Re: soekris/pcenginges and RO mounting

2008-03-24 Thread Raja Subramanian
On Sun, Mar 23, 2008 at 7:48 PM, Martin Marcher <[EMAIL PROTECTED]> wrote: > being relatively new to obsd I have the problem of finding the right doc > parts. > > What I'm looking for are starting points to read about what to do when > RO mounting the root fs (and all other parts) especially on CF

Re: mutiple pptp pass-through PF

2007-11-22 Thread Raja Subramanian
On 11/22/07, Girish Venkatachalam <[EMAIL PROTECTED]> wrote: > Here is a promise. You shall have the patch from me sent to tech@ before > Dec 15. Wow! :-) Every time I hit the pptp limitation, I start coding and a few hours later give up in disgust. Over many sittings, I've nearly completed the

Re: ftp-proxy not working properly

2007-11-20 Thread Raja Subramanian
On 11/20/07, Jake Conk <[EMAIL PROTECTED]> wrote: > # Pass ftp-proxy stuff > pass in on $ext_if inet proto tcp to $ext_carp_ip port 21 \ >flags S/SA > pass out on $int_if inet proto tcp to $ftp_server port 21 \ >user proxy flags S/SA > anchor "ftp-proxy/*" The explicit pass rules a

help with pf DIOCADDSTATE

2007-11-08 Thread Raja Subramanian
Hi All, I'm trying to insert arbitrary pf state entries from my userland app. I've repeatedly crashed my 4.2 box with bad pf ioctl DIOCADDSTATE calls, and find it difficult to progress any further. Does anyone have some sample code I can learn from? TIA, - Raja

openbsd 4.1 live cd

2007-11-07 Thread Raja Subramanian
I've put together an OpenBSD 4.1 based live CD a few weeks ago. I use it primarily for network testing, and it works great for me. I hope others find some use for it too. http://rajasuperman.blogspot.com/2007/09/openbsd-41-live-cd.html Comments welcome. - Raja

Re: reverse ftp-proxy and reply-to?

2007-03-17 Thread Raja Subramanian
On 3/17/07, Sebastian Reitenbach <[EMAIL PROTECTED]> wrote: I use ftp-proxy on my firewall as a reverse proxy for a host on the dmz. Please find Bill Marquette's ftp-proxy patch from pfSense CVS: http://cvstrac.pfsense.com/dirview?d=tools/pfPorts/pftpx-routeto I'm successfully using this in

Re: PPTP over PF

2006-11-13 Thread Raja Subramanian
On 11/14/06, Steve <[EMAIL PROTECTED]> wrote: I am having problems with Windows PPTP client over PF NAT. The windows error generally indicates a GRE problem. There are mixed reports on google as to whether this should work. Does anyone have this working ? If so are there any tricks ? http://

Re: Libretto L1 xorg.conf

2006-09-29 Thread Raja Subramanian
On 9/29/06, Bryan Vyhmeister <[EMAIL PROTECTED]> wrote: I am in the process of installing OpenBSD/3.9-stable on my Toshiba Libretto L1. I can only get X to use 800x600 when it should be using 1280x600. I successfully ran XFree86 at 1200x600 on Debian Sarge on my L1. I lost the charger and have

Re: automate changing strcpy() to strlcpy()

2006-09-22 Thread Raja Subramanian
On 9/23/06, Alexander Farber <[EMAIL PROTECTED]> wrote: On 9/22/06, Siju George <[EMAIL PROTECTED]> wrote: > http://fredrik.rambris.com/files/sleezeball-0.6.tar.gz I used sleezeball and other filters for squid earlier too, but now I've just switched to the Adblock Plus plugin for Firefox: https:

Re: 3 gateways...

2006-09-15 Thread Raja Subramanian
On 9/15/06, Josh <[EMAIL PROTECTED]> wrote: How do I know wich one to reply to? You can use packet tagging in layer 2 and layer 3 to solve this. See "Tagging Ethernet Frames" section in: http://www.openbsd.org/faq/pf/tagging.html In brconfig, use the MAC IDs of your gateways to tag packets

Re: preferred hardware platform

2006-09-09 Thread Raja Subramanian
On 9/9/06, Martin Schrvder <[EMAIL PROTECTED]> wrote: Not if you use rsnapshot. Memory use in rsync scales linearly with the number of files being synced. Hence, any backup app that's calls rsync on large trees will hit this limitation and die a horrible death. I hit this limit on a 300GB fs

Re: pf DIOCNATLOOK on redirected gre packets

2006-08-29 Thread Raja Subramanian
On 8/29/06, Damien Miller <[EMAIL PROTECTED]> wrote: It looks like you are hitting this code in pf_ioctl.c: ... Maybe this test should be: ... to ignore the port numbers for non-TCP/UDP. That worked! Thanks Damien! A (more complicated) alternative would be to teach pf to pull out either

pf DIOCNATLOOK on redirected gre packets

2006-08-28 Thread Raja Subramanian
Hi All, I'm in the process of writing a pptp proxy for PF and am a fair way through it. I'm redirecting GRE packets from PF to the proxy using: rdr on $wan proto gre from $lan:network to \ any -> 127.0.0.1 GRE packets are hitting my proxy at 127.0.0.1, but I'm unable to interrogat

pf rules for frickin pptp

2006-08-23 Thread Raja Subramanian
Hi All, I have pptp lusers who need to connect from my lan network to external servers. But pf nat breaks pptp traffic from multiple clients to the same external pptp server. I'm testing with OpenBSD 3.9 and FreeBSD 6.1 firewalls. I tried using frickin pptp 1.3 to proxy pptp traffic, but I'm u

Re: How to make fsck run faster?

2006-07-16 Thread Raja Subramanian
On 7/17/06, Raja Subramanian <[EMAIL PROTECTED]> wrote: On Sun, 16 Jul 2006, knitti wrote: > The machine is doing backups, it copies yesterdays > backup as hardlinks as base of the new backup > and then updates it. Have a look at rdiff-backup.sf.net. It does incremental backu

Re: How to make fsck run faster?

2006-07-16 Thread Raja Subramanian
On Sun, 16 Jul 2006, knitti wrote: The machine is doing backups, it copies yesterdays backup as hardlinks as base of the new backup and then updates it. Have a look at rdiff-backup.sf.net. It does incremental backups without hard linking. HTH. - Raja

data corruption while copying binary files to CF card

2006-06-29 Thread Raja Subramanian
Hello, I'm trying to use a CF card in my OpenBSD 3.9 box and am running into strange problems. I have a 64MB CF card which is connected to my PC through a CF/IDE adapter and available as wd1. I initialised the CF with fdisk, disklabel and newfs (commands and output attached below) as usual. Wh

Re: Hifn policy on documentation

2006-06-13 Thread Raja Subramanian
On 6/13/06, Breen Ouellette <[EMAIL PROTECTED]> wrote: I'm behind Theo 100%. The average person might consider him to be over-reacting. I would counter that the average person will never be involved in the purchase of a Hifn product. Adding to your statement: I would be what you call "the aver

Re: developing a backup strategy

2006-06-12 Thread Raja Subramanian
Hi, On 6/12/06, prad <[EMAIL PROTECTED]> wrote: ... should i be thinking of incremental backups say with dump? does it make any sense to rsync the entire server drive? Check out rdiff-backup.sf.net. The website seems broken atm. I've use it to incrementally backup ~3TB of data on Linux boxen

Re: ip address ?

2006-06-08 Thread Raja Subramanian
On 6/9/06, akonsu <[EMAIL PROTECTED]> wrote: i run a VMWare virtual machine under my windows and openbsd runs from a physical disk partition on this virtual machine. so openbsd connects to windows through these virtual ethernet connections installed with the VMWare player. this way openbsd can us

Re: they say openbsd is not as scalable as others

2006-05-29 Thread Raja Subramanian
Hi, On 5/29/06, Bernd Schoeller <[EMAIL PROTECTED]> wrote: On Mon, May 29, 2006 at 07:50:35PM +0300, Antonios Anastasiadis wrote: > [...] > I use OpenBSD too for critical systems, but some guys here really need > to wake up. Troll. Can we all please kill this thread? This has stopped educati

Re: load balance outgoing ftp connections

2006-05-29 Thread Raja Subramanian
Hi, On 5/29/06, Giancarlo Razzolini <[EMAIL PROTECTED]> wrote: > But I'm unable to load balance ftp-proxy traffic, and FTP only goes > through my default gateway on my OpenBSD router. I can understand > why this is not working with the pools faq ruleset, but I don't know how > to make it work.

load balance outgoing ftp connections

2006-05-28 Thread Raja Subramanian
Hi, I now have multiple WAN links from my OpenBSD box. I've followed the pf pools faq and can successfully load balance outgoing traffic on all links. But I'm unable to load balance ftp-proxy traffic, and FTP only goes through my default gateway on my OpenBSD router. I can understand why this

Re: vlan router problems

2006-05-23 Thread Raja Subramanian
ities, you must choose a NIC that supports VLANs -- fxp, xl, sis, and the usual suspects. The setup is totally transparent to all other devices. Thanks to all who helped me through this. Especially Brian Shakelford and Camiel Dobbelaar. Thanks guys! - Raja On 5/17/06, Raja Subramanian <[EM

via vt6103 vlan support

2006-05-21 Thread Raja Subramanian
Hi All, I'm planning to purchase a bunch of VIA EPIA boards that come with onboard VIA VT6103 ethernet chips. I want to setup vlan(4) interfaces on this NIC and want to know if it works with obsd 3.9. I would love to hear any feedback from someone who is using these chips. I'm especially intere

Re: vlan router problems

2006-05-16 Thread Raja Subramanian
Hi, On 5/16/06, Stuart Henderson <[EMAIL PROTECTED]> wrote: fwiw, current firmware release notes say this about VLANs: "Bugs fixed: [...] Port based VLAN works abnormally with some combinations of VLANs overlapping." My switch is already running the latest firmware, and I'm still having

vlan router problems

2006-05-16 Thread Raja Subramanian
Hi, I'm trying to build a VLAN router with a singe NIC (tried sis and fxp). I have two subnets (192.168.1.1/24, 192.168.2.1/24) on independent VLANs. I'm stuck because the router is unable to exchange data with the VLAN clients. I have a Netgear FS726T switch that is VLAN capable, and vlan(4)