automatically rotate isakmpd.pcap

2018-06-28 Thread Federico Donati
Hi all, I'm trying to rotate /var/run/isakmpd.pcap log, keeping 30 days of log files and rotating then everyday. With newsyslog, logs are being rotated, but new file "isakmpd.pcap" is not usable with tcpdump (message is "tcpdump: bad dump file format"). I've also tried to stop isakmpd writi

Re: automatically rotate isakmpd.pcap

2018-06-29 Thread Federico Donati
On 2018-06-28 10:18, Federico Donati wrote: With newsyslog, logs are being rotated, but new file "isakmpd.pcap" is not usable with tcpdump (message is "tcpdump: bad dump file format"). I've also tried to stop isakmpd writing isakmpd.pcap (echo p > isakmpd.fif

using first alias as masquerading ip on pf.conf

2020-02-12 Thread Federico Donati
Hi all, I have a couple of firewalls with carp configured and I need them to reach the Internet even when they are in BACKUP state. I'm managing pf via Ansible/GIT, so I'd like to keep the configuration of pf.conf standard and simple as much as possible. Usually, I use the notation "nat-to ($

rsyslog does not produce log on OpenBSD 6.0

2016-12-17 Thread Federico Donati
Hi all, I've a problem with an OpenBSD 6.0 box with rsyslog. I need to send every local logs to a remote server and I can't use syslogd, because it does not send the hostname of the server (the one indicated in /etc/myname), but on the remote server messages come with the PTR record of my pub

Re: rsyslog does not produce log on OpenBSD 6.0

2016-12-17 Thread Federico Donati
On 12/17/2016 04:57 PM, Remi Locherer wrote: On December 17, 2016 12:07:18 PM GMT+01:00, Federico Donati wrote: Hi all, I've a problem with an OpenBSD 6.0 box with rsyslog. I need to send every local logs to a remote server and I can't use syslogd, because it does not send the h

Re: problem with CARP+VLAN+OpenBSD 5.5

2014-10-14 Thread Federico Donati
On 10/14/2014 06:53 PM, Andy wrote: Why do you have so many CARP interfaces? Generally it's good practice to have one CARP interface per broadcast domain / VLAN etc, and have all your alias IP addresses defined in that one CARP interface. NB; when adding; inet alias Always set the mask for eac

Re: problem with CARP+VLAN+OpenBSD 5.5

2014-10-16 Thread Federico Donati
On 10/15/2014 03:43 PM, Fede wrote: I've removed "defer" from /etc/hostname.pfsync0, and I also added some bpf device (one for every carp I have) with MAKEDEV, as you suggested. Then, I've added "no-sync" to pf, so the running pf.conf is: set skip on lo0 pass quick on em0 proto pfsync keep stat