MastodonTech.de

Peter N. M. HansteenFellow network nerds, at EuroBSDcon 2025 in Zagreb, there will be a Network Management with the OpenBSD Packet Filter Toolset" <a href="https://events.eurobsdcon.org/2025/talk/FW39CX/" rel="nofollow noopener" translate="no" target="_blank">https://events.eurobsdcon.org/2025/talk/FW39CX/</a> session, a full day tutorial starting at 2025-09-25 10:30 CET. You can register for the conference and tutorial by following the links from the conference Registration and Prices <a href="https://2025.eurobsdcon.org/registration.html" rel="nofollow noopener" translate="no" target="_blank">https://2025.eurobsdcon.org/registration.html</a> page. <a href="https://mastodon.social/tags/openbsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#openbsd</a> <a href="https://mastodon.social/tags/freebsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#freebsd</a> <a href="https://mastodon.social/tags/networking" class="mention hashtag" rel="nofollow noopener" target="_blank">#networking</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://mastodon.social/tags/eurobsdcon" class="mention hashtag" rel="nofollow noopener" target="_blank">#eurobsdcon</a> <a href="https://mastodon.social/tags/conference" class="mention hashtag" rel="nofollow noopener" target="_blank">#conference</a> <a href="https://mastodon.social/tags/pf" class="mention hashtag" rel="nofollow noopener" target="_blank">#pf</a> <a href="https://mastodon.social/tags/packetfilter" class="mention hashtag" rel="nofollow noopener" target="_blank">#packetfilter</a> <a href="https://mastodon.social/tags/freesoftware" class="mention hashtag" rel="nofollow noopener" target="_blank">#freesoftware</a> <a href="https://mastodon.social/tags/libresoftware" class="mention hashtag" rel="nofollow noopener" target="_blank">#libresoftware</a> <a href="https://mastodon.social/tags/zagreb" class="mention hashtag" rel="nofollow noopener" target="_blank">#zagreb</a>

Peter N. M. HansteenYes, The Book of PF, 4th Edition Is Coming Soon <a href="https://nxdomain.no/~peter/yes_the_book_of_pf_4th_ed_is_coming.html" rel="nofollow noopener" translate="no" target="_blank">https://nxdomain.no/~peter/yes_the_book_of_pf_4th_ed_is_coming.html</a> Long rumored and eagerly anticipated by some, the fourth edition of The Book of PF is now available for preorder <a href="https://nostarch.com/book-of-pf-4th-edition" rel="nofollow noopener" translate="no" target="_blank">https://nostarch.com/book-of-pf-4th-edition</a> <a href="https://mastodon.social/tags/openbsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#openbsd</a> <a href="https://mastodon.social/tags/pf" class="mention hashtag" rel="nofollow noopener" target="_blank">#pf</a> <a href="https://mastodon.social/tags/packetfilter" class="mention hashtag" rel="nofollow noopener" target="_blank">#packetfilter</a> <a href="https://mastodon.social/tags/freebsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#freebsd</a> <a href="https://mastodon.social/tags/networking" class="mention hashtag" rel="nofollow noopener" target="_blank">#networking</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://mastodon.social/tags/tcpip" class="mention hashtag" rel="nofollow noopener" target="_blank">#tcpip</a> <a href="https://mastodon.social/tags/ipv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#ipv6</a> <a href="https://mastodon.social/tags/ipv4" class="mention hashtag" rel="nofollow noopener" target="_blank">#ipv4</a> <a href="https://mastodon.social/tags/bookofpf" class="mention hashtag" rel="nofollow noopener" target="_blank">#bookofpf</a>... and of course somebody had to ask, "when can we expect a fifth edition", to which the answer was "let's get this one out the door first"That said, watch this space for further announcements!

Thoralf Will 🇺🇦🇮🇱🇹🇼Oops, meine <a href="https://soc.umrath.net/tags/evcc" class="mention hashtag" rel="nofollow noopener" target="_blank">#evcc</a>-vm ist abgeraucht:kernel: BUG: unable to handle page fault for address: ffffffffaf67d513 kernel: <a href="https://soc.umrath.net/tags/PF" class="mention hashtag" rel="nofollow noopener" target="_blank">#PF</a>: supervisor write access in kernel mode kernel: <a href="https://soc.umrath.net/tags/PF" class="mention hashtag" rel="nofollow noopener" target="_blank">#PF</a>: error_code(0x0003) - permissions violation kernel: PGD d015067 P4D d015067 PUD d016063 PMD b6001e1 kernel: Oops: 0003 [#2] PREEMPT SMP PTIUnd das jetzt schon das 2. Mal in dieser Woche. Klingt uncool.<a href="https://soc.umrath.net/tags/Proxmox" class="mention hashtag" rel="nofollow noopener" target="_blank">#Proxmox</a>

Peter N. M. HansteenLong rumored, eagerly anticipated by some, "The Book of PF, 4th edition" <a href="https://nostarch.com/book-of-pf-4th-edition" rel="nofollow noopener" translate="no" target="_blank">https://nostarch.com/book-of-pf-4th-edition</a> is now available for PREORDER. The most up to date guide to the OpenBSD and FreeBSD networking toolset <a href="https://mastodon.social/tags/openbsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#openbsd</a> <a href="https://mastodon.social/tags/freebsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#freebsd</a> <a href="https://mastodon.social/tags/networking" class="mention hashtag" rel="nofollow noopener" target="_blank">#networking</a> <a href="https://mastodon.social/tags/pf" class="mention hashtag" rel="nofollow noopener" target="_blank">#pf</a> <a href="https://mastodon.social/tags/packetfilter" class="mention hashtag" rel="nofollow noopener" target="_blank">#packetfilter</a> <a href="https://mastodon.social/tags/firewall" class="mention hashtag" rel="nofollow noopener" target="_blank">#firewall</a> <a href="https://mastodon.social/tags/preorder" class="mention hashtag" rel="nofollow noopener" target="_blank">#preorder</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> (again for the CEST-ish crowd)

Martin PughOK, so, that's weird.....I ran `syspatch` and `pkg_add -u` on my blog webserver late yesterday afternoon and all sorts of weirdness ensued.I could no longer SSH into the box. IPv6 seemed to be broken completely. I couldn't login at the Proxmox console because I set ridiculously long password for all my accounts before I disable password auth anyway, and there's no way I'm getting all 63 mixed case and symbol characters correct...So, I broke out the OpenBSD recovery console to change my password and do some tinkering but I was way too tired last night so shelved the problem. Oh, and I should mention it seemed to still be accepting web requests for the blog...This morning, I'm a little more awake, I've been on the case again and we're up and running. I have no clue why yet, but it seems all my PF rules that used `egress` for the interface no longer work. Switching to the real interface name fixes everything. It's got to be route related, as `egress` applies to all interface with a default route but I can't see what cause that to not apply to the only interface the server has.<a href="https://bsd.network/tags/IPv6" class="mention hashtag" rel="nofollow noopener" target="_blank">#IPv6</a> <a href="https://bsd.network/tags/OpenBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenBSD</a> <a href="https://bsd.network/tags/Networking" class="mention hashtag" rel="nofollow noopener" target="_blank">#Networking</a> <a href="https://bsd.network/tags/PF" class="mention hashtag" rel="nofollow noopener" target="_blank">#PF</a>

Peter N. M. HansteenConfirmed: There will be a full day PF tutorial "Network Management with the OpenBSD Packet Filter Toolset" at <a href="https://mastodon.social/tags/eurobsdcon" class="mention hashtag" rel="nofollow noopener" target="_blank">#eurobsdcon</a> 2025 in <a href="https://mastodon.social/tags/zagreb" class="mention hashtag" rel="nofollow noopener" target="_blank">#zagreb</a>.Details to emerge via <a href="https://2025.eurobsdcon.org/" rel="nofollow noopener" translate="no" target="_blank">https://2025.eurobsdcon.org/</a>, and expect more goodies to be announced!<a href="https://mastodon.social/tags/openbsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#openbsd</a> <a href="https://mastodon.social/tags/freebsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#freebsd</a> <a href="https://mastodon.social/tags/pf" class="mention hashtag" rel="nofollow noopener" target="_blank">#pf</a> <a href="https://mastodon.social/tags/packetfilter" class="mention hashtag" rel="nofollow noopener" target="_blank">#packetfilter</a> <a href="https://mastodon.social/tags/networking" class="mention hashtag" rel="nofollow noopener" target="_blank">#networking</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://mastodon.social/tags/freesoftware" class="mention hashtag" rel="nofollow noopener" target="_blank">#freesoftware</a> <a href="https://mastodon.social/tags/libresoftware" class="mention hashtag" rel="nofollow noopener" target="_blank">#libresoftware</a> <a href="https://mastodon.social/tags/bsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#bsd</a>

EuropeWhat happens to mortgage rates if the Canada-U.S. trade war ends?Open this photo in gallery: The market currently expects the Bank of Canada to cut interest rates by… <a href="https://flipboard.social/tags/Europe" class="mention hashtag" rel="nofollow noopener" target="_blank">#Europe</a> <a href="https://flipboard.social/tags/Business" class="mention hashtag" rel="nofollow noopener" target="_blank">#Business</a> <a href="https://flipboard.social/tags/business" class="mention hashtag" rel="nofollow noopener" target="_blank">#business</a> <a href="https://flipboard.social/tags/pf" class="mention hashtag" rel="nofollow noopener" target="_blank">#pf</a>-ca <a href="https://flipboard.social/tags/tariffs" class="mention hashtag" rel="nofollow noopener" target="_blank">#tariffs</a> <a href="https://flipboard.social/tags/tradewar" class="mention hashtag" rel="nofollow noopener" target="_blank">#tradewar</a> <a href="https://www.europesays.com/2177198/" rel="nofollow noopener" translate="no" target="_blank">https://www.europesays.com/2177198/</a>

Peter N. M. HansteenNetwork Management with the OpenBSD Packet Filter Toolset <a href="https://www.bsdcan.org/2025/timetable/timetable-Network-Management-with.html" rel="nofollow noopener" translate="no" target="_blank">https://www.bsdcan.org/2025/timetable/timetable-Network-Management-with.html</a> at <a href="https://mastodon.social/tags/bsdcan" class="mention hashtag" rel="nofollow noopener" target="_blank">#bsdcan</a> now concluded, new slides up at <a href="https://nxdomain.no/~peter/pf_fullday.pdf" rel="nofollow noopener" translate="no" target="_blank">https://nxdomain.no/~peter/pf_fullday.pdf</a> -- now with during-session updates (labs available for attendees only, sorry) <a href="https://mastodon.social/tags/openbsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#openbsd</a> <a href="https://mastodon.social/tags/freebsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#freebsd</a> <a href="https://mastodon.social/tags/pf" class="mention hashtag" rel="nofollow noopener" target="_blank">#pf</a> <a href="https://mastodon.social/tags/packetfilter" class="mention hashtag" rel="nofollow noopener" target="_blank">#packetfilter</a> <a href="https://mastodon.social/tags/firewall" class="mention hashtag" rel="nofollow noopener" target="_blank">#firewall</a> <a href="https://mastodon.social/tags/networking" class="mention hashtag" rel="nofollow noopener" target="_blank">#networking</a> <a href="https://mastodon.social/tags/devops" class="mention hashtag" rel="nofollow noopener" target="_blank">#devops</a> <a href="https://mastodon.social/tags/sysadmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysadmin</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://mastodon.social/tags/networktrickery" class="mention hashtag" rel="nofollow noopener" target="_blank">#networktrickery</a>

TomAfter 20 years of using <a href="https://mastodon.bsd.cafe/tags/pf" class="mention hashtag" rel="nofollow noopener" target="_blank">#pf</a> on <a href="https://mastodon.bsd.cafe/tags/BSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#BSD</a> and only dabbling in iptables when I absolutely had to in <a href="https://mastodon.bsd.cafe/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a>, nftables looks like an unreadable, incomprehensible shitshow; A crayon scrawl by a toddler of weird nat and mangle chains that make no sense. The Linux developers would have been much better off porting pf to Linux.

karOver the past few weeks I have been switching off of NixOS and going back to the previous OSes and distros I was using. Last week I migrated my VPS back to OpenBSD and I now feel like I can appreciate its simplicity even more. That's not the point of this though. When migrating I was reminded of something <a href="https://camp.crates.im/users/nemo" class="u-url mention" rel="nofollow noopener" target="_blank">@nemo@camp.crates.im</a> previously said about only allowing ssh access to the IP addresses he know he uses. I thought I should try doing something similar especially because to me pf is way saner to use and manage than iptables. The addresses I know I'll use are my home IPv4 address and the IPv4+6 addresses of the Mullvad enpoints I am likely to use. Unfortunately I don't know what those public addresses are before connecting. A quick script containing something like below (I didn't save it >_<) later, I was able to get all the addresses I needed for passing to pf. <pre>for i in *.conf; do wg-quick up $i curl -s4 https://zx2c4.com/ip | sed 1q # the connect timeout is there because a few of the endpoints had a not-working IPv6 address curl --connect-timeout -s6 https://zx2c4.com/ip | sed 1q wg-quick down $i done ``` Now in my pf.conf I just had to do something like this which didn't seem that complicated after all. I just modelled it after my existing rule that I used for opening ports (I removed ssh from that rule in favour of this one). This can most definitely be made better, but at least it works! </pre>explicitly allow home and vpn ip addressesssh_whitelist_ipv4 = "{ ipv4 addresses hereI put my home address at the top as is and then /24 ranges for the mullvad IPs because I was told they may change frequently}" ssh_whitelist_ipv6 = "{ ipv6 addresses here from mullvadI figured that they won't change often so I simply pasted them as is without specifying prefix}" ... allow public ssh only to my normal home address and mullvad ipspass in log on $ext_if inet proto tcp from $ssh_whitelist_ipv4 to ($ext_if) \ port ssh flags S/SA keep state pass in log on $ext_if inet6 proto tcp from $ssh_whitelist_ipv6 to ($ext_if) \ port ssh flags S/SA keep state <pre> After running for over a day, my /var/log/authlog still only shows my own connections and not some people across the globe spamming connections to invalid users. </pre>saklas$ zgrep preauth /var/log/authlog.0.gz | grep -v vin | wc -l 3918 saklas$ grep preauth /var/log/authlog | grep -v vin | wc -l 1 <pre> I was previously using pf-badhost in place of fail2ban due to the latter not being available on OpenBSD, but pf-badhost didn't prevent active attacks while both of them still allowed those (initial) connections in the first place. There's a much smaller likelihood of an attacker using the same Mullvad endpoints I use, and if they do I probably have bigger problems to worry about. I'm also pretty much always connected to my Wireguard VPN (separate post on my website for this later) and that would let me bypass this anyways. This setup is more of a failsafe if I'm unable to connect through the VPN, and a failsafe of that failsafe if things really go wrong is just using the Hetzner web console I guess. After writing all this, I think it's better to just post this on my website and syndicate here. <a href="https://snac.13f0.net?t=openbsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#openbsd</a> <a href="https://snac.13f0.net?t=mullvad" class="mention hashtag" rel="nofollow noopener" target="_blank">#mullvad</a> <a href="https://snac.13f0.net?t=pf" class="mention hashtag" rel="nofollow noopener" target="_blank">#pf</a> </pre>

thinkbergConsidering a <a href="https://tetrax.de/tags/vpn" class="mention hashtag" rel="nofollow noopener" target="_blank">#vpn</a> outlet server on <a href="https://tetrax.de/tags/OpenBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenBSD</a>. What would you prevent network wise? <a href="https://tetrax.de/tags/pf" class="mention hashtag" rel="nofollow noopener" target="_blank">#pf</a>

Peter N. M. HansteenThat Grumpy BSD Guy: A Short Reading List <a href="https://nxdomain.no/~peter/the_short_reading_list.html" rel="nofollow noopener" translate="no" target="_blank">https://nxdomain.no/~peter/the_short_reading_list.html</a> A collection of pointers to things I have written and that I think may be of value to you too (with conference teasers) <a href="https://mastodon.social/tags/openbsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#openbsd</a> <a href="https://mastodon.social/tags/packetfilter" class="mention hashtag" rel="nofollow noopener" target="_blank">#packetfilter</a> <a href="https://mastodon.social/tags/pf" class="mention hashtag" rel="nofollow noopener" target="_blank">#pf</a> <a href="https://mastodon.social/tags/cybercrime" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybercrime</a> <a href="https://mastodon.social/tags/antispam" class="mention hashtag" rel="nofollow noopener" target="_blank">#antispam</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://mastodon.social/tags/networking" class="mention hashtag" rel="nofollow noopener" target="_blank">#networking</a> <a href="https://mastodon.social/tags/freesoftware" class="mention hashtag" rel="nofollow noopener" target="_blank">#freesoftware</a> <a href="https://mastodon.social/tags/libresoftware" class="mention hashtag" rel="nofollow noopener" target="_blank">#libresoftware</a> <a href="https://mastodon.social/tags/eurobsdcon" class="mention hashtag" rel="nofollow noopener" target="_blank">#eurobsdcon</a> <a href="https://mastodon.social/tags/bsdcan" class="mention hashtag" rel="nofollow noopener" target="_blank">#bsdcan</a>

Peter N. M. HansteenAs previously announced, there will be a PF tutorial at BSDCan 2025 - For Upcoming PF Tutorials, We Welcome Your Questions <a href="https://nxdomain.no/~peter/pf_tutorial_upcoming_questions_welcome.html" rel="nofollow noopener" translate="no" target="_blank">https://nxdomain.no/~peter/pf_tutorial_upcoming_questions_welcome.html</a>Registration: <a href="https://www.bsdcan.org/2025/registration.html" rel="nofollow noopener" translate="no" target="_blank">https://www.bsdcan.org/2025/registration.html</a><a href="https://mastodon.social/tags/BSDCan" class="mention hashtag" rel="nofollow noopener" target="_blank">#BSDCan</a> <a href="https://mastodon.social/tags/EuroBSDcon" class="mention hashtag" rel="nofollow noopener" target="_blank">#EuroBSDcon</a> <a href="https://mastodon.social/tags/OpenBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenBSD</a> <a href="https://mastodon.social/tags/PF" class="mention hashtag" rel="nofollow noopener" target="_blank">#PF</a> <a href="https://mastodon.social/tags/tutorial" class="mention hashtag" rel="nofollow noopener" target="_blank">#tutorial</a>, <a href="https://mastodon.social/tags/packetfilter" class="mention hashtag" rel="nofollow noopener" target="_blank">#packetfilter</a> <a href="https://mastodon.social/tags/Ottawa" class="mention hashtag" rel="nofollow noopener" target="_blank">#Ottawa</a> <a href="https://mastodon.social/tags/BookofPF" class="mention hashtag" rel="nofollow noopener" target="_blank">#BookofPF</a> <a href="https://mastodon.social/tags/BSDCan" class="mention hashtag" rel="nofollow noopener" target="_blank">#BSDCan</a> <a href="https://mastodon.social/tags/conferences" class="mention hashtag" rel="nofollow noopener" target="_blank">#conferences</a> <a href="https://mastodon.social/tags/networking" class="mention hashtag" rel="nofollow noopener" target="_blank">#networking</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a>

Peter N. M. HansteenWith <a href="https://mastodon.social/tags/bsdcan" class="mention hashtag" rel="nofollow noopener" target="_blank">#bsdcan</a> now less than a month away <a href="https://www.bsdcan.org/2025/index.html" rel="nofollow noopener" translate="no" target="_blank">https://www.bsdcan.org/2025/index.html</a> we invite your questions and input on the upcoming PF tutorials, see "For Upcoming PF Tutorials, We Welcome Your Questions" <a href="https://nxdomain.no/~peter/pf_tutorial_upcoming_questions_welcome.html" rel="nofollow noopener" translate="no" target="_blank">https://nxdomain.no/~peter/pf_tutorial_upcoming_questions_welcome.html</a><a href="https://mastodon.social/tags/EuroBSDCon" class="mention hashtag" rel="nofollow noopener" target="_blank">#EuroBSDCon</a> <a href="https://mastodon.social/tags/OpenBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenBSD</a> <a href="https://mastodon.social/tags/PF" class="mention hashtag" rel="nofollow noopener" target="_blank">#PF</a> <a href="https://mastodon.social/tags/tutorial" class="mention hashtag" rel="nofollow noopener" target="_blank">#tutorial</a>, <a href="https://mastodon.social/tags/packetfilter" class="mention hashtag" rel="nofollow noopener" target="_blank">#packetfilter</a> <a href="https://mastodon.social/tags/Ottawa" class="mention hashtag" rel="nofollow noopener" target="_blank">#Ottawa</a> <a href="https://mastodon.social/tags/BookofPF" class="mention hashtag" rel="nofollow noopener" target="_blank">#BookofPF</a> <a href="https://mastodon.social/tags/BSDCan" class="mention hashtag" rel="nofollow noopener" target="_blank">#BSDCan</a> <a href="https://mastodon.social/tags/conferences" class="mention hashtag" rel="nofollow noopener" target="_blank">#conferences</a> <a href="https://mastodon.social/tags/networking" class="mention hashtag" rel="nofollow noopener" target="_blank">#networking</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a>

Peter N. M. Hansteen"A good tutorial should sound to passersby much like an intense but amicable discussion between colleagues"For Upcoming PF Tutorials, We Welcome Your Questions <a href="https://nxdomain.no/~peter/pf_tutorial_upcoming_questions_welcome.html" rel="nofollow noopener" translate="no" target="_blank">https://nxdomain.no/~peter/pf_tutorial_upcoming_questions_welcome.html</a> <a href="https://mastodon.social/tags/EuroBSDCon" class="mention hashtag" rel="nofollow noopener" target="_blank">#EuroBSDCon</a> <a href="https://mastodon.social/tags/OpenBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenBSD</a> <a href="https://mastodon.social/tags/PF" class="mention hashtag" rel="nofollow noopener" target="_blank">#PF</a> <a href="https://mastodon.social/tags/tutorial" class="mention hashtag" rel="nofollow noopener" target="_blank">#tutorial</a>, <a href="https://mastodon.social/tags/packetfilter" class="mention hashtag" rel="nofollow noopener" target="_blank">#packetfilter</a> <a href="https://mastodon.social/tags/Ottawa" class="mention hashtag" rel="nofollow noopener" target="_blank">#Ottawa</a> <a href="https://mastodon.social/tags/BookofPF" class="mention hashtag" rel="nofollow noopener" target="_blank">#BookofPF</a> <a href="https://mastodon.social/tags/BSDCan" class="mention hashtag" rel="nofollow noopener" target="_blank">#BSDCan</a> <a href="https://mastodon.social/tags/conferences" class="mention hashtag" rel="nofollow noopener" target="_blank">#conferences</a> <a href="https://mastodon.social/tags/networking" class="mention hashtag" rel="nofollow noopener" target="_blank">#networking</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a>

Peter N. M. HansteenFor Upcoming PF Tutorials, We Welcome Your Questions <a href="https://nxdomain.no/~peter/pf_tutorial_upcoming_questions_welcome.html" rel="nofollow noopener" translate="no" target="_blank">https://nxdomain.no/~peter/pf_tutorial_upcoming_questions_welcome.html</a>"A good tutorial should sound to passersby much like an intense but amicable discussion between colleagues" <a href="https://mastodon.social/tags/EuroBSDCon" class="mention hashtag" rel="nofollow noopener" target="_blank">#EuroBSDCon</a> <a href="https://mastodon.social/tags/OpenBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenBSD</a> <a href="https://mastodon.social/tags/PF" class="mention hashtag" rel="nofollow noopener" target="_blank">#PF</a> <a href="https://mastodon.social/tags/tutorial" class="mention hashtag" rel="nofollow noopener" target="_blank">#tutorial</a>, <a href="https://mastodon.social/tags/packetfilter" class="mention hashtag" rel="nofollow noopener" target="_blank">#packetfilter</a> <a href="https://mastodon.social/tags/Ottawa" class="mention hashtag" rel="nofollow noopener" target="_blank">#Ottawa</a> <a href="https://mastodon.social/tags/BookofPF" class="mention hashtag" rel="nofollow noopener" target="_blank">#BookofPF</a> <a href="https://mastodon.social/tags/BSDCan" class="mention hashtag" rel="nofollow noopener" target="_blank">#BSDCan</a> <a href="https://mastodon.social/tags/conferences" class="mention hashtag" rel="nofollow noopener" target="_blank">#conferences</a> <a href="https://mastodon.social/tags/networking" class="mention hashtag" rel="nofollow noopener" target="_blank">#networking</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> (Now with actual EuroBSDcon submissions deadline)

Peter N. M. Hansteen"I have yet to meet an admin who plausibly claims to never have been tripped up by their overload rules at some point." More, and a walk down memory lane, in "The Hail Mary Cloud And The Lessons Learned" <a href="https://nxdomain.no/~peter/hailmary_lessons_learned.html" rel="nofollow noopener" translate="no" target="_blank">https://nxdomain.no/~peter/hailmary_lessons_learned.html</a> <a href="https://mastodon.social/tags/ssh" class="mention hashtag" rel="nofollow noopener" target="_blank">#ssh</a> <a href="https://mastodon.social/tags/passwords" class="mention hashtag" rel="nofollow noopener" target="_blank">#passwords</a> <a href="https://mastodon.social/tags/bruteforce" class="mention hashtag" rel="nofollow noopener" target="_blank">#bruteforce</a> <a href="https://mastodon.social/tags/passwordgroping" class="mention hashtag" rel="nofollow noopener" target="_blank">#passwordgroping</a> <a href="https://mastodon.social/tags/cybercrime" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybercrime</a> <a href="https://mastodon.social/tags/openbsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#openbsd</a> <a href="https://mastodon.social/tags/pf" class="mention hashtag" rel="nofollow noopener" target="_blank">#pf</a> <a href="https://mastodon.social/tags/packetfilter" class="mention hashtag" rel="nofollow noopener" target="_blank">#packetfilter</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://mastodon.social/tags/guessablepasswords" class="mention hashtag" rel="nofollow noopener" target="_blank">#guessablepasswords</a> <a href="https://mastodon.social/tags/hailmary" class="mention hashtag" rel="nofollow noopener" target="_blank">#hailmary</a> <a href="https://mastodon.social/tags/hailmarycloud" class="mention hashtag" rel="nofollow noopener" target="_blank">#hailmarycloud</a>

jcccbI found a new <a href="https://mastodon.social/tags/Hypervisor" class="mention hashtag" rel="nofollow noopener" target="_blank">#Hypervisor</a> toy! <a href="https://mastodon.social/tags/HosterCore" class="mention hashtag" rel="nofollow noopener" target="_blank">#HosterCore</a> is a fresh and flexible approach to <a href="https://mastodon.social/tags/virtualization" class="mention hashtag" rel="nofollow noopener" target="_blank">#virtualization</a> management. It is based on upstream <a href="https://mastodon.social/tags/FreeBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeBSD</a> and uses a modern toolset like <a href="https://mastodon.social/tags/Go" class="mention hashtag" rel="nofollow noopener" target="_blank">#Go</a> <a href="https://mastodon.social/tags/jails" class="mention hashtag" rel="nofollow noopener" target="_blank">#jails</a> <a href="https://mastodon.social/tags/bhyve" class="mention hashtag" rel="nofollow noopener" target="_blank">#bhyve</a> <a href="https://mastodon.social/tags/PF" class="mention hashtag" rel="nofollow noopener" target="_blank">#PF</a> and <a href="https://mastodon.social/tags/ZFS" class="mention hashtag" rel="nofollow noopener" target="_blank">#ZFS</a> with dataset level encryption. It offers <a href="https://mastodon.social/tags/VPN" class="mention hashtag" rel="nofollow noopener" target="_blank">#VPN</a> support an api and a webgui is in development. Definitely worth to check out! :computerfairies:<a href="https://github.com/yaroslav-gwit/HosterCore" rel="nofollow noopener" translate="no" target="_blank">https://github.com/yaroslav-gwit/HosterCore</a>

dwardoricDebugging aids for pf firewall rules [on FreeBSD] – Dan Langille's Other Diary<a href="https://dan.langille.org/2025/02/24/debugging-aids-for-pf-firewall-rules-on-freebsd/" rel="nofollow noopener" translate="no" target="_blank">https://dan.langille.org/2025/02/24/debugging-aids-for-pf-firewall-rules-on-freebsd/</a><a href="https://chaos.social/tags/FreeBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeBSD</a> <a href="https://chaos.social/tags/sysadmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysadmin</a> <a href="https://chaos.social/tags/firewall" class="mention hashtag" rel="nofollow noopener" target="_blank">#firewall</a> <a href="https://chaos.social/tags/pf" class="mention hashtag" rel="nofollow noopener" target="_blank">#pf</a>

r1w1s1Comparing firewall syntax for SSH (port 22) with default-deny: ================================================ <a href="https://snac.bsd.cafe?t=iptables" class="mention hashtag" rel="nofollow noopener" target="_blank">#iptables</a> (Linux) iptables -A INPUT -p tcp --dport 22 -j ACCEPT iptables -P INPUT DROP <a href="https://snac.bsd.cafe?t=nftables" class="mention hashtag" rel="nofollow noopener" target="_blank">#nftables</a> (Linux) nft add rule inet my_filter input tcp dport 22 accept nft add rule inet my_filter input drop <a href="https://snac.bsd.cafe?t=ufw" class="mention hashtag" rel="nofollow noopener" target="_blank">#ufw</a> (Linux - simplified frontend to iptables) ufw allow 22/tcp ufw default deny incoming <a href="https://snac.bsd.cafe?t=pf" class="mention hashtag" rel="nofollow noopener" target="_blank">#pf</a> (OpenBSD) pass in proto tcp to port 22 block all pf’s syntax feels so elegant, human-readable, & minimal! After 20years scripting iptables, I’m ready to try UFW on my laptop. <a href="https://snac.bsd.cafe?t=firewall" class="mention hashtag" rel="nofollow noopener" target="_blank">#firewall</a> <a href="https://snac.bsd.cafe?t=sysadmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysadmin</a> <a href="https://snac.bsd.cafe?t=pf" class="mention hashtag" rel="nofollow noopener" target="_blank">#pf</a> <a href="https://snac.bsd.cafe?t=iptables" class="mention hashtag" rel="nofollow noopener" target="_blank">#iptables</a> <a href="https://snac.bsd.cafe?t=ufw" class="mention hashtag" rel="nofollow noopener" target="_blank">#ufw</a> <a href="https://snac.bsd.cafe?t=nftables" class="mention hashtag" rel="nofollow noopener" target="_blank">#nftables</a>

Frühere Suchanfragen

Suchoptionen

Verwaltet von:

Serverstatistik:

#pf