Comments on: shmoocon (4) labs (2?) http://blog.loftninjas.org/2008/02/18/shmoocon-4-labs-2/ Sat, 21 Jan 2012 06:46:54 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: btm http://blog.loftninjas.org/2008/02/18/shmoocon-4-labs-2/comment-page-1/#comment-166 btm Tue, 19 Feb 2008 19:40:00 +0000 http://blog.loftninjas.org/?p=139#comment-166 Steve, <br/><br/>Yeah, but we should have to customize the network for the security gear. The funny part is that gear that's supposed to detect vulnerabilities was causing one.<br/><br/>It's pretty interesting that there were so many stacked problems, thus making it difficult to work out. Worth thinking about some more. Steve,

Yeah, but we should have to customize the network for the security gear. The funny part is that gear that’s supposed to detect vulnerabilities was causing one.

It’s pretty interesting that there were so many stacked problems, thus making it difficult to work out. Worth thinking about some more.

]]> By: KC http://blog.loftninjas.org/2008/02/18/shmoocon-4-labs-2/comment-page-1/#comment-165 KC Tue, 19 Feb 2008 19:34:00 +0000 http://blog.loftninjas.org/?p=139#comment-165 Chris,<br/><br/>The vlan tagging support for vr worked flawlessly. What didn't work was frames that exceeded an MTU of 1500 bytes. Instead of being fragmented they were dropped entirely. This was confirmed through multiple tests, and also kernel messages from the driver. Chris,

The vlan tagging support for vr worked flawlessly. What didn’t work was frames that exceeded an MTU of 1500 bytes. Instead of being fragmented they were dropped entirely. This was confirmed through multiple tests, and also kernel messages from the driver.

]]> By: Steve http://blog.loftninjas.org/2008/02/18/shmoocon-4-labs-2/comment-page-1/#comment-162 Steve Mon, 18 Feb 2008 20:26:00 +0000 http://blog.loftninjas.org/?p=139#comment-162 Or, in lieu of allowing for a massive state table, see if the security scanner supports VLANs, and bypass the firewall entirely by connecting the box to a trunk port.<br/><br/>It's really funny that it took until Sunday morning to work that one out. Or, in lieu of allowing for a massive state table, see if the security scanner supports VLANs, and bypass the firewall entirely by connecting the box to a trunk port.

It’s really funny that it took until Sunday morning to work that one out.

]]> By: Chris Buechler http://blog.loftninjas.org/2008/02/18/shmoocon-4-labs-2/comment-page-1/#comment-161 Chris Buechler Mon, 18 Feb 2008 18:50:00 +0000 http://blog.loftninjas.org/?p=139#comment-161 VLAN tagging support for vr(4) was added to pfSense a few months back. If you're using RC4 it should definitely work. <br/><br/>I don't have any Soekris 5501 hardware, but it works for PC Engines ALIX boards which have the same vr(4) chipset. <br/><br/>Feel free to email me (cbuechler@gmail.com) with what you were seeing, I'm curious why it wasn't working for you. <br/><br/>cheers,<br/>Chris VLAN tagging support for vr(4) was added to pfSense a few months back. If you’re using RC4 it should definitely work.

I don’t have any Soekris 5501 hardware, but it works for PC Engines ALIX boards which have the same vr(4) chipset.

Feel free to email me (cbuechler@gmail.com) with what you were seeing, I’m curious why it wasn’t working for you.

cheers,
Chris

]]>