Re: What am I doing wrong.

2008-12-05 Thread Ted Unangst
On Fri, Dec 5, 2008 at 4:17 PM, Anathae Townsend <[EMAIL PROTECTED]> wrote: > Checking the owner/group/permissions on my source tree, it's root (as > expected) wsrc (as expected) and rw-r--r--. Okay... the wsrc group only > has read permissions, that would explain why my user can't execute the > co

What am I doing wrong.

2008-12-05 Thread Anathae Townsend
Not bothering with the asbestos suit, but still expecting some flamage. On a fresh install of OpenBSD 4.4 current as of 08-11-14, I created my own user with group of wheel, and secondary group of wsrc. Login is set as "staff". /etc/sudoers is set to allow members of wheel to execute it after ent

Re: route-to doesnot work for me - what am i doing wrong

2008-10-15 Thread Siju George
On Tue, Oct 14, 2008 at 3:50 PM, Stuart Henderson <[EMAIL PROTECTED]> wrote: >>> pass in quick on $int_if route-to ( $ext_if2 $ext_ifgw ) from >>> to any keep state >>> >>> to route requests from hosts in through the rl2 internet >>> connection but it does not seem to work. > > you should route

Re: route-to doesnot work for me - what am i doing wrong

2008-10-14 Thread Charlie Clark
Hi Siju, isn't this: pass in quick on $int_if route-to ( $ext_if2 $ext_ifgw ) from to any keep state meant to be like this: pass in quick on $int_if route-to { ( $ext_if2 $ext_ifgw ) } from to any keep state Regards, Charlie Siju George wrote: Hi, I have firewall sk0 - LAN Interface

Re: route-to doesnot work for me - what am i doing wrong

2008-10-14 Thread Siju George
Thanks I figured it out. I missed the nat rule for $ext_if2 --Siju On Tue, Oct 14, 2008 at 1:03 PM, Siju George <[EMAIL PROTECTED]> wrote: > Hi, > > I have firewall > > sk0 - LAN Interface > rl1 - Primary internet connection > rl2 - secondary Internet connection > > I have a line in pf.conf > > p

Re: route-to doesnot work for me - what am i doing wrong

2008-10-14 Thread Stuart Henderson
> If you don't use quick option on rules, then it will be last matching rule > applied, but if you you use quick option, the first matching rule will be > applied, the rest will be ignored. So, if you use quick option the filter > order would be; picking just the "in...on $int_if" rules in o

Re: route-to doesnot work for me - what am i doing wrong

2008-10-14 Thread Insan Praja SW
On Tue, 14 Oct 2008 14:33:19 +0700, Siju George <[EMAIL PROTECTED]> wrote: Hi Siju, I think there are several things you need to understand more about pf quick option. If you don't use quick option on rules, then it will be last matching rule applied, but if you you use quick option, the fir

route-to doesnot work for me - what am i doing wrong

2008-10-14 Thread Siju George
Hi, I have firewall sk0 - LAN Interface rl1 - Primary internet connection rl2 - secondary Internet connection I have a line in pf.conf pass in quick on $int_if route-to ( $ext_if2 $ext_ifgw ) from to any keep state to route requests from hosts in through the rl2 internet connection but it do

PF & tcp.established - what am I doing wrong ?

2006-12-15 Thread bards1888
I'm trying to protect my mail server by adding some rudimentary options to inbound SMTP connections on my 3.9 stable firewall. I have the following in my pf.conf; SMTP_OPT = "(max 10, source-track rule, max-src-states 1, max-src-nodes 7, tcp.established 60)" pass in quick on $INTERNET_IF prot