies
On 12/01/06, Vasile Cristescu <[EMAIL PROTECTED]> wrote: > does pf has something like " ipfw -d show " ? I don't know. What does 'ipfw -d show' do? -- Rasputin :: Jack of All Trades - Master of Nuns http://number9.hellooperator.net/ ___ freebsd-question

pf question

2006-01-12 Thread Vasile Cristescu
does pf has something like " ipfw -d show " ? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: identd and pf question

2005-08-24 Thread Giorgos Keramidas
On 2005-08-23 22:31, Matt Rechkemmer <[EMAIL PROTECTED]> wrote: > After banging my head for awhile, and trying other daemons (oidentd, > pidentd), I tried disabling pf with pfctl -d. Voila, clients can > connect. I re-enabled pf with pfctl -e and things are broken again. Show us your pf.conf fil

identd and pf question

2005-08-23 Thread Matt Rechkemmer
Hello all, I'm currently working with a FreeBSD 5.4 system running pf and ident2. When my users attempt to connect to an IRC network, and ident is requested my ident daemon never replies. I see the inbound packets with tcpdump, but never anything out. After banging my head for awhile, and tryin

Re: pf question

2005-03-08 Thread Giorgos Keramidas
On 2005-03-08 06:49, "J.D. Bronson" <[EMAIL PROTECTED]> wrote: > First my ifconfig -A: > > # ifconfig -A > bge0: flags=8843 mtu 1500 > address: > media: Ethernet autoselect (100baseTX full-duplex) > status: active > inet 192.168.82.1 netmask 0xff00 b

pf question

2005-03-08 Thread J.D. Bronson
First my ifconfig -A: # ifconfig -A bge0: flags=8843 mtu 1500 address: media: Ethernet autoselect (100baseTX full-duplex) status: active inet 192.168.82.1 netmask 0xff00 broadcast 192.168.82.255 inet 192.168.82.2 netmask 0x broadcast