#Tag · bonfire.cafe

Michael Dexter and 1 other boosted

Tomáš

acquired - tome of pf

(this is not sponsored content, I just like the book)

thank you @pitrh

https://nostarch.com/book-of-pf-4th-edition

#unix_surrealism #comic #technomage #openbsd #pf #bookofpf

The Book of PF, 4th Edition

Build a more secure network with PF.

Tomáš

@prahou@merveilles.town · 3 weeks ago

acquired - tome of pf

(this is not sponsored content, I just like the book)

thank you @pitrh

https://nostarch.com/book-of-pf-4th-edition

#unix_surrealism #comic #technomage #openbsd #pf #bookofpf

The Book of PF, 4th Edition

Build a more secure network with PF.

Michael Dexter and 1 other boosted

Peter N. M. Hansteen

@pitrh@mastodon.social · 4 weeks ago

And now for the inevitable, shameless plug: The Book of PF, 4th ed https://nostarch.com/book-of-pf-4th-edition has some preview of upcoming features as well as #openbsd 7.8 and #freebsd 14 #pf configs. Also see the #asiabsdcon tutorial and https://nxdomain.no/~peter/yes_the_book_of_pf_4th_ed_is_coming.html

The Book of PF, 4th Edition

Build a more secure network with PF.

Yes, The Book of PF, 4th Edition Is Coming Soon

Peter N. M. Hansteen

@pitrh@mastodon.social · 4 weeks ago

Despite some persistent rumors, installing OpenBSD is both quick and easy on most not too exotic hardware. But once the thing is installed, what is daily life with the most secure free operating system like?

See https://nxdomain.no/~peter/openbsd_installed_now_for_the_daily_tasks.html #openbsd #freesoftware #libresoftware #dailydriver #sysadmin

You Have Installed OpenBSD. Now For The Daily Tasks.

Peter N. M. Hansteen

@pitrh@mastodon.social · 4 weeks ago

The Book of PF, 4th Edition

Build a more secure network with PF.

Yes, The Book of PF, 4th Edition Is Coming Soon

Stefano Marinelli boosted

Peter N. M. Hansteen

@pitrh@mastodon.social · 4 weeks ago

The first scheduled "Network Management with the OpenBSD PF Toolset" session of the year will be at AsiaBSDCon 2026 https://2026.asiabsdcon.org/index.html.en, https://2026.asiabsdcon.org/entry/talk/ZUQPMV/, registration to open soon.

Also see https://nxdomain.no/~peter/what_is_bsd_come_to_a_conference_to_find_out.html #asiabsdcon #freebsd #openbsd #pf #packetfilter #networking #conference @nostarch @stucchimax

Network Management with the OpenBSD Packet Filter Toolset AsiaBSDCon 2026

The OpenBSD Packet Filter (PF) is at the core of the network management toolset available to professionals working with the BSD family of operating systems. Understanding the networking toolset is essential to building and maintaining a functional envirionment. The present session will both teach principles and provide opportunity for hands-on operation of the extensive network tools available on OpenBSD and sister operating systems in a lab environment. Basic to intermediate understanding of TCP/IP networking is expected and required for this session. Topics covered include * The basics of and network design and taking it a bit further * Building rulesets * Keeping your configurations readable and maintainable * Seeing what your traffic is really about with your friend tcpdump(8) * Filtering, diversion, redirection, Network Address Translation * Handling services that require proxying (ftp-proxy and others) * Address tables and daemons that interact with your setup through them * The whys and hows of network segmentation, DMZs and other separation techniques * Tackling noisy attacks and other pattern recognition and learning tricks * Annoying spammers with spamd * Basics of and not-so basic traffic shaping * Monitoring your traffic * Resilience, High Availability with CARP and pfsync * Troubleshooting: Discovering and correcting errors and faults * Your network and its interactions with the Internet at large * Common mistakes in internetworking and peering * Keeping the old IPv4 world in touch with the new of IPv6 The tutorial is lab centered and fast paced. Time allowing and to the extent necessary, we will cover recent developments in the networking tools and variations between the implementations in the sister BSD operating systems. Participants should bring a laptop for the hands on labs part and for note taking. The format of the session will be compact lectures interspersed with hands-on lab excercises based directly on the theory covered in the lecture parts. This session is an evolutionary successor to previous sessions. Slides for the most recent version of the PF tutorial session are up at https://nxdomain.no/~peter/pf_fullday.pdf, to be updated with the present version when the session opens.

AsiaBSDCon 2026

What is BSD? Come to a conference to find out!

Peter N. M. Hansteen

@pitrh@mastodon.social · 4 weeks ago

Also see https://nxdomain.no/~peter/what_is_bsd_come_to_a_conference_to_find_out.html #asiabsdcon #freebsd #openbsd #pf #packetfilter #networking #conference @nostarch @stucchimax

Network Management with the OpenBSD Packet Filter Toolset AsiaBSDCon 2026

AsiaBSDCon 2026

What is BSD? Come to a conference to find out!

Stefano Marinelli boosted

Peter N. M. Hansteen

@pitrh@mastodon.social · 4 weeks ago

Oh, I suppose I have been slacking and not telling you that if you order The Book of PF, 4th ed https://nostarch.com/book-of-pf-4th-edition now, you will get the *final version* ebook (print is still in progress) #bookofpf #openbsd #freebsd #networking #firewalls #pf #networktrickery #freesoftware #libresoftware @nostarch

Also see https://nxdomain.no/~peter/yes_the_book_of_pf_4th_ed_is_coming.html

The Book of PF, 4th Edition

Build a more secure network with PF.

Yes, The Book of PF, 4th Edition Is Coming Soon

Peter N. M. Hansteen

@pitrh@mastodon.social · 4 weeks ago

Also see https://nxdomain.no/~peter/yes_the_book_of_pf_4th_ed_is_coming.html

The Book of PF, 4th Edition

Build a more secure network with PF.

Yes, The Book of PF, 4th Edition Is Coming Soon

Hacker News

@h4ckernews@mastodon.social · last month

pf: Make af-to less magical

https://undeadly.org/cgi?action=article;sid=20260116085115

#HackerNews #pf #af-to #magic #tech #news #programming

pf: make af-to less magical

Michael Dexter and 1 other boosted

Larvitz

@Larvitz@mastodon.bsd.cafe · last month

New blog post: GeoIP-Aware Firewalling with PF on FreeBSD

Running a mail server means constant brute-force attempts. My solution: geographic filtering. SMTP stays open for global mail delivery, but client ports (IMAP, Submission, webmail) are restricted to Central European IP ranges only.

Result: ~90% reduction in attack logs, cleaner signal-to-noise ratio, smaller attack surface.

Using MaxMind GeoLite2 + PF tables with ~273k CIDR blocks.

https://blog.hofstede.it/geoip-aware-firewalling-with-pf-on-freebsd/

#FreeBSD #InfoSec #SysAdmin #pf #DevOps