Traffic through default pf queue

Hi everyone, I have a question, could anyone give me an ideea how can I "see" (like tcpdump or something) the traffic that is passing throught the default queue of pf ? Thanks for your ideeas. -- Claudiu Pruna

Re: Creating route tables

> >>> Error output from bgpd: > >>> > >>> # bgpd -vnf bgpd.conf > >>> bgpd.conf:8: rtable id 1 does not exist > >>> > >>> error output from route: > >>> > >>> # route -T 1 add -inet 192.168.0.0/24 127.0.0.1 > >>> route: routing table 1: No such file or directory > >>> > >>> Thanks in advance, and sorry for the noise. > >>> > >> > >> > >> -- > >> Using Opera's revolutionary email client: http://www.opera.com/mail/ > > > > HTH, > > > Insan Praja > Hi Insan, You can use rtable from pf.conf and you don't have to use ifconfig rdomain, so you can do policy routing. Claudiu -- Claudiu Pruna

mount nullfs

Hi list, I was wondering, in OpenBSD is there an equivalent to FreeBSD's mount_nullfs or to Linux's mount -o bind ? -- Claudiu Pruna

Re: Routing all traffic through IPSEC VPN

; > > --Branch Office-- > > cat /etc/ipsec.conf: > > me="E.F.G.H" > > mypeer="A.B.C.D" > > mypsk="mypsk" > > > > ike esp from $me to $mypeer peer $mypeer \ > > main auth hmac-sha1 enc 3des group modp1024 \ > > sr

Re: Routing all traffic through IPSEC VPN

gt; > Firewall disabled for now - nothing other than sshd and isakmpd are running. > > Thanks, > Matt > Matt did you put on the branch router a route like route add A.B.C.D ? beware that if you issue just route add default 172.16.254.1 then your router will tend to also route the vpn traffic through your tunnel, so you get a race condition. claudiu. -- Claudiu Pruna

geode

, etc. Thanks, Claudiu -- Claudiu Pruna

Re: Happy Birthday OpenBSD

On Mon, 2010-10-18 at 13:13 -0400, STeve Andre' wrote: > 15 years! > Thanks you guys all for an absolutely outstanding OS. You Rock ! You have reinvented the OS concept. BRAVO !!! -- Claudiu Pruna

Re: Mobile VPN

On Mon, 2010-10-04 at 10:10 -0600, Shiu Lam wrote: > Does anyone knows any OpenVPN client for S60 mobile phones? > > Thanks > > Claudiu Pruna wrote: > > On Sat, 2010-10-02 at 11:56 +0300, Evgeniy Sudyr wrote: > > > >> I was able to get it working with

Re: Mobile VPN

On Sat, 2010-10-02 at 11:56 +0300, Evgeniy Sudyr wrote: > I was able to get it working with 4.6/4.7 and E60/E65/E52 it works as > expected :) > > Nokia VPN config tool will save hours instead trial by error. > > On Fri, Oct 1, 2010 at 10:29 PM, Claudiu Pruna > wrote: >

Re: Mobile VPN

On Fri, 2010-10-01 at 21:19 +0200, David Coppa wrote: > On Fri, Oct 1, 2010 at 9:11 PM, Claudiu Pruna wrote: > >I was wondering has anyone got an S60 mobile phone to connect to > > OpenBSD Ipsec ? > > > >I did some tryies, but no luck. > > May

Mobile VPN

I was wondering has anyone got an S60 mobile phone to connect to OpenBSD Ipsec ? I did some tryies, but no luck. -- Claudiu Pruna

Re: MD5 checksum

On Thu, 2010-07-01 at 14:14 +0300, Ozgur Kazancci wrote: > Sounds like a bad ram module to me. > > A mem test would be good; > > http://www.memtest.org/ > or > http://www.memtest86.com/ > > Get the pre-compiled bootable ISO from there and test your RAM modules. > > If errors are found, replace

Re: MD5 checksum

On Thu, 2010-07-01 at 10:32 +0300, Thanasis wrote: > I had such a problem with under-volted RAM. The RAM (DDR2) needed to be > manually set to 2.0 or 2.1 Volts (in BIOS). > > on 06/30/2010 11:58 PM Claudiu Pruna wrote the following: > > Hi there, > > > > I

Re: MD5 checksum

On Wed, 2010-06-30 at 16:21 -0600, Alexander Hall wrote: > On 06/30/10 14:58, Claudiu Pruna wrote: > > Hi there, > > > > I have a question if I have one box running OpenBSD 4.7 and everytime I > > do md5 on one file I get different results, who is more succept

MD5 checksum

Hi there, I have a question if I have one box running OpenBSD 4.7 and everytime I do md5 on one file I get different results, who is more succeptible to be broken ? cpu ? ram ? or mb. ? Thanks for your thoughts. -- Claudiu Pruna

OpenBSD and DSCP field

Hello, I was wondering is there any chance that in the future (close or far) OpenBSD shall be able to modify (preferred from pf) the DSCP field ? Thanks & keep it up. Claudiu Pruna.

Re: Port compile and package install problem for vim and bash

Yes, thanks, my mistake, I guess that I've ran too fast over the What's New. Cheers, Claudiu -Original Message- From: Marius ROMAN <[EMAIL PROTECTED]> To: Claudiu Pruna <[EMAIL PROTECTED]>, misc@openbsd.org Subject: Re: Port compile and package install problem for

Port compile and package install problem for vim and bash

ound expat.8.0 Dependencies for gettext-0.14.6p0 resolve to: libiconv-1.9.2p3 Full dependency tree is libiconv-1.9.2p3 found libspec iconv.4.0 in package libiconv-1.9.2p3 Can't install vim-7.1.33-no_x11: can't resolve gettext-0.14.6p0 Thank you all. -- Claudiu Pruna <[EMAIL PROTECTED]>

Re: A (pf?) puzzler -- a single device invisible on the other side of an IPsec tunnel

s > currently working. I'd really like to get this one back on the private > network. I don't need hackers sending mountains of porn to this printer, > even if it *is* in a truck stop. > > Any ideas or salient suggestions? > > -Stephen- hi Stephen, No offens

Re: Hardware - PPS - throughput

ks > NX3p2XrOKVAcRkCdqjcAeyA= > =vlef > -END PGP SIGNATURE- 50Kpps and 80Mbps ?? pretty small packets I could say ... /Claudiu -- Claudiu Pruna <[EMAIL PROTECTED]>

pkg_add

econds (2.01 KB/s) and PKG_PATH="ftp://ftp.openbsd.org/pub/OpenBSD/3.9/packages/i386/"; Thanks. -- Claudiu Pruna <[EMAIL PROTECTED]>

Re: pf woes

p > > With $inf_if simply pointing to dc1, the trusted netwrok adapter > connecting the server to our internal switch. > > pf starts without any errors, but connections simply won't go through. > Any ideas? > -- Claudiu Pruna <[EMAIL PROTECTED]>

"Sundance" Network card

f0/16: using exception 16 pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo pccom0: console fdc0 at isa0 port 0x3f0/6 irq 6 drq 2 fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec biomask ff4d netmask ff6d ttymask ffef pctr: 686-class user-level performance counters enabled mtrr: Pentium

10k pps

Thanks for any sugestion or advice. -- Claudiu Pruna <[EMAIL PROTECTED]>

OpenBGPD communities

h to $peer1 set community 65003:6001 65003:6002 additive" or "match to $peer1 set community { 65003:6001 65003:6002 }" all I got was syntax error. So here comes the question: Is it supported on openbgpd to export additive communities ?