Re: OpenBSD as a router on Oracle T5120

2014-01-21 Thread Eduardo Meyer
On Tue, Jan 21, 2014 at 5:32 AM, Patrick Lamaiziere wrote: > Le Mon, 20 Jan 2014 18:59:02 -0200, > Eduardo Meyer a écrit : > > > hello, > > > > I am doing some basic testings on the above mentioned scenario and I > > am stuck on some limits which I consider to be very low: I cannot get > > more t

Re: Power consumption of various architectures

2014-01-21 Thread Christian Weisgerber
Juan Francisco Cantero Hurtado wrote: > > How can i find out this numbers? From power block sticker? > > I use a (good) power meter. Don't buy the cheapest one. >From time to time, c't magazine reviews the cheap wattmeters available on the German (~ European) market. Their latest test, in the

Poor CARP Interface Performance with NAT

2014-01-21 Thread Gabriel Kuri
I am running obsd 5.4 as my NAT router. I decided to setup a second obsd box and run carp between the two for the external NATed interface (facing the ISP). After I setup everything and switched pf to NAT using the address on the carp interface, I'm seeing about 12Mbps - 13Mbps on the download, I h

my PF & ICMP Issues

2014-01-21 Thread keith
I have two Firewalls running OBSD 5.4 x64 that are both live and working fine except that they are unable to ping each others IP address or the gateway address while PF is enabled. If I quickly disable PF on the FW-D=Backup then I am able to ping everything from that machine. I've gone over eve

Re: my PF & ICMP Issues

2014-01-21 Thread Christopher Ahrens
keith wrote: I have two Firewalls running OBSD 5.4 x64 that are both live and working fine except that they are unable to ping each others IP address or the gateway address while PF is enabled. If I quickly disable PF on the FW-D=Backup then I am able to ping everything from that machine. I've go

Re: Apache able to open tty

2014-01-21 Thread David Sticht
Ted, Thank you so much for responding. I understand all of the words you used. However, this definitely goes beyond what I have done yet. I will need for the apache server to instigate the request. I imagine I would want a vast majority of the scripting to be run via CGI as normal c

Re: Power consumption of various architectures

2014-01-21 Thread Juan Francisco Cantero Hurtado
On Tue, Jan 21, 2014 at 07:31:14PM +, Christian Weisgerber wrote: > Juan Francisco Cantero Hurtado wrote: > > > > How can i find out this numbers? From power block sticker? > > > > I use a (good) power meter. Don't buy the cheapest one. > > From time to time, c't magazine reviews the cheap

Re: Poor CARP Interface Performance with NAT

2014-01-21 Thread Gabriel Kuri
Also, in case it might help, here's the dmesg output and appropriate hostname.* files from the primary (master): dmesg: OpenBSD 5.4 (GENERIC.MP) #41: Tue Jul 30 15:30:02 MDT 2013 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 2119761920 (2021MB) avail mem = 20

Re: NAT reliability in light of recent checksum changes

2014-01-21 Thread Richard Procter
On 2014-01-15, Stuart Henderson wrote: > On 2014-01-14, Richard Procter wrote: >> >> I've a question about the new checksum changes. [...] >> My understanding is that checksums are now always recalculated when >> a header is altered, never updated. >> >> Is that right and if so has this affect

Re: NAT reliability in light of recent checksum changes

2014-01-21 Thread Henning Brauer
* Richard Procter [2014-01-22 06:44]: > > That is exactly what slides 30-33 talk about. PF now checks > > the incoming packets before it rewrites the checksum, so it can > > reject them if they are broken. > Right -- so NAT now replaces the existing transport checksum > with one newly computed fro

How can limit per ip bandwidth in pf ?

2014-01-21 Thread livemoon
Hi all, I'm using pf as my firewall and authpf as my authenticating gateway.I think it works well. But I have two problem about it: 1. I want to limit per ip(user) bandwidth using ALTQ. I google it and haven't found any command or conf in pf.conf which can do it. My solution is create queue per i

Re: Poor CARP Interface Performance with NAT

2014-01-21 Thread mxb
You PF rules are needed too for this. On 22 jan 2014, at 00:51, Gabriel Kuri wrote: > I am running obsd 5.4 as my NAT router. I decided to setup a second obsd > box and run carp between the two for the external NATed interface (facing > the ISP). After I setup everything and switched pf to NAT u