Soekris network problems - 48 hour deadline

2006-10-14 Thread Richard P. Koett
I'm having throughput problems using a Soekris net4801 as a firewall running OpenBSD 3.9. This is replacing a SonicWALL device that was working fine from the user's perspective. (I want to replace it because, among other things, I abhor SonicWALL's licensing). I won't post a dmesg unless requested

Re: Soekris network problems - 48 hour deadline

2006-10-14 Thread Richard P. Koett
Matthew Closson wrote: > On Sat, 14 Oct 2006, Richard P. Koett wrote: > >> I'm having throughput problems using a Soekris net4801 as a firewall >> running OpenBSD 3.9. This is replacing a SonicWALL device that was >> working fine from the user's perspective

Re: Soekris network problems - 48 hour deadline

2006-10-14 Thread Richard P. Koett
Adriaan wrote: > On 10/14/06, Richard P. Koett <[EMAIL PROTECTED]> wrote: >> I'm having throughput problems using a Soekris net4801 as a firewall >> running OpenBSD 3.9. This is replacing a SonicWALL device that was >> working fine from the user's perspect

Re: Soekris network problems - 48 hour deadline

2006-10-14 Thread Richard P. Koett
Stuart Henderson wrote: > On 2006/10/14 00:56, Richard P. Koett wrote: >> known. Hosts on the internal network are able to access the Internet >> but report that access seems slow. Some operations fail consistently. >> For example, users can send and receive e-mail e-mails but

Re: Soekris network problems - 48 hour deadline - SOLVED!!

2006-10-14 Thread Richard P. Koett
A huge thank you to all who offered advice on my network problem. It appears that the problem has been fixed by changing hostname.sis0 from "dhcp NONE NONE NONE" to "dhcp media 10baseT". Previous output from ifconfig showed: sis0: flags=8843 mtu 1500 media: Ethernet autoselect (100baseTX fu

Static code analysis tools?

2006-10-14 Thread John Richard Moser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've been looking for static code analysis tools for a while, and the only real free tools I've found are rats and flawfinder. The other stuff is... not very useful. Either incomplete, reliant on non-free parts, reliant on Java (not GNU classpath, bu

ifconfig question

2006-10-27 Thread Richard P. Koett
I received some very useful advice from this list a short while ago when I was having problems with throughput on a Soekris firewall. The issue turned out to be a problem with Ethernet autoselect and I thought I had worked around it effectively. The problem has now reappeared, however, and I would

Re: ifconfig question

2006-10-27 Thread Richard P. Koett
Stuart Henderson wrote: > On 2006/10/27 09:44, Richard P. Koett wrote: >> I received some very useful advice from this list a short while ago >> when I was having problems with throughput on a Soekris firewall. >> The issue turned out to be a problem with Ethernet autoselect a

Re: [slightly OT] Zaurus -- to buy or not to buy?

2005-06-01 Thread Richard P. Koett
Can anyone recommend a Zaurus vendor for Canadian buyers? Thx, RPK.

Compile time on old i386

2005-06-05 Thread Richard P. Koett
I'm running "make build" on a Pentium 100 with 64M and an old IDE drive. Any guesses as to how long this might take? And, out of curiosity, how fast can a fast i386 box do it?

Re: Eric Raymond about GPL and BSD

2005-06-08 Thread Richard P. Koett
Alexey E. Suslikov wrote: > original article were in portuguese... > > http://translate.google.com/translate?u=http%3A%2F%2Fwww.myfreebsd.com.b r%2Fmodules.php%3Fname%3DNews%26file%3Darticle%26sid%3D1262&langpair=pt% 7Cen&hl=en&safe=off&ie=UTF-8&oe=UTF-8&prev=%2Flanguage_tools' > And what langua

Re: Text editor

2005-08-07 Thread Richard P. Koett
You guys are all sissies. Real men use cat(1).

Re: Live cd

2005-09-15 Thread Richard P. Koett
Josh Grosse wrote: > On Fri, Sep 16, 2005 at 01:02:40AM +0300, Alex Stamatis wrote: > >> ...Do you think that we can create a live >> cd or dvd...??? > > Here's a link from the OpenBSD journal with an article on creating > one, and some followup discussion. > > http://undeadly.org/cgi?action=art

Re: ftp-proxy(8) and pf question

2005-09-19 Thread Richard P. Koett
Stephan A. Rickauer wrote: > Hello, > > in migrating our netfilter box to a pf box I need to solve one > remaining problem: Passive FTP (sigh) > > I've read "PF: Issues with FTP" carefully and tried to setup > ftp-proxy(8) on the firewall. Now it seems I have a fundamental > misunderstanding on h

pf log entries

2005-09-23 Thread Richard P. Koett
'tcpdump -r /var/log/pflog' shows a lot of entries like this: 14:31:38.279681 33:0:0:0:0:0 > 3d:2:1:0:6e:65 null I (s=0,r=0,C) len=98 14:31:41.794668 33:0:0:0:0:0 > 3d:2:1:0:6e:65 null I (s=0,r=0,C) len=98 14:31:42.464382 33:0:0:0:0:0 > 3d:2:1:0:6e:65 null I (s=0,r=0,C) len=98 14:31:42.614922 33:0

Etiquette re: unanswered questions

2005-09-29 Thread Richard P. Koett
What is the accepted thing to do if one posts a question and gets no response after a few days? Should one... a) Politely ask again? b) Rephrase the question? c) Assume nobody wants to answer so stop asking?

Re: Etiquette re: unanswered questions

2005-09-29 Thread Richard P. Koett
Ingo Schwarze wrote: > Dear Mr. Koett, > > Ted Unangst schrieb am Thu, Sep 29, 2005 at 10:00:01PM -0400: >> On Thu, 29 Sep 2005, Richard P. Koett wrote: > [...] >>> b) Rephrase the question? >> yes. ask again, include more information > > In this particul

Re: Etiquette re: unanswered questions

2005-09-29 Thread Richard P. Koett
Stuart Henderson wrote: > --On 29 September 2005 20:54 -0700, Richard P. Koett wrote: > >> This machine has two interfaces - 'ne3' facing the Internet and 'rl0' >> facing a small (3 computer) internal network. I am *assuming* that >> the log entries p

Re: Etiquette re: unanswered questions

2005-09-30 Thread Richard P. Koett
L. V. Lammert wrote: > On Thu, 29 Sep 2005, Richard P. Koett wrote: > >> What is the accepted thing to do if one posts a question >> and gets no response after a few days? >> >> Should one... >> >> a) Politely ask again? >> >> b) Rephrase

Re: Anyone tried this hardware raid solution?

2005-10-11 Thread Richard P. Koett
Jean-Daniel Beaubien wrote: > Hi everyone, > > > I am wondering if anyone tried this > (http://www.allmediait.com/html/araid.html) hardware raid solution. > It seems to only support PATA. Anyways I was just wondering if > anyone had any experiences with this box. Anyone ever compared it to > a

Re: Trigger on user logout?

2005-11-07 Thread Richard P. Koett
Uosis L wrote: > Hi, > > I'm trying to make an encrypted home directory which is > mounted/unmounted on login/logout. > Mounting it on login was the easy part ( with a custom login style ), > but is there any way to unmount it on logout ( short from modifying > init ) ? I want to alter the system

Re: Trigger on user logout?

2005-11-07 Thread Richard P. Koett
Uosis L wrote: > Thanks for advices. > > All these methods would definitely work, but the problem with shell > logout file is that vnconfig/umount both need to be executed as root. I think you can work around that requirement with kern.usermount and file permissions. Have a look at: http://www.m

Re: Alpha Disklabel Question

2005-12-17 Thread Richard P. Koett
Martin Reindl wrote: > "J.C. Roberts" <[EMAIL PROTECTED]> wrote: > >> On Sat, 17 Dec 2005 18:03:21 +0100, Martin Reindl >> <[EMAIL PROTECTED]> wrote: >> >>> "J.C. Roberts" <[EMAIL PROTECTED]> wrote: >>> On Fri, 16 Dec 2005 13:50:48 -0800, "J.C. Roberts" <[EMAIL PROTECTED]> wrote: >>>

pptpd and GRE support

2005-05-08 Thread Richard P. Koett
In the past when using pptpd I used a kernel with GRE disabled because I read that was the thing to do. When installing pptp-1.6.0 on a new i386 system the other day (May 1st snapshot) I saw a note saying to enable GRE so I added this to sysctl.conf: net.inet.gre.allow=1 Everything was working f

Looking for info re: IPSec & MTU

2005-05-21 Thread Richard P. Koett
OpenBSD is working great instead of the Cisco router that our VPN peer recommended. Thanks again to the developers who make it all possible. I notice that we're receiving some fragmented packets, however. It's not a big deal but I'd like to see if things can be better optimized (and learn a bit in

Re: pf scrub max-mss question (solved)

2008-02-04 Thread Richard Green (via iPrimus)
On Tuesday 05 February 2008 07:18:34 Stuart Henderson wrote: > On 2008/02/04 18:12, Richard Green wrote: > > When when two peers on opposite sides of this firewall attempt to > > connect, a TCP SYN packet passes in from peer-1 though one interface, > > with it's MSS field

Re: Real men don't attack straw men

2008-01-04 Thread Richard M. Stallman - Autoreply Message
[This message was generated by an automated system.] I am not on vacation, but I am at the end of a long time delay. I am located somewhere on Earth, but as far as responding to email is concerned, I appear to be well outside the solar system. After your message arrives at gnu.org, I will collec

<    3   4   5   6   7   8