Re: Backup MX server

2006-03-02 Thread Lars Hansson
On Thursday 02 March 2006 15:14, Tobias Weingartner wrote: If the client can't find any DNS information on the destination, it tends to bounce. At least in all non-broken MTAs. Try it. Send email to [EMAIL PROTECTED] and see what happens. This was 1/2 his argument. No DNS info means no DNS

RedHat and Linux emulation

2006-03-02 Thread Ramiro Aceves
Hello. Just for curiosity, yesterday I was thinking about Linux emulation and redhat OpenBSD packages. I would like to know if it is planned to switch to some more free Linux distribution like Debian instead of Red Hat to be used as the base system for Linux emulation. Thanks in advance. Ramiro.

Kernelpanic: Re: upl(4) interface not working

2006-03-02 Thread Lars Weste
Hi, i had an other ethernet interface configured and the default route via the other interface. I removed this hostname.if and restarted. then i did the following: # ifconfig upl0 inet 10.200.200.1 10.200.200.2 netmask 255.255.255.252 up # route add default 10.200.200.2 # ping 10.200.200.1

Re: RedHat and Linux emulation

2006-03-02 Thread Hannah Schroeter
Hello! On Thu, Mar 02, 2006 at 09:54:35AM +0100, Ramiro Aceves wrote: Just for curiosity, yesterday I was thinking about Linux emulation and redhat OpenBSD packages. I would like to know if it is planned to switch to some more free Linux distribution like Debian instead of Red Hat to be used as

Problem with squirrelmail

2006-03-02 Thread Gabriel George POPA
I have a small problem with squirrelmail. The problem is that users cannot read their mail messages if they are too large (though not very large). I use SquirrelMail 1.4.5, OpenBSD 3.8, PHP 4.4.1, and IMAP (from PINE package, from ports). The problem is that users cannot read their mail (even

Re: RedHat and Linux emulation

2006-03-02 Thread Ramiro Aceves
Hello In what exact way is Debian more free than Redhat with respect to the portions OpenBSD takes for the emulation stuff? I am not an expert in this kind of issues, I just have some curiosity. You understand what I mean, RedHat 9 was the latest freely available RH version. RH 9 is becoming

Re: Dependancies with make search key=

2006-03-02 Thread Harry Putnam
Marc Espie [EMAIL PROTECTED] writes: make search key= is more or less deprecated... Interesting, So is /usr/ports/INDEX being dumped too at some point. Or will it still have listings showing dependancies and stuff?

weird vpn dropouts ...

2006-03-02 Thread Stefan Sczekalla-Waldschmidt
Hi, I'm facing a problem where a vpn-tunnel fails for 1 to approx. 3 Secs. every few minuntes. we have - well quite successful established a ipsec-vpn-mesh with Carp-failover across our four locations. While the connection between three members of the mesh runs fine - we have a problem with our

Re: VIA fanless 1GHz

2006-03-02 Thread Markus Schatzl
On Wed, Mar 01, 2006 at 03:33:21PM -0500, marrandy wrote: Has anyone tried VIA Eden fanless at 1GHz yet or the new Eden-N or NL (Luke series) yet ? If so, how did they perform. I used to have one of them with a HD plugged. They perform quite well, as long as you keep them cool enough under

Re: serial console

2006-03-02 Thread Markus Schatzl
On Tue, Feb 28, 2006 at 04:36:12PM -0300, Gustavo Rios wrote: Hey folks, i am trying to set my desktop serial console in order to be able to have serial access to my soekris box. The probably easiest way is a tip -BAUDRATE TERM # tip -19200 tty00 /Markus

Re: sendmail and Undeliverables

2006-03-02 Thread Alexander Bochmann
...on Wed, Mar 01, 2006 at 05:01:52PM -0600, Joel Gudknecht wrote: I'm concerned that sendmail is even accepting these messages as they have nothing to do with my domain and I don't know how to prevent this behavior, any info on this subject would be appreciated, thank you. From the

Re: Problem with squirrelmail

2006-03-02 Thread Alexander Bochmann
...on Thu, Mar 02, 2006 at 01:07:09PM +0200, Gabriel George POPA wrote: I have a small problem with squirrelmail. The problem is that users cannot read their mail messages if they are too large (though not very [..] going on? Settings from /etc/inetd.conf: # IMAP server from PINE

Re: Problem with squirrelmail

2006-03-02 Thread Pete Vickers
On 2. mar. 2006, at 14.00, Alexander Bochmann wrote: ...on Thu, Mar 02, 2006 at 01:07:09PM +0200, Gabriel George POPA wrote: I have a small problem with squirrelmail. The problem is that users cannot read their mail messages if they are too large (though not very [..] going on?

Re: Problem with squirrelmail

2006-03-02 Thread Janusz Gumkowski
The problem is that users cannot read their mail (even if they contain only text) if they reach a certain limit (SquirrelMail stalls while reading). Perhaps it is still reading data from imapd (or waiting for it). Is imapd process (of the user being logged in) running while squirrelmail

Re: Problem with squirrelmail

2006-03-02 Thread Gabriel George POPA
Janusz Gumkowski wrote: The problem is that users cannot read their mail (even if they contain only text) if they reach a certain limit (SquirrelMail stalls while reading). Perhaps it is still reading data from imapd (or waiting for it). Is imapd process (of the user being logged in)

Re: Backup MX server

2006-03-02 Thread Randal L. Schwartz
Rod == Rod Whitworth [EMAIL PROTECTED] writes: Rod As a result spammers target secondaries strongly in preference to Rod primaries. As a project I listed a secondary for a server I support Rod using an alias on the same machine. All of the mail sent to the Rod secondary address (unless I missed

Re: Backup MX server

2006-03-02 Thread Graham Toal
NO - it does not! Well, not unless the sending MTA is broken. To quote from Postfix documentation referring to not getting an MX record from DNS: By default, the Postfix SMTP client defers delivery and tries again after some delay. This behavior is required by the SMTP standard. Yes it

Re: Backup MX server

2006-03-02 Thread Graham Toal
$ host -t mx stonehenge.com stonehenge.com mail is handled by 666 spamtrap.stonehenge.com. stonehenge.com mail is handled by 5 blue.stonehenge.com. Any mail delivered to spamtrap gets the following response: 450 Violation of RFC2821 Section 5 Paragraph 8 correlates highly with spamming

Re: Backup MX server

2006-03-02 Thread Stuart Henderson
On 2006/03/02 08:16, Graham Toal wrote: Any mail delivered to spamtrap gets the following response: 450 Violation of RFC2821 Section 5 Paragraph 8 correlates highly with spamming and is therefore rejected. Ouch! You're a brave one. That's fine until your first big network outage

Re: Backup MX server

2006-03-02 Thread Randal L. Schwartz
Graham == Graham Toal [EMAIL PROTECTED] writes: Graham Ouch! You're a brave one. That's fine until your first big network outage :-) Graham Oh wait - I bet they're both on the same net segment, right? You wouldn't Graham dare do that with a machine elsewhere on the net! No, they're both on

Re: Backup MX server

2006-03-02 Thread Constantine A. Murenin
On 02/03/06, Graham Toal [EMAIL PROTECTED] wrote: Personally I do believe in Backup MX, as long as it does proper relay checking. It's nice if it also does spam checking, but not critical because your primary MX will still do that. However Do you know just how disturbing it is to receive

Re: Backup MX server

2006-03-02 Thread Constantine A. Murenin
On 02/03/06, Graham Toal [EMAIL PROTECTED] wrote: $ host -t mx stonehenge.com stonehenge.com mail is handled by 666 spamtrap.stonehenge.com. stonehenge.com mail is handled by 5 blue.stonehenge.com. Any mail delivered to spamtrap gets the following response: 450 Violation of RFC2821

Re: Backup MX server

2006-03-02 Thread Adam
On 02 Mar 2006 06:54:45 -0800 merlyn@stonehenge.com (Randal L. Schwartz) wrote: I hate greylisting. It hurts legit mail to solve the spam problem. And I don't need it, based on the amount of spam I can kill with this (and a few other tricks described in the referenced paper). If you used spamd

Re: RedHat and Linux emulation

2006-03-02 Thread Ted Unangst
On 3/2/06, Ramiro Aceves [EMAIL PROTECTED] wrote: In what exact way is Debian more free than Redhat with respect to the portions OpenBSD takes for the emulation stuff? I am not an expert in this kind of issues, I just have some curiosity. You understand what I mean, RedHat 9 was the latest

Re: Squid QOS

2006-03-02 Thread Joachim Schipper
On Wed, Mar 01, 2006 at 09:47:35PM +0700, Cahyo wrote: I wish someone make this http://www.docum.org/docum.org/faq/cache/65.html for obsd pf n altq, because very useful for SOHO user for bandwidth efficiency, maybe have another ideas for that goal It's a dirty hack, really. You could try to

Re: Backup MX server

2006-03-02 Thread David Terrell
On Thu, Mar 02, 2006 at 03:38:09PM +, Constantine A. Murenin wrote: Graham, You seem to have some contradicting views on the matter. What is the difference between greylisting and the aforementioned spamtrapping approach? Isn't it essentially a variation of the very same thing, namely

Traffic analysis on a per service basis

2006-03-02 Thread David Elze
Hi, I just searched the net for hours but didn't find a reasonable solution. My intention is to get traffic graphs, like the ones in mrtg for interfaces but for specific services (that is one for ftp, one for http and so on). First idea was to use mrtg/snmp that I already use for simple

Re: Backup MX server

2006-03-02 Thread Constantine A. Murenin
On 02/03/06, David Terrell [EMAIL PROTECTED] wrote: On Thu, Mar 02, 2006 at 03:38:09PM +, Constantine A. Murenin wrote: Graham, You seem to have some contradicting views on the matter. What is the difference between greylisting and the aforementioned spamtrapping approach? Isn't it

Re: Backup MX server

2006-03-02 Thread Peter Fraser
Wouldn't a even simpler solution be to define a high MX record to a dummy address that would never answer. The spammers were going to retry, they would anyway and a real server would retry for sure.

Re: Backup MX server

2006-03-02 Thread Randal L. Schwartz
Constantine == Constantine A Murenin [EMAIL PROTECTED] writes: Constantine Correction: this very neat trick is by Randal L. Schwartz; Graham Constantine was the one opposing it in this thread. :-) Constantine Here are some results of 'You Had Me at HELO': Constantine

Re: Backup MX server

2006-03-02 Thread Randal L. Schwartz
Peter == Peter Fraser [EMAIL PROTECTED] writes: Peter Wouldn't a even simpler solution be to define a Peter high MX record to a dummy address that would never Peter answer. The spammers were going to retry, they would Peter anyway and a real server would retry for sure. My understanding is that

Re: Problem with squirrelmail (SOLVED)

2006-03-02 Thread Gabriel George POPA
Hello all, Although I cannot believe my eyes, but I SOLVED THE PROBLEM. The problem was NOT UW IMAPD. The imapd waited a lng time, while the SquirrelMail page was stalled. But I couldn't notice two other facts: 1) httpd was eating the CPU; 2) the first message could be read without

Re: Traffic analysis on a per service basis

2006-03-02 Thread Spruell, Darren-Perot
From: [EMAIL PROTECTED] I just searched the net for hours but didn't find a reasonable solution. My intention is to get traffic graphs, like the ones in mrtg for interfaces but for specific services (that is one for ftp, one for http and so on). First idea was to use mrtg/snmp that I

Re: Traffic analysis on a per service basis

2006-03-02 Thread Tim Donahue
You could take a look at pfflowd, flow-tools, flowd, and tcpflow. These are all in the ports tree. Tim Donahue On Thursday 02 March 2006 11:16, David Elze wrote: Hi, I just searched the net for hours but didn't find a reasonable solution. My intention is to get traffic graphs, like the

pf/carp load balancing on 4 firewalls

2006-03-02 Thread Sylvain Coutant
Hi gurus, I'm working on a project where carp loadbalancing firewalls could exactly fit our needs. Before that, I wonder how it will work outside of the OpenBSD boxes. First, regarding Carp and STP what happens usually in a manageable L2 switch when the same MAC is announced on two different

Re: Backup MX server

2006-03-02 Thread Rod.. Whitworth
On Thu, 02 Mar 2006 00:14:29 -0700, Tobias Weingartner wrote: On Thursday, March 2, Rod.. Whitworth wrote: On Wed, 01 Mar 2006 23:16:59 -0600, Graham Toal wrote: If your DNS is on the same net as the mailer, its down too. Senders soon get no result at all when they look you up, with the

Re: pf/carp load balancing on 4 firewalls

2006-03-02 Thread Jason Ackley
On Thu, 2 Mar 2006, Sylvain Coutant wrote: First, regarding Carp and STP what happens usually in a manageable L2 switch when the same MAC is announced on two different ports ? I don't remember that STP includes loadsharing, so isn't it possible the switch will only choose one port to forward

Re: pf/carp load balancing on 4 firewalls

2006-03-02 Thread Sylvain Coutant
Thanks Jason for the details. I'm quite good from L3 and up, but I still never had to understand so much about L2 ;-)) The problem you will/may encounter will differ based on the vendor of SWITCH1 and SWITCH2. Some vendors will handle it OK if the MAC is a multicast MAC, some will log a

Re: pf/carp load balancing on 4 firewalls

2006-03-02 Thread Stuart Henderson
First, regarding Carp and STP what happens usually in a manageable L2 switch when the same MAC is announced on two different ports ? Switches often remember which ports a MAC was seen on, not which MACs were seen on each port. Not what you might first expect, but I think the common failover

Re: Traffic analysis on a per service basis

2006-03-02 Thread Per-Olov Sjöholm
On Thursday 02 March 2006 17.16, David Elze wrote: Hi, I just searched the net for hours but didn't find a reasonable solution. My intention is to get traffic graphs, like the ones in mrtg for interfaces but for specific services (that is one for ftp, one for http and so on). First idea

Re: Traffic analysis on a per service basis

2006-03-02 Thread David Elze
Am Donnerstag, den 02.03.2006, 15:47 -0500 schrieb Tim Donahue: Hi, You could take a look at pfflowd, flow-tools, flowd, and tcpflow. These are all in the ports tree. Thanks for these hints, they seem to be exactly what I need. I'm currently playing around with the tools, the next step is to

Re: Traffic analysis on a per service basis

2006-03-02 Thread eric
On Thu, 2006-03-02 at 17:16:02 +0100, David Elze proclaimed... I just searched the net for hours but didn't find a reasonable solution. My intention is to get traffic graphs, like the ones in mrtg for interfaces but for specific services (that is one for ftp, one for http and so on). Best

Re: VIA fanless 1GHz

2006-03-02 Thread Thomas Riboulet
On 3/2/06, Markus Schatzl [EMAIL PROTECTED] wrote: On Wed, Mar 01, 2006 at 03:33:21PM -0500, marrandy wrote: Has anyone tried VIA Eden fanless at 1GHz yet or the new Eden-N or NL (Luke series) yet ? If so, how did they perform. I used to have one of them with a HD plugged. They perform

Re: Traffic analysis on a per service basis

2006-03-02 Thread Martin Schröder
On 2006-03-02 19:01:13 -0600, eric wrote: Best you'll find for reliable traffic accounting (and the most flexible) is argus http://www.qosient.com/argus/. I'd recommend that route, then using Seems to be quiet since 2004-05 and has its own license :-( Best Martin --

Re: Traffic analysis on a per service basis

2006-03-02 Thread Aaron Glenn
On 3/2/06, David Elze [EMAIL PROTECTED] wrote: Hi, I just searched the net for hours but didn't find a reasonable solution. My intention is to get traffic graphs, like the ones in mrtg for interfaces but for specific services (that is one for ftp, one for http and so on). First idea was to

Re: Traffic analysis on a per service basis

2006-03-02 Thread eric
On Fri, 2006-03-03 at 03:33:53 +0100, Martin Schrvder proclaimed... Seems to be quiet since 2004-05 and has its own license :-( Good software works, it doesn't need to be updated every 3 hours. As far as it's license, that is what the author chose. Does that mean you can't use it? Seems pretty

Hanging Sun V100

2006-03-02 Thread Chris Cameron
Have/had a V100 working as an office firewall. It maintains a VPN connection between itself and another OBSD firewall. All running OBSD 3.8. Both are quite new in their current positions. Previous to this an Ultra2 with 3.5 was doing this job without issue. The V100 twice now has hung without

IPSec: one fix svr but X dyn. clients?

2006-03-02 Thread sebastian . rother
Hello everybody, Is there a way to use IPSec in such a scenario: Server: fix IP some clients: fixed IPs some clients: dyn. IPs All HowTos/Manuals I read just explained how to set up an IPSec with 2 Fix IPs (as far as I understood it). But how can I set up a VPN if a client has a dynamic IP

Re: IPSec: one fix svr but X dyn. clients?

2006-03-02 Thread Daniel Ouellet
[EMAIL PROTECTED] wrote: Hello everybody, Is there a way to use IPSec in such a scenario: Server: fix IP some clients: fixed IPs some clients: dyn. IPs All HowTos/Manuals I read just explained how to set up an IPSec with 2 Fix IPs (as far as I understood it). But how can I set up a VPN if a

Re: /etc and partitions

2006-03-02 Thread Jeff Nelson
On Mon, Feb 27, 2006 at 07:37:12PM +0100, Michael Schmidt wrote: Hello, version: 3.8 architecture: i386 I have seen that /etc cannot be located on a separated partition. Why can it be not on an extra partition? Just curious, but why would want /etc on a separate partition? Have a great

Re: IPSec: one fix svr but X dyn. clients?

2006-03-02 Thread sebastian . rother
The reader should note that while this configuration uses numeric IP addresses, the configuration can also be done with fully qualified domain names. To use domain names, simply copy the keys into the /etc/isakmpd/pubkeys/fqdn directory, and use srcid and dstid keywords in you /etc/ipsec.conf

Ola! Alguem que te ama lhe enviou um cartao!

2006-03-02 Thread VIRTUALCARDS
:: Cartao - Virtualcards.com.br :: :: Flash Player 2005 - Virtualcards.com.br :: ::Termos do servico - Arquivo .pdf - Virtualcards.com.br ::

Re: IPSec: one fix svr but X dyn. clients?

2006-03-02 Thread Daniel Ouellet
[EMAIL PROTECTED] wrote: I just read the articles provided at www.unixguru.de and googled but didn`t found this one. Just was and still is on the front page of undeadly.org: http://www.undeadly.org/ Plenty of OpenBSD only stuff there.