1
vote
1answer
249 views

FreeBSD ipfw keepstate vs setup keep-state

A lot of examples where people are using keep-state with setup together. For example: ipfw add 1 allow tcp from any to me 22 setup keep-state Because of setup, this rule will allow only SYN ...
2
votes
0answers
104 views

FreeBSD pf firewall, new connections severly delayed when nating

I have a newly setup fbsd 9.1 with pf, which itself doesn't experience any slowness when for example downloading a debian iso from my local debian repo (ftp.se.debian.org). Any machine behind it, ...
0
votes
2answers
236 views

PF and types of NAT(Network Address Translation)

As you know, at least 3 types of NAT are used. Of course i need to two types of them.DNAT and SNAT. DNAT : hiding server behind NAT, SNAT : hiding your client behind NAT. Question: I read a quick ...
1
vote
0answers
127 views

Perform Cisco's DNS Doctoring on FreeBSD

How to perform a change in the DNS response from a DNS server to be a different IP address than the DNS server actually answered for a given name? ...
4
votes
2answers
718 views

NAT and source IP filtering in PF, using OpenBSD >= 4.7

I just read a book about PF (The Book Of PF, No Starch), but there's one question not answered by it. If I have a gateway machine using two interfaces, $int_if and $ext_if, and I NAT the packages ...
2
votes
2answers
989 views

Can I use divert as an alternative to ipfw fwd?

I would like to lead some traffic through a transparent proxy (which actually is on another server and connected with an ssh tunnel). Normally I could do this: ipfw add forward localhost,8080 tcp ...
2
votes
0answers
739 views

pfsense long ping to google

I have a pfsense box set up. What happens is I set a rule so I can't hit the admin interface 192.168.3.1 from the box. With the rule enabled --- www.l.google.com ping statistics --- 2 packets ...
3
votes
1answer
398 views

What port range will ipfw nat use for aliasing?

I am using ipfw nat with the following config ipfw -q nat 1 config if em0 Which TCP and UDP ranges will the NAT choose its alias ports from? I would like it to be always from the range 49152–65535, ...
3
votes
2answers
707 views

FreeBSD kernel nat or natd?

As I notice more often with FreeBSD, there are always plenty of ways that lead to some specific goal. After figuring out which firewall I wanted (I choose ipfw) I now am completely insecure about ...
3
votes
2answers
678 views

Letting NFS through a FreeBSD PF firewall

I'm trying to configure my firewall (PF) on FreeBSD to let NFS traffic through. I know that NFS uses both TCP and UDP to connect to the client along with a bunch of daemons that use random port ...
2
votes
1answer
450 views

Is there any PF log parser for FreeBSD

I am runing FreeBSD 8 stable with PF as firewall, I am looking for any tool for parsing PF log's.
5
votes
1answer
873 views

ipfw : Traffic Shaping

I'm not sure what but it seems like I'm doing something wrong... my objective is to be able to limit some of my traffic, to be exact www traffic. One of my clients os running what's called a ...