10-21-2009
openbsd-pf
hello ,
I wondered if anyone could assist me in writing a simple packet filter firewall on my OpenBSD v4.5.
All I intend doing is to have two firewalling machine on a separate network :
192.168.1.1
ext_if = xl0 (dhcp) // Internet interface
int_if=xl1 // Internatl interface
192.168.2.20
ext_if = rl0 = 192.168.1.120 (static IP) //
int_if=rl1 = 192.168.2.20
My problem is how I could have the first machine passing the webtraffic to the second firewall machine?
Please I wondered if anyone could send me a brief explanation on this. I am not running a webserver or services to the outside world.
thanks
Matt
10 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
Please help. I have downloaded the openbsd 2.9 snapshot from ftp.openbsd.org. the following files were downloaded from the snapshot dir. ( the whole dir. was downloaded ) base29,bsd,bsd.rd,cdrom29.fs,cksum,comp29,etc29,all three floppy images,game29,index,install.ata,install.chs... (11 Replies)
Discussion started by: Blunt_Killer
11 Replies
2. Filesystems, Disks and Memory
Can't setup OpenBSD 3.4 with Maxtor Diamond Plus 9 80Gb ATA/133 HDD... Install process stops at hardware initialize, before installing... :confused:
Any Comments...
Thanks (2 Replies)
Discussion started by: bsdave
2 Replies
3. BSD
Im trying to gather some info to set up snort on openbsd 3.2, has anyone out there managed to get it up and running ? My initial attempts seem to be quite below par (4 Replies)
Discussion started by: malcontent
4 Replies
4. BSD
hi
OK. I don't know exactly what I did to system!
The system is OpenBSD 3.5.
It is 200MMX, 16MB ram 1.2 + 2.4 GB HDD. The system was running well. But a few days ago I try to unpack a big tar.gz file and the system uses most the cpu and ram for this. While the system unpacking the file I try to... (4 Replies)
Discussion started by: fnoyan
4 Replies
5. BSD
OpenBSD is best OS in the world! - I'm talking about security :)
After 10 years popularity in OpenBSD, was founded just!!!!!!!!!!!!! just one security hole!
You can download OpenBSD from there .
However, do you know a better OS? (1 Reply)
Discussion started by: zylwyz
1 Replies
6. BSD
ok these questions may be a little silly but I just started using OpenBSD as I came from Linux...
1. How do I make my desktop in X all snazzy like, I have wallpapers that need to be used. while I admit it will mainly be used for things I wont need a wallpaper for, you just never know :p, im... (4 Replies)
Discussion started by: Siphter
4 Replies
7. BSD
I've just installed OpenBSD on my laptop (IBM Thinkpad T42) and since this is my first time with wireless networking in OpenBSD I'm a bit lost.
What I would like to do is connect to a wireless network using WEP or WPA. Where do I place the key and essid? (3 Replies)
Discussion started by: Timmy66
3 Replies
8. BSD
Hello!
Can anyone tell me how to make software RAID1 on openbsd 4.2.
I try by some manuals but have no results.Maybe is somewhere good manual directly to openbsd 4.2 version?
tnx (1 Reply)
Discussion started by: kasparens
1 Replies
9. BSD
I am an eight year Linux user and after getting into an argument with someone about OpenBSD overiding my theory that OS security is 50% OS and 50% admin skill, I decided to try OpenBSD for myself. I've tried BSDs before and haven't been able to get into them for day to dy use, but I am going to... (7 Replies)
Discussion started by: deckard
7 Replies
10. BSD
I am having troubles with this pf configuration, it seems when loaded nothing can access my server on the internal interface for the LAN, I cannot see why, and it's pretty much based off the very standard example in the OpenBSD faq.
When I unload the configuration, I can access the DNS server on... (0 Replies)
Discussion started by: John Tate
0 Replies
LEARN ABOUT DEBIAN
oidentd_masq.conf
oidentd_masq.conf(5) File Formats Manual oidentd_masq.conf(5)
NAME
oidentd_masq.conf - oidentd IP masquerading/NAT configuration file.
DESCRIPTION
If you are using IP masquerading or NAT, oidentd can optionally return a username for connections from other machines. Support for this is
specified by calling oidentd with the -m (or --masq) flag and by creating an /etc/oidentd_masq.conf file.
oidentd can also forward requests for an IP masqueraded connection to the machine from which connection originates by way of the -f option.
This will only work if the host to which the connection is forwarded is running oidentd with the -P (proxy) flag, or if the host's ident
daemon will return a valid reply regardless of the input supplied by and the address of the host requesting the info (some ident daemons
for windows do this, maybe others).
FORMAT
<IP Address|Hostname>[/<Mask>] <Ident Response> <System Type>
The first field contains the IP address or the hostname of a machine that IP masquerades through the machine on which oidentd runs. The
mask parameter can be either a network mask or a mask in CIDR notation. A mask of 24 is equivalent to 255.255.255.0, a mask of 16 is
equivalent to 255.255.0.0, etc.
The second field specifies the reply that oidentd will return for lookups to the host matching the IP address specified in the first param-
eter.
The third field specifies the operating system the machine matching the first parameter is running.
EXAMPLES
<Host>[/<Mask>] <Ident Response> <System Type>
192.168.1.1 someone UNIX
192.168.1.2 noone WINDOWS
192.168.1.1/32 user1 UNIX
192.168.1.0/24 user3 UNIX
192.168.0.0/16 user4 UNIX
somehost user5 UNIX
192.168.1.0/255.255.255.0 user6 UNIX
AUTHOR
Ryan McCabe <ryan@numb.org>
http://dev.ojnk.net
SEE ALSO
oidentd(8) oidentd.conf(5)
version 2.0.8 13 Jul 2003 oidentd_masq.conf(5)