Re: static IPv6 setup is not working stable

2020-08-07 Thread Demi M. Obenour
On 2020-08-06 09:51, Janne Johansson wrote: > I have a setup where the virtualization (KVM) combined with the networking > does present a IPv6 def-gw as both an fe80:: and > the more normal 2001:a:b:c:d::1/64 and where the 2001-v6 ip works far > better on virtual machines due to redundancy mac sync

Re: Does OpenBSD support Carrier Grade Nat?

2020-08-07 Thread Edward Carver
Can you send me sample config please? Sent with ProtonMail Secure Email. ‐‐‐ Original Message ‐‐‐ On Friday, August 7, 2020 3:33 PM, Marc Peters wrote: > On Fri, Aug 07, 2020 at 12:12:14PM +, Edward Carver wrote: > > > Does OpenBSD support Carrier Grade Nat (cg-nat)? > > Thanks for

Does OpenBSD support Carrier Grade Nat?

2020-08-07 Thread Edward Carver
Hi Misc, Does OpenBSD support Carrier Grade Nat (cg-nat)? Thanks for helping.. -- Edward Carver Sent with [ProtonMail](https://protonmail.com) Secure Email.

Re: Managing PF logs

2020-08-07 Thread Carlos Lopez
Yep ... Pretty interesting Pierre ... but maybe is not a good idea to install JDK in a fw gateway ... In any case, good catch. But maybe the best option is to do it using syslog ... I will think about it this weekend ... Many thanks to all for your help. On 07/08/2020, 16:35, "owner-m...@openb

Re: Managing PF logs

2020-08-07 Thread pierre1.bardou
Hello, I use logstash with an input like this : input { pipe { type => "pflog" command => "doas /usr/sbin/tcpdump -l -v -n -n -e -s 160 -tt -i pflog0" } } -- Cordialement, Pierre BARDOU -Message d'origine- De : owner-m...@openbsd.org De la part de Peter N. M. Hansteen Env

Configuration of automatic login

2020-08-07 Thread Ibsen S Ripsbusker
What do I do to make ttyC0 start with a shell as a user other than root, without prompting for a password? Please receive my sincere salutations. Ibsen

Re: Does OpenBSD support Carrier Grade Nat?

2020-08-07 Thread Marc Peters
On Fri, Aug 07, 2020 at 12:46:45PM +, Edward Carver wrote: > Can you send me sample config please? > What kind of config? There's no special config needed, as the IPv4 you get for your external interface is out of the range 100.64.0.0/10. I receive mine via dhcp, but some providers may use

Re: Does OpenBSD support Carrier Grade Nat?

2020-08-07 Thread Marc Peters
On Fri, Aug 07, 2020 at 12:12:14PM +, Edward Carver wrote: > Does OpenBSD support Carrier Grade Nat (cg-nat)? > Thanks for helping.. My router sits behind one, so yes. hth, Marc

Re: Way to find most active IPs for rate limiting with pf

2020-08-07 Thread Stuart Henderson
On 2020-08-06, Alan McKay wrote: > So I want to implement rate limiting, and to determine a reasonable > rate based on current traffic patterns I'd like to be able to figure > out which source IPs are generating the most connections and at what > rate. > > Is there a way to do that? Lots of ways

Re: Managing PF logs

2020-08-07 Thread Peter N. M. Hansteen
On Fri, Aug 07, 2020 at 10:29:32AM +, Carlos Lopez wrote: > Hi all, > > I am thinking about how could be the best option to inject PF logs in > Elasticsearch (or any similar platform). If I am not wrong, some years ago > there is an option using a shell wrapper to store all pf logs in ASCII

Re: Managing PF logs

2020-08-07 Thread Tom Smyth
pf logs are stored in Tcpdump format, so you can parse them with tcpdump before dumping them into your analysis dbs On Fri, 7 Aug 2020 at 11:36, Carlos Lopez wrote: > Hi all, > > I am thinking about how could be the best option to inject PF logs in > Elasticsearch (or any similar platform)

Managing PF logs

2020-08-07 Thread Carlos Lopez
Hi all, I am thinking about how could be the best option to inject PF logs in Elasticsearch (or any similar platform). If I am not wrong, some years ago there is an option using a shell wrapper to store all pf logs in ASCII format and redirect all of them to a central syslog server (published