Best pf practices to limit ddos attacks

2018-07-16 Thread Walt
o keep anything on our network from being used as part of a botnet or in order to reduce the severity of an incoming ddos attack. Walt ​Sent with ProtonMail Secure Email.​

Re: Best pf practices to limit ddos attacks

2018-07-16 Thread Walt
On July 16, 2018 8:14 PM, Ax0n a...@h-i-r.net wrote: > On Mon, Jul 16, 2018, 19:39 Walt neurobot...@protonmail.ch wrote: > > > I'm not sure what would be useful for when we are the target of an attack.  > > It seems to me that when the attack is going on, our bandwid

Re: "no route to host" from pkg_add

2018-08-10 Thread Walt
7;t seem to make much difference. And then there is the kea side for prefix delegations. Since I can just put the IPv6 gateway into /etc/mygate, it's not a problem from the OpenBSD machines and it will never be a big issue if I can't get a properly sized allocation of addresses from AT&T. Walt

Re: Conundrum with pf

2018-08-20 Thread Walt
nf isn't there by default -- if you need it, you have to create it yourself. Walt

Re: How many IPs can I block before taking a performance hit?

2020-08-12 Thread Walt
any of our network for a little while. During that time, connections to a service at 192.0.2.20 from our network are still permitted since it isn't entirely impossible that the interpretation of it being a network scan is an error. Walt

Bootable installation partition on a hard drive?

2020-09-07 Thread Walt
rive and mirror all configuration files to it so that if anything happens to the main drive, I can turn around and boot from the second and be up and running almost immediately. Thanks, Walt Sent with [ProtonMail](https://protonmail.com) Secure Email.

Re: Bootable installation partition on a hard drive?

2020-09-07 Thread Walt
‐‐‐ Original Message ‐‐‐ On Monday, September 7, 2020 4:48 AM, Stuart Henderson wrote: > On 2020-09-07, tom ryan tomry...@gmail.com wrote: > > > On 7/9/20 5:07 pm, Walt wrote: > > > > > I have a new server on order that should arrive in a few days. > &

Re: PF firewall for desktop

2019-05-26 Thread Walt
‐‐‐ Original Message ‐‐‐ On Friday, May 24, 2019 2:30 PM, Jean-Francois Simon wrote: > Hi, > > Out of interest, I'd like to let you know a specific use of OpenBSD with > PF, in virtualbox, 2 virtual network card Bridged to physical NIC, and > building up a subnet with NAT and hence runni

Userland ppp: Change route failed -- no such process

2008-06-04 Thread walt
Someone else reported this same problem back in 2005 but never got a response, so I'll try again. I've been running FreeBSD (userland ppp) on my old i486 firewall machine for several years and decided to try OpenBSD 4.3 on the same machine. I have it working well now (pppoe/DSL) except when ppp

Re: Userland ppp: Change route failed -- no such process

2008-06-06 Thread walt
walt wrote: Someone else reported this same problem back in 2005 but never got a response, so I'll try again. I've been running FreeBSD (userland ppp) on my old i486 firewall machine for several years and decided to try OpenBSD 4.3 on the same machine. I have it working well now

Re: Userland ppp: Change route failed -- no such process

2008-06-07 Thread walt
Antti Harri wrote: On Fri, 6 Jun 2008, walt wrote: I've been running FreeBSD (userland ppp) on my old i486 firewall machine for several years and decided to try OpenBSD 4.3 on the same machine. Uhm, any particular reason for not running the kernel mode pppoe client? Wouldn't it be