Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | OpenBSD PF problems. |
|---|---|
| Date: | Wed, 23 Mar 2005 02:51:37 +0800 |
Hi there everybody this is my first post, it might be off-topic, but here we go:
I am having a problem with a UDP service that I am running, in that nobody can
connect, these are my PF rules:
#-------
# Macros
#-------
Content not important
scrub in all
#--------
# NAT
#--------
nat on $ext_if from $int_if:network to any ($ext_if)
rdr on $ext_if proto udp from any to ($ext_if) port 6666 -> $udpserver port
6666
#--------
# Filters
#--------
block log all
pass quick on lo0 all
block drop in quick on $ext_if from $private_networks to any
block drop out quick on $ext_if from from any to $private_networks
pass in on $ext_if from any to $udpserver port 6666
pass in on $int_if from any to $udpserver port 6666
pass in on $int_if from $int_if:network to any keep state
pass out on $int_if from any to $int_if:network keep state
pass out on $ext_if proto tcp all modulate state flags S/SA
pass out on $ext_if proto {udp, icmp} all
pass out on $ext_if proto esp all keep state
Can anybody tell me what the problem is? I really want to know about the
mistake that I am making so all verbose tips would be appreciated. Also is this
PF rule secure?
Frankie
--
______________________________________________
Check out the latest SMS services @ http://www.linuxmail.org
This allows you to send and receive SMS through your mailbox.
Powered by Outblaze
--------------------------------------------------------------------------
FREE Download - The Future in Desktop Firewalls is Available Now
NEW NetOp Desktop Firewall, the world's first driver-centric
firewall software - protecting your laptops and corporate PCs at
ring-zero! NetOp features sophisticated process & application
control, centralized management and multiple network user profiles -
NetOp is able to increase security when mobile users plug back
into your network. Step into a more secure future - Try it FREE
http://www.securityfocus.com/sponsor/CrossTec_firewalls_050315
--------------------------------------------------------------------------
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | RE: Most secure small home office firewall under $700, Shaun Bertrand |
|---|---|
| Next by Date: | PIX vs its competitors, Vladamir |
| Previous by Thread: | Route Priority on a PIX? OS 6.3, Conlan Adams |
| Next by Thread: | Re: OpenBSD PF problems., Rafael Henchen |
| Indexes: | [Date] [Thread] [Top] [All Lists] |