Re: PF Seems To Reload Its Default Rules Unexpectedly

2009-03-11 Thread Hilco Wijbenga
It happened again... 2009/3/9 J.C. Roberts : > As for whether or not the assigned IP address you get from your ISP via > DHCP will become a problem really depends on the netmask and default > route they give you along with the IP. > > If your internal network is 192.168.151.* > And your ISP gives

Re: PF Seems To Reload Its Default Rules Unexpectedly

2009-03-09 Thread Hilco Wijbenga
2009/3/9 J.C. Roberts : > On Mon, 9 Mar 2009 09:07:51 -0700 Hilco Wijbenga > wrote: > >> 2009/3/9 J.C. Roberts : >> > On Sun, 8 Mar 2009 16:01:57 -0700 Hilco Wijbenga >> > wrote: >> > >> >> I have pf running on my firewall box and I'

Re: PF Seems To Reload Its Default Rules Unexpectedly

2009-03-09 Thread Hilco Wijbenga
2009/3/9 J.C. Roberts : > On Sun, 8 Mar 2009 16:01:57 -0700 Hilco Wijbenga > wrote: > >> I have pf running on my firewall box and I'm experiencing some strange >> behaviour. After several hours (this may even be 24 hours) of >> functioning normally, pf seems t

Re: PF Seems To Reload Its Default Rules Unexpectedly

2009-03-08 Thread Hilco Wijbenga
2009/3/8 Jason Dixon : > On Sun, Mar 08, 2009 at 04:01:57PM -0700, Hilco Wijbenga wrote: >> Hi all, >> >> I have pf running on my firewall box and I'm experiencing some strange >> behaviour. After several hours (this may even be 24 hours) of >> functioning no

acpitz0: THRM: failed to read _TMP

2009-03-08 Thread Hilco Wijbenga
Hi all, I'm seeing the following messages logged to the console: acpitz0: THRM: failed to read _TMP acpitz0: THRM: failed to read temp (both lines are repeated many times). It looks like OpenBSD (4.4) is unable to read the CPU temperature which would explain why my previously whisper quiet box

PF Seems To Reload Its Default Rules Unexpectedly

2009-03-08 Thread Hilco Wijbenga
Hi all, I have pf running on my firewall box and I'm experiencing some strange behaviour. After several hours (this may even be 24 hours) of functioning normally, pf seems to reload its default rules which means that from that point on all traffic is blocked. A simple "pfctl -f /etc/pf.conf" fixes

Re: NAT, Firewall & pf

2009-02-24 Thread Hilco Wijbenga
2009/2/23 johan beisser : > I make no claims this works or will work for you. It's a simple rewrite of > what you claimed to want (NAT for outbound traffic, for example). > > ext_if="sk0" > int_if="sk1" > udp_services="{ domain, ntp}" > > set skip on lo > set block-policy return > scrub in > > nat

Re: NAT, Firewall & pf

2009-02-24 Thread Hilco Wijbenga
2009/2/23 Jason Dixon : > ## > 00 ext_if = "sk0" > 01 int_if = "sk1" > 02 > 03 set skip on lo > 04 > 05 scrub in > 06 > 07 nat on $ext_if from $int_if:network to any -> ($ext_if:0) > 08 > 09 block in log all > 10 pass in on $int_if inet keep s

Re: NAT, Firewall & pf

2009-02-24 Thread Hilco Wijbenga
2009/2/23 Jason Dixon : > On Mon, Feb 23, 2009 at 05:58:20PM -0800, Hilco Wijbenga wrote: >> Hi all, >> >> I've been trying to get a simple firewall system up-and-running in >> OpenBSD. I have "The Book of PF" and "Secure Architectures >> wit

Re: NAT, Firewall & pf

2009-02-24 Thread Hilco Wijbenga
2009/2/24 Jorge Enrique Valbuena Vargas : > 1. You need to enable routing on your BSD box > edit /etc/sysctl.conf and change the 0 (zero) with 1 > > net.inet.ip.forwarding=1 B B B B # 1=Permit forwarding (routing) of IPv4 > packets My problem isn't that basic. :-) Forwarding is permitted. That

NAT, Firewall & pf

2009-02-23 Thread Hilco Wijbenga
Hi all, I've been trying to get a simple firewall system up-and-running in OpenBSD. I have "The Book of PF" and "Secure Architectures with OpenBSD" so I thought it would be very simple. Well, we're two weeks later now and still no firewall. :-) The pf rules I found in those books don't seem to wor