Openbsd as a transparent bridge

2009-02-11 Thread dabheeruz
List, I have following setup: B sys:a ---SWITCHOPENBSD/BRIDGESWITCHsys:b B 192.168.1.2(NO IPs)192.168.1.10 B B I have enabled bridging by doing the following: B B B /etc/hostname.bge0 up /etc/hostname.bge1 up /etc/h

Transparent Bridge - Openbsd

2009-02-11 Thread dabheeruz
sys:a ---SWITCHOPENBSD/BRIDGESWITCHsys:b 192.168.1.2(NO IPs)192.168.1.10 I have enabled bridging by doing the following: /etc/hostname.bge0 up /etc/hostname.bge1 up /etc/hostname.bridge0 add bge0 add bge1 I have enabled ip for

Re: Openbsd as a transparent bridge

2009-02-11 Thread dabheeruz
Thanks Patrick. Will give it a shot. -Original Message- From: patrick keshishian To: dabhee...@aim.com Cc: misc@openbsd.org Sent: Wed, 11 Feb 2009 9:44 pm Subject: Re: Openbsd as a transparent bridge On Wed, Feb 11, 2009 at 7:36 PM, wrote: > /etc/hostname.bridge0 > >add bge0

OpenBSD 4.5 and RelayD

2009-06-26 Thread dabheeruz
? Is there a place where I can see that relayd is properly load balancing? 2. I see that "sticky-address" is only available in redirect, can I achieve the same in a relay? 3. Finally where is relayd logging everything? Thanks Dabheeruz

Snort and Dynamic rules help

2010-03-31 Thread dabheeruz
I am trying to get snort with dynamic rules working. Yes I did compile it with --dynamic-plugin option already. Unfortunately there is no precompiled so_rules for OpenBSD. Is there a snort master out there that can help. I have tried copying over the FreeBSD rules but they don't work either.

Relayctl and reload command

2011-04-15 Thread dabheeruz
Does anyone know why relayctl reload doesn't work? I did see a post saying it wasn't implemented yet. Is this true? thx

Re: PF and States

2010-12-03 Thread dabheeruz
Thanks Ryan! Unfortunately when this happened I was remote and could not grab those stats. But what should I be looking for in term of badness. Maybe I can quickly setup something to monitor for particular stat. Really appreciate your input. Thx. On 12/3/10 12:41 AM, Ryan McBride wrote: O

Re: PF and States

2010-12-05 Thread dabheeruz
Hi Jan, This actually happened again really late at night , one thing that strangely happened was that we had nagios setup to monitor CARP state and basically the secondary lb (same config etc) had its carp interface in "init" state and once again the primary relayd box was displaying problem

Re: PF and States

2010-12-08 Thread dabheeruz
Hi Ryan, We are seeing the issue again and I am writing a script to get the "pfctl -vvsi" data at regular intervals. Can you please point me to what values I should be looking out for? Thanks Parvinder Bhasin On 12/3/10 11:32 AM, dabheeruz wrote: Thanks Ryan! Unfortunately

Re: PF and States

2010-12-11 Thread dabheeruz
On 12/8/10 2:09 PM, Ryan McBride wrote: On Wed, Dec 08, 2010 at 12:39:12PM -0800, dabheeruz wrote: We are seeing the issue again and I am writing a script to get the "pfctl -vvsi" data at regular intervals. Can you please point me to what values I should be looking out for? You wa

Re: PF and States

2010-12-19 Thread dabheeruz
On 12/19/10 4:16 AM, Henning Brauer wrote: * Ryan McBride [2010-12-03 09:52]: On Thu, Dec 02, 2010 at 11:22:08PM -0500, Godesi wrote: 2. How much states can i "really" have on a box that has 4 gig ram? More than 100,000. I havn't tested lately (planning to do so soo), but I would expect some

PF , WCCP and SQUID

2011-01-14 Thread dabheeruz
Hi group, I am having interesting problem here. I would like to setup OpenBSD with Squid and transparently intercept port 80 traffic. Problem is that I have cisco ASA in front which is the default gateway for outside traffic. How can I setup my Openbsd squid box so that any packets destined

Re: PF and States

2011-01-24 Thread dabheeruz
Hi Stuart, Thanks a bunch for you suggestions. This email got lost in my inbox. Will let you know if I have some questions. Appreciate your help :) Thx On 1/11/11 1:43 PM, Stuart Henderson wrote: On 2010-12-03, Godesi wrote: relay web { Try applying this diff from -current and rebuildi