Re: kvm (Proxmox) and Openbsd 5.1

2012-10-15 Thread Tobias Crefeld
Am Sat, 21 Jul 2012 12:50:55 +0200 schrieb "Holger Glaess" : > i run 2 guests with 5.1 on proxmox 2.1 distribution . > > i don't know what the version of kvm is behind of proxmox. > > but openbsd 5.1 run as expected "normal" ;) I tried several OpenBSD versions between 4.8 and 5.1, both i386 and

Re: CARP and transit network to ISP

2012-08-22 Thread Tobias Crefeld
Am Tue, 21 Aug 2012 21:28:27 -0400 schrieb Jason Healy : > By changing to a /30 transit and doing away with the aliases, > performance on the OpenBSD box improved substantially. Not sure, if I understand you right: Did you move the /23 on another ethernet interface when establishing the transit n

Re: CARP + OSPF help needed

2012-08-21 Thread Tobias Crefeld
Am Fri, 17 Aug 2012 15:45:31 -0400 schrieb Brian Hechinger : > I'm trying to replace my single OpenBSD firewall with a pair of > redundant firewalls. I've been testing this (thanks to the power of > VMware) and so far haven't gotten it to work the way I want/need. [..] > I'd like OSPF to hand ou

CARP and transit network to ISP

2012-08-17 Thread Tobias Crefeld
Can anyone give me a hint how to setup a pair of "CARPed" firewall machines to access an ISP via an direct ethernet link (fiber). He assigned us a customer network ( /29) and a transit network ( /30) to connect our (customer) network with his backbone without extra router machine. All (active) addr

Re: MPLS VPN on OpenBSD

2012-04-27 Thread Tobias Crefeld
Am Fri, 27 Apr 2012 17:46:38 +0530 schrieb Girish Venkatachalam : > While someone actually writes an article on undeadly on VPNs please > also write about MPLS VPN creation as I find no documentation about > this. Usually you don't need this if you are not the MPLS-provider/carrier who owns and r

Re: VPN on OpenBSD: OpenSSH or OpenVPN?

2012-04-16 Thread Tobias Crefeld
Am Mon, 16 Apr 2012 22:35:16 +0300 schrieb Kostas Zorbadelos : > if this has been discussed in the past, forgive my asking and please > point me to the archives. I am interested in building a server VPN > solution for a sensitive corporate LAN. The use case is travelling, > roaming users who just

Hardware Compatibilty on different *nixes

2011-12-02 Thread Tobias Crefeld
Am Fri, 02 Dec 2011 06:13:42 -0500 schrieb Richard Thornton : > I wanted to use a linux but the only current linux for sparc64 is > debian 6.03 and it seems incompatible with the rage xl video on the > sun blade giving me out of sync errors. Openbsd seems to have > better drivers since it works

Re: snort and pf - pflog vs

2011-11-14 Thread Tobias Crefeld
Am Sun, 13 Nov 2011 09:51:05 -0600 schrieb "Ted Wynnychenko" : > With 4.5, I had snort listening to pflog0, because I understood that > listening to the interface directly (e.g. "bge0") would not work > since any packets dropped by pf would not be seen by snort. pflog0 only shows the packets that

RfC-1323-Test for pf/NAT-Installation

2011-11-10 Thread 'Tobias Crefeld'
Running a pair of OpenBSD-4.8-boxes as NAT-Firewall between public Internet and some Linux-webservers in a DMZ basically works fine so far. But this week a client enabled RFC-1323 and his http/https-access to our webservers didn't work any more and all he got was an ICMP-unreachable with un-NATed

Re: My thoughts on OpenBSD - is advocacy working ?

2011-09-01 Thread Tobias Crefeld
Am Wed, 31 Aug 2011 14:48:56 -0400 schrieb Daniel Villarreal : > I was posting to advoc...@openbsd.org, but only SPAM seems to > function on that list? Well, for whatever reason it ended at b...@openbsd.org ... Beside the question what kind of "encryption" your MUA is using... > http://youcanli

Re: XEN-Guest

2011-05-02 Thread Tobias Crefeld
Am Mon, 2 May 2011 19:40:23 +0200 schrieb Tobias Crefeld : > $ grep flags /proc/cpuinfo |head -1 > flags : fpu de tsc msr pae mce cx8 apic mtrr mca cmov pat > clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt lm 3dnowext > 3dnow constant_tsc rep_good nonstop_tsc ext

Re: XEN-Guest

2011-05-02 Thread Tobias Crefeld
Am Mon, 2 May 2011 11:15:57 -0500 schrieb John Jackson : > It's probably much more straightforward to run kvm-qemu instead of > XEN. Hm, I'll consider this alternative. Till now our "test-LAN" ran on VMware but for some reasons we want to get away from VMware. > OpenBSD works fine as a guest u

XEN-Guest

2011-05-02 Thread Tobias Crefeld
I think about installing an OpenBSD-guest on a XEN-Host (Debian Squeeze), all OS as 64bit-version alias "amd64". Are there any experiences with OpenBSD as Dom-U? The guest will be a firewalling-router with ospfd, bind, openvpn and 6 ethernet-interfaces. Any comments are welcome! Regards, Tobia