Looking for guidance on pf and aliases. I have an OBSD 3.8 box running
pf in front of two SMTP servers.
Here's my setup:
Net - 1.2.3.4- pf box - box1 9.8.7.6
1.2.3.5 (alias)-- box2 9.8.7.7
Problem is, pf sends all requests to box1, even those addressed to 1.2.3.5.
On Fri, Feb 03, 2006 at 10:02:32PM -0500, Melameth, Daniel D. wrote:
I don't get it--it appears nmap is broken. Perhaps I'm overlooking
something obvious, but any thoughts appreciated...
An nmap scan gives me this:
$ sudo nmap 208.139.x.x
Starting nmap 3.81 (
Sorry if I wasn't clear--I agree. The issue here is not the behavior of
nmap, but the fact that nmap does not see the icmp and http responses
from the target and assumes the host is offline.
Tobias Ulmer wrote:
On Fri, Feb 03, 2006 at 10:02:32PM -0500, Melameth, Daniel D. wrote:
I don't get
man pf.conf
xl1 represents all the IPs on x1 so either use the IP specifically or
use xl1:0
David Newman wrote:
Looking for guidance on pf and aliases. I have an OBSD 3.8 box running
pf in front of two SMTP servers.
Here's my setup:
Net - 1.2.3.4- pf box - box1 9.8.7.6
Hello,
Dr. Judd's research works! The dental profession, as it is
currently, $ drilling for dollars. BEWARE when you go to the dentist office
a
lot of them steal right out of your mouth!l Report it!
Patricia
Thanks for all the advice.
I've setup TLS on port 587 like Peter suggested and it's working great.
Only thing you have to keep in mind when you use Microsoft Outlook. It
needs a restart after the e-mail account settings change. Go figure :).
Thanks again guys.
Nils
-Original Message-
I had built and installed dbus to test some things.
It seems that there is a feature that dbus tries to help the system out by
suspending processes with -STOP when a user changes away from a vt and an
issue where this sometimes happens even when the user doesn't switch VTs..
unfortunately when
On Fri, Feb 03, 2006 at 07:32:31PM -0500, Chris Zakelj wrote:
Joe S wrote:
Be careful with Soekris. While DSL speed is stuck at 1.5 MB for you,
many users are getting 6MB and higher is some parts of the world. It
would not be advantageous to buy something like a soekris and grow out
of it
On 2006/02/03 20:34, Josh Tolley wrote:
All that being said, we 1) didn't have an encryption accelerator
in the box
that would tend to make things worse anyway - you'll just increase the
rate of interrupts and that seems to be the main problem.
Do datagrams arrive in order and without loss
when using unix domain on OpenBSD?
On Fri, Feb 03, 2006 at 09:01:57PM -0500, Nick Guenther wrote:
I saw on Secunia Advisories that very heavy security problems have
occured in Mozilla Firefox and Thunderbird.
Usually WHO is patching these programs (the porters?)? Should I wait for
a new binary port? Should I patch myself
On Fri, Feb 03, 2006 at 10:02:32PM -0500, Melameth, Daniel D. wrote:
I don't get it--it appears nmap is broken. Perhaps I'm overlooking
something obvious, but any thoughts appreciated...
An nmap scan gives me this:
$ sudo nmap 208.139.x.x
Starting nmap 3.81 (
Hi all,
I'm trying to install 3.8 on a sunfire v120
I am able to net boot it from an i386 using linux and openbsd38.
Things seem ok up to booting bsd.rd, but then output stops after:
..
rd0: fixed, 6144 blocks
root on rd0a
rootdev=0x500 rrootdev=0x3d00 rawdev=0x3d02
(note that the last 2
On 04/02/06, Alexander Farber [EMAIL PROTECTED] wrote:
Do datagrams arrive in order and without loss
when using unix domain on OpenBSD?
I think it's safest to say that when you use SOCK_DGRAM, you get
unreliable messages. The socket(2) manual says so and unix(4) doesn't
say otherwise for the
On Sat, Feb 04, 2006 at 11:25:15AM +, Stuart Henderson wrote:
On 2006/02/03 20:34, Josh Tolley wrote:
All that being said, we 1) didn't have an encryption accelerator
in the box
that would tend to make things worse anyway - you'll just increase the
rate of interrupts and that seems to
I would like to know why I can't trunk virtual interfaces on 3.8 realease?
what is the real reason for this? I took a look at the trunk manual, but I
found nothing.. thanks in any way.
I have an old CLIE PEG-T625C device that I have been trying to make work
with the uvisor driver to get ucom endpoints mapped to cuaUx with a USB
cable.
The device IDs itself to the driver (based upon the standard table in the
driver) as USB_PRODUCT_SONY_CLIE_40 which is mapped to the PALM4
On Sat, Feb 04, 2006 at 11:37:34AM -0200, Celso Fernandes wrote:
I would like to know why I can't trunk virtual interfaces on 3.8 realease?
what is the real reason for this? I took a look at the trunk manual, but I
found nothing.. thanks in any way.
why?
what kind of virtual interface?
On 2006/02/04 14:07, Claudio Jeker wrote:
On Sat, Feb 04, 2006 at 11:25:15AM +, Stuart Henderson wrote:
On 2006/02/03 20:34, Josh Tolley wrote:
All that being said, we 1) didn't have an encryption accelerator
in the box
that would tend to make things worse anyway - you'll just
I need to run a benchmark for testing the temperature of my system,
which of these
(http://www.openbsd.org/cgi-bin/cvsweb/ports/benchmarks/?only_with_tag=OPENBSD_3_8)
do you recommend?
Thanks
David Newman wrote:
ExtIf=xl1
ExtIfa=1.2.3.5
rdr on $ExtIfa inet proto tcp from any to $ExtIfa port 25 - $box2
rdr on $ExtIf inet proto tcp from any to $ExtIf port 25 - $box1
Forget for a second what you *want* to have happen, and look at the
above snippets of your pf.conf. What's the
Darrin Chandler wrote:
Forget for a second what you *want* to have happen, and look at the
above snippets of your pf.conf. What's the *last* matching rule for
something on $ExtIfa?
Doh! Nevermind.
--
Darrin Chandler| Phoenix BSD Users Group
[EMAIL PROTECTED] |
There is a DESCR file in each port that describes what each one does.
It all depends what component you expect to generate the most heat.
Personally, I've found that CPUburn does a pretty good job of
stressing processors (i386s only) and thus driving up temps.
http://pages.sbcglobal.net/redelm/
ExtIfa=1.2.3.5
rdr on $ExtIfa inet proto tcp from any to $ExtIfa port 25 - $box2
That says rdr on 1.2.3.5: I doubt you have an interface named
1.2.3.5 ;)
I was surprised to see that pfctl parser doesn't reject this.
Forget for a second what you *want* to have happen, and look at the
above snippets of your pf.conf. What's the *last* matching rule for
something on $ExtIfa?
For nat/rdr rules, it's the *first* match.
I am now starting httpd at boot. It reports that it cannot
determine the fully qualified domain name and listens to
only 127.0.0.1. How can I set the ip address to which httpd
listens to the address assigned to me by verizon's dhcp server?
Thanks,
Dave Feustel
--
Lose, v., experience a loss, get
Darrin Chandler wrote:
rdr on $ExtIfa inet proto tcp from any to $ExtIfa port 25 - $box2
rdr on $ExtIf inet proto tcp from any to $ExtIf port 25 - $box1
Forget for a second what you *want* to have happen, and look at the
above snippets of your pf.conf. What's the *last* matching rule for
(sorry, was out of town for a couple weeks, back now.)
Yes, I have tried the 3.9 snapshot, and the same thing happens.
Did something break between distros?
Ted Unangst wrote:
On 1/23/06, Chris [EMAIL PROTECTED] wrote:
I am trying to install OBSD 3.8 on my new Tyan S5120 tomcat i915 mobo.
David Newman wrote:
Forget for a second what you *want* to have happen, and look at the
above snippets of your pf.conf. What's the *last* matching rule for
something on $ExtIfa?
Ah, good point, thanks. I tried flipping the order (and adding the :0
parameter) but the following still forwards
I have replied to this type of email several times before. The short
answer is that I don't know why it is broken and have not been able
to fix it yet. The message is there to warn and protect you from bad
things.
On Feb 3, 2006, at 7:28 AM, Dirk Fohrenkamm wrote:
Hi,
I'm trying to
Hi,
I noticed today that make obj on -current was trying to download an egcs
pkg and failing. It seems un-critical, as the build completes perfectly if
ignored.
Having spoke to some people on #openbsd on freenode they managed to
duplicate it on other machines and tracked it down to the PKG_PATH
Forgot to attach the exact error.
1. # make obj
2. [snip]
3. /usr/src/regress/misc/exceptions/obj -
/usr/obj/regress/misc/exceptions
4. === regress/misc/objc
5. /usr/src/regress/misc/objc/obj - /usr/obj/regress/misc/objc
6. === regress/gnu
7. === regress/gnu/egcs
8.
Hi,
On 2006/02/03 20:34, Josh Tolley wrote:
All that being said, we 1) didn't have an encryption accelerator
in the box
that would tend to make things worse anyway - you'll just increase the
rate of interrupts and that seems to be the main problem.
for a something fast like aes it might be
On Thu, Feb 02, 2006 at 06:08:52PM -0500, Jose Fragoso wrote:
yppasswd: pam_chauthtok(): error in service module
and the change fails. Now if I instead use the following command:
yppasswd -h `ypwhich`
It works immediatelly.
With an OpenBSD client, it always work.
So I guess
On Thu, Feb 02, 2006 at 09:48:55AM -0500, Wade, Daniel wrote:
pkg_info -D packagename
Will show you the install messages
also look for a pkg/MESSAGE file in the port dir, if you
have the port dir (since we're talking about java in this
case, i will assume you do have the port dir),
On Fri, Feb 03, 2006 at 09:02:06PM +, Denny White wrote:
since installing the Voodoo
card. Here's the current output of sysctl hw.sensors:
hw.sensors.0=lm0, VCORE_A, volts_dc, 1.73 V
hw.sensors.1=lm0, VCORE_B, volts_dc, 1.74 V
hw.sensors.2=lm0, +3.3V, volts_dc, 3.26 V
hw.sensors.3=lm0,
Damien Bergamini wrote:
Please try to force 11g mode by hand:
% ifconfig iwi0 mode 11g
I'm pretty sure the firmware crashes when scanning channels in
the 5GHz band. This bug should affect 2915ABG adapters only.
Scanning of those channels was disabled in 3.8.
Damien
I updated to the
PIXMEUP.COM Advertise your website and earn at the same time from it $$
pixelpages
by http://www.pixmeup.com/gjavierand best pixel site in the world, Advertise
your website and earn an income from it at the same time.
Pixmeup.com/pixelpages is now Ranked 1200th most view''d website in
PIXMEUP.COM Advertise your website and earn at the same time from it $$
pixelpages
by http://www.pixmeup.com/gjavierand best pixel site in the world, Advertise
your website and earn an income from it at the same time.
Pixmeup.com/pixelpages is now Ranked 1200th most view''d website in
OpenBSD 3.8-stable (GENERIC) #1: Sat Jan 7 16:45:00 CET 2006
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: AMD Athlon(tm) XP 1800+ (AuthenticAMD 686-class, 256KB L2 cache) 1.50
GHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,F
XSR
cpu0:
PIXMEUP.COM Advertise your website and earn at the same time from it $$
pixelpages
by http://www.pixmeup.com/gjavierand best pixel site in the world, Advertise
your website and earn an income from it at the same time.
Pixmeup.com/pixelpages is now Ranked 1200th most view''d website in the
PIXMEUP.COM Advertise your website and earn at the same time from it $$
pixelpages
by http://www.pixmeup.com/gjavierand best pixel site in the world, Advertise
your website and earn an income from it at the same time.
Pixmeup.com/pixelpages is now Ranked 1200th most view''d website in the
On 2/3/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote:
Hi all,
I'm running Postfix 2.3.20050716-sasl2 (chrooted) and
cyrus-sasl-2.1.20p4 on OpenBSD 3.8 stable. Everything is running peachy.
My roaming users are able to connect and send e-mail.
Now I wish to enable the fantastic SpamD feature
On Saturday 04 February 2006 16:57, L. V. Lammert wrote:
On Sat, 4 Feb 2006, Dave Feustel wrote:
I am now starting httpd at boot. It reports that it cannot
determine the fully qualified domain name and listens to
only 127.0.0.1. How can I set the ip address to which httpd
listens to the
On Fri, 3 Feb 2006, Rogier Krieger wrote:
On 2/3/06, Charles Sprickman [EMAIL PROTECTED] wrote:
It either freezes or panics when probing (or creating?) rd0, which I
assume is the ramdisk used in the install. It runs 3.3 fine.
Perhaps you need to look at the FAQ if you're running i386:
On Sat, Feb 04, 2006 at 07:07:52PM -0500, Dave Feustel wrote:
On Saturday 04 February 2006 16:57, L. V. Lammert wrote:
On Sat, 4 Feb 2006, Dave Feustel wrote:
I am now starting httpd at boot. It reports that it cannot
determine the fully qualified domain name and listens to
only
Hi all!
I know this hasn't got anything to do with OpenBSD (other than I am actually
doing the work on an OpenBSD driven machine), but the level and advice on this
list is so valueable that I am going to ask anyway.
Please forgive the direct lack of relation!
Many buzzwords exists on the net,
[EMAIL PROTECTED] wrote:
Hi all!
I know this hasn't got anything to do with OpenBSD (other than I am actually
doing the work on an OpenBSD driven machine), but the level and advice on this
list is so valueable that I am going to ask anyway.
Please forgive the direct lack of relation!
Many
On 2006/02/04 20:43, Denny White wrote:
hw.sensors.11=lm0, Temp3, temp, 127.50 degC / 261.50 degF
hw.sensors.0=nsclpcsio0, TSENS1, temp, 127.00 degC / 260.60 degF
hw.sensors.1=nsclpcsio0, TSENS2, temp, 127.00 degC / 260.60 degF
Thanks for the reply. Felt around inside the box. Nothing very
Imagine you put a fair amount of effort into both the content and the
presentation. Then imagine you have one of two situations:
-you have numerous sets of data that you want to display the same way
-now if you want to change the way they're displayed, you have to
change only one file (the
On 2006/02/02 11:33, Stuart Henderson wrote:
On 2006/02/02 22:08, [EMAIL PROTECTED] wrote:
Quoting Graham Gower [EMAIL PROTECTED]:
This begs the question, what should you do if your bandwidth is variable?
I've wondered that myself. I figured someone in that situation might
have to
hello...
i use openbsd 3.8, i installed xmms but i have 2 problem with it. 1st the
equalizer don't work and visualization is not correct, actuallt it's not smooth
and according to music.
thanks for ur help.
--
___
Play 100s of games for FREE!
52 matches
Mail list logo
