similar to: New overhead and MPU features in HTB

Hello, I current have a FreeBSD 4.8 bridge firewall that sits between 7 servers and the internet. The servers are being attacked with syn floods and go down multiple times a day. The 7 servers belong to a client, who runs redhat. I am trying to find a way to do some kind of syn flood protection inside the firewall. Any suggestions would be greatly appreciated. -- Ryan James ryan@mac2.net

Hi, first sorry for cross-posting but I thought this patch might interest -CURRENT users as well as people concerned by security. I wrote a patch that integrates ProPolice/SSP into FreeBSD, one step further than it has been realized so far. It is available here : http://tataz.chchile.org/~tataz/FreeBSD/SSP/ Everything is explained on the web page, but I will repeat some informations here.

Hi there, I'm still running 6.2 on various servers without any tweaks (GENERIC kernel, binary updates via freebsd-update etc.) but lots of ports (apache, postgresql, diablo-jdk etc.) and would like to use stack smashing protection in order to harden my boxes and avoid many potential exploits. I've known about ProPolice/SSP for a while now (from the Gentoo world) and am aware that

I was wondering if there's any non-executable stack patch for FreeBSD's kernel. I searched in google but all I got was some questions in freebsd-security back from 2001 and an answer saying someone heard about a project like this, but no information at all. Is there any patch like PaX or Openwall available for FreeBSD? I dont want to discuss if its useless or not since there're a

Hi list, I''m new to this list, I just subscribed because I have some ackward about IPRoute2. First, while playing with NetFilter'' "MARK" target, I met a weird behaviour once I tried to use this marks in the RPDB : the packets where successfully marked, but it seemed that RPDB didn''t succed in matching them (for those who already know the answer, I only used

Hi, I dare to send you this very small patch that defines LOCKED_PASSWD_STRING for the FreeBSD operating system. The manpage had been unclear about this for a long time, up to 5.x days. Since 6.x, it has been made clearer, and thanks to Ceri Davies who highlighted this feature in OpenSSH, I made this patch. I hope this will reach OpenSSH source tree. This is not a big deal and I would add

Hello. I once read somewhere that it's possible to limit SSH pubkeys to 'tunnel-only'. I can't seem to find any information about this in any of the usual places. I'm going to be deploying a few servers in a couple of days and I'd like them to log to a central server over an SSH tunnel (using syslog-ng) however I'd like to prevent actual logins (hence

Hi, I am trying to setup ipsec tunnel between Freebsd (host1) and Linux (host2) systems.And I also interested in executing some ipsec test cases( Like TAHI conformance test suite) on the same connection. Please, suggest me some details regarding this setup and Specify any materials which can be obtained from from any locations(site).. I have enabled IPSec support for FreeBSD (4.11 Release) and

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I''m using HTB to shape my outgoing traffic over a ADSL-link with PPPoE with a nominal bandwidth of 128kbit/s. My goal is to favour small packets like ACKs and interactive services like ssh; in other words, I want to achieve low lantency. If there are some big packets going over the wire, everything works fine. But if there are

We are running samba on a number of HP systems running HP/UX 11.00. We moved from samba version 2.0.7. to samba version 2.2.3a. We have about 200-400 smbd's running on one host. Samba version 2.2.3a was running without any problems for about two weeks. But now on two different servers indepent of each other, the file table was full. We found out that ONE smbd used about 5000 !!

Dear all, Maybe somebody can help me to understand my problem: Inside a R script, I try to export the graphic results of 'bwplot' in some jpeg files. The data source ('main') is a mix of numeric and factor values the "analysis_bwplot()" contains the loops (i and j) and calls the "analysis_var_var_bwplot()" method. "analysis_var_var_bwplot()" uses

This might not be the correct group to post to, but maybe somone could tell me wich groupd it should go to (as I haven't found any good ones). I have Windows XP machines with IEE1394 (FireWire) LAN. Windows has built in support for OHCI compliant cards and can use them as a normal NIC, but with 400Mbit. This sollution is cheap and alot faster than normal a 100Mbit LAN. The problem is now

Hi list, (Please Cc: me in your replies because I'm not subscribed to this list.) While trying to build lukemftpd staticaly on FreeBSD, I got a link-time error. Libssh.a indeed provides the "xmalloc" symbol (I suppose there are more). I wonder if this is whether intentional or not. It is a very common function name, and I think it would be worth renaming it to something like

Hello, I'm Paul Semel, a French student in computer science. I am currently in my 4th year (1st year of graduate school) at EPITA and enrolled in the system and security laboratory of the school. I would be very interested in working on a LLVM project during this GSoC. Implementing a PoC for an unsequenced modification checker in CSA helped me discover LLVM. However, I would like to

hi, I am running openssh sourec code for ssh server.It is working successfully.daemon is running,but the problem is when conncting to this server from remote system i got the following errors. buffer_get_ret: trying to get more bytes 1 than in buffer 0 buffer_get: buffer error plese give me suggestions on this

Hi everyone, Using ARRAY_SIZE improves the code readability. I used coccinelle (I made a change to the array_size.cocci file [1]) to find several places where ARRAY_SIZE could be used instead of other macros or sizeof division. I tried to divide the changes into a patch per subsystem (excepted for staging). If one of the patch should be split into several patches, let me know. In order to reduce

Hi All, I wrote a very crude and simple AsmParser for my backend. llvm-tablegen also generates asm-matcher .inc file without any error. I have included the .inc file in my class for AsmParser. However, while building llvm, in linking stage for LTO, i am getting error - undefined reference to functions - ComputeAvailableFeatures, MatchInstructionImpl, MatchRegisterName and

I've been trying as follows: Environment: 1. GNU/Linux 2.6 i686 - Ubuntu 6.06 2. Wine 0.9.29 Scenario: Trying to run an MFC 8 GUI application w/ CLR support: - Failed to run, given error message: "LdrInitializeThunk msvcm80d.dll failed to initialize, aborting" Tried workarounds: - Install MS .Net Framework (tried both 1.1. and 2.0) -- CrossOver Installation Wizard - failed

Hey, On 02/20/2018 11:51 PM, Paul Semel wrote: > Hello, > > > I'm Paul Semel, a French student in computer science. I am currently in > my 4th year (1st year of graduate school) at EPITA and enrolled in the > system and security laboratory of the school. > > I would be very interested in working on a LLVM project during this > GSoC. Implementing a PoC for an

Anybody here having any problems with nufone? Calls are not going thru, when trying to call their customer service number it doesn't go thru. When trying to resolve www.nufone.net I get (sourec: http://www.dnsstuff.com/tools/lookup.ch?name=nufone.net&type=A ): How I am searching: Searching for nufone.net A record at j.root-servers.net [192.58.128.30]: Got referral to M.GTLD-SERVERS.net.