Re: Bot? / pf question

2011-01-05 Thread Mark Moellering
On 05-Jan-11 1:44 PM, Kevin Wilcox wrote: On 5 January 2011 13:25, David Brodbeckg...@gull.us wrote: On Wed, Jan 5, 2011 at 8:15 AM, Kevin Wilcoxkevin.wil...@gmail.com wrote: To really see what your machine is doing, consider taking a look at the network flows. pfflowd, netflowd, ipaudit

Re: Bot? / pf question

2011-01-05 Thread Ryan Coleman
Yes and no. You want to leave ftp open, too, just in case for port upgrading/downloading, plus you would want to do monitoring across the wire (Nagios or something, maybe?). You could, though, do a dual-NIC setup and have one be a private network LAN for the servers if you aren't already

Re: Bot? / pf question

2011-01-05 Thread Adam Vande More
On Wed, Jan 5, 2011 at 1:48 PM, Mark Moellering m...@msen.com wrote: That's an excellent point. A span port from the upstream switch/router Since I am going to be setting up a mail server sometime next week and have to keep things like this in mind; would it make sense to run pf and block

pf question

2008-09-09 Thread Scott Bennett
I'm just starting to play around with pf to get it to handle NAT for a LAN, and I've just discovered that I don't know how to get pf to reload /etc/pf.conf after I make changes to it. pfctl -d -e doesn't do it, and neither does pfctl -d; pfctl -e. Is there a way to do it besides rebooting?

RE: pf question

2008-09-09 Thread joeb
: Tuesday, September 09, 2008 1:18 PM To: freebsd-questions@freebsd.org Subject: pf question I'm just starting to play around with pf to get it to handle NAT for a LAN, and I've just discovered that I don't know how to get pf to reload /etc/pf.conf after I make changes to it. pfctl -d -e

Re: pf question

2008-09-09 Thread Artis Caune
On Tue, Sep 9, 2008 at 8:17 AM, Scott Bennett [EMAIL PROTECTED] wrote: I'm just starting to play around with pf to get it to handle NAT for a LAN, and I've just discovered that I don't know how to get pf to reload /etc/pf.conf after I make changes to it. pfctl -d -e doesn't do it, and

Re: pf question

2008-09-09 Thread Bruce Cran
On Tue, 9 Sep 2008 00:17:39 -0500 (CDT) Scott Bennett [EMAIL PROTECTED] wrote: I'm just starting to play around with pf to get it to handle NAT for a LAN, and I've just discovered that I don't know how to get pf to reload /etc/pf.conf after I make changes to it. pfctl -d -e doesn't do

pf question

2006-01-12 Thread Vasile Cristescu
does pf has something like ipfw -d show ? ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: pf question

2006-01-12 Thread Dick Davies
On 12/01/06, Vasile Cristescu [EMAIL PROTECTED] wrote: does pf has something like ipfw -d show ? I don't know. What does 'ipfw -d show' do? -- Rasputin :: Jack of All Trades - Master of Nuns http://number9.hellooperator.net/ ___

Re: pf question

2006-01-12 Thread Richard C. Isaacson
Are you asking if you can print out rules? pfctl -sr -v Dick Davies wrote: On 12/01/06, Vasile Cristescu [EMAIL PROTECTED] wrote: does pf has something like ipfw -d show ? I don't know. What does 'ipfw -d show' do? -- Rasputin :: Jack of All Trades - Master of Nuns

Re: pf question

2006-01-12 Thread Matthew Seaman
Richard C. Isaacson wrote: Dick Davies wrote: On 12/01/06, Vasile Cristescu [EMAIL PROTECTED] wrote: does pf has something like ipfw -d show ? I don't know. What does 'ipfw -d show' do? Are you asking if you can print out rules? pfctl -sr -v '-d' in ipfw includes the dynamic

Re: identd and pf question

2005-08-24 Thread Giorgos Keramidas
On 2005-08-23 22:31, Matt Rechkemmer [EMAIL PROTECTED] wrote: After banging my head for awhile, and trying other daemons (oidentd, pidentd), I tried disabling pf with pfctl -d. Voila, clients can connect. I re-enabled pf with pfctl -e and things are broken again. Show us your pf.conf file,

identd and pf question

2005-08-23 Thread Matt Rechkemmer
Hello all, I'm currently working with a FreeBSD 5.4 system running pf and ident2. When my users attempt to connect to an IRC network, and ident is requested my ident daemon never replies. I see the inbound packets with tcpdump, but never anything out. After banging my head for awhile, and

pf question

2005-03-08 Thread J.D. Bronson
First my ifconfig -A: # ifconfig -A bge0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 address: media: Ethernet autoselect (100baseTX full-duplex) status: active inet 192.168.82.1 netmask 0xff00 broadcast 192.168.82.255 inet

Re: pf question

2005-03-08 Thread Giorgos Keramidas
On 2005-03-08 06:49, J.D. Bronson [EMAIL PROTECTED] wrote: First my ifconfig -A: # ifconfig -A bge0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 address: media: Ethernet autoselect (100baseTX full-duplex) status: active inet