Everything got owned NOTE: I wrote this article on 23 November, as things were happening, and as I worked on the problem. This morning was not a good start. First, all my IRC connections had died. Checking with Netsaint, all my boxes were offline. Great! My gateway is having problems. I ssh’d to my gateway. […]
Everything got owned Read More »
Purging ipf from FreeBSD Paul Hart posted a message on the IP Filter mailing list which included a script for removing an installation of IP Filter from a FreeBSD machine. As Paul said, this script is designed for FreeBSD 3.4, but it should be adaptable for FreeBSD 4.0 without much difficulty. Why would you want
Purging ipf from FreeBSD Read More »
Letting people know the web server is off line Today I took down my new webserver in order to add three new donated SCSI drives. I was also able to let everyone know that they websites were offline and when they could expect them to be back. And it was far easier than I expected.
Letting people know the web server is off line Read More »
IP Filter – using rule groups for blocking IP blocks This article discusses my strategy for using rule groups for blocking IP blocks on the fly. For more information on how rule groups work, please read the documents found at http://www.obfuscation.org/ipf/ The background Today I was trying to find a way to block specific IP
IP Filter – using rule groups for blocking IP blocks Read More »
IP Filter 3.3.5 – a patch for ipmon IP Filter 3.3.5 was released a few weeks ago. For information on installing this version, see Installing IP Filter 3.3.4 and adjust the version names as appropriate. The main webpage for IP Filter is http://coombs.anu.edu.au/~avalon/. And one of the best how-to guides for IP Filter is
IP Filter 3.3.5 – a patch for ipmon Read More »
Installing IP Filter 3.3.4 IP Filter 3.3.4 was released today. This article merely documents that fact and describes how I installed it under FreeBSD 3.3-release. These instructions should work for all subsequent versions of IP Filter. If they do not, please add your comments. NOTE: version 3.3.4 is no longer available. At the time of
Installing IP Filter 3.3.4 Read More »
A good start for a gateway box This article outlines an install I did for a friend who had a DSL connection. If you are using a ppp connection (i.e. a dial up connection) then perhaps ppp is all you need. See Installing PPP – alias for more information. However, ipnat will give
A good start for a gateway box Read More »
Installing IP Filter 3.3.3 I have installed ipf 3.3.3 under FreeBSD 3.1-Release, 3.2-Release, 3.3-Release, and 3.3-Stable. It runs very well. I never had any trouble with it. I use it in conjunction with ipnat to provide a gateway/firewall/router box. I like it so much that I recommend it to people. It’s a great tool! NOTE:
Installing IP Filter 3.3.3 Read More »
Adding ipnat to FreeBSD 3.* See also IP Filter – an alternative firewall and NAT to ipfw/natd. If you are planning on doing Network Address Translation (NAT) or IP Masquerade (the Linux term for it), then under FreeBSD 3.*, you can easily use ipnat. This is a great little tool provided by Darren Reed as part of
Adding ipnat to FreeBSD 3.* Read More »
I was probed! The security worked. Tonight I checked my security logs and found some interesting items. I’m going to show you what they were in the hopes that you can recognize them should you seem them in your logs. I also recommend http://www.psionic.com/papers/attacks/ as a good place to start if you want to check
I was probed! The security worked. Read More »