pfctl command – nixCraft

OpenBSD / FreeBSD / NetBSD: PF Firewall List Rules

December 6, 2012December 6, 2012in FreeBSD, Openbsd, PF Firewall last updated December 6, 2012

I can use iptables -L -n command with Linux operating system to list the current firewall rules. How do I list all the current firewall rules under OpenBSD / FreeBSD / NetBSD operating systems? How can I see all pf firewall rules using command line tool?

MySQL/MariaDB Server: Bind To Multiple IP Address

December 6, 2012March 10, 2017in Debian / Ubuntu, FreeBSD, Iptables, Linux, MySQL, PF Firewall, UNIX last updated March 10, 2017

I have MySQL database system running on FreeBSD. The server has multiple ip address. The mysqld used by many websites hosted on two other CentOS based servers. I would like to bind MySQL sever running on Unix / Linux server to more than one IP address such as 202.54.1.2, 202.54.1.10, and 202.54.1.15. How can I bind mysqld to multiple ips?

BSD PF Firewall Block FTP Bruteforce Attacks

August 13, 2009August 13, 2009in Anti Spam, FreeBSD, Networking, Openbsd, PF Firewall, Security, UNIX last updated August 13, 2009

I see lots of failed FTP login attempts in my log file. How do I stop FTP bruteforce attack? What should I do to solve this problem under FreeBSD 7.x server operating systems?

BSD FTP-Proxy: PF Firewall Allow Outgoing Active / Passive FTP Connections

August 1, 2008November 9, 2009in FreeBSD, Networking, Openbsd, PF Firewall, Security last updated November 9, 2009

Q. I’ve FreeBSD based Apache webserver. I need to allow outgoing ftp client requests so that BSD ports collection can download from various ftp sites. How do I allow outgoing FTP connection via PF network firewall software under FreeBSD or OpenBSD operating system?

FreeBSD / OpenBSD: PF Firewall Filter Large Number Of Subnets and IP Address

July 10, 2008August 31, 2008in FreeBSD, Networking, Openbsd, PF Firewall, Security last updated August 31, 2008

Q. How do I filter larger number of subnets and IPs using OpenBSD’s pf firewall under FreeBSD 7.x server? How do I log all dropped packets from such ips? How do I block upto 10000 IPs or subnet without any performance penalty?

axfr-get: fatal: unable to parse AXFR results: protocol error and Solution

July 5, 2008July 5, 2009in Bind dns, Debian / Ubuntu, DJBDNS, Fedora Linux, FreeBSD, Iptables, Linux, Networking, Openbsd, PF Firewall, Security, Troubleshooting, UNIX last updated July 5, 2009

I‘m trying to get data (AXFR query) from master tinydns server to secondary DNS server using tcpclient as follows:
tcpclient -v a.ns.example.com 53 axfr-get example.com example.com example.com.tmp

But I’m getting an error which read as follows:

>axfr-get: fatal: unable to parse AXFR results: protocol error

How do I fix this problem?