Re: NAT with one interface

2013-04-21 Thread fekete
On 2013-04-21, Ted Unangst t...@tedunangst.com wrote: On Sun, Apr 21, 2013 at 00:47, Stuart Henderson wrote: I've changed the FAQ to say interfaces rather than adapters to make it more obvious that there's no problem doing this with vlans. Strictly speaking, you don't even need vlans. You

NAT with one interface

2013-04-20 Thread fekete
According to the pf FAQ page for network address translation: An OpenBSD system doing NAT will have at least two network adapters, one to the Internet, the other to your internal network. I have a VPS with two IP addresses, one for the Internet and one for a VLAN. I have another VPS just on the

Blocking traceroute

2013-04-18 Thread fekete
I want to create a Tor hidden server, which people SSH into over Tor. Users could discover the IP server by running traceroute. To stop this I have added a simple rule to pf.conf based off helping traceroute. Otherwise they could just build or run their own binary traceroute. block on em0 inet

Re: Blocking traceroute

2013-04-18 Thread fekete
I've just been thinking about how I will block everything and still have Tor. I will have Tor on the NAT and have it accept connections from the hidden server, and users can make outgoing connections through Tor only using socat. Thinking about it, the server will simply have no Internet and the

user websites on apache chroot

2013-04-18 Thread fekete
I want to avoid using Apache 2.x for my server and want a chroot but where users can have their own webpages. It doesn't need to be automated I'm happy to edit httpd.conf to add each virtual server. I'd also like php to run as that user, can I run php via cgi on Apache 1.3?