Re: greylisting and mailer pools redux

2007-06-13 Thread Peter N. M. Hansteen
"Satadru Pramanik" <[EMAIL PROTECTED]> writes: > Is there a way to enable greylisting based upon the subnet mask of the > sending mailhost without patching spamd & spamlogd? Well, like Bob Beck pointed out, there is a real chance that this will open the floodgates a little too much. It's alway

Re: Load balancing with DSR

2007-06-13 Thread Linden Varley
We host our own web-servers so DSR shouldn't be a problem. Will probably get rid of the co-located balancers and bring them inside our network as we dont really gain anything from co-locating. Might just use something simple like lbnamed ! Adam wrote: Linden Varley <[EMAIL PROTECTED]> wrote:

Re: hardware needed for network stack performance work

2007-06-13 Thread Henning Brauer
* Florin Andrei <[EMAIL PROTECTED]> [2007-06-14 02:04]: > Henning Brauer wrote: > > > >Now I am back in Hamburg and would like to continue that work. There > >is quite a lot more performance to gain, but I need to be able to measure, > >profile etc. For that I need two (preferably identical) 1u r

Re: hardware needed for network stack performance work

2007-06-13 Thread Henning Brauer
* Martin Schrvder <[EMAIL PROTECTED]> [2007-06-14 01:24]: > 2007/6/13, Matt Olander <[EMAIL PROTECTED]>: > >Where is Henning located? Shipping free stuff out of country is sometimes a > >pain and takes longer. > > Hamburg, Germany. > > Henning, is DENIC still using OpenBGPD? DECIX, yes, but they

Re: Load balancing with DSR

2007-06-13 Thread Adam
Linden Varley <[EMAIL PROTECTED]> wrote: > Load-balancers were co-located for redundancy reasons I believe. Its > just a shame traffic in/out is paid-for so even if web-servers were also > co-located then traffic will still be metered. If your web servers and load balancers aren't on the same n

Re: [OT] Open Source OSS for OpenBSD?

2007-06-13 Thread Theo de Raadt
> On 6/13/07, Edd Barrett <[EMAIL PROTECTED]> wrote: > > Hi guys, > > > > I have been reading a thread on opensolaris.org regarding the > > open-sourcing of 4front's OSS. After explaining why CDDL licensing is > > unsuitable for OpenBSD, some of the developers have expressed an > > interest to cont

Re: Load balancing with DSR

2007-06-13 Thread Linden Varley
Load-balancers were co-located for redundancy reasons I believe. Its just a shame traffic in/out is paid-for so even if web-servers were also co-located then traffic will still be metered. We could bring the load-balancers into our network to stop this problem but we have two-sites on differen

Re: hardware needed for network stack performance work

2007-06-13 Thread Theo de Raadt
> Henning Brauer wrote: > > > > Now I am back in Hamburg and would like to continue that work. There > > is quite a lot more performance to gain, but I need to be able to measure, > > profile etc. For that I need two (preferably identical) 1u rackmount, > > very fast single-CPU machines here in

'new disklabel disk size different 4096 != 3800' messages in i386 snapshot install

2007-06-13 Thread Adriaan
I get the following messages during the snapshot bsd.rd install from: OpenBSD 4.1-current (RAMDISK_CD) #382: Tue Jun 12 20:35:47 MDT 2007 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/RAMDISK_CD snip- rd0: fixed, 3800 blocks dkcsum: wd0 matches BIOS drive 0x80 r

Re: [OT] Open Source OSS for OpenBSD?

2007-06-13 Thread Darren Spruell
On 6/13/07, Edd Barrett <[EMAIL PROTECTED]> wrote: Hi guys, I have been reading a thread on opensolaris.org regarding the open-sourcing of 4front's OSS. After explaining why CDDL licensing is unsuitable for OpenBSD, some of the developers have expressed an interest to contact Theo regarding lice

route add default mpath

2007-06-13 Thread riwanlky
Hi, route add -mpath use with pf.conf could do load balancing from internal to public network. my question is how to setup pf.conf or kernel, so that from the public network can access the public interfaces. it seem to me that the first default route/ interface will send out all traffic regardl

Re: Load balancing with DSR

2007-06-13 Thread Adam
Linden Varley <[EMAIL PROTECTED]> wrote: > The only reason we need DSR is our load-balancers are co-located and we > have a limit on data usage so the connection needs to be offloaded to > the server/client and not proxied as this would get quite expensive with > the traffic flowing through our

Re: RAIDFrame root autoconfig fails in -current

2007-06-13 Thread Nick Bender
I have current running under VMWare Server using both single and multiprocessor raidframe enabled kernels (dmsgs below). As far as I can tell everything is working and softraid is not causing any issues with raidframe autoconfiguration. I'll try and test on VMWare ESX tomorrow - that emulates an

Re: hardware needed for network stack performance work

2007-06-13 Thread Jim Razmus
* Florin Andrei <[EMAIL PROTECTED]> [070613 20:02]: > Henning Brauer wrote: > > > >Now I am back in Hamburg and would like to continue that work. There > >is quite a lot more performance to gain, but I need to be able to measure, > >profile etc. For that I need two (preferably identical) 1u rackm

Re: greylisting and mailer pools redux

2007-06-13 Thread Bob Beck
* Satadru Pramanik <[EMAIL PROTECTED]> [2007-06-13 16:00]: > I have OpenBSD 4.0 setup with spamd doing greylisting for a mail > server, and I am having a problem with more and more companies sending > mail that is getting stuck in spamd from having a pool of mail servers > sending mail from several

Re: Load balancing with DSR

2007-06-13 Thread Linden Varley
The only reason we need DSR is our load-balancers are co-located and we have a limit on data usage so the connection needs to be offloaded to the server/client and not proxied as this would get quite expensive with the traffic flowing through our co-location pipe. Might have to move to Linux w

Re: hardware needed for network stack performance work

2007-06-13 Thread Florin Andrei
Henning Brauer wrote: Now I am back in Hamburg and would like to continue that work. There is quite a lot more performance to gain, but I need to be able to measure, profile etc. For that I need two (preferably identical) 1u rackmount, very fast single-CPU machines here in Hamburg, asap, sinc

Open Source OSS for OpenBSD?

2007-06-13 Thread Edd Barrett
Hi guys, I have been reading a thread on opensolaris.org regarding the open-sourcing of 4front's OSS. After explaining why CDDL licensing is unsuitable for OpenBSD, some of the developers have expressed an interest to contact Theo regarding licensing and OpenBSD. I do not know much about licensi

Re: hardware needed for network stack performance work

2007-06-13 Thread Martin Schröder
2007/6/13, Matt Olander <[EMAIL PROTECTED]>: Where is Henning located? Shipping free stuff out of country is sometimes a pain and takes longer. Hamburg, Germany. Henning, is DENIC still using OpenBGPD? Best Martin

Re: RTM_ADD and RTM_LOSING

2007-06-13 Thread Jeff Santos
Hi, Thank you very much. netstat -ni will not show a single error on any of the three interfaces. I do not think it has anything to do with PF, because the problem happens even with a pass quick rule. I use dlink DGE-530T nics and one onboard vr0. sk0: flags=8843 mtu 1500 lladdr 00:13:

Re: RTM_ADD and RTM_LOSING

2007-06-13 Thread Stuart Henderson
On 2007/06/13 16:38, Jeff Santos wrote: > I keep getting these "punt RTM_ADD without gateway" in my /var/log/messages > from the routed daemon. Once in a while, I get RTM_LOSING as well. RTM_LOSING happens when TCP segments are lost, look for packet loss somewhere. The usual suspects are bad cable

Re: Load balancing with DSR

2007-06-13 Thread Reyk Floeter
On Wed, Jun 13, 2007 at 12:36:33PM -0400, Brian A. Seklecki wrote: > Such as Distributed computing environments where you have your HAL4 > service VIP on the same segment/subnet as your distributed server farm. > so they should redesign their network instead of inventing crazy features. this DSR

greylisting and mailer pools redux

2007-06-13 Thread Satadru Pramanik
I have OpenBSD 4.0 setup with spamd doing greylisting for a mail server, and I am having a problem with more and more companies sending mail that is getting stuck in spamd from having a pool of mail servers sending mail from several addresses in the same subnet. I searched the archives and notice

RTM_ADD and RTM_LOSING

2007-06-13 Thread Jeff Santos
Hi, I keep getting these "punt RTM_ADD without gateway" in my /var/log/messages from the routed daemon. Once in a while, I get RTM_LOSING as well. I noticed that, even with a static default route, every now and then I try to ping the default gateway, I get ping: sendto: No route to host. I saw a

Re: OpenBSD 4.1 and Dell PowerEdge 2900

2007-06-13 Thread Renaud Allard
John Nietzsche wrote: > Dear gentleman, > > i am trying to install openbsd 4.1 on dell poweredge 2900. Everything > from turnning on the machine to cd booting was ok, but when i get to > the point of installing it (that part when i am given the options: > Upgrade, Install and Shell? ) its usb keyb

Re: syslog disabling question

2007-06-13 Thread Kian Mohageri
On 6/13/07, Stuart Henderson <[EMAIL PROTECTED]> wrote: On 2007/06/13 02:00, Kian Mohageri wrote: > Is my best option to kill syslogd from rc.local or manually edit /etc/rc? How about leaving them both running, and binding syslog-ng to just the relevant IP address? Thank you all for the sugg

Re: openbsd 3.9, openbsd 4.0 install errors, most likely hardware

2007-06-13 Thread John Mendenhall
> > Anyway, how about underclocking your Duron some? Reset the BIOS timings > > and power levels to failsafe? The old K7+VIA Chipset boards were a rough > > crowd. > > This is a custom white box server, all put together. > It is not an HP. > I will try to reset the bios timings and power level

Re: carp on a /30?

2007-06-13 Thread Jon Simola
On 6/13/07, David Newman <[EMAIL PROTECTED]> wrote: In the example given here: http://www.openbsd.org/faq/pf/carp.html Each physical interface has two IPv4 addresses, one for a shared IP and one for the interface address. That would require a /29 or shorter to accommodate these two addresses,

Re: hardware needed for network stack performance work

2007-06-13 Thread Matt Olander
On Wednesday 13 June 2007 10:26 am, Jason Dixon wrote: > On Wed, 13 Jun 2007 11:02:42 -0600, Theo de Raadt <[EMAIL PROTECTED]> wrote: > >> On 6/13/07, Henning Brauer <[EMAIL PROTECTED]> wrote: > >> > very fast single-CPU machines here in Hamburg, asap, since I have some > >> > time for such develop

Re: hardware needed for network stack performance work

2007-06-13 Thread Eric Furman
On Wed, 13 Jun 2007 12:01:47 -0600, "Theo de Raadt" <[EMAIL PROTECTED]> said: > > > Oh, a directed spam campaign. perfect. that will endear us to our > > > users. Please return to marketing school from whence you came, and > > > think > > > before you suggest such things. > > > > A open sourc

Re: hardware needed for network stack performance work

2007-06-13 Thread Diana Eichert
On Wed, 13 Jun 2007, Jason Dixon wrote: I'm probably going to lose a friend over this, but I'd like to challenge iXsystems to step up and donate a couple systems for this purpose. It would benefit everyone for you guys to donate the hardware to further optimize PF. We all know that PF has be

Re: carp on a /30?

2007-06-13 Thread Bryan Vyhmeister
On Jun 13, 2007, at 11:57 AM, David Newman wrote: Each physical interface has two IPv4 addresses, one for a shared IP and one for the interface address. That would require a /29 or shorter to accommodate these two addresses, plus at least one address on the other side of the link. Is there

2 ISPs, 2 dhclients, 2 routing tables?

2007-06-13 Thread ben
I have an OpenBSD box at my office, it's hooked up to a cable modem and does NAT. We had a DSL modem put in yesterday that we want to use for certain users or certain ports or if the cable dies. In order to properly NAT out on the ADSL link I know I can use a pf rule with route-to but I'm wonder

Re: hardware needed for network stack performance work

2007-06-13 Thread Bob Beck
> Or maybe we need 20 more people like Jason Dixon, to make an appeal to a > company where they have contacts, where the message will at least be > read. That's directly targetted, and therefore more meaningful, and I > think has a higher chance of success. > > Anyone out there know companies usin

carp on a /30?

2007-06-13 Thread David Newman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 What is the longest v4 prefix length CARP supports? In the example given here: http://www.openbsd.org/faq/pf/carp.html Each physical interface has two IPv4 addresses, one for a shared IP and one for the interface address. That would require a /29 or

Re: hardware needed for network stack performance work

2007-06-13 Thread Aaron Glenn
On 6/13/07, Jack J. Woehr <[EMAIL PROTECTED]> wrote: I agree. I sent two Bluetooth cards and $100 cc donation in the past twelvemonth. right, but it's a $100 per suggestion per email. by my count you're $400 in the hole (-:

WRAP wlan lockup / isakmpd / buffer space

2007-06-13 Thread Michael
Hi, I suddenly had a weird wlan lockup during a big file transfer over wlan. The access point is a WRAP.2E, 1 LAN, 128 MB with a ral0 card. See dmesg below for more infos. The client is an IBM X41 notebook with iwi0 and I am using an IPsec VPN between the two machines. Just after the lockup I had

Re: recommended hardware for Gigabit firewall?

2007-06-13 Thread Daniel Ouellet
Florin Andrei wrote: I'm building several firewalls that need to be able to sustain 1000 Mbit throughput. We're using AMD64 processors a lot, so that's the kind of architecture I'm looking at right now. I will use OpenBSD 4.1 64 bit version. The set of rules on the firewalls will be relatively

Re: hardware needed for network stack performance work

2007-06-13 Thread Darrin Chandler
On Wed, Jun 13, 2007 at 12:07:45PM -0600, Jack J. Woehr wrote: > Your point however that it takes work is a justified point. You've > got a www@ responsponsible party. Maybe an appeals@ responsible > party to make webbage, write surveys, and spawn begging campaigns? Or maybe we need 20 more peopl

Re: hardware needed for network stack performance work

2007-06-13 Thread Theo de Raadt
> > All fundraising suggestions should be written on the back of a $100 > > bill > > and sent to Theo. > > I agree. I sent two Bluetooth cards and $100 cc donation in the past > twelvemonth. Yes, such small contributions help a lot -- in the places where individuals can help. But when big thin

Re: hardware needed for network stack performance work

2007-06-13 Thread Theo de Raadt
> > No campaign will fix that. > > I dunno, marketing seems to work sometimes. You plain don't get it! You want us to do MORE. We don't want to do more. Keep suggesting it, and I promise we'll do LESS.

recommended hardware for Gigabit firewall?

2007-06-13 Thread Florin Andrei
I'm building several firewalls that need to be able to sustain 1000 Mbit throughput. We're using AMD64 processors a lot, so that's the kind of architecture I'm looking at right now. I will use OpenBSD 4.1 64 bit version. The set of rules on the firewalls will be relatively small and simple. At

Re: hardware needed for network stack performance work

2007-06-13 Thread Jack J. Woehr
On Jun 13, 2007, at 11:44 AM, Will H. Backman wrote: > All fundraising suggestions should be written on the back of a $100 > bill > and sent to Theo. I agree. I sent two Bluetooth cards and $100 cc donation in the past twelvemonth. -- Jack J. Woehr Director of Development Absolute Performance

Re: hardware needed for network stack performance work

2007-06-13 Thread Jack J. Woehr
On Jun 13, 2007, at 12:01 PM, Theo de Raadt wrote: > No campaign will fix that. I dunno, marketing seems to work sometimes. Maybe it can never work *for OpenBSD*, because when some CIO or MIS manager hits the list to ask a question they get roasted by the fachidiot of the day. End of corporate do

Re: hardware needed for network stack performance work

2007-06-13 Thread Theo de Raadt
> > Oh, a directed spam campaign. perfect. that will endear us to our > > users. Please return to marketing school from whence you came, and > > think > > before you suggest such things. > > A open source entity asking for donations from commercial entities > with whom they already > have

Re: hardware needed for network stack performance work

2007-06-13 Thread Greg Thomas
On 6/13/07, Theo de Raadt <[EMAIL PROTECTED]> wrote: These performance enhancements will not affect regular private users, but will be of particular benefit to companies who use our software in larger installs. Companies should stand up when such requests are made, or they and their employees s

Re: hardware needed for network stack performance work

2007-06-13 Thread Jim Razmus
* Jack J. Woehr <[EMAIL PROTECTED]> [070613 13:27]: > On Jun 13, 2007, at 11:02 AM, Theo de Raadt wrote: > > >However I wish there were some large companies out there using and > >relying in pf, who could just decide (right now) > > Suggestion for tapping the Large Company resource for OpenBSD: >

Re: hardware needed for network stack performance work

2007-06-13 Thread Will H. Backman
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Theo de Raadt Sent: Wednesday, June 13, 2007 1:30 PM To: Jack J. Woehr Cc: [EMAIL PROTECTED] Org Subject: Re: hardware needed for network stack performance work > On Jun 13, 2007, at 11:02 AM, Theo de Raadt w

OpenBSD 4.1 and Dell PowerEdge 2900

2007-06-13 Thread John Nietzsche
Dear gentleman, i am trying to install openbsd 4.1 on dell poweredge 2900. Everything from turnning on the machine to cd booting was ok, but when i get to the point of installing it (that part when i am given the options: Upgrade, Install and Shell? ) its usb keyboard is not working. I left with

Re: hardware needed for network stack performance work

2007-06-13 Thread Jack J. Woehr
On Jun 13, 2007, at 11:34 AM, Bob Beck wrote: > > Oh, a directed spam campaign. perfect. that will endear us to our > users. Please return to marketing school from whence you came, and > think > before you suggest such things. A open source entity asking for donations from commercial ent

Re: Gigabyte WI01GS MiniPCI works with ral(4)

2007-06-13 Thread viq
On 13/06/07, Simon Kuhnle <[EMAIL PROTECTED]> wrote: Hi, I just got a Gigabyte WI01GS MiniPCI and booted OpenBSD-current on my Thinkpad T40: ~% dmesg | grep ral ral0 at pci2 dev 2 function 0 "Ralink RT2561S" rev 0x00: irq 11, address 00:1a:4d:26:bb:1a ral0: MAC/BBP RT2561C, RF RT2527 Works lik

Re: hardware needed for network stack performance work

2007-06-13 Thread Bob Beck
>3) Use info garnered through survey to > a) craft appeals on website Don't need a survey for this. we have a pretty good idea what biggies are using it. > b) create email appeals to self-identified users in correct > classes. Oh, a directed spam ca

Re: hardware needed for network stack performance work

2007-06-13 Thread Theo de Raadt
> On Jun 13, 2007, at 11:02 AM, Theo de Raadt wrote: > > > However I wish there were some large companies out there using and > > relying in pf, who could just decide (right now) > > Suggestion for tapping the Large Company resource for OpenBSD: > > 1) Create an OpenBSD User Survey > a

Re: hardware needed for network stack performance work

2007-06-13 Thread Jason Dixon
On Wed, 13 Jun 2007 11:02:42 -0600, Theo de Raadt <[EMAIL PROTECTED]> wrote: >> On 6/13/07, Henning Brauer <[EMAIL PROTECTED]> wrote: >> > very fast single-CPU machines here in Hamburg, asap, since I have some >> > time for such development right now. If you can help, please drop > deraadt@ >> > an

Re: A question about OpenBSD

2007-06-13 Thread Brian A. Seklecki
md5.exe and md5sum.exe can also be found for windows. ~BAS On Tue, 2007-06-12 at 23:10 +0100, Stuart Henderson wrote: > On 2007/06/13 07:48, John Tate wrote: > > I am downloading OpenBSD 4.2 > > 4.2, that's impressive (-: > > > I know how to use everything in that but being > > young I am not t

Re: hardware needed for network stack performance work

2007-06-13 Thread Jack J. Woehr
On Jun 13, 2007, at 11:02 AM, Theo de Raadt wrote: However I wish there were some large companies out there using and relying in pf, who could just decide (right now) Suggestion for tapping the Large Company resource for OpenBSD: 1) Create an OpenBSD User Survey a) should include question

Re: : Troubleshooting PCMCIA modem 3Com 3CXM756

2007-06-13 Thread Raimo Niskanen
Thank you guys! I am looking for a new modem. Unfortunately is it hard to find your suggested ones in Sweden... On Wed, Jun 13, 2007 at 09:51:14AM -0700, Matthew Clarke wrote: > Wed, Jun 13, 2007 at 11:21:35AM +0200, Raimo Niskanen may have written: > > > Hi all! > > > > I have an old laptop o

Re: hardware needed for network stack performance work

2007-06-13 Thread Theo de Raadt
> On 6/13/07, Henning Brauer <[EMAIL PROTECTED]> wrote: > > very fast single-CPU machines here in Hamburg, asap, since I have some > > time for such development right now. If you can help, please drop deraadt@ > > and me an email. > > Got me a t-shirt, a 4.1 CD set, and $100 to you. Thanks a lot.

Re: Troubleshooting PCMCIA modem 3Com 3CXM756

2007-06-13 Thread Matthew Clarke
Wed, Jun 13, 2007 at 11:21:35AM +0200, Raimo Niskanen may have written: > Hi all! > > I have an old laptop on whith I want to use ppp > to connect to Internet, using a PCMCIA modem > 3Com 3CXM756 "Global GSM & Cellular Modem PC Card" > > First, I _think_ it shows up as /dev/cua03. In > dmsg it p

Re: Load balancing with DSR

2007-06-13 Thread Brian A. Seklecki
Such as Distributed computing environments where you have your HAL4 service VIP on the same segment/subnet as your distributed server farm. Or HA databses ~BAS On Wed, 2007-06-13 at 17:49 +0200, Pierre-Yves Ritschard wrote: > best pf network stack cannot solve. -- Brian A. Seklecki <[EMAIL PROT

Re: hardware needed for network stack performance work

2007-06-13 Thread bofh
On 6/13/07, Henning Brauer <[EMAIL PROTECTED]> wrote: very fast single-CPU machines here in Hamburg, asap, since I have some time for such development right now. If you can help, please drop deraadt@ and me an email. Got me a t-shirt, a 4.1 CD set, and $100 to you. -- "This officer's men seem

Gigabyte WI01GS MiniPCI works with ral(4)

2007-06-13 Thread Simon Kuhnle
Hi, I just got a Gigabyte WI01GS MiniPCI and booted OpenBSD-current on my Thinkpad T40: ~% dmesg | grep ral ral0 at pci2 dev 2 function 0 "Ralink RT2561S" rev 0x00: irq 11, address 00:1a:4d:26:bb:1a ral0: MAC/BBP RT2561C, RF RT2527 Works like a charm. Associated with my local AP and surfing the

Re: Load balancing with DSR

2007-06-13 Thread Pierre-Yves Ritschard
On Wed, 13 Jun 2007 17:05:44 +0200 Reyk Floeter <[EMAIL PROTECTED]> wrote: > > i don't like the idea about "DSR", it sounds like an evil hack to get > some performance at the wrong place. it is better to focus on > improving the pf/network stack performance itself and to be able to do > traffic fi

Re: Load balancing with DSR

2007-06-13 Thread Brian A. Seklecki
This is like "Local Triangulation" in Radware-speak? (Don't know what F5) calls it. Basically you bring up an alias on lo0 or lo1 primary as the inet4 of your HAL4 address and as long as everything is in the same subnet... ~BAS On Wed, 2007-06-13 at 12:25 +1000, Linden Varley wrote: > Hi, > > A

Re: OpenBSD 4.1 crashed, pfsync problems??

2007-06-13 Thread carlopmart
Jens Mayer wrote: Dear all, sorry to break the thread, but I did not have the originating message in my mailinglist folder anymore. Nonetheless, I want to reply to "carlopmart" who wrote on 2007-Jun-07: Last night my openbsd 4.1 has crashed and I don't know why. I am using this openbsd as

Re: Load balancing with DSR

2007-06-13 Thread Reyk Floeter
On Wed, Jun 13, 2007 at 06:42:24AM +0200, Pierre-Yves Ritschard wrote: > On Wed, 13 Jun 2007 10:54:58 +0800 > Lars Hansson <[EMAIL PROTECTED]> wrote: > > > Linden Varley wrote: > > > Anyone know of any load balancing software for OpenBSD that can do > > > direct-server return? (our load balancers

Re: syslog disabling question

2007-06-13 Thread Brian A. Seklecki
modify /etc/rc (this looks questionable anyway -- looks like someone snook the named stuff in there because it needs aprivate log device in the chroot): echo 'starting system logger' rm -f /dev/log if [ X"${named_flags}" != X"NO" ]; then rm -f /var/named/dev/log syslogd_flags="

Re: Sometime NAT, sometimes NOT?

2007-06-13 Thread Brian A. Seklecki
Good catch on this guys. We should remember that most modern NAT is PAT, or hybrid NAT+PAT. You should ask your ISP for more space to NAT to (A NAT+PAT hybrid pool). Cisco calls it overloading. Reminds me of a Soundgarden song. ~BAS On Wed, 2007-06-13 at 12:03 +0100, Stuart Henderson wrote:

Re: Troubleshooting PCMCIA modem 3Com 3CXM756

2007-06-13 Thread Mitch Parker
Hello, I have one of these cards. It won't work unless you use the 3Com drivers on Windows, and even then it doesn't work right. If you use a standard US Robotics external modem, preferably a Sportster, or even possibly a Zoom PCMCIA modem, they should work. Mitch -Original Message- Fr

Re: OpenBSD 4.1 crashed, pfsync problems??

2007-06-13 Thread Jens Mayer
Dear all, sorry to break the thread, but I did not have the originating message in my mailinglist folder anymore. Nonetheless, I want to reply to "carlopmart" who wrote on 2007-Jun-07: > Last night my openbsd 4.1 has crashed and I don't know why. I am using > this openbsd as a part of two ca

Re: Two instances of chrooted OBSD Apache?

2007-06-13 Thread Vjacheslav V. Borisov
Matt wrote: My ultimate goal is to run both php4 and php5 concurrently on a single machine and I have been looking at the various options. You probably could use mod_fastcgi from ports, and specify for any location or virtual host custom php config or version. I never tried this on OpenBSD c

Re: Troubleshooting PCMCIA modem 3Com 3CXM756

2007-06-13 Thread Fred Crowson
Raimo Niskanen wrote: Hi all! I have an old laptop on whith I want to use ppp to connect to Internet, using a PCMCIA modem 3Com 3CXM756 "Global GSM & Cellular Modem PC Card" First, I _think_ it shows up as /dev/cua03. In dmsg it pops up as device pccom3, and when trying with tip it appears that

Troubleshooting PCMCIA modem 3Com 3CXM756

2007-06-13 Thread Raimo Niskanen
Hi all! I have an old laptop on whith I want to use ppp to connect to Internet, using a PCMCIA modem 3Com 3CXM756 "Global GSM & Cellular Modem PC Card" First, I _think_ it shows up as /dev/cua03. In dmsg it pops up as device pccom3, and when trying with tip it appears that while the card is in it

Re: Sometime NAT, sometimes NOT?

2007-06-13 Thread Stuart Henderson
On 2007/06/13 12:01, Geraerts Andy wrote: > >> Jun 13 11:05:01 spock /bsd: pf: NAT proxy port allocation (50001-65535) > >> failed > >> > >> Can this be the cause of my errors? > > >Yes, you have run out of available ports to NAT from. > > >The straightforward answer is to NAT from a larger pool

Re: Two instances of chrooted OBSD Apache?

2007-06-13 Thread Almir Karic
I am rather unexperienced in this field so any advice is highly appreciated! (including other relatively safe php4+php5 methods that might work on OpenBSD) both lighttpd and apache allow you to have both php4 and php5 side by side. in apache one has to be a FCGI process the other can be either

Re: Two instances of chrooted OBSD Apache?

2007-06-13 Thread Nick Holland
Matt wrote: ... > So I am trying to have another instance of the OpenBSD version of Apache > 1.3 - chrooted and all. > > I *think* it can be done by downloading src.tar.gz and compile it again > from there with instructions so it does not overwrite the existing httpd. > Just changing the /usr/sr

Re: Sometime NAT, sometimes NOT?

2007-06-13 Thread Geraerts Andy
>> Jun 13 11:05:01 spock /bsd: pf: NAT proxy port allocation (50001-65535) >> failed >> >> Can this be the cause of my errors? >Yes, you have run out of available ports to NAT from. >The straightforward answer is to NAT from a larger pool of addresses >i.e. nat ... -> { 1.1.1.1, 2.2.2.2, 3.3.3.0

Two instances of chrooted OBSD Apache?

2007-06-13 Thread Matt
Hello, My ultimate goal is to run both php4 and php5 concurrently on a single machine and I have been looking at the various options. Easiest way seems to be to install something like LightHTTPd or Apache2 on the side, along with php4. But I do not like the idea of non-chrooted webservers runn

Re: Sometime NAT, sometimes NOT?

2007-06-13 Thread Stuart Henderson
On 2007/06/13 11:12, Geraerts Andy wrote: > Brian, > > Despite the fact that I get tons of State Failures I see this strange message > : > > Jun 13 11:05:01 spock /bsd: pf: NAT proxy port allocation (50001-65535) > failed > > Can this be the cause of my errors? Yes, you have run out of availabl

Re: Sometime NAT, sometimes NOT?

2007-06-13 Thread Geraerts Andy
>> Jun 13 11:05:01 spock /bsd: pf: NAT proxy port allocation (50001-65535) >> failed >this almost sounds like you have something else which grabs these >ports. do you, intentionally? Well I can't find anything that could block it. There is no ftp daemon or ftp proxy or whatever running on the bo

Re: Sometime NAT, sometimes NOT?

2007-06-13 Thread Peter N. M. Hansteen
"Geraerts Andy" <[EMAIL PROTECTED]> writes: > Jun 13 11:05:01 spock /bsd: pf: NAT proxy port allocation (50001-65535) > failed this almost sounds like you have something else which grabs these ports. do you, intentionally? -- Peter N. M. Hansteen, member of the first RFC 1149 implementation te

Re: syslog disabling question

2007-06-13 Thread Stuart Henderson
On 2007/06/13 02:00, Kian Mohageri wrote: > Is my best option to kill syslogd from rc.local or manually edit /etc/rc? How about leaving them both running, and binding syslog-ng to just the relevant IP address?

Re: Sometime NAT, sometimes NOT?

2007-06-13 Thread Geraerts Andy
Brian, Despite the fact that I get tons of State Failures I see this strange message : Jun 13 11:05:01 spock /bsd: pf: NAT proxy port allocation (50001-65535) failed Can this be the cause of my errors? Andy. -Oorspronkelijk bericht- Van: Brian A. Seklecki [mailto:[EMAIL PROTECTED] Verz

syslog disabling question

2007-06-13 Thread Kian Mohageri
Hello, I was setting up a central logserver this afternoon and some of the functionality I need wasn't in the stock syslogd(8), so I chose to use syslog-ng. I noticed that you cannot specify syslogd=NO or syslogd_flags=NO to disable it (in rc.conf.local), and I was mostly curious why. I'm sure

Re: dhcp server with 2 interfaces and 2 different subnets

2007-06-13 Thread demuel
Hello, Your current /etc/dhcpd.conf configuration will not work no matter how hard you test it . Hint? You should not create a shared-network amongst two different ip blocks and rather instead allocate a specific subnet per ip blocks. Trust me, this will work because I been there done that. D

Re: Sometime NAT, sometimes NOT?

2007-06-13 Thread demuel
Maybe try to check and possibly replace the interfaces involve as well as the cables and let us know if this issue still occur. > pfctl -x loud && tail -f /var/log/messages > > ~BAS > > On Mon, 11 Jun 2007, Geraerts Andy wrote: > >> We have an OpenBSD firewall running for a while now. Since

hardware needed for network stack performance work

2007-06-13 Thread Henning Brauer
As some of you might have noticed, I worked on network stack and especially pf performance in calgary. This lead to quite massive improvements - one diff in particular doubled pf performance in our test scenario; undeadly covered that: http://www.undeadly.org/cgi?action=article&sid=20070528213858

Re: OpenBSD installation

2007-06-13 Thread Peter N. M. Hansteen
Rafa3 Brodewicz <[EMAIL PROTECTED]> writes: > Does OpenBSD still require to install at first 8GB of hdd? See http://www.openbsd.org/faq/faq14.html#LargeDrive - which I read as 'only if your hardware is old and/or weird' -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team h

Re: Load balancing with DSR

2007-06-13 Thread Pierre-Yves Ritschard
> > pass in on $ext_if route-to { $webh1, $webh2 } round-robin proto > > tcp \ from any to $virt_ip port http no state > > pass out on $int_if from any to $virt_ip port http no state > > Wouldn't you need some kind of state here? Otherwise there's no > guarantee of the packets for a given connec

OpenBSD installation

2007-06-13 Thread Rafał Brodewicz
Hi. Does OpenBSD still require to install at first 8GB of hdd? Is there some way to bypass it? Regards. -- Rafa3 Brodewicz [EMAIL PROTECTED]