Re: PF and Binat

2008-07-15 Thread Ryan McBride
On Mon, Jul 14, 2008 at 10:28:18PM -0700, Parvinder Bhasin wrote: Filtering happens AFTER translation, so you need to filter on the real addresses of the hosts, not the alias addresses. Hmm by real ip do you mean internal ips of the servers?? Yes.

Re: PF and Binat

2008-07-15 Thread Brian Keefer
On Jul 14, 2008, at 10:28 PM, Parvinder Bhasin wrote: On Jul 14, 2008, at 10:00 PM, Ryan McBride wrote: On Mon, Jul 14, 2008 at 09:48:22PM -0700, Parvinder Bhasin wrote: snip what gives? Oh, I missed this before: pass in on $ext_if proto tcp from any to 75.36.44.22 port 80 pass in on

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-15 Thread Claer
On Mon, Jul 14 2008 at 28:15, Mart?n Coco wrote: Thanks! Have you tried the quad nics on those Dells? We do have a couple of R200s, 860s and 850s running with 2 dual port cards no problem, but we have never tried the quad ports. Hello, I do have around 20 Dell 860 and R200 with 2 cards

Re: PF DiffServ

2008-07-15 Thread Claer
On Tue, Jul 15 2008 at 32:01, Insan Praja SW wrote: Hi Misc@, I was wondering if I could use pf to read and write DSCP code to packets, maybe using scrub or altq? If there is a way to do it using Puffy, maybe I could try it on my box. Thanks, Hello, Actually, 4.3 can read DSCP but not

pppoe0 doesn't get ip address - how to reconnect ?

2008-07-15 Thread Xavier Milliès-Lacroix
Sometimes when I boot a soekris box (net5501) - OpenBSD 4.3, I didn't get each times an ip address for the pppoe0 link. This is a problem as I can connect to this box only remotely. I didn't find on the documentation how to reconnect automatically if the link goes down. Any ideas ? Xavier.

It's possible to mirror OpenBSD manual page?

2008-07-15 Thread my mail
hi all i want using interface like http://www.openbsd.org/cgi-bin/man.cgi, so i can browsing from my LAN without online, because i don't have a 24 hours connection. so can i mirroring the OpenBSD manual website? thx

Re: It's possible to mirror OpenBSD manual page?

2008-07-15 Thread Karl Karlsson
2008/7/15 my mail [EMAIL PROTECTED]: hi all i want using interface like http://www.openbsd.org/cgi-bin/man.cgi, so i can browsing from my LAN without online, because i don't have a 24 hours connection. so can i mirroring the OpenBSD manual website? thx cvs -d $CVSROOT checkout www

Re: It's possible to mirror OpenBSD manual page?

2008-07-15 Thread Karl Karlsson
Oops, sorry for the noice, i misread and i interpreted it as FAQ the first time.. 2008/7/15 Karl Karlsson [EMAIL PROTECTED]: 2008/7/15 my mail [EMAIL PROTECTED]: hi all i want using interface like http://www.openbsd.org/cgi-bin/man.cgi, so i can browsing from my LAN without online,

pf grouped per interface with anchors and brace ...

2008-07-15 Thread Karl-Heinz Wild
It might be not that useful, but looks nice :) Loaded without errors. It should work :) # Experimental filter # too show the possibility using anchors for grouping # interfaces in readable sections table admin { 1.1.1.1 } persist set skip on { lo } scrub in on wan_if nat on wan_if from

Re: It's possible to mirror OpenBSD manual page?

2008-07-15 Thread dermiste
http://www.openbsd.org/cgi-bin/man.cgi?manpath=OpenBSD+Current The FAQ link leads to a page full of forgotten treasures Have a nice day On Tue, Jul 15, 2008 at 9:05 AM, my mail [EMAIL PROTECTED] wrote: hi all i want using interface like http://www.openbsd.org/cgi-bin/man.cgi, so i can

Re: It's possible to mirror OpenBSD manual page?

2008-07-15 Thread Stuart Henderson
On 2008-07-15, my mail [EMAIL PROTECTED] wrote: i want using interface like http://www.openbsd.org/cgi-bin/man.cgi, so i can browsing from my LAN without online, because i don't have a 24 hours connection. try man2web (in ports/packages).

Re: It's possible to mirror OpenBSD manual page?

2008-07-15 Thread my mail
--- On Tue, 7/15/08, Marco Fretz [EMAIL PROTECTED] wrote: From: Marco Fretz [EMAIL PROTECTED] Subject: Re: It's possible to mirror OpenBSD manual page? To: [EMAIL PROTECTED] Cc: misc@openbsd.org Date: Tuesday, July 15, 2008, 8:09 AM my idea is that you can extract the directory structure

Re: pppoe0 doesn't get ip address - how to reconnect ?

2008-07-15 Thread Murilo da Silva Ijanc
Hi Xavier, Look at this file: ppp.linkdown.sample it will be in /etc/ppp/ 2008/7/15 Xavier Millihs-Lacroix [EMAIL PROTECTED]: Sometimes when I boot a soekris box (net5501) - OpenBSD 4.3, I didn't get each times an ip address for the pppoe0 link. This is a problem as I can connect to this

Re: pppoe0 doesn't get ip address - how to reconnect ?

2008-07-15 Thread Henning Brauer
* Xavier Millihs-Lacroix [EMAIL PROTECTED] [2008-07-15 09:02]: Sometimes when I boot a soekris box (net5501) - OpenBSD 4.3, I didn't get each times an ip address for the pppoe0 link. This is a problem as I can connect to this box only remotely. I didn't find on the documentation how to

Re: PF DiffServ

2008-07-15 Thread Insan Praja SW
On Tue, 15 Jul 2008 13:39:57 +0700, Claer [EMAIL PROTECTED] wrote: On Tue, Jul 15 2008 at 32:01, Insan Praja SW wrote: Hi Misc@, I was wondering if I could use pf to read and write DSCP code to packets, maybe using scrub or altq? If there is a way to do it using Puffy, maybe I could try

Re: pppoe0 doesn't get ip address - how to reconnect ?

2008-07-15 Thread Markus Hennecke
On Tue, 15 Jul 2008, Henning Brauer wrote: * Xavier Millihs-Lacroix [EMAIL PROTECTED] [2008-07-15 09:02]: Sometimes when I boot a soekris box (net5501) - OpenBSD 4.3, I didn't get each times an ip address for the pppoe0 link. This is a problem as I can connect to this box only remotely. I

Re: pppoe0 doesn't get ip address - how to reconnect ?

2008-07-15 Thread Xavier Milliès-Lacroix
Thanks a lot. I will make some tests this evening. pppoe automagically reconnects So if my ip change I still have to reload pf ? using ppp.linkdown ? Xavier. 2008/7/15 Henning Brauer [EMAIL PROTECTED]: * Xavier Millihs-Lacroix [EMAIL PROTECTED] [2008-07-15 09:02]: Sometimes when I boot a

Re: pppoe0 doesn't get ip address - how to reconnect ?

2008-07-15 Thread Henning Brauer
* Xavier Millihs-Lacroix [EMAIL PROTECTED] [2008-07-15 14:15]: pppoe automagically reconnects So if my ip change I still have to reload pf ? not if you write your pf.conf correctly

Re: pfctl

2008-07-15 Thread Vijay Sankar
On July 14, 2008 08:16:08 pm Giancarlo Razzolini wrote: Stuart Henderson escreveu: On 2008-07-14, Charlie Clark [EMAIL PROTECTED] wrote: I have noticed that you are unable to view the currently loaded options for pf using pfctl, even 'pfctl -sa' doesn't show the options eg. set skip on

Re: Decipering Understanding IP addressing

2008-07-15 Thread ropers
I got non-deliverable receipts back from Nick when I sent this last message: http://kerneltrap.org/mailarchive/openbsd-misc/2008/7/12/2438104 Apparently Nick is not getting my email, or I've ended up on his blacklist for some reason. Nick, if you're reading this, could you drop me a mail? Is

tcpdump -X

2008-07-15 Thread GVG GVG
Dear list, was going through the OpenBSD tcpdump version and couldn't identify anything like the '-A' flag in order to capture full web sites etc. Tried optin '-X' but didn't work! Should I use '-s snaplen' but what snaplen value do I have to define. Tried few combinations with no success!

HP LaserJet 1018 (HPLJ1018) firmware upload

2008-07-15 Thread Gmail Account
I have the above mentioned USB printer. It requires the foo2zjs driver which I've successfully compiled from the foo2zjs web site (following the OpenBSD instructions). Unlike most printers, the HPLJ1018 does not have persistent firmware. Instead, its firmware (the file 'sihp1018.dl') must

Re: tcpdump -X

2008-07-15 Thread David Hill
On Tue, Jul 15, 2008 at 03:42:58PM +0200, GVG GVG wrote: Dear list, was going through the OpenBSD tcpdump version and couldn't identify anything like the '-A' flag in order to capture full web sites etc. Tried optin '-X' but didn't work! Should I use '-s snaplen' but what snaplen value do I

Re: pfctl

2008-07-15 Thread Giancarlo Razzolini
Vijay Sankar escreveu: On July 14, 2008 08:16:08 pm Giancarlo Razzolini wrote: Stuart Henderson escreveu: On 2008-07-14, Charlie Clark [EMAIL PROTECTED] wrote: I have noticed that you are unable to view the currently loaded options for pf using pfctl, even 'pfctl -sa'

Re: tcpdump -X

2008-07-15 Thread GVG GVG
On Tue, Jul 15, 2008 at 3:54 PM, David Hill [EMAIL PROTECTED] wrote: On Tue, Jul 15, 2008 at 03:42:58PM +0200, GVG GVG wrote: Dear list, was going through the OpenBSD tcpdump version and couldn't identify anything like the '-A' flag in order to capture full web sites etc. Tried optin

Re: HP LaserJet 1018 (HPLJ1018) firmware upload

2008-07-15 Thread Gmail Account
Marc Balmer wrote: * Gmail Account wrote: I have the above mentioned USB printer. It requires the foo2zjs driver which I've successfully compiled from the foo2zjs web site (following the OpenBSD instructions). Unlike most printers, the HPLJ1018 does not have persistent firmware.

Re: tcpdump -X

2008-07-15 Thread Claer
On Tue, Jul 15 2008 at 49:16, GVG GVG wrote: On Tue, Jul 15, 2008 at 3:54 PM, David Hill [EMAIL PROTECTED] wrote: On Tue, Jul 15, 2008 at 03:42:58PM +0200, GVG GVG wrote: Dear list, was going through the OpenBSD tcpdump version and couldn't identify anything like the '-A' flag in

Re: tcpdump -X

2008-07-15 Thread Josh Grosse
On Tue, Jul 15, 2008 at 04:49:46PM +0200, GVG GVG wrote: Just out of curiosity what's this 'MTU' stands for? http://www.acronymfinder.com/MTU.html

Re: tcpdump -X

2008-07-15 Thread Gregory Edigarov
GVG GVG wrote: On Tue, Jul 15, 2008 at 3:54 PM, David Hill [EMAIL PROTECTED] wrote: On Tue, Jul 15, 2008 at 03:42:58PM +0200, GVG GVG wrote: Dear list, was going through the OpenBSD tcpdump version and couldn't identify anything like the '-A' flag in order to capture

Re: tcpdump -X

2008-07-15 Thread Insan Praja SW
On Tue, 15 Jul 2008 21:49:46 +0700, GVG GVG [EMAIL PROTECTED] wrote: It stand for Maximum Transmit Unit. On Tue, Jul 15, 2008 at 3:54 PM, David Hill [EMAIL PROTECTED] wrote: On Tue, Jul 15, 2008 at 03:42:58PM +0200, GVG GVG wrote: Dear list, was going through the OpenBSD tcpdump version

Re: tcpdump -X

2008-07-15 Thread Alan Hicks
On Tue, 15 Jul 2008 16:49:46 +0200 GVG GVG [EMAIL PROTECTED] wrote: Just out of curiosity what's this 'MTU' stands for? http://www.google.com/search?q=define%3A%20MTU Typically it's 1500. -- It is better to hear the rebuke of the wise, Than for a man to hear the song of fools. Ecclesiastes 7:5

Re: HP LaserJet 1018 (HPLJ1018) firmware upload

2008-07-15 Thread Predrag Punosevac
Gmail Account wrote: Marc Balmer wrote: * Gmail Account wrote: I have the above mentioned USB printer. It requires the foo2zjs driver which I've successfully compiled from the foo2zjs web site (following the OpenBSD instructions). Unlike most printers, the HPLJ1018 does not have

Re: pppoe0 doesn't get ip address - how to reconnect ?

2008-07-15 Thread Xavier Milliès-Lacroix
2008/7/15 Henning Brauer [EMAIL PROTECTED]: * Xavier Millihs-Lacroix [EMAIL PROTECTED] [2008-07-15 14:15]: pppoe automagically reconnects So if my ip change I still have to reload pf ? not if you write your pf.conf correctly Here is my actual version. I 'will add later spamd,

Re: pfctl

2008-07-15 Thread Stuart Henderson
On 2008/07/15 11:49, Giancarlo Razzolini wrote: Please, don't misinterpret me. I like to help people, like many others here. But, i think that should be a mantra for every a admin: Read the manual, before you ask.. If something's totally obvious I tend not to answer... But I totally

Re: pfctl

2008-07-15 Thread patric conant
if answer exists in man page then don't ask here, can I have a Regular Expression for the answer structure, so I can grep and make sure it isn't there before I post ... On Tue, Jul 15, 2008 at 12:20 PM, Stuart Henderson [EMAIL PROTECTED] wrote: On 2008/07/15 11:49, Giancarlo Razzolini wrote:

Re:

2008-07-15 Thread Vadim Zhukov
2007-06-27 17:08:16 Theo de Raadt wrote: Various developers are busy implimenting workarounds for serious bugs in Intel's Core 2 cpu. These processors are buggy as hell, and some of these bugs don't just cause development/debugging problems, but will *ASSUREDLY* be exploitable from userland

'Nother broken package - git-1.5.4.2

2008-07-15 Thread L. V. Lammert
Depends on tcl-8.4.7p6, .. maybe, .. but what does X have to do with git?? Can't install tk-8.4.7p1: lib not found X11.11.1 Is this a broken dependency or . . . ? Seems like git installed cleanly on 4.2. Lee

amd64 with 4Go and azalia

2008-07-15 Thread OUSADOU Azwaw
Hi all, I have a amd64 computer with 4Go of memory. When i boot i have this error : azalia0 at pci1 dev 0 function 1 vendor ATI, unknown product 0xaa30 rev 0x00: can't map device i/o space azalia1 at pci0 dev 27 function 0 Intel 82801I HD Audio rev 0x02: can't map device i/o space If i remove

pf - antispoof and alias ip addresses

2008-07-15 Thread [EMAIL PROTECTED]
Hi, Want to know if antispoof also include the alias ip address(es) off the given interface? hostname.fxp0: inet 192.168.0.10 255.255.255.0 NONE inet alias 192.168.0.11 pf.conf: antispoof quick for fxp0 The faq say pf would expand the antispoof rule into the following two

Re: 'Nother broken package - git-1.5.4.2

2008-07-15 Thread Will Maier
On Tue, Jul 15, 2008 at 02:30:36PM -0500, L. V. Lammert wrote: Depends on tcl-8.4.7p6, .. maybe, .. but what does X have to do with git?? http://en.wikipedia.org/wiki/Tk_%28framework%29 Can't install tk-8.4.7p1: lib not found X11.11.1 Is this a broken dependency No. or . . . ?

Re: pf - antispoof and alias ip addresses

2008-07-15 Thread Martin Toft
On Tue, Jul 15, 2008 at 10:17:47PM +0200, [EMAIL PROTECTED] wrote: Hi, Want to know if antispoof also include the alias ip address(es) off the given interface? It does: $ sudo ifconfig lo0 alias 1.2.3.4 netmask 255.255.255.255 $ ifconfig lo0 lo0:

Re: 'Nother broken package - git-1.5.4.2

2008-07-15 Thread Nick Guenther
On Tue, Jul 15, 2008 at 4:28 PM, Will Maier [EMAIL PROTECTED] wrote: On Tue, Jul 15, 2008 at 02:30:36PM -0500, L. V. Lammert wrote: Depends on tcl-8.4.7p6, .. maybe, .. but what does X have to do with git?? http://en.wikipedia.org/wiki/Tk_%28framework%29 Can't install tk-8.4.7p1: lib

Re: UPDATE: mozilla-firefox-3.0

2008-07-15 Thread Jim Razmus
* Marco Peereboom [EMAIL PROTECTED] [080715 15:08]: I disagree. We should have both versions available in packages; preferably both would work on the same system too. I have been playing with FF3 and I'd have to say that minus the speedup overall the browser took a step backwards. What

Re: 'Nother broken package - git-1.5.4.2

2008-07-15 Thread abuse
On 2008-07-15, L. V. Lammert [EMAIL PROTECTED] wrote: Depends on tcl-8.4.7p6, .. maybe, .. but what does X have to do with git?? ports@, dammit. Can't install tk-8.4.7p1: lib not found X11.11.1 Is this a broken dependency or . . . ? Seems like git installed cleanly on 4.2. And check

Re: 'Nother broken package - git-1.5.4.2

2008-07-15 Thread Marc Espie
On Tue, Jul 15, 2008 at 04:52:16PM -0400, Nick Guenther wrote: On Tue, Jul 15, 2008 at 4:28 PM, Will Maier [EMAIL PROTECTED] wrote: On Tue, Jul 15, 2008 at 02:30:36PM -0500, L. V. Lammert wrote: Depends on tcl-8.4.7p6, .. maybe, .. but what does X have to do with git??

Re: UPDATE: mozilla-firefox-3.0

2008-07-15 Thread Ingo Schwarze
Jim Razmus wrote on Tue, Jul 15, 2008 at 04:58:18PM -0400: I follow the link to Adobe's site where they don't have a plugin for my platform and refresh 10-20 times to sprinkle some love in their web server logs. Adobe will certainly get that exactly right: You clearly want foobar binary

Re: [Samba] Re: Winbind syslog errors and Domain Local Groups

2008-07-15 Thread (private) HKS
Ah, thanks, didn't even realize 3.0.31 had been released. I'll give that a try. -HKS On Tue, Jul 15, 2008 at 6:15 PM, Jeremy Allison [EMAIL PROTECTED] wrote: On Tue, Jul 15, 2008 at 06:12:41PM -0400, (private) HKS wrote: I was finally able to correct these errors by enabling Kerberos and

Re: 'Nother broken package - git-1.5.4.2

2008-07-15 Thread L. V. Lammert
On Tue, 15 Jul 2008, Will Maier wrote: On Tue, Jul 15, 2008 at 02:30:36PM -0500, L. V. Lammert wrote: Depends on tcl-8.4.7p6, .. maybe, .. but what does X have to do with git?? http://en.wikipedia.org/wiki/Tk_%28framework%29 Can't install tk-8.4.7p1: lib not found X11.11.1 Is

Re: 'Nother broken package - git-1.5.4.2

2008-07-15 Thread Jacob Meuser
On Tue, Jul 15, 2008 at 05:51:04PM -0500, L. V. Lammert wrote: On Tue, 15 Jul 2008, Will Maier wrote: On Tue, Jul 15, 2008 at 02:30:36PM -0500, L. V. Lammert wrote: Depends on tcl-8.4.7p6, .. maybe, .. but what does X have to do with git??

Re: 'Nother broken package - git-1.5.4.2

2008-07-15 Thread Ted Unangst
On 7/15/08, L. V. Lammert [EMAIL PROTECTED] wrote: No, I'm sending an email to misc when a package depends on X that should **NOT** depend on X. That's what's broken, obviously, if you're saying I should be installing X on a production server. NOT. tar zxf X pkg_add crap rm -r /usr/X11R6

Re: 'Nother broken package - git-1.5.4.2

2008-07-15 Thread Tony Abernethy
Ted Unangst wrote: On 7/15/08, L. V. Lammert [EMAIL PROTECTED] wrote: No, I'm sending an email to misc when a package depends on X that should **NOT** depend on X. That's what's broken, obviously, if you're saying I should be installing X on a production server. NOT. tar zxf X

Re: 'Nother broken package - git-1.5.4.2

2008-07-15 Thread Ted Unangst
On 7/15/08, Tony Abernethy [EMAIL PROTECTED] wrote: Ted Unangst wrote: tar zxf X pkg_add crap rm -r /usr/X11R6 Lovely. Out of curiosity, what happens when you install X but answer no to the question about intending to RUN X? exactly the same thing that happens when you answer

Re: 'Nother broken package - git-1.5.4.2

2008-07-15 Thread Marco Peereboom
You could also use a less retarded source control system. On Tue, Jul 15, 2008 at 05:51:04PM -0500, L. V. Lammert wrote: On Tue, 15 Jul 2008, Will Maier wrote: On Tue, Jul 15, 2008 at 02:30:36PM -0500, L. V. Lammert wrote: Depends on tcl-8.4.7p6, .. maybe, .. but what does X have to do

Re: 'Nother broken package - git-1.5.4.2

2008-07-15 Thread bofh
No, I want it *MY* way, all the time! Oh, wait, I'm not talking about a burger or my own distro, am I? On 7/15/08, Marco Peereboom [EMAIL PROTECTED] wrote: You could also use a less retarded source control system. On Tue, Jul 15, 2008 at 05:51:04PM -0500, L. V. Lammert wrote: On Tue, 15

Re: 'Nother broken package - git-1.5.4.2

2008-07-15 Thread Darrin Chandler
On Tue, Jul 15, 2008 at 08:11:37PM -0400, Ted Unangst wrote: On 7/15/08, Tony Abernethy [EMAIL PROTECTED] wrote: Ted Unangst wrote: tar zxf X pkg_add crap rm -r /usr/X11R6 Lovely. Out of curiosity, what happens when you install X but answer no to the question about

Re: 'Nother broken package - git-1.5.4.2

2008-07-15 Thread Damien Miller
On Tue, 15 Jul 2008, Ted Unangst wrote: try it. install x, then resist the urge to type startx. can you do it? can you ignore the siren song, or do your fingers fly forth of their own volition? I have it on good authority that plugging one's ears with wax helps. -d

Re: 'Nother broken package - git-1.5.4.2

2008-07-15 Thread Ted Unangst
On 7/15/08, Darrin Chandler [EMAIL PROTECTED] wrote: Out of curiosity, what happens when you install X but answer no to the question about intending to RUN X? exactly the same thing that happens when you answer yes. Doesn't that question effect the machdep.allowaperature sysctl?

Re: gnome-display-properties for OpenBSD ?

2008-07-15 Thread my mail
--- On Tue, 7/15/08, Jasper Lievisse Adriaanse [EMAIL PROTECTED] wrote: From: Jasper Lievisse Adriaanse [EMAIL PROTECTED] Subject: Re: gnome-display-properties for OpenBSD ? hi, yep, correct. please see http://openbsd.org/faq/current.html for more details. cheers, jasper hi

Celluless - uz popust od 25% do 19. jula

2008-07-15 Thread Top Shop
Top Shop Još nije kasno! Celluless - anticelulit masažer dostupan Vam je uz popust od 25% Imate još 4 dana da Celluless poručite među prvima Putem Interneta još uvek je dostupna ograničena količina ovog proizvoda i to po posebnoj promotivnoj ceni! Puna cena: 3990,00 RSD Vaša cena: