Re: pf and apache

2013-03-01 Thread Matt Morrow
Thanks everyone. Seems to be working from outside, so for now I'll just go with the direct ip of the server when I need to access it internally. On Fri, Mar 1, 2013 at 11:22 AM, Pawel Jurusz wrote: > Hello, > > If You are using only redirections, source host will receive SYN-ACK > from 192.168.1.

Re: pf and apache

2013-03-01 Thread Pawel Jurusz
Hello, If You are using only redirections, source host will receive SYN-ACK from 192.168.1.70, but there was not previously SYN to this address, so source host will send TCP Reset. Solution may be: pass in on $int_if proto tcp from $int_if:network to any port 80 rdr-to 192.168.1.70 pass out on $i

Re: pf and apache

2013-03-01 Thread Beto
Andy, We can see the result of running tcpdump -n -e -ttt -i pflog0 host 192.168.1.70 Thanks 2013/3/1 Matt Morrow > I'm doing the rdr-to on both interfaces. But, I have other ports that rdr > just fine internally, so that's why I think something else is going on. For > example, I have ssh on

Re: pf and apache

2013-03-01 Thread Matt Morrow
I'm doing the rdr-to on both interfaces. But, I have other ports that rdr just fine internally, so that's why I think something else is going on. For example, I have ssh on 6699 and I can access that both internally and externally. On Thu, Feb 28, 2013 at 11:46 PM, Andy Bradford wrote: > Thus sai

Re: pf and apache

2013-02-28 Thread Andy Bradford
Thus said Matt Morrow on Thu, 28 Feb 2013 23:07:30 -0600: > Apache is running on a slackware box. I can access apache just fine > internally by using the ip address of that server (192.168.1.70), but > if I access the ip of the openbsd box (192.168.1.60) I just get an > error that the ser

Re: pf and apache: to stop a scripter

2010-02-02 Thread James Peltier
--- On Tue, 2/2/10, Lars Nooden wrote: > From: Lars Nooden > Subject: Re: pf and apache: to stop a scripter > To: > Cc: "Jacob Yocom-Piatt" , "OpenBSD general usage list" > Received: Tuesday, February 2, 2010, 6:58 AM > > Jacob Yocom-Piatt wrote: &g

Re: pf and apache: to stop a scripter

2010-02-02 Thread Lars Nooden
> Jacob Yocom-Piatt wrote: >> there is a website protected by pf and running apache on a recent >> openbsd snapshot that needs to be protected against scripting attacks. >> i can configure both pf and apache to help block this behavior but am >> not familiar with

Re: pf and apache: to stop a scripter

2010-02-01 Thread Bret S. Lambert
On Mon, Feb 01, 2010 at 09:10:31AM -0600, Chris Bennett wrote: > Jacob Yocom-Piatt wrote: > >there is a website protected by pf and running apache on a recent > >openbsd snapshot that needs to be protected against scripting > >attacks. i can configure both pf and apac

Re: pf and apache: to stop a scripter

2010-02-01 Thread Chris Bennett
Jacob Yocom-Piatt wrote: there is a website protected by pf and running apache on a recent openbsd snapshot that needs to be protected against scripting attacks. i can configure both pf and apache to help block this behavior but am not familiar with the best practices for such configurations

pf and apache: to stop a scripter

2010-02-01 Thread Jacob Yocom-Piatt
there is a website protected by pf and running apache on a recent openbsd snapshot that needs to be protected against scripting attacks. i can configure both pf and apache to help block this behavior but am not familiar with the best practices for such configurations. the situation is that a