 | Last login: 31 months agoPeter is a 90 year old single guy from Tampa, Florida, USA. Proof that there's too much gossip:
2000 years ago I forgot to wear a condom, and people still talk about it!
-God |
 Share This- blueyes28s blog - StumbleUpon
 Dec 8, 2006 9:48pm (96 reviews) stumblers http://blueyes28.stumbleupon.com/- Happy 999 stumble!
- Share This
- LibriVox
- Dec 8, 2006 2:09pm
 (199 reviews) books http://librivox.org/ - excellent...
- Share This
- Welcome To Amish.com
- Nov 23, 2006 3:14pm
 (3 reviews) inferior-design http://www.amish.com/ - self-contradiction...
- Nov 23, 2006 12:23pm
- My PF ruleset (/etc/pf.conf file):
#Set normal interface
ext_if="bce0"
##OPTIONS##
set block-policy drop
set debug urgent
set limit frags 5000
set limit src-nodes 10000
set limit states 10000
set loginterface $ext_if
set optimization normal
set skip on lo0
set state-policy if-bound
set timeout interval 10
set timeout frag 60
set timeout src.track 5
##SCRUB##
scrub in on $ext_if random-id no-df fragment reassemble
scrub reassemble tcp
##QUEUEING##
altq on $ext_if priq bandwidth 100Kb queue { q_pri, q_def }
queue q_pri priority 7
queue q_def priority 1 priq(default)
##NAT##
# ftp-proxy
nat-anchor "ftp-proxy/*"
rdr-anchor "ftp-proxy/*"
rdr on $ext_if proto tcp from any to any port 21 -> 127.0.0.1 port 8021
##RULES##
# minor protection against spoofed packets
antispoof log quick for bce0 inet
# ftp-proxy
anchor "ftp-proxy/*"
#Default Deny
block all
# block the known 'bad guys' and allow the 'good guys'
table
table {}
table {subkeys.pgp.net, openbsd.org}
block quick from
block quick to
block quick from
block quick to
pass quick on $ext_if from keep state
pass quick on $ext_if to keep state
# allow traffic on some ports
#tcp_ports = "{22 43 53 80 194 443 706 1863 5050 5190 6665 6666 6667 6668 6669 6891 6892 6893 6894 6895 6896 6897 6898 6899 6900 8021 8118 9001 11371}"
#udp_ports = "{67 53 123 5190 9001 11371}"
# Use the above ports w/o Tor, use below w/
tcp_ports = "{43 53 80 443 8118 9001 11371}"
udp_ports = "{53 123 9001 11371}"
pass out on $ext_if inet proto tcp from self to any port $tcp_ports \
synproxy state (max-src-conn 100, max-src-conn-rate 5 / 10) flags S/SAFR
pass in on $ext_if inet proto tcp from any to self port $tcp_ports \
synproxy state (max-src-conn 100, max-src-conn-rate 5 / 10) flags S/SAFR
pass out on $ext_if inet proto udp from self to any port $udp_ports \
synproxy state (max-src-conn 100, max-src-conn-rate 5 / 10)
pass in on $ext_if inet proto udp from any to self port $udp_ports \
synproxy state (max-src-conn 100, max-src-conn-rate 5 / 10)
pass out on $ext_if inet proto tcp from self to any port ssh synproxy state
# allow outbound SMTP traffic
pass out on $ext_if inet proto tcp from self to any port 25
# special rule for ssh
pass in quick on $ext_if proto tcp from any to $ext_if port ssh \
flags S/SA synproxy state \
(max-src-conn-rate 3/30, overload flush global)
# altq rulesets
pass out on $ext_if proto tcp from $ext_if to any flags S/SA \
keep state queue (q_def, q_pri)
pass out on $ext_if proto tcp from any to $ext_if flags S/SA \
keep state queue (q_def, q_pri)
# Now you know my firewall configuration, so you can have even more help orchestrating your fendish attack on my computadora.
- Share This
- http://stangoff.com/
 Nov 16, 2006 7:53pm (14 reviews) http://stangoff.com/- This man needs to rethink his views on the so-called 'oppression' of women. PORN IS NOT OPPRESSION. REPEAT: PORN IS NOT OPPRESSION. Feminist:Belonging to movements and ideas which advocate the rights of women to have equal opportunities to those possessed by men. This is not what most people who call themselves feminists believe. They believe women are better than men, this is no different than men are better than women. EQUAL. Bothe genders are EQUAL. EQUAL. While I am a 'feminist' by the definition I just presented; I wouldn't dare call myself one, because it's come to mean that women are better than men. He says porn is degrading and 'wrong'. No. CONSENSUAL ADULTS. In my book, anything done between two (or more [actually one is okay, too]) consenting individuals is OK. End of story. I don't care what you're doing, consent is the end-all-be-all. Done. Consent is the ONLY important factor. But I digress. This man believes, or so I can infer from his writings, that women are better than men. I'd love to know other opinions on this, so send me a SU message. TTFN tootles, fatalserpent
- Share This
- PF: The OpenBSD Packet Filter
- Oct 18, 2006 8:16pm (1 review) network-security http://www.openbsd.org/faq/pf/
- An excellent firewall system. It was hard to learn (for me at least), but it was worth it. It works stupendously, and it has a low overhead.
- Share This
- Say NO to Violence against Women
- Oct 12, 2006 3:33pm (10 reviews) http://www.unifem.org/campaigns/november...
- What about violence against men? There is a real prejudice in the 'civilized' world, and that is against males. It is sexist when the sexism is against men...
- Share This
- Gauntlet AP - Make your own Pope hat!
- Oct 7, 2006 1:52pm (3 reviews) catholic, origami, humor, hats http://gauntlet.ucalgary.ca/story/3636
- I've always wanted a pope hat!!! Pontific!!!
- Share This
- TOR roundup & Blog of too many things
- Sep 25, 2006 5:40pm (1 review) shakespeare, anonymity, tor http://itnomad.wordpress.com/2006/09/12/...
- Something to calm Tor users down about the German Node Seizure.
- Share This
- Unknown&News &|& Commentary by Herb Ruhs, MD &&&&&&&&&&&&&&&&&&&&&&&&&
- Sep 25, 2006 2:34pm (5 reviews) http://www.unknownnews.org/060925a-DrRuh...
- Now is not the time for less consumption; it is the time for better technologies. Right now, you can get a home that is completely energy independent for under $200,000. Even modest homes cost that much. We can make cars that can get a hundred miles to the gallon. We don't have to give up anything, we just need to be a little smarter with our investments.
|
Meet another member
