Re: keep state for http connections

2007-01-24 Thread Otto Moerbeek
On Thu, 25 Jan 2007, Travers Buda wrote: > On Wed, 24 Jan 2007 14:20:46 -0800 > "Kian Mohageri" <[EMAIL PROTECTED]> wrote: > > > On 1/24/07, Travers Buda <[EMAIL PROTECTED]> wrote: > > > > > Last time I checked though, clients only talk with the web server on > > > port 80. So, the only reason y

Re: compiling SMP kernel (how?)

2007-01-24 Thread Daniel Ouellet
Peter Matulis wrote: I'm looking for instructions on compiling a kernel to run on my SMP system. I've installed 4.0 and I can run bsd.mp but now I want to update my sources and recompile a new GENERIC kernel. All is fully documented on the site. Use the patch process only for the security ad

Re: bcw Driver won't attach

2007-01-24 Thread Sam Fourman Jr.
ahh so I have to build a custom kernel. ok Thank you Sam Fourman Jr. On 1/24/07, Jonathan Gray <[EMAIL PROTECTED]> wrote: On Wed, Jan 24, 2007 at 11:03:04PM -0600, Sam Fourman Jr. wrote: > Below is a dmesg and my Broadcom 4318 won't attach even after > installing the firmware > > does anyone h

Re: keep state for http connections

2007-01-24 Thread Travers Buda
On Wed, 24 Jan 2007 14:20:46 -0800 "Kian Mohageri" <[EMAIL PROTECTED]> wrote: > On 1/24/07, Travers Buda <[EMAIL PROTECTED]> wrote: > > > Last time I checked though, clients only talk with the web server on > > port 80. So, the only reason you would want to keep state would be if > > you have a r

rdr woes (3.9) transparent bridge pf

2007-01-24 Thread patrick keshishian
Greetings, I have a transparent bridged pf serving my home network. It has been running fairly nicely for some time now. I have a web server behind it which I'm trying to move to another server, same network, different IP. I thought it might be a simple thing to just use a rdr rule to point tra

Re: compiling SMP kernel (how?)

2007-01-24 Thread djgoku
On 1/24/07, Peter Matulis <[EMAIL PROTECTED]> wrote: I'm looking for instructions on compiling a kernel to run on my SMP system. I've installed 4.0 and I can run bsd.mp but now I want to update my sources and recompile a new GENERIC kernel. Read this: http://openbsd.org/stable.html

Re: compiling SMP kernel (how?)

2007-01-24 Thread Marco Peereboom
Why don't you use a snapshot instead? If you need more instructions than provided in the FAQ you might not be ready for kernel compiles and should rely on the kernels that are provided to you. On Wed, Jan 24, 2007 at 11:52:07PM -0500, Peter Matulis wrote: > I'm looking for instructions on compili

Re: bcw Driver won't attach

2007-01-24 Thread Jonathan Gray
On Wed, Jan 24, 2007 at 11:03:04PM -0600, Sam Fourman Jr. wrote: > Below is a dmesg and my Broadcom 4318 won't attach even after > installing the firmware > > does anyone have a patch laying around out of tree? It does not attach because the driver is not included in GENERIC, this is because it i

Re: A PHP management interface for OpenBSD ?

2007-01-24 Thread David Bryan
I really like the concept- but something you must remember when developing any web app- Input Validation. Ideally you would have a mysql database or file that just enables or disables something ( literally a 1 or a 0 or true/false, then a secondary program that creates config files from that with

bcw Driver won't attach

2007-01-24 Thread Sam Fourman Jr.
Below is a dmesg and my Broadcom 4318 won't attach even after installing the firmware does anyone have a patch laying around out of tree? Sam Fourman Jr. OpenBSD 4.0-current (GENERIC) #1350: Fri Jan 19 16:42:39 MST 2007 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel(R)

compiling SMP kernel (how?)

2007-01-24 Thread Peter Matulis
I'm looking for instructions on compiling a kernel to run on my SMP system. I've installed 4.0 and I can run bsd.mp but now I want to update my sources and recompile a new GENERIC kernel. Peter

Re: ipcomp

2007-01-24 Thread Richard Thornton
Thanks Jason, Can someone tell me is ipcomp working, if so, how do I use it and does it support deflate? Cheers Richard On 23/01/07, Jason McIntyre <[EMAIL PROTECTED]> wrote: On Tue, Jan 23, 2007 at 01:04:51PM +1100, Richard Thornton wrote: > > Just trying to ascertain if ipcomp(4) is fully in

Re: A PHP management interface for OpenBSD ?

2007-01-24 Thread Darren Spruell
On 1/24/07, chefren <[EMAIL PROTECTED]> wrote: On 1/25/07 1:34 AM, Passeur wrote: > We are in the process of developing a PHP framework with a web frontend to > manage the OpenBSD settings through a web browser. > A friend advised me not to do that because of all the security holes I will > intro

Re: Performance Statistics: -current

2007-01-24 Thread Umnada Tyrolla
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Brian Candler > Sent: Friday, January 19, 2007 7:07 AM > To: Vijay Sankar > Cc: Marc Balmer; Claudio Jeker; misc@openbsd.org > Subject: Re: Performance Statistics: -current > > On Thu, Jan 18, 2007 at

Re: OT:

2007-01-24 Thread Steve Shockley
Tautvydas wrote: Little off topic, but I need some help. For a week I'm working in a small company. (~250 workstations). Till 2008 there will be 400-600 workstations. So, they are planning to buy something for spam/mail filtering (http://www.barracudanetworks.com/ns/products/spam_overview.php). I

Re: A PHP management interface for OpenBSD ?

2007-01-24 Thread chefren
On 1/25/07 1:34 AM, Passeur wrote: We are in the process of developing a PHP framework with a web frontend to manage the OpenBSD settings through a web browser. It should be handy, I presume =all= configs, logins, groups, passwords and for example the settings for Apache and PHP itself include

Re: Memory and pmap

2007-01-24 Thread Jonathan Gray
On Wed, Jan 24, 2007 at 08:06:06PM +0100, Markus Ritzer wrote: > Hello! > > I try to port OpenBSD to the Microsoft Xbox (the old one). My OpenBSD Kernel > boots until it crashes while handling memory related things. FreeBSD, which > is already ported, has this code: > > arch_i386_is_xbox tells

umass0: Phase Error, residue = 0

2007-01-24 Thread frantisek holop
hi there, this is 4.0 release. i have plugged in an iriver player and an usb hdd. when i umounted the iriver i got the residue messages. i haven't seen this before, could someone comment on it please? umass0 at uhub3 port 5 configuration 1 interface 0 umass0: iriver Limited iriver MP3 T10, rev

Re: keep state for http connections

2007-01-24 Thread Kian Mohageri
On 1/24/07, Travers Buda <[EMAIL PROTECTED]> wrote: > Last time I checked though, clients only talk with the web server on > port 80. So, the only reason you would want to keep state would be if > you have a ruleset like block out all (which is generally only usefull > if you don't trust the users

Re: multi queu

2007-01-24 Thread Joachim Schipper
On Wed, Jan 24, 2007 at 07:44:01AM -0800, Lawrence Horvath wrote: > On 1/24/07, Stuart Henderson <[EMAIL PROTECTED]> wrote: > >On 2007/01/24 06:45, Lawrence Horvath wrote: > >> usually its only possible to queue once going out an interface, as far > >> as i know, is it possible to use a loopback in

Re: Using old thin clients as a BGP testbed

2007-01-24 Thread Joachim Schipper
On Wed, Jan 24, 2007 at 01:47:28PM +, Richard Wilson wrote: > I work for a small hosting company, and the boss says he wants to start > doing BGP for our upstream connection. This means I've got to learn BGP. > At least I've managed to persuade him to buy me an O'Reilly book :-) > However, the

Re: multi queu

2007-01-24 Thread Lawrence Horvath
Like i sd over selling, im setting the etherface queue to linkshare or realtime(im having trouble finding the practical difference) to 1Mb, then leaving no upper limit, so they can burst, but the realtime|linkshare will protect other customers, im considering setting all 12 people to 1Mb, and then

Re: OpenBSD on software raid

2007-01-24 Thread doc Hyde
On 1/24/07, Thomas Alexander Frederiksen <[EMAIL PROTECTED]> wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > doc Hyde skrev: > > > Still "component0" and still haven't inserted my /dev/sd0d hdd. > > > > As I mentionned earlier I did some heavy reading before asking you guys > > the

Re: keep state for http connections

2007-01-24 Thread Darren Spruell
On 1/24/07, Travers Buda <[EMAIL PROTECTED]> wrote: Last time I checked though, clients only talk with the web server on port 80. So, the only reason you would want to keep state would be if you have a ruleset like block out all (which is generally only usefull if you don't trust the users of sai

Re: fan noise, speedstep

2007-01-24 Thread Marco Peereboom
There isn't much you can do. Your BIOS is spinning the fans not OpenBSD. ACPI will in the future take over that functionality and the fans then will be throttled more intelligently. On Wed, Jan 24, 2007 at 08:57:54PM +0100, Vim Visual wrote: > Hi, > > I am using an ibm t43p and have realised th

Re: keep state for http connections

2007-01-24 Thread Travers Buda
On Wed, 24 Jan 2007 08:26:11 -0800 Alexander Lind <[EMAIL PROTECTED]> wrote: > If I have a busy http server or cluster (by busy I mean one that gets > hundreds of thousands of visitors per day), and I use an openbsd > firewall, should I keep state for all incoming http connections, or > should

Re: keep state for http connections

2007-01-24 Thread Rosen Iliev
I have OpenBSD 3.9 doing load balancing to a farm of web servers (11 web servers). In the pick hours the traffic jumps over 32Mbits and around 15,000 entries in the states table. You can check my graph at: http://www.ilievi.net/15days.jpg The firewall is running on: cpu0: Intel Pentium III ("Gen

fan noise, speedstep

2007-01-24 Thread Vim Visual
Hi, I am using an ibm t43p and have realised that the fans are spinning *all* the time. When I was using the same laptop with a debian flavour I scarcely could hear them spinning. In dmesg I see cpu0: unknown Enhanced SpeedStep CPU, msr 0x0612112b0600112b cpu0: Enhanced SpeedStep 2267 MHz (1388

Re: [OT] Old books to good home

2007-01-24 Thread Jason Dixon
Thanks to everyone who responded. All of the books have found good warm homes with families to care for them. *sniff* -- Jason Dixon DixonGroup Consulting http://www.dixongroup.net

Re: Virtualisation on OpenBSD?

2007-01-24 Thread Will Maier
On Wed, Jan 24, 2007 at 08:02:01AM -0800, Lawrence Horvath wrote: > I tried looking for source but was unable, vmware is a closed > source as far as i can tell(please correct me if im wrong, as i > like to get hold of the source) when i was looking for it online > you have to download the binarys,

Memory and pmap

2007-01-24 Thread Markus Ritzer
Hello! I try to port OpenBSD to the Microsoft Xbox (the old one). My OpenBSD Kernel boots until it crashes while handling memory related things. FreeBSD, which is already ported, has this code: arch_i386_is_xbox tells if it is an Xbox and arch_i386_xbox_memsize is set to 64 oder 128, depend how

Re: Virtualisation on OpenBSD?

2007-01-24 Thread Lawrence Horvath
I tried looking for source but was unable, vmware is a closed source as far as i can tell(please correct me if im wrong, as i like to get hold of the source) when i was looking for it online you have to download the binarys, and you have to email in for a serial number to use it, they also have hi

Re: Compiling OpenBSD Kernel With Generic SMP

2007-01-24 Thread Ted Unangst
On 1/24/07, Demuel I. Bendano, R.E.E <[EMAIL PROTECTED]> wrote: Hi, The GENERIC.MP kernel contains the following: # $OpenBSD: GENERIC.MP,v 1.6 2006/11/27 18:50:59 marco Exp $ # # GENERIC.MP - sample multiprocessor kernel # include "arch/i386/conf/GENERIC" guess what this line doe

Re: Compiling OpenBSD Kernel With Generic SMP

2007-01-24 Thread Woodchuck
On Wed, 24 Jan 2007, Demuel I. Bendano, R.E.E wrote: > Hi, > > As you can see, there are only few entries in the GENERIC.MP and if it > compiles indeed how about the device drivers usually found in the GENERIC? > Would it be included when GENERIC.MP compiles? YES. That's what the "include" at t

Multipul IP's with PPPoE

2007-01-24 Thread Justin Blackmore
Hey Everyone, Ok here is what I got: [dsl modem] ←→ [Linksys]←→ [openbsd firewall running pf] I would like to remove the Linksys from the equations. The Linksys does the pppoe auth to my provider and provides routing for my bundle of ip addresses "/28". The Linksys does not do any nat or port

Re: keep state for http connections

2007-01-24 Thread Darren Spruell
On 1/24/07, Alexander Lind <[EMAIL PROTECTED]> wrote: If I have a busy http server or cluster (by busy I mean one that gets hundreds of thousands of visitors per day), and I use an openbsd firewall, should I keep state for all incoming http connections, or should I just pass them all in without s

keep state for http connections

2007-01-24 Thread Alexander Lind
If I have a busy http server or cluster (by busy I mean one that gets hundreds of thousands of visitors per day), and I use an openbsd firewall, should I keep state for all incoming http connections, or should I just pass them all in without state and then pass them all out without state instea

Re: Virtualisation on OpenBSD?

2007-01-24 Thread Lachlan Gunn
I tried looking for source but was unable, vmware is a closed source as far as i can tell(please correct me if im wrong, as i like to get hold of the source) when i was looking for it online you have to download the binarys, and you have to email in for a serial number to use it, they also have hi

Re: Virtualisation on OpenBSD?

2007-01-24 Thread L. V. Lammert
On Thu, 25 Jan 2007, Lachlan Gunn wrote: > Sorry, accidentally sent that to the wrong address. > > > vmware could run on OpenBSD if you have linux compatibility turned on i > > think > > It uses a number of kernel modules, so I doubt it. However, the > source may be available, so someone could p

Re: Virtualisation on OpenBSD?

2007-01-24 Thread Darren Spruell
On 1/24/07, Jeroen Massar <[EMAIL PROTECTED]> wrote: >> vmware could run on OpenBSD if you have linux compatibility turned on >> i think > > It uses a number of kernel modules, so I doubt it. However, the > source may be available, so someone could probably try to implement > similar functionali

Re: Virtualisation on OpenBSD?

2007-01-24 Thread Jeroen Massar
Lachlan Gunn wrote: > Sorry, accidentally sent that to the wrong address. > >> vmware could run on OpenBSD if you have linux compatibility turned on >> i think > > It uses a number of kernel modules, so I doubt it. However, the > source may be available, so someone could probably try to implement

Re: Compiling OpenBSD Kernel With Generic SMP

2007-01-24 Thread Demuel I. Bendano, R.E.E
Hi, The GENERIC.MP kernel contains the following: # $OpenBSD: GENERIC.MP,v 1.6 2006/11/27 18:50:59 marco Exp $ # # GENERIC.MP - sample multiprocessor kernel # include "arch/i386/conf/GENERIC" option MULTIPROCESSOR # Multiple processor support cpu*at mainbus? i

Re: High Load - t/s

2007-01-24 Thread Brian Candler
On Tue, Jan 23, 2007 at 02:03:42PM +0100, Jonas Thambert wrote: > The problem is the t/s on the sd1 device where I have the > email-storage. Have less than 10 accounts and clients on a > Xeon 3.0 Ghz server with 1 Gb RAM. I have tried to see why I have so > many t/s on the disk but I can not figure

Re: Compiling OpenBSD Kernel With Generic SMP

2007-01-24 Thread Demuel I. Bendano, R.E.E
Hi, As you can see, there are only few entries in the GENERIC.MP and if it compiles indeed how about the device drivers usually found in the GENERIC? Would it be included when GENERIC.MP compiles? Regards, Demuel >Josh Grosse > On Wed, Jan 24, 2007 at 10:24:17PM +0800, Demuel I. Bendano, R.E.E

Re: multi queu

2007-01-24 Thread Stuart Henderson
On 2007/01/24 07:44, Lawrence Horvath wrote: > Processing my mutliple queues, i would like to run it through 2 queue > sets, one for capping and individual ip bandwidth management, and the > second is a master cap, becuase you cant oversell queues > > i have 10 megs at my disposal, and i need to a

Re: Compiling OpenBSD Kernel With Generic SMP

2007-01-24 Thread Jack J. Woehr
On Jan 24, 2007, at 7:24 AM, Demuel I. Bendano, R.E.E wrote: > The FAQ deals with the GENERIC processor and > I cannot get anything under it that tells what to do if one will > compile > from the source code with a GENERIC.SMP kernel. $ sudo su - # mkdir /usr/local/kernel # cd /usr/local/kerne

Virtualisation on OpenBSD?

2007-01-24 Thread Lachlan Gunn
Sorry, accidentally sent that to the wrong address. vmware could run on OpenBSD if you have linux compatibility turned on i think It uses a number of kernel modules, so I doubt it. However, the source may be available, so someone could probably try to implement similar functionality. -- Lach

Re: Virtualisation on OpenBSD?

2007-01-24 Thread Tobias Weisserth
Hi there, On Jan 24, 2007, at 1:49 PM, John Tate wrote: Is there any software that supports OpenBSD that can do full virtualisation? I don't think VMware would be supported on OpenBSD. I don't think there is anything that really fits what you're looking for. The NetBSD project has neat Xe

Using old thin clients as a BGP testbed

2007-01-24 Thread Richard Wilson
I work for a small hosting company, and the boss says he wants to start doing BGP for our upstream connection. This means I've got to learn BGP. At least I've managed to persuade him to buy me an O'Reilly book :-) However, the other thing I demanded was a test network of some kind. BGP is one of th

Re: High Load - t/s

2007-01-24 Thread Brian Candler
On Tue, Jan 23, 2007 at 01:35:35PM +0100, Jonas Thambert wrote: > I'm using a Adaptec 2010S SCSI RAID card. I have tried > and tweaked the courier imap server the best I can > without any luck. ... > The sd1 disk has 140 t/s. CPU-load is nothing. And "sd1" is actually a RAID array of some sort, ra

Re: multi queu

2007-01-24 Thread Lawrence Horvath
Processing my mutliple queues, i would like to run it through 2 queue sets, one for capping and individual ip bandwidth management, and the second is a master cap, becuase you cant oversell queues i have 10 megs at my disposal, and i need to allot 12 people 1 meg each, the math wont work on only

Compiling OpenBSD Kernel With Generic SMP

2007-01-24 Thread Demuel I. Bendano, R.E.E
All, I have a machine, Dell 1855, that has one SATA hard disk drive but with two Pentium Xeon 2.0Ghz processor. Now, I have both the stable/current source code both for the kernel and the userland. I suppose that the GENERIC kernel supports only one processor whereas the GENERIC.SMP supports multi

Re: multi queu

2007-01-24 Thread Stuart Henderson
On 2007/01/24 06:45, Lawrence Horvath wrote: > usually its only possible to queue once going out an interface, as far > as i know, is it possible to use a loopback interface to run traffic > through muliple queues? what are you trying to achieve?

Re: Virtualisation on OpenBSD?

2007-01-24 Thread Adam Douglas
I have OpenBSD v3.7 and v3.8 run just fine in VMWare Server. I however haven't fixed the VMWare Tools issue as of yet but apparently there is a work around to have VMWare Tools work for OpenBSD as well. I have a bunch of OpenBSD on VMWare bookmarks if you want me to post. > Is there any software t

Re: atactl smartstatus to email other than cron user

2007-01-24 Thread Han Boetes
Paul de Weerd wrote: > > You just sent _all_ output to /dev/null > > Please learn how the shell redirects output : > > $ (ls fiets; ls auto) > /dev/null > ls: fiets: No such file or directory > $ (ls fiets; ls auto) 2> /dev/null > auto > $ (ls fiets; ls auto) 2> &1 > /

multi queu

2007-01-24 Thread Lawrence Horvath
usually its only possible to queue once going out an interface, as far as i know, is it possible to use a loopback interface to run traffic through muliple queues? internet--->em0 (queue)--->lo2 (queue)->em1--->lan -- -Lawrence -Student ID 1028219 -CCNA

Re: JOB OFFER

2007-01-24 Thread Luca Corti
On Wed, 2007-01-24 at 05:51 -0800, Lawrence Horvath wrote: > classify them as spam of if i should just delete them, i was concerned If they use bayesian filters for classification only the message body should be passed to the filter. Blacklisting (if done by gmail automatically when you report spa

Re: atactl smartstatus to email other than cron user

2007-01-24 Thread Paul de Weerd
On Wed, Jan 24, 2007 at 03:08:50PM +0059, Han Boetes wrote: | Joachim Schipper wrote: | > You'd need to use | > | > 0 * * * * /sbin/atactl /dev/wd0c smartstatus 2>&1 >/dev/null | \ | > mail -s "wd0 ERRORS on serverXYZ" [EMAIL PROTECTED] | | You just sent _all_ output to /dev/null Please learn

Re: atactl smartstatus to email other than cron user

2007-01-24 Thread Matthew R. Dempsky
On Wed, Jan 24, 2007 at 03:08:50PM +0059, Han Boetes wrote: > Joachim Schipper wrote: > > You'd need to use > > > > 0 * * * * /sbin/atactl /dev/wd0c smartstatus 2>&1 >/dev/null | \ > > mail -s "wd0 ERRORS on serverXYZ" [EMAIL PROTECTED] > > You just sent _all_ output to /dev/null No he didn't

Re: USB printer not working

2007-01-24 Thread Heinrich Rebehn
Heinrich Rebehn wrote: Hi all, i just received a Soekris 4801 which i want to use as a file and print server. However, i cannot get the printer to work. For testing purposes i am using a HP Deskjet 600 connected via a USB/Parallel cable. When i connect the printer it shows up as: ulpt0 at

Re: atactl smartstatus to email other than cron user

2007-01-24 Thread Han Boetes
Joachim Schipper wrote: > You'd need to use > > 0 * * * * /sbin/atactl /dev/wd0c smartstatus 2>&1 >/dev/null | \ > mail -s "wd0 ERRORS on serverXYZ" [EMAIL PROTECTED] You just sent _all_ output to /dev/null # Han

Re: JOB OFFER

2007-01-24 Thread Lawrence Horvath
I get a number of spams that make it though the misc list, not many but at least a few, i use gmail and wasn't sure if its safe to classify them as spam of if i should just delete them, i was concerned that in classifying them as spam it could count negative toward the list server? thanks On 1/2

Re: apache security

2007-01-24 Thread Alexander Farber
Joachim, could you share your config files for that? On 1/23/07, Joachim Schipper <[EMAIL PROTECTED]> wrote: The simple solution is to not allow the web server to write anywhere but /tmp. Regards Alex -- http://preferans.de

Re: Virtualisation on OpenBSD?

2007-01-24 Thread Lawrence Horvath
qemu is your best bet, its not quite as fast as vmware but it runs on OpenBSD, and supports several archs, it has a nice pkg and everything vmware could run on OpenBSD if you have linux compatibility turned on i think On 1/24/07, John Tate <[EMAIL PROTECTED]> wrote: Is there any software that

Re: The OACK Project

2007-01-24 Thread Per-Erik Persson
This rings a bell to me. I don't know if it still is true but "a while ago" tftpd was binding to the networkcard it found first. Try to run it on a machine that only has one networkcard and see if it works better. If you look at older postings you will probably find the exact problem. Howerver

Re: isakmpd + carp + sasyncd failover problems

2007-01-24 Thread Kai Mosebach
We are running productive already, hence an update to -current is too good at the moment. Please let me know if it brings some enhancements. I will setup another test scenario then. cheers Kai On Thu, Jan 18 2007 at 14:16, Kai Mosebach wrote: we are using 3 Soekris firewall pairs in our compa

Re: The OACK Project

2007-01-24 Thread Jonathan Eifrig
Rogier Krieger wrote: On 1/24/07, Jonathan Eifrig <[EMAIL PROTECTED]> wrote: tftpd[]: oack: Permission denied That may have something to do with *file* permissions. Quoting tftpd(8): "The use of tftp(1) does not require an account or password on the remote system. Due to the lack of auth

Virtualisation on OpenBSD?

2007-01-24 Thread John Tate
Is there any software that supports OpenBSD that can do full virtualisation? I don't think VMware would be supported on OpenBSD. -- Faced with the fact that Intelligent Design doesn't meet the criteria for a scientific theory, leading proponent redefines what a scientific theory is. Result: Astro

Re: The OACK Project

2007-01-24 Thread Jason Dixon
On Jan 24, 2007, at 6:18 AM, Jonathan Eifrig wrote: I'm trying to get a Soekris box to boot from an OpenBSD tftp server. I've gotten my DHCP server working, but I'm having trouble with my tftpd configuration. (I guess it's not so Trivial as I thought! :-)) When the client attempts to retriev

Re: The OACK Project

2007-01-24 Thread Rogier Krieger
On 1/24/07, Jonathan Eifrig <[EMAIL PROTECTED]> wrote: tftpd[]: oack: Permission denied That may have something to do with *file* permissions. Quoting tftpd(8): "The use of tftp(1) does not require an account or password on the remote system. Due to the lack of authentication information,

ipsec.conf question

2007-01-24 Thread stan
I've got some basic tuneling working using ipsec, and I'm trying to make it a bit more robuts. Here's what works: Machine A: ike esp from 192.168.1.0/24 to 192.168.9.0/24 peer XX.92.176.37 ike esp from XX.92.176.33 to 192.168.9.0/24 peer XX.92.176.37 ike esp from XX.92.176.33 to XX.92.176.37 Mac

The OACK Project

2007-01-24 Thread Jonathan Eifrig
I'm trying to get a Soekris box to boot from an OpenBSD tftp server. I've gotten my DHCP server working, but I'm having trouble with my tftpd configuration. (I guess it's not so Trivial as I thought! :-)) When the client attempts to retrieve pxeboot from the tftp server, the client times out and

Re: uvm_fault

2007-01-24 Thread mickey
On Tue, Jan 23, 2007 at 03:40:11PM -0500, test wrote: > I have a similar problem. I would suspect it's my hdd or possible RAM, > because this only happens when I am trying to recompile the kernel, or install > something from the ports tree. It panics with this error. this problem is there from a

Re: OpenBGPD in ISP-Planet's article

2007-01-24 Thread Lars Hansson
Claudio Jeker wrote: > We don't do the Cisco CLI and route-map thing -- which is in my opinion a > very good thing. Ah. I wasnt aware that those are in the standard though ;) --- Lars

Re: OT: Getting a premade box or doing it yourself

2007-01-24 Thread Toni Mueller
Hi, On Sun, 21.01.2007 at 13:53:22 +, Jeroen Massar <[EMAIL PROTECTED]> wrote: > others, I would actually suggest that Barracuda does it, as they have > their arguments, you don't ;) they have a professional sales department which can cook up any story you want (probably), and the original po

Re: OpenBGPD in ISP-Planet's article

2007-01-24 Thread Stuart Henderson
On 2007/01/24 17:46, Lars Hansson wrote: > Cool, but... > Alexey Suslikov wrote: > >> Non-standard of BGP functionality (modeled after PF). > What does that even mean? What is non-standard? I think they mean "it isn't an IOS clone"...

Re: 2 gateway in OBSD 4.0

2007-01-24 Thread Reza Muhammad
--- Greg Thomas <[EMAIL PROTECTED]> wrote: > On 1/23/07, sonjaya <[EMAIL PROTECTED]> wrote: > > Dear All > > > > Any posible way to using 2 gateway in n out > without using routed > > protcol such as bgp/osf > > Because i have two connection to Internet > > basic diagram > > |-gw01

Re: OpenBGPD in ISP-Planet's article

2007-01-24 Thread Ronnie Garcia
Alexey Suslikov a icrit : OpenBGPD/OpenBSD: Free OpenBSD-based EGP/IGP routing platform. Solid, secure, free, and very scalable. Again, you're operating without vendor support. Non-standard of BGP functionality (modeled after PF). Awesome integration with CARP and PF, makes for great firewalls, r

vnconfig -K only with a saltfile

2007-01-24 Thread Michael
Hi, I wonder how secure it would be to hardcode a password and just use the saltfile to decrypt a partition? The saltfile would be located on an USB stick and the partition could automatically be mounted when the stick gets plugged in, using hotplugd. I used a md5sum as password example here

Re: OpenBGPD in ISP-Planet's article

2007-01-24 Thread Claudio Jeker
On Wed, Jan 24, 2007 at 05:46:44PM +0800, Lars Hansson wrote: > Cool, but... > Alexey Suslikov wrote: > >> Non-standard of BGP functionality (modeled after PF). > What does that even mean? What is non-standard? > We don't do the Cisco CLI and route-map thing -- which is in my opinion a very good

Re: set obsd 3.9 as dns server

2007-01-24 Thread RedShift
Craig Skinner wrote: On Wed, Jan 24, 2007 at 09:25:13AM +0700, sonjaya wrote: Dear all i have obsd 3.9 , i want setup as dns name for my ip public and mydomain , i try follow step in openbsdsupport.org , but until now always get error lame server and etc , so where i get good tutorial about set

Re: OpenBGPD in ISP-Planet's article

2007-01-24 Thread Luca Corti
On Wed, 2007-01-24 at 17:46 +0800, Lars Hansson wrote: > What does that even mean? What is non-standard? I think the article refers to the fact that OpenBGPd is integrated with OpenBSD specific features like PF/CARP. ciao Luca

Re: OpenBGPD in ISP-Planet's article

2007-01-24 Thread Lars Hansson
Cool, but... Alexey Suslikov wrote: >> Non-standard of BGP functionality (modeled after PF). What does that even mean? What is non-standard? --- Lars Hansson

Re: atactl smartstatus to email other than cron user

2007-01-24 Thread Joachim Schipper
On Wed, Jan 24, 2007 at 02:51:50AM +, Paul Pruett wrote: > Using cron and atactl to email smartstatus errors > to an email address other than cron user: > - > > > I was playing with the suggesion in the man > page for atactl and smart status. After usin

Re: isakmpd + carp + sasyncd failover problems

2007-01-24 Thread Claer
On Thu, Jan 18 2007 at 14:16, Kai Mosebach wrote: > we are using 3 Soekris firewall pairs in our companies setup to provide > failover IPSec connections between 3 sites using OpenBSD 4.0 RELEASE. > The big picture looks like this : > > A -> B (passive) > A -> C (passive) > B -> C (passive) > >

OpenBGPD in ISP-Planet's article

2007-01-24 Thread Alexey Suslikov
OpenBGPD/OpenBSD: Free OpenBSD-based EGP/IGP routing platform. Solid, secure, free, and very scalable. Again, you're operating without vendor support. Non-standard of BGP functionality (modeled after PF). Awesome integration with CARP and PF, makes for great firewalls, routers and route servers. I

Re: 2 gateway in OBSD 4.0

2007-01-24 Thread Unnikrishnan P
> Any posible way to using 2 gateway in n out without using > routed protcol such as bgp/osf Because i have two connection > to Internet basic diagram > |-gw01---| > internet | obsd 4.0 |---Lan > |---gw02--| > > - 2 Ip public > - 1 server obsd

Re: set obsd 3.9 as dns server

2007-01-24 Thread Craig Skinner
On Wed, Jan 24, 2007 at 09:25:13AM +0700, sonjaya wrote: > Dear all > > i have obsd 3.9 , i want setup as dns name for my ip public and > mydomain , i try follow step in > openbsdsupport.org , but until now always get error lame server and > etc , so where i get good tutorial about setup obsd as n