portsnap in cron and firewall

2008-09-05 Thread Albert Shih
Hi all I've some servers for internal use. On those servers I have some pf (or ipfw) rule to deny any connection from inside to outside. Long time ago when ports tree is update with cvs, I'm using something like pf command to open inside -- outside connection cvsup portupgrade --fetch-only

RE: portsnap in cron and firewall

2008-09-05 Thread Sean Cavanaugh
Date: Fri, 5 Sep 2008 16:14:02 +0200 From: [EMAIL PROTECTED] To: freebsd-questions@freebsd.org Subject: portsnap in cron and firewall Hi all I've some servers for internal use. On those servers I have some pf (or ipfw) rule to deny any connection from inside to outside. Long time

Re: portsnap in cron and firewall

2008-09-05 Thread Albert Shih
Le 05/09/2008 à 11:33:59-0400, Sean Cavanaugh a écrit Date: Fri, 5 Sep 2008 16:14:02 +0200 From: [EMAIL PROTECTED] To: freebsd-questions@freebsd.org Subject: portsnap in cron and firewall Hi all I've some servers for internal use. On those servers I have some pf (or ipfw) rule

RE: portsnap in cron and firewall

2008-09-05 Thread Sean Cavanaugh
Date: Fri, 5 Sep 2008 17:43:44 +0200 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] CC: freebsd-questions@freebsd.org Subject: Re: portsnap in cron and firewall Le 05/09/2008 à 11:33:59-0400, Sean Cavanaugh a écrit Date: Fri, 5 Sep 2008 16:14:02 +0200 From: [EMAIL PROTECTED

Re: portsnap in cron and firewall

2008-09-05 Thread Albert Shih
Le 05/09/2008 à 11:51:57-0400, Sean Cavanaugh a écrit --- Yes I known. That's why I'm asking you how can I make portsnap through the cron and opening firewall just before he going to make the connection. Of

Re: portsnap in cron and firewall

2008-09-05 Thread RW
On Fri, 5 Sep 2008 16:14:02 +0200 Albert Shih [EMAIL PROTECTED] wrote: Hi all I've some servers for internal use. On those servers I have some pf (or ipfw) rule to deny any connection from inside to outside. Long time ago when ports tree is update with cvs, I'm using something like

Re: portsnap in cron and firewall

2008-09-05 Thread RW
On Fri, 5 Sep 2008 16:49:26 +0100 RW [EMAIL PROTECTED] wrote: On Fri, 5 Sep 2008 16:14:02 +0200 Albert Shih [EMAIL PROTECTED] wrote: But now with portsnap cron (that's mean random sleep) I don't known when the system try to connect outside. You can do this sleep `jot -r 1 0 3599`