PF rule match only packets for local machine

2012-01-05 Thread Robert Wolf
Hallo all, May I ask any PF professional for his advice? I have openbsd router with more interfaces doing routing. It does not work as a firewall so there is only one rule pass flags any no state. Because of many hack-scripts doing SSH logins and filling logs I would like to block every SSH

Re: PF rule match only packets for local machine

2012-01-05 Thread Rafal Bisingier
Hi, On Thursday, 05 Jan 2012 at 09:00 CET Robert Wolf r.wolf.c...@gmail.com wrote: table OutNetworks const { } pass quick proto tcp from OurNetworks to any port 22 no state pass in quick proto tcp from any to any port rdr-to 127.0.0.1 port 22 block quick proto tcp from any to

Re: PF rule match only packets for local machine

2012-01-05 Thread Gregory Edigarov
On Thu, 5 Jan 2012 09:21:16 +0100 Rafal Bisingier ra...@man.poznan.pl wrote: Hi, On Thursday, 05 Jan 2012 at 09:00 CET Robert Wolf r.wolf.c...@gmail.com wrote: table OutNetworks const { } pass quick proto tcp from OurNetworks to any port 22 no state pass in quick proto

Re: PF rule match only packets for local machine

2012-01-05 Thread favar
Hi, start with block rule without quick, then apply pass rules. something like this: table OutNetworks const { } block proto tcp from any to any port 22 pass quick proto tcp from OurNetworks to any port 22 no state pass in quick proto tcp from any to any port rdr-to 127.0.0.1 port 22

Re: ro / and /etc on mfs - clarification

2012-01-05 Thread Jan Stary
On Jan 04 21:18:51, Jiri B wrote: On Thu, Jan 05, 2012 at 01:12:43AM +, Stuart Henderson wrote: What's the advantage in having /etc on mfs? Why not just remount / readonly after booting and mount it read/write when you need to make changes? If you're looking at something more than this

Re: ro / and /etc on mfs - clarification

2012-01-05 Thread Stuart Henderson
On 2012-01-05, Jiri B ji...@devio.us wrote: On Thu, Jan 05, 2012 at 01:12:43AM +, Stuart Henderson wrote: What's the advantage in having /etc on mfs? Why not just remount / readonly after booting and mount it read/write when you need to make changes? If you're looking at something more

Re: PF rule match only packets for local machine

2012-01-05 Thread Stuart Henderson
On 2012-01-05, Gregory Edigarov g...@bestnet.kharkov.ua wrote: On Thu, 5 Jan 2012 09:21:16 +0100 Rafal Bisingier ra...@man.poznan.pl wrote: Hi, On Thursday, 05 Jan 2012 at 09:00 CET Robert Wolf r.wolf.c...@gmail.com wrote: table OutNetworks const { } pass quick proto tcp

Merhaba

2012-01-05 Thread Burcu S.
E-postay} d|zg|n gvremiyorsan}z buraya t}klay}n.

Re: PF rule match only packets for local machine

2012-01-05 Thread Robert Wolf
Hallo all, thank you for your answers. table OutNetworks const { } pass quick proto tcp from OurNetworks to any port 22 no state pass in quick proto tcp from any to any port rdr-to 127.0.0.1 port 22 block quick proto tcp from any to any port 22 But of

Help with rc.local scripts

2012-01-05 Thread keith
Hi, I have build a graylog2 server with obsd 5.0 x64 but can't figure out how to get the some of the programs to auto start, They all start when run as root but only the mogod one starts up at boot time. Can anyone help ? if [ -x /etc/rc.d/mongod ]; then echo -n ' MongoDB';

Re: Help with rc.local scripts

2012-01-05 Thread Zé Loff
Aren't you missing a few '' at the end of some of the start commands? I'd say that's the problem... On Jan 5, 2012, at 4:43 PM, keith wrote: Hi, I have build a graylog2 server with obsd 5.0 x64 but can't figure out how to get the some of the programs to auto start, They all start when run as

Re: Help with rc.local scripts

2012-01-05 Thread Otto Moerbeek
On Thu, Jan 05, 2012 at 04:43:30PM +, keith wrote: Hi, I have build a graylog2 server with obsd 5.0 x64 but can't figure out how to get the some of the programs to auto start, They all start when run as root but only the mogod one starts up at boot time. Can anyone help ? if [ -x

Taller de Procesos, Manual de Políticas y Procedimientos

2012-01-05 Thread Ing. Gabriela Sanchez
[IMAGE] Pms de Mixico prestigiada firma de Capacitacisn presenta: Identificacisn de Procesos y Desarrollo de un Manual de Polmticas y Procedimientos 31 de Enero, Guadalajara, Jalisco. !Reciba la informacisn completa! Por favor responda este e-mail con los datos siguientes Empresa Nombre Telifono

Re: ro / and /etc on mfs - clarification

2012-01-05 Thread Chris Cappuccio
how about this scenario: 1. tar cvf /tmp/etc.tar /etc 2. mount_mfs -s 20M swap /etc 3. tar xvf /tmp/etc.tar -C / Jiri B [ji...@devio.us] wrote: scenario: = * mkdir /proto_etc * cp -Rp /etc/* /proto_etc * mkdir /pre_etc * cd /pre_etc * for i in boot.conf rc ttys passwd

Re: ro / and /etc on mfs - clarification

2012-01-05 Thread Chris Cappuccio
Stuart Henderson [s...@spacehopper.org] wrote: On this type of system I just do rw;vi /whatever;ro where rw/ro are simple shell scripts that run mount -uw / and mount -ur / respectively, I don't usually find this a problem. Or you could use a wrapper which does similar and commits the

Re: Where do I buy Lemote Loongson/Godson MIPS hardware? (was Re: Longsoon/Godson MIPS boxes, where to buy?)

2012-01-05 Thread Chris Cappuccio
It anyone wants to go right to Lemote and start selling on Amazon or direct in your area, they were priced at $280/ea in 10 qty about 2 years ago. So they're probably much cheaper now. And it sounds like they ship in single qty now, too. Johan Beisser [j...@caustic.org] wrote: On Tue, Dec 27,

Re: Where do I buy Lemote Loongson/Godson MIPS hardware? (was Re: Longsoon/Godson MIPS boxes, where to buy?)

2012-01-05 Thread Richard Thornton
they seem to be well made but debian linux is unstable. On Thu, Jan 5, 2012 at 4:49 PM, Chris Cappuccio ch...@nmedia.net wrote: It anyone wants to go right to Lemote and start selling on Amazon or direct in your area, they were priced at $280/ea in 10 qty about 2 years ago. So they're

Re: Odd Network Lockups

2012-01-05 Thread Nick Templeton
Okay, so finally I got around to disabling the vether/tun/bridge interfaces and mbuf usage still seems to be climbing. Here's the output from 'netstat -m' and 'systat mbuf' from the morning of Jan. 3rd (an hour or so after a reboot): 79 mbufs in use: 47 mbufs allocated to data 24

Re: ro / and /etc on mfs - clarification

2012-01-05 Thread Kevin Chadwick
On Thu, 5 Jan 2012 13:47:43 -0800 Chris Cappuccio wrote: /dev needed to be MFS for sshd to work, it wanted to update metadata on tty devices, i'm not sure if that's still the case anymore. It is though you can use sftp or static dev entries for an admin on his tod. --- Kc

OpenBSD mirror obsd.cec.mtu.edu shutting down

2012-01-05 Thread Nick Holland
A heads-up to those that care... Due to local support issues, I will soon have to shut down the OpenBSD mirror, obsd.cec.mtu.edu, which has served as a second-level mirror for the last almost four years. To discourage its use as a feeder for third-level mirrors, I'll be shutting down rsync for

bc4318

2012-01-05 Thread Nikolas Slivka
Welcome! Where i can find information about BC4318 wifi card is working under OpenBSD 5.0? Thanks!

Re: bc4318

2012-01-05 Thread Tomas Bodzar
On Thu, Jan 5, 2012 at 10:00 PM, Nikolas Slivka damagec...@freemail.hu wrote: Welcome! Where i can find information about BC4318 wifi card is working under OpenBSD 5.0? Read first (last) log on this page http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/Attic/if_bcw_pci.c for 43xx Here is

Re: bc4318

2012-01-05 Thread Ted Unangst
On Fri, Jan 06, 2012, Tomas Bodzar wrote: On Thu, Jan 5, 2012 at 10:00 PM, Nikolas Slivka damagec...@freemail.hu wrote: Welcome! Where i can find information about BC4318 wifi card is working under OpenBSD 5.0? Read first (last) log on this page

Westpac Notice

2012-01-05 Thread Westpac Online
You have a Westpac Bank Account Notice. To view, click on the ACCOUNTS tab and then click on Statements to verify your transaction.

pcn0: packet spilled into next buffer

2012-01-05 Thread Indunil Jayasooriya
Hi mics, I just installed OpenBSD 5 64 bit as a VM on Redhat Linux KVM . Then, I got below error? pcn0: packet spilled into next buffer I searched the internet . then, I got below URL http://www.google.lk/url?sa=trct=jq=packet spilled into next

Re: bc4318

2012-01-05 Thread Tomas Bodzar
On Fri, Jan 6, 2012 at 8:22 AM, Ted Unangst t...@tedunangst.com wrote: On Fri, Jan 06, 2012, Tomas Bodzar wrote: On Thu, Jan 5, 2012 at 10:00 PM, Nikolas Slivka damagec...@freemail.hu wrote: Welcome! Where i can find information about BC4318 wifi card is working under OpenBSD 5.0? Read