ipf stopped working on 5.3

From: John Fitzgerald (jjfitzgerald_at_gmail.com)
Date: 10/25/05

  • Next message: John Fitzgerald: "Sorry" 
    Date: Tue, 25 Oct 2005 13:32:37 -0400
To: freebsd-security@FreeBSD.org

    I've had ipf working on a few 5.3 servers for quite awhile. Not too long ago
    some developers had to do some coding work and were coming from dynamic
    IP's. I (reluctantly) opened up SSH to the world. Immediately I started
    seeing the attacks where bots of some sort would try to break in with a
    variety of different users.

    So, I (thought) I closed it up again and told the developers to use a
    dedicated proxy. They did, but I realized that I hadn't actually closed
    things off. I was still getting attacked. I had tried, but ipf suddenly
    wasn't working. Whenever I would change the firewall rules and ipf -D and
    the ipf -E -f /etc/my.rules it would simply return:

    1:ioctl(add/insert rule): No such process

    I didn't have the time to look into it at the time, but am now trying to
    figure it out. Ipf is obviously not working and I don't know why. I have
    tried recompiling the kernel a myriad of different ways. With/without ipfw,
    with/without ipsec, etc. All to no avail. Is this a bug, did I get hacked?

    I have googled this quite a bit and the only thing that I found was possibly
    a buildworld scenario where something got updated and it doesn't work now. I
    didn't install src so I'm a bit out of luck on that one.

    FreeBSD 5.3-RELEASE
    OpenSSH_3.8.1p1 FreeBSD-20040419, OpenSSL 0.9.7d 17 Mar 2004

    Cheers,
    JJ
    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

  • Next message: John Fitzgerald: "Sorry"

    Relevant Pages

    • Re: ipf stopped working on 5.3
      ... | some developers had to do some coding work and were coming from dynamic ... I had tried, but ipf suddenly ...
      (FreeBSD-Security)
    • Re: ipf stopped working on 5.3
      ... On Tue, 25 Oct 2005, John Fitzgerald wrote: ... I I closed it up again and told the developers to use a ... > dedicated proxy. ... I had tried, but ipf suddenly ...
      (FreeBSD-Security)
    • ipfilter on Solaris 10 build 51
      ... I have a little problem with IPv6 firewall rules and ipf on Solaris 10 ... First problem is that as soon as I flush ipv6 firewall rules ... This wasn't the case with 'ipf: IP Filter: ...
      (comp.unix.solaris)
    • RE: ipf stopped working on 5.3
      ... be added to the kernel config that was not needed previously. ... I've had ipf working on a few 5.3 servers for quite awhile. ... Whenever I would change the firewall rules and ipf -D and ... To unsubscribe, ...
      (FreeBSD-Security)
    • Re: ipf stopped working on 5.3
      ... In some mail from John Fitzgerald, sie said: ... > Whenever I would change the firewall rules and ipf -D and ...
      (FreeBSD-Security)