Re: bgpd, nexthop and dynamically created interfaces

2006-04-10 Thread tony sarendal
On 10/04/06, Henning Brauer [EMAIL PROTECTED] wrote: * tony sarendal [EMAIL PROTECTED] [2006-04-08 00:51]: It looks like bgpd has a problem with validating nexthop on new interfaces when they are created. A flap of the interface or restarting bgpd makes nexthop validate. I have only

Re: bgpd, nexthop and dynamically created interfaces

2006-04-10 Thread tony sarendal
On 10/04/06, tony sarendal [EMAIL PROTECTED] wrote: On 10/04/06, Henning Brauer [EMAIL PROTECTED] wrote: * tony sarendal [EMAIL PROTECTED] [2006-04-08 00:51]: It looks like bgpd has a problem with validating nexthop on new interfaces when they are created. A flap

Re: bgpd, nexthop and dynamically created interfaces

2006-04-10 Thread tony sarendal
On 10/04/06, Henning Brauer [EMAIL PROTECTED] wrote: * tony sarendal [EMAIL PROTECTED] [2006-04-10 19:04]: On 10/04/06, Henning Brauer [EMAIL PROTECTED] wrote: * tony sarendal [EMAIL PROTECTED] [2006-04-08 00:51]: It looks like bgpd has a problem with validating nexthop on new

bgpd, ibgp route-reflector routing loop

2006-04-10 Thread tony sarendal
172.16.1.13100 400 i ar206-CPH# I have so far been unable to find a fixed pattern of where/why this happens. Any ideas ? /Tony -- Tony Sarendal - [EMAIL PROTECTED] IP/Unix -= The scorpion replied, I couldn't help it, it's my nature =-

Re: bgpd, nexthop and dynamically created interfaces

2006-04-10 Thread tony sarendal
On 10/04/06, Claudio Jeker [EMAIL PROTECTED] wrote: On Mon, Apr 10, 2006 at 06:56:33PM +0100, tony sarendal wrote: On 10/04/06, Henning Brauer [EMAIL PROTECTED] wrote: * tony sarendal [EMAIL PROTECTED] [2006-04-10 19:04]: On 10/04/06, Henning Brauer [EMAIL PROTECTED] wrote

Re: Questions about 3.9 Installation on External USB Disk

2006-04-09 Thread Tony
Dave Feustel wrote: I got my 3.9 Cdrom set yesterday and today started installing it on an external usb disk so as not to wipe out my existing 3.8 setup. When I got to the disk partition, I erased the existing 'a' partition (dos) and created a new bsd 'a' partition. The partition had a

Re: Questions about 3.9 Installation on External USB Disk

2006-04-09 Thread Tony
Dave Feustel wrote: On Sunday 09 April 2006 16:41, [EMAIL PROTECTED] wrote: Something is very confused. I do not believe an existing 'a' partition (dos). I bought the disk at Best Buy and copied a few files from /home/daf to test the disk. The files were copied to the usb-connected

Re: (OT: PostgreSQL vs MySQL)

2006-04-08 Thread Tony
Josh Tolley wrote: On 4/7/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: As to losing data, I suspect you'd lose a lot more from PostgreSQL than MySQL on a failing hard drive. Any particular reason for that suspicion? I ask out of genuine interest, and I promise I don't want to start a

Re: Belkin wireless adapter

2006-04-08 Thread tony sarendal
On 08/04/06, tony sarendal [EMAIL PROTECTED] wrote: On 05/04/06, Jonathan Gray [EMAIL PROTECTED] wrote: On Wed, Apr 05, 2006 at 02:07:54AM +0100, pedro la peu wrote: The 0x705c has a ZyDAS ZD1211 chipset in it, the 0x7050 is Ralink. A Ralink based F5D7050 can be unambiguously

Re: (OT: PostgreSQL vs MySQL)

2006-04-07 Thread Tony
Chris Kuethe wrote: On 06 Apr 2006 18:12:59 -0700, Randal L. Schwartz merlyn@stonehenge.com wrote: Given the cost of programmer time (and the cost of lost data) vs the cost of a slightly faster processor, is it ever really worth it even if MySQL is *twice* as fast? Yes. Example 1:

bgpd, nexthop and dynamically created interfaces

2006-04-07 Thread tony sarendal
, unknown Looking good 10.1.1.14valid vlan16 UP, Ethernet, unknown 172.16.1.5 valid vlan12 UP, Ethernet, unknown 10.1.1.1 valid vlan13 UP, Ethernet, unknown cr203-STO# /Tony -- Tony Sarendal - [EMAIL PROTECTED] IP/Unix -= The scorpion replied

bgpd originator backwards

2006-04-05 Thread tony sarendal
I installed a route-collector in my test network to get a better view on things. Originator is backwards. /Tony quagga-bgpd# sh ip bgp 192.168.10.0 BGP routing table entry for 192.168.10.0/24 Paths: (11 available, best #2, table Default-IP-Routing-Table) Not advertised to any peer Local

Re: bgpd originator backwards

2006-04-05 Thread tony sarendal
On 05/04/06, tony sarendal [EMAIL PROTECTED] wrote: I installed a route-collector in my test network to get a better view on things. Originator is backwards. Correction, I installed a route-collector in my openbgp network which peers with all boxes. According the route-collector all

Re: bgpd originator backwards

2006-04-05 Thread tony sarendal
On 05/04/06, tony sarendal [EMAIL PROTECTED] wrote: On 05/04/06, tony sarendal [EMAIL PROTECTED] wrote: I installed a route-collector in my test network to get a better view on things. Originator is backwards. Correction, I installed a route-collector in my openbgp network

openbgpd test. Originator_id error followed by attr_diff: equal attributes encountered

2006-04-05 Thread tony sarendal
: session_dispatch_imsg: pipe closed: Connection refused Apr 5 13:13:39 cr212-FRA bgpd[3196]: kernel routing table decoupled Apr 5 13:13:39 cr212-FRA bgpd[3196]: Terminating -- Tony Sarendal - [EMAIL PROTECTED] IP/Unix -= The scorpion replied, I couldn't help it, it's my nature =-

Re: openbgpd test. Originator_id error followed by attr_diff: equal attributes encountered

2006-04-05 Thread tony sarendal
On 05/04/06, tony sarendal [EMAIL PROTECTED] wrote: After a jug of coffee I tried being a bit more methodical. I took the entire network down and brought up one router at a time. I monitored the prefix 192.168.30.0/24 from a route-collector sitting on 192.168.30.10, the first router

Re: openbgpd test. Originator_id error followed by attr_diff: equal attributes encountered

2006-04-05 Thread tony sarendal
On 05/04/06, Claudio Jeker [EMAIL PROTECTED] wrote: On Wed, Apr 05, 2006 at 12:30:56PM +0100, tony sarendal wrote: On 05/04/06, tony sarendal [EMAIL PROTECTED] wrote: ... On a side note, at this stage I did: cr211-FRA# bgpctl reload reload request sent. cr211-FRA

Re: bgpd originator backwards

2006-04-05 Thread tony sarendal
On 05/04/06, Claudio Jeker [EMAIL PROTECTED] wrote: On Wed, Apr 05, 2006 at 08:45:22AM +0100, tony sarendal wrote: I installed a route-collector in my test network to get a better view on things. Originator is backwards. /Tony quagga-bgpd# sh ip bgp 192.168.10.0 BGP routing table

Re: openbgpd test. Originator_id error followed by attr_diff: equal attributes encountered

2006-04-05 Thread tony sarendal
On 05/04/06, Claudio Jeker [EMAIL PROTECTED] wrote: On Wed, Apr 05, 2006 at 01:19:44PM +0100, tony sarendal wrote: On 05/04/06, Claudio Jeker [EMAIL PROTECTED] wrote: On Wed, Apr 05, 2006 at 12:30:56PM +0100, tony sarendal wrote: On 05/04/06, tony sarendal [EMAIL PROTECTED] wrote

Re: openbgpd test. Originator_id error followed by attr_diff: equal attributes encountered

2006-04-05 Thread tony sarendal
On 05/04/06, tony sarendal [EMAIL PROTECTED] wrote: On 05/04/06, Claudio Jeker [EMAIL PROTECTED] wrote: On Wed, Apr 05, 2006 at 01:19:44PM +0100, tony sarendal wrote: On 05/04/06, Claudio Jeker [EMAIL PROTECTED] wrote: On Wed, Apr 05, 2006 at 12:30:56PM +0100, tony sarendal

Re: When would you NOT use OpenBSD?

2006-04-05 Thread Tony
Daniel Ouellet wrote: I'm not saying that having a blobbed driver in-tree would be an improvement - however, a machine that runs is likely to be an improvement over one that doesn't, at least for a while (because, as pointed out, bugs like blobs). I prefer looking at what's supported first

Re: ADSL with pppoa (over ATM)

2006-04-04 Thread tony sarendal
On 04/04/06, Craig Skinner [EMAIL PROTECTED] wrote: On Sat, Apr 01, 2006 at 01:05:50PM +0100, tony sarendal wrote: I'm afraid it is. Look at the third option in 4.4.2.10. (PPPoE LLC/SNAP) That is optional at the discretion of the ISP Correct default UK ADSL is VC-MUX and therefore

Re: fatal in RDE: attr_diff: equal attributes encountered

2006-04-04 Thread tony sarendal
On 04/04/06, Claudio Jeker [EMAIL PROTECTED] wrote: On Mon, Apr 03, 2006 at 10:37:38PM +0100, tony sarendal wrote: I'm playing a bit with bgpd while trying to get the kids to sleep, 50% to go. With Hennings next-hop self patch I made a minimal config and slapped together a network

Re: OpenBGP: aggregating routes / set neighbor next-hop

2006-04-04 Thread tony sarendal
the core, and thus not installing that /24 into the routing table. /Tony -- Tony Sarendal - [EMAIL PROTECTED] IP/Unix -= The scorpion replied, I couldn't help it, it's my nature =-

Re: OpenBGP: aggregating routes / set neighbor next-hop

2006-04-04 Thread tony sarendal
On 04/04/06, Claudio Jeker [EMAIL PROTECTED] wrote: On Tue, Apr 04, 2006 at 11:46:24AM +0100, tony sarendal wrote: On 04/04/06, Falk Brockerhoff [EMAIL PROTECTED] wrote: Am 29.03.2006 um 14:32 schrieb Falk Brockerhoff: that, again, is sth nobody ever asked for or missed

Re: VLAN-Problems

2006-04-04 Thread tony sarendal
lladdr 00:13:d4:de:cf:88 media: Ethernet autoselect (1000baseT half-duplex) status: no carrier Do you have full duplex hardcoded on the switch and sk0 set to auto negotiate ? /Tony -- Tony Sarendal - [EMAIL PROTECTED] IP/Unix -= The scorpion replied

fatal in RDE: attr_diff: equal attributes encountered

2006-04-03 Thread tony sarendal
peer, nexthop, clusterlist should be different though, metric might be the same as previous prefix. If I get the little guy to sleep before me I'll try to have a closer look. /Tony -- Tony Sarendal - [EMAIL PROTECTED] IP/Unix -= The scorpion replied, I couldn't help

Re: ADSL with pppoa (over ATM)

2006-04-01 Thread tony sarendal
On 01/04/06, Craig Skinner [EMAIL PROTECTED] wrote: Set the MTU and MRU to 1453, not 1500. 1453 ? Explain please. -- Tony Sarendal - [EMAIL PROTECTED] IP/Unix -= The scorpion replied, I couldn't help it, it's my nature =-

Re: ADSL with pppoa (over ATM)

2006-04-01 Thread tony sarendal
On 01/04/06, Craig Skinner [EMAIL PROTECTED] wrote: On Sat, Apr 01, 2006 at 09:16:33AM +0100, tony sarendal wrote: On 01/04/06, Craig Skinner [EMAIL PROTECTED] wrote: Set the MTU and MRU to 1453, not 1500. 1453 ? Explain please. Typo, should have been 1458: http

Re: ADSL with pppoa (over ATM)

2006-04-01 Thread tony sarendal
On 01/04/06, Craig Skinner [EMAIL PROTECTED] wrote: On Sat, Apr 01, 2006 at 10:39:26AM +0100, tony sarendal wrote: In my case (aslo on crappy UK broadband) You should try it in NZ, 128k upstream! 1454 is actually optimal. On the dsl part of the link my connection runs the Ethernet

Re: OpenBGP: aggregating routes / set neighbor next-hop

2006-03-29 Thread tony sarendal
that makes your other routes have a route to that... like OpenOSPFD :) or rewrite nexthop so you can run without an IGP. When I tested openbgp I did that with the filter and set, although next-hop-self would have been nice. /Tony

Re: OpenBGP: aggregating routes / set neighbor next-hop

2006-03-29 Thread tony sarendal
networks we don't use any aggregation of prefixes. In general I try to avoid it anyway if I build something new. -- Tony Sarendal - [EMAIL PROTECTED] IP/Unix -= The scorpion replied, I couldn't help it, it's my nature =-

Re: OpenBGP: aggregating routes / set neighbor next-hop

2006-03-29 Thread tony sarendal
On 29/03/06, Claudio Jeker [EMAIL PROTECTED] wrote: On Wed, Mar 29, 2006 at 01:33:15PM +0100, tony sarendal wrote: The second problem is, that I want to announce an external full-feed, received with openbgpd, to my core-router. This works fine, but the next-hop is the ip-adress

Re: OpenBGP: aggregating routes / set neighbor next-hop

2006-03-29 Thread tony sarendal
in the network offers some featurettes which you can't get without MPLS TE, and maybe not even then in reality. /Tony -- Tony Sarendal - [EMAIL PROTECTED] IP/Unix -= The scorpion replied, I couldn't help it, it's my nature =-

Re: It's not about the money

2006-03-25 Thread Tony
It's a lot like mountain climbing. People do it, although personally I can't really imagine why. Because it's there. Because they can. That's why. It is not rational. Nice words maybe don't hurt, but at that level are certainly irrelevant. Me, I lurk on this list because of the attitude and the

Re: OpenBGPd with dynamic keying (ipsec ike support)

2006-03-10 Thread tony sarendal
support for dynamic keying is for securing the bgp session itself, nothing more. /Tony -- Tony Sarendal - [EMAIL PROTECTED] IP/Unix -= The scorpion replied, I couldn't help it, it's my nature =-

Re: VIA VT6102 support?

2006-03-07 Thread tony sarendal
: phase authenticate pppoe0: phase network -- Tony Sarendal - [EMAIL PROTECTED] IP/Unix -= The scorpion replied, I couldn't help it, it's my nature =-

Re: pre-orders

2006-03-07 Thread tony sarendal
girlfriend put the 3.8 t-shirt... 3.9 order placed also, and she says I'm not organized. /Tony

Re: mod_python on obsd Apache

2006-02-26 Thread tony sarendal
install Never tried that combo. modpython 3.2.x and apache2.0 works for me on openbsd3.7 and .8's without any hassle except bumping some semaphores number with sysctl. /Tony

booter Re: help me

2006-02-24 Thread Tony Sterrett
Somebody should gave him the boot. Respectfully, Tony Sterrett [EMAIL PROTECTED] Consultant in Open Source Software, featuring OpenBSD and Linux. www.sterrett.net (858) 433-1467 San Diego (408) 705-2135 San Jose On Feb 24, 2006, at 5:06 PM, julio perez wrote: hey, umm..i need help. Umm..can

Re: python2.4 glitch

2006-02-23 Thread Tony Sterrett
On Wed, Feb 22, 2006 at 03:21:38AM -0800, Tony Sterrett wrote: I just compiled python2.4 which recommended for Zope 2.9.0. There a small glitch in configure. You'll get an error like below. Its late so just all reference to define_xopen_source starting around 1488. this has to do with select

python2.4 glitch

2006-02-22 Thread Tony Sterrett
Include/pyport.h:116, from Include/Python.h:55, from Modules/python.c:3: /usr/include/sys/event.h:53: error: syntax error before u_int /usr/include/sys/event.h:55: error: syntax error before u_short gmake: *** [Modules/python.o] Error 1 Respectfully, Tony

Re: OpenBGPD dropping sessions.

2006-02-19 Thread tony sarendal
closed the connection (aka, tcp session went down). Why, we cannot know. I'd bet my half-full beer that you hit the max-prefix limit of your peer. /Tony

Re: X11 exploit info

2006-02-13 Thread Tony
Matthias Kilian wrote: On Mon, Feb 13, 2006 at 02:00:24PM -0500, Daniel Ouellet wrote: I would expect the people writing books, specially on OpenBSD to know a lots more then me, so that I can learn from them, but if what you say is true, it make me question my idea and intention of buying

Re: PF or BPF

2006-02-13 Thread Tony Sterrett
jt 14 jf 15 (014) ret #96 (015) ret #0 mail# Respectfully, Tony Sterrett [EMAIL PROTECTED] Consultant in Open Source Software, featuring OpenBSD and Linux. www.sterrett.net (858) 433-1467 San Diego (408) 705-2135 San Jose On Feb 13, 2006, at 3:17 PM, Ray Lai wrote: On Mon

Re: PF or BPF

2006-02-13 Thread Tony Sterrett
On Feb 13, 2006, at 5:16 PM, Ted Unangst wrote: On 2/13/06, Tony Sterrett [EMAIL PROTECTED] wrote: I'm looking at the tradeoff of porting bpf with states from linux to OpenBSD from linux. Daniel Hartmeier in Design and Performance of the OpenBSD Stateful Packet Filter (pf) says that pf

Re: BSD on x86 and virus

2006-02-12 Thread Tony
J.C. Roberts wrote: On Sat, 11 Feb 2006 17:35:58 -0500, Daniel Ouellet [EMAIL PROTECTED] wrote: J.C. Roberts wrote: As others have pointed out, you simply misunderstood the article and then posted to the list what many people would consider an inflammatory question. This is not the

Re: X11 Demo programs

2006-02-12 Thread Tony
Dave Feustel wrote: [snip] Well, I'm lazy, so I let pf drop all unsolicited incoming traffic. Works Great! Lets me experiment with my system in peace and safety. Not really. Depends on what you can be conned into soliciting.

Re: X11 Demo programs

2006-02-12 Thread Tony
Just in case? Like just in case a moth is drawn to a flame? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Dave Feustel Sent: Sunday, February 12, 2006 4:17 PM To: [EMAIL PROTECTED] Cc: Mats O Jansson; misc@openbsd.org Subject: Re: X11 Demo programs

Re: Sudo

2006-02-11 Thread Tony
man sudo for starters. (actually that's quite enough even for a noob like me) (even a very out of date linux is enough) sheesh -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Dave Feustel Sent: Saturday, February 11, 2006 9:50 AM To: Otto Moerbeek Cc:

Re: Sudo

2006-02-11 Thread Tony
You sudo something, it asks for your password You do it again soon after, it doesn't ask. So somehow it remembers you. Definitely more trouble, and probably opens some holes for nasties, if it also remembers which version of you. That's without knowing enough to have an opinion. -Original

Re: Sudo

2006-02-11 Thread Tony
Tobias Weingartner wrote: On Saturday, February 11, Dave Feustel wrote: I found out via a google search on 'tickets sudo' about the behavior I had discovered and reported. Then after Otto let me know how pathetic my post was, I went back to man sudo but found nothing about tickets

Re: openbsd's future plans?

2006-02-08 Thread Tony
Quoth Marius Van Deventer - Umzimkulu On Wednesday 08 February 2006 04:20, Diana Eichert wrote: On Tue, 7 Feb 2006, Miod Vallat wrote: i think we should rewrite the kernel in java since it has good support for threads. Remember we opted for C++ during c2k2 (or was it

Re: openbsd's future plans?

2006-02-08 Thread tony sarendal
the kernel is written in as long as they can find it in the ports tree. [EMAIL PROTECTED] cd /usr/ports/ [EMAIL PROTECTED] make search key=kernel [EMAIL PROTECTED] When it's in there I might start to use it also. -- Tony Sarendal - [EMAIL PROTECTED] IP/Unix -= The scorpion replied

Re: table clearing time/date in pf

2006-02-07 Thread tony sarendal
On 07/02/06, frantisek holop [EMAIL PROTECTED] wrote: hi there, i see this on a 3.8 stable: -pa-r- bad_ssh Addresses: 0 Cleared: Thu Jan 1 01:00:00 1970 Looks like a very early beta of 3.8 if you ask me. /Tony

Re: openbsd's future plans?

2006-02-07 Thread tony sarendal
the future regarding this matter, and what are their opinions about the other os'es paths as well. i think we should rewrite the kernel in java since it has good support for threads. Get real Ted. You know that python is the way to go. /Tony -- Tony Sarendal - [EMAIL PROTECTED] IP/Unix

Re: openbsd's future plans?

2006-02-07 Thread tony sarendal
want to make us loose focus in this important dicussion, or start a flamewar, but someone has to say it. Emacs sucks, vi rules. /Tony

Re: how to manage big pf-rulesets in a comfortable way

2006-02-02 Thread tony sarendal
pf to be the easiest to work with once I understood how states actually were handled and could make a design for it. My vlan firewalls are a breeze to manage, especially with excellent tools like CVS/RCS. /Tony -- Tony Sarendal - [EMAIL PROTECTED] IP/Unix -= The scorpion replied

Re: SATA support in 3.8

2006-01-31 Thread Tony Del Porto
based cards are pretty common as cheap white box adapters. Mind, Sil3112 based cards are known widely to be crap, so I doubt anyone would give it the gold seal of approval. Good Luck, Tony Del Porto SysAdmin USENIX Association 2560 9th Street, Suite 215, Berkeley CA 94710 [EMAIL PROTECTED

Re: High Performance VLAN Router with OpenBSD

2006-01-30 Thread tony sarendal
On 30/01/06, Henning Brauer [EMAIL PROTECTED] wrote: * tony sarendal [EMAIL PROTECTED] [2006-01-29 13:04]: On 29/01/06, Marco Fretz [EMAIL PROTECTED] wrote: Probably not. Your box will be limited by the pps it can handle. I don't know exactly what pps your hardware can handle, but I guess

Re: High Performance VLAN Router with OpenBSD

2006-01-29 Thread tony sarendal
afterwards on how things went and what kind of performance you got. /Tony -- Tony Sarendal - [EMAIL PROTECTED] IP/Unix -= The scorpion replied, I couldn't help it, it's my nature =-

Re: High Performance VLAN Router with OpenBSD

2006-01-29 Thread tony sarendal
is unidirectional, traffic from A-B doesn't have to go over the same box as traffic B-A. With three boxes you can get speed and a be pretty resilient also. /Tony

Re: MS Security VP Mike Nash remarks on MS vs OpenBSD security.

2006-01-26 Thread Tony
Lukasz Sztachanski wrote: On Fri, Jan 27, 2006 at 01:42:13AM +1100, Shane J Pearson wrote: ~~~ OpenBSD by hahiss How is it that OpenBSD is able to be so secure by design with so few resources and yet all of Microsoft's resources cannot stem the tide of security problems that

RE: Re: webstore software: safe and configurable?

2006-01-25 Thread tony
[EMAIL PROTECTED] wrote: [snip] All good points. That, however, still leaves my point standing that by evading PHP, you evade the worst crap. True, but that is the same as that by evading ENGLISH as a lnaguage in posts, you evade the worst crap. If these discussions were carried out in

Re: Securia Rates OpenBSD

2006-01-23 Thread Tony
Bob Beck wrote: * Matthias Kilian [EMAIL PROTECTED] [2006-01-23 15:58]: On Mon, Jan 23, 2006 at 05:08:00PM -0500, Dave Feustel wrote: Securia gives OpenBSD a pretty nice security rating at http://secunia.com/product/100/ Those statistics say nothing at first glance. For example, I

Re: Partition sizing

2006-01-21 Thread Tony
On Saturday, January 21, 2006 2:16 PM the whatever calling itself J Moore wrote: On Sat, Jan 21, 2006 at 05:42:08PM +0800, the unit calling itself Lars Hansson wrote: On Sat, 21 Jan 2006 03:30:34 -0600 Get a bigger H/D... 40 GB is about the smallest you can buy today; 4 GB drives

Re: ssh to computer with variable ip address

2006-01-15 Thread tony sarendal
Do you have a ssh server with static ip address anywhere ? If so, make the client with dynamic ip address log into your server at startup and make a port forward back to the ssh port on the client. Very handy trick when you need to manage boxes sitting behind others nat'ing firewalls. -- Tony

Re: ssh to computer with variable ip address

2006-01-15 Thread tony sarendal
On 15/01/06, Stuart Henderson [EMAIL PROTECTED] wrote: On 2006/01/15 20:55, tony sarendal wrote: Do you have a ssh server with static ip address anywhere ? If so, make the client with dynamic ip address log into your server at startup and make a port forward back to the ssh port

Re: Remove all password restrictions?

2006-01-10 Thread Tony
On Tuesday, January 10, 2006 1:12 AM, Peter Bako wrote: To: misc@openbsd.org Subject: Remove all password restrictions? I have an internal OpenBSD 3.8 system that I use as a data dump, internal source for PXE installs and the like. It is not accessible to the outside world, so security is

Re: Mounting / ro

2005-12-30 Thread Tony
Andreas Bihlmaier wrote: Hi, I got a quick question because I fucked up and think quite a bunch of other people I have read about here did as well. I read in a couple of postings that people like to mount their root partition as read-only, I followed that since it prevents accidents in

Re: plz help + UNIX NETWORK PROGRAMMING

2005-12-26 Thread Tony
[EMAIL PROTECTED] wrote: Dear I installed the package autoconf but still day time client is not working following error occur plz help [EMAIL PROTECTED] ~]$ gcc -o byteorder byteorder.c byteorder.c:1:17: unp.h: No such file or directory byteorder.c: In function `main': byteorder.c:10:

Re: vlan(4), native vlan/vlan1, OpenBSD v.s. NetBSD behavior

2005-12-16 Thread tony sarendal
on a trunk. OpenBSD is doing the right thing. /Tony

Re: vlan(4), native vlan/vlan1, OpenBSD v.s. NetBSD behavior

2005-12-16 Thread tony sarendal
On 16/12/05, Chris Cappuccio [EMAIL PROTECTED] wrote: tony sarendal [EMAIL PROTECTED] wrote: Most nice switches can tag all vlans on a trunk. OpenBSD is doing the right thing. Sure, once you set the native vlan to something other than vlan 1. Most switches have a native vlan concept

Re: OpenNTPD does not 'pull-in' wrong time

2005-12-15 Thread Tony
Uwe Dippel wrote: Theo de Raadt wrote: So don't use it. But please, I beg of you, stop your incessant complaining. The more you whine, the less we feel the need to change anything. Oh, my wrong. I simply thought you were with the intention to improve the system. They are.

Re: USB stuff (was Re: theo)

2005-12-02 Thread Tony
Otto Moerbeek wrote: On Fri, 2 Dec 2005, Shawn K. Quinn wrote: On Thu, 2005-12-01 at 22:51 -0600, [EMAIL PROTECTED] wrote: Considering the goals of OpenBSD, I would not expect USB rodents, sound cards or even video to be necessarily well supported. The reality is that USB gear is

Re: managed switches and carp

2005-12-01 Thread tony sarendal
on multiple ports without duplicate suppression? duplicate suppression, makes the lack of per-vlan mac-address tables sound like a feature. Get switches with per-vlan mac-address tables, even old cisco 3500 has this. /Tony -- Tony Sarendal - [EMAIL PROTECTED] IP/Unix -= The scorpion

Re: managed switches and carp

2005-12-01 Thread tony sarendal
On 01/12/05, Christopher Vance [EMAIL PROTECTED] wrote: On Thu, Dec 01, 2005 at 08:08:27AM +, tony sarendal wrote: Which managed switch brands behave right with carp, allowing traffic from carp source addresses on multiple ports without duplicate suppression? duplicate suppression

Re: theo

2005-12-01 Thread Tony
Sophie Laurie wrote: theo, Coming from Canada, have you ever skated on thin ice? Well, you're doing it now! I've lived in Canada. Nine months of winter and three months of bad skating is just a myth. She's a wheelchair bound 65 year old woman who only wanted your help and Same age, but

Re: #define failure opportunity

2005-11-29 Thread tony sarendal
It is very important that we educate people about what the choice of open source software means. From a business perspective I don't see this being very important =) If the competition is willing to give me an edge on them, be my guests. /Tony

Re: OpenOSPFd and multipath routing questions...

2005-11-29 Thread tony sarendal
prefix via multiple protocols is pretty common, especially when migrating from protocol x to protocol y. One thing I noticed when testing with openbsd was that I wasn't able to add xxx/yy on an interface if the same prefix already was known via bgp. /Tony

RE: Re: Updated CCD Mirroring HOWTO

2005-11-29 Thread tony
[EMAIL PROTECTED] wrote: Robbert Haarman writes: Greg, Again, you raise some interesting issues. I wonder how likely the catastrophic failures you describe are, versus how likely it is that things fail in a way where ccd actually helps you. I was hoping someone else would comment on

RE: sent some www diffs, your one and last chance to flame me

2005-11-28 Thread tony
[EMAIL PROTECTED] wrote: [snip] all or nothing. make the pages match the quality of the code and the cd's. even if you don't care, other people do. I PAID for my CDs. I am happy with artwork, particularly the smirk on that puffer fish. I did not pay for the website. If I can stumble into the FAQ

RE: Re: openbsd web site design proposals (from HOTO write bad docs)

2005-11-28 Thread tony
[EMAIL PROTECTED] wrote: hmm, on Mon, Nov 28, 2005 at 05:32:54PM +0100, Otto Moerbeek said that It's even a FAQ: http://www.openbsd.org/faq/faq8.html#wwwnotstd doesn't mean it's right, does it? Certainlly doesn't mean it's wrong. Almost certainly means it's OpenBSD What system were you

RE: Re: openbsd web site design proposals (from HOTO write bad docs)

2005-11-28 Thread tony
[EMAIL PROTECTED] wrote: On Mon, Nov 28, 2005 at 10:53:45AM -0800, the unit calling itself J.C. Roberts wrote: I would assume that J.C. Roberts is a human, not a unit, whatever that is supposed to imply. On Mon, 28 Nov 2005 11:27:56 -0600, J Moore [EMAIL PROTECTED] wrote: I did think - I

RE: Re: openbsd web site design proposals (from HOTO write bad docs)

2005-11-28 Thread tony
[EMAIL PROTECTED] wrote: I'm using a mozilla 1.7 browser, with CSS on, JavaScript off. And it doesn't run javascript. Outside my area of expertise, but that seems normal somehow. The menus on the referenced cerealport.com web-site don't expand at http://cerealport.com does not answer

Re: openbsd web site design proposals (from HOTO write bad docs)

2005-11-28 Thread Tony
Jacob Meuser wrote: this is how the world works: ignore the whiners, they offer nothing useful. Some irresistable straight lines?

Re: Updated CCD Mirroring HOWTO

2005-11-27 Thread Tony
Daniel Ouellet wrote: In all these: I'm going to take this thread for what I think it is... the old guard telling us youngin's that our efforts are appreciated, but we've got a bit more to learn about how things work, and how to write good documentation, before we're really ready to jump

Re: FileSystem versus File System

2005-11-26 Thread Tony
J.C. Roberts wrote: I went looking for HIER(7) but didn't know it's name, so I stuffed the words file system into an Apropos keyword search and got nothing. http://www.openbsd.org/cgi-bin/man.cgi?query=file+systemsektion=0 manpath=OpenBSD+Currentarch=i386apropos=1format=html Damn, I

Re: Updated CCD Mirroring HOWTO

2005-11-26 Thread Tony
J.C. Roberts wrote: To the rest of list users; Please pardon another long email from me on this. Helping reasonable people like Robbert understand why many people consider HOWTO's to be harmful is hopefully worth the added noise and bandwidth. On Sat, 26 Nov 2005 10:57:12 +0100, Robbert

Re: Redundant links with BGP and VPN

2005-11-23 Thread tony sarendal
On 23/11/05, Kor Boerema [EMAIL PROTECTED] wrote: Hi Tony, Thanks for the reply. In what ways do the GIF tunnels differ from a normal ipsec tunnel? By using a tunneling protocol your traffic will from an ipsec point of view always have the same source/destination. You also avoid

Re: Community policy in openbgpd

2005-11-23 Thread tony sarendal
they were being tagged with. Some of this may have changed since. Hopefully I will be able to spend some real time on how I can use bsd/bgpd in a service provider network, it depends on what I will be doing in the future. If you do any testing on this, feel free to let me know how it goes. /Tony

Re: Redundant links with BGP and VPN

2005-11-23 Thread tony sarendal
away pretty quickly and you will have a solution you feel confident with. If you don't get that feeling don't use it. This works the same with or without IPsec. The gif setup is one ifconfig command on each end, I doubt you'll need help with that.man page, tcpdump, trial/error. /Tony -- Tony

Re: bridge and Spanning Tree, WAS Re: Help with bridging firewall failover w/ CARP, OpenBSD 3.7

2005-11-21 Thread tony sarendal
-addresses while they still were in the table. In my case something happened in the network and when things stabilized the openbsd bridge had incorrect info in the mac-address table and did no re-learn until I cleared the table. I wasn't able to troubleshoot more due to the thing being live. /Tony

Re: timekeeping on Soekris net4801 w/ ntpd. 3.8

2005-11-18 Thread Tony
Ted Unangst: [i was trying to stay away, but can't.] I've never really trusted prepositions ;) By and by, stand by that clock and adjust it by 30 minutes, by whatever means and by whatever rubric you deem appropriate. By which direction, I wonder. On 11/18/05, J Moore [EMAIL PROTECTED] wrote:

RE: Re: slightly OT: TCP checksum and RFC conformity

2005-11-17 Thread tony
[EMAIL PROTECTED] wrote: Hi, Damien Miller wrote: ... [EMAIL PROTECTED] djm]$ netstat -sp ip | grep -E '(bad.*checksum|total packets)' 61092730 total packets received 0 bad header checksums wouldn't netstat -sp tcp | grep -E '(bad.*checksum|total packets)' give the output

RE: Re: timekeeping on Soekris net4801 w/ ntpd. 3.8

2005-11-15 Thread tony
[EMAIL PROTECTED] Tue, 15 Nov 2005 08:20:07 On Tue, Nov 15, 2005 at 10:23:00AM +0100, the unit calling itself Henning Brauer wrote: 'adjusting local clock by XXs' The word 'by' is a preposition with a specific meaning in the context of its use... it means in the amount of... but

Re: nsswitch

2005-11-13 Thread Tony Lambiris
probably not -- but we use ldap here at work, and the auth_ldap in the ports tree works great. Aiko Barz wrote: I googled, but I couldn't figure out the current status. My problem: I tried to move my mailservers from Linux to OpenBSD. It's a qmail-ldap system with its users stored in

Re: Cannot boot version 3.8 on HP pavilion 422

2005-11-10 Thread Tony Lambiris
Try: boot -c disable fdc Lionel Vidal wrote: I tried to boot the new 3.8 version on a (rather old) PC, a HP pavilion 422.fr. I tried both to boot from cdrom38.fs and floppy38.fs and the result is the same : OpenBSD i386 BOOT 2.10 boot booting fd0a:/bsd: 3263620 Entry point at 0x100120

Re: pciide: DMA vs. ATA133

2005-11-09 Thread Tony Lambiris
correct at all, but it works. Sebastian Dehne wrote Hi Tony, It turns I'm having the same problem and saw you've done some research. # dmesg| grep DMA pciide0 at pci0 dev 15 function 0 VIA VT82C571 IDE rev 0x06: DMA, channel 0 configured to compatibility, channel 1 configured to compatibility wd0

RE: Re: OT: 10 things i hate most on unix

2005-11-06 Thread tony
[EMAIL PROTECTED] wrote: On Sun, Nov 06, 2005 at 12:40:12AM -0200, Gustavo Rios wrote: Hey folks, sorry, but i found this on the web. May someone tell if it is serious, i myself could not believe it. http://www.informit.com/articles/article.asp?p=4244 51seqNum=1 Looks like a rehash of

<    1   2   3   4   5   6   7   >