Bridge PF with spamd but getting RST packet

owing when i did a tcpdump on fxp1 02:18:13.451441 61.65.255.238.13868 > 127.0.0.1.8025: S 3447735838:3447735838(0) win 16384 0,nop,nop,timestamp 470257134 0> 02:18:13.451566 127.0.0.1.8025 > 61.65.255.238.13868: R 0:0(0) ack 3447735839 win 0 Any idea?. Thanks, Edy

Re: Bridge PF with spamd but getting RST packet

port 8025 rdr pass on $ext_if proto tcp from to any port smtp -> $spamvip port 8025 rdr pass on $ext_if proto tcp from ! to any port smtp -> $spamvip port 8025 Thanks, Edy Can Erkin Acar wrote: Edy <[EMAIL PROTECTED]> wrote: Hi, I am trying to configure spamd on the current b

pf http reporting tool

Hi, I am wondering if there is any tool which is able to show the attacks that has passed through PF and present it on a web based? Thank you Edy

spamd deny users from using the SMTP

address into the whitelist before hand because users could be connected from anywhere. Thanks, Edy

Re: VPN solutions for OpenBSD to Windows

Hi Peter, Have you look at OpenVPN? Please check out this document http://blog.innerewut.de/articles/2005/07/04/openvpn-2-0-on-openbsd Cheers, Edy [EMAIL PROTECTED] wrote: Hi gang, I'm looking for peoples' experiences and advice for setting up a VPN between OpenBSD (I will be

Re: spamd deny users from using the SMTP

Hi Mike, MTA is Qmail and it is running on a separate server ... Thanks, Edy Mike Erdely wrote: Edy wrote: Spamd is running fine now but when an user trying to send out email using the SMTP he is getting Server temporary failure please try again later error message. They have to retry

Re: spamd deny users from using the SMTP

Good Day, port 587 (submission) has been working great and it is enabled on Qmail :) Thank you. Edy Mike Erdely wrote: Edy wrote: Spamd is running fine now but when an user trying to send out email using the SMTP he is getting Server temporary failure please try again later error message

Anyone setup mod_security on bridge PF (transparent firewall) ?

Hi, I am wondering if anyone has configured PF transparent firewall to perform mod_security? Assuming you have 4 interfaces ext_if and int_if setup as bridge state_if is for pfsync mgmt_if has an IP address and able to route to internet Cheers, Edy

brconfig: bridge0: Operation not permitted

gnated fxp0 flags=ab port 1 ifpriority 128 ifcost 20 discarding role designated Addresses (max cache: 100, timeout: 240): any idea? Thanks, edy

Re: brconfig: bridge0: Operation not permitted

Issue resolved! It seems like in 4.0 current you are not allowed to have hellotime parameter in /etc/bridgename.bridge0 by removing that sentence from the file stops the error message. Cheers, Edy Edy wrote: Hi I am trying to execute the following command from CLI (as root user) brconfig

auto start mysql and snort OpenBSD 4.0

Hi I have googled and read on the man pages but something is missing here. For example i have the following in my /etc/rc.local if [ X"${mysql}" == X"YES" -a -x /usr/local/bin/safe_mysqld ]; then echo -n ' mysqld'; /usr/local/share/mysql/mysql.server start fi if [ X"${snort}" == X"YES" -a

Re: auto start mysql and snort OpenBSD 4.0

Daniel, I have been to that site already and it does not start mysql when the system rebooted but i could start mysql by using the command. Cheers, -e Daniel Ouellet wrote: Edy wrote: Hi I have googled and read on the man pages but something is missing here. For example i have the

Re: auto start mysql and snort OpenBSD 4.0

or Mysql to complete (set it to 20seconds) if [ -x /usr/local/bin/snort ]; then /usr/local/bin/snort -D -d -i fxp0 -c /etc/snort/snort.conf -u _snort -g _snort > /dev/null & echo -n ' snort' fi Cheers, -e Edy wrote: Daniel, I have been to that site already and it does not s

create an ISO based on the running system

Good Day, I have setup a box OpenBSD 4.0 with bridge firewall, spamd, snort with mysql + BASE and snort2pf. I would like to create an ISO image of the box so that I could install the exact setup on any system. Is there a document which explains on how to achieve this? Thank you -e PS. Wish

Re: pf - altq shaping http download

Please disregard this email. Sent to wrong mailing list :) Edy wrote: Hi, I am thinking to implement altq to limit the download speed to our web server. Ideally I would like to limit everyone let's say to 30Kbps/thread and every source IP is allowed to open 1 download connection only.

pf - altq shaping http download

tribute it evenly. Thanks! Edy

OpenNTPD on OBSD 3.4

Hi, How to install OpenNTPD on OBSD 3.4 ? I've read this from newsgroup but can't understand. Please advice. the native OpenBSD version needs yo live in the src tree under usr.sbin/ntpd/ for make install to work. you can just manually copy binary and manpages into place tho.

pkg_create error

Hi all, Recently, my OBSD 3.4 can not do any of port installation. Please advice. -edy- ===> Faking installation for ntop-1.1 /usr/bin/install -c -o root -g bin -m 6550 ntop /usr/ports/net/ntop/w-ntop-1.1/fake-i386/usr/local/sbin/ntop /usr/bin/install -c -o root -g bin -m 444 ntop.8 /

Re: pkg_create error

elete use-rel-suffix compress # Ports Collection. OpenBSD-ports tag=. is there anyway to get the old ports back to its place ? e.g. extract ports.tar.gz from the CD-ROM ? tia. From: Stuart Henderson <[EMAIL PROTECTED]> To: Edy Purnomo <[EMAIL PROTECTED]>, misc@openbs

Re: pkg_create error

ED]> Reply-To: [EMAIL PROTECTED] To: Edy Purnomo <[EMAIL PROTECTED]> CC: misc@openbsd.org Subject: Re: pkg_create error Date: Thu, 22 Sep 2005 09:23:02 +0200 On Thu, Sep 22, 2005 at 02:08:39AM +, Edy Purnomo wrote: > argh! > > yes, it's true, i did update the ports by ty

iptables vs pf

any program that can proof what he says ? thanks. -edy-

help: smmsp

hi, i keep having the "smmsp" daemon shows on the ps aux list. so it fills up my clientmqueue directory. how to rid off this thing ? i've sendmail disabled already. thanks in advance. -edy-

help: pf & pop3

hi, trying to: block all pop3 to outbound connection BUT allow one client AND inbound (local mail server) connection. any suggestion ? -edy-