#pf — Public Fediverse posts

Automatic expiry at timeout for pf(4) overload tables https://undeadly.org/cgi?action=article;sid=20260513064948 #openbsd #pf #packetfilter #overload #overloadtables #statetracking #timeout #expiry #autoexpiry #autotimeout #networking #networktrickery

Automatic expiry at timeout for pf(4) overload tables https://undeadly.org/cgi?action=article;sid=20260513064948 #openbsd #pf #packetfilter #overload #overloadtables #statetracking #timeout #expiry #autoexpiry #autotimeout #networking #networktrickery

Automatic expiry at timeout for pf(4) overload tables https://undeadly.org/cgi?action=article;sid=20260513064948 #openbsd #pf #packetfilter #overload #overloadtables #statetracking #timeout #expiry #autoexpiry #autotimeout #networking #networktrickery

Automatic expiry at timeout for pf(4) overload tables https://undeadly.org/cgi?action=article;sid=20260513064948 #openbsd #pf #packetfilter #overload #overloadtables #statetracking #timeout #expiry #autoexpiry #autotimeout #networking #networktrickery

Automatic expiry at timeout for pf(4) overload tables https://undeadly.org/cgi?action=article;sid=20260513064948 #openbsd #pf #packetfilter #overload #overloadtables #statetracking #timeout #expiry #autoexpiry #autotimeout #networking #networktrickery

New post: FreeBSD resource monitoring and accounting.

A practical tour of the base-system toolkit for figuring out *what is actually using my server*: top, vmstat, systat, gstat, netstat/sockstat, procstat, pfctl, and per-jail attribution with kern.racct and rctl.

No ports, no agents. Just FreeBSD.

https://blog.hofstede.it/freebsd-resource-monitoring-accounting-and-troubleshooting/

#FreeBSD #BSD #Jails #pf #SysAdmin #DevOps #Unix #BSD #Blog

New post: FreeBSD resource monitoring and accounting.

A practical tour of the base-system toolkit for figuring out *what is actually using my server*: top, vmstat, systat, gstat, netstat/sockstat, procstat, pfctl, and per-jail attribution with kern.racct and rctl.

No ports, no agents. Just FreeBSD.

https://blog.hofstede.it/freebsd-resource-monitoring-accounting-and-troubleshooting/

#FreeBSD #BSD #Jails #pf #SysAdmin #DevOps #Unix #BSD #Blog

New post: FreeBSD resource monitoring and accounting.

A practical tour of the base-system toolkit for figuring out *what is actually using my server*: top, vmstat, systat, gstat, netstat/sockstat, procstat, pfctl, and per-jail attribution with kern.racct and rctl.

No ports, no agents. Just FreeBSD.

https://blog.hofstede.it/freebsd-resource-monitoring-accounting-and-troubleshooting/

#FreeBSD #BSD #Jails #pf #SysAdmin #DevOps #Unix #BSD #Blog

New post: FreeBSD resource monitoring and accounting.

A practical tour of the base-system toolkit for figuring out *what is actually using my server*: top, vmstat, systat, gstat, netstat/sockstat, procstat, pfctl, and per-jail attribution with kern.racct and rctl.

No ports, no agents. Just FreeBSD.

https://blog.hofstede.it/freebsd-resource-monitoring-accounting-and-troubleshooting/

#FreeBSD #BSD #Jails #pf #SysAdmin #DevOps #Unix #BSD #Blog

Trying to figure out networking and (OpenBSD) pf at the same time...

Basically, I have a secondary IPv4 address on my OpenBSD webserver that I want to forward to my IPv6-only Wii - as if the IPv4 address was the Wii's.

What forwarding mode is appropriate? nat-to, af-to, rdr-to?

#OpenBSD #pf #networking

Game seeks players! #PF-2e [PF2e and SF2e] Moonlight Sonata
Flavour: "Fey Stories from Around the World (both light and dark) as well as normal adventuring."
Read more: https://www.rpgcrossing.com/showthread.php?t=234695
https://cdn.bsky.app/img/avatar_thumbnail/plain/did:plc:3hylqkbiorrnbz2ozq7y4f2t/bafkreid5wiqfytbzmudlabkv6vlgmgyxqvwfpqpbewzajzncuqcmmzepcq

Missing content? Check our main feed at https://bsky.app/profile/rpgcrossing.bsky.social/post/3ml3bqu5dz32y

Recover inactive PF accounts with the new EPFO E-PRAAPTI portal. Learn how to link old accounts to UAN and check claim status for 2026. Click to get started! https://english.mathrubhumi.com/news/money/epfo-e-praapti-portal-recover-inoperative-pf-accounts-tijlw0t4?utm_source=dlvr.it&utm_medium=mastodon #PF #EPFO #pfaccount #ePRAAPTI #UAN

At BSDCan 2026: Full day Network Management with the Packet Filter Toolset on OpenBSD and FreeBSD https://www.bsdcan.org/2026/timetable/timetable-Network-Management-with.html

To register: https://www.bsdcan.org/2026/registration.html

See https://nxdomain.no/~peter/pf_tutorial_upcoming_questions_welcome.html (https://bsdly.blogspot.com/2025/05/for-upcoming-pf-tutorials-we-welcome.html)
and https://nxdomain.no/~peter/what_is_bsd_come_to_a_conference_to_find_out.html (https://bsdly.blogspot.com/2025/11/what-is-bsd-come-to-conference-to-find.html)
plus https://nostarch.com/book-of-pf-4e

#pf #packetfilter #bookofpf #networking @nostarch @bsdcan

Built an AI agent harness on OpenBSD 7.8, as a test and - because why not(?)
It's 198 agents. 198 UNIX users. One kernel.

Each job runs through a setuid C wrapper:
chroot(2) → unveil(2) → pledge(2) → execve(2)
PF handles per-department egress. Every syscall is logged.

Idle agents cost zero RAM. They're just directory entries until the executor calls them up. No containers. No VMs. No orchestrator bloat.
Just OpenBSD being exactly what it was built to be. ❤️

More people should know this OS is the ultimate AI harness. 🐡

#OpenBSD #pledge #unveil #pf #BSD #AI #agenticAI

Lula comenta operações exitosas da PF: “seguimos firmes no combate ao crime no Brasil”.
- bshpvo
https://horadopovo.com.br/lula-comenta-operacoes-exitosas-da-pf-seguimos-firmes-no-combate-ao-crime-no-brasil/
#Poltica #Contrabando #Crime #Lula #Operao #PF

[Repost for the morning (CEST) crowd]

Friends, I wrote a book. It's now out in its fourth edition.

More in "The Book of PF, 4th Edition: It's Here, It's Real" https://nxdomain.no/~peter/its_real_its_here.html

For background, "Yes, The Book of PF, 4th Edition Is Coming Soon" https://nxdomain.no/~peter/yes_the_book_of_pf_4th_ed_is_coming.html

Get the book: https://nostarch.com/book-of-pf-4e

@nostarch #bookofpf #pf #networking #openbsd #freebsd #networktrickery #cybersecurity

BSDCan https://www.bsdcan.org/2026/ Tutorial Thursday 2026-06-18: 09:00 - 16:00 DMS 1120
Network Management with the PF Packet Filter Toolset on OpenBSD and FreeBSD
Peter Hansteen, Massimiliano Stucchi, Tom Smyth
https://www.bsdcan.org/2026/timetable/timetable-Network-Management-with.html
To register https://www.bsdcan.org/2026/registration.html @bsdcan #openbsd #freebsd #pf #networking

#STF #Xandao #BancoMaster #Vorcaro

Perigoso isso aí. Capaz a #PF inteira seja indiciada no ~ inquérito das fake news ~.

https://www.band.com.br/politica/noticias/pf-apura-se-vorcaro-beneficiou-moraes-com-imoveis-de-luxo-202604241203

Governo autoriza nomeação de mil aprovados para concurso da PF

https://fed.brid.gy/r/https://iclnoticias.com.br/governo-autoriza-nomeacao-aprovados-para-pf/

Lula anuncia mil novas vagas de agentes da PF e diz que vai combater e prender a bandidagem do país.
- bshpvo
https://horadopovo.com.br/lula-anuncia-mil-novas-vagas-de-agentes-da-pf-e-diz-que-vai-combater-e-prender-a-bandidagem-do-pais/
#Capa #Armas #Crimeorganizado #Drogas #Lula #PF

Lula achou adequada expulsão por reciprocidade de um oficial norte-americano do Brasil.
- bshpvo
https://horadopovo.com.br/lula-achou-adequada-expulsao-por-reciprocidade-de-um-oficial-norte-americano-do-brasil/
#Capa #Brasil #EUA #Expulso #OficialdosEUA #PF #Reciprocidade

Planalto aguarda explicações dos EUA sobre expulsão de delegado brasileiro.
- bshpvo
https://horadopovo.com.br/planalto-aguarda-explicacoes-dos-eua-sobre-expulsao-de-delegado-brasileiro/
#Capa #EUA #Fugitivo #Golpe #PF #Ramagem #Trump

Lula quer reciprocidade na expulsão por Trump do delegado brasileiro que atuou no caso Ramagem.
- bshpvo
https://horadopovo.com.br/lula-quer-reciprocidade-na-expulsao-por-trump-do-delegado-brasileiro-que-atuou-no-caso-ramagem/
#Capa #Delegadobrasileiro #Expulso #PF #Reciprocidade #Trump

Schrödinger's Honeypot on FreeBSD and nginx

https://blog.giersig.eu/articles/schroedingers-honeypot-on-freebsd-and/

Game seeks players! #PF-1e The Harrowing
Flavour: "A dark fantasy adventure where the characters are trapped inside a living, magical card deck. It focuses on Gothic storytelling, Varisian lore, and navigating the chaotic, sentient ..."
Read more: https://www.rpgcrossing.com/showthread.php?t=234626
https://cdn.bsky.app/img/avatar_thumbnail/plain/did:plc:3hylqkbiorrnbz2ozq7y4f2t/bafkreid5wiqfytbzmudlabkv6vlgmgyxqvwfpqpbewzajzncuqcmmzepcq

Missing content? Check our main feed at https://bsky.app/profile/rpgcrossing.bsky.social/post/3mjszhbbo6k2h

PF vai ouvir explicações sobre suspeita de mesada para decidir se convoca filho do Lula para depor

https://fed.brid.gy/r/https://iclnoticias.com.br/pf-ouve-explicacoes-sobre-mesada/

PF prende ex-presidente do BRB. Agora falta o bolsonarista Ibaneis Rocha.
- bshpvo
https://horadopovo.com.br/pf-prende-ex-presidente-do-brb-agora-falta-o-bolsonarista-ibaneis-rocha/
#Capa #BRB #Ibaneis #Master #PauloHenriqueCosta #PF #Vorcaro

MC Poze do Rodo é preso em operação da PF contra esquema de lavagem de dinheiro

https://fed.brid.gy/r/https://iclnoticias.com.br/mc-poze-do-rodo-e-preso-em-operacao-da-pf/

Moraes manda PF apurar se Flávio Bolsonaro cometeu crime em post contra Lula

https://fed.brid.gy/r/https://iclnoticias.com.br/moraes-manda-pf-apurar-se-flavio-bolsonaro/

The router has been up for 16 days and 11 hours without any incidents—what a milestone!!

#openbsd #pf

Diretor da PF diz que prisão de Ramagem nos EUA é resultado de cooperação com o Brasil

https://fed.brid.gy/r/https://iclnoticias.com.br/pf-diz-que-prisao-ramagem-resultado-cooperacao/

pfsync(4) Packet Header Field Renamed to Avoid AI Bug Report Noise https://www.undeadly.org/cgi?action=article;sid=20260413055845 #openbsd #pfsync #networking #redundancy #carp #pf #packetfilter #development #libresoftware #freesoftware

I finally got a @BoxyBSD VM today. The installation using the ISO went smoothly.
However, writing firewall rules in pf instead of nftables still takes some practice.
I hope I’ll be able to port and test my crazytrace program on FreeBSD.

#FreeBSD #BoxyBSD #PF #nftables #BSDNewbie

A tiny mistake in your PF account could cost you your pension. EPFO warns members to check key details now before it’s too late. https://english.mathrubhumi.com/news/money/epfo-pf-date-correction-joining-date-exit-date-uqe546y2?utm_source=dlvr.it&utm_medium=mastodon #EPFO #Pension #PF #Retirement #Money

Need your PF money urgently? EPFO just made withdrawals faster, simpler, and even possible via UPI soon—here’s how much you can take out and when. https://english.mathrubhumi.com/news/india/epfo-withdrawal-rules-new-update-guide-e2zsse0r?utm_source=dlvr.it&utm_medium=mastodon #EPFO #PF #Withdrawal #IndiaNews #NewRules

Running #OpenBSD 7.8 ​:openbsd:​

DNS: #nsd (3 Master Zones), #DNSSEC & #DANE (RFC6698) + #unbound
Firewall: #pf with auto-fed tables (IPS-style), spambot-tarpitting & service rate limits.
Mail: #smtpd (Multi-domain, RFC8461/MTA-STS) + #rspamd (DKIM) + #dovecot (IMAPS-only).
Spam-Defense: #spamd with auto-SPF-walk (no more greylisting issues).
Web: #relayd (TLS-Terminator, HSTS, CSP) + #httpd (NIP-05, Autoconfig, security.txt).
Performance: Lightweight "Fail2Ban" via 1-liner shell script (No Python crap!).

#Nostr Relay in Rust building...

#SelfHosted #SysAdmin #Security #Privacy

Running #OpenBSD 7.8 ​:openbsd:​

DNS: #nsd (3 Master Zones), #DNSSEC & #DANE (RFC6698) + #unbound
Firewall: #pf with auto-fed tables (IPS-style), spambot-tarpitting & service rate limits.
Mail: #smtpd (Multi-domain, RFC8461/MTA-STS) + #rspamd (DKIM) + #dovecot (IMAPS-only).
Spam-Defense: #spamd with auto-SPF-walk (no more greylisting issues).
Web: #relayd (TLS-Terminator, HSTS, CSP) + #httpd (NIP-05, Autoconfig, security.txt).
Performance: Lightweight "Fail2Ban" via 1-liner shell script (No Python crap!).

#Nostr Relay in Rust building...

#SelfHosted #SysAdmin #Security #Privacy

Running #OpenBSD 7.8 ​:openbsd:​

DNS: #nsd (3 Master Zones), #DNSSEC & #DANE (RFC6698) + #unbound
Firewall: #pf with auto-fed tables (IPS-style), spambot-tarpitting & service rate limits.
Mail: #smtpd (Multi-domain, RFC8461/MTA-STS) + #rspamd (DKIM) + #dovecot (IMAPS-only).
Spam-Defense: #spamd with auto-SPF-walk (no more greylisting issues).
Web: #relayd (TLS-Terminator, HSTS, CSP) + #httpd (NIP-05, Autoconfig, security.txt).
Performance: Lightweight "Fail2Ban" via 1-liner shell script (No Python crap!).

#Nostr Relay in Rust building...

#SelfHosted #SysAdmin #Security #Privacy

Running #OpenBSD 7.8 ​:openbsd:​

DNS: #nsd (3 Master Zones), #DNSSEC & #DANE (RFC6698) + #unbound
Firewall: #pf with auto-fed tables (IPS-style), spambot-tarpitting & service rate limits.
Mail: #smtpd (Multi-domain, RFC8461/MTA-STS) + #rspamd (DKIM) + #dovecot (IMAPS-only).
Spam-Defense: #spamd with auto-SPF-walk (no more greylisting issues).
Web: #relayd (TLS-Terminator, HSTS, CSP) + #httpd (NIP-05, Autoconfig, security.txt).
Performance: Lightweight "Fail2Ban" via 1-liner shell script (No Python crap!).

#Nostr Relay in Rust building...

#SelfHosted #SysAdmin #Security #Privacy

Running #OpenBSD 7.8 ​:openbsd:​

DNS: #nsd (3 Master Zones), #DNSSEC & #DANE (RFC6698) + #unbound
Firewall: #pf with auto-fed tables (IPS-style), spambot-tarpitting & service rate limits.
Mail: #smtpd (Multi-domain, RFC8461/MTA-STS) + #rspamd (DKIM) + #dovecot (IMAPS-only).
Spam-Defense: #spamd with auto-SPF-walk (no more greylisting issues).
Web: #relayd (TLS-Terminator, HSTS, CSP) + #httpd (NIP-05, Autoconfig, security.txt).
Performance: Lightweight "Fail2Ban" via 1-liner shell script (No Python crap!).

#Nostr Relay in Rust building...

#SelfHosted #SysAdmin #Security #Privacy

Nice, someone has written an updated #ZFS management module for #Webmin for #FreeBSD which really looks helpful. Its not only offering #ZFS managment, there is also #Samba, #PF #NFS and various other types configuration like #ACL management included, too. Wow!

With this, #Webmin is nearly feature complete. I'm only missing #Bastille or #Bhyve modules.

https://github.com/karmantyu/ZFSgame

Nice, someone has written an updated #ZFS management module for #Webmin for #FreeBSD which really looks helpful. Its not only offering #ZFS managment, there is also #Samba, #PF #NFS and various other types configuration like #ACL management included, too. Wow!

With this, #Webmin is nearly feature complete. I'm only missing #Bastille or #Bhyve modules.

https://github.com/karmantyu/ZFSgame

Nice, someone has written an updated #ZFS management module for #Webmin for #FreeBSD which really looks helpful. Its not only offering #ZFS managment, there is also #Samba, #PF #NFS and various other types configuration like #ACL management included, too. Wow!

With this, #Webmin is nearly feature complete. I'm only missing #Bastille or #Bhyve modules.

https://github.com/karmantyu/ZFSgame

Nice, someone has written an updated #ZFS management module for #Webmin for #FreeBSD which really looks helpful. Its not only offering #ZFS managment, there is also #Samba, #PF #NFS and various other types configuration like #ACL management included, too. Wow!

With this, #Webmin is nearly feature complete. I'm only missing #Bastille or #Bhyve modules.

https://github.com/karmantyu/ZFSgame

Em poucas horas, Justiça derruba eleição relâmpago na Alerj que elegeu Douglas Ruas (PL)

https://web.brid.gy/r/https://www.brasildefato.com.br/2026/03/26/em-poucas-horas-justica-derruba-eleicao-relampago-na-alerj-que-elegeu-douglas-ruas-pl/

In case you missed it earlier,

The Book of PF, 4th Edition: It's Here, It's Real https://nxdomain.no/~peter/its_real_its_here.html

And I will have copies with me to upcoming events #openbsd #freebsd #bsd #pf #packetfilter #bookofpf #4thedition #asiabsdcon #bsdcan #eurobsdcon @nostarch

Крастерский маршрутизатор на FreeBSD из старого компа

Доброго свободного времени, товарищи! в этой своей первой статье хотел бы вам рассказать как я будучи далёк от сетевых технологий перешел с роутера мыльницы на старый комп из-под дивана.

https://habr.com/ru/articles/1012524/

#freebsd #unbound #mpd5 #pf #dhcpd

The Book of PF, 4th Edition: It's Here, It's Real https://nxdomain.no/~peter/its_real_its_here.html - now that I have physical copies, I'll bring some to the upcoming conferences such as #asiabsdcon #bsdcan #eurobsdcon #freebsd #openbsd #pf #packetfilter #networking #networktrickery #freesoftware #libresoftware #bookofpf @EuroBSDCon @nostarch

Yes, You Too Can Be An Evil Network Overlord - On The Cheap With OpenBSD, pflow And nfsen https://nxdomain.no/~peter/yes_you_too_can_be_an_evil_network_verlord.html

A story about network metadata and #openbsd, originally from 2014, good for reprising. See The Book of PF for more #nfsen #netflow #pflow #monitoring #networking #security #pf #packetfilter #bookofPF @nostarch

Budget 2026-27 simplifies PF trusts & employer contributions. Discover how PF trust rationalisation benefits employers and employees. Click for details on tax clarity & compliance! https://english.mathrubhumi.com/news/money/pf-trust-rationalisation-budget-2026-27-nkkcqx3t?utm_source=dlvr.it&utm_medium=mastodon #EPFO #PF #UnionBudget2026 #Tax