[Tfug] Open BSD Firewall
Charles Kiss
charlesrkiss at hotmail.com
Wed Jun 2 21:01:38 MST 2004
In the Debian workstation, I changed the /etc/network/interfaces file; I
replaced the word "dhcp" with the word "static" and added the address
information from it's routing tables.
Michael, you're helping me alot; but I think I'll have to work on it again
for a while. Maybe give it a rest; it's already been three weeks!
Anyway, I constructed a bridge, then I got a timeout message on ne1 (again),
so I set the timeout to zero, but I still get the message. I deleted the
bridge, but still the error message shows up.
The subnet mask of the workstation is being assigned 255.255.255.255, I hope
that's okay; and there is a Destination 192.168.1.0 with an asterisk for the
gateway; I'm guessing that it's incomplete. I've tried assigining a gateway
address, but I get a "no such device" error; I think I've so far tried every
possible permutation of every possible set of network and/or host IP
addresses, but I'm sure some combinations still remain. The loopbacks are
all set, including the loopback to the loopback. I'm going to write a book;
"Learning OpenBSD Firewalling by Trial and Error."
I've disabled the Packet Filter. Still nothing gets through. Host command
works on the firewall, but not on the workstation.
I think the workstation got the DNS information from previous internet
logons pre-firewall days.
I doubt I've gotten even a single unreliable packet past the crossover
cable.
I saw somewhere that I might have to run a command like,
dpkg --configure ? ....but what's the package. I've tried "dhcp",
"inetd", etc
Maybe when I have enough energy, I'll post all the config files.
Thanks again
Charles
Did I say Whether?? Anyway, the weather here is very green and sunny, and
slightly above a room temperature breezy, the cicadas are so loud, one can't
hear talk over the phone when outdoors, and we're all looking forward to the
Venetian Transit.
Sorry guys, but don't feel bad, at least you're not living in a dirty
nuclear bomb target, though it may feel like you're getting your share of
REM's over the long run.
More information about the tfug
mailing list