search for: paramprob

...using ipf and basically filter for bogus networks on the way in and out. I allow everything out keeping state, and allow this in: pass in proto icmp from any to any icmp-type squench group 200 pass in proto icmp from any to any icmp-type timex group 200 pass in proto icmp from any to any icmp-type paramprob group 200 pass in quick proto tcp from any port > 1023 to any port = smtp group 200 pass in quick proto udp from any port > 1023 to any port = domain group 200 on these ports i run qmail and tinydns i was a bit sloppy by leaving these w/out a password figuring they can't login anyway....