openntpd on openbsd on esx

2009-04-14 Thread Clifford Bailey
Hi, I'm trying to run a couple of ntp servers using openntpd on openbsd 4.2 running as a vm on a vmware esx server. My problem is that the machines never seem to become completely stable. They become syncronised, but in 24 hours they may lose syncronisation 2 or 3 times. I was wondering whether a

carp startup timing issues

2008-03-05 Thread Clifford Bailey
Hi, I have a puzzling issue with carp which I wondered whether anyone knew the answer to. I have two carp + pf + pfsync (on openbsd 4.2) boxes in a standard failover configuration (master and backup designated by advskew values). When the master is brought down the failover works nicely. When the

Re: carp startup timing issues

2008-03-06 Thread Clifford Bailey
dvertise 36: vhid=3 advbase=1 advskew=1 demote=0 (DF) [tos 0] 11:35:11.574487 192.168.1.253.1985 > 224.0.0.2.1985:HSRPv0-hello 20: state=active gr4 11:35:11.744881 192.168.0.20 > 192.168.1.101: icmp: echo request 11:35:11.744892 192.168.1.101 > 192.168.0.20: icmp: echo reply On 06/03/2008, Henni

carp vs. ospf ?

2008-03-10 Thread clifford bailey
Hi, Having got a nice redundant firewall setup working with openbsd 4.2 pf + carp + pfsync. My next step was to integrate it with ospf. My initial plan was to continue to treat the firewall pair, as a single 'virtual firewall' within the network and use ospf to advertise routes through just t

Re: carp vs. ospf ?

2008-03-10 Thread clifford bailey
Stuart Henderson wrote: On 2008-03-10, clifford bailey <[EMAIL PROTECTED]> wrote: Having got a nice redundant firewall setup working with openbsd 4.2 pf + carp + pfsync. My next step was to integrate it with ospf. My initial plan was to continue to treat the firewall pair, as a

Re: carp vs. ospf ?

2008-03-10 Thread clifford bailey
clifford bailey wrote: Stuart Henderson wrote: On 2008-03-10, clifford bailey <[EMAIL PROTECTED]> wrote: Having got a nice redundant firewall setup working with openbsd 4.2 pf + carp + pfsync. My next step was to integrate it with ospf. My initial plan was to continue to treat the fi

pfstatd crash?

2008-03-26 Thread clifford bailey
Hi, I've just come across some strange behaviour on pfstatd on openbsd 4.2. If I run nmap against pfstatd, pfstatd stops. Is this expected behaviour or a known bug? It seems a bit weak to me for software that should be running on a firewall. To reproduce it try a straight nmap scan of the ope

Re: pfstatd crash?

2008-03-26 Thread clifford bailey
10468 @man man/man8/pfstatd.8 @md5 d0ef02a879d6ece6cb4ad03188955a92 @size 2793 Alexey Vatchenko wrote: 2008-03-26, clifford bailey <[EMAIL PROTECTED]> wrote: I've just come across some strange behaviour on pfstatd on openbsd 4.2. If I run nmap against pfstatd, pfstatd stops.

Re: pfstatd crash?

2008-03-27 Thread clifford bailey
Thanks Daniel, I'll give that a go! I'm surprised no-one has come across this before, is pfstatd not widely used? I'm looking at using custom snmp traps to gather this information instead, but that also looks like a non-standard method. What do most people use for pf performance monitoring?

ospf unexpectedly changing to EXSTA

2008-08-08 Thread clifford bailey
Hi, I'm having intermittent problems with OSPF running on OpenBSD 4.2. I have two firewalls in an ospf area conversing with a number of Juniper routers. Both OpenBSD boxes are VMs. (This is a test setup hence the use of VMs.) Occassionally and fairly unpredictably I get the following behaviou

Re: ospfd seq num mismatch

2008-08-22 Thread clifford bailey
Mike H wrote: > Hi All, > > I'm having a problem with ospfd on a 4.3 system (dmesg below) and I'm > hoping someone here can suggest something to help me resolve it. > > The problem is that occasionally the system loses all routes learned > via OSPF ('netstat -rn' and 'ospfctl show fib' continue t

Re: ospf unexpectedly changing to EXSTA

2008-08-27 Thread clifford bailey
Jon Simola wrote: On Fri, Aug 8, 2008 at 2:17 AM, clifford bailey <[EMAIL PROTECTED]> wrote: Finally my ospf config: hello-interval 1 router-dead-time 2 Those timings might be a little agressive for VMs to handle, as missing a single hello could cause all so

pf openbsd 4.2 machine stopped responding

2008-07-14 Thread clifford bailey
Hi, I have an openbsd 4.2 pf firewall using a generic, multiprocessor kernel that has been running with no issues for 101 days. Yesterday it stopped forwarding traffic and stopped allowing me to log on via ssh. Unfortunately, although it stopped forwarding traffic, it didn't fail over to its

Re: pf openbsd 4.2 machine stopped responding

2008-07-14 Thread clifford bailey
Hi Stuart, I hadn't set ddb.console to 1 before, so unfortunately this isn't an option. I will do that in future though.. Looks like a hard-reboot is my only option. Thanks, Cliff. Stuart Henderson wrote: > On 2008-07-14, clifford bailey <[EMAIL PROTECTED]> wrote: >