Tagged Questions
1
vote
0answers
68 views
Perform Cisco's DNS Doctoring on FreeBSD
How to perform a change in the DNS response from a DNS server to be a different IP address than the DNS server actually answered for a given name?
...
2
votes
1answer
283 views
NAT and source IP filtering in PF, using OpenBSD >= 4.7
I just read a book about PF (The Book Of PF, No Starch), but there's one question not answered by it.
If I have a gateway machine using two interfaces, $int_if and $ext_if, and I NAT the packages ...
2
votes
2answers
485 views
Can I use divert as an alternative to ipfw fwd?
I would like to lead some traffic through a transparent proxy (which actually is on another server and connected with an ssh tunnel).
Normally I could do this:
ipfw add forward localhost,8080 tcp ...
2
votes
0answers
501 views
pfsense long ping to google
I have a pfsense box set up. What happens is I set a rule so I can't hit the admin interface 192.168.3.1 from the box.
With the rule enabled
--- www.l.google.com ping statistics ---
2 packets ...
3
votes
1answer
271 views
What port range will ipfw nat use for aliasing?
I am using ipfw nat with the following config
ipfw -q nat 1 config if em0
Which TCP and UDP ranges will the NAT choose its alias ports from? I would like it to be always from the range 49152–65535, ...
3
votes
2answers
394 views
FreeBSD kernel nat or natd?
As I notice more often with FreeBSD, there are always plenty of ways that lead to some specific goal.
After figuring out which firewall I wanted (I choose ipfw) I now am completely insecure about ...
3
votes
1answer
405 views
Letting NFS through a FreeBSD PF firewall
I'm trying to configure my firewall (PF) on FreeBSD to let NFS traffic through.
I know that NFS uses both TCP and UDP to connect to the client along with a bunch of daemons that use random port ...
2
votes
1answer
290 views
Is there any PF log parser for FreeBSD
I am runing FreeBSD 8 stable with PF as firewall, I am looking for any tool for parsing PF log's.
5
votes
1answer
621 views
ipfw : Traffic Shaping
I'm not sure what but it seems like I'm doing something wrong... my objective is to be able to limit some of my traffic, to be exact www traffic. One of my clients os running what's called a ...
