Re: ipsec vpn?

2007-08-20 Thread Steve B
Hans-Joerg, Markus - Thanks for the advice and the help. I sat down and did some more testing at work. I definitely have an IPSEC tunnel from one point to the other. Any suggestions on how I can now have my users route all of their traffic through our end? I'd like them to be able to safely browse

ftp-proxy

2007-08-20 Thread John Nietzsche
Dear gentleman, i have just setted up a new natted firewall server after some period of inactivity. I got surprised with the new ftp-proxy utility! Now, it writes new pf rules, the prior one did not! I feel like unconfortable by the current ftp-proxy approach, since i cannot understand the ration

Re: 10G cards for 4.2

2007-08-20 Thread Chris Cappuccio
These cards are in the $5000 range and if you are lighting up fiber then you need some xenpaks that start around $1000 to $15000 ea. (If you want to light up strands from, say, Lansing to Ann Arbor, you would be using the $15000 part at each end, one with a 60 mile rating anyways) Before you go

Re: vlan on vr: one way traffic trouble

2007-08-20 Thread Chris Cappuccio
Jacob Yocom-Piatt [EMAIL PROTECTED] wrote: > on the same interface but HTTP connections traversing vr0->vlan0 hang > while similar connections going vlan0->vr0 work fine. the firewall plugs > vr0: flags=8943 mtu 1500 > vlan0: flags=8843 mtu 1496 You need a newer if_vr driver that supports IFCAP

Re: serial console device

2007-08-20 Thread nicodache
Ok, the dmesg is here :) BTW, is it normal to still have access the the ctrl-alt-del keys when I'm (or at least I should be) using the serial to redirect all the i/o from the other computer ? DMESG : OpenBSD 4.1 (GENERIC.RAID) #0: Sun Jul 8 22:16:34 CEST 2007 [EMAIL PROTECTED]:/sys/arch/i386

Re: serial console device

2007-08-20 Thread Stuart Henderson
On 2007/08/20 21:17, nicodache wrote: > I use a windows computer for it, only because I know this machine's > serial port works, and the configuration I set up for my cisco (which > is the same config as the one for openbsd) works in that machine. Doesn't mean the cable is suitable. Check that fir

Re: serial console device

2007-08-20 Thread nicodache
I wouldn't try to set set tty com0 in my /boot.conf, as it does not even work from boot prompt : I wouldn't like to have my computer stuck at boot, without beeing able to get OpenBSD up (seems like my computer does not continue booting after switching to the serial console). However, good news, I

Re: bind 9 cache poisoning

2007-08-20 Thread Darren Spruell
On 7/25/07, Allen <[EMAIL PROTECTED]> wrote: > Richard Storm wrote: > > Is openbsd bind vulnerable to attacks on binds PRNG described here: > > http://www.securiteam.com/securitynews/5VP0L0UM0A.html > > A glance at the README.OpenBSD file for 4.1 in /usr/src/usr.sbin/bind > shows (among other thing

Re: FTP server behind a bridge

2007-08-20 Thread Stuart Henderson
On 2007/08/20 16:33, stuart van Zee wrote: > allow users to use the ftp service. So, I was looking at the > possibility of dropping an OpenBSD box in that is setup to serve as > a filtering bridge but I have been unable to find information about > how to setup a transparent bridge in front of an F

Re: FTP server behind a bridge

2007-08-20 Thread Peter N. M. Hansteen
"stuart van Zee" <[EMAIL PROTECTED]> writes: > A point in the right direction would be appreciated. I tried > looking up on google, but I found a bazillion hits on how to setup a > firewall on a network and still being able to reach an ftp server on > the internet from the network, but nothing on

Re: serial console device

2007-08-20 Thread nicodache
Hello, I was just looking this webpage when I got your answer ; as Michael Lucas didn't talk about this file in his talk about consoles, I though console ports were active by default... (but I found this file in this book's index, however) So, tty00 is "tty00 "/usr/libexec/getty std.9600" vt2

Re: FTP server behind a bridge

2007-08-20 Thread Joachim Schipper
On Mon, Aug 20, 2007 at 04:33:28PM -0400, stuart van Zee wrote: > Hello all, > > I currently have an FTP server on the internet for use transferring > files back and forth with customers and have now been given the > requirement to put a firewall between it and the internet but still > allow user

Re: serial console device

2007-08-20 Thread Joachim Schipper
On Mon, Aug 20, 2007 at 03:55:50PM -0400, Jim Razmus wrote: > * nicodache <[EMAIL PROTECTED]> [070820 15:26]: > > Hello, > > > > I'm almost done configuring some little 1U server for my own > > edutainment, and I'm busy trying to configure the serial console. > > I have the excellent book of Micha

FTP server behind a bridge

2007-08-20 Thread stuart van Zee
Hello all, I currently have an FTP server on the internet for use transferring files back and forth with customers and have now been given the requirement to put a firewall between it and the internet but still allow users to use the ftp service. So, I was looking at the possibility of dropping

Re: serial console device

2007-08-20 Thread Jim Razmus
* nicodache <[EMAIL PROTECTED]> [070820 15:26]: > Hello, > > I'm almost done configuring some little 1U server for my own > edutainment, and I'm busy trying to configure the serial console. > I have the excellent book of Michael W. Lucas calld "Absolute > OpenBSD", and he tells about serial consol

Re: Beginner NAT / route / pfctl question - resolved

2007-08-20 Thread Lars Noodén
The default pf.conf had the nat configuration I have been using: nat on $ext_if from !($ext_if) -> ($ext_if:0) and it works fine. The problem seems to be with my use of dnsmasq. -Lars

serial console device

2007-08-20 Thread nicodache
Hello, I'm almost done configuring some little 1U server for my own edutainment, and I'm busy trying to configure the serial console. I have the excellent book of Michael W. Lucas calld "Absolute OpenBSD", and he tells about serial console, that by entering "set tty com0", we can access the machin

Re: pkg_add can't install a package

2007-08-20 Thread Tomas
I know that OpenBSD developers are the best developers on earth and they are doing the best they can to make this already great OS even greater... Thank you OpenBSD developers, we appreciate the work you do. Marc Espie wrote: On Fri, Aug 17, 2007 at 04:42:33AM -0500, Will Maier wrote: On

usb printer speed

2007-08-20 Thread Onat IŞIK
My usb printer works very slow under OpenBSD, I mean, when compared to other operating systems. According to dmesg, the printer operates through usb version 1. Is there any way, like kernel configuration or so, to make it operate under usb version 2? I'm asking because I want to erase that other o

Re: pkg_add can't install a package

2007-08-20 Thread Marc Espie
On Fri, Aug 17, 2007 at 04:42:33AM -0500, Will Maier wrote: > On Fri, Aug 17, 2007 at 11:48:34AM +0300, Tomas wrote: > > I'm having some trouble installing clamav-0.90.3.tgz package. I'm using > > OpenBSD_4_1. > > My steps: > > 1. export PKG_PATH=ftp://ftp.openbsd.org/pub/OpenBSD/4.1/packages/i386

Re: ospfd: some machines stuck in 2-WAY/OTHER

2007-08-20 Thread Esben Norby
On Monday 20 August 2007 12:37:03 Toni Mueller wrote: > Hi, > > in my network, I have five OSPF routers and hosts which learn their routes > via OSPF, all in one area. One of the routers is a Cisco, all other > affected routers and hosts are OpenBSD/i386 4.1-stable as of May 24th. The > problem is

Re: ospfd: some machines stuck in 2-WAY/OTHER

2007-08-20 Thread Claudio Jeker
On Mon, Aug 20, 2007 at 12:37:03PM +0200, Toni Mueller wrote: > Hi, > > in my network, I have five OSPF routers and hosts which learn their routes via > OSPF, all in one area. One of the routers is a Cisco, all other affected > routers and hosts are OpenBSD/i386 4.1-stable as of May 24th. The prob

Re: installing jdk-1.5 on 4.1 (i386) error

2007-08-20 Thread Chris
On 8/20/07, Brian A. Seklecki <[EMAIL PROTECTED]> wrote: > "Unexepected EOF" ? That means that the download never completed that the > file is truncated (which leads to the SHA1 and Size mismatch) Thanks to all who replied. The SHA1 for jdk1.5 in OpenBSD 4.1 is correct. The issue was with downloa

ospfd: some machines stuck in 2-WAY/OTHER

2007-08-20 Thread Toni Mueller
Hi, in my network, I have five OSPF routers and hosts which learn their routes via OSPF, all in one area. One of the routers is a Cisco, all other affected routers and hosts are OpenBSD/i386 4.1-stable as of May 24th. The problem is that some machines establish an adjacency with some, but not all