Re: nat-t dropping response packets

2009-09-02 Thread n0g0013
On 01.09-21:00, Stijn wrote: > n0g0013 wrote: > >not sure where to start debugging this VPN problem. i have an ipsec, > >nat-t tunnel between a development network and the main services hub > >using isakmpd. the exchange seems to go smoothly and the tunnel gets > >e

nat-t dropping response packets

2009-09-01 Thread n0g0013
not sure where to start debugging this VPN problem. i have an ipsec, nat-t tunnel between a development network and the main services hub using isakmpd. the exchange seems to go smoothly and the tunnel gets established. hub(public_ip) --> {inet} <-- ext-gw(nat-ip) <-- dev-gw(private_ip)

Re: UPDATE: mozilla-firefox-3.0

2008-07-17 Thread n0g0013
On 17.07-15:35, Nick Guenther wrote: > On Thu, Jul 17, 2008 at 2:33 PM, Edd Barrett <[EMAIL PROTECTED]> wrote: > > > > If you get java awt rendering animations half as decently as the > > official flash plugin, I would be suprised! [ ... ] > Flash is definitely faster. [ ... ] i agree with the "fa

Re: UPDATE: mozilla-firefox-3.0

2008-07-17 Thread n0g0013
On 17.07-19:33, Edd Barrett wrote: [ ... ] > If you get java awt rendering animations half as decently as the > official flash plugin, I would be suprised! i apologise if i'm becoming overly terse but it's becoming clear that any attempt at discourse here deteriorates, at best, to pissing contest

Re: UPDATE: mozilla-firefox-3.0

2008-07-17 Thread n0g0013
On 17.07-13:21, Marco Peereboom wrote: > On Thu, Jul 17, 2008 at 06:07:05PM +0000, n0g0013 wrote: > > On 17.07-10:13, Marco Peereboom wrote: > > [ ... ] > > > I am saying that each java app requires its own java runtime because the > > > previous/next version i

Re: UPDATE: mozilla-firefox-3.0

2008-07-17 Thread n0g0013
On 17.07-14:16, Jason Dixon wrote: [ ... ] > > ... but i was also making the point that if you "don't know anything > > about Java client-side rendering" and are "not a flash or java developer" > > perhaps you should refrain from spouting technical jargonese on the > > subject. i know what you're

Re: UPDATE: mozilla-firefox-3.0

2008-07-17 Thread n0g0013
On 17.07-12:13, Jason Dixon wrote: > You don't have to be a dick. [ ... ] eh ... ok. i wasn't trying to be; i was trying to be funny but apparently my linguistic skills are on a par with your own. apologies. > [ ... ] I don't know anything about Java > client-side renderi

Re: UPDATE: mozilla-firefox-3.0

2008-07-17 Thread n0g0013
On 17.07-10:13, Marco Peereboom wrote: [ ... ] > I am saying that each java app requires its own java runtime because the > previous/next version is incompatible. Nothing new here. this is wrong. java versions are largely compatible and most requirements are library problems, not runtime compati

Re: 4.2 patchset for PR#5563/#5704

2008-01-29 Thread n0g0013
joel, thanks for the comments. was looking for help when sent the initial email. On 30.01-02:45, Joel Sing wrote: [ ... ] > 1. Both of these PRs have already been resolved and closed - fix committed in > r1.70 of sys/dev/ic/elink3.c (see > http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/ic/

Re: pf max-src-conn states

2007-11-13 Thread n0g0013
On 12.11-19:11, Henning Brauer wrote: [ ... ] > > 1. trying to use 'max-src-conn 1' to limit service to one > > connection per host (with overload table) but when i disconnect and > > re-reconnect i get blocked. should this state expire when > > correctly closed, allowing a second connection, or

Re: [OT] making Firefox respect telnet:// URLs

2007-11-12 Thread n0g0013
On 12.11-02:24, Ingo Schwarze wrote: [ ... ] > On a side note, do not use > exec "xmessage $url: parse error"; > or surfing to > telnet://localhost:1234&halt# > might yield surprising results. > > Your sh-kludge cited above is even worse; please DO try surfing to > telnet://localhost:1234&xm

Re: [OT] making Firefox respect telnet:// URLs

2007-11-12 Thread n0g0013
On 11.11-22:32, ropers wrote: [ ... ] > So far, I have created a script .telnet4firefox.sh in my home folder, > made that executable (chmod u+x), and in Firefox' about:config I have > added a new boolean network.protocol-handler.external.telnet (set to > true) and a new string network.protocol-hand

Re: Printing with apsfilter

2007-11-12 Thread n0g0013
On 12.11-12:58, Girish Venkatachalam wrote: [ ... ] > Thanks. I definitely stand corrected. I definitely meant PDL and not > PCL. My memory failed due to lack of proper understanding. Sorry... often make the same error. :-) [ ... ] > I want to know what happens behind the scenes when you

Re: Printing with apsfilter

2007-11-12 Thread n0g0013
On 11.11-18:31, Predrag Punosevac wrote: [ ... ] > Could you give any comments about LPRng please? only that i have never really needed it. the stardand lpr distribution has always been sufficient. i've never tried to deploy complex groups/queuing/policies with lpr except under AIX (which has it

Re: OpenBSD kernel janitors

2007-10-31 Thread n0g0013
On 31.10-16:44, Artur Grabowski wrote: [ ... ] > > surely there must be _some_ merit to creating a list of lower level > > development tasks (as dictated by those with experience to judge) to > > encourage people to enter the development cycle. > > The most amusing thing about this thread is that

Re: OpenBSD kernel janitors

2007-10-31 Thread n0g0013
On 31.10-10:05, Theo de Raadt wrote: [ ... ] > the problem is not our lists. [ ... ] > but no. they intend to keep whining, and saying it is our fault. where you get the "your fault" from is unfathomable. neither is anyone suggesting that the problem is "our lists", simply that a list of "simple

Re: OpenBSD kernel janitors

2007-10-31 Thread n0g0013
On 31.10-09:53, Theo de Raadt wrote: [ ... ] > There is no community that you speak of. that much is apparent. > There are people who write diffs, and people who _don't_ write diffs. > > In that sub-group of people who don't write diffs, there are a few who > whine loudly and say we are the reas

Re: OpenBSD kernel janitors

2007-10-31 Thread n0g0013
On 31.10-15:25, mickey wrote: [ ... ] > > on the counter-side we appear to have people who can code but are > > unable to communicate productively otherwise. > > as opposed to a majority of people who talk and not code anything? > here is a solution for you -- read http://openbsd.org/query-pr.html

Re: OpenBSD kernel janitors

2007-10-31 Thread n0g0013
On 31.10-09:25, Theo de Raadt wrote: [ ... ] > Lists have been made before, by a few developers. > > It did not work then, and it won't work now. > > Development is not the same process as writing a whiny mail. that is a shame. i can probably better understand the relectance to re-visit this if

Re: OpenBSD kernel janitors

2007-10-31 Thread n0g0013
On 31.10-09:49, Theo de Raadt wrote: [ ... ] > I'll say it again more clearly -- all of you whiners just plain suck. > We know you'll never write diffs, and it is up to you to prove us > wrong. If you don't write diffs, we have a difficult time feeling any > loss. a software community is made of

Re: OpenBSD kernel janitors

2007-10-31 Thread n0g0013
On 31.10-11:12, Nick Guenther wrote: [ ... ] > > and i would suggest that the severe and prevelant attitude toward the > > possibilty of poor patches or under-educated actions is the most > > significant barrier to encouraging new/young developers. > > Well that's the point of it; or at least, a u

Re: OpenBSD kernel janitors

2007-10-30 Thread n0g0013
On 30.10-20:26, Miod Vallat wrote: > [ ... ] That's when you need as much support as possible. And > that's the kind of support I, as an individual, can not provide. i believe the task list itself would be positive , even if not much happens around it. they are good for the community as

Re: Help! I'm having Linux foisted on me! (PF queuing woes)

2007-10-19 Thread n0g0013
On 19.10-15:15, Richard Wilson wrote: [ ... ] > altq on $ext_if cbq bandwidth 9.1Mb queue { adsl_up, sdsl_up } > altq on $client_if cbq bandwidth 9.1Mb queue { adsl_dn, sdsl_dn } > > queue adsl_up bandwidth 256Kb cbq > queue adsl_dn bandwidth 2Mb cbq is there a reason that these have no child que

Re: OpenBSD firewalls as virtual machine ?

2007-09-22 Thread n0g0013
On 23.09-01:35, Luca Corti wrote: [ ... ] > > i have a feeling that the funds currently available for your virtualisation > > project would improve the quality and delivery of these requirements. > > If I had such project and funds I'd certainly contribute. In the > meantime I have assigned part o

Re: WG: Re: isakmp phase 2 negotiation failed

2007-09-22 Thread n0g0013
On 21.09-16:47, Christoph Leser wrote: [ ... ] > > >[low-crypto-quick] > > >DOI=IPSEC > > >EXCHANGE_TYPE= QUICK_MODE > > >Transforms= QM-ESP-DES-MD5-SUITE [ ... ] > Maybe there is a problem with your isakmpd.conf: [ ... ] > names QM-ESP-DES-MD5-SUITE !!

Re: isakmp phase 2 negotiation failed

2007-09-21 Thread n0g0013
On 20.09-19:17, Daniel Ouellet wrote: [ ... ] > Do, as you see fit, but my advise to you, wouldn't be to help trying to > get it up as is now, but first run 4.1, then try the new way of doing > it. I think that would be much better spend of time. thanks for the advice. unfortunately both system

isakmp phase 2 negotiation failed

2007-09-20 Thread n0g0013
having a nightmare getting two openbsd (one 3.8, one 4.0) boxes to setup a tunnel. finally got the phase 1 negotiation going (or so i believe from reviewing the logs) but it appears that the phase two starts and is just abandoned. my best guess is that the default definitions for QM-ESP-DES-MD5-S