Helping with Softraid testing

2007-11-16 Thread Chris Cameron
I'm in a good position to test Softraid on an AMD and an UltraSPARC, however I've realized I don't know a lot about it (what -exactly- it's working to accomplish, and commands to use). Is there an overview of Softraid to get me started so I can be of some use? Chris

Re: Helping with Softraid testing

2007-11-16 Thread Chris Cameron
umentation isn't good enough. Can you point me to the area that isn't clear? On Fri, Nov 16, 2007 at 11:29:20AM -0700, Chris Cameron wrote: I'm in a good position to test Softraid on an AMD and an UltraSPARC, however I've realized I don't know a lot about it (what -exactly

Intel Gigabit VT Quad NIC support

2008-01-16 Thread Chris Cameron
I made a mistake and bought a couple Dell servers with Intel "VT" NICs. These aren't recognized by 4.2, and the January 15th Snapshot seems to recognize them, but they're marked as "not configured". So, in the most humble way I possibly can, (without any hint of "demand" I hope) can someone te

dhclient on a Sokeris

2007-03-14 Thread Chris Cameron
I'm trying to setup a Soekris that I can hand to someone and have it work just like a Linksys might. My one snag is grabbing a DHCP address from a server that may always not be there. For instance if they plug the device in, but then don't plug in the network cable until several minutes later.

Wireless access point being flakey

2007-04-09 Thread Chris Cameron
Have a Soekris with and Atheros AR5212. Wirelessly, out to the internet packets get dropped. Wired, out to the internet, no problem. This is with the same laptop using the same outbound internet connection. Wirelessly, from this laptop to the router no packets are dropped. From the router to s

pf_src_connlimit messing things up

2007-05-01 Thread Chris Cameron
I'm getting the following: pf_src_connlimit: blocking address xx.xx.xx.xx, 7 states killed Which is a pretty neat feature except I can't find anything on it, and it's (somewhat) silently doing this. Can someone point me to where I can read about this? I'd like to know how it decides to bloc

Re: pf_src_connlimit messing things up

2007-05-01 Thread Chris Cameron
Stuart Henderson wrote: On 2007/05/01 09:04, Chris Cameron wrote: pf_src_connlimit: blocking address xx.xx.xx.xx, 7 states killed Can someone point me to where I can read about this? I'd like to know how it decides to block the IP, how I can change it and at what point this block time

Website(s) being blocked by CARP/PF firewall

2006-09-07 Thread Chris Cameron
Have two 3.8 firewalls in a CARP setup, and through this firewall I'm unable to get to ticketmaster.ca or .com. They both have different IPs. On the master CARP firewall, with tcpdump on the external interface:

Website(s) being blocked by CARP/PF firewall (2 of 2)

2006-09-07 Thread Chris Cameron
Sorry, hit Ctrl+Enter. 192.168.0.1 - CARP IP 192.168.0.2 - Master firewall IP On the master CARP firewall, with tcpdump on the external interface: Connecting behind firewall: 08:18:30.705631 192.168.0.1.53119 > 209.104.48.144.80: S 4111080674:4111080674(0) win 16384 (DF) [tos 0x10] 08:18:30.

Re: Website(s) being blocked by CARP/PF firewall

2006-09-07 Thread Chris Cameron
On Thu, 2006-09-07 at 10:46 -0400, Asenchi wrote: > On 9/7/06, Chris Cameron <[EMAIL PROTECTED]> wrote: > > Have two 3.8 firewalls in a CARP setup, and through this firewall I'm > > unable to get to ticketmaster.ca or .com. They both have different IPs. > Bu

Post-intrusion forensics

2008-05-08 Thread Chris Cameron
For our Windows/Solaris/Linux servers, we've had PWC say that they're qualified and able to do post-intrusion forensics on our server(s). I'm told this will go a long way in making everyone in our company as well as our customers feel better. Partly because it's an outside party verification of wha

Re: Sun BlackBox

2006-11-01 Thread Chris Cameron
Do you plan to need a trailer full of Sun hardware? They're just normal Sun machines in a trailer. On Wed, 2006-11-01 at 14:55 -0300, Gustavo Rios wrote: > Dear list members, > > While visiting sun blackbox home page, i saw they have a new project > called blackbox. But i don't know whether op

Re: Firewall partially failing with high traffic

2006-11-14 Thread Chris Cameron
On Tue, 2006-11-14 at 15:59 +, Tobias Weingartner wrote: > In article <[EMAIL PROTECTED]>, Chris Cameron wrote: > > > > I have a 3.8 PF/CARP setup that I can reproducibly screw up simply by > > cat'ing lots of text over a telnet session. > > Chances a

Firewall partially failing with high traffic

2006-11-14 Thread Chris Cameron
I have a 3.8 PF/CARP setup that I can reproducibly screw up simply by cat'ing lots of text over a telnet session. It has several subnets, and several NICs, but only 1 subnet becomes unavailable. Everything else continues to work. There are no errors in messages, daemon, with PF debug set to misc.

Re: Firewall partially failing with high traffic

2006-11-14 Thread Chris Cameron
$ sudo pfctl -s memory stateshard limit1 src-nodes hard limit1 frags hard limit 5000 tableshard limit 1000 table-entries hard limit 10 $ Chris On Tue, 2006-11-14 at 13:05 -0500, Carlos A. Carnero Delgado wrote: > Hi, > > On 11/14/0

Re: Firewall partially failing with high traffic (Updated)

2006-11-15 Thread Chris Cameron
Just building off my last message. Answering Ryans questions first: - Do you have dedicated addresses on the carp parent interfaces? For sure. - Are all the carp devices on the master firewall MASTER; what about the backup? Before and after the network dies, primary firewall is all MASTER, se

Re: OpenBSD VPN

2005-06-01 Thread Chris Cameron
http://www.openbsd.org/cgi-bin/cvsweb/~checkout~/www/faq/faq13.html?rev=1.79&content-type=text/html Keep in mind it was removed for a reason (I used it successfully though). Bruce Marriner wrote: I am trying to setup an OpenBSD <> OpenBSD VPN Tunnel to connect two remote offices togeth

"Pausing" firewall

2005-08-21 Thread Chris Cameron
Have an OpenBSD firewall working in an office doing very straight forward NAT and some persistent VPN tunnels. Couple weeks ago, this firewall just stopped responding to any traffic. It was sporadic, as after several minutes it'd start going again. At that point it was a patched Sparc64 3.5.

'set skip on' being inconsistent

2006-04-13 Thread Chris Cameron
In my pf.conf I have: set skip on tun0 set skip on enc0 set skip on lo0 tun0 is for OpenVPN. If I run pfctl -f /etc/pf.conf, I can connect with OpenVPN and telnet to a server. If I disconnect OpenVPN, wait for a couple of minutes, then try connecting with telnet again, pf blocks the connection.

Re: using queues to limit bandwidth

2006-05-01 Thread Chris Cameron
On Mon, 2006-05-01 at 13:02 -0400, Chris Bullock wrote: > Can queues be used to queue overall bandwidth? We have a project where we > will be sharing an Internet connection with another company, we will have an > IP and they will have an IP each company providing their own firewall. I > understan

Compiling BandwidthD

2006-05-09 Thread Chris Cameron
Has anyone recently compiled BandwidthD on OpenBSD? I've been banging my head against this for a while, and it's just one thing after another not working. This is on 3.8/Sparc64, but would be willing to hear from anyone who has done this before. Chris

isakmpd - Two subnets behind 1 server

2006-05-16 Thread Chris Cameron
I have 3 subnets, 192.168.120.x, 121.x and 122.x. 120 and 121 are physically connected, 122 connects through a VPN. In my VPN config, in Phase 2 I have: Local-ID= 120network Remote-ID= 122network As expected, the 120 and 122 networks talk fine, traffic coming from or

3 VPNs, 3 networks, 2 subnets

2005-10-12 Thread Chris Cameron
I'm trying to do something I'm pretty sure I recall reading couldn't be done. Although I wasn't able to find any information this last time around. We're going to be temporarily splitting our data centre, but still want both data centre halfs connected to our office through our VPN. Everyone n

CARP not preempt-ing correctly

2006-01-22 Thread Chris Cameron
When one interface fails in a carp setup, it is my understanding that if net.inet.carp.preempt is set to '1', that both interfaces on the single machine should fail. However I'm not seeing this happening and I'm hoping this is why I'm dropping connections during fail over. If I fail both interf

Re: CARP not preempt-ing correctly

2006-01-22 Thread Chris Cameron
Running 3.8. Chris Daniel Ouellet wrote: Chris Cameron wrote: When one interface fails in a carp setup, it is my understanding that if net.inet.carp.preempt is set to '1', that both interfaces on the single machine should fail. However I'm not seeing this happening and I&#

Preventing breaks on Sparc's

2006-02-05 Thread Chris Cameron
What is it OpenBSD does to prevent breaks/Stop+A from working? Did a net install of 3.8 on a V100 and was playing with RAIDFrame. Trying to get it to boot off the second disk, it refuses to go to an ok prompt. If I unplug both drives, set bootmode to reset_nvram in LOM and boot the machine I

Re: Preventing breaks on Sparc's

2006-02-05 Thread Chris Cameron
Bryan Irvine wrote: If I unplug both drives, set bootmode to reset_nvram in LOM and boot the machine I can use break to get to an ok prompt. However if I plug the drives back in, the instant the OpenBSD boot loader comes up, I again can't get back to an ok prompt. This is while

Hanging Sun V100

2006-03-02 Thread Chris Cameron
Have/had a V100 working as an office firewall. It maintains a VPN connection between itself and another OBSD firewall. All running OBSD 3.8. Both are quite new in their current positions. Previous to this an Ultra2 with 3.5 was doing this job without issue. The V100 twice now has hung without

Re: Will different CPU and RAM matter?

2005-05-05 Thread Chris Cameron
I do this with -very- different computers all the time. As long as you're keeping GENERIC as your kernel, it should be fine. Chris On Thursday 05 May 2005 12:15, you wrote: > Hi All, > > I have a co-located 3.4 web/mail box at a remote location with a P3 > 1.2Ghz and > 1Gb RAM (on-board LAN an

Re: It is 2010. Still no >3GB support by default?

2010-06-08 Thread Chris Cameron
On Mon, Jun 7, 2010 at 9:32 PM, VICTOR TARABOLA CORTIANO wrote: > > Most people that have those big amounts of memory don't use their > PCs full potential. CPU is mostly idle, etc. Also they don't > realize how big those amounts of memory are... > > Also there is the environment problem, too many