Re: help! BGP receive updates from one peer and broadcast to a different peer - OpenBSD 5.5

2015-05-01 Thread Paul S.
Simply use filters to deny sending prefixes to your normal peer. The filter syntax is well explained in the bgpd.conf manpage. On 5/2/2015 午前 12:49, Motty Cruz wrote: Hello, My company is getting another Internet connection, our new ISP ask that we setup bgp to peer with one of their router to

Re: OpenBSD hosting in Hong Kong?

2015-04-17 Thread Paul S.
Just buy a box with KVM/IPMI from any provider? Why does it have to be OpenBSD centric? On 4/17/2015 午前 10:41, OpenBSD user wrote: Hello, I was wondering if there are any hosting companies in Hong Kong offering OpenBSD dedicated servers? Would be truly grateful for any replies!

Re: OpenBSD.org gets SANCTIONED .RU

2015-04-02 Thread Paul S.
I thought it had something to do with April fools `-` On 4/3/2015 午前 03:45, Jeremiah Ford wrote: On 2015-04-02 12:50, Артур Истомин wrote: On Wed, Apr 01, 2015 at 09:13:32PM -0700, Constantine A. Murenin wrote: Dear misc and advocacy, It has come to my attention that OpenBSD.org has been sanc

Re: Connection drop (i.e. IRC) caused by pf/pfsync/carp/...?

2014-10-09 Thread Paul S.
I can confirm that we've seen this with any long running TCP connections in environments where pf was literally only sampling packets for pflow (not even actually firewalling.) Removing pf from the equation fixed the problem right up. 5.5 current was what I was running at the time. On 10/9/20

Re: tools for monitoring network traffic

2014-09-19 Thread Paul S.
+1 to access log. But well, if you must -- there is this https://code.google.com/p/mod-sflow/ You won't get any extra data out of it that a CustomLog directive wouldn't give you, though. On 9/20/2014 午前 12:29, Chris Cappuccio wrote: Markus Rosjat [ros...@ghweb.de] wrote: Hello, just a simp

Re: OpenBGPD not installing routes that happen to originate from the same ASN in another location into the RIB

2014-09-12 Thread Paul S.
: * Paul S. [2014-08-28 11:19]: Earlier today, however, I discovered that routes that I'm announcing under the same ASN (in another location) are being received and put into the RIB -- but never into the kernel's FIB. that's correct behaviour, routes from the same AS aren't suppos

Re: New Queue system

2014-09-10 Thread Paul S.
Hi, I believe he intended to reference http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/pf.conf.5?query=pf%2econf&arch=i386 On 9/11/2014 午前 02:27, Francisco Valladolid H. wrote: Thank you. There are a docs or FAQ ? On Wed, Sep 10, 2014 at 12:13 PM, Christopher Zimmermann wrote

Re: pflow(4) sampling rate

2014-09-03 Thread Paul S.
Giancarlo, Thank you for your reply. Unfortunately, this is a gateway box -- there aren't really any firewall rules that I can individually apply the filter to. On 9/4/2014 午前 01:22, Giancarlo Razzolini wrote: On 03-09-2014 11:06, Paul S. wrote: Hi folks, I've setup a netflow

pflow(4) sampling rate

2014-09-03 Thread Paul S.
Hi folks, I've setup a netflow collector and have begun exporting flow data from one of my OpenBSD edge systems. All appeared well at first glance, but I've noticed that the amount of flow data exported appears excessive. (i.e: My hardware router for nearly 7-8 gbit/s of actual traffic, co

Re: OpenBGPD not installing routes that happen to originate from the same ASN in another location into the RIB

2014-08-28 Thread Paul S.
any prefix 10.0.0.0/8 prefixlen >= 8 # private space [RFC1918] ? On 2014 Aug 28 (Thu) at 18:17:34 +0900 (+0900), Paul S. wrote: :Hi guys, : :We've been testing OpenBGPd + OpenBSD as an edge router for some time and are :pretty impressed with what it can do. : :Earlier today, how

OpenBGPD not installing routes that happen to originate from the same ASN in another location into the RIB

2014-08-28 Thread Paul S.
Hi guys, We've been testing OpenBGPd + OpenBSD as an edge router for some time and are pretty impressed with what it can do. Earlier today, however, I discovered that routes that I'm announcing under the same ASN (in another location) are being received and put into the RIB -- but never into