#pf — Public Fediverse posts

Na crise entre Mendonça e a PF, há perguntas que ninguém quer fazer

https://fed.brid.gy/r/https://iclnoticias.com.br/na-crise-entre-mendonca-e-a-pf-ha-perguntas-que-ninguem-quer-fazer/

Na crise entre Mendonça e a PF, há perguntas que ninguém quer fazer

https://fed.brid.gy/r/https://iclnoticias.com.br/na-crise-entre-mendonca-e-a-pf-ha-perguntas-que-ninguem-quer-fazer/

Planalto viu crise entre Mendonça e PF como foco de desgaste às vésperas da eleição

https://fed.brid.gy/r/https://iclnoticias.com.br/planalto-crise-mendonca-pf-desgaste-eleicao/

Planalto viu crise entre Mendonça e PF como foco de desgaste às vésperas da eleição

https://fed.brid.gy/r/https://iclnoticias.com.br/planalto-crise-mendonca-pf-desgaste-eleicao/

🚨 EUVD-2024-24238

📊 Score: 7.8/10 (CVSS v3.1)
📦 Product: Linux, Linux, Linux (+17 more)
🏢 Vendor: Linux
📅 Published: 2024-05-01 | Updated: 2026-08-05

📝 In the Linux kernel, the following vulnerability has been resolved:

KVM: Always flush async #PF workqueue when vCPU is being destroyed

Always flush the per-vCPU async #PF workqueue when a vCPU is clearing its
co...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-24238

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2024-24238

📊 Score: 7.8/10 (CVSS v3.1)
📦 Product: Linux, Linux, Linux (+17 more)
🏢 Vendor: Linux
📅 Published: 2024-05-01 | Updated: 2026-08-05

📝 In the Linux kernel, the following vulnerability has been resolved:

KVM: Always flush async #PF workqueue when vCPU is being destroyed

Always flush the per-vCPU async #PF workqueue when a vCPU is clearing its
co...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-24238

#cybersecurity #infosec #euvd #cve #vulnerability

Flávio Dino autoriza novo inquérito da PF para investigar Lulinha

https://fed.brid.gy/r/https://iclnoticias.com.br/flavio-dino-autoriza-novo-inquerito-pf-lulinha/

Flávio Dino autoriza novo inquérito da PF para investigar Lulinha

https://fed.brid.gy/r/https://iclnoticias.com.br/flavio-dino-autoriza-novo-inquerito-pf-lulinha/

PF alertou Mendonça sobre grupo do Master que monitorava ações de autoridades

https://fed.brid.gy/r/https://iclnoticias.com.br/pf-alertou-mendonca-sobre-grupo-do-master/

PF alertou Mendonça sobre grupo do Master que monitorava ações de autoridades

https://fed.brid.gy/r/https://iclnoticias.com.br/pf-alertou-mendonca-sobre-grupo-do-master/

Every time I have anything to do with #nftables I'm reminded just how much I dislike it (and #iptables before it) and how great #OpenBSD #pf is.

Game seeks players! #PF-1e Ahkean Adventures
Flavour: "Semi-free form low to mid level Pathfinder game where youths touched by the divine come into their own."
Read more: https://www.rpgcrossing.com/showthread.php?t=235039
https://cdn.bsky.app/img/avatar_thumbnail/plain/did:plc:3hylqkbiorrnbz2ozq7y4f2t/bafkreid5wiqfytbzmudlabkv6vlgmgyxqvwfpqpbewzajzncuqcmmzepcq

Missing content? Check our main feed at https://bsky.app/profile/rpgcrossing.bsky.social/post/3mr5befys3n2o

Game seeks players! #PF-1e Ahkean Adventures
Flavour: "Semi-free form low to mid level Pathfinder game where youths touched by the divine come into their own."
Read more: https://www.rpgcrossing.com/showthread.php?t=235039
https://cdn.bsky.app/img/avatar_thumbnail/plain/did:plc:3hylqkbiorrnbz2ozq7y4f2t/bafkreid5wiqfytbzmudlabkv6vlgmgyxqvwfpqpbewzajzncuqcmmzepcq

Missing content? Check our main feed at https://bsky.app/profile/rpgcrossing.bsky.social/post/3mr5befys3n2o

Rei Midas reverso: Tudo que Flávio Bolsonaro toca vira inquérito.
- bsintcpt
https://www.intercept.com.br/2026/07/15/rei-midas-reverso-tudo-que-flavio-bolsonaro-toca-vira-inquerito/
#Poder #AssembleiaLegislativadoRiodeJaneiro #Eleies2026 #FlvioBolsonaro #PF #PL #PolciaFederal

Rei Midas reverso: Tudo que Flávio Bolsonaro toca vira inquérito.
- bsintcpt
https://www.intercept.com.br/2026/07/15/rei-midas-reverso-tudo-que-flavio-bolsonaro-toca-vira-inquerito/
#Poder #AssembleiaLegislativadoRiodeJaneiro #Eleies2026 #FlvioBolsonaro #PF #PL #PolciaFederal

Sobre Vald3mar da #Costa Net0 , presidente do #PL, partido de Flávi0 Rachadinha Chocolate B0Is0nar0 ( #PL RJ) , é alvo de investigação da #PF por desvio de R$ 119 milhões em #Emendas -

https://www.instagram.com/p/Dany-qcJqc_/ -

RI @helder.rsilva13 - #Emendas #Corrupção -

Game seeks players! #PF-1e Bar Crawl
Flavour: "One Off Bar Crawl"
Read more: https://www.rpgcrossing.com/showthread.php?t=235007
https://cdn.bsky.app/img/avatar_thumbnail/plain/did:plc:3hylqkbiorrnbz2ozq7y4f2t/bafkreid5wiqfytbzmudlabkv6vlgmgyxqvwfpqpbewzajzncuqcmmzepcq

Missing content? Check our main feed at https://bsky.app/profile/rpgcrossing.bsky.social/post/3mqcaoqe3th2v

Game seeks players! #PF-1e Bar Crawl
Flavour: "One Off Bar Crawl"
Read more: https://www.rpgcrossing.com/showthread.php?t=235007
https://cdn.bsky.app/img/avatar_thumbnail/plain/did:plc:3hylqkbiorrnbz2ozq7y4f2t/bafkreid5wiqfytbzmudlabkv6vlgmgyxqvwfpqpbewzajzncuqcmmzepcq

Missing content? Check our main feed at https://bsky.app/profile/rpgcrossing.bsky.social/post/3mqcaoqe3th2v

Perito investigado abordou delegada do caso Master e citou jornalista

https://fed.brid.gy/r/https://iclnoticias.com.br/perito-investigado-aborda-delegada-caso-master/

Perito investigado abordou delegada do caso Master e citou jornalista

https://fed.brid.gy/r/https://iclnoticias.com.br/perito-investigado-aborda-delegada-caso-master/

https://www.lovenba.com/1784705/ SIAKAM to the Pelicans?!? #nbatraderumors #Basketball #blockbuster #breaking #CentralDivision #Champion #EasternConference #HerbJones #IndianaPacers #JordanPoole #Journalism #moves #NBA #OFFSEASON #Pacers #Pelicans #PF #PowerForward #Siakam #StarsLookOn #trade #viral #zion

Enquanto a #PF investiga o #B0Is0Master sobre indícios de #Fraude, #ManipulaçãoContábil e bloqueio de centenas de milhões de reais, a gestão de Tarcísio de Freitas aparentemente abriu as portas do consignado da Polícia Militar para o #DigiMais -

https://www.instagram.com/p/DZ8AboVo9t_/ -

RI @reisptsp -

@bpl I'd recommend moving domain blocklist expectations to a higher level outside the browser, whether your /etc/hosts to prevent domain-name resolution or a local firewall (I'm a fan of #pf) preventing outbound access to a list of hosts to prevent communications with them even if connected by IP address alone rather than name.

@bpl I'd recommend moving domain blocklist expectations to a higher level outside the browser, whether your /etc/hosts to prevent domain-name resolution or a local firewall (I'm a fan of #pf) preventing outbound access to a list of hosts to prevent communications with them even if connected by IP address alone rather than name.

Game seeks players! #PF-1e Frostbound Crown of Snowy Reef
Flavour: "Open World, Dark, Limited Resources"
Read more: https://www.rpgcrossing.com/showthread.php?t=234921
https://cdn.bsky.app/img/avatar_thumbnail/plain/did:plc:3hylqkbiorrnbz2ozq7y4f2t/bafkreid5wiqfytbzmudlabkv6vlgmgyxqvwfpqpbewzajzncuqcmmzepcq

Missing content? Check our main feed at https://bsky.app/profile/rpgcrossing.bsky.social/post/3momav5clg32g

Game seeks players! #PF-1e Frostbound Crown of Snowy Reef
Flavour: "Open World, Dark, Limited Resources"
Read more: https://www.rpgcrossing.com/showthread.php?t=234921
https://cdn.bsky.app/img/avatar_thumbnail/plain/did:plc:3hylqkbiorrnbz2ozq7y4f2t/bafkreid5wiqfytbzmudlabkv6vlgmgyxqvwfpqpbewzajzncuqcmmzepcq

Missing content? Check our main feed at https://bsky.app/profile/rpgcrossing.bsky.social/post/3momav5clg32g

Finally it's here! Unfortunately I have only the previous 2 editions of @pitrh book of PF and never got the first edition.

P.S.: screw that Bezos guy, I bought them directly from Nostarch Press.

#RunBSD #PF #OpenBSD

Finally it's here! Unfortunately I have only the previous 2 editions of @pitrh book of PF and never got the first edition.

P.S.: screw that Bezos guy, I bought them directly from Nostarch Press.

#RunBSD #PF #OpenBSD

Jaques Wagner criou “ambiente propício” ao Master segundo a PF | BandNews TV

Saiba mais em: 📱 Redes sociais: 📸 Instagram: 🐦Twitter: ➡️ TikTok: 🔵 Facebook: #bandnewstv #PT #Governo #Master #Fraude #PF #operação

https://fllics.com/en/video/jaques-wagner-criou-ambiente-propicio-ao-master-segundo-a-pf-bandnews-tv/

Jaques Wagner criou “ambiente propício” ao Master segundo a PF | BandNews TV

Saiba mais em: 📱 Redes sociais: 📸 Instagram: 🐦Twitter: ➡️ TikTok: 🔵 Facebook: #bandnewstv #PT #Governo #Master #Fraude #PF #operação

https://fllics.com/en/video/jaques-wagner-criou-ambiente-propicio-ao-master-segundo-a-pf-bandnews-tv/

The approval comes as the EPFO prepares to introduce a series of digital reforms through its proposed EPFO 3.0 platform. https://english.mathrubhumi.com/news/money/epf-interest-rate-stays-at-8-25-percent-for-fy26-what-epfo-members-should-know-u0snwq84?utm_source=dlvr.it&utm_medium=mastodon #EPFO #pf #interestrate

❤️ #FreeBSD jails

I'm turning a cheap-ass VPS into a gotosocial instance. I created 3 jails for nginx, postgres and gotosocial service. This works really cleanly, each jail has an internal IP address, the only ports open on the VPS are port 22 (for ssh, password login disabled), and 80 and 443 which route directly to the nginx jail. So simple to set up and extremely secure. #ZFS means the storage overhead for each jail is small. #PF (packet filter) is the firewall. Everything is quite tractable.

❤️ #FreeBSD jails

I'm turning a cheap-ass VPS into a gotosocial instance. I created 3 jails for nginx, postgres and gotosocial service. This works really cleanly, each jail has an internal IP address, the only ports open on the VPS are port 22 (for ssh, password login disabled), and 80 and 443 which route directly to the nginx jail. So simple to set up and extremely secure. #ZFS means the storage overhead for each jail is small. #PF (packet filter) is the firewall. Everything is quite tractable.

I upgraded my box to #FreeBSD 15.1-RELEASE. Everything ran smoothly as always.

After that I upgraded my 3 #Bastille #jails to FreeBSD 15.1-RELEASE too.
I just found anything strange:

{HOST} # bastille service <JailName> pf restart

[JailName]:
Enabling pfpfctl: DIOCADDRULE: Operation not permitted
/etc/rc.d/pf: WARNING: Unable to load /etc/pf.conf.
pfctl: DIOCSTART: Operation not permitted.

To solve this issue with PF startup, I had to change jails securelevel to 1 instead of 2 (default value).

Is it normal now, or should I missed something?

#FreeBSD #BastilleBSD #PF

I upgraded my box to #FreeBSD 15.1-RELEASE. Everything ran smoothly as always.

After that I upgraded my 3 #Bastille #jails to FreeBSD 15.1-RELEASE too.
I just found anything strange:

{HOST} # bastille service <JailName> pf restart

[JailName]:
Enabling pfpfctl: DIOCADDRULE: Operation not permitted
/etc/rc.d/pf: WARNING: Unable to load /etc/pf.conf.
pfctl: DIOCSTART: Operation not permitted.

To solve this issue with PF startup, I had to change jails securelevel to 1 instead of 2 (default value).

Is it normal now, or should I missed something?

#FreeBSD #BastilleBSD #PF

While doing some device testing, my understanding of how DummyNet is setup on PF was lacking. The Manpage gave no examples. So here are some for #FreeBSD #PF Routers.

Up Only
pass quick on $if_int from <slowDevices> to <fb> dnpipe 1

Up/Down (Responses)
pass quick on $if_int from <slowDevices> to <fb> dnpipe (1, 2)

Manpage:"The first pipe or queue number will be used to
shape the traffic in the rule direction, the second will be used to shape
the traffic in the reverse direction."

While doing some device testing, my understanding of how DummyNet is setup on PF was lacking. The Manpage gave no examples. So here are some for #FreeBSD #PF Routers.

Up Only
pass quick on $if_int from <slowDevices> to <fb> dnpipe 1

Up/Down (Responses)
pass quick on $if_int from <slowDevices> to <fb> dnpipe (1, 2)

Manpage:"The first pipe or queue number will be used to
shape the traffic in the rule direction, the second will be used to shape
the traffic in the reverse direction."

I'm trying to setup wireguard, but as a first step, I can't seem to get a simple ping to work, not even to the normal ip address. I'm guessing it's a firewall thing, I've already set `pass inet proto icmp all icmp-type $icmp_types keep state` but no luck.. (pf on FreeBSD)

Giving up for today 😅

#pf #firewall #icmp #FreeBSD

PF investiga empresa de Virginia por R$ 22,4 mi recebidos: Relatórios do Coaf citam repasses à Talismã Digital; defesa da influenciadora nega irregularidades. Leia no Poder360. https://www.poder360.com.br/poder-justica/pf-investiga-empresa-de-virginia-por-r-224-mi-recebidos/ #PF #TalismãDigital

Daniel Vorcaro tenta enviar delação mas as informações não agradam a PF | BandNews TV

Saiba mais em: 📱 Redes sociais: 📸 Instagram: 🐦Twitter: ➡️ TikTok: 🔵 Facebook: #bandnewstv #Master #Vorcaro #PF #delação

https://fllics.com/en/video/daniel-vorcaro-tenta-enviar-delacao-mas-as-informacoes-nao-agradam-a-pf-bandnews-tv/

Daniel Vorcaro tenta enviar delação mas as informações não agradam a PF | BandNews TV

Saiba mais em: 📱 Redes sociais: 📸 Instagram: 🐦Twitter: ➡️ TikTok: 🔵 Facebook: #bandnewstv #Master #Vorcaro #PF #delação

https://fllics.com/en/video/daniel-vorcaro-tenta-enviar-delacao-mas-as-informacoes-nao-agradam-a-pf-bandnews-tv/

PF cumpre buscas contra desembargador suspeito de venda de decisões em MT

https://fed.brid.gy/r/https://iclnoticias.com.br/pf-cumpre-buscas-contra-desembargador/

PF cumpre buscas contra desembargador suspeito de venda de decisões em MT

https://fed.brid.gy/r/https://iclnoticias.com.br/pf-cumpre-buscas-contra-desembargador/

TIL that #OpenBSD's #pf doesn't whinge about using variables in CIDR notation:

wan_if="ixv0"
dmz_if="ixv1"
dmz_cidr="24"
pass in on $wan_if to ($dmz_if:network)/$dmz_cidr

I haven't tested to see if it does what I *intended*, but at least

$ pfctl -nvf test.pf

doesn't spew errors… 😆

(even if it feels kinda dirty)

TIL that #OpenBSD's #pf doesn't whinge about using variables in CIDR notation:

wan_if="ixv0"
dmz_if="ixv1"
dmz_cidr="24"
pass in on $wan_if to ($dmz_if:network)/$dmz_cidr

I haven't tested to see if it does what I *intended*, but at least

$ pfctl -nvf test.pf

doesn't spew errors… 😆

(even if it feels kinda dirty)

I have a #firewall question that perhaps #AskFedi can help with please: Is it worth pre-calculating a whitelist by removing black listed items from it first, and if so, what tool do you use to do that?

More specifically: I have a geoIP based whitelist for some countries. I also have a global blacklist. I was thinking it might be easier to create one allow list, that removes the IPs (v4, v6, and ranges in CIDR notation) that appear in the blacklist from the geoIP list. I'm running #pf on #FreeBSD if that makes a difference. Or should I just load both into the firewall as pass and block respectively, and let it calculate if the IP is allowed to connect?

I tried using grepcidr to do this calculation, but it doesn't seem to do the set maths I was hoping it would do. But I'm not even sure it's worth bothering.

#Networking #HomeLab #webserver #OpenBSD

I have a #firewall question that perhaps #AskFedi can help with please: Is it worth pre-calculating a whitelist by removing black listed items from it first, and if so, what tool do you use to do that?

More specifically: I have a geoIP based whitelist for some countries. I also have a global blacklist. I was thinking it might be easier to create one allow list, that removes the IPs (v4, v6, and ranges in CIDR notation) that appear in the blacklist from the geoIP list. I'm running #pf on #FreeBSD if that makes a difference. Or should I just load both into the firewall as pass and block respectively, and let it calculate if the IP is allowed to connect?

I tried using grepcidr to do this calculation, but it doesn't seem to do the set maths I was hoping it would do. But I'm not even sure it's worth bothering.

#Networking #HomeLab #webserver #OpenBSD

At BSDCan 2026: Full day Network Management with the Packet Filter Toolset on OpenBSD and FreeBSD https://www.bsdcan.org/2026/timetable/timetable-Network-Management-with.html

To register: https://www.bsdcan.org/2026/registration.html

See https://nxdomain.no/~peter/pf_tutorial_upcoming_questions_welcome.html (https://bsdly.blogspot.com/2025/05/for-upcoming-pf-tutorials-we-welcome.html)
and https://nxdomain.no/~peter/what_is_bsd_come_to_a_conference_to_find_out.html (https://bsdly.blogspot.com/2025/11/what-is-bsd-come-to-conference-to-find.html)
plus https://nostarch.com/book-of-pf-4e

#pf #packetfilter #bookofpf #networking @nostarch @bsdcan

At BSDCan 2026: Full day Network Management with the Packet Filter Toolset on OpenBSD and FreeBSD https://www.bsdcan.org/2026/timetable/timetable-Network-Management-with.html

To register: https://www.bsdcan.org/2026/registration.html

See https://nxdomain.no/~peter/pf_tutorial_upcoming_questions_welcome.html (https://bsdly.blogspot.com/2025/05/for-upcoming-pf-tutorials-we-welcome.html)
and https://nxdomain.no/~peter/what_is_bsd_come_to_a_conference_to_find_out.html (https://bsdly.blogspot.com/2025/11/what-is-bsd-come-to-conference-to-find.html)
plus https://nostarch.com/book-of-pf-4e

#pf #packetfilter #bookofpf #networking @nostarch @bsdcan

Use #IPv6 they said! It's the future!

Can I please have the 3 hours back that I wasted trying to resolve a #pf firewall issue caused by transposing two digits in an IPv6 IP address?

PF transfere Vorcaro para cela comum após entrega inicial da delação

https://fed.brid.gy/r/https://iclnoticias.com.br/vorcaro-vai-para-cela-comum-apos-delacao/