BSDFreaks.nl

Deze howto gaat net als deel 1, 2 en 3 over het beveiligen van je netwerk met OpenBSD als router / firewall. Deze keer bespreekt de schrijver Packet Logging met PF.

Packet logging is a good network administration practice, because it lets us spot problems with communication and early signs of break-in attempts. Of course, logging packets alone won’t help; we need to learn how to analyze and manage log files generated by pf. But first things first.

Een link over hoe een firewall met nat op te zetten onder OpenBSD.
Link

Deze howto gaat net als deel 1 over het beveiligen van je netwerk met OpenBSD als router / firewall. Deze keer bespreekt de schrijver de nieuwe packet filter PF.

As you can see‚ the names of the configuration files have changed as well: packet filtering rules are now stored in the pf.conf file located in the /etc directory. The network address translation rules are stored in the nat.conf file located in the same directory. When pfctl complains about syntax errors‚ use the -v option to display the rules as they are processed by pfctl. For example‚ when the packet filtering rules contain errors‚ use pfctl –v –R /etc/pf.conf | less to browse the output and locate lines with errors; then edit the configuration file and try uploading the new rules again.

Het hele artikel

Met deze howto kan je een OpenBSD server IPv6 packets van een windows 2000 machine laten routen

Setting up an IPv6 tunnel from a host to a broker was one thing. But I wanted to use IPv6 from my desktop. The dancing KAME was my goal. After years of procrastination‚ I finally got to see her dance. Here’s how.

Lees meer

Deze howto beschrijft hoe je je netwerk simpel kan beveiligen en beheren met OpenBSD‚ zelfs voor beginners.

Like almost all things in life‚ good security costs good money. It has to be that way‚ because there are simply not enough skilled security specialists to look after all of the networks that need their attention. An unfortunate result of low supply and high demand is the migration of highly skilled personnel to clients who can meet their salary requirements. This leaves a lot of small and underfunded networks in the hands of less experienced administrators‚ who might not know how to design‚ configure‚ and monitor these networks’ safety mechanisms‚ leaving them vulnerable to attacks from unscrupulous people looking for inside information‚ free warez storage‚ zombie hosts for DDoS attacks‚ or systems they can simply destroy for fun of doing it.

link