Re: packets with SYN and FIN set not discarded! what does scrub actually do ?

2004-01-25 Thread Trevor Talbot
On Saturday, Jan 24, 2004, at 09:42 US/Pacific, Per-Olov Sjöholm wrote: A friend yesterday scanned my firewall with nessus. One thing he found was that nessus said: The remote host does not discard TCP SYN packet which have the FIN flag set. Depending on the kind of firewall you are using, an

Re: packets with SYN and FIN set not discarded! what does scrub actually do ?

2004-01-25 Thread Daniel Staal
--As off Saturday, January 24, 2004 6:42 PM +0100, Per-Olov Sjöholm is alleged to have said: Hi ! A friend yesterday scanned my firewall with nessus. One thing he found was that nessus said: The remote host does not discard TCP SYN packet which have the FIN flag set. Depending on the kind of

redefine macros for authpf.rules???

2004-01-25 Thread Volker Kindermann
Hi, I'm just making my first experiences with authpf (OBSD 3.4 release) and found something strange: do I have to redefine macros in /etc/authpf/authpf.rules that are already defined in /etc/pf.conf (with anchor authpf at the end of pf.conf)? I tried to use macros such as $ext_if but while

Re: redefine macros for authpf.rules???

2004-01-25 Thread Daniel Hartmeier
On Sun, Jan 25, 2004 at 01:42:49PM +0100, Volker Kindermann wrote: so my question: isn't it possible to use macros of pf.conf in the authpf.rules file? No, /etc/pf.conf isn't parsed when authpf loads users' authpf rulesets, so the macros there are not defined during parsing. Except for the

Dual transparent bridge configuration problem with pf. SOLVED.

2004-01-25 Thread Mario Lopez
Hi all ;), I finally solved my problem with pf filtering a dual bridge configuration, I have uploaded to my website the pf.conf file in case anybody wants to check it, maybe it is usefull for somebody in similar situation as me. www.mariolopez.cx/OpenBSD/pf.conf If anyone finds any errores

synproxy mysteriously stopped working???

2004-01-25 Thread Scott L. Burson
Hi, About 3 weeks ago I built a firewall using OpenBSD 3.4. It was working fine. Yesterday we had an extended power outage and I had to shut everything down and then turn it back on afterwards. Suddenly I could no longer receive incoming TCP connections for FTP, HTTP, SMTP, SSH, etc. Outgoing