Re: NAT, Firewall & pf

2009-02-24 Thread Jorge Enrique Valbuena Vargas
1. You need to enable routing on your BSD box edit /etc/sysctl.conf and change the 0 (zero) with 1 net.inet.ip.forwarding=1# 1=Permit forwarding (routing) of IPv4 packets In order to enable routing without restart the BSD type: sysctl -w net.inet.ip.forwarding=1 On Mon, Feb 23, 2009

Re: NAT, Firewall & pf

2009-02-25 Thread Jorge Enrique Valbuena Vargas
Hi, these simple rules works for me ! Remember how good is the learning process ! I hope this can help ! ext_if="vr0" dmz_if="sis1" int_if="sis0" ext_ip="123.45.67.89" #Don't Filter on the loopback interface set block-policy drop set skip on lo #NORMALIZACION DE PAQUETES scrub in all scrub

Re: Pf with multi gateways

2013-02-13 Thread Jorge Enrique Valbuena Vargas
HI, take a look at : http://openbsd.org/faq/faq6.html#Multipath On Wed, Feb 13, 2013 at 10:15 AM, What you get is Not what you see < wygin...@gmail.com> wrote: > Hi > I have a pf box with 4 links (a multihomed box ) and some services like > dns,dhcp on it. > I have set /etc/mygate to one of the

Re: Multiple ISP-connections/Routing/Packet filtering

2012-01-10 Thread Jorge Enrique Valbuena Vargas
Hello Torsten ! If i understood you well, the answer to your question is here ! http://www.openbsd.org/faq/pf/pools.html Under the section Load Balancing outgoing traffic, or take a look at: http://www.openbsd.org/faq/faq6.html#Multipath There are good examples there ! I hope this can help

Re: Multiple ISP-connections/Routing/Packet filtering

2012-01-10 Thread Jorge Enrique Valbuena Vargas
Hello ! I read again your mail and now i'm lost ! You Wrote: "How can I force my Extl. FW to reply on exactly the same interface it > > had been requested on? For example I am running OpenVPN(1194/UDP) > > between my HomeOffice (Z=Client) and the Intl. FW(=Server). Alike I > > would appretiate

OpenBSD 5.0 Dual ISP , Load balance and Incoming Connections

2012-06-14 Thread Jorge Enrique Valbuena Vargas
Hello List ! I jus want to share my experience with OpenBSD configuring two ISP, load balance and Incoming Connections , maybe it can help. Problem: 1. Two (2) ISP connections for internet access from my LAN to the Internet 2. Remote access to a server in my DMZ from Internet Solution to Prob

Re: Soekris lan1641 and Jetway J7F4K-1G5D

2011-09-07 Thread Jorge Enrique Valbuena Vargas
; in this case for example. > > All of my boxen on the internal network are > 172.16.218.0/24 > > default gateway is 172.16.218.1/24 > > > > > On Tue, Sep 6, 2011 at 11:31 AM, Jorge Enrique Valbuena Vargas < > jvalbue...@gmail.com> wrote: > >> Which ip a

Re: Soekris lan1641 and Jetway J7F4K-1G5D

2011-09-07 Thread Jorge Enrique Valbuena Vargas
Ok, let me understand You have four ports on your soekris lan 1641, each port has an ip address in the 172.16.218.0/24 lan ? is that right for example: sis0 172.16.218.100 sis1 172.16.218.101 sis2 172.16.218.102 and so on for sis3 is that right ? Each port with a path cord ? In my experience

Re: reconfigure squid on packages

2010-03-26 Thread Jorge Enrique Valbuena Vargas
Hi, If you read the configure file which is in the source code of squid , you can learn how to do that Other source of info: http://wiki.squid-cache.org/SquidFaq/SquidAcl On Thu, Mar 25, 2010 at 7:54 PM, sonjaya wrote: > hi ... > > i using squid in my openbsd box , i need reconfigure squi

Re: VPN Clients Behind OpenBSD 4.6 PF NAT

2010-05-10 Thread Jorge Enrique Valbuena Vargas
HI, can you send the pf.conf and sysctl.conf files ? On Mon, May 10, 2010 at 2:56 PM, Don Reis wrote: > Hey guys, I got a little problem: > > > > First let me say I am running a fresh install of OpenBSD 4.6 and besides > turning on IP forwarding in sysctl and installing the pf.conf example fr

Re: VPN Clients Behind OpenBSD 4.6 PF NAT

2010-05-12 Thread Jorge Enrique Valbuena Vargas
ass in inet proto icmp all icmp-type $icmp_types keep state > > pass in quick on $int_if > - > > -Original Message- > From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of > Jorge Enrique Val

Re: OpenBSD 4.7 pictures

2010-05-15 Thread Jorge Enrique Valbuena Vargas
Gracias ! On Thu, May 13, 2010 at 5:07 AM, Wolf Stettler wrote: > http://pubwww.hsz-t.ch/~wstettle/ > > > Martin Toft wrote: > >> http://pics.martintoft.dk/Events/OpenBSD%204.7%2020100508/dscn2548.jpg >> >> :-D

4.6 Packages

2010-05-19 Thread Jorge Enrique Valbuena Vargas
Hola List ! I just try to download some packages for OpenBSD 4.6 , but they are not available. By now only 4.7, 4.5 and 4.4 are available. There is something wrong with the server ? Ok, just to let you know. Kind Regards, Jorge V j...@sting:~$ date Wed May 19 18:38:44 COT 2010 [demime 1.01d

Re: 4.6 Packages

2010-05-19 Thread Jorge Enrique Valbuena Vargas
t 7:03 PM, Neal Hogan wrote: > On Wed, May 19, 2010 at 6:39 PM, Jorge Enrique Valbuena Vargas > wrote: > > Hola List ! > > > > I just try to download some packages for OpenBSD 4.6 , but they are not > > available. > > > > By now only 4.7, 4.5 and 4.4 are

Re: Spanish language resources for OpenBSD

2009-11-19 Thread Jorge Enrique Valbuena Vargas
The web site is in spanish and with good info ! http://www.openbsdcolombia.org/ On Thu, Nov 19, 2009 at 6:31 PM, Marco Peereboom wrote: > On Mon, Nov 16, 2009 at 07:17:18PM -0600, Chris Bennett wrote: > > I am now going to be setting up occasionally but regularly OpenBSD > > machines for peop

Re: How do I change PF rules to enable ftp downloads?

2009-10-01 Thread Jorge Enrique Valbuena Vargas
Hello, Take a look at : http://www.openbsd.org/faq/pf/ftp.html Maybe it can help ! On Thu, Oct 1, 2009 at 3:52 PM, AG wrote: > Hello > > I want to download via ftp, but am unable to do so. I believe that it > would have something to do with my pf.conf file in my firewall, so have > listed t

Re: PF simple rdr help?

2009-10-08 Thread Jorge Enrique Valbuena Vargas
Hi Andres, take a look at the examples at: http://www.openbsd.org/faq/pf/rdr.html Remember to use the *pass in *and *pass ou*t rules I use the rdr feature when i have a webserver on my DMZ. on port 8081 or whatever port you want Public IP = 1.2.3.4 ext_if=rl0 dmz_if=rl1 webserver= 5.6.7.8 r

Re: PF simple rdr help?

2009-10-08 Thread Jorge Enrique Valbuena Vargas
On Thu, Oct 8, 2009 at 7:03 AM, Jorge Enrique Valbuena Vargas < jvalbue...@gmail.com> wrote: > Hi Andres, > > > take a look at the examples at: > > http://www.openbsd.org/faq/pf/rdr.html > > Remember to use the *pass in *and *pass ou*t rules > > I use the rdr f

Re: Network problems with OpenBSD 4.6 on a IBM xSeries 335

2009-10-22 Thread Jorge Enrique Valbuena Vargas
What happend if you change the bge1 interface to other network, example, 10.4.1.2 , for me, two interfaces on the same network, sometimes produces a strange behavior. I hope this can help ! On Thu, Oct 22, 2009 at 3:18 PM, Mauro Rezzonico wrote: > I get myself an IBM xSeries 335 model 8676 on

Re: Anyway to force IP to be assigned only if MAC matches?

2009-10-28 Thread Jorge Enrique Valbuena Vargas
You can do that using the arp(8) command # arp -s 10.0.0.2 00:90:27:bb:cc:dd permanent take a look at the man page of the command I hope this can Help ! On Wed, Oct 28, 2009 at 5:29 PM, Andres Salazar wrote: > Hello, > > I Have dhcp enabled on my LAN which assigns an IP according to the > cli

Re: IP Aliasing with DHCP

2009-11-11 Thread Jorge Enrique Valbuena Vargas
Hugo, No sure about a real answer to your question, but what i try will be: Set manually two of the dynamic addresses on my interfaces,other idea would be use two network interfaces, use the trunk ( man trunk ) and again set manually the two ip addresses ... I hope this can help ! On Wed, Nov 1

Re: How to Install OpenBSD 4.6 with Ubuntu 9.10 and Windows 7 (Openbsd 4.6 with GRUB2)

2009-11-15 Thread Jorge Enrique Valbuena Vargas
Thank You ! On Sat, Nov 14, 2009 at 11:49 PM, Andres Genovez wrote: > Hi friends I want to share this information, if anyone is migrating from > Linux(Ubuntu) to OpenBSD. > Hope will be helpful. > > http://www.crice.org/?q=node/364 > > Andres > > www.crice.org