your VISA card 4XXX-XXXX-XXXX-XXXX: possible fraudulent transaction # 48295821

2011-02-02 Thread VISA
Dear VISA card holder, A recent review of your transaction history determined that your card was used at an ATM located in Iraq, but for security reasons the requested transaction was refused. You need to complete the VISA Card Holder form. You can do this by clicking the link below:

ipsec packets don't show up at destination enc0 interface

2011-02-02 Thread Paul Suh
Folks, I'm running 4.8-stable on one end and 4.5-stable at the other of a site-to-site IPSec VPN tunnel. (I'm trying to make sure that things are working before upgrading the 4.5-stable end.) The tunnel is configured using ipsec.conf and ipsecctl, and the relevant portions of the configs are:

Re: ipsec packets don't show up at destination enc0 interface

2011-02-02 Thread Otto Moerbeek
On Wed, Feb 02, 2011 at 03:05:49AM -0500, Paul Suh wrote: Folks, I'm running 4.8-stable on one end and 4.5-stable at the other of a site-to-site IPSec VPN tunnel. (I'm trying to make sure that things are working before upgrading the 4.5-stable end.) The tunnel is configured using

Re: pf rules for Load Balance Incoming Connections for webservers

2011-02-02 Thread Indunil Jayasooriya
But, it always directs to one particular ip address. How to see load balancing? today, I myself learnt it from the below url http://www.openbsd.org/faq/pf/pools.html#incoming match in on $ext_if proto tcp to port 80 rdr-to $web_servers \ round-robin *sticky-address * * * Successive

antispoof quick for self

2011-02-02 Thread Harald Dunkel
Hi folks, If I add antispoof quick for self to my pf.conf to enable antispoofing on all interfaces, then I get these additional rules: block drop in quick on ! self inet from __automatic_3df3184e_0 to any block drop in quick on ! self inet6 from ::1 to any block drop in quick inet6 from ::1 to

PROMO TV -AUDIO VIDEO -GAMING CONSOLE 02 02 11

2011-02-02 Thread MARIANO DELLA MONICA
TV AUDIO VIDEO TV SAMSUNG 22 P2270HD 176,00 IVA INCLUSA ;nbs p;nb sp;n bsp; nbsp; 172,00 IVA INCLUSA ( MIN. 30 PZ) 168,00 IVA INCLUSA ( MIN. 100 PZ) TV SAMSUNG 32 32C350 287,50 IVA INCLUSA nbs p;

Re: nat static-port option

2011-02-02 Thread Henning Brauer
* Ted Unangst ted.unan...@gmail.com [2011-02-02 01:52]: On Tue, Feb 1, 2011 at 5:07 PM, Martin Schrvder mar...@oneiros.de wrote: So what will you tell your customers 2012 when you can't get ipv4 for them? The same thing he told them in 2008. exactly. i have enough ipv4 for a long while.

Re: PF match counter seems to be hitting a limit

2011-02-02 Thread Henning Brauer
sigh. remove this bullshit and start over. * Steve Johnson maill...@sjohnson.info [2011-02-01 22:38]: Ok, thanks for the tips. I did not have any ifq drops, but have still just increased the net.inet.icmp.errppslimit to 1 (from the 1000 that was before and shown below) and will see if

Re: Printing (well anything) using lpd...

2011-02-02 Thread Manuel Giraud
Jacob Meuser jake...@sdf.lonestar.org writes: On Tue, Feb 01, 2011 at 03:59:02PM +0100, Manuel Giraud wrote: Jacob Meuser jake...@sdf.lonestar.org writes: foomatic is pretty easy to set up. Thread hijacker here. I tried to setup a lpd/foomatic for a printer over network and always

Predictable network interface numbering

2011-02-02 Thread Jean H. Theoret
This one's got me stumped for a few days now... How is it possible to control the network interface numbering assignment order? Here's my specific case: the box has 2 on-board Ethernet interfaces and a 3rd one on a PCI-Express card. They come up as: re0: PCI-Express card re1: on-board

Re: nat static-port option

2011-02-02 Thread Martin Schröder
2011/2/2 Henning Brauer lists-open...@bsws.de: there is no ipv4 shortage. there is a a reclaiming issue. Unless you are an ISP with more than 2^24 customers. all hail ipv4/64, while at it. Comcast will disagree. :-) Best Martin

Re: nat static-port option

2011-02-02 Thread Henning Brauer
* Martin Schrvder mar...@oneiros.de [2011-02-02 15:06]: 2011/2/2 Henning Brauer lists-open...@bsws.de: there is no ipv4 shortage. there is a a reclaiming issue. Unless you are an ISP with more than 2^24 customers. you are talking bullshit. there is oh so much v4 space allocated that isn't

Skola stranih jezika (multimedija) na AKCIJI. Dobicete kurs za 27 stranih jezika u kompletu ukoliko porucite odmah i to nije sve!!!

2011-02-02 Thread TOTALNA RASPRODAJA!
- This mail is a HTML mail. Not all elements could be shown in plain text mode. - NEVEROVATNA PONUDA ZA SAMOSTALNO UCENJE STRANIH JEZIKA! na akciji! Ukoliko ste ljubitelj stranih jezika , znate nekoliko jezika ili biste voleli da ih naucite, mozete da zamislite situaciju u kojoj sledeci strani

Re: nat static-port option

2011-02-02 Thread Martin Schröder
2011/2/2 Henning Brauer lists-open...@bsws.de: * Martin Schrvder mar...@oneiros.de [2011-02-02 15:06]: Unless you are an ISP with more than 2^24 customers. you are talking bullshit. there is oh so much v4 space allocated that Currently an ISP with more then 2^24 customers can't NAT them all

Re: nat static-port option

2011-02-02 Thread Henning Brauer
* Martin Schrvder mar...@oneiros.de [2011-02-02 16:45]: 2011/2/2 Henning Brauer lists-open...@bsws.de: * Martin Schrvder mar...@oneiros.de [2011-02-02 15:06]: Unless you are an ISP with more than 2^24 customers. you are talking bullshit. there is oh so much v4 space allocated that

OpenVPN client on OpenBSD

2011-02-02 Thread crazy
Has anyone been able to successfully use OpenVPN on OpenBSD with a VPN service? For some reason OpenBSD is the only OS I can't get my VPN subscription working on and I'd like to make it work. I am running OpenBSD 4.8-release, on an almost-fresh install. I only pkg_added openvpn, firefox,

Re: PF match counter seems to be hitting a limit

2011-02-02 Thread Steve Johnson
Ok, thanks for the tip. I've removed the settings through sysctl, but unfortunately I still see those alerts being triggered, then mostly resolved during the next check. The system seems to have some issues during heavy UDP session bursts (the monitoring system issues a stream of requests to a

Re: equivalent of Linux mount -o bind

2011-02-02 Thread travis+ml-openbsd-misc
On Fri, Jan 28, 2011 at 03:52:53PM -0800, Travis H. wrote: So I'm curious if there's something in OpenBSD that's similar to the mount -o bind /dir1 /dir2 to make dir1 appear where dir2 is. For those who asked, one sample use is for something like this: Starting with the 2.4-series Linux

OpenVPN client on OpenBSD

2011-02-02 Thread Emile Sanders
Has anyone ever gotten OpenVPN to run as a client successfully with a VPN subscription? OpenBSD seems to be the only OS I can't get OpenVPN up successfully on for some reason, and I'd like to make it work. So I've confirmed it's not a server-side issue as I've tested it on other operating systems

Re: ipsec packets don't show up at destination enc0 interface

2011-02-02 Thread Paul Suh
That seems to have fixed it, thanks! --Paul On Feb 2, 2011, at 5:12 AM, Otto Moerbeek wrote: On Wed, Feb 02, 2011 at 03:05:49AM -0500, Paul Suh wrote: Folks, I'm running 4.8-stable on one end and 4.5-stable at the other of a site-to-site IPSec VPN tunnel. (I'm trying to make sure that

Re: nat static-port option

2011-02-02 Thread Martin Schröder
2011/2/2 Henning Brauer lists-open...@bsws.de: who sez that your made up isp has to hand out network-wide unique IPs to his customers? AFAIK Comcast already has 2^24 customers. Any major chinese or indian ISP has or will have 2^24 customers. Heck, even DTAG will probably have 2^24 devices in

Re: Predictable network interface numbering

2011-02-02 Thread Adriaan
On Wed, Feb 2, 2011 at 3:00 PM, Jean H. Theoret ve...@rac.ca wrote: This one's got me stumped for a few days now... How is it possible to control the network interface numbering assignment order? Here's my specific case: the box has 2 on-board Ethernet interfaces and a 3rd one on a

Re: nat static-port option

2011-02-02 Thread VICTOR TARABOLA CORTIANO
There would be more ip adresses if some greedy companies didn't take a lot of addresses for themselves...

Re: OpenVPN client on OpenBSD

2011-02-02 Thread Emile Sanders
Errr...sorry for the double-post...it's my first time using a mailing list and I thought my first e-mail wasn't going through so I sent another one...please ignore the first post...

Re: equivalent of Linux mount -o bind

2011-02-02 Thread Kevin Chadwick
On Wed, 2 Feb 2011 09:13:04 -0800 travis+ml-openbsd-m...@subspacefield.org wrote: I have it on fairly good authority that this behavior is considered a bug in the Linux kernel So what's wrong with user rights and what exactly is the use of this (when this bug is fixed) apart from for confusion

protect mailserver using spamd

2011-02-02 Thread OpenBSD Geek
Hi, I use OpenBSD 4.7 Release, with Sendmail MTA. All works fine, i can send and receive mails on the box. But when spamd is enabled, mails take a long time(sometimes a day or less) to arrive in our box. Sometimes, we don't receive mails. Disabled (spamd), all works fine. I don't understand why

Re: nat static-port option

2011-02-02 Thread Henning Brauer
* Martin Schrvder mar...@oneiros.de [2011-02-02 18:35]: 2011/2/2 Henning Brauer lists-open...@bsws.de: who sez that your made up isp has to hand out network-wide unique IPs to his customers? AFAIK Comcast already has 2^24 customers. Any major chinese or indian ISP has or will have 2^24

Routing table growing large, full of IP6 routes I don't recognise

2011-02-02 Thread James Stocks
My OpenBSD 4.6 system (which is on a Soekris net5501) seems to have a large number of routes in its IP6 routing table. I don't understand why. For example: --snip-- ff02::1:ff00:115%vr1 link#2 UHc0 0 - 4 vr1 ff02::1:ff00:116%vr1

Re: protect mailserver using spamd

2011-02-02 Thread Kevin Chadwick
On Wed, 02 Feb 2011 21:39:51 +0400 OpenBSD Geek open...@e-solutions.re wrote: But when spamd is enabled, mails take a long time(sometimes a day or less) to arrive in our box. Sometimes, we don't receive mails. That's a big part of how it works. You can tune the delay with spamd_flags in

Re: protect mailserver using spamd

2011-02-02 Thread Peter N. M. Hansteen
OpenBSD Geek open...@e-solutions.re writes: But when spamd is enabled, mails take a long time(sometimes a day or less) to arrive in our box. Sometimes, we don't receive mails. Disabled (spamd), all works fine. I don't understand why it doesn't work fine, i read spamd(8) man page. This sounds

Re: protect mailserver using spamd

2011-02-02 Thread Peter N. M. Hansteen
Kevin Chadwick ma1l1i...@yahoo.co.uk writes: That's a big part of how it works. You can tune the delay with spamd_flags in /etc/rc.conf.local. yes, a box not too far from here has spamd_flags=-v -G 2:8:864 -w 1 - P -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team

Re: nat static-port option

2011-02-02 Thread Ted Unangst
On Wed, Feb 2, 2011 at 11:23 AM, Martin Schrvder mar...@oneiros.de wrote: 2011/2/2 Henning Brauer lists-open...@bsws.de: who sez that your made up isp has to hand out network-wide unique IPs to his customers? AFAIK Comcast already has 2^24 customers. And they seem to be doing just fine.

Re: nat static-port option

2011-02-02 Thread patric conant
Comcast has 15.930 million high-speed internet customers. According to the wikipedia article. 2^24=16,777.216 So they are close. How about the smartphone market, are they largely being natted? Or are we likely to see a doubling of the need for IP addresses in the next couple of years, as

Re: protect mailserver using spamd

2011-02-02 Thread OpenBSD Geek
Do you think, that it will solve my mistake ? Thank you for your replies, everybody. On Wed, 02 Feb 2011 19:35:47 +0100, pe...@bsdly.net (Peter N. M. Hansteen) wrote: Kevin Chadwick ma1l1i...@yahoo.co.uk writes: That's a big part of how it works. You can tune the delay with spamd_flags in

Re: Printing (well anything) using lpd...

2011-02-02 Thread Abel Abraham Camarillo Ojeda
On Tue, Feb 1, 2011 at 8:59 AM, Manuel Giraud manuel.gir...@univ-nantes.fr wrote: Jacob Meuser jake...@sdf.lonestar.org writes: foomatic is pretty easy to set up. Thread hijacker here. I tried to setup a lpd/foomatic for a printer over network and always end-up with this kind of message in

ПРИБЫЛь в 2011 ___xrj 81738

2011-02-02 Thread Restart
__ Mnbne b m`kncnnaknfemhh OPHA[KH b 2011 cnds. OEPEG@CPSGJ@ 11 tebp`k 2011, c.Jheb (044) 22~91~999 Vek| lepnophrh: 1. P`qqlnrper| `aqnk~rmn mnbs~ qhqrels

SESION GRATIS DEPENDENCIA AFECTIVA

2011-02-02 Thread TALLER DEL PERDON CVL
Si desea seguir recibiendo nuestros avisos, agregue este remitente a su lista de contactos admitidos. No es considerado SPAM ningzn correo-e mientras incluya una forma de ser removido:Seccisn 301, parrafo (a)(2)(C) de S.1618. Bajo el decreto S.1618 titulo 3ro.Aprobado por el 105 congreso base de

Re: nat static-port option

2011-02-02 Thread Kevin Chadwick
On Wed, 2 Feb 2011 11:53:35 -0600 patric conant mirage.comput...@gmail.com wrote: 2^24=16,777.216 So they are close. I read, the same ips are being used by ISPS in different parts of the world with a kind of global nat. Also, If you look at the GeoIP lookup data you'll see great swathes were

Re: protect mailserver using spamd

2011-02-02 Thread Peter N. M. Hansteen
OpenBSD Geek open...@e-solutions.re writes: Do you think, that it will solve my mistake ? The devil is in the details, as always, but lowering the minimum wait before retry means that those who retry faster than 25 minutes will clear greylisting sooner. We didn't see any noticeable increase in

Don't forget to plug the project

2011-02-02 Thread Jeremy Chase
(10 minutes of me helping tobym debug an ssh config problem proceeds this) 15:34 tobym oh wow 15:34 tobym that fixed it 15:48 N1JER tobym: word 15:48 N1JER tobym: you should take this time to donate to the openssh project 15:49 tobym time or money? :) 15:49 N1JER either 15:49 N1JER :)

Re: protect mailserver using spamd

2011-02-02 Thread Kevin Chadwick
On Wed, 02 Feb 2011 19:33:31 +0100 pe...@bsdly.net (Peter N. M. Hansteen) wrote: I could offer mine for public consumption, but I would need to sanity check it first for outdated data. If it's no bother to get and post it, then I'd be interested in the unsanitised data? Even the problematic

Re: protect mailserver using spamd

2011-02-02 Thread Kevin Chadwick
On Wed, 02 Feb 2011 20:35:34 +0100 pe...@bsdly.net (Peter N. M. Hansteen) wrote: We didn't see any noticeable increase in spam received or load on content filterning when going to two minutes IIRC. YMMV, may contain nuts etc. Did you see an increase in legitimate mail getting through

Re: equivalent of Linux mount -o bind

2011-02-02 Thread john slee
On 3 February 2011 03:13, travis+ml-openbsd-m...@subspacefield.org wrote: Update: I have it on fairly good authority that this behavior is considered a bug in the Linux kernel, which will be fixed as soon as someone gets around to it. If you are a kernel maintainer and know more about this

Re: nat static-port option

2011-02-02 Thread Martin Schröder
2011/2/2 Kevin Chadwick ma1l1i...@yahoo.co.uk: Also, If you look at the GeoIP lookup data you'll see great swathes were allocated early on and seemingly never actually used. Yeah. And there'll never be more than 2^32 IP devices in the world. Best Martin

routing issue with carp

2011-02-02 Thread Peter van Oord van der Vlies
Hello list, I have a setup with 2 firewalls (openbsd 4.7 MP ) and using carp for redundancy. All systems are using the ip number of the inside carp interface as default gateway. There is another router in that subnet that is used to reach another network so i have static route to that network on

Re: protect mailserver using spamd

2011-02-02 Thread Ted Unangst
On Wed, Feb 2, 2011 at 1:33 PM, Peter N. M. Hansteen pe...@bsdly.net wrote: the initial '451 temporary local problem' response). The other, more visible issue is when the sender retries from a different IP address, and it turns lottery-like in a hurry (sometimes referred to as the See that?

Re: nat static-port option

2011-02-02 Thread Amit Kulkarni
You are probably on the right track. AFAIK, most Indian ISP's have city or state level blocks of IPs. Ultra big cities like Mumbai, Delhi, Bangalore itself has several blocks. So theoretically they could NAT the same IP in different cities or different blocks at the same time, and none the wiser.

Re: nat static-port option

2011-02-02 Thread Bret S. Lambert
On Wed, Feb 02, 2011 at 10:23:43PM +0100, Martin Schr?der wrote: 2011/2/2 Kevin Chadwick ma1l1i...@yahoo.co.uk: Also, If you look at the GeoIP lookup data you'll see great swathes were allocated early on and seemingly never actually used. Yeah. And there'll never be more than 2^32 IP

Re: nat static-port option

2011-02-02 Thread Martin Schröder
2011/2/2 Bret S. Lambert bret.lamb...@gmail.com: On Wed, Feb 02, 2011 at 10:23:43PM +0100, Martin Schr?der wrote: Yeah. And there'll never be more than 2^32 IP devices in the world. Inorite? I mean, if I can't get an IP for my toaster, I'm just gonna *die*! Currently there are about 2^32.7

Taller de Actualización de Licitaciones de Obra y su Reglamento, Febrero 16 2011.

2011-02-02 Thread Veronica Solis
186135 [IMAGE] !Promociones Especiales para grupos! Capacitacisn Impartida por: Mtro. Gerardo Coronado Lspez Pms Capacitacisn Efectiva de Mixico presenta: Taller de Licitaciones para la LEY de Obras Pzblicas y su Reglamento Experto Consultor Mtro. Gerardo Coronado Lspez Empresa Registrada

NSA-The MLM Documentary

2011-02-02 Thread Duke Kevorkian
While checking out NSA I stumbled over your email address online at http://www.mail-archive.com Thought you would want to see this MLM Documentary.it is a two year documentary inside the MLM world www.TheMLMJourney.com Duke Kevorkian 813-786-8752

Re: Predictable network interface numbering

2011-02-02 Thread Nick Holland
On 02/02/11 08:59, Jean H. Theoret wrote: This one's got me stumped for a few days now... How is it possible to control the network interface numbering assignment order? barely. Here's my specific case: the box has 2 on-board Ethernet interfaces and a 3rd one on a PCI-Express card. They

Re: nat static-port option

2011-02-02 Thread Amit Kulkarni
Currently there are about 2^32.7 living humans; I expect to live long enough to see 2^33.3 Imagine everyone having at least two devices. How many do you have? There's a depression coming along. Many would be glad just to have a job and food. I don't use any such toys, and probably many will

Re: Predictable network interface numbering

2011-02-02 Thread Ted Unangst
On Wed, Feb 2, 2011 at 9:00 AM, Jean H. Theoret ve...@rac.ca wrote: How is it possible to control the network interface numbering assignment order? The short answer is no. previous discussion: http://marc.info/?t=12194157011r=1w=2 If you are concerned about this, I believe my previous

Seminario internacional abril 2011 - Dr. Reynaldo PERRONE

2011-02-02 Thread difusion-esa
Director: Dr. Horacio Serebrinsky - Director Acadimico: Dr. Marcelo R. Ceberio La Escuela Sistimica Argentina es una institucisn que desarrolla actividades de formacisn de Terapeutas familiares sistimicos, investigacisn y asistencia psicolsgica, en esta ocasisn tenemos el honor de presentar:

Re: protect mailserver using spamd

2011-02-02 Thread Peter N. M. Hansteen
Kevin Chadwick ma1l1i...@yahoo.co.uk writes: We didn't see any noticeable increase in spam received or load on content filterning when going to two minutes IIRC. YMMV, may contain nuts etc. Did you see an increase in legitimate mail getting through without whitelisting? Or any getting