Re: simple PF question

2008-06-22 Thread Lars Noodén
Peter N. M. Hansteen wrote: ... Hm. Might actually be a good idea to expose learners to tcpdump a tad earlier. I used PF on OpenBSD for a small polytechnic course with the help of Peter's book. For most it was a first introduction to any of these tools or supporting tools or hands-on

Re: simple PF question

2008-06-21 Thread Peter N. M. Hansteen
Robert Gilaard [EMAIL PROTECTED] writes: All the time I had the following entries in my pf.conf for my Desktop system. However, as I've bought this pf book that was lately released, I begin to suspect that these rules are way to liberal. If I only want to be able to browse the web and

simple PF question

2008-06-20 Thread Robert Gilaard
Hi folks, All the time I had the following entries in my pf.conf for my Desktop system. However, as I've bought this pf book that was lately released, I begin to suspect that these rules are way to liberal. If I only want to be able to browse the web and maybe use ssh-client, how should I

Re: simple PF question

2008-06-20 Thread Calomel
Robert, You rule looks ok. You may want to add a variable for the port number so you can add or delete them as needed. Something like... ### Ports AllowOUT={22, 80, 443} ### Pass out interface pass out on $int_if proto tcp from ($int_if) to any port $AllowOUT modulate state flags S/SA Hope

Re: simple PF question

2008-06-20 Thread Martin Toft
On Fri, Jun 20, 2008 at 02:10:52PM -0700, Robert Gilaard wrote: Hi folks, All the time I had the following entries in my pf.conf for my Desktop system. However, as I've bought this pf book that was lately released, I begin to suspect that these rules are way to liberal. If I only want to