search for: pflog

...using interface names with ipv6 enabled in pf firewall. >Fix: 1. Start network_ipv6 before pf in /etc/rc.d. mohacsi@mignon2> diff -ruN pf.orig pf --- pf.orig Wed Jun 13 12:43:30 2007 +++ pf Wed Jun 13 12:43:53 2007 @@ -4,7 +4,7 @@ # # PROVIDE: pf -# REQUIRE: root FILESYSTEMS netif pflog pfsync +# REQUIRE: root FILESYSTEMS netif pflog pfsync network_ipv6 # BEFORE: routing # KEYWORD: nojail 2. However to protect services during boot I recommend adding pfboot in /etc/rc.d. See /etc/rc.d/pfboot reference at NetBSD http://cvsweb.netbsd.org/bsdweb.cgi/src/etc/rc.d/pf_boot an...

...ting ports opened for a web server which I have totally closed now but when I chose option 10 (filter log) on pfSense I get all of this type of traffic (note that it was only 1 single IP and once I blocked that one it was like opening a can full of bees with all different IPs): tcpdump: WARNING: pflog0: no IPv4 address assigned tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on pflog0, link-type PFLOG (OpenBSD pflog file), capture size 96 bytes 000000 rule 70/0(match): block in on vr1: 221.132.34.165.33556 > 69.90.78.53.52229: tcp 20 [bad hdr length 0 - t...

list: cvsuped and build world failed today on pflogd. cc -O2 -fno-strict-aliasing -pipe -Wall -Wmissing-prototypes -Wno-uninitialized -Wstrict-prototypes -I/usr/src/sbin/pfctl/../../contrib/pf/pfctl -DENABLE_ALTQ -Wsystem-headers -Werror -Wall -Wno-format-y2k -Wno-uninitialized -c /usr/src/sbin/pfctl/../../contrib/pf/pfctl/pfctl_radix.c cc -O2 -fno...

...connecting from the firewall itself, which should be a no-no, but the result is the same from a host behind it. What makes this so strange, is that there is no apparent cause of failure or success. I was almost sure that it was a pf issue that was dropping some UDP packets, but I have watched the pflog and that doesn't seem to be the case, especially because it works sometimes. Does anyone have any insight into this? Thanks

...daemon running (installed from ports) pf.conf says pass quick on lo0 all and when i'm trying to rsh to ipcad that is listening on anna# netstat -a|grep shell tcp4 0 0 localhost.shell *.* LISTEN anna# rsh -l root localhost show ip accounting i got no replay, but pflog says the following: anna# tcpdump -n -e -ttt -x -i pflog0 host 127.0.0.1 000034 rule 0/3(short): pass out on lo0: IP 127.0.0.1.514 > 127.0.0.1.643: . ack 30 win 65535 0x0000: 4600 002c 6605 4000 0306 11c5 7f00 0001 F..,f.@......... 0x0010: 7f00 0001 0100 0000 0202 0283 812...

...torage - Requires scbus and da device ums # Mouse options GEOM_MIRROR options GEOM_LABEL options GEOM_ELI device crypto device cryptodev device hifn device tun device tap device pf device pflog options COMPAT_LINUX options ALTQ options ALTQ_CBQ # Class Bases Queueing options ALTQ_RED # Random Early Detection options ALTQ_RIO # RED In/Out options ALTQ_HFSC # Hierarchical Packet Scheduler options ALTQ_PRIQ...

...# only i686 support options SCHED_ULE # I think now it's the default options QUOTA options MAC options AUDIT options KDTRACE_HOOKS options DDB_CTF options SMP device apic device pf device pflog device pfsync device atapicam options VESA 3) And my three core dumps are: ------------------------------------------------------------------------------------ vmcore.2: MAY be the core created when I plugged in the USB disk while the kernel was loading (sorry guys...

...) device fwip # IP over FireWire (RFC 2734,3146) device dcons # Dumb console driver device dcons_crom # Configuration ROM for dcons #sound device sound device snd_hda #cd burner device atapicam #3945ABG wireless - additional items device wpi #firewall -pf device pf device pflog device pfsync #firewall options options ALTQ options ALTQ_CBQ # Class Bases Queuing (CBQ) options ALTQ_RED # Random Early Detection (RED) options ALTQ_RIO # RED In/Out options ALTQ_HFSC # Hierarchical Packet Scheduler (HFS...

Hi, [I have added freebsd-security to recipient list as I consider this issue a security risk] Paul Schenkeveld wrote: > Hello, > > On Fri, Jul 14, 2006 at 01:26:38PM +0300, Ari Suutari wrote: >> Hi, >> >> Does anyone know if there are any plans to bring >> pf boot-time protection (ie. /etc/rc.d/pf_boot and >> related config files) from NetBSD to FreeBSD

A while back, I submitted a patch for PR kern/124621, which allows the mounting of an ext2(3) filesystem created with an inode size other than 128. The e2fsprogs' default is now 256, so file systems created on newer Linux distributions or with the port will not be mountable. I was hopeful this would get committed in time for 7.1-RELEASE (and 6.4-RELEASE), however the PR remains open. If

I just updated to RELENG_7 from 6.2 and I'm running into some really annoying issues with jerky mouse movement and skipping sound. This seems to be similar to: Re: SCHED_4BSD in RELENG_7 disturbs workflow This happens both with 4BSD and ULE. I seems to happen when I'm compiling ports and a new cc/bzip2/sh process fires off (I'm just watching top), I'll get the skip/freezeup.

Hello -STABLE@, So I've seen this situation seemingly randomly on a number of both physical 9.1 boxes as well as VMs for I would say 6-9 months at least. I finally have a physical box here that reproduces it consistently that I can reboot easily (ie; not a production/client server). No matter what I do: reboot shutdown -p shutdown -r This specific server will stop at "All buffers