Re: I'm embarassed. (Re: shell not reading login script)

2008-08-21 Thread Joel Rees
On 平成 20/08/21, at 12:12, Philip Guenther wrote: 2008/8/20 Joel Rees <[EMAIL PROTECTED]>: export PROFMARKER=".profile" would you believe I put that in .profile, like the marker said? setenv CSHMARKER ".cshrc" would you believe I put that in .cshrc? setenv LOGINMARKER ".login" would yo

Re: Vlan Tag on Vlan Tag (l2tunneling)

2008-08-21 Thread Henning Brauer
* Insan Praja SW <[EMAIL PROTECTED]> [2008-08-21 05:25]: > Hi Misc@, > I Currently busting my a** to setup cizcoz catalyst 3550 to do dot1q > tunneling over EoMPLS network. Its seem the only way to do it is to use > this 3*50 Catalysts. But I'm curious, if I created a vlan interface over > vlan

Re: bgpd extension handling capabilities

2008-08-21 Thread Henning Brauer
* Graeme Lee <[EMAIL PROTECTED]> [2008-08-21 03:31]: > Henning Brauer wrote: >> * Graeme Lee <[EMAIL PROTECTED]> [2008-08-21 01:51]: >> >>> I've had to connect to a new upstream peer which is advertising an IPv4 >>> safi of 128 (MPLS-labelled VPN address) >>> see http://www.iana.org/assignment

Re: Vlan Tag on Vlan Tag (l2tunneling)

2008-08-21 Thread Stuart Henderson
On 2008-08-21, Henning Brauer <[EMAIL PROTECTED]> wrote: > * Insan Praja SW <[EMAIL PROTECTED]> [2008-08-21 05:25]: >> Hi Misc@, >> I Currently busting my a** to setup cizcoz catalyst 3550 to do dot1q >> tunneling over EoMPLS network. Its seem the only way to do it is to use >> this 3*50 Catalyst

Re: Vlan Tag on Vlan Tag (l2tunneling)

2008-08-21 Thread Paul de Weerd
On Thu, Aug 21, 2008 at 09:50:35AM +, Stuart Henderson wrote: | > you can stack vlans. aka | > | > ifconfig vlan2 vlan 2 vlandev em0 | > ifconfig vlan4 vlan 4 vlandev vlan2 | > | | I think you have to take a hit on MTU, so this is probably better | on gigabit interfaces that are configured for

Re: Vlan Tag on Vlan Tag (l2tunneling)

2008-08-21 Thread Henning Brauer
* Paul de Weerd <[EMAIL PROTECTED]> [2008-08-21 13:48]: > On Thu, Aug 21, 2008 at 09:50:35AM +, Stuart Henderson wrote: > | > you can stack vlans. aka > | > > | > ifconfig vlan2 vlan 2 vlandev em0 > | > ifconfig vlan4 vlan 4 vlandev vlan2 > | > > | > | I think you have to take a hit on MTU, so

Re: Vlan Tag on Vlan Tag (l2tunneling)

2008-08-21 Thread Claudio Jeker
On Thu, Aug 21, 2008 at 01:49:18PM +0200, Henning Brauer wrote: > * Paul de Weerd <[EMAIL PROTECTED]> [2008-08-21 13:48]: > > On Thu, Aug 21, 2008 at 09:50:35AM +, Stuart Henderson wrote: > > | > you can stack vlans. aka > > | > > > | > ifconfig vlan2 vlan 2 vlandev em0 > > | > ifconfig vlan4 v

ipsec vpn problem

2008-08-21 Thread Claus Larsen
Have a problem getting a vpn tunnel up between a zyxel vpn gw and my openbsd 4.3 system. /etc/ipsec.conf ike passive from any to any \ main auth hmac-sha1 enc 3des group modp1024 \ quick auth hmac-sha1 enc 3des group none \ psk openbsdrules Below follows output from cmd: isakmpd -d -DA=99 -K

Re: Vlan Tag on Vlan Tag (l2tunneling)

2008-08-21 Thread Henning Brauer
* Claudio Jeker <[EMAIL PROTECTED]> [2008-08-21 16:11]: > If we stack vlan interfaces I don't see a real need for such a button. switch vendors don't agree on the ethertype. it is configurable on all of them, and the defaults are different between vendors. as in: button needed. -- Henning Brauer

Re: shell not reading login script

2008-08-21 Thread jared r r spiegel
On Thu, Aug 21, 2008 at 10:30:32AM +0900, Joel Rees wrote: > Added markers to each of .profile, login and .cshrc: > > PROFMARKER=".profile" > > etc. But none of the markers show up in a printenv, whether > I simply start a new xterm, or go to the trouble of logging out > and back in. when i hav

Re: Vlan Tag on Vlan Tag (l2tunneling)

2008-08-21 Thread Reyk Floeter
hi, On Thu, Aug 21, 2008 at 04:48:02PM +0200, Henning Brauer wrote: > * Claudio Jeker <[EMAIL PROTECTED]> [2008-08-21 16:11]: > > If we stack vlan interfaces I don't see a real need for such a button. > > switch vendors don't agree on the ethertype. it is configurable on all > of them, and the de

Re: Vlan Tag on Vlan Tag (l2tunneling)

2008-08-21 Thread Reyk Floeter
On Thu, Aug 21, 2008 at 04:05:50PM +0200, Claudio Jeker wrote: > > no point in just doing that. > > > > a button to change the ether type would make sense. > > > this is not trivial because it would require a change in the Rx path where it is currently matching the ethertype in ether_input() be

Redundant WAN connections on 2 openBSD firewalls

2008-08-21 Thread Laurent CARON
Hi, I'm currently setting-up a fully redundant gateway under OpenBSD (4.3) with IPSEC, CARP, PF, SA Sync, ...) and would like to benefit of failover over 2 wans connections (for outgoing connections of course). I already have a round robin on the 2 external links: pass in log on $IntIf route-

You've received A Hallmark E-Card!

2008-08-21 Thread hallmark.com
Hallmark.comShop OnlineHallmark MagazineE-Cards & MoreAt Gold Crown You have recieved A Hallmark E-Card. Hello! You have recieved a Hallmark E-Card. To see it, click here, There's something special about that E-Card feeling. We invite you to make a friend's day and send one. Hope to see you s

Re: Redundant WAN connections on 2 openBSD firewalls

2008-08-21 Thread Giancarlo Razzolini
Laurent CARON escreveu: > Hi, > > I'm currently setting-up a fully redundant gateway under OpenBSD (4.3) > with IPSEC, CARP, PF, SA Sync, ...) and would like to benefit of > failover over 2 wans connections (for outgoing connections of course). > > I already have a round robin on the 2 external lin

PF redirection and pflogging

2008-08-21 Thread Parvinder Bhasin
List, I am having some issues while redirecting traffic to port 80 on the $squid_server. I have this server serving two purpose: apache web server and squid server. I can definately get to the PROXY services fine but cannot get to the WWW (port 80) on the same server. Another issue is

Re: Redundant WAN connections on 2 openBSD firewalls

2008-08-21 Thread Laurent CARON
Giancarlo Razzolini wrote: I did setup several gateways like this, but only on one firewall. With 2 firewalls, you have the additional complexity of ifstated no only checking if the wan link goes down, but you will have to put other thins into account, like the migration of them. ifstated is a st

Re: PF redirection and pflogging

2008-08-21 Thread Imre Oolberg
Hallo! My guess is you dont get anything logged since you pass with rdr rules. Maybe it is cleaner to keep translation and filtering separate, e.g. have translation rules like this rdr on $ext_if proto tcp from any to $webby_ip port 80 -> $webby_server port 80 And then you need to pass not

FYI: Some gloating redditors are currently trolling OpenBSD

2008-08-21 Thread ropers
FYI: Some gloating redditors are currently trolling OpenBSD. See here for the details: http://www.reddit.com/r/programming/comments/6xelo/only_two_remote_holes_in_the_default_install_in/ I feel bad about spreading this nonsense further, but I felt I maybe should give everybody here a heads-up. --

Re: FYI: Some gloating redditors are currently trolling OpenBSD

2008-08-21 Thread ropers
PS: Here is the URL they use to insert the HTML onto the resulting page: http://www.openbsd.org/cgi-bin/cvsweb/src/?sortby=%22%3E%3Ch1%20style=%22position:absolute;top:10px;font-size:150pt%22%3E%3Cblink%3EOnly%202%20Remote%20bugs%3C/blink%3E%3C/h1%3E 2008/8/21 ropers <[EMAIL PROTECTED]>: > FYI: >

Re: FYI: Some gloating redditors are currently trolling OpenBSD

2008-08-21 Thread ropers
> 2008/8/21 ropers <[EMAIL PROTECTED]>: >> FYI: >> Some gloating redditors are currently trolling OpenBSD. See here for >> the details: >> http://www.reddit.com/r/programming/comments/6xelo/only_two_remote_holes_in_the_default_install_in/ >> >> I feel bad about spreading this nonsense further, but

Re: FYI: Some gloating redditors are currently trolling OpenBSD

2008-08-21 Thread Johan Beisser
On Thu, Aug 21, 2008 at 2:39 PM, ropers <[EMAIL PROTECTED]> wrote: > http://www.openbsd.org/cgi-bin/cvsweb/src/?sortby=";> style="position:absolute;top:10px;font-size:150pt">Only 2 > Remote bugs I find it more amusing that it's just injecting HTML in to what's being rendered. CVSWEB has a bug.

Re: Vlan Tag on Vlan Tag (l2tunneling)

2008-08-21 Thread Paul de Weerd
Works for me. (haven't tested this very extensively yet, and only OpenBSD <-> OpenBSD ... nor did I try the tcpdump patches .. will do so later) Thanks Reyk, cool stuff ;) Paul 'WEiRD' de Weerd On Thu, Aug 21, 2008 at 09:34:12PM +0200, Reyk Floeter wrote: | On Thu, Aug 21, 2008 at 04:05:50PM +0

Re: FYI: Some gloating redditors are currently trolling OpenBSD

2008-08-21 Thread dermiste
Impressive. No, really. Not only do they manage to deface cvsweb, but if you use the standard url, everything goes back to normal, meaning their exploit is self-hiding. Plus the files aren't modified, for augmented stealthiness (we're talking ninja-level stealthiness here). Sorry, I can't help you

Re: concerning directin in PF for enc0

2008-08-21 Thread Ryan Corder
On Wed, Aug 20, 2008 at 09:06:14AM +0200, Harald Dunkel wrote: > http://www.kernel-panic.it/openbsd/vpn/vpn3.html#vpn-3.4 > http://www.openbsd.org/cgi-bin/man.cgi?query=enc Ah, very nice. That first one is just what I was looking for. I had the first three sections already defined, b

Re: concerning directin in PF for enc0

2008-08-21 Thread Ryan Corder
On Thu, Aug 21, 2008 at 04:10:30PM -0700, Ryan Corder wrote: | On Wed, Aug 20, 2008 at 09:06:14AM +0200, Harald Dunkel wrote: | > http://www.kernel-panic.it/openbsd/vpn/vpn3.html#vpn-3.4 | > http://www.openbsd.org/cgi-bin/man.cgi?query=enc | | Ah, very nice. That first one is just what I

From address when using mail command

2008-08-21 Thread Chris Bennett
Everything with my sendmail and dovecot works great. But when I occasionally want to send a message using mail command, The From: address ends up as: [EMAIL PROTECTED] This is not a good address that someone can reply to. Where does mail obtain the From address? My best guess right now is perhaps

Re: From address when using mail command

2008-08-21 Thread Aaron W. Hsu
Hello Chris, From [EMAIL PROTECTED] Thu Aug 21 21:28:29 2008 From: Chris Bennett <[EMAIL PROTECTED]> Subject: From address when using mail command Everything with my sendmail and dovecot works great. But when I occasionally want to send a message using mail