Re: upgrades no longer allow ftp for sets

2014-03-26 Thread NOC
The FTP server is located on the head units for our dozen+ cabinet SAN/NAS monstrosity from $storage_vendor, getting the software on them to work the way it was shipped is already a huge pain. The plan is to set up a couple of new servers as web servers with a mounted iSCSI volume that points back

Re: upgrades no longer allow ftp for sets

2014-03-25 Thread NOC
I am upgrading hundreds of boxes a day with only have serial access to them. Installing from an external source would bring any server I use to its knees (I end up using 4-5 Gbps of bandwidth during upgrades. I assume packages will still be able to grabbed over ftp, although I suspect I should be

Re: upgrades no longer allow ftp for sets

2014-03-25 Thread NOC
Thanks and I understand the reasoning. The current ftp server won't be able to do http and use of siteXX files prevents using an external source. Will nfs be supported or am I going to need more hardware? Original Message Subject: Re: upgrades no longer allow ftp for sets

upgrades no longer allow ftp for sets

2014-03-25 Thread NOC
Since the 23 March snapshot I've no longer been able to get the sets via ftp during upgrade, is this intentional or is this an error on my end? This worked on the snapshot form 19 March and earlier using the amd64-snapshot bsd.rd indirectly from ftp3.usa.openbsd.org (Local ftp mirror with rsync da

Re: anyone use these for firewall?

2010-06-15 Thread LeviaComm Networks NOC
On 6/15/2010 1:19 PM, Tomas Bodzar wrote: On Tue, Jun 15, 2010 at 9:01 PM, LeviaComm Networks NOC wrote: On 6/15/2010 9:41 AM, Lars Nooden wrote: Chris Smith wrote: Thanks for any input on these or other suggestions for quick (new Atom or better) low power network appliance type gear for

Re: anyone use these for firewall?

2010-06-15 Thread LeviaComm Networks NOC
On 6/15/2010 9:41 AM, Lars Nooden wrote: Chris Smith wrote: Thanks for any input on these or other suggestions for quick (new Atom or better) low power network appliance type gear for keeping -current.. Finding out if -current runs on the RB450G, RB493, or RB493AH has made it onto my todo list

Re: OpenBSD sends RSTs for gratuitous traffic

2010-06-15 Thread LeviaComm Networks NOC
On 6/15/2010 5:02 AM, Bryan Vyhmeister wrote: On Tue, Jun 15, 2010 at 7:10 AM, Stuart Henderson wrote: On 2010-06-15, LeviaComm Networks NOC wrote: One last thing, Is there a reason that you are doing a router-on-a-stick configuration? I ask only because they tend to cause more headaches

Re: OpenBSD sends RSTs for gratuitous traffic

2010-06-15 Thread LeviaComm Networks NOC
On 6/14/2010 10:20 PM, Patrick Coleman wrote: On Tue, Jun 15, 2010 at 1:03 PM, LeviaComm Networks NOC wrote: It would be best if you had a working switch to test with, the switch may be forwarding packets to the OpenBSD box because its MAC table is broken. The switch may be the cause, please

Re: OpenBSD sends RSTs for gratuitous traffic

2010-06-14 Thread LeviaComm Networks NOC
On 6/13/2010 9:50 PM, Patrick Coleman wrote: For some reason however, on one particular VLAN the switch is erroneously forwarding traffic from a particular host (203.135.184.10) to the OpenBSD box. The traffic is forwarded even when the destination MAC address is not that of the OpenBSD box. So t

Re: Why I left OpenBSD

2010-06-10 Thread LeviaComm Networks NOC
On 6/10/2010 1:44 AM, Casey Allen Shobe wrote: On Thu, Jun 10, 2010 at 8:28 AM, Dexter Tomissonwrote: http://www.trollaxor.com/2010/06/why-i-left-openbsd.html It's always funny when somebody ends up "leaving for their own good", that they need to write a lot about it and try to convince many

Re: ral(4) power save mode

2010-06-06 Thread LeviaComm Networks NOC
On 6/6/2010 8:26 AM, Jvrg Zinke wrote: Hi, ral(4) manpage says: "Host AP mode doesn't support power saving. Clients attempting to use power saving mode may experience significant packet loss (disabling power saving on the client will fix this)." Anyone has an hint how to disab

Re: carp and OS upgrades

2010-06-01 Thread LeviaComm Networks NOC
On 6/1/2010 2:30 PM, Devin Reade wrote: Ignoring aspects common to all OpenBSD upgrades, and the ideosyncracies that get mentioned in the release notes for specific upgrades, does anyone have general comments, suggestions, warnings, etc regarding upgrading a pair of firewalls that are running in

Re: GNU/Linux user wanting to make the switch to OpenBSD for ADSL2+ Router.

2010-05-27 Thread LeviaComm Networks NOC
> One thing that I would like to continue to do is filter packets based > on type, namely P2P type packets. I want to give them a low priority > in the QoS. On Linux, I use Layer7 rules, is there something similar, > or the same for OpenBSD? Also, is it possible to block those packets > between

Re: USB Controller Causing Issues

2010-05-07 Thread LeviaComm Networks NOC
My first recommendation is to use another method of install, see: http://undeadly.org/cgi?action=article&sid=20100404103735 If you really want to continue: Is the BIOS up to date? Also, is there a setting for USB mode in the BIOS? Sometimes listed as USB Drive emulation, or similar. I know that

Re: VPN between OpenBSD Gateway and a mac

2010-04-23 Thread LeviaComm Networks NOC
>At work, we use OpenBSD as a gateway (PF for firewalling, and Vpn using (ipsec.conf file and isakmpd -K). >We have 2 companies connected in vpn with our OpenBSD Box. All works fine. > >Now, i wish to connect at work from my home using a Mac (MAC OS 10.6), but i don't know how to configure it. Re

Re: HIFN 7955 Support in OpenBSD 4.6 on AMD Geode LX800 System

2010-02-18 Thread Brian A. Seklecki (CFI NOC)
On 2/18/2010 12:47 PM, Ryan Corder wrote: Essentially, on these lower-power devices, the cost of moving the data to and from the crypto card across the PCI bus negates most performance gains you would achieve trying to offload it. Right Where as on servers, these devices only offer a benefit o

Re: HIFN 7955 Support in OpenBSD 4.6 on AMD Geode LX800 System

2010-02-18 Thread Brian A. Seklecki (CFI NOC)
On 2/18/2010 7:21 AM, Liam Farr wrote: Hi, I thought that the system might be using the built in crypto in the AMD Geode CPU instead of the HIFN and have used "config -e -o bsd.new /bsd" to disable glxsb (glxsb0 at pci0 dev 1 function 2 "AMD Geode LX Crypto" rev 0x00: RNG AES) in the kernel,

ospfd: redistribute statement per area

2008-08-27 Thread smartTERRA NOC
Hi, AFAIK I can only set the redistribute statement for the whole configuration, but not for a single area. Is there any gentle way to provide two areas, one redistributing all connected network, and another area only redistributing a default route? Regards, Falk

Re: OpenBGPd: don't announce a specified prefix to a peer

2008-08-27 Thread smartTERRA NOC
Hi, is there a way to dynamically deny prefixes learned via iBGP / IGP or have I to specify all the prefixes manually? Regards, Falk

Re: OpenBGPd: don't announce a specified prefix to a peer

2008-08-27 Thread smartTERRA NOC
Am 27.08.2008 um 10:25 schrieb Claudio Jeker: deny to prefix / Hm, very simple, shame on me. Thanks for your help! Regards, Falk

OpenBGPd: don't announce a specified prefix to a peer

2008-08-27 Thread smartTERRA NOC
Hi, I'm sure there is a way to not announce a specified prefix (learned via iBGP or OSPF) to a eBGP peer. But I'm not sure what the filter line should look like. Could someone give me a push in the right direction? Regards, Falk

Re: 1U IBM or Dell server for firewall

2008-05-07 Thread smartTERRA NOC
An IBM x3250 looks like this on dmesg: OpenBSD 4.3-current (GENERIC.MP) #0: Thu Mar 13 05:46:13 WIT 2008 As discussed on this ML a MP enable kernel is not a good choice for a performant firewall solution... Falk

Re: install43.iso hangs....any ideas?

2008-04-24 Thread smartTERRA NOC
Am 23.04.2008 um 03:29 schrieb vatocleti: I have a usb attached CD/DVD and I have tried install42.iso and install43.iso and they both hang. I don't remember at which stage boot hangs with my old Dell Poweredge 1650 Systems, but this options works for me: > boot -c UKC> disable apm UKC> d

FTP-Proxy swallows 221 Message (MS FTP-Service)

2008-04-02 Thread smartTERRA NOC
Hello, I'm running 4.2 GENERIC#642 i386 and uses pf and ftp-proxy for a firewall service. I noticed that ftp connections, established with the help of ftp-proxy, don't receive the "221 Goodbye" Message from the FTP-Server. #:~ falk$ telnet 192.168.30.22 21 Trying 192.168.30.22... Connecte

Re: ftp-proxy and carp

2008-03-12 Thread smartTERRA NOC
Am 12.03.2008 um 13:28 schrieb Joe Warren-Meeks: Hey chaps, Hey, Ideally, I'd have ftp-proxy bind to the CARP address, so that if there was a failover event, inbound ftp would still work. I set up an local ip address via interface lo1 and redirects all incoming ftp requests to ftp-proxy

Re: arp table timeout / how to update automatically if foreign MAC changes?

2008-03-11 Thread smartTERRA NOC
Am 11.03.2008 um 14:27 schrieb smartTERRA NOC: I have two servers running Debian Linux and keepalived, a IP fail over solution alike carp - with one little difference: when doing fail over the mac address for the failover ip address changes. I have found a workaround: heartbeat. Heartbeat

arp table timeout / how to update automatically if foreign MAC changes?

2008-03-11 Thread smartTERRA NOC
Hi there, I have two servers running Debian Linux and keepalived, a IP fail over solution alike carp - with one little difference: when doing fail over the mac address for the failover ip address changes. But my OpenBSD pf firewall doesn't recognize the change of the mac address. I have t

Message ("Your message dated Thu, 29 Sep 2005 12:13:03...")

2005-09-29 Thread Sunet/KTH NOC LISTSERV Server (14.3)
Your message dated Thu, 29 Sep 2005 12:13:03 +0200 with subject "Message could not be delivered" has been submitted to the moderator of the TICKET list: Mens Nilsson <[EMAIL PROTECTED]>.

Delivery Status Notification (Failure)

2005-07-13 Thread PSS NOC
Your message To: jdb+AEA-cinteractive.com Subject: Returned mail: Data format error Sent:Wed, 13 Jul 2005 16:09:33 -0400 did not reach the following recipient(s): jdb+AEA-cinteractive.com on Wed, 13 Jul 2005 16:00:50 -0400 The e-mail account does not exist at the organization

Re: Router question

2005-05-26 Thread noc
Phil, SSH is the preferred way to connect. But before you go any further, I would go to : www.groupstudy.com that is the place for all things Cisco. Probably wouldn't do to ask further routing questions unless BSD is the router, on this list. The grumbles are watching. kevin

Re: OPEN SOURCE MASTERPLANS

2005-05-03 Thread noc
Well said Mike. If people are going to evangelize, then they must accept the retorts with equanimity. kevin