<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Blog O' Matty &#187; OpenBSD Security</title>
	<atom:link href="http://prefetch.net/blog/index.php/category/openbsd-security/feed/" rel="self" type="application/rss+xml" />
	<link>http://prefetch.net/blog</link>
	<description>Blog O' Matty</description>
	<lastBuildDate>Wed, 16 May 2012 00:16:36 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	
		<item>
		<title>Debugging OpenBSD passwd problems</title>
		<link>http://prefetch.net/blog/index.php/2007/01/06/debugging-openbsd-passwd-problems/</link>
		<comments>http://prefetch.net/blog/index.php/2007/01/06/debugging-openbsd-passwd-problems/#comments</comments>
		<pubDate>Sat, 06 Jan 2007 20:29:46 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[OpenBSD Security]]></category>
		<category><![CDATA[OpenBSD Utilities]]></category>

		<guid isPermaLink="false">http://prefetch.net/blog/index.php/2007/01/06/debugging-openbsd-passwd-problems/</guid>
		<description><![CDATA[I recently had to manually add a few users to /etc/passwd and /etc/master.passwd on an OpenBSD 3.9 server. After I added the entries, the accounts were still unable to login. I started poking around with ktrace, and noticed that during a normal account creation session the files /etc/pwd.db and /etc/spwd.db were modified: $ ls -la [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2007/01/06/debugging-openbsd-passwd-problems/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Accessing services behind a NAT</title>
		<link>http://prefetch.net/blog/index.php/2006/06/25/460/</link>
		<comments>http://prefetch.net/blog/index.php/2006/06/25/460/#comments</comments>
		<pubDate>Sun, 25 Jun 2006 15:38:16 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[OpenBSD Security]]></category>

		<guid isPermaLink="false">http://daemons.net/~matty/blog/?p=460</guid>
		<description><![CDATA[I use the OpenBSD PF (packet filter) firewall at home to protect the systems I run, and to provide access to a few services over the Internet. The services I make accessible to the Internet run on servers in RFC 1918 address space, which requires my OpenBSD gateway to perform translate IP addresses and apply [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2006/06/25/460/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Visualizing IP Filter and PF state tables</title>
		<link>http://prefetch.net/blog/index.php/2005/10/08/visualizing-ip-filter-and-pf-state-tables/</link>
		<comments>http://prefetch.net/blog/index.php/2005/10/08/visualizing-ip-filter-and-pf-state-tables/#comments</comments>
		<pubDate>Sat, 08 Oct 2005 15:03:29 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[OpenBSD Security]]></category>
		<category><![CDATA[Solaris Security]]></category>

		<guid isPermaLink="false">http://daemons.net/~matty/blog/?p=186</guid>
		<description><![CDATA[IP Filter is a stateful packet inspecting firewall that ships with FreeBSD and Solaris 10. Stateful packet inspecting firewalls use a state table to maintain established connections, which allows packets to traverse the firewall if they are part of an existing established connection. IP filter comes with the ipfstat(1m) utility, which can be used to [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2005/10/08/visualizing-ip-filter-and-pf-state-tables/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Managing PF logfiles with Hatchet!</title>
		<link>http://prefetch.net/blog/index.php/2005/10/08/managing-pf-logfiles-with-hatchet/</link>
		<comments>http://prefetch.net/blog/index.php/2005/10/08/managing-pf-logfiles-with-hatchet/#comments</comments>
		<pubDate>Sat, 08 Oct 2005 04:08:24 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[OpenBSD Security]]></category>

		<guid isPermaLink="false">http://daemons.net/~matty/blog/?p=184</guid>
		<description><![CDATA[I came across Hatchet while reading through my daily news. Hatchet is a program to summarize PF logfiles, and it looks like an extremely useful piece of software!!]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2005/10/08/managing-pf-logfiles-with-hatchet/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>PF&#8217;s skip on interface directive</title>
		<link>http://prefetch.net/blog/index.php/2005/05/23/pfs-skip-on-interface-directive/</link>
		<comments>http://prefetch.net/blog/index.php/2005/05/23/pfs-skip-on-interface-directive/#comments</comments>
		<pubDate>Tue, 24 May 2005 02:04:20 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[OpenBSD Security]]></category>

		<guid isPermaLink="false">http://www.daemons.net/~matty/blog/?p=29</guid>
		<description><![CDATA[The OpenBSD packet filter (PF) received several enhancements in OpenBSD 3.7. One of the coolest things is the ability to tell PF not to filter traffic on specific interfaces, such as the loopback interface. This behavior is defined in the pf.conf configuration file with the &#8220;set skip on&#8221; statement: set skip on lo0 Prior to [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2005/05/23/pfs-skip-on-interface-directive/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Reading OpenBSD PF log entries in realtime</title>
		<link>http://prefetch.net/blog/index.php/2005/02/19/reading-openbsd-pf-log-entries-in-realtime/</link>
		<comments>http://prefetch.net/blog/index.php/2005/02/19/reading-openbsd-pf-log-entries-in-realtime/#comments</comments>
		<pubDate>Sat, 19 Feb 2005 04:17:51 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[OpenBSD Security]]></category>

		<guid isPermaLink="false">http://www.daemons.net/~matty/blog/?p=75</guid>
		<description><![CDATA[When the OpenBSD packet filter (PF) is configured to log traffic, each packet is logged to the OpenBSD &#8220;pflog&#8221; pseudo-device. This device can be queried with several tools, including tcpdump: oscar# tcpdump -i pflog0 -ttt -e -o tcpdump: WARNING: pflog0: no IPv4 address assigned tcpdump: listening on pflog0 Jan 23 21:27:33.361173 rule 4/0(match): block in [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2005/02/19/reading-openbsd-pf-log-entries-in-realtime/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>OpenBSD PF: Filtering traffic by Operating System</title>
		<link>http://prefetch.net/blog/index.php/2004/10/27/openbsd-pf-filtering-traffic-by-operating-system/</link>
		<comments>http://prefetch.net/blog/index.php/2004/10/27/openbsd-pf-filtering-traffic-by-operating-system/#comments</comments>
		<pubDate>Wed, 27 Oct 2004 04:35:08 +0000</pubDate>
		<dc:creator>matty</dc:creator>
				<category><![CDATA[OpenBSD Security]]></category>

		<guid isPermaLink="false">http://www.daemons.net/~matty/blog/?p=82</guid>
		<description><![CDATA[I was reading through the PF manual, and came across a section on filtering traffic with &#8220;Passive Operating System Fingerprinting&#8221;: http://www.openbsd.org/faq/pf/filter.html PF contains dozens of Operating System fingerprints. The full list of fingerprints can be printed with the pfctl utility: $ pfctl -s osfp &#124; tail -5 Windows XP RFC1323 Windows XP SP1 Windows XP [...]]]></description>
		<wfw:commentRss>http://prefetch.net/blog/index.php/2004/10/27/openbsd-pf-filtering-traffic-by-operating-system/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>

