Re: named and dns cache

2007-01-21 Thread Brian Keefer
On Jan 21, 2007, at 6:48 PM, riwanlky wrote: Hi All, I want all my windows client behind OpenBSD 3.9 firewall to query dns from the firewall. In the OpenBSD 3.9 I run named. This is my named.conf acl clients { localnets; ::1; }; options { version ""; // remove this

Re: OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-21 Thread Brian Keefer
On Jan 21, 2007, at 8:00 PM, L. V. Lammert wrote: On Sun, 21 Jan 2007, Brian Keefer wrote: The company I worked for considered switching our appliance OS to a *BSD from Linux, but in the end we decided that commercial support was too important to ignore. There ARE a number of vendors selling

Re: OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-21 Thread bofh
On 1/21/07, Greg Thomas <[EMAIL PROTECTED]> wrote: Don't get me started. I opened a $30,000 XP-based A/V box at work the other day to find out it had some crappy $50 pseudo RAID card doing RAID 1. I didn't buy it so I kept myself from looking around at the rest of the parts to avoid discouragin

Re: OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-21 Thread Tautvydas
There ARE a number of vendors selling OBSD solutions, actually. One I remember running across is LOK Technologies. I'll look for them. Thanks. Drivers should NOT be an issue - you're building an appliance, it should be pretty simple to picl compatible s/w. For sure. -- Hi, I'm a .signature

Re: OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-21 Thread Tautvydas
Don't get me started. I opened a $30,000 XP-based A/V box at work the other day to find out it had some crappy $50 pseudo RAID card doing RAID 1. I didn't buy it so I kept myself from looking around at the rest of the parts to avoid discouraging behaviour. Greg Thanks List. Know I know what

named and dns cache

2007-01-21 Thread riwanlky
Hi All, I want all my windows client behind OpenBSD 3.9 firewall to query dns from the firewall. In the OpenBSD 3.9 I run named. This is my named.conf acl clients { localnets; ::1; }; options { version ""; // remove this to allow version queries listen-on

Re: OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-21 Thread L. V. Lammert
On Sun, 21 Jan 2007, Brian Keefer wrote: > The company I worked for considered switching our appliance OS to a > *BSD from Linux, but in the end we decided that commercial support > was too important to ignore. > There ARE a number of vendors selling OBSD solutions, actually. One I remember runnin

Re: OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-21 Thread Greg Thomas
On 1/21/07, bofh <[EMAIL PROTECTED]> wrote: That isn't too bad in the grand scheme of things, actually. After all, there's a lot more costs involved. When I was doing the flea market, I needed 100% margins. Remember also, the main customer base is more used to click and point - ie, less techni

Re: OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-21 Thread bofh
That isn't too bad in the grand scheme of things, actually. After all, there's a lot more costs involved. When I was doing the flea market, I needed 100% margins. Remember also, the main customer base is more used to click and point - ie, less technically savvy, ie, needing more help. There ar

Re: OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-21 Thread Mathieu Sauve-Frankel
> the barracuda boxes are rusty stinky old redhat with spamassassin and > some web interface. > > at least, they used to be about a year or two ago We evaluated their top of the line model a year and a half ago. 15,000CAN$ for a crappy 1U i386 machine with Realtek 8139 NICs in it. I just about

Re: Using isakmpd to build a bridge

2007-01-21 Thread stan
On Mon, Jan 22, 2007 at 01:05:47AM +, Stuart Henderson wrote: > On 2007/01/21 19:01, stan wrote: > > On Sun, Jan 21, 2007 at 11:16:26PM +, Stuart Henderson wrote: > > > > ifconfig bridge0 create > > > > ifconfig gif0 create > > > > ifconfig gif0 tunnel x.x.176.33 x.x.176.37 > > > > ifcon

Re: Using isakmpd to build a bridge

2007-01-21 Thread stan
On Mon, Jan 22, 2007 at 01:05:47AM +, Stuart Henderson wrote: > On 2007/01/21 19:01, stan wrote: > > On Sun, Jan 21, 2007 at 11:16:26PM +, Stuart Henderson wrote: > > > > ifconfig bridge0 create > > > > ifconfig gif0 create > > > > ifconfig gif0 tunnel x.x.176.33 x.x.176.37 > > > > ifcon

Re: External Bridging Access Point Recommendations?

2007-01-21 Thread Mike
I've used openwrt on a bridged linksys wrt54gl with good results. This method lets me have an obsd access point with wpa. hth, mike http://wiki.openwrt.org/BridgingAccessPointHowto?highlight=%28HowTo%29 On Sun, Jan 21, 2007 at 06:48:53PM -0500, [EMAIL PROTECTED] wrote: > I've been having issues

Re: OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-21 Thread Brian Keefer
On Jan 21, 2007, at 4:34 PM, bofh wrote: On 1/21/07, Brian Keefer <[EMAIL PROTECTED]> wrote: Because driver support for Linux is a lot better than for OpenBSD, I'm not sure if I believe this to be as strong an argument since, as the blackbox maker, you have your choice of hardware. This mean

Re: Using isakmpd to build a bridge

2007-01-21 Thread stan
On Sun, Jan 21, 2007 at 05:28:33PM -0700, Darren Spruell wrote: > On 1/21/07, stan <[EMAIL PROTECTED]> wrote: > >On Sun, Jan 21, 2007 at 11:16:26PM +, Stuart Henderson wrote: > >> > ifconfig bridge0 create > >> > ifconfig gif0 create > >> > ifconfig gif0 tunnel x.x.176.33 x.x.176.37 > >> > ifco

Re: Using isakmpd to build a bridge

2007-01-21 Thread Stuart Henderson
On 2007/01/21 19:01, stan wrote: > On Sun, Jan 21, 2007 at 11:16:26PM +, Stuart Henderson wrote: > > > ifconfig bridge0 create > > > ifconfig gif0 create > > > ifconfig gif0 tunnel x.x.176.33 x.x.176.37 > > > ifconfig gif0 up > > > brconfig bridge0 up that all looks ok. > > > But when I t

External Bridging Access Point Recommendations?

2007-01-21 Thread alex
I've been having issues with my Atheros-based wirless card operating in HostAP mode for several weeks now, and between that and the fact that my wife's Acer/WinXP laptop never worked with our previous Prism 2.5-based card (and only intermittenly with the Atheros card), I'm getting to the point

Re: Using isakmpd to build a bridge

2007-01-21 Thread Darren Spruell
On 1/21/07, stan <[EMAIL PROTECTED]> wrote: On Sun, Jan 21, 2007 at 11:16:26PM +, Stuart Henderson wrote: > > ifconfig bridge0 create > > ifconfig gif0 create > > ifconfig gif0 tunnel x.x.176.33 x.x.176.37 > > ifconfig gif0 up > > brconfig bridge0 up > > > > But when I try to do "brconfig lea

Re: OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-21 Thread bofh
On 1/21/07, Brian Keefer <[EMAIL PROTECTED]> wrote: Because driver support for Linux is a lot better than for OpenBSD, I'm not sure if I believe this to be as strong an argument since, as the blackbox maker, you have your choice of hardware. This means you can choose hardware that runs openbsd

Low power barebone: MSI Axis 700 Lite with fanless VIA C7 1GHz

2007-01-21 Thread Constantine A. Murenin
Hi, Anyone tried subj? http://www.newegg.com/Product/Product.asp?Item=N82E16856167012 http://www.msicomputer.com/product/p_spec.asp?model=Axis_700_Lite It looks pretty-pretty nice, and goes for a very reasonable price -- about 202,32 USD delivered for a complete barebone -- it includes case, PS

Re: Secure perl forum board software

2007-01-21 Thread Anton Karpov
Just FYI: I've found nice E-Blah perl forum. Nifty, small, and is able to use plain text files as storage (e.g. NO mysql shit). Very suitable for not very big board. I'll play with it and report my impressions.

Re: Using isakmpd to build a bridge

2007-01-21 Thread stan
On Sun, Jan 21, 2007 at 11:16:26PM +, Stuart Henderson wrote: > > ifconfig bridge0 create > > ifconfig gif0 create > > ifconfig gif0 tunnel x.x.176.33 x.x.176.37 > > ifconfig gif0 up > > brconfig bridge0 up > > > > But when I try to do "brconfig learn bridge0" I get a message about the > >

Re: OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-21 Thread Brian Keefer
On Jan 21, 2007, at 12:33 PM, bofh wrote: Which I don't understand - if you're going to sell a blackboz, why not use openbsd instead of some stinky redcrap or that piece of shit rhell? Centos is just an enabler, tyvm. On 1/21/07, Henning Brauer <[EMAIL PROTECTED]> wrote: * Tautvydas <[EMAIL P

Re: sk0 errors with i386 MP -current

2007-01-21 Thread Stuart Henderson
On 2007/01/21 15:28, Jeff Ross wrote: > Running a -current i386 MP kernel and trying to add an sk nic got me the > following errors: try enabling acpi

sk0 errors with i386 MP -current

2007-01-21 Thread Jeff Ross
Running a -current i386 MP kernel and trying to add an sk nic got me the following errors: sk0: watchdog timeout sk0: cannot stop transfer of Tx descriptors sk0: cannot stop transfer of Rx descriptors Everything is working fine with the onboard em0 but this is interesting: ioapic0: pin 17 sha

Re: soekris net4511 + ral + wep

2007-01-21 Thread Andreas Bihlmaier
On Fri, Jan 19, 2007 at 11:56:43PM -0500, James Turner wrote: > I just got my soekris net4511 in the mail today. I've got it setup to my > liking minus wep support. Below is my /etc/hostname.ral0 and my dmesg. > When I use nwkey 0x0... my clients can no longer connect to the > wireless netwo

Re: Using isakmpd to build a bridge

2007-01-21 Thread Stuart Henderson
> ifconfig bridge0 create > ifconfig gif0 create > ifconfig gif0 tunnel x.x.176.33 x.x.176.37 > ifconfig gif0 up > brconfig bridge0 up > > But when I try to do "brconfig learn bridge0" I get a message about the > interface not being configured. Looks like it is though: If you're typing exactl

Re: Using isakmpd to build a bridge

2007-01-21 Thread stan
On Sun, Jan 21, 2007 at 09:44:35PM +, Stuart Henderson wrote: > On 2007/01/21 14:59, stan wrote: > > On Wed, Jan 17, 2007 at 03:35:57PM +, Stuart Henderson wrote: > (hmm, ntpd+zaurus+zzz = occasional rifts in the space-time continuum) > > > > > Can anyone point me to some information as to

Re: OT:

2007-01-21 Thread Tautvydas
Whether or not buying and off-the-shelf solution is better than building one in-house entirely depends on the relative cost of each solution. Off-the-shelf tends to cost more to acquire, but usually costs less in administration. Yes, I agree with that. it costs to maintain it--how much do you

Re: squidclamav make issues on OpenBSD 4.0 sparc64 (*** Error code 1)

2007-01-21 Thread J.C. Roberts
On Sunday 21 January 2007 04:38, openbsd neophyte wrote: > i've followed the following tutorial verbatim: > > http://www.kernel-panic.it/openbsd/proxy/proxy6.html > > i've tried using squidclamav 2.4 because any newer version doesn't > have the regex lib, and i've also tried squidclamav 3.0 and ski

Re: OT:

2007-01-21 Thread Jason Faulkner
Two thoughts here... First of all, the Barracuda product is really well done. Don't discount it, as they do a /great/ job of filtering without FPs. However, most businesses would rather spend the money and add knowledge to the company than spend the same amount and learn nothing. I'd say to re

Re: OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-21 Thread Stuart Henderson
On 2007/01/21 21:14, Jeroen Massar wrote: > mentions the url containing their modifications: > http://source.barracuda.com/ heh...at least that webserver appears to have a more sensible choice of OS.

Re: Using isakmpd to build a bridge

2007-01-21 Thread Stuart Henderson
On 2007/01/21 14:59, stan wrote: > On Wed, Jan 17, 2007 at 03:35:57PM +, Stuart Henderson wrote: (hmm, ntpd+zaurus+zzz = occasional rifts in the space-time continuum) > > > Can anyone point me to some information as to how I need to change things > > > to get this working at this level? > > >

Re: OT:

2007-01-21 Thread Darren Spruell
On 1/21/07, Brian Keefer <[EMAIL PROTECTED]> wrote: > Little off topic, but I need some help. For a week I'm working in a > small company. (~250 workstations). Till 2008 there will be 400-600 > workstations. So, they are planning to buy something for spam/mail > filtering (http://www.barracudanet

Re: OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-21 Thread Jeroen Massar
[reordered mail to let the reply make sense again] > On 1/21/07, Henning Brauer <[EMAIL PROTECTED]> wrote: >> * Tautvydas <[EMAIL PROTECTED]> [2007-01-21 20:33]: >> > What I know now - barracuda is a blackbox. I've read that there is >> > "simple web interface". IMHO, it sounds not very good at al

Re: OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-21 Thread bofh
Which I don't understand - if you're going to sell a blackboz, why not use openbsd instead of some stinky redcrap or that piece of shit rhell? Centos is just an enabler, tyvm. On 1/21/07, Henning Brauer <[EMAIL PROTECTED]> wrote: * Tautvydas <[EMAIL PROTECTED]> [2007-01-21 20:33]: > What I know

Re: Secure perl forum board software

2007-01-21 Thread Anton Karpov
> And along those lines, some simple photo album type thingy? igal is simple and do the job for me. I like this perl script

Re: OT:

2007-01-21 Thread Brian Keefer
On Jan 21, 2007, at 5:30 AM, Tautvydas wrote: Hey List, Little off topic, but I need some help. For a week I'm working in a small company. (~250 workstations). Till 2008 there will be 400-600 workstations. So, they are planning to buy something for spam/mail filtering (http://www.barracudanetwo

Re: Using isakmpd to build a bridge

2007-01-21 Thread stan
On Wed, Jan 17, 2007 at 03:35:57PM +, Stuart Henderson wrote: > On 2007/01/21 13:01, stan wrote: > > However, I need to make this work at the layyer 2 level (bridging) so thet > > the (Braiin Dead) windows machines on the inside networks can share files > > using SMB. > > > > Can anyone point

Re: OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-21 Thread Henning Brauer
* Tautvydas <[EMAIL PROTECTED]> [2007-01-21 20:33]: > What I know now - barracuda is a blackbox. I've read that there is > "simple web interface". IMHO, it sounds not very good at all. the barracuda boxes are rusty stinky old redhat with spamassassin and some web interface. at least, they used t

Re: Idea for additionnal funding

2007-01-21 Thread J.C. Roberts
On Sunday 21 January 2007 09:01, Constantine A. Murenin wrote: > On 20/01/07, J.C. Roberts <[EMAIL PROTECTED]> wrote: > > There are some which think the idea of tax exempt status for > > "non-profit" organizations is a good thing since it allows > > individuals to decide what to do with their incom

Re: Poor performance with gem(4)? (reposted from ppc@)

2007-01-21 Thread Brian Keefer
On Jan 21, 2007, at 6:36 AM, Mark Kettenis wrote: Getting quite decent performance on my Mac mini G4: gem0 at pci2 dev 15 function 0 "Apple Uni-N2 GMAC" rev 0x80: irq 41, address 00:0d:93:60:dd:1a bmtphy0 at gem0 phy 0: BCM5221 100baseTX PHY, rev. 4 With an msk(4) at the other end and a dec

Re: OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-21 Thread Tautvydas
It is not bad at all: a) You mention stupid people, thus give them something simple. As they won't know how to use OpenBSD nor maintain it. Thus unless you want them to need you for all the upcoming years, and thus pay you the money for maintaining the box, get them that barracuda box with a supp

Re: Secure perl forum board software

2007-01-21 Thread Gaby Vanhegan
On 21 Jan 2007, at 17:58, bofh wrote: > And along those lines, some simple photo album type thingy? SWMBO > wants to put something up for family members to see, and I prefer not > to use one of those big commercial things. http://vanhegan.net/software/microalbum/ Disclaimer: I am the author o

Re: Using isakmpd to build a bridge

2007-01-21 Thread Stuart Henderson
On 2007/01/21 13:01, stan wrote: > However, I need to make this work at the layyer 2 level (bridging) so thet > the (Braiin Dead) windows machines on the inside networks can share files > using SMB. > > Can anyone point me to some information as to how I need to change things > to get this working

Using isakmpd to build a bridge

2007-01-21 Thread stan
I've worked through the docs at http://tinyurl.com/vaqvm, and created a VPN at the IP level. First thanks for all the good work on this, once I figured out how to read :-), it did work just as advertised. However, I need to make this work at the layyer 2 level (bridging) so thet the (Braiin Dead

Re: Secure perl forum board software

2007-01-21 Thread bofh
On 1/21/07, Anton Karpov <[EMAIL PROTECTED]> wrote: Since almost every php-based board engine is just a piece of crap, as the php itself, I'm looking for good perl based board software. The _most_ important point is security, noone except authorised users should be able to get forum data. I've lo

Re: Idea for additionnal funding

2007-01-21 Thread Constantine A. Murenin
On 20/01/07, J.C. Roberts <[EMAIL PROTECTED]> wrote: There are some which think the idea of tax exempt status for "non-profit" organizations is a good thing since it allows individuals to decide what to do with their income. There are others which think the idea of tax exempt status for "non-prof

Re: Idea for additionnal funding

2007-01-21 Thread L. V. Lammert
On Sat, 20 Jan 2007, bofh wrote: > I've actually been contemplating setting up a non-profit. If there's > any accountants with experience would be willing to talk to me, I'd > appreciate it. > Actually, I talked to Theo about this last year, as we currently operate a non-profit that is underutili

Re: Is there a typo in the CARP FAQ/documentation ?

2007-01-21 Thread Nick Holland
Ronnie Garcia wrote: > Hey, > > On http://www.openbsd.org/faq/pf/carp.html I can read: > > advskew > This optional parameter specifies how much to skew the advbase when > sending CARP advertisements. By manipulating *advbase*, the master CARP > host can be chosen. The higher the number, the les

Re: OT:

2007-01-21 Thread Joachim Schipper
On Sun, Jan 21, 2007 at 03:30:48PM +0200, Tautvydas wrote: > Hey List, > > Little off topic, but I need some help. For a week I'm working in a > small company. (~250 workstations). Till 2008 there will be 400-600 > workstations. So, they are planning to buy something for spam/mail > filtering (htt

Secure perl forum board software

2007-01-21 Thread Anton Karpov
Since almost every php-based board engine is just a piece of crap, as the php itself, I'm looking for good perl based board software. The _most_ important point is security, noone except authorised users should be able to get forum data. I've looked at SMF, phpBB, but it's all php based and googlin

Poor performance with gem(4)? (reposted from ppc@)

2007-01-21 Thread Mark Kettenis
Getting quite decent performance on my Mac mini G4: gem0 at pci2 dev 15 function 0 "Apple Uni-N2 GMAC" rev 0x80: irq 41, address 00:0d:93:60:dd:1a bmtphy0 at gem0 phy 0: BCM5221 100baseTX PHY, rev. 4 With an msk(4) at the other end and a decent gigabit switch in between, iperf tells me I'm getti

Re: Idea for additionnal funding

2007-01-21 Thread Joachim Schipper
On Sat, Jan 20, 2007 at 12:04:56PM -0500, Jean-Daniel Beaubien wrote: > Hello everyone, > > Recently I wrote an email to Theo about this idea I had to help fund > OpenBSD. I never got a reply back, so either he found it very stupid > and refrained himself from flaming me (that's probably not it)

Re: more than one OBSD slice on the same harddisk?

2007-01-21 Thread Joachim Schipper
On Sat, Jan 20, 2007 at 05:26:51PM -0500, jared r r spiegel wrote: > On Sat, Jan 20, 2007 at 09:58:00PM +0100, Patrick Useldinger wrote: > > > > If I have a harddisk with one OBSD slice and one other slice (say > > Linux), can I convert that second slice to OBSD A6 and use it from the > > same O

OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-21 Thread Jeroen Massar
Tautvydas wrote: > Hey List, > > Little off topic, but I need some help. For a week I'm working in a > small company. (~250 workstations). Till 2008 there will be 400-600 > workstations. So, they are planning to buy something for spam/mail > filtering (http://www.barracudanetworks.com/ns/products/s

OT:

2007-01-21 Thread Tautvydas
Hey List, Little off topic, but I need some help. For a week I'm working in a small company. (~250 workstations). Till 2008 there will be 400-600 workstations. So, they are planning to buy something for spam/mail filtering (http://www.barracudanetworks.com/ns/products/spam_overview.php). I think

Re: L2TP/FreeRadius In OpenBSD

2007-01-21 Thread Brian Candler
On Sat, Jan 20, 2007 at 06:00:57PM +0800, Demuel I. Bendano, R.E.E wrote: > Has anyone did a successful implementation of L2TP+FreeRadius in OpenBSD? Not that I know of. If you look through the archives of this list, a few weeks ago I posted a port of rp-l2tp. However, it doesn't work properly. B

squidclamav make issues on OpenBSD 4.0 sparc64 (*** Error code 1)

2007-01-21 Thread openbsd neophyte
i've followed the following tutorial verbatim: http://www.kernel-panic.it/openbsd/proxy/proxy6.html i've tried using squidclamav 2.4 because any newer version doesn't have the regex lib, and i've also tried squidclamav 3.0 and skipped the regex section, but with both options, i get the following

Re: updating openbsd to current ...

2007-01-21 Thread Stuart Henderson
On 2007/01/21 00:25, S t i n g r a y wrote: > pass in on $int_if route-to { ($ext_if1 $ext_gw1) } inet proto tcp from \ > $lan_net to any port {$ports} keep state > > pass in on $int_if route-to { ($ext_if2 $ext_gw2) } from \ > $lan_net flags S/SA keep state The last matching line has priorit

Re: Atheros WIFI card can scan, but can't connect.

2007-01-21 Thread Sunnz
Have already tried that... I try again just for the sake of hoping it works... Any other ideas? 2007/1/21, Saint Aardvark the Carpeted <[EMAIL PROTECTED]>: Sunnz writes: > After boot up, log in, first thing I do is: > # ifconfig ath0 nwid 624wn up; I think you may also have to specify the chann

Re: Idea for additionnal funding

2007-01-21 Thread Jean-Daniel Beaubien
On 1/20/07, J.C. Roberts <[EMAIL PROTECTED]> wrote: On Saturday 20 January 2007 10:09, Jean-Daniel Beaubien wrote: > > Feeling unloved? -Don't worry, Theo can flame you when he gets > > home. > > I'm sure he will...but damn it I still think it's a good idea... :) > A bit of (possibly unwanted an