Re: pf pauses in sending traffic

2004-09-16 Thread Henning Brauer
* Claudio Jeker [EMAIL PROTECTED] [2004-09-14 14:02]: I think you got hit by a fxp bug that was fixed after 3.5. The problem was that somehow the fxp card did no longer generate an interrupt and so the watchdog timer reseted the card after 20 seconds. This only happened on havily loaded links

Re: Penetration Testing

2004-09-16 Thread m0nst3r
Well if you want to pen-test, there are a range of tools available, depends on your experience, and breadth of knowledge too. On the automated front you could try using Nessus, but again, interpretation of the results will depend on your knowledge and experience. For example you may want to

Carp address !as source IP

2004-09-16 Thread Steven S.
Greetings, I'm experiencing an interesting problem and I'm googled out. Trying to get mail from a firewall which is the carp master to an internally hosted e-mail server. The mail server is using a private IP address and the firewall is using a binat rule to translate a public carp IP to the

source tracking radix entries

2004-09-16 Thread Jeff Wilson
I'm running 3.5 -stable with dynamic entries in radix tables, and I want to do source tracking per IP. Is this possible? I have a 20-bit subnet behind pf and I've broken authenticated IPs into 8 23-bit radix tables. (I am not running NAT, but I will use anonymous IP's for my example): ruleset

RE: Carp address !as source IP

2004-09-16 Thread Steven S.
Jason Opperisano wrote: On Thu, 2004-09-16 at 08:58, Steven S. wrote: the above seems to be the result of a blocked packet with set block-policy return or a block return ... rule ...SYN goes out but SYN-ACK coming back in gets a RST... I have no such policies. It is my understanding that