Re: wifi modes

2009-04-28 Thread Claudio Jeker
On Wed, Apr 29, 2009 at 02:12:29AM -0400, Nick Guenther wrote: > On Wed, Apr 29, 2009 at 1:27 AM, Claudio Jeker > wrote: > > On Tue, Apr 28, 2009 at 05:47:20PM -0400, Nick Guenther wrote: > >> Why do only certain wireless cards support host AP mode or IBSS mode? > >> Is the 'modality' hardwired i

Re: wifi modes

2009-04-28 Thread Nick Guenther
On Wed, Apr 29, 2009 at 1:27 AM, Claudio Jeker wrote: > On Tue, Apr 28, 2009 at 05:47:20PM -0400, Nick Guenther wrote: >> Why do only certain wireless cards support host AP mode or IBSS mode? >> Is the 'modality' hardwired into the wifi hardware? >> >> For the archives (since I couldn't find anyth

Re: wifi modes

2009-04-28 Thread Claudio Jeker
On Tue, Apr 28, 2009 at 05:47:20PM -0400, Nick Guenther wrote: > Why do only certain wireless cards support host AP mode or IBSS mode? > Is the 'modality' hardwired into the wifi hardware? > > For the archives (since I couldn't find anything on this), the drivers > that support being wireless rout

Re: Someone has running Ekiga?

2009-04-28 Thread Tomáš Bodžár
After installation of gconf-editor ekiga runs fine.So why isn't gconf-editor as dependency for ekiga? Dne 29. duben 2009 7:03 TomC!E! BodE>C!r napsal(a): > I haven't gconf-editor installed so I tried it : > > Can't install gconf-editor-2.24.1p3: lib not found iconv.6.0 > > I have snapshot from 23

MPLS status questions.

2009-04-28 Thread Daniel Ouellet
Hi, I saw many changes in CVS for that and even on the wanted list for equipment compatibility testing as well. So, I am not sure where this is and I am curious as to what stage it might be? No complaint here, just curious what might be the current stage of it. Is it somewhat usable with a

Re: OpenBSD install question

2009-04-28 Thread Theo de Raadt
> > root on cd0a swap on cd0b dump on cd0b > > stopped at debugger+0x4,leave > > Panic: cannot read disklabel, 0x600/0xf00, error 5 What official release CD did you generate this error on?

Re: OpenBSD install question

2009-04-28 Thread Nick Holland
Chuck Robey wrote: > (I sure hope I was clear in my description, go ahead > and complain if I wasn't, I'll try again) complain! :) I'm going to end up nit-picking your language, but mostly because, well, I'm confused. And no one else is responding, so I am going to take a wild guess that I might

Re: wifi modes

2009-04-28 Thread Nick Guenther
Apologies. By now of course I see *that*. But so it's just a software issue then: that's the answer I was hoping for! It means there's nothing inherently wrong with my hardware, I can make it work if I just put the effort in (and find the time to learn). Thanks -Nick On 28/04/2009, Theo de Raadt

Re: wifi modes

2009-04-28 Thread Theo de Raadt
> Why do only certain wireless cards support host AP mode or IBSS mode? Because someone has to _want_ to do the work. I understand not everyone can do the work, but why bother making lists. It isn't going to encourage anyone to want to. Why don't you all see that? We are not your slaves.

Re: man softraid improvement

2009-04-28 Thread Justin Fletcher
On Tue, Apr 28, 2009 at 5:52 PM, Sebastian Rother < sebastian.rot...@jpberlin.de> wrote: > On Tue, 28 Apr 2009 10:33:34 -0500 > Marco Peereboom wrote: > > > > Thos who take my but-reports to fix their own crappy code should be > > > more quiet. Don't you think so too Marco? Or wait: You found eac

wifi modes

2009-04-28 Thread Nick Guenther
Why do only certain wireless cards support host AP mode or IBSS mode? Is the 'modality' hardwired into the wifi hardware? For the archives (since I couldn't find anything on this), the drivers that support being wireless routers (Host AP mode) are: acs(4), ath(4), pgt(4), ral(4), rtw(4), rum(4), u

Re: OpenBSD on Sun Netra X1

2009-04-28 Thread Christopher Intemann
Hi, On Tue, Apr 28, 2009 at 10:21 PM, Stuart Henderson wrote: > depends how you plug the pins in when you get the adapter. if you do > it this way, assuming the usual colour code for these, you can just > use a normal ethernet cable. > > 2 black > 3 yellow > 4 brown > 5 red+grn (ground; you /shou

Re: dualhead Nvidia FX5200 or MX4000?

2009-04-28 Thread Tobias Ulmer
On Tue, Apr 28, 2009 at 04:15:02PM -0500, Chris Bennett wrote: > I can pick up these two cards very cheap. Nvidia FX5200 or MX4000. > Will either work as dualhead? Nobody sane picks up a nvidia card, not even for "very cheap". Get a older radeon (eg. 9600). These work and you get decent 3D acceler

Ibiza

2009-04-28 Thread IbizaFlock
IBIZAFLOCK IS ONLINE NOW! We want to invite you to take part in a brand new and free community: IbizaFlock Meet your Ibiza friends online, chat, post classifieds, share videos and pictures and get informed about the latest events on world's leading party island: IBIZA! http://www.ibizaflock.com

dualhead Nvidia FX5200 or MX4000?

2009-04-28 Thread Chris Bennett
I can pick up these two cards very cheap. Nvidia FX5200 or MX4000. Will either work as dualhead? Chris Bennett -- A human being should be able to change a diaper, plan an invasion, butcher a hog, conn a ship, design a building, write a sonnet, balance accounts, build a wall, set a bone, comfort

Re: automaticaly mount/umount encrypted $HOME or ...

2009-04-28 Thread Maxim Bourmistrov
Well, it is up to you to chose complexity of the password and let the john to work harder. :) Choosing bash was a quick solution for executing the job after I'v logged out, e.g. how else do you umount and vnconfig -u? I'd like to use default ksh, but quick google-search gave me an answer -

Re: OpenBSD on Sun Netra X1

2009-04-28 Thread Stuart Henderson
On 2009-04-28, Christopher Intemann wrote: > Hi, > thanks for the hint, however, I'm in fact a bit more confused now:-) > Couldn't I use such a thing: > http://cgi.ebay.de/SERIAL-RS232-DB9-9-PIN-FEMALE-TO-RJ45-FEMALE-ADAPTOR_W0QQitemZ390041017767QQcmdZViewItemQQptZUK_Computing_Networking_SM?hash=i

Re: Internet access over Bluetooth; a summary.

2009-04-28 Thread Stuart Henderson
On 2009-04-27, Thomas Pfaff wrote: > >> > I've no idea what the name servers are supposed to be, so I >> > just started a local one and pointed /etc/resolv.conf at it; >> >> not very nice, better find out what the actual nameservers are. I >> believe ppp has some way to tell the client, see the p

Spanish BSD Group

2009-04-28 Thread Daniel Andersen
Well, I would like to announce that the Spanish BSD User Group (its Spanish acronym being "GUBE") is now official. Its mailing list is kindly hosted on MetaBUG (http://www.metabug.org/). -- Key ID: 493FB6AE Key fingerprint: 3E96 7892 B56D AE27 02EF BBAA BAA6 6C78 493F B6AE Keyserver:

Re: OpenBSD on Sun Netra X1

2009-04-28 Thread Chuck Robey
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christopher Intemann wrote: > Hi, > thanks for the hint, however, I'm in fact a bit more confused now:-) > Couldn't I use such a thing: > http://cgi.ebay.de/SERIAL-RS232-DB9-9-PIN-FEMALE-TO-RJ45-FEMALE-ADAPTOR_W0QQitemZ390041017767QQcmdZViewItemQQptZUK

Re: OpenBSD on Sun Netra X1

2009-04-28 Thread Frank Bax
Jussi Peltola wrote: Depends on the db9-rj45 adaptor, some need a rollover cable, some a straight one. Try it. http://www.ossmann.com/5-in-1.html

Dell D531 : Mem conflict + pcmcia not responding

2009-04-28 Thread Mark Kettenis
I just committed a diff that may help your machine (although perhaps not with the wi(4)). Should be on your favourite anoncvs mirror in a couple of hours, or in the snapshots in a couple of days.

Re: automaticaly mount/umount encrypted $HOME or ...

2009-04-28 Thread Timo Myyrä
I encrypted my $HOME with bioctl and just put the 'bioctl -c C -l /dev/sd0g softraid0' line to my /etc/rc. Simple and working solution although it needs a little bit tweaking as currently I get dropped to single user mode if I misstype my passphrase. This happens quite easily as I use dvorak

Re: OpenBSD on Sun Netra X1

2009-04-28 Thread Daniel Ouellet
Christopher Intemann wrote: Hi, thanks for the hint, however, I'm in fact a bit more confused now:-) Couldn't I use such a thing: http://cgi.ebay.de/SERIAL-RS232-DB9-9-PIN-FEMALE-TO-RJ45-FEMALE-ADAPTOR_W0QQitemZ390041017767QQcmdZViewItemQQptZUK_Computing_Networking_SM?hash=item390041017767&_trksi

Re: OpenBSD on Sun Netra X1

2009-04-28 Thread Jussi Peltola
Depends on the db9-rj45 adaptor, some need a rollover cable, some a straight one. Try it.

Re: automaticaly mount/umount encrypted $HOME or ...

2009-04-28 Thread Nick Guenther
Interesting. But if I steal your laptop and run jack the ripper on it then I get your svnd password, don't I? Using bash seems awkward. Does this work if you're using xdm? Otherwise, this is very slick. The reason I haven't gotten around to using encrypted homes is just that it's awkward to do it

Re: Someone has running Ekiga?

2009-04-28 Thread Nick Guenther
The "apps" dir there is virtual. Gconf makes a virtual filesystem where preference data is stored. Install gconf-editor to understand really quickly. I found it confusing too. So did you run that command? On 27/04/2009, Toma Bodar wrote: > Hi all, > > I installed ekiga trough ports (pkg_add wa

Re: soekris 5501, ral(4) and 4.5-current

2009-04-28 Thread Stuart Henderson
On 2009-04-28, Tom wrote: > > Stuart: any luck with your ral* card in your Alix? it still works fine with the up-to-date snap it's now running (before it was running code from a month or two ago, also pretty much stable).

Re: OpenBSD on Sun Netra X1

2009-04-28 Thread Christopher Intemann
Hi, thanks for the hint, however, I'm in fact a bit more confused now:-) Couldn't I use such a thing: http://cgi.ebay.de/SERIAL-RS232-DB9-9-PIN-FEMALE-TO-RJ45-FEMALE-ADAPTOR_W0QQitemZ390041017767QQcmdZViewItemQQptZUK_Computing_Networking_SM?hash=item390041017767&_trksid=p3286.m63.l1177 In addition

OpenBSD install question

2009-04-28 Thread Chuck Robey
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 During install, I got an error, saying (this is hand-copying, here): softraid0 at root root on cd0a swap on cd0b dump on cd0b stopped at debugger+0x4,leave Panic: cannot read disklabel, 0x600/0xf00, error 5 So, I thought I would give a short summary

Re: man softraid improvement

2009-04-28 Thread Robert
On Tue, 28 Apr 2009 17:52:05 +0200 Sebastian Rother wrote: > On Tue, 28 Apr 2009 10:33:34 -0500 > Marco Peereboom wrote: > > > > Thos who take my but-reports to fix their own crappy code should > > > be more quiet. Don't you think so too Marco? Or wait: You found > > > each bug yourself in soft

Re: Hardware recommendations for gigabit throughput ipsec

2009-04-28 Thread tico
John Arnold wrote: They all did 60+ MB/s, meaning I got at least 60% out of the gig links, without resorting to jumbo frames, creative recv/sendspace sysctls or anything, and also I did generate and sink the traffic on the end nodes, so that also "adds" to the load for them. Given that they c

Re: man softraid improvement

2009-04-28 Thread Neal Hogan
On Tue, Apr 28, 2009 at 10:52 AM, Sebastian Rother wrote: > On Tue, 28 Apr 2009 10:33:34 -0500 > Marco Peereboom wrote: > >> > Thos who take my but-reports to fix their own crappy code should be >> > more quiet. Don't you think so too Marco? Or wait: You found each >> > bug yourself in softraid.

Re: man softraid improvement

2009-04-28 Thread Abel Camarillo
On Tue, Apr 28, 2009 at 04:43:54PM +0100, Michal wrote: > Seriously, shut up, the pair of you, it's going no where. You're both being > immature twats about raid. Work on what your bitching about, or shut up, or > at least keep the e-mails between your self. I don't fancy reading through a > bitch

Re: man softraid improvement

2009-04-28 Thread Jordi Espasa Clofent
Sebastian, You're really annoying for this planet. Please, get a gun and shoot on your fucking head. -- Thanks, Jordi Espasa Clofent

Re: man softraid improvement

2009-04-28 Thread Sebastian Rother
On Tue, 28 Apr 2009 10:33:34 -0500 Marco Peereboom wrote: > > Thos who take my but-reports to fix their own crappy code should be > > more quiet. Don't you think so too Marco? Or wait: You found each > > bug yourself in softraid. ;) > > I fucking wrote so yeah I am painfully aware of bugs in it.

Re: Hardware recommendations for gigabit throughput ipsec

2009-04-28 Thread John Arnold
> They all did 60+ MB/s, meaning I got at least 60% out of the gig links, > without resorting to jumbo frames, creative recv/sendspace sysctls or > anything, and also I did generate and sink the traffic on the end nodes, > so that also "adds" to the load for them. > > Given that they costed som

Re: Internet access over Bluetooth; a summary.

2009-04-28 Thread Vadim Zhukov
On 28 April 2009 c. 19:21:15 Thomas Pfaff wrote: > On Mon, 27 Apr 2009 19:51:30 + > > rivo nurges wrote: > > Hi! > > > > I have taken a bit different route. > > > > sudo btconfig ubt0 up > > sudo sdpd > > sudo bthcid > > ... > > Thanks for sharing. This reminds me that I also forgot to mentio

Re: man softraid improvement

2009-04-28 Thread Michal
Seriously, shut up, the pair of you, it's going no where. You're both being immature twats about raid. Work on what your bitching about, or shut up, or at least keep the e-mails between your self. I don't fancy reading through a bitch fest for 6 more hours. This isn't a celebrity paparazzi magazine

Re: man softraid improvement

2009-04-28 Thread Neal Hogan
On Tue, Apr 28, 2009 at 9:47 AM, Sebastian Rother wrote: > On Tue, 28 Apr 2009 09:19:27 -0500 > Marco Peereboom wrote: > >> Bwahahahahaha there really is no end to your stupidity. Thanks for the >> morning laugh. >> >> <--- must be this tall to ride >> | >> | >> | >> | >> | >> <--- you >>

Re: man softraid improvement

2009-04-28 Thread Marco Peereboom
> Thos who take my but-reports to fix their own crappy code should be > more quiet. Don't you think so too Marco? Or wait: You found each > bug yourself in softraid. ;) I fucking wrote so yeah I am painfully aware of bugs in it. I haven't seen any bug reports from you that weren't totally retarde

Re: man softraid improvement

2009-04-28 Thread Henning Brauer
* Sebastian Rother [2009-04-28 17:02]: > Thos who take my but-reports butt-reports, indeed -- Henning Brauer, h...@bsws.de, henn...@openbsd.org BS Web Services, http://bsws.de Full-Service ISP - Secure Hosting, Mail and DNS Services Dedicated Servers, Rootservers, Application Hosting - Hamburg

Re: Internet access over Bluetooth; a summary.

2009-04-28 Thread Thomas Pfaff
On Mon, 27 Apr 2009 19:51:30 + rivo nurges wrote: > Hi! > > I have taken a bit different route. > > sudo btconfig ubt0 up > sudo sdpd > sudo bthcid ... Thanks for sharing. This reminds me that I also forgot to mention sdpd and bthcid *sigh* I should probably clean up my notes a bit and pu

Re: man softraid improvement

2009-04-28 Thread Sebastian Rother
On Tue, 28 Apr 2009 09:19:27 -0500 Marco Peereboom wrote: > Bwahahahahaha there really is no end to your stupidity. Thanks for the > morning laugh. > > <--- must be this tall to ride > | > | > | > | > | > <--- you > > You are beyond any help. Thos who take my but-reports to fix their

automaticaly mount/umount encrypted $HOME or ...

2009-04-28 Thread Maxim Bourmistrov
... yet another vnd-hack including modified login_passwd, sudo and .bash_logout: http://en.roolz.org/Blog/Entries/2009/4/27_Auto_mount_umount_of_encrypted_%24HOME_on_OpenBSD.html Read first-line warning carefully before usage/flame :). //maxim

1U server needs home in Paris

2009-04-28 Thread Gilles Chehade
Hi, I was kindly offered a v20z 1U server which lacks a home in a bay somewhere close to Paris, FR, where it could be used to build and test code, very low in/out traffic. If you can help, please contact me off list, there will be beers :-) Gilles -- Gilles Chehade http://www.poolp.org/~gille

Re: man softraid improvement

2009-04-28 Thread Marco Peereboom
Bwahahahahaha there really is no end to your stupidity. Thanks for the morning laugh. <--- must be this tall to ride | | | | | <--- you You are beyond any help. On Apr 28, 2009, at 7:37, Sebastian Rother wrote: On Tue, 28 Apr 2009 07:50:20 +0100 Jason McIntyre wrote: On Tue,

Re: man softraid improvement

2009-04-28 Thread lagies
Hello I guess I kind of triggered this discussion since I asked Sebastian yesterday if softraid crypto works only on whole disks or if it is applicable on partitions too. I looked into some tutorials, the archive and in the softraid manpages, but all examples used whole disks, so I've got unc

Re: man softraid improvement

2009-04-28 Thread Jason McIntyre
On Tue, Apr 28, 2009 at 02:37:53PM +0200, Sebastian Rother wrote: > > > > > > Please add the following to man softraid to enable others to get a clue > > > how to encrypt a partition with sofraid. > > oh great, now you are cc'ing my private mail to misc. and insulting the people who i work with.

Re: soekris 5501, ral(4) and 4.5-current

2009-04-28 Thread Tom Murphy
Alexander Hall wrote: I'll second this; from a gw of mine: $ sudo crontab -l | grep ral0 # Down and up ral0 on failure * * * * * ifconfig ral0 | grep -q OACTIVE && { ifconfig \ ral0; echo "\n *\n"; ifconfig ral0 down; sleep 1; ifconfig ral0 up; ifconfig \ ral

Re: sudo won't work with login_fingerprint

2009-04-28 Thread LEVAI Daniel
On Tuesday 28 April 2009 15.23.01 Pau wrote: > Szia! > > have you done this on -current or 4.5? > This is on -current. > 2009/4/28 LEVAI Daniel : > > On Friday 24 April 2009 16.58.06 you wrote: > >> login_fingerprint only supports login auth, not support > >> challenge/response mode which is what

Re: man softraid improvement

2009-04-28 Thread Sebastian Rother
On Tue, 28 Apr 2009 22:57:33 +1000 (EST) Damien Miller wrote: > On Tue, 28 Apr 2009, Sebastian Rother wrote: > > > > it is not a blanket thing - not all archs use it. the disklabel stuff > > > well, we expect people to know how to use disklabel anyway. if they > > > don;t, they can read the man

Re: soekris 5501, ral(4) and 4.5-current

2009-04-28 Thread Tom Murphy
Markus Hennecke wrote: On Tue, 28 Apr 2009, Tom wrote: I took my RT2860 card (which likes to lock up the Soekris 5501 fairly quickly), stuck it in an Openbsd 4.5-current (April 27 snap) and it performed properly and didn't lock up. Mind you, the machine is amd64 and quite well powered. I transf

Re: sudo won't work with login_fingerprint

2009-04-28 Thread Pau
Szia! have you done this on -current or 4.5? thanks, Pau 2009/4/28 LEVAI Daniel : > On Friday 24 April 2009 16.58.06 you wrote: >> login_fingerprint only supports login auth, not support challenge/response >> mode which is what sudo (and other things) uses. > Alright thanks! I've figured it is

Re: man softraid improvement

2009-04-28 Thread Damien Miller
On Tue, 28 Apr 2009, Sebastian Rother wrote: > > it is not a blanket thing - not all archs use it. the disklabel stuff > > well, we expect people to know how to use disklabel anyway. if they > > don;t, they can read the man page. > > The method I descriped is NOT mentioned anywhere. > People have

Re: man softraid improvement

2009-04-28 Thread Michael
Hi, Sebastian Rother wrote: > If you like to encrypt multiple HDDs or partitions you might need > to add additional softraid devices by > modifying /usr/src/sys/conf/GENERIC and recompiling the kernel or > you do nerve Marco who created that piece of code. You can use multiple encrypted softraid

Re: build fails on 4.5

2009-04-28 Thread Toni Mueller
Hi, On Mon, 27.04.2009 at 16:19:39 -0400, Ted Unangst wrote: > That's what I remembered from the last time it happened, but I just > double checked. It seems rsync only does this when -C cvs-exclude is > passed. The problem is that it ignores directories, not just files. that sounds broken, in

Re: sudo won't work with login_fingerprint

2009-04-28 Thread LEVAI Daniel
On Friday 24 April 2009 16.58.06 you wrote: > login_fingerprint only supports login auth, not support challenge/response > mode which is what sudo (and other things) uses. Alright thanks! I've figured it is still useful because of the -a option of sudo, and thanks to this I've discovered the [:auth

Re: vmware esxi 3.5u4: amd64 4.4 generic bsd.mp kernel panic

2009-04-28 Thread J.C. Roberts
On Tue, 28 Apr 2009 02:34:40 +0200 "Erwin van Maanen" wrote: > I've tried to do include the panic and trace with the screenshots i > attached, i'm afraid i dont know another way to get the info across. > I can appreciate the devs not being able to look at the/each > virtualization issue, i was ju

Re: man softraid improvement

2009-04-28 Thread Sebastian Rother
On Tue, 28 Apr 2009 07:50:20 +0100 Jason McIntyre wrote: > On Tue, Apr 28, 2009 at 01:34:25AM +0200, Sebastian Rother wrote: > > > > Please add the following to man softraid to enable others to get a clue > > how to encrypt a partition with sofraid. > > ok, first off, please mail diffs in futur

Re: soekris 5501, ral(4) and 4.5-current

2009-04-28 Thread Markus Hennecke
On Tue, 28 Apr 2009, Tom wrote: I took my RT2860 card (which likes to lock up the Soekris 5501 fairly quickly), stuck it in an Openbsd 4.5-current (April 27 snap) and it performed properly and didn't lock up. Mind you, the machine is amd64 and quite well powered. I transferred a lot of files wit

Re: soekris 5501, ral(4) and 4.5-current

2009-04-28 Thread Tom
I took my RT2860 card (which likes to lock up the Soekris 5501 fairly quickly), stuck it in an Openbsd 4.5-current (April 27 snap) and it performed properly and didn't lock up. Mind you, the machine is amd64 and quite well powered. I transferred a lot of files with scp, got about 1.2 MB/s on a sing

Re: Transparent firewall (bridge) with DMZ + LAN

2009-04-28 Thread Tony Abernethy
Felipe Alfaro Solana wrote: > > > Isn't this how humans learn? By making mistakes and learning > from them? :) > Nah not really. They watch their brother or sister get burned by a hot stove and decide maybe better not to find out for themselves. They watch one of their playmates drown or get r

Re: Transparent firewall (bridge) with DMZ + LAN

2009-04-28 Thread Felipe Alfaro Solana
On Tue, Apr 28, 2009 at 8:35 AM, Claudio Jeker wrote: > Did you ever check the security record of snort? It is at least as bad as > wireshark's but it is sitting in the middle of your network passing > packets. I couldn't sleep with such a system in my core. > It is also a lot easier to bypass un

Re: Transparent firewall (bridge) with DMZ + LAN

2009-04-28 Thread Henning Brauer
* Stuart Henderson [2009-04-28 12:08]: > On 2009-04-28, Daniel Ouellet wrote: > > Henning Brauer wrote: > >> * Daniel Ouellet [2009-04-28 02:49]: > >>> shut up! All are real and I even learn from Henning about the lost of > >>> Queue here as well, witch I haven't thought of then. So, loose of

Re: Transparent firewall (bridge) with DMZ + LAN

2009-04-28 Thread Daniel Ouellet
Stuart Henderson wrote: On 2009-04-28, Daniel Ouellet wrote: Henning Brauer wrote: * Daniel Ouellet [2009-04-28 02:49]: shut up! All are real and I even learn from Henning about the lost of Queue here as well, witch I haven't thought of then. So, loose of queue, mean also lost of AltQ too

Re: Transparent firewall (bridge) with DMZ + LAN

2009-04-28 Thread Stuart Henderson
On 2009-04-28, Daniel Ouellet wrote: > Henning Brauer wrote: >> * Daniel Ouellet [2009-04-28 02:49]: >>> shut up! All are real and I even learn from Henning about the lost of >>> Queue here as well, witch I haven't thought of then. So, loose of queue, >>> mean also lost of AltQ too. >> >> no

Re: 2x OpenBSD firewalls with failover?

2009-04-28 Thread Daniel Ouellet
Coert Waagmeester wrote: I see your point. Thank you the above link was exactly what I was looking for. I will remember to go digging around google first next time. If I may suggest, even before you go to Google. If you start using OpenBSD, even before that. Just take a few hours and read the

Re: Virtual TAP interface

2009-04-28 Thread Stuart Henderson
see tun(4) about the layer 2 tunnelling flag. but note well: - dynamips from OpenBSD ports/packages does work with real interfaces now (thanks Claudio!). - dynamips only has JIT translators for i386 and amd64. it will *totally* suck on anything else. On 2009-04-28, Jaroslav Joska wrote: > Hi a

Re: Virtual TAP interface

2009-04-28 Thread Claudio Jeker
On Tue, Apr 28, 2009 at 08:56:57AM +0200, Jaroslav Joska wrote: > Hi all! > I installed OpenBSD on UltraSPARC IIIi machine (SunFire V440) successfully. I > want to install dynamips and dynagen, > but before this procedure I have to make bridge with one real interface and > one virtual interface,

Re: 2x OpenBSD firewalls with failover?

2009-04-28 Thread Coert Waagmeester
On Tue, 2009-04-28 at 04:48 -0400, Daniel Ouellet wrote: > Coert Waagmeester wrote: > > Hallo all OpenBSDers. > > > > I want to setup two openBSD boxes at our office. > > http://openbsd.org/faq/faq4.html > > > They will each have 4 network interfaces, and they will do routing, > > NATting (port

Re: Virtual TAP interface

2009-04-28 Thread Daniel Ouellet
Jaroslav Joska wrote: Hi all! I installed OpenBSD on UltraSPARC IIIi machine (SunFire V440) successfully. I want to install dynamips and dynagen, but before this procedure I have to make bridge with one real interface and one virtual interface, because dynagen doesn't work with real interafces.

Virtual TAP interface

2009-04-28 Thread Jaroslav Joska
Hi all! I installed OpenBSD on UltraSPARC IIIi machine (SunFire V440) successfully. I want to install dynamips and dynagen, but before this procedure I have to make bridge with one real interface and one virtual interface, because dynagen doesn't work with real interafces. I did the same things o

Re: 2x OpenBSD firewalls with failover?

2009-04-28 Thread Daniel Ouellet
Coert Waagmeester wrote: Hallo all OpenBSDers. I want to setup two openBSD boxes at our office. http://openbsd.org/faq/faq4.html They will each have 4 network interfaces, and they will do routing, NATting (port forwarding) and provide basic DNS services. And also OpenVPN connectivity to the

2x OpenBSD firewalls with failover?

2009-04-28 Thread Coert Waagmeester
Hallo all OpenBSDers. I want to setup two openBSD boxes at our office. They will each have 4 network interfaces, and they will do routing, NATting (port forwarding) and provide basic DNS services. And also OpenVPN connectivity to the 4 different networks. They will be the same, config wise, but

Re: Transparent firewall (bridge) with DMZ + LAN

2009-04-28 Thread Tony Abernethy
Now it makes sense. Claudio Jeker wrote: > but it is sitting in the middle of your network passing > packets. I couldn't sleep with such a system in my core. > It is also a lot easier to bypass unnoticed a bridging FW/IDS > then a box > that does actual routing. THAT's why it is called a TRANSP