Re: How do I monitor my PF based firewall?

2009-03-04 Thread Ryan Corder
sions (I use OpenBSD 4.4 -stable and the > included snmpd). Can you please give me a hint into the right direction? symon - it's in ports. It doesn't fit the SNMP bill, but it will give you rrd files that cacti could use. -- Ryan Corder || () ASCII ribbon camp

Re: Real men don't attack straw men

2007-12-11 Thread Ryan Corder
I'm a very happy user of both OpenBSD and GNU/Linux systems, but what I don't get is, how is limiting a users choice in what he/she runs on his/her system more free than one that doesn't? Absolute freedom is to be able to do whatever the hell you want to with no limitations placed on you whatsoev

spamd configuration

2008-01-17 Thread Ryan Corder
I'm trying to make the banner from my mail server and the banner from spamd sitting in front of it match, so that it appears that you are connecting to the same machine regardless of where spamd sends you. On my mail server, it looks like this: 220 mail.greengrey.org ESMTP smtpd On spamd, I've

Re: looking for openbsd friendly server vendor

2008-01-28 Thread Ryan Corder
On Sun, Jan 27, 2008 at 12:25:40PM -0800, Lord Sporkton wrote: | Im about to buy a small server, mostly for personal use | looking for a 1u | | was hoping to find some vendors that are openbsd friendly | if they offer more than just i386 that is a plus as im investigating | other archs as a possib

Re: Server room temperature sensors

2008-02-10 Thread Ryan Corder
On Wednesday, 06.02.2008 at 23:07 -0800, Joe wrote: | Can anyone recommend a server room temperature sensor that I can use | with openbsd? | | I want to monitor temperature and humidity. | | I hope to graph the data from the sensor. | | The sensor can be connected to my openbsd via usb, serial, or

Re: Remote syslog

2008-02-19 Thread Ryan Corder
On Tue, Feb 19, 2008 at 09:42:43PM -0700, Steve B wrote: | My employer has given me some free colo space and I thought I would take | advantage of it to do remote system logging. Those of you here who are doing | it, could you comment on whether you are using Syslog-NG or something else, | and whet

Re: syslog-ng and log analyzers

2008-02-20 Thread Ryan Corder
On Wed, Feb 20, 2008 at 08:32:31AM -0800, Rami Sik wrote: | I would like to see what you'd suggest as a log analyzer tool(s) on a | centralized log server running syslog-ng. | | I also need to use a specific tool as PF log analyzer. What do you | suggest for that purpose? I prefer to use a log no

Re: syslog-ng and log analyzers

2008-02-20 Thread Ryan Corder
On Wed, Feb 20, 2008 at 11:12:06AM -0800, Kian Mohageri wrote: | Another vote for Tenshi. Probably the best way to do it with | syslog-ng is to have syslog-ng forward logs to Tenshi (listening on | loopback) because otherwise Tenshi won't be able to follow the logs | (if you organize them by date,

Re: User authentication

2007-01-05 Thread Ryan Corder
in LDAP, in a not so round-about way, but without the benefits of a ticket system. later. ryanc -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 501-219- ext. 646 [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

ftp-proxy and old ftp-proxy co-mingling

2007-01-11 Thread Ryan Corder
traffic coming from the 4.0 firewall. As of last night, it was, but not since the move of 4.0. is there something different about the way that the 4.0 ftp-proxy translates that would make the 3.8 ftp-proxy not act the same? TIA, ryanc -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer,

Re: Where do sshd write?

2007-02-05 Thread Ryan Corder
e '-v' switch to ssh? it might shed some light on why the server is disconnecting you. later. ryanc -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 501-219- ext. 646 [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

ftp though ftp-proxy timeouts

2007-02-14 Thread Ryan Corder
- is anyone else experiencing anything similar? TIA. ryanc -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 501-219- ext. 646 [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

Re: A question on pf rules

2007-02-20 Thread Ryan Corder
ly defined. if you want rule defined and there to be no chance that a later rule can alter it, add the 'quick' keyword. later. ryanc -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 501-219- ext. 646 [demime 1.01d removed an attachment of type applicat

4.0 msmtp port

2007-02-21 Thread Ryan Corder
does anyone know why GSSAPI authentication has been disabled on the port of msmtp in 4.0? thanks. ryanc -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 501-219- ext. 646 [demime 1.01d removed an attachment of type application/pgp-signature which had a n

Re: 4.0 msmtp port

2007-02-22 Thread Ryan Corder
On Wed, 2007-02-21 at 20:05 -0700, Darren Spruell wrote: > On 2/21/07, Ryan Corder <[EMAIL PROTECTED]> wrote: > > does anyone know why GSSAPI authentication has been disabled on the port > > of msmtp in 4.0? > > Might be a good question for ports@ and (if not ports@)

Re: i cannot understand GSSAPI/ SSH(openbsd 4.0): i am desperated

2007-03-12 Thread Ryan Corder
KerberosTicketCleanup yes ChallengeResponseAuthentication, HostbasedAuthentication, PasswordAuthentication, and PubkeyAuthentication can all be set to 'no' to turn them off. However, I would suggest that you leave at least one alterntive authentication method on in case your Kerberos ever gets hosed or the t

Re: i cannot understand GSSAPI/ SSH(openbsd 4.0): i am desperated

2007-03-12 Thread Ryan Corder
On Mon, 2007-03-12 at 17:06 -0300, Gustavo Rios wrote: > He is still able to login. I believed since "KerberosAuthentication > no" he should not login. > What am i during wrong ? it is probably using GSSAPIAuthentication and not KerberosAuthentcation. -- Ryan Corder <[EMA

Re: i cannot understand GSSAPI/ SSH(openbsd 4.0): i am desperated

2007-03-13 Thread Ryan Corder
ers set to 'no'. also, combine this with auth=passwd in /etc/login.conf and you get a system where the users are authenticated against Kerberos but denied otherwise unless the explictely have a password set in /etc/passwd. -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys H

weird PF behavior

2007-03-14 Thread Ryan Corder
any port on the 10.0.3.0/24 subnet. the way the two pass rules are written, I was thinking that I would be able to connect to anything EXCEPT the subnets listed in and . what am I missing here? thanks. ryanc -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 5

Re: weird PF behavior

2007-03-15 Thread Ryan Corder
t on the 'pass in' rule on my internal interface. so, shouldn't these be getting evaluated? thanks. ryanc -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 501-219- ext. 646 [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

Re: weird PF behavior

2007-03-15 Thread Ryan Corder
On Thu, 2007-03-15 at 15:32 +, Stuart Henderson wrote: > On 2007/03/15 10:25, Ryan Corder wrote: > > On Thu, 2007-03-15 at 01:39 +, Stuart Henderson wrote: > > > feed the rule into "pfctl -nvf -" and see how it's expanded. > > > > basically wh

Re: weird PF behavior

2007-03-15 Thread Ryan Corder
t you can't nest tables > so it's probably more work to maintain. which is too bad. alternatively, I did this and it seemed to work pass out on bge0 from to { any, ! } pass out on bge0 from to { any, ! } -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Heal

Re: weird PF behavior

2007-03-16 Thread Ryan Corder
On Fri, 2007-03-16 at 11:09 +0100, Alexander Hall wrote: > Ryan Corder wrote: > > > alternatively, I did this and it seemed to work > > > > pass out on bge0 from to { any, ! } > > pass out on bge0 from to { any, ! } > > The above is an overkill equivalent to

Re: weird PF behavior

2007-03-16 Thread Ryan Corder
defining a table, {} is treated differently than when it is used in a rule? now. given that I have a default block all rule, is it possible to allow out ALL traffic EXCEPT those packets bound for the addresses listed in the and tables without the need for more block rules? thanks. ryanc -- Ryan

Re: weird PF behavior

2007-03-16 Thread Ryan Corder
se be collapsed to > >block out on bge0 from to { , } thank you, that is what I wanted to know. Does the situation require extra block rules? The answer is yes and I know that for future reference. Thank you, Marco, for getting straight to the question at hand. -- Ryan Corder <[EM

Re: weird PF behavior

2007-03-16 Thread Ryan Corder
hat I'm NOT looking for: block log all pass in on bge1 from to any keep state pass out on bge0 from to any keep state block out on bge0 from to keep state block out on bge0 from to keep state ==== this accomplishes what I want, but I feel the use of more block statements pas

Re: Beep!

2007-04-10 Thread Ryan Corder
On Tue, 2007-04-10 at 07:53 -0700, Manuel Ravasio wrote: > I'm creating some shell scripts for various administrative purposes, and I'd > really like to add some kind of command at the end of each in order to have > the pc speaker BEEP when the script is over. \b --

Re: Beep!

2007-04-10 Thread Ryan Corder
On Tue, 2007-04-10 at 18:52 +0200, Almir Karic wrote: > isn't \b a backspace? oh yeah, oops. meant to say \a I guess -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 501-219- ext. 646 [demime 1.01d removed an attachment of type application/pgp-signatur

Re: kerberos debugging troubles

2006-07-10 Thread Ryan Corder
ally allows for a 5 minute difference in time on the communicating hosts but can be changed with the 'clockskew' setting in your krb5.conf. later. ryanc -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 501-219- ext. 646

Re: web based FTP client?

2006-07-19 Thread Ryan Corder
ht not work as web browsers don't tend to know anything about passive mode FTP and instead use active mode for everything. later. ryanc -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 501-219- ext. 646

Re: WPA support / creating a cf image

2006-08-03 Thread Ryan Corder
get past the notion of "secure" wireless...it doesn't exist. The best solution for a "more secure" wireless network is for you to implement a WEP-encrypted environment and establish a VPN over it. later. ryanc -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSy

Re: WPA support / creating a cf image

2006-08-03 Thread Ryan Corder
link to a wrapper script that allows you to create an image. later. ryanc -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 501-219- ext. 646 [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

Re: WPA support / creating a cf image

2006-08-03 Thread Ryan Corder
On Thu, 2006-08-03 at 23:27 +1000, Shane J Pearson wrote: > What about an open wireless network, which does not allow anything to > be routed out of the OpenBSD WAP unless it is authpf authorised. Then > only VPN traffic. exactly...that would be ideal. -- Ryan Corder <[EMAIL PROTECT

Re: WPA support / creating a cf image

2006-08-03 Thread Ryan Corder
very cf-card. Any idea? I don't want to switch to > freebsd... no, it is a limitation of the software used to create the image, not OpenBSD. It collects C/H/S information as part of the build, therefore will only work with a CF of that size. maybe time to roll your own. -- Ryan Corder &l

Re: WPA support / creating a cf image

2006-08-03 Thread Ryan Corder
o is actually gaining access. AuthPF (ideally with OTP), in this case would add that authorization. -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 501-219- ext. 646 [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

Re: WPA support / creating a cf image

2006-08-03 Thread Ryan Corder
be nice is for similar script or program that just gathered everything up that is required for the system to run and create an image out of that. Let the user handle setting up the individual CF cards and just provide an image of the "hard drive" contents to be flashed over via dd. -- Ryan

Re: Active Directory authentication

2006-08-15 Thread Ryan Corder
et your auth_defaults in /etc/login.conf: auth-defaults:auth=krb5-or-pwd,skey this is assuming you want to fallback on a password in your shadow file and then onto skey. Of course, make sure you have Kerberos set up properly in your /etc/kerberosV/krb5.conf file. later. ryanc -- Ryan Corder <[EM

Re: OpenBSD-current (Changelog): Disable Speedstep and p4tcc setperf mechanisms on SMP systems

2006-08-22 Thread Ryan Corder
at the devs disabled it, but it wouldn't suprise me if it were. later. ryanc -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 501-219- ext. 646 [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

Re: Is it possible that source spoof IP bypass the three step handshake of the TCP connection to apache in an attack?

2006-08-24 Thread Ryan Corder
ll those connections with no content. IE is trying to perform it's "quick" connect and transfer hoping that you are running IIS, only to be told from your webserver to try again correctly. later. ryanc -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Hea

Re: Dsniff ports failure

2006-08-24 Thread Ryan Corder
On Wed, 2006-08-23 at 21:53 -0700, Edward Ray wrote: > It has been awhile since I used ports, and have not kept up on the latest > OpenBSD stuff. What and where are packages? everything that is in ports, just compiled for you already. check your local mirror. later. ryanc -- Ryan

Re: Is it possible that source spoof IP bypass the three step handshake of the TCP connection to apache in an attack?

2006-08-24 Thread Ryan Corder
ock in quick on $ext_if inet from pass in on $ext_if proto tcp from any to any port 80 \ flags S/SA synproxy state (max-src-conn 100, \ max-src-conn-rate 15/5, \ overload flush) later. ryanc -- Ryan Corder <[EMAIL PROTECTED]

concerning directin in PF for enc0

2008-08-19 Thread Ryan Corder
I'm setting up an IPSec tunnel and in PF, I'm not skipping on enc0 (i.e. no 'set skip on enc0'). I'm curious to how direction is specified on enc0 when routing traffic. My scenario is like this: remote box --> (IPSec tunnel) --> OpenBSD firewall --> OpenBSD server I want to send all my logs fro

Re: concerning directin in PF for enc0

2008-08-21 Thread Ryan Corder
On Wed, Aug 20, 2008 at 09:06:14AM +0200, Harald Dunkel wrote: > http://www.kernel-panic.it/openbsd/vpn/vpn3.html#vpn-3.4 > http://www.openbsd.org/cgi-bin/man.cgi?query=enc Ah, very nice. That first one is just what I was looking for. I had the first three sections already defined, b

Re: concerning directin in PF for enc0

2008-08-21 Thread Ryan Corder
On Thu, Aug 21, 2008 at 04:10:30PM -0700, Ryan Corder wrote: | On Wed, Aug 20, 2008 at 09:06:14AM +0200, Harald Dunkel wrote: | > http://www.kernel-panic.it/openbsd/vpn/vpn3.html#vpn-3.4 | > http://www.openbsd.org/cgi-bin/man.cgi?query=enc | | Ah, very nice. That first one is just

Re: scrubbing problem(s) with pf

2008-09-09 Thread Ryan Corder
On Tue, Sep 09, 2008 at 12:11:04PM -0500, Vijay Sankar wrote: | scrub in | scrub out on $ext_if max-mss 1440 | | has worked very well for me with my ISP. I am very interested in hearing about | other ways of dealing with DSL connectivity. scrub on $ext_if reassemble tcp scrub in on $ext_if

Re: Patching a SSH 'Weakness'

2008-09-11 Thread Ryan Corder
On Thu, Sep 11, 2008 at 11:49:39AM -0400, (private) HKS wrote: | Also, tab-completion won't work, top won't work, control characters | won't work, vim won't work, etc etc... I'm glad someone brought up this point.

Re: 3ware hardware raid support?

2008-09-15 Thread Ryan Corder
On Mon, Sep 15, 2008 at 03:12:29PM +0200, Harald Dunkel wrote: > AFAICS the arc-1210 comes with a fan. Is there an integration > with sensorsd? Not as of 4.3. The only thing I get related to my ARC-1210 out of sensors is: hw.sensors.arc0.drive0=online (sd0), OK I would also like to help wit

Re: 3ware hardware raid support?

2008-09-15 Thread Ryan Corder
On Mon, Sep 15, 2008 at 09:41:42PM +0200, Henning Brauer wrote: | maybe by reading the bioctl manpage? your bioctl usage is completely | off. way off. | (ok, I give you a treaty: bioctl arc0) Fair enough, being a bad user is no excuse. This got my alarm reporting, but what is with the error?

Re: 3ware hardware raid support?

2008-09-17 Thread Ryan Corder
On Tue, Sep 16, 2008 at 09:10:48AM +1000, Jonathan Gray wrote: | This sounds like the new firmware, but I can't see a dmesg | from you to figure out if this is the case for sure. arc0 at pci2 dev 14 function 0 "Areca ARC-1210" rev 0x00: apic 2 int 18 (irq 5) arc0: 4 ports, 256MB SDRAM, firmware V1

Re: SSD drives: performance gain

2008-04-15 Thread Ryan Corder
On Mon, Apr 14, 2008 at 06:52:06PM -0500, Jacob Yocom-Piatt wrote: > am considering acquiring some machines with SSD drives, e.g. thinkpad X300, > and was interested to hear about any experiences with openbsd on an SSD > drive. As of last week, the T61 is available with the same drive that comes

Re: MaraDNS Issue

2008-06-17 Thread Ryan Corder
On Tue, Jun 17, 2008 at 01:11:16AM -0700, Peter_APIIT wrote: | Below is my configuration : | /etc/mararc | Quote: | ipv4_bind_address="172.16.10.1" | chroot_idr = "/etc/maradns" | recursive_acl="172.16.10.10" | hide_disclaimer="yes" | no_fingerprint="yes" | verbose_level=3 | timeout_seconds=3 | ups

problems with Areca ARC-1200

2008-07-13 Thread Ryan Corder
36 head, 480 sec, 512 bytes/sec, 976562176 sec total any thoughts? Is the RAMDISK_CD on 4.3 that much different from GENERIC? I looked in CVS and saw that both 'arc* at pci?' and 'scsibus* at arc?'. What am I missing? thanks. ryanc -- Ryan Corder [EMAIL PROTECTED]

Re: problems with Areca ARC-1200

2008-07-14 Thread Ryan Corder
BSD_4_3. The only change since release has been the addition to control the LEDs via bioctl. So, is it the firmware? the definition in pcidevs? I'm just baffled as to why the card shows up but the drives don't. I really, really don't want to keep Linux on this machine, so _any_ help is

which to donate? (WAS: Re: problems with Areca ARC-1200)

2008-07-16 Thread Ryan Corder
On Mon, Jul 14, 2008 at 10:06 PM, Ryan Corder <[EMAIL PROTECTED]> wrote: > So, is it the firmware? the definition in pcidevs? I'm just baffled > as to why the card shows up but the drives don't. > > I really, really don't want to keep Linux on this machine, so _a

Re: FTP Account Lockout

2006-10-06 Thread Ryan Corder
mers apply...your server will only be as "secure" (if you can call FTP secure) as your custom authentication program is. hope this helps. ryanc -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 501-219- ext. 646 [demime 1.01d removed an attachment of t

no login prompt on tty00

2006-10-16 Thread Ryan Corder
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo fdc0 at isa0 port 0x3f0/6 irq 6 drq 2 biomask ff65 netmask ff65 ttymask ffe7 pctr: user-level cycle counter enabled dkcsum: sd0 matches BIOS drive 0x80 root on sd0a rootdev=0x400 rrootdev=0xd00 rawdev=0xd02 thanks in advance. ryanc -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 501-219- ext. 646 [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

Re: no login prompt on tty00

2006-10-16 Thread Ryan Corder
Linux (agetty on Gentoo) acts a little different as it seems to take over once the machine has finished booting. so I guess I'm just SOL? -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 501-219- ext. 646 [demime 1.01d removed an attachment of type application

Re: no login prompt on tty00

2006-10-17 Thread Ryan Corder
an manage all my machines instead of via SSH. The console is still the default, as in keyboard/monitor setup. thanks. ryanc -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 501-219- ext. 646 [demime 1.01d removed an attachment of type application/pgp-signatur

Re: krb5 login help

2006-10-24 Thread Ryan Corder
r Kerberos server in DNS? is your time synced (within 5 min.) with the Kerberos server? -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 501-219- ext. 646 [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

Re: OpenBSD 3.9, fxp, SLOW network performance...

2006-11-08 Thread Ryan Corder
better since they are meant to handle a higher load. slow PCI bus + cheap NIC = high interrupt load == slow throughput. later. ryanc -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 501-219- ext. 646 [demime 1.01d removed an attachment of type application/pgp-sig

Re: failedlogin

2006-11-17 Thread Ryan Corder
ference to > 3.7 COLUG[0] post. it is read on login and displays to you whether there were any login failures since your last successful one. there is no tool that I know of to read it directly > ttyC0 > X]E probably they last TTY you logged in on. later. ryanc -- Ryan Corder <[

ftp-proxy clarification

2006-11-28 Thread Ryan Corder
r does ftp-proxy handle all of that via the anchors? thanks in advance. ryanc -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 501-219- ext. 646 [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

vpn difficulties

2006-11-30 Thread Ryan Corder
s some glaringly obvious step or configuration that I've missed. from what I've gathered, this should have been really easy to do...I just think I'm to that point where even if there was something really wrong staring back at me I wouldn't see it because I've been lo

Re: vpn difficulties

2006-12-04 Thread Ryan Corder
t is a good way to test a host 2 host VPN? Since I'm not routing two different networks across the VPN, there is nothing easy to test like pinging a host on the other end of the tunnel. TIA. ryanc -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 501-219- ext.

Re: vpn difficulties

2006-12-04 Thread Ryan Corder
nf based setup that tunnels from one > computer to another. if you can't find one, i can send a link later today. now, I got the tunnel setup just fine using just ipsec.conf. I was just curios if there was a quick and simple way to to test traffic through the tunnel since it is just a h

Re: vpn difficulties

2006-12-05 Thread Ryan Corder
92.168.2.5 trying to ping the other's address doesn't go out via the enc0 interface, but the regular bge0 default interface. or am I completely wrong on this one? TIA, ryanc -- Ryan Corder <[EMAIL PROTECTED]> Systems Engineer, NovaSys Health LLC. 501-219- ext. 646 [demime 1.01d

Re: Low power, 1U devices

2005-06-02 Thread Ryan Corder
On Thu, 2005-06-02 at 12:40 -0700, Steven Bowers wrote: [snip] > call a Nexgate 1041 which is close to what I'm looking for, but would > prefer one of the low power VIA boards instead. Commell board (or with case) at bwi.com: http://bwi.com/product/10533/ later. ryanc

Re: Printers?

2005-06-20 Thread Ryan Corder
On Sat, 2005-06-18 at 11:58 -0700, Brian wrote: > I would be looking for laser printer under $300. > > Any suggestions? check out the HP LaserJet 1012 or 1320. I have a 1012 myself at home and there are several 1320 models deployed at work. The 1012 can be had for US $199 and the 1320 is curren

problem with ftp-proxy

2005-07-06 Thread Ryan Corder
'lo all. i recently ran into a small issue with ftp-proxy running on my firewall...I definately know this is a misconfiguration problem as I have had this working as of yesterday. when I attempt to connect to a FTP site from behind the firewall, I do get an initial connection, but then am immedia

Re: problem with ftp-proxy

2005-07-06 Thread Ryan Corder
On Wed, 2005-07-06 at 14:08 -0500, Shawn K. Quinn wrote: > I'll give you a hint: this error message means exactly what it says. yeah, figured it out about 2 minutes after I posted but didn't want to reply to myself. thanks, ryanc

Re: Major Surprise with xdm on 3.7

2005-08-16 Thread Ryan Corder
Matthias Kilian wrote: > Indeed, very secure. If I've physical access to your laptop, all I > need is a screwdriver to open it, pull out the disk and connect it > to another machine. not *completely* related, but I have the following alias that I use to start X from the console: alias startx='/

Re: 1U server recommendation

2005-08-24 Thread Ryan Corder
Diana Eichert wrote: > Bob Sidhu has always been very helpful to me in the past. Iron Systems > even helped me out in one of the hardware fundraisers I did or maybe they > actually provided hardware, gee I can't remember. I too have been getting quotes from them the past few days. Although I can

Re: Beefier alternative to soekris 4801 for openbsd router?

2005-05-11 Thread Ryan Corder
On Wed, 2005-05-11 at 19:53 +0900, Mark Uemura wrote: > > I purchased the Commell board in a case designed for it, there is an > > access panel for the CF socket. The PCI slot becomes unusable in the > > case. The board I purchased also uses the Intel NIC's for 3/100M & 1/1G > > NICs. We purchas

Re: Beefier alternative to soekris 4801 for openbsd router?

2005-05-11 Thread Ryan Corder
On Wed, 2005-05-11 at 19:53 +0900, Mark Uemura wrote: > > I purchased the Commell board in a case designed for it, there is an > > access panel for the CF socket. The PCI slot becomes unusable in the > > case. The board I purchased also uses the Intel NIC's for 3/100M & 1/1G > > NICs. We purchas

Re: Beefier alternative to soekris 4801 for openbsd router?

2005-05-13 Thread Ryan Corder
On Wed, 2005-05-11 at 16:02 -0600, Diana Eichert wrote: > I purchased mine from http://www.bwi.com/ . Bob was always very helpful > in getting any questions I had answered. thanks! ryanc

Re: error messages

2005-05-16 Thread Ryan Corder
On Mon, 2005-05-16 at 18:45 +0300, Kaj Mdkinen wrote: > I connect to my firewall with putty. How can I get rid of messages like > these from > appearing in my ssh terminal session? check your /etc/syslog.conf to see if errors, etc are being sent to specific users. by default, *.errors, *.notic

Re: error messages

2005-05-16 Thread Ryan Corder
On Mon, 2005-05-16 at 22:34 +0200, Stefan Kell wrote: > Hi, > > I would change the sshd-port from 22 to something different. This way the > attack would run into nirvana. ListenAddress your.ip.address:new_port > And of course disallow root access in sshd_conf. PermitRootLogin no ryanc

Re: SATA RAID card suggestions?

2011-10-10 Thread Ryan Corder
o is limited to 2TB logical volumes. I've had great success with the Areca ARC-1210. http://www.areca.com.tw/products/pcie.htm -- Ryan Corder || () ASCII ribbon campaign || /\ against HTML email http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xBEE3781

Re: RAL(4) together with RT28XX chipset - recurring problem

2011-11-10 Thread Ryan Corder
e not heard anything on this issue: 4.8 - Added suspend/resume support for PCI ral(4) devices. 4.8 - Fixed bug in hostap mode for the Ralink RT2860, RT3090, RT3390, RT3562 chipset driver. 4.9 - Prevent run(4), rum(4), urtw(4) and ral(4) from adding timeouts if the driver is dying and imp

Re: RAL(4) together with RT28XX chipset - recurring problem

2011-11-11 Thread Ryan Corder
On Thu, Nov 10, 2011 at 09:43:46PM +, Stuart Henderson wrote: | sys/net80211/ieee80211_node.c r1.63 (in 5.0 but not 4.9) probably helps. Thanks for the pointer. -- Ryan Corder || () ASCII ribbon campaign || /\ against HTML email http://pgp.mit.edu:11371/pks

Re: 802.11n cards for AP?

2010-01-04 Thread Ryan Corder
experiencing this I changed out my card for one with a RT260 chip. ifconfig {down,up} works but is annoying... thanks. -- Ryan Corder || () ASCII ribbon campaign || /\ against HTML email http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x1CB59D69 [demime 1

Re: 802.11n cards for AP?

2010-01-04 Thread Ryan Corder
On Mon, Jan 04, 2010 at 04:10:53PM -0800, Ryan Corder wrote: | Yeah, why is this? Do we know what conditions these are? I ask because | I have been experiencing this I changed out my card for one with a RT260 | chip. ifconfig {down,up} works but is annoying... Sorry for all the typos

Re: HIFN 7955 Support in OpenBSD 4.6 on AMD Geode LX800 System

2010-02-18 Thread Ryan Corder
e possible answer to your problem. -- Ryan Corder || () ASCII ribbon campaign || /\ against HTML email http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x1CB59D69 [demime 1.01d removed an attachment of type application/pgp-signature]

Re: which raid card? [was: aac raid status]

2009-11-10 Thread Ryan Corder
ailed --for 5 weeks without ever noticing (full disclosure, it was my own fault for not setting up sensorsd to see the failure)! -- Ryan Corder || () ASCII ribbon campaign || /\ against HTML email http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x1CB59D69 [dem

Re: Seeking inexpensive RAID 1 hardware recommendation

2010-11-16 Thread Ryan Corder
(supported) is no longer made and has been replaced by the Rev B, but packaging and specs rarely state which one you'll be getting. Your best bet would be the ARC-1202 or ARC-1210. -- Ryan Corder || () ASCII ribbon campaign || /\ against HTML email http://p