Re: Renew/extend CA created with ikectl

2018-12-12 Thread Kim Zeitler
our internal CA (or just avoiding X509 if you don't actually need it...). Any suggestions? We used some other CA management SW over the years but enjoyed the clean and simple approach that ikectl gave us so far. Cheers Kim

Renew/extend CA created with ikectl

2018-12-07 Thread Kim Zeitler
find anything in the man pages nor on the mailing list. Having had a look at ikeca.c gave me some idea of how the file is created. Also is there a way of having the ca cert valid for more than 365 days? Cheers, Kim smime.p7s Description: S/MIME Cryptographic Signature

Re: ikev2 and road warriors setup

2018-11-05 Thread Kim Zeitler
question was concerning the VPN_server, is the server NATed? How is A.B.C.0/23 connected to the 'rest' of the world? Router/Firewall ... Cheers, Kim smime.p7s Description: S/MIME Cryptographic Signature

Re: ikev2 and road warriors setup

2018-11-05 Thread Kim Zeitler
g problem than an IPSec problem. Error 809 means no data received. Could you post your pf.conf? How do you connect to networks !A.B.C.0/23 Is your IPSec connection NATed? Cheers Kim smime.p7s Description: S/MIME Cryptographic Signature

Re: syntax error and doas.conf

2018-10-31 Thread Kim Zeitler
On 10/31/18 10:42 AM, Markus Rosjat wrote: ... doas vi /etc/doas.conf # Edit in vi :w :! doas -C % You don't even have to leave your editor smime.p7s Description: S/MIME Cryptographic Signature

Re: ikev2 and road warriors setup

2018-10-31 Thread Kim Zeitler
On 10/28/18 3:04 PM, Radek wrote: Hello, I really need your help. I am still trying to configure Ikev2 VPN Gateway (A.B.C.77/23) for road warriors clients (Windows). The problem is that it works ONLY if clients are in the same subnet as VPN Gateway (A.B.C.0/23). Clients from out of the gateway'

Re: Intel i350 Offloading not working

2018-07-18 Thread Kim Zeitler
On 07/18/18 11:37, Adonis Peralta wrote: Will definitely do that, but still looking for any explanation from devs :). https://marc.info/?l=openbsd-tech&m=135203532704213&w=2 Seems there have been some errors with offloading and I350 in the past Cheers Kim smime.p7s Description

OpenIKED match on user/cert instead of gateway

2018-06-28 Thread Kim Zeitler
story short - is it possible to do this in openiked or do I need to setup a separate instance? Cheers, Kim smime.p7s Description: S/MIME Cryptographic Signature

Re: iked: how to request a virtual IP when running as a road warrior

2018-01-31 Thread Kim Zeitler
case IKEV2_CP_REPLY: case IKEV2_CP_SET: case IKEV2_CP_ACK: /* Not yet supported */ <===!!! return (-1); } ... Cheers Kim smime.p7s Description: S/MIME Cryptographic Signature

Re: iked + gif + ospfd - use null-route to stop default route being used in case of no vpn

2017-11-08 Thread Kim Zeitler
On 11/08/17 08:37, Claudio Jeker wrote: On Tue, Nov 07, 2017 at 04:13:51PM +0100, Jeremie Courreges-Anglas wrote: On Tue, Nov 07 2017, Kim Zeitler wrote: On 11/07/17 15:31, Jeremie Courreges-Anglas wrote: On Tue, Nov 07 2017, Stuart Henderson wrote: I have a question concerning routes

Re: iked + gif + ospfd - use null-route to stop default route being used in case of no vpn

2017-11-07 Thread Kim Zeitler
On 11/07/17 16:13, Jeremie Courreges-Anglas wrote: On Tue, Nov 07 2017, Kim Zeitler wrote: On 11/07/17 15:31, Jeremie Courreges-Anglas wrote: On Tue, Nov 07 2017, Stuart Henderson wrote: I have a question concerning routes and ospf. We are using iked(8) with a gif(4) interface and ospfd

Re: iked + gif + ospfd - use null-route to stop default route being used in case of no vpn

2017-11-07 Thread Kim Zeitler
On 11/07/17 15:31, Jeremie Courreges-Anglas wrote: On Tue, Nov 07 2017, Stuart Henderson wrote: I have a question concerning routes and ospf. We are using iked(8) with a gif(4) interface and ospfd(8) to set up=20 routing. If the ipsec tunnel is down, no ospf route is set and the default rou

iked + gif + ospfd - use null-route to stop default route being used in case of no vpn

2017-11-07 Thread Kim Zeitler
-networks so a 'Network not reachable' is sent immediately? Cheers Kim smime.p7s Description: S/MIME Cryptographic Signature

RESEND: Advice on migration to OpenBSD

2017-05-13 Thread Kim Blackwood
sharity-light, but had no success mounting at all. I also tries"usmb", but once it freezes the entire box once you try to view the contentof a file.� How do you guys do it? Is it even doable running only OpenBSD on myboxes in such an environment?� Thank you for your time.� Kind regards,� Kim� End of forwarded message

Advice on migration to OpenBSD

2017-05-13 Thread Kim Blackwood
needed.� The Samba boxes aren't going to change as to many people use those. Iremember something about sharity-light in the past, but that was notvery good back then.� How do you guys do it? Is it even doable running only OpenBSD on myboxes in such an environment?� Thank you for your time.� Kind regards,� Kim

Qubes-OS is "fake" security

2017-05-11 Thread Kim Blackwood
sual stuff, the links from emails, etc. I possibly even run this from a non-writeable CD or SD card. It will be an inconvenience to shift between the drives, but no more than using Qubes-OS. IMHO the setup with the different OpenBSD installations provides a much more security alternative than running Qubes-OS. Am I completely of track here? Kind regards, Kim

Re: bgp-spamd question

2017-05-08 Thread Kim Zeitler
On 05/08/17 15:12, Markus Rosjat wrote: Am 08.05.2017 um 15:02 schrieb Kim Zeitler: Did you allow BGP on your firewall? I was not aware there need to be special rules for bgp I meant your outer-bound firewall, that you pass towards the internet. Depending on your network setup you need

Re: bgp-spamd question

2017-05-08 Thread Kim Zeitler
On 05/08/17 14:42, Markus Rosjat wrote: Am 08.05.2017 um 14:37 schrieb Kim Zeitler: Could you check bgpctl s are there any messages received? You can also check bgpctl s neigh | grep state This should give you least 2 connections claiming to be established regards Cheers Kim I

Re: bgp-spamd question

2017-05-08 Thread Kim Zeitler
On 05/08/17 14:13, Markus Rosjat wrote: Am 08.05.2017 um 13:58 schrieb Kim Zeitler: On 05/08/17 09:59, Markus Rosjat wrote: match from group "spam-bgp" community $spamASN:666 set pftable "bgp_spamd" Try to remove this line from your /etc/bgpd.conf, it is not in the e

Re: bgp-spamd question

2017-05-08 Thread Kim Zeitler
On 05/08/17 09:59, Markus Rosjat wrote: match from group "spam-bgp" community $spamASN:666 set pftable "bgp_spamd" Try to remove this line from your /etc/bgpd.conf, it is not in the example on http://bgp-spamd.net Checked it gainst my working setup and it is missing there

Re: bgp-spamd question

2017-05-08 Thread Kim Zeitler
:666 doesn't give any results I won't see any IP's in a spamlist file at all regards Hello Markus, just on a hunch, did you remove the deny blocks that are listed in /etc/examples/bgpd.conf? Cheers Kim smime.p7s Description: S/MIME Cryptographic Signature

Re: WARNING: symbol(icudt58_dat) size mismatch, relink your program

2017-04-25 Thread Kim Lidström
I get the same but with Firefox. > On 25 Apr 2017, at 12:29, Stuart Henderson wrote: > > You aren't doing anything wrong to trigger it. Known problem but we > haven't figured out the cause of this yet. Alright. Do you know if you have any leads? Might take a look this week

Re: Migrate Mailserver from sendmail/Curier/LDAP to OpenSMTP/Dovecot/LDAP

2017-01-27 Thread Kim Zeitler
ne virtual user to handle dovecot delivery > since I already have the LDAP users. I tested to set permissions on > directories and files for a LDAP user that has no systemaccount > counterpart and it seems to work but it doesn't feel right to do so in a > production environement :) See

Re: Allow FTP through Openbsd firewall

2016-10-28 Thread Kim Zeitler
Hello On 10/28/16 08:55, Mik J wrote: Hello, I have FTP clients behind my Openbsd firewall and they want to access ftp sites on the internet I have read numerous documentations but haven't found the answer yet. * I start the ftp-proxy like this /usr/sbin/ftp-proxy -D7 -v * I have rules in m

ipsec+tunnel vs. 'pure' ipsec

2016-07-28 Thread Kim Zeitler
Hello having run a 'pure' ipsec tunnel for some years now I was wondering if there are more advantages in using a tunnel like gre(4),gif(4) or ehterip(4) over ipsec except being able to set the mtu or pass Layer2 traffic? Thanks for your answer Kim

Re: problem with carp on 5.9, MAC address of carp interface?

2016-04-25 Thread Kim Zeitler
:d9:e7:58:d9:2e UHLc 0 11 - 4 vlan101 192.168.151.20290:e2:ba:c3:df:7a UHLl 0 10 - 1 vlan101 192.168.151.255192.168.151.202UHPb 00 - 1 vlan101 192.168.151.255192.168.151.1 HPb 0 0 - 1 carp3 ... cheers Kim

Re: problem with carp on 5.9, MAC address of carp interface?

2016-04-25 Thread Kim Zeitler
Hello Martin On 04/25/16 11:12, Martin Pieuchot wrote: On 25/04/16(Mon) 10:47, Kim Zeitler wrote: He is running a carp interface on top of a vlan interface. In this scenario the carp interface can not be pinged but the vlan interfaces can. Do you mean the CARP node does not answer to ping

Re: problem with carp on 5.9, MAC address of carp interface?

2016-04-25 Thread Kim Zeitler
eplies yet Currently I am upgrading my cluster to the latest snapshot to see if there is any change. Cheers Kim

Carp interface sitting on vlan can not be pinged

2016-04-15 Thread Kim Zeitler
- 1 carp3 192.168.151.20090:e2:ba:c1:11:11 UHLl 0 36 - 1 vlan101 192.168.151.255192.168.151.200UHPb 00 - 1 vlan101 192.168.151.255192.168.151.1 HPb00 - 1 carp3 Cheers Kim

Re: Squid slow in connecting to SSL

2016-02-01 Thread Kim Zeitler
adly as noted above the server doesn't have this option set. I am currently at a lose and gladly provide more information. Cheers Kim

Re: Squid slow in connecting to SSL

2016-01-29 Thread Kim Zeitler
simply asking as I somehow can't fit it in that openbsd+squid shows this particular behaviour yet {freebsd,debian}squid does not. Thanks Stuart so far for what you have found and the patience to explain it to me. Cheers Kim

Re: Squid slow in connecting to SSL

2016-01-29 Thread Kim Zeitler
On 01/28/16 23:04, Stuart Henderson wrote: On 2016-01-28, Kim Zeitler wrote: currently I try to solve the phenomenon, that certain SSL sites are slow when accessed via squid on OpenBSD. Mostly ownCloud in my case as well as several web shops. The login screen alone taking minutes to load

Squid slow in connecting to SSL

2016-01-28 Thread Kim Zeitler
problems at all. The current configuration is squid-ldap(3.5.13) from packages on -current running on a KVM host as VM (4 cores, 2GB RAM, virtio HDD and NIC) My squid.cfg is basically the default except for setting $localnet bit stricter. Any help is much appreciated Cheers Kim

Re: Advices for a new laptop

2015-10-29 Thread Kim Zeitler
Otherwise fine even after several years of service. Money on an x220 is well spent. Also they feel more solid than the B50s. Need to try extending my RAM to 16GB - thanks for the hint Bryan. Cheers, Kim

Re: pledge(2) problems on 18/x/ octeon snapshot

2015-10-21 Thread Kim Zeitler
Might be a stupid question, but I haven't found an answer to it yet - how does one update to a new snapshot/kernel on an octeon system? boot bsd.rd and select upgrade in the installer. (i hope.) I'm afraid this is not as simple as this, yet. You will also need to copy your kernel to the fat16

Re: pledge(2) problems on 18/x/ octeon snapshot

2015-10-20 Thread Kim Zeitler
Sorry for the last empty answer - you shouldnt try to multi-task boot bsd.rd and select upgrade in the installer. (i hope.) Thanks for the answer Ted, I will try it with the next snapshot and will give feedback Cheers Kim

Re: pledge(2) problems on 18/x/ octeon snapshot

2015-10-20 Thread Kim Zeitler
On 10/20/15 15:30, Ted Unangst wrote: Kim Zeitler wrote: Hello Sebastien, hello Jonathan @Sebastien thank you for your valuable hints and advice, I did learn quite a bit from it. The machine has been reinstalled to the latest snapshot, as it is needed. On 10/20/15 12:30, Jonathan Gray wrote

Re: pledge(2) problems on 18/x/ octeon snapshot

2015-10-20 Thread Kim Zeitler
This was the part I was missing, ta. Cheers, Kim

Re: pledge(2) problems on 18/x/ octeon snapshot

2015-10-20 Thread Kim Zeitler
terLite have no 'real bootloader' but use U-Boot. Which I guess is part of the problem. My steps where as followed: mv bsd obsd mv /tmp/bsd /bsd mv /tmp/bsd.rd /bsd.rd reboot Can i be, that U-boot does not cleanly reload the new kernel on reboot? Cheers, Kim

pledge(2) problems on 18/x/ octeon snapshot

2015-10-19 Thread Kim Zeitler
I just tried updating an EdgeRouterLite to the latest octeon snapshot after replacing the kernel and unpacking base58.tgz Literally all commands lead to : pledge: Function not implemented I would offer a ktrace/kdump but sadly my kdump also returns with said error. Cheers, Kim

OpenIKED - send traffic selectors in own child sa

2015-10-19 Thread Kim Zeitler
round to my question - is it somehow possible to configure iked in such a way, that it sends one CHILD_SA per Traffic Selector or do I read the code correctly and it is simply NOT possible? Cheers Kim

Re: cu with XMODEM won't transfer file

2015-10-06 Thread Kim Zeitler
Hello On 10/05/15 19:59, Nicholas Marriott wrote: On Mon, Oct 05, 2015 at 10:07:21AM -0700, Philip Guenther wrote: On Mon, Oct 5, 2015 at 6:54 AM, Kim Zeitler wrote: I am trying to transfer a new firmware to a switch using cu(1) with XMODEM using a USB-to-RS232 adapter and running on

cu with XMODEM won't transfer file

2015-10-05 Thread Kim Zeitler
66, 0 Oct 5 15:48 /dev/ttyU0 Any help how to debug this further is much appreciated. Cheers Kim -- Kim Zeitler

IKEd, rising SAD count and DPD

2015-09-30 Thread Kim Zeitler
a auth hmac-sha2-256 \ enc aes-256 \ group modp1536 \ srcid '80.80.80.80' \ ikelifetime 28800 \ lifetime 14400 \ psk 'Some nice long hash' ... Cheers, Kim

pfkey_sa_last_used: message: No such process

2015-09-21 Thread Kim Zeitler
cp from $h_dev to $h_postgres port postgresql pass proto tcp from $h_postgres port postgresql to $h_dev pass proto tcp from $k to (self) port ssh pass proto tcp from 192.168.32.1 to (self) port ssh pass inet proto icmp icmp-type $icmp_types ... -- Cheers Kim

Re: Ubiquiti EdgeRouter Lite

2015-08-18 Thread Kim Zeitler
weak as a ipsec gw, I actually was trying to use it as a small VPN box with ipsec with a 10M-50M through-put, can it handle this? Cheers Kim

Re: how to add squid access log in /etc/newsyslog.conf

2015-07-14 Thread Kim Zeitler
Hello, On 07/13/15 22:29, Stuart Henderson wrote: On 2015-07-13, Indunil Jayasooriya wrote: I delted 30 from that line. Now it looks like this. /var/squid/logs/access.log _squid:_squid 640 14 * @T00Z /var/squid/logs/squid.pid Now it seems to work But now it sen

Re: Not able to pass BIOS drive check with OpenBSD drive attached

2014-08-01 Thread Kim Zeitler
r bios again and see the disks. Our suspicion at the time was the block size used by the OpenBSD system (512 vs 4k) We also disable UEFI boot in the bios. Cheers, Kim

Re: carp setup firewall

2014-07-25 Thread Kim Zeitler
rsion control and distributed and enabled by Puppet on both our FW-CARP nodes. Cheers, Kim

Re: libiconv-1.14p1 - library c not found, bad major

2014-07-22 Thread Kim Zeitler
e finding packages that match that, so you should reinstall with the > correct release files. Thanks Philip for your fast reply, that explains a lot - a colleague of gave me the install disk, claiming it to be the 5.5-Release. *sigh* - if you want something done right ... again many thanks. Kim

libiconv-1.14p1 - library c not found, bad major

2014-07-22 Thread Kim Zeitler
libiconv Update candidates: quirks-1.113 -> quirks-1.113 (ok) Can't install libiconv-1.14p1 because of libraries |library c.73.1 not found | /usr/lib/libc.so.75.0 (system): bad major Cheers, -- Kim Zeitler

Re: Only two holes in a heck of a long time, but why?

2014-04-04 Thread Kim Zeitler
> All in all the default install is pretty useless in itself and I am going > to quote "Absolute OpenBSD" by Michael Lucas: > > «You're installed OpenBSD and rebooted into a bare-bones system. Of > course, a minimal Unix-like system is actually pretty boring. While it > makes a powerful foundat

Joining the state of two carp interfaces

2014-02-20 Thread Kim Zeitler
Master on A and B. Is there a possibility to join the CARP state of 2 interfaces i.e. both Master or both Backup, no mix. Thanks in advance Kim Zeitler

Re: power failure resistance

2014-02-20 Thread Kim Zeitler
t; How can I configure firewalls so they are resistant to those power > failures (ie do not need fsck)? How should I partition? Which partitions > should be mount read-only? Which should be mount as memory disks? Which > size shoud I allocate for memory disks (RAM is a constraint here as I > have only 256Mb)? Any other advices? > > Thank you in advance, > -- Kim Zeitler

Panic using tmpfs on current

2014-02-06 Thread Kim Twain
So, I know this may be the wrong mailing list, well, it is, but I'm a first time user and I don't think I have enough information to open a bug report. I am trying openbsd 5.5 (current) on an smp amd64 machine. after some late-night experimentations with systrace, I decided that, for untrusted ap

Re: Is [binary] package signing planned?

2014-02-04 Thread Kim Twain
Marc Espie ha scritto: > 2014-02-04 Kim Twain >: > > Does pkg_add automatically check these signatures, or, as of now, I'd > need > > to manually download the packages, verify them with signify and then > install > > them locally with pkg_add? > > In -current,

Is [binary] package signing planned?

2014-02-04 Thread Kim Twain
Hi. I'm seeing, in this mailing list, much talk about the datagate and related matters, and I can see why the topic may be of interest to many OpenBSD users. Anyway, I really like OpenBSD, but I always restrain myself from using it on a desktop machine for a single reason: while pkg_add supports s

Re: Patch to remove "adult" content from spamd(8) man page

2013-11-23 Thread Kim Lidström
On 23/11/13 04:20, Jason Barbier wrote: > > On 11/22/2013 10:50 AM, Rick Pettit wrote: >> Lewis, >> >> If censorship is your thing, why don’t you start by censoring yourself. >> >> What you are asking for here is offensive. >> >> -Rick > +1 +1 >> >> On Nov 22, 2013, at 12:26 PM, Paolo Aglialoro

Re: OpenBSD Culture? - dual boot info

2010-04-18 Thread Kim
@ Zachary fwiw - I have Windows XP, Linux, and OpenBSD running on one machine using two drives, but it should be possible with one. I would recommend installing Windows first, or if already installed, shrink the partition using Ranish partition manager or Parted Magic. Create two new primary part

OpenSSH and Certificate based

2009-11-17 Thread Kim John-VCK678
Hi Everyone, I am new to this emailing list, so please excuse me if I am asking you the question that has been asked many times... We use OpenSSH for secure remote access, and we are wondering if we can use x.509 certificate for authentication. I have found the Roumen Petrov's patch that provide

Re: Open Vs Free BSD

2009-06-19 Thread Kim Attree
't expect every other Linux/UNIX program to work. NetBSD runs on just about anything. That's it's primary goal. Since I don't have any weird hardware, I've never had a use for NetBSD. Kim Attree IT Manager Playsafe South Africa -Original Message- From: owner-freebsd-

small diff for cp.c - again

2008-01-03 Thread Kim Naim Lesmer
Hi. This is just a small diff for cp.c I believe it will improve readability a little bit. Regards. Sorry, the diff goes here: --- cp.c2008-01-04 00:26:09.0 +0100 +++ cp_new.c2008-01-04 00:28:48.0 +0100 @@ -215,8 +215,9 @@ type = DIR_

Re: Error updating 4.2 - permission denied (Solved)

2007-12-23 Thread kim
Jason George wrote: === I have cleared the /usr/src directory and reloaded the tree from the CD, and gone through the whole process again, but get the same error. >>> This is the second time

Re: Using the C programming language

2007-12-23 Thread Kim Naim Lesmer
On Sat, 22 Dec 2007 15:08:05 +0100 Erik Wikstrvm <[EMAIL PROTECTED]> wrote: > On 2007-12-22 12:06, Brian Hansen wrote: > Hi. > > I address this issue on this list, because a lot of people here are > very skillfull C programmers. > > When looking at some of the different "reasons for security > pro

Re: Error updating 4.2 - permission denied

2007-12-21 Thread kim
Joel Sing wrote: > On Saturday 22 December 2007, kim wrote: > >> Could anyone offer some help with an upgrading problem with 4.2 -stable? >> The source tree and ports were installed from the official CD, and >> upgraded with: >> >> Update source tree

Re: Error Updating 4.2-stable - Permission denied

2007-12-21 Thread kim
oOOps It seems someone else has the same error http://archives.neohapsis.com/archives/openbsd/2007-12/1903.html One solution: "However... It seems to work as it should from the anoncvs1.usa.openbsd.org mirror but *NOT* from my most used mirror which is anoncvs1.ca.openbsd.org. " >From the

Error updating 4.2 - permission denied

2007-12-21 Thread kim
Could anyone offer some help with an upgrading problem with 4.2 -stable? The source tree and ports were installed from the official CD, and upgraded with: Update source tree: cd /usr/src cvs -d [EMAIL PROTECTED]:/cvs -q up -rOPENBSD_4_2 -Pd U

OpenBSD 4.3 in peril?

2007-12-17 Thread kim
Hello all! All this toing and froing is exhilirating, but is there any coding still going on? Don't make me install Frosty Warthog!!

Re: Printing with apsfilter

2007-11-10 Thread kim
e standard ghostscript port/package. these drivers can then be used with lpd, CUPS, direct printing, or whatever way you prefer. but please read the messages that are displayed when the packages are installed!! Thanks Hi Kim, I do not use LPD(apsfilter) on OpenBSD but rather CUPS which is i

Printing with apsfilter

2007-11-09 Thread kim
Hello all, I would like to get some advise on printing with apsfilter on 4.2. I have an Epson CX5400 multifunction printer that I normally use with the Gutenprint drivers and CUPS on other Unix systems. I am only using this as a local printer, so I don't really need something as elaborate as

Re: Problems booting 4.2 CD on two older machines.

2007-10-28 Thread kim
Barry Miller wrote: On Sat, Oct 27, 2007 at 05:51:25PM -0700, kim wrote: When the CD that I burned booted up, I got a message at boot: "/etc/boot.conf too large" But that came from cdboot, right? I don't think the rest of us in this thread are getting that far.

Re: Problems booting 4.2 CD on two older machines.

2007-10-27 Thread kim
Same problem here on a 3 year old i386. I copied the iso file from the install CD ( /4.2/i386/cd42.iso ) and burned it to another CD. This booted fine, and then I copied all of the OpenBSD file sets from the install CD to complete the setup. When the CD that I burned booted up, I got a mess

New to OpenBSD - SSHD required?

2007-06-04 Thread Kim and Loretta
When installing OpenBSD and using anoncvs for updating, it is necessary to have SSHD enabled? I do not need to access this box remotely. and don't want any unnecessary services running. Thanks.

Re: IPSec help..

2007-04-11 Thread Roy Kim
sec-nat-t: isakmp v1.0 exchange INFO encrypted cookie: 1a0f8d5bb2637ce2->d37038c8086c3c7a msgid: 5337bf54 len: 92 21:06:52.715304 home.isakmp > work.ipsec-nat-t: isakmp v1.0 exchange INFO encrypted cookie: 1a0f8d5bb2637ce2->d37038c8086c3c7a msgid: eaeb08da len: 92 On 4/11/07,

IPSec help..

2007-04-11 Thread Roy Kim
I'm trying to setup an ipsec tunnel between an openbsd and a windows box using X.509 certificates. Phase 1 gets successfully negotiated but then things crap out at step 1 of phase 2 and I don't have a clue what's wrong. Any thoughts? Isakmpd debug messages just after phase 1 is negotiated and ips

Re: Very slow raid performance with ami(4)

2007-03-31 Thread Roy Kim
Do you know if an Intel-rebadged srcs28x would care if i plugged in an lsi battery? On visual inspection the hardware looks 100% identical. Probably the only thing changed is the firmware.. On 3/30/07, Stuart Henderson <[EMAIL PROTECTED]> wrote: On 2007/03/30 13:18, Roy Kim wrote: >

Re: Very slow raid performance with ami(4)

2007-03-30 Thread Roy Kim
I didn't realize there's two different batteries. What does the 'intelligent' version of the battery do extra? On 3/30/07, Stuart Henderson <[EMAIL PROTECTED]> wrote: On 2007/03/30 11:07, Roy Kim wrote: > Recently I bought an Intel SRCS28X (LSI Megaraid 300-8

Very slow raid performance with ami(4)

2007-03-30 Thread Roy Kim
Recently I bought an Intel SRCS28X (LSI Megaraid 300-8X card in disguise) and I'm getting terrible performance out of it. Reads are fine at around 90mb/s but writes bog down at 3mb/s. I dont have the battery unit installed but 3mb/s is ridiculous.. OpenBSD 4.0 (GENERIC) #1107: Sat Sep 16 19:15:5

Re: Help with chroot

2006-09-19 Thread Kim Mackey
OK, I finally have it working at about 99%. Maybe not quite that much depending on how you look at it. the final problem I am having is probably related to how I set up my network when I installed OpenBSD 3.9 In previous installations of OpenBSD I just accepted the defaults during the n

Re: Help with chroot

2006-09-18 Thread Kim Mackey
Last night I wiped my drive completely and did a fresh install OpenBSD 3.9 MySQL 5.0.5 PHP5 mediawiki 1.5.6 I followed the instructions presented after each package was added. I didn't setup mediawiki until today at work. After a little bit of messing around I finally got it working though

Re: Help with chroot

2006-09-17 Thread Kim Mackey
OK, I've done a clean install of OpenBSd 3.9 and mediawiki. and MySQL 5.0.18. Now I'm just working through getting things set up. Right now I seem to not have Mysql linked correctly Warning: dl() [function.dl]: Unable to load dynamic library '/var/www/ lib/php/modules/mysql.so' - File not

Help with chroot

2006-09-16 Thread Kim Mackey
I'm am new to this mailing list but not new to OpenBSD. I have been having some success with working with Apache in chroot, but I am trying to experiment with setting up a wiki server (using mediawiki) and am having quite a time of it. I have figure out some of the problems and I am sure

Strange (icmp6) packets from tcpdump

2006-02-08 Thread Kim Onnel
Hello, On a PC running only SSH server to a very limited number of people, and only ipv4 I ran tcpdump and got the below: 19:29:58.871915 fe80::20c:76ff:fe98:e72c > ff02::1:ff00:10: icmp6: neighbor sol: who has a.dns.br 19:29:58.911884 fe80::20c:76ff:fe98:e72c > ff02::1:ff00:13: icmp6: neighbor

Re: Number of PTYs

2006-01-05 Thread Kim Onnel
-bash-3.00# If they're 992, how can they run out ? > > > > On 1/5/06, Kim Onnel < [EMAIL PROTECTED]> wrote: > > > > > > Hello, > > > I have an OpenBSD 3.6 running as a jump-through host, people ssh in > > > and > > > telnet o

Number of PTYs

2006-01-05 Thread Kim Onnel
Hello, I have an OpenBSD 3.6 running as a jump-through host, people ssh in and telnet out users are systraced and they all use an expect script. I get this message when the users exceed the number of ptys (a-z. A-Z,0-9) The system has no more ptys. Ask your system administrator to create more.

Re: usb2ether hw recommendation

2005-11-23 Thread Kim Onnel
I tried this one : > There is a working driver -- it's the rtl8150 module for the Realtek > 8150 chipset which is in the HUF11. > USB hawking Ethernet On 11/23/05, Stuart Henderson <[EMAIL PROTECTED]> wrote: > > --On 23 November 2005 11:49 +0100, Stephan A. Rickauer wrote: > > > are there any d

Network goes out until i ping

2005-11-23 Thread Kim Onnel
Hello, on a : -bash-3.00# uname -a OpenBSD bastion2 3.6 GENERIC#59 i386 -bash-3.00# the server just looses connectivity probably when its idle, i go to its console, ping gateway with no reply, ping a diff. host in subnet and it replies, then ping gateway again and it replies ? -bash-3.00# ifconf

OpenBSD as TACACS+ client to SecureACS

2005-11-14 Thread Kim Onnel
Hello

Re: isakmpd, greenbow vpn client and NO PROPOSAL CHOSEN

2005-10-19 Thread Kim Nielsen
LIFE_DURATION= 86400,79200:93600 but still same problem Regards Kim

Re: isakmpd, greenbow vpn client and NO PROPOSAL CHOSEN

2005-10-19 Thread Kim Nielsen
://www.allard.nu/openbsd/openbsd/isakmpd.policy and use that but still the same problem Regards Kim

Re: isakmpd, greenbow vpn client and NO PROPOSAL CHOSEN

2005-10-19 Thread Kim Nielsen
Hans-Joerg Hoexer wrote: On Wed, Oct 19, 2005 at 01:34:45PM +0200, Kim Nielsen wrote: [greenbow-quick-mode] DOI=IPSEC EXCHANGE_TYPE= QUICK_MODE Suites= QM-ESP-AES-SHA-PFS-GR2-SUITE it's GRP2, not GR2 [AES-SHA-GRP2] ENCRYPTION_ALGORITHM= AES_CBC HASH_ALGO

isakmpd, greenbow vpn client and NO PROPOSAL CHOSEN

2005-10-19 Thread Kim Nielsen
http://www.allard.nu/openbsd/greenbow/ since I googled for an answer but even though I take a copy of the isakmpd.conf on that page I still don't get though phase1 Hope someone has an answer Best regards Kim Ps. I'm using OpenBSD 3.7

Re: tuning systrace policy for expect

2005-05-11 Thread Kim Onnel
Ok, its at http://82.129.235.194/systrace_expect.txt On 5/10/05, Ray <[EMAIL PROTECTED]> wrote: > On Tue, May 10, 2005 at 10:59:40AM +0200, Kim Onnel wrote: > > I've tried to auto generate with systrace -A and tune according to > > errors, and this is what i have

tuning systrace policy for expect

2005-05-10 Thread Kim Onnel
Hi, I'm trying to generate a policy for an expect script to run Script : rpm1 -bash-3.00# cat rpm1 ./rtr3 -cisco -telnet x.x.1.1 Which calls an expect script called rtr3 as you can see: -bash-3.00# more rtr3 #!/usr/local/bin/expect -- # # # Connect to a Cisco/Juniper/Unix router and execute on

Re: ospf/gre or bgp over ipsec instead of cisco?

2005-05-03 Thread Kim Hawtin
more than that makes life and debugging complicated =) also getting bgpd on zebra or quagga is pretty straight forward also. openbgp <-> bgpd/quagga works well to ;) (can discuss more off list) regards, kim -- Kim Hawtin : IT Systems Administrator Ratbag : Level 8 - 63 Pirie Street

Re: Hackathon 2005

2005-05-02 Thread Kim Hawtin
Steve Shockley wrote: Sean Brown wrote: I'm looking forward to OpenBash If you keep saying things like that, Theo's going to change the default shell back to csh. what is this attraction to csh anyway? cheers, kim -- Kim Hawtin : IT Systems Administrator Ratbag : Level 8 - 63 Pi