OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
pf firewall and sendmail/DNS question to private address!

From: adrian kok (adriankok2000yahoo.com.hk)
Date: Fri Dec 03 2004 - 09:27:20 CST


Hi all

I have 2 questions. Do you have any ideas?

1/ I have a rule for the private ip addresses in
openbsd. but outsiders can access the sendmail server
to establish to connection to the private ip - I got
log from outside firewall)
 (272 Deny TCP 202.30.20.10:43053 172.16.10.12:25 in
via)

block drop in quick on fxp1 inet from 127.0.0.0/8 to
any
block drop in quick on fxp1 inet from 192.168.0.0/16
to any
block drop in quick on fxp1 inet from 172.16.0.0/12 to
any
block drop in quick on fxp1 inet from 10.0.0.0/8 to
any
block drop out quick on fxp1 inet from any to
127.0.0.0/8
block drop out quick on fxp1 inet from any to
192.168.0.0/16
block drop out quick on fxp1 inet from any to
172.16.0.0/12
block drop out quick on fxp1 inet from any to
10.0.0.0/8
pass in on fxp0 inet proto tcp from any to any port =
smtp flags S/SA keep state

2/ how can I configure the sendmail and DNS to not to
response the private address?

Thank you