Re: VPN client-to-site over IPSec

2009-04-03 Thread Marcello Cruz
Toni, Do you mean a VPN where only a HOST will access an entire NETWORK? If so, then the answer is YES. For instance, I have some OpenBSD servers acting as VPN Server and they allow me to connect from home to the networks behind those OpenBSD servers. PC -- Internet -- OpenBSD -

Re: VPN client-to-site over IPSec

2009-04-08 Thread Marcello Cruz
5-SUITE [Remote-quick-mode] DOI=IPSEC EXCHANGE_TYPE= QUICK_MODE Suites= QM-ESP-3DES-SHA-SUITE [Microsoft-quick-mode] DOI=IPSEC EXCHANGE_TYPE= QUICK_MODE Suites= QM-ESP-3DES-SHA-PFS-SUITE - Original Message ---

Intel D945GCNL with OpenBSD 4.4 Hangs

2009-04-08 Thread Marcello Cruz
Dear all, I have an Intel D945GCNL board and when I try to enable a second NIC the system hangs. I really don't know where to search for a clue. I took some steps before posting this message: * replaced the HD with another one * replaced the NIC (D-Link DFE-530, 3COM Etherlink, generic NIC with R

Re: Intel D945GCNL with OpenBSD 4.4 Hangs

2009-04-10 Thread Marcello Cruz
1) I updated the BIOS to NL94510J.86A.0033.2008.0807.1932. This is the most recent BIOS available from Intel to this board. The old BIOS was NL94510J.86A.0017.2007.0828.1137. Accordingly to the flash utility, I cannot use a BIOS update with different prefix (NL94510J.86A). 2) Following another

Re: Intel D945GCNL with OpenBSD 4.4 Hangs

2009-04-10 Thread Marcello Cruz
mention that I have 3 of these boards and the same occurs with all of them. Rgds, Marcello - Original Message - From: "Stijn" To: "Marcello Cruz" Sent: Thursday, April 09, 2009 5:03 PM Subject: Re: Intel D945GCNL with OpenBSD 4.4 Hangs OpenBSD 4.4 (GENERIC) #102

Re: IPsec Windows Vista client - OpenBSD, NAT-T problem

2009-04-23 Thread Marcello Cruz
you try to connect to your VPN using XP or W2K clients it works fine. King regards, Marcello Cruz - Original Message - From: "MK" To: Sent: Thursday, April 23, 2009 12:49 PM Subject: IPsec Windows Vista client - OpenBSD, NAT-T problem Hello, I'm trying to learn how

Re: Transparent firewall (bridge) with DMZ + LAN

2009-04-27 Thread Marcello Cruz
Hey guys, There are some articles that may bring some light to the discussion: * http://en.wikipedia.org/wiki/Network_bridge (best bet) * http://en.wikipedia.org/wiki/Bridging_(networking) * http://en.wikipedia.org/wiki/Transparent_bridge * http://www.cisco.com/en/US/docs/internetworking/technol

Re: PPTP vpn with OBSD gateway (outgoing)

2009-05-29 Thread Marcello Cruz
Hi, To publish an internal PPTP server: rdr pass on $ext_if proto tcp from any to $ext_if port 1723 -> $internal_server rdr pass on $ext_if proto gre from any to any -> $internal_server To allow an internal computer establish a PPTP tunnel to a server on the Internet: pass out on $ext_if pro

Re: ftp-proxy multiple instances

2006-12-19 Thread Marcello Cruz
actly what you said but, simulating a new instance, just like the RC script. Now I have the confirmation that it is the way things should be. Thanks a lot. Rgds Marcello Cruz - Original Message - From: "Mathieu Sauve-Frankel" <[EMAIL PROTECTED]> To: "Technical

Re: Deja-vu? (Explanation)

2005-07-07 Thread Marcello Cruz
Sorry guys!!! A few days ago we had a problem with the mail queue and some messages were moved to the output queue erroneously. Sorry for the inconvenience. Rgds Marcello Cruz - Original Message - From: "Hannah Schroeter" <[EMAIL PROTECTED]> To: Sent: Thursday, July

Fw: OpenBSD's 10th birthday

2005-10-18 Thread Marcello Cruz
Happy birthday OpenBSD. From Brazil. I'm glad that OpenBSD exists. Cruz

Re: Client no-ip in the OpenBSD.

2010-01-16 Thread Marcello Cruz
#x27;inet ' | awk '{print $2}'` In my case, I use this line within a script and I redirect the output of this command to another file. If something goes bad, then there is a job running every 30 minutes that tries to update the information in the NO-IP service. Rgds Marcello Cruz

Re: Client no-ip in the OpenBSD.

2010-01-17 Thread Marcello Cruz
should be done BEFORE your system has gone into securemode # please see /etc/rc.securelevel. echo -n 'starting local daemons:' # Add your local startup actions here. echo '.' - Original Message - From: Saulo Bozzi To: Marcello Cruz Cc: OpenBSD-Misc Sent: Sunday

Sed and GNU-like

2010-01-22 Thread Marcello Cruz
Dear friends, I've read the documentation about sed - sed(8), re_format(7) and /usr/share/doc/usd/15.sed/ - but I still don't realize how to make this command work: $ s/(^[A_Z]{1})([a-z]+)\.sgml/\1\2\.html/g As I read I must prefix the '{', '}', '(' and ')' with backslashes. Even if I do so

Re: Sed and GNU-like

2010-01-22 Thread Marcello Cruz
As I read I must prefix the '{', '}', '(' and ')' with backslashes. Even if I do so, the command does not work. The command should take a filename starting with a capital letter followed with the extension 'sgml' and translate the extension to 'html'. 1. Always show the commands you're actuall

Re: Sed and GNU-like (SOLVED)

2010-01-22 Thread Marcello Cruz
You didn't read re_format(7) well: Basic regular expressions differ in several respects: o `|', `+', and `?' are ordinary characters and there is no equiva- lent for their functionality. o The delimiters for bounds are `\{' and `\}', with `{' and `}' by

Re: Sed and GNU-like (SOLVED)

2010-01-22 Thread Marcello Cruz
- Original Message - From: "Abel Abraham Camarillo Ojeda" "Marcello Cruz" wrote: $ s/(^[A_Z]{1})([a-z]+)\.sgml/\1\2\.html/g You didn't read re_format(7) well: Basic regular expressions differ in several respects: o `|', `+',

PF and LDAP

2009-07-29 Thread Marcello Cruz
Dear all, Is there a way to use LDAP in a rule to allow or deny based on the user instead of the IP Address? The idea is to permit the traffic from an inside user to access, for example, a VoIP resource on the Internet. Thanks in advance. Marcello

Re: PF and LDAP

2009-07-31 Thread Marcello Cruz
trying to avoid future problems regarding security. Rgds, Marcello - Original Message - From: "Chris Dukes" To: "Marcello Cruz" Cc: Sent: Thursday, July 30, 2009 11:47 PM Subject: Re: PF and LDAP On Wed, Jul 29, 2009 at 01:42:44PM -0300, Marcello Cruz wrote:

Re: :Microsoft" VPN

2009-09-14 Thread Marcello Cruz
Hi Stan, OUr company was bought out a while back, and the new oweres are changing pretty much everryhting. This includes changing external access from a Cisco VPN to a "Microsoft" VPN. Can anyone here give me a pinter to where I can get information on this? What I want to be able to do is use

Re: PF challenge dealing with HTTPS URL restriction policies.. would it help, other possible solution?

2009-10-29 Thread Marcello Cruz
I had a similar problem. Transparente proxy is incompatible with SSL, as far as I know. Configuring each computer to use a proxy - either manually or by script - is time consuming. So I decided to use WPAD+Squid. Problem solved. The drawback is the overhead in the internal web server. Everytim

Re: PF challenge dealing with HTTPS URL restriction policies.. would it help, other possible solution?

2009-10-29 Thread Marcello Cruz
I'm not sure about Linux, but with Windows the WPAD works fine, even if the computers are not member of an AD. The IE comes with the default "Automatic proxy configuration". So, you don't need to configure it. The problem is that some programs try to find the wpad script in the wrong (?) place

DHCPD and WPAD

2009-11-17 Thread Marcello Cruz
I have a problem with DHCPD and WPAD. The OpenBSD version is 4.4. The error message is (in /var/log/messages): Nov 17 13:14:35 gw dhcpd[5096]: /etc/dhcpd.conf line 12: no option named option-252 Nov 17 13:14:35 gw dhcpd[5096]: option option-252 "http://wpad.domain.local/wpad.dat