Re: pf / binat question

2002-12-18 Thread johan
hell: i restore the generic kernel and it still doesn t work nothing else has changed i used this kernel and this nat.conf for 6 last months and it was running perfectly... - This mail sent through IMP: http://horde.org/imp/

Re: pf rule confusion

2002-12-18 Thread Daniel Hartmeier
On Wed, Dec 18, 2002 at 09:26:47AM -0800, Bryan Irvine wrote: I have an openbsd (3.1) natted firewall, with 3 nic's rl0 = 64.1.201.130 sis = 192.168.0.1 ep1 = 192.233.103.186 (it's being used as an internal address don't ask, long irritating story) i'm trying to set it up to A

RE: directpc.com question... (deals with pf... )

2002-12-18 Thread Eric Hays
Anyone know what IP Addresses directpc.com uses? Directpc.com209.61.131.171 Trying 209.61.131 at ARIN OrgName:Rackspace.com OrgID: RSPC NetRange: 209.61.128.0 - 209.61.191.255 CIDR: 209.61.128.0/18 NetName:RSPC-NET-2 NetHandle: NET-209-61-128-0-1 Parent:

Real DMZ

2002-12-18 Thread Bryan Irvine
Ok, It's time for me to expand my knowledge of firewalling a little bit. I've got it down pretty good where I can to NAT and port forwarding and blocking rules and such... Now, how can I setup an ip range to use (CIDR'd) that is publicly accessible? I have a /27 network, and it would be nice to

Re: directpc.com question... (deals with pf... )

2002-12-18 Thread jolan
On Wed, Dec 18, 2002 at 08:09:15PM -0600, Shawn Mitchell wrote: That's why I'm blocking those Winblows ports...I know what they are.. but it's just the pure number of full network scans attempted. well, that's what worms do. i can't say i'm surprised. I'm not talking about their website

Re: directpc.com question... (deals with pf... )

2002-12-18 Thread jolan
On Wed, Dec 18, 2002 at 11:00:17PM -0600, Shawn Mitchell wrote: If the user wants to use their sat connection, you have to do one of two things. 1) know their IP Addresses that they give to their users. 2) don't block spoofed packets and hope a hacker dosn't take over one of your customers