Re: Topics for revised PF and networking tutorial

2017-04-07 Thread Philipp Buehler
Am 07.04.2017 18:38 schrieb Peter N. M. Hansteen: On 04/07/17 18:00, I love OpenBSD wrote: I second to more IPv6 related information. I am curious about blocking port scanning in IPv6 Web. Does pf let me put a CIDR into the named table based on offending IPv6 address and 64-bit mask? I mean so

Re: Topics for revised PF and networking tutorial

2017-04-07 Thread bytevolcano
On Fri, 7 Apr 2017 17:39:16 + (UTC) Stuart Henderson wrote: > On 2017-04-06, > wrote: > > On Wed, 5 Apr 2017 22:44:54 + (UTC) > > Stuart Henderson wrote: > > > >> On 2017-04-05, > >> wrote: > >> > I've been using a trick to emulate scheduled rules using IP > >> > tables. > >>

OpenBSD as a non-routing access point

2017-04-07 Thread Jordon
My new wifi adapter finally arrived today (AR9271) so I want to give hostap a try with its new 802.11n support. Unfortunately, all the examples I’ve found center around creating a router/AP when all I want to make is an AP - as in, no DHCP or routing. I just want to bridge my wired network to the

Re: Topics for revised PF and networking tutorial

2017-04-07 Thread Mihai Popescu
I don;t want to offend you folks, but I'm curious and I will ask: is this BSDCon so useful? Does it pay the efforts? If someone has time and knowledge to do a PF tutorial he/she can do it and post. Do you need the Con? I'm asking this having in my mind Google Summer of (no)Code thread from misc@.

Re: Topics for revised PF and networking tutorial

2017-04-07 Thread mabi
Dear Peter, May I suggest the following topic of interest: PF with VLAN interfaces (with LACP trunk interface behind) and CARP of course. Regards, M. Original Message Subject: Topics for revised PF and networking tutorial Local Time: April 1, 2017 10:52 AM UTC Time: April 1, 2

Re: Substitute for other variables in pkg.conf(5)

2017-04-07 Thread Stuart Henderson
On 2017-04-06, wrote: > Since pkg.conf(5) is no longer used, how would you set fullwidth, > loglevel, nochecksum, ntogo? > > In particular, I am interested in fullwidth, loglevel, and ntogo. > > ntogo is now on "pkg_add -V". nochecksum (to stop verifying checksums during pkg_delete) is on by de

Re: Topics for revised PF and networking tutorial

2017-04-07 Thread Stuart Henderson
On 2017-04-06, wrote: > On Wed, 5 Apr 2017 22:44:54 + (UTC) > Stuart Henderson wrote: > >> On 2017-04-05, >> wrote: >> > I've been using a trick to emulate scheduled rules using IP >> > tables. >> >> Nice trick. Anchors are also good for this. >> >> But don't forget that active connect

Re: Topics for revised PF and networking tutorial

2017-04-07 Thread Stuart Henderson
On 2017-04-07, I love OpenBSD wrote: > I second to more IPv6 related information. > I am curious about blocking port scanning in IPv6 Web. Does pf let me put a > CIDR into the named table based on offending IPv6 address and 64-bit mask? I > mean something similar to 'overload ' option. "overloa

Re: Topics for revised PF and networking tutorial

2017-04-07 Thread Peter N. M. Hansteen
On 04/07/17 18:00, I love OpenBSD wrote: > I second to more IPv6 related information. > I am curious about blocking port scanning in IPv6 Web. Does pf let me put a > CIDR into the named table based on offending IPv6 address and 64-bit mask? I > mean something similar to 'overload ' option. Table

Re: Topics for revised PF and networking tutorial

2017-04-07 Thread R0me0 ***
+1 Queue Prioritization and ToS ( set prio / set tos combinations ) by examples will be great 2017-04-07 13:00 GMT-03:00 I love OpenBSD : > I second to more IPv6 related information. > I am curious about blocking port scanning in IPv6 Web. Does pf let me put > a CIDR into the named table based on

Re: Topics for revised PF and networking tutorial

2017-04-07 Thread I love OpenBSD
I second to more IPv6 related information. I am curious about blocking port scanning in IPv6 Web. Does pf let me put a CIDR into the named table based on offending IPv6 address and 64-bit mask? I mean something similar to 'overload ' option.

Re: Topics for revised PF and networking tutorial

2017-04-07 Thread Peter N. M. Hansteen
On 04/07/17 13:36, Markus Rosjat wrote: > Since not everyone can attend to this Conference will there be a > recording of this session? At previous BSDCans, talks have generally been recorded but not tutorials. So probably not. Slides likely will be available after the session has concluded. On

No message-id header on port 587 - OpenSMTPD

2017-04-07 Thread LD
I have configured an OpenSMPTD server to use port 587 upon which to receive inbound mail. When the email is delivered I do not see a message-id from this originating SMTP server, instead I see a message-id header inserted by the last server in the line, i.e. in this case my office's Exchange server

Re: Topics for revised PF and networking tutorial

2017-04-07 Thread Markus Rosjat
Since not everyone can attend to this Conference will there be a recording of this session? I use pf not so much on a daily basis but I would like to get more insight too ;) And I admit I'm more the visual guy regards Markus Am 07.04.2017 um 06:25 schrieb li...@wrant.com: Wed, 5 Apr 2017 17

Re: Topics for revised PF and networking tutorial

2017-04-07 Thread Craig Skinner
On Fri, 7 Apr 2017 07:25:58 +0300 li...@wrant.com wrote: > Thank you ALL for the hard work over the years to complement OpenBSD. Yes.