Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    What is the biggest attack in GBPS you stopped

    Scheduled Pinned Locked Moved General pfSense Questions
    737 Posts 33 Posters 674.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      doktornotor Banned
      last edited by

      This shit still going on? Supermule, which part of the post I linked you do not get? Absolutely NOONE is interested in YT videos, PM to get (D)DoS-ed and similar bullcrap! Want it being worked on and fixed? Provide the information required! Instead of stupid excuses why not to do so…

      1 Reply Last reply Reply Quote 0
      • H
        htilonom
        last edited by

        @Supermule:

        :D

        I didnt work with Franco UNTIL after we didnt get anywhere with pfsense and he is NOT behind this.

        After we tried to get ESF involved and push for testing at a rig in their control then they could put the collectad data upstream. But nothing.

        I tested Opnsense as a measure to see if it was all systems based on FreeBSD thats vulnerable and that was the way I got in touch with Franco.

        I asked him politely if he wanted to help me test and get it upstream and he would.

        So pls. dont make assumptions in your own head. It has nothing to do with the real world scenario.

        Yea, nice try but I'm not buying it. This thread and the ones on FreeBSD forums prove the opposite. Your plan was to make pfSense look vulnerable to the phantom issue and present opnsense as a better solution.

        I'm also beginning to think that this "trick" you refused to share with anyone is actually Franco's idea in the first place, considering his packetwerk background.

        Feel free to continue to deny it, keep saying that poor you just tried to help but nobody gave you a chance, but we all know that opnsense promotion was behind all this time. Now it makes sense why you behaved like this, why you refused to share any useful details on the issue. Now it shows how truly corrupt and malicious opnsense people and their drones like you really are.

        Thanks once again for proving me right.

        1 Reply Last reply Reply Quote 0
        • DerelictD
          Derelict LAYER 8 Netgate
          last edited by

          @Derelict:

          Why didn't you provide the FreeBSD security team the details of your alleged vulnerability?

          crickets

          Chattanooga, Tennessee, USA
          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          1 Reply Last reply Reply Quote 0
          • S
            Supermule Banned
            last edited by

            I dont ask you to buy it. I am just beeing honest.

            Picture is from opnsense forum messages.

            Conversation beginning at June 9th. As of june 22nd we havent gotten around to test and Franco is in the dark as well and havent been able to get any info. 4 PM's preceeding this picture.

            Did the attacks occur before june 9th?? If it did, then its not related to Opnsense as stated and they have nothing to do with it.

            So try again. And lose the tinfoil suit your wearing.

            EDIT: AS you can see I registered June 6th. Was that before or after the attacks??

            If after then you look stupid in many peoples views. Including mine.

            If it was Franco then why would he need to test things in the 1st place?? If he had the script.

            franco.PNG
            franco.PNG_thumb
            registration.PNG
            registration.PNG_thumb

            1 Reply Last reply Reply Quote 0
            • F
              firewalluser
              last edited by

              The problem has shifted into how transparent are people posting on this forum.

              From a pfsense/ESF perspective, this isnt good for business, because even the mention of other solutions can be good/bad for business as it raises awareness of others which undermines marketing.

              Whilst theres no denying no one can do anything about bandwidth domination, aka flooding, (D)Dos, how a security product handles it does matter if and when it falls over. Hopefully pfsense/ESF can come up with a solution, perhaps better education of their product to their users which might be lucractive or at least damage limitation.

              Either way I've learnt more from this thread and seeing things on my own system which is always educational.

              Capitalism, currently The World's best Entertainment Control System and YOU cant buy it! But you can buy this, or some of this or some of these

              Asch Conformity, mainly the blind leading the blind.

              1 Reply Last reply Reply Quote 0
              • H
                htilonom
                last edited by

                @Supermule:

                I dont ask you to buy it. I am just beeing honest.

                Picture is from opnsense forum messages.

                Conversation beginning at June 9th. As of june 22nd we havent gotten around to test and Franco is in the dark as well and havent been able to get any info. 4 PM's preceeding this picture.

                Did the attacks occur before june 9th?? If it did, then its not related to Opnsense as stated and they have nothing to do with it.

                So try again. And lose the tinfoil suit your wearing.

                EDIT: AS you can see I registered June 6th. Was that before or after the attacks??

                If after then you look stupid in many peoples views. Including mine.

                If it was Franco then why would he need to test things in the 1st place?? If he had the script.

                Ha! You're making 0 sense, you know that, right? You think it matters when you registered on opnsense forum? Dude, you must think everyone here is stupid.

                No, that does not make you right. There's still proof right here that you ignored all requests for more information from both pfSense guys and FreeBSD team. That means you intentionally created this charade for self-promotion of yourself and your patrons, opnsense (whom you "gave" a fix for the issue).

                Opnsense is known for their lies and maliscious behaviour from day 1 since their inception, so your denial and refusal to provide any kind of information except those worthless youtube videos speaks volumes.

                You had a chance and you blew it, give it up. Go sell opnsense somewhere else.

                I just love the way you're being nervous because you got busted! Say hi to Franco!

                1 Reply Last reply Reply Quote 0
                • H
                  htilonom
                  last edited by

                  @Derelict:

                  @Derelict:

                  Why didn't you provide the FreeBSD security team the details of your alleged vulnerability?

                  crickets

                  Interestingly he did provide the details to opnsense, which was part of the plan since the beginning of this charade. He's so busted  ;D

                  1 Reply Last reply Reply Quote 0
                  • B
                    bennyc
                    last edited by

                    This thread requires moderation please. It was an interesting read, but is going nowhere…

                    4x XG-7100 (2xHA), 1x SG-4860, 1x SG-2100
                    1x PC Engines APU2C4, 1x PC Engines APU1C4

                    1 Reply Last reply Reply Quote 0
                    • S
                      Supermule Banned
                      last edited by

                      What??

                      :D

                      Geesus.

                      I let people decide whats right and whats not. We have emails dating back about 6mths asking pfsense/ESF for advise and asking them for help. Almost nothing came back.

                      Ask yourself if you would provide a script to strangers that can down almost anything with 3mb/s traffic and wait for a fix.

                      Its like providing guns to the youth of America and trusting them not to use it…. just to provide information to the producers of whether the damn thing could kill people or not.

                      You keep bickering about Opnsense.

                      I think everyone has seen that this is not about Opnsense and me since we are not related in any way.

                      I didnt provide a fix to Franco. He did that by himself when I posted the security advise from FreeBSD.

                      So pls. stop since you look like a fool IMHO.

                      Lets look at it differently:

                      When you get attacked, you call the person responsible and ask for his code?

                      Or do you log and see whats coming and how the box behaves?

                      You are forced to do chose the 2nd option since you have no control over whats coming your way.

                      So providing the code has no relevance at all. Providing the test rig and do Dtrace and DEV work is the way ahead.

                      Come on guys....

                      I know you can do better than that, but youre cornered and have no way out.

                      Just admit you handled it badly and we can get on with it. Nothing more in it.

                      1 Reply Last reply Reply Quote 0
                      • S
                        Supermule Banned
                        last edited by

                        No I did not. Where do you see that??

                        @htilonom:

                        @Derelict:

                        @Derelict:

                        Why didn't you provide the FreeBSD security team the details of your alleged vulnerability?

                        crickets

                        Interestingly he did provide the details to opnsense, which was part of the plan since the beginning of this charade. He's so busted  ;D

                        1 Reply Last reply Reply Quote 0
                        • D
                          doktornotor Banned
                          last edited by

                          @Supermule:

                          Ask yourself if you would provide a script to strangers that can down almost anything with 3mb/s traffic and wait for a fix.

                          So, by strangers you mean the FreeBSD security team, e.g.?

                          Hey guys, your firewall suxxx, I can take it down in no time.

                          Hmm, interesting claim. How do you do that?
                          Look at this YT video.
                          Hmm, there is no useful information in there. We need a way to reproduce it.
                          I have the script.
                          So give it to us so that we can investigate and fix it.
                          No way, too dangerous.
                          So report this to the security team and provide it to them privately.
                          No, it's not a security issue.
                          Stop wasting our time.

                          @Supermule:

                          Just admit you handled it badly and we can get on with it. Nothing more in it.

                          Yeah, you handled it like a total idiot. I linked you to the doc on reporting security issues to BSD many many months ago. You did nothing. Then you went to FreeBSD forums, and attempted to run similar idiotic YT channel there, and were quickly told to GTFO with such crap. (Kudos to FBSD guys…) Now, you keep moaning that pfSense/FBSD is vulnerable, but when told to report the vulnerability, properly, you say it's not a security issue. WTF is this retarded game about?

                          Someone lock this retarded thread already, please.

                          1 Reply Last reply Reply Quote 0
                          • S
                            Supermule Banned
                            last edited by

                            I have replaced firewall with nuclear weapons…

                            So, by strangers you mean the National security team, e.g.?

                            Hey guys, your COUNTRY suxxx, I can take it down in no time.

                            Hmm, interesting claim. How do you do that?
                            Look at this YT video. (NUCLEAR BOMB)
                            Hmm, there is no useful information in there. We need a way to reproduce it.
                            I have the BOMB.
                            So give it to us so that we can investigate and fix it.
                            No way, too dangerous.
                            So report this to the security team and provide it to them privately.
                            No, it's not a security issue.
                            Stop wasting our time.
                            BOOMMM :D

                            OR:

                            So, by strangers you mean the FreeBSD security team, e.g.?

                            Hey guys, your firewall has issues, I can take it down in no time.

                            Hmm, interesting claim. How do you do that?
                            Look at this YT video. (almost 20 videos)
                            Hmm, there is no useful information in there. We need a way to reproduce it.
                            I have the script.
                            We will set up a test rig you can attack and we will log what we need to get to the bottom of this.
                            Great. What time suits you best??
                            We need a few days to set ip up and get it running. Will let you know. How do we get in touch?
                            Write me a PM here on the forum or send me an email.
                            Thanks. Talk later.

                            A roadmap has been made and tests will commence. Thats the way Franco suggested and thats the right way of doing it since I have allready stated I am not allowed to share the script.

                            End of discussion.

                            @doktornotor:

                            @Supermule:

                            Ask yourself if you would provide a script to strangers that can down almost anything with 3mb/s traffic and wait for a fix.

                            So, by strangers you mean the FreeBSD security team, e.g.?

                            Hey guys, your firewall suxxx, I can take it down in no time.

                            Hmm, interesting claim. How do you do that?
                            Look at this YT video.
                            Hmm, there is no useful information in there. We need a way to reproduce it.
                            I have the script.
                            So give it to us so that we can investigate and fix it.
                            No way, too dangerous.
                            So report this to the security team and provide it to them privately.
                            No, it's not a security issue.
                            Stop wasting our time.

                            @Supermule:

                            Just admit you handled it badly and we can get on with it. Nothing more in it.

                            Yeah, you handled it like a total idiot.

                            Someone lock this retarded thread already, please.

                            1 Reply Last reply Reply Quote 0
                            • D
                              doktornotor Banned
                              last edited by

                              And more blaaaaaah blaaaaaaaaah blaaaaaaaaaaaah….

                              @Supermule:

                              since I have allready stated I am not allowed to share the script.

                              By whom? The criminals your rented the botnet from? Would the license be more expensive?  ::) ::) ::) ;D ;D ;D

                              1 Reply Last reply Reply Quote 0
                              • K
                                kejianshi
                                last edited by

                                Die thread die!

                                1 Reply Last reply Reply Quote 0
                                • H
                                  htilonom
                                  last edited by

                                  @Supermule:

                                  What??

                                  :D

                                  Geesus.

                                  I let people decide whats right and whats not. We have emails dating back about 6mths asking pfsense/ESF for advise and asking them for help. Almost nothing came back.

                                  Ask yourself if you would provide a script to strangers that can down almost anything with 3mb/s traffic and wait for a fix.

                                  Its like providing guns to the youth of America and trusting them not to use it…. just to provide information to the producers of whether the damn thing could kill people or not.

                                  You keep bickering about Opnsense.

                                  I think everyone has seen that this is not about Opnsense and me since we are not related in any way.

                                  I didnt provide a fix to Franco. He did that by himself when I posted the security advise from FreeBSD.

                                  So pls. stop since you look like a fool IMHO.

                                  Lets look at it differently:

                                  When you get attacked, you call the person responsible and ask for his code?

                                  Or do you log and see whats coming and how the box behaves?

                                  You are forced to do chose the 2nd option since you have no control over whats coming your way.

                                  So providing the code has no relevance at all. Providing the test rig and do Dtrace and DEV work is the way ahead.

                                  Come on guys....

                                  I know you can do better than that, but youre cornered and have no way out.

                                  Just admit you handled it badly and we can get on with it. Nothing more in it.

                                  Looks like the more facts I point out the longer and more pointless your replies get.

                                  Let's go quickly trough the facts:

                                  1. Yes you did provide fix to Franco or opnsense, as you've pointed it out multiple times in this thread https://forum.pfsense.org/index.php?topic=91856.msg539638#msg539638
                                  2. You've been promoting opnsense on this thread from its start
                                  3. You have failed to provide any context to your phantom DDOS and ignored any request for factual proof or more information
                                  4. you have been called out multiple times by most of people here for not providing any information yet now all of the sudden opnsense has the fix because "franco is a nice guy"

                                  Oh you've also gone full nuts with claims like:

                                  Ask yourself if you would provide a script to strangers that can down almost anything with 3mb/s traffic and wait for a fix.

                                  Its like providing guns to the youth of America and trusting them not to use it…. just to provide information to the producers of whether the damn thing could kill people or not.

                                  Just drop it, you've been busted. The harder you try, the more obvious it gets.

                                  I know you can do better than that, but youre cornered and have no way out.

                                  =https://en.wikipedia.org/wiki/Spin_%28public_relations%29

                                  1 Reply Last reply Reply Quote 0
                                  • H
                                    htilonom
                                    last edited by

                                    @doktornotor:

                                    And more blaaaaaah blaaaaaaaaah blaaaaaaaaaaaah….

                                    @Supermule:

                                    since I have allready stated I am not allowed to share the script.

                                    By whom? The criminals your rented the botnet from? Would the license be more expensive?  ::) ::) ::) ;D ;D ;D

                                    But at the same time Franco from opnsense has it since they will be releasing a "fix" hahaha

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      Supermule Banned
                                      last edited by

                                      Ashley Lorenzana actually said it well…

                                      “It's okay to disagree with the thoughts or opinions expressed by other people. That doesn't give you the right to deny any sense they might make. Nor does it give you a right to accuse someone of poorly expressing their beliefs just because you don't like what they are saying. Learn to recognize good writing when you read it, even if it means overcoming your pride and opening your mind beyond what is comfortable.”

                                      Friedrich Nietzsche carved it in stone "Convictions are more dangerous enemies of truth than lies."

                                      W. G. McAdoo  had it about right. This must be a trend among some. "It is impossible to defeat an ignorant man in an argument."

                                      To finish this off with Calvin Coolidge. "Nothing in the world can take the place of persistence. Talent will not; nothing is more common than unsuccessful men with talent. Genius will not; un-rewarded genius is almost a proverb. Education will not; the world is full of educated derelicts. Persistence and determination alone are omnipotent. "

                                      Make of it what you want.

                                      EOD.

                                      1 Reply Last reply Reply Quote 0
                                      • K
                                        kejianshi
                                        last edited by

                                        This is the sort of reply I'd expect from someone who's political views are being censored…  Not a tech rant.

                                        1 Reply Last reply Reply Quote 0
                                        • B
                                          bennyc
                                          last edited by

                                          @kejianshi:

                                          This is the sort of reply I'd expect from someone who's political views are being censored…  Not a tech rant.

                                          As is about 90% of this thread  ::)

                                          4x XG-7100 (2xHA), 1x SG-4860, 1x SG-2100
                                          1x PC Engines APU2C4, 1x PC Engines APU1C4

                                          1 Reply Last reply Reply Quote 0
                                          • T
                                            tim.mcmanus
                                            last edited by

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.