Where to buy SysKonnect NICs in the UK ?

2007-01-02 Thread Gordon Ross
I'm looking for some NICs for some OBSD firewalls. After scanning the archives (and lurking on the list) SysKonnect appear to be a well regarded and supported brand of NIC in the OpenBSD arena. But I can't seem to find any resellers in the UK. Does anyone know of any suppliers in the UK for these

Re: OpenBSD as Virtualbox guest

2007-02-27 Thread Gordon Ross
Buy a CD set http://www.openbsd.org/orders.html ;-) GTG >>> Peter <[EMAIL PROTECTED]> >>> I'm looking for comments from people who have installed OpenBSD 4.0 as a Virtualbox guest. I am currently running Virtualbox 1.3.6 on Gentoo Linux 2006.1. The manual does not mention OBSD as guest even

Re: SCSI, LUNs, and volume sizes

2007-03-18 Thread Gordon Ross
I've been told by a storage vendor that Adaptec isn't totally reliable when it comes to large (>1TB) SCSI devices/partitions/luns. LSI cards are supposed to be a whole lot better. This is irrespective of any O/S limitations. GTG >>> Jacob Yocom-Piatt <[EMAIL PROTECTED]> >>> Steve Fairhead wrote:

Dual Port SysKonnect Card SK-9S22 working yet ?

2007-03-27 Thread Gordon Ross
I bought a SysKonnect SK 9S22 card for use with OpenBSD ('cause the man page claimed it was supported). I've since discovered ( http://archives.neohapsis.com/archives/openbsd/2006-12/1480.html ) that it's not quite supported... A follow-up message ( http://archives.neohapsis.com/archives/openbsd/2

Re: Dual Port SysKonnect Card SK-9S22 working yet ?

2007-03-28 Thread Gordon Ross
>>> On 27 March 2007 at 16:23, in message <[EMAIL PROTECTED]>, "Gordon Ross" <[EMAIL PROTECTED]> wrote: > I bought a SysKonnect SK 9S22 card for use with OpenBSD ('cause the man > page claimed it was supported). I've since discovered ( > http://ar

Re: : : HP ProLiant DL140 G3 problems

2007-05-05 Thread Gordon Ross
>>> On 05 May 2007 at 04:40, in message <[EMAIL PROTECTED]>, Steve Shockley <[EMAIL PROTECTED]> wrote: > Raimo Niskanen wrote: >> Sorry, I can't make it work. For a DL140 G3 (or rather now a DL145 G3). >> >> I remember seing something like that on a DL380, though. >> >> telnet gives a weird prom

Re: Virtual interface

2007-05-24 Thread Gordon Ross
>>> On 24 May 2007 at 08:44, in message <[EMAIL PROTECTED]>, Michael <[EMAIL PROTECTED]> wrote: > Hi, > > since noone seems to either read the mail "sysjail and networking" > because it is to long or got no clue either I'd like to shorten the > question. > > Is it possible to create virtual netwo

Re: openbsd 4.1 install cd hangs at "Realtek 8139"

2007-06-06 Thread Gordon Ross
>>> On 05 June 2007 at 15:26, in message <[EMAIL PROTECTED]>, studio-v <[EMAIL PROTECTED]> wrote: > I'm trying to install openbsd 4.1 on a firewall server. I'm using the > cd41.iso. The problem is that when the computer boots from cd (in order to > install), it hangs about halfway through. This is

Re: em Intel 1000 GT

2007-06-28 Thread Gordon Ross
>>> On 28 June 2007 at 11:18, in message <[EMAIL PROTECTED]>, JD Bronson <[EMAIL PROTECTED]> wrote: > Someone posted on one of these lists asking about if this card works on > 4.1... > I dont recall seeing any reply.. OpenBSD 4.1-stable (GENERIC) #2: Tue May 8 16:48:20 BST 2007 em0 at pci7 dev 4

PF Config problem

2007-07-19 Thread Gordon Ross
I've got two OBSD 4.1 boxes. They are setup identically, and I'm using CARP (& pfsync) to obtain a redundant firewall. I appear to have CARP working fine. My problem is when I enable pf. The initial TCP packet goes through fine, but the return packet gets blocked. (I have verified this by putting "

Re: PF Config problem

2007-07-19 Thread Gordon Ross
So why is this different to what I put ? #These three lines allow the failover mechanisms to work pass on { $int_if } proto carp keep state pass on { $adsl_if } proto carp keep state pass quick on { $pfsync_if} proto pfsync The only difference I can see, is that your lines would allow CARP on the

Re: PF Config problem

2007-07-20 Thread Gordon Ross
>>> On 19 July 2007 at 23:52, in message <[EMAIL PROTECTED]>, Stuart Henderson <[EMAIL PROTECTED]> wrote: > On 2007/07/19 15:38, Gordon Ross wrote: >> Cutting down the pf ruleset to the bare minimum, I have: > > Might be below the minimum; there's no expl

Re: PF Config problem

2007-07-20 Thread Gordon Ross
>>> On 19 July 2007 at 18:55, in message <[EMAIL PROTECTED]>, Dag Richards <[EMAIL PROTECTED]> wrote: > Gordon Ross wrote: >> So why is this different to what I put ? >> >> #These three lines allow the failover mechanisms to work >> pass on { $int_

Re: PF Config problem

2007-07-20 Thread Gordon Ross
>>> On 19 July 2007 at 23:52, in message <[EMAIL PROTECTED]>, Stuart Henderson <[EMAIL PROTECTED]> wrote: > On 2007/07/19 15:38, Gordon Ross wrote: >> Cutting down the pf ruleset to the bare minimum, I have: > > Might be below the minimum; there's no expli

Re: PF Config problem

2007-07-20 Thread Gordon Ross
>>> On 20 July 2007 at 10:04, in message <[EMAIL PROTECTED]>, Stuart Henderson <[EMAIL PROTECTED]> wrote: > On 2007/07/20 08:45, Gordon Ross wrote: >> > Might be below the minimum; there's no explicit "pass out". >> >> No, the packets

Binat not NATing source IP Address

2008-04-25 Thread Gordon Ross
I have a simple host, with two interfaces INT & EXT INT has the IP address of 192.168.1.1/24 EXT has the IP address of 192.168.2.1/24 I've enabled PF with one simple rule: binat pass on EXT from 192.168.1.2 to any -> 192.168.2.2 Packets are flowing through, and the destination is getting re-wri

Re: Binat not NATing source IP Address

2008-04-25 Thread Gordon Ross
>>> On 25 April 2008 at 11:40, in message <[EMAIL PROTECTED]>, Stuart Henderson <[EMAIL PROTECTED]> wrote: > Try something like this: > > # rdr proto tcp from any to a port 9000 -> x port 80 > # nat from !a to x -> a The problem with this, is that I don't know all the ports tha

Setting up IPSEC VPN to Cisco IOS (Old fashioned way)

2006-10-06 Thread Gordon Ross
I'm trying to setup an IPSEC connection between OpenBSD3.9 & Cisco IOS 12.3 using pre-shared keys authentication the "old fashioned way". (One step at a time) However, I can't get the tunnel to come up. Looking at the output from isakmpd -DA=90 (Full text below) I *suspect* the culprit is about h

Kernel Panic in 3.7

2005-07-18 Thread Gordon Ross
56MB RAM, with 512MB swap. I tried a google, but only found reference to older versions of OpenBSD. Is there anything else I should provide ? Anything else I should do if it happens again ? GTG Gordon Ross, Network Manager/Rheolwr Rhydwaith Countryside Council for Wales/Cyngor Cefn Gwlad Cymru

Re: Kernel Panic in 3.7

2005-07-19 Thread Gordon Ross
So that's what the kernel panic really means: Out of memory ? GTG >>> Ted Unangst <[EMAIL PROTECTED]> 19/07/2005 03:36 >>> On Mon, 18 Jul 2005, Gordon Ross wrote: > I've got an OpneBSD 3.7 machine (no patches - just the standard 3.7 CD > install) running

Disable IPv6 on 3.7

2005-07-25 Thread Gordon Ross
Is it possible to disable IPv6 on OpenBSD 3.7 without building a custom kernel ? Thanks, GTG Gordon Ross, Network Manager/Rheolwr Rhydwaith Countryside Council for Wales/Cyngor Cefn Gwlad Cymru

Trying to get little brain round NAT/Routing & pf

2005-07-27 Thread Gordon Ross
ny difference. If I disable pf, then everything works fine (so I know routing tables, etc are correct) Can someone help me out here ? Am I aproaching this the right way or is there a "better" way to do this ? Thanks, GTG Gordon Ross, Network Manager/Rheolwr Rhydwaith Countryside Council for Wales/Cyngor Cefn Gwlad Cymru

Re: Trying to get little brain round NAT/Routing & pf - SOLVED

2005-07-27 Thread Gordon Ross
>>>> Stuart Henderson <[EMAIL PROTECTED]> 27/07/2005 11:37:54 >>> >--On 27 July 2005 10:19 +0100, Gordon Ross wrote: >> I'm trying to get a simple pf setup working, but I'm missing >> something.. >> >> I have three hosts, Alice, Bob &

Public Key Authentication Vs X509 Authentication system

2006-03-29 Thread Gordon Ross
I'm looking to setup a VPN system linking OpenBSD, Cisco & Linux. I've got the OpenBSD/Linux interrop working in the lab with X509 certs (Haven't started on the Cisco side yet) I'd like to clarify the difference between Host Keys & X509 Certs. As I understand it, using Host Keys, the "client" gen

Can install 3.8, but not boot 3.8 (3.7- worked fine)

2005-11-17 Thread Gordon Ross
We've got several VIA based micro ATX systems here. We've been using OpenBSD on them for years now, and never had any problems. Today, I installed 3.8 (from the official CDs) and this went fine. I then rebooted the system off of the HD, and the boot started, but stopped at "sysbeep0 at pcppi0" I

Re: Can install 3.8, but not boot 3.8 (3.7- worked fine)

2005-11-17 Thread Gordon Ross
>>> On 17 November 2005 at 12:21:27, in message <[EMAIL PROTECTED]>, [EMAIL PROTECTED] wrote: > On 11/17/05, Nick Holland <[EMAIL PROTECTED]> wrote: >> Gordon Ross wrote: >> > We've got several VIA based micro ATX systems here. We've been using

x509 keys & isakmpd in OBSD 3.8

2005-12-16 Thread Gordon Ross
Hi, I'm trying to setup an isakmpd VPN using x509 keys between two OpenBSD 3.8 boxes. To start with, I followed the instructions at http://www.openbsdsupport.org/vpn-ipsec.html to setup an initial VPN using pre-shared secrets. This works fine. Now, I want to switch over to x509 keys. Googling f

Re: x509 keys & isakmpd in OBSD 3.8

2005-12-16 Thread Gordon Ross
>>> On 16 December 2005 at 10:55:53, in message <[EMAIL PROTECTED]>, Hans-Joerg Hoexer <[EMAIL PROTECTED]> wrote: > Hi, > > On Fri, Dec 16, 2005 at 09:48:06AM +, Gordon Ross wrote: >> I'm trying to setup an isakmpd VPN using x509 keys between two Open

Re: pf and two ADSL links

2005-12-19 Thread Gordon Ross
>>> On 19 December 2005 at 15:39:44, in message <[EMAIL PROTECTED]>, Craig Skinner <[EMAIL PROTECTED]> wrote: > Unfortunately, 2 ADSLs/SDSL cannot provide high availability due to the same > infrastructure being used. > > If you need redundancy, try a DSL and a cable TV broadband or leased line.

Unable to boot 3.8 after install - take 2

2006-01-05 Thread Gordon Ross
Last year I posted a message to the list about being unable to book a box into 3.8 after installing it, even though OpenBSD 3.4-3.7 had worked fine (http://archives.neohapsis.com/archives/openbsd/2005-11/1442.html) The last suggestion was to attach a serial console and do a verbose boot. I never g

OpenBSD & Realtek NICs

2006-01-13 Thread Gordon Ross
quot;Realtek 8139 based cards are hated by programmers, and loved by users" Is this advice still current (The page has a date of 6/7/2001) Should I look to dump my mobos with Realtek NICs and switch to other NICs (would Intel NICs be OK ?) Thanks, GTG -- Gordon Ross, Network Manager/Rh

Re: OpenBSD & Realtek NICs

2006-01-13 Thread Gordon Ross
>>> On 13 January 2006 at 15:20:46, in message <[EMAIL PROTECTED]>, Nick Holland <[EMAIL PROTECTED]> wrote: [big snip] >> Should I look to dump my mobos with Realtek NICs and switch to other >> NICs (would Intel NICs be OK ?) > > I think your problem has nothing to do with the brand of the NIC. >

Re: Error while install turck-mmcache

2006-02-28 Thread Gordon Ross
It can install successfully, but when i active it, i restart apache, but = it(apache) stop automaticly in several minutes . > hi [EMAIL PROTECTED] > > I want to install mediawiki-1.5.6 on OpenBSD 3.8 release, and want = to > use turck-mmcache to speed up the php, but i got an error messag