A few of my friends are beginning to blog more. Two of the funniest (unlike my unashamedly techie site) are Dave and Oli.
Dave has even had some success with a tonne of comments, some advertising and radio coverage because he spotted a massive gap in the market - ranting about poor motorway drivers in the […]
I think the PF flowchart is absolutely key to writing and understanding OpenBSD pf rulesets (in addition to man pf.conf, man pf and man pfctl). I recently converted it to extended ASCII:
┌─────â”
│ IN │
└──┬──┘
↓
┌───────────┴──────────â”
│ Packet Normalisation │
└───────────┬──────────┘
↓
State exists ┌──────┴──────â”
┌â†â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”¤ State Check │
│ └──────┬──────┘
↓ ↓
┌──────┴──────┠┌─────┴─────â”
│ Translation │ │ RDR/BINAT │
└──────┬──────┘ └─────┬─────┘
│ ↓
│ ┌───┴────â”
│ │ FILTER │
│ └───┬────┘
│ ↓
│ ┌───┴────â”
│ │ ALTQ │
↓ └───┬────┘
└───────────────────────→─┤
↓
┌──┴──â”
│ LOG │
└──┬──┘
↓
route-to/dup-to/fastroute ┌─────┴─────â”
┌â†â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”¤ PF_ROUTE │
│ └─────┬─────┘
│ │
│ ↓
│ ┌────┴────â”
│ │ KERNEL │
│ └────┬────┘
│ │
│ ↓
│ ┌───────────┴──────────â”
│ │ Packet Normalisation │
│ └───────────┬──────────┘
│ ↓
│ State exists ┌──────┴──────â”
│ ┌â†â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”€â”¤ State Check │
│ │ └──────┬──────┘
│ ↓ ↓
│ ┌──────┴──────┠┌─────┴─────â”
│ │ Translation │ │ RDR/BINAT │
│ └──────┬──────┘ └─────┬─────┘
│ │ ↓
│ │ ┌───┴────â”
│ │ │ FILTER │
│ │ └───┬────┘
│ │ ↓
│ │ ┌───┴────â”
│ │ │ ALTQ │
│ ↓ └───┬────┘
│ └───────────────────────→─┤
│ ↓
│ ┌──┴──â”
│ │ LOG │
│ └──┬──┘
│ ↓
│ ┌─────┴─────â”
│ │ PF_ROUTE │
│ └─────┬─────┘
└───────────────────────────────────┤
↓
┌──┴──â”
│ OUT │
└─────┘
I’ve now owned my KCorp wireless router (KLG-575) for nearly a year. It is my 3rd router after returning it twice due to a problem with it rebooting itself. Finally it seems I have fixed the problem - no thanks to Scan (the reseller) or KCorp.
I bought the router in May last year because it […]