Hello,
So the solution would be to activate multipath on FW's, and to use
ospf between BGP routers and my FW's ( I've heard somewhere that
OSPF can announce multiple defaults routes, contrary to BGP )
to ensure failover if I understand properly...
Nice idea, I'm trying to setup that on my test co
BARDOU Pierre wrote:
Hello,
I can load balance on the firewalls with pf , but the problem of that
Solution is that there is no failover AFAIK.
If I loose a link between an ISP and me half of the packets will be lost.
And not loosing packets is more important to me than load balancing...
--
Hello,
Failover already works with BGP on my test conf, the problem is that BGP
only selects ONE route to a destination, so there is no load balancing.
The easiest for me would be to tell BGP to keep TWO routes to each
Destination, and use them in a round-robin way.
That's what Cisco does wit
"Peter Kay - Syllopsium" <[EMAIL PROTECTED]> writes:
> Given that I'm in a minority of kgdb users, what's everyone else using
> in cases like this?
I use printfs, pstat -d and ddb. Never use breakpoints since I don't
trust them, they mess up timing too much.
//art
Hello,
I set up net.inet.ip.multipath to 1
I configured OSPF on the BGP routers to 'redistribute default' to FW's.
'ospfctl show rib' on FW's shows that they have two defaults routes,
But 'ospfctl show fib' shows that only one is active.
Besides a 'dirty' solution with ifstated which inserts mul
On 2008-10-08, BARDOU Pierre <[EMAIL PROTECTED]> wrote:
> This is a multi-part message in MIME format.
>
> --=_NextPart_000_00C3_01C92936.6DEF4560
> Content-Type: multipart/mixed;
> boundary="=_NextPart_001_00C4_01C92936.6DEF4560"
>
>
> --=_NextPart_001_00C4_01C92936.6DEF4560
> Co
On 2008-10-08, Stuart Henderson <[EMAIL PROTECTED]> wrote:
> On 2008-10-08, BARDOU Pierre <[EMAIL PROTECTED]> wrote:
>> This is a multi-part message in MIME format.
>>
>> --=_NextPart_000_00C3_01C92936.6DEF4560
>> Content-Type: multipart/mixed;
>> boundary="=_NextPart_001_00C4_01C92936
On Wed, Oct 1, 2008 at 4:47 PM, Dries Schellekens
<[EMAIL PROTECTED]> wrote:
> When I read the pseudo article, I had the impression that the server
> does not have to implement SYN cookies. Their sockstress program uses
> (client) SYN cookies to estabilish a lot of TCP connections with
> minimal o
On Wed, Oct 08, 2008 at 09:14:02AM +0200, BARDOU Pierre wrote:
>
> Hello,
>
> Failover already works with BGP on my test conf, the problem is that BGP
> only selects ONE route to a destination, so there is no load balancing.
>
There is loadbalancing insofar that if you have two independent up
ospf and bgp are designed to select the best possbile route and
add that to the kernel routing table I think ;)
I still think you could run 2 CARPs on both BGP routers and
load balance on your firewalls. It means if one BGP router
fails you will be load balancing your connections to the
same B
The problem is that if the ISP router fails, my corresponding BGP
router is still up and running, and so keeps the CARP master,
which makes him a black hole :(
--
Cordialement,
Pierre BARDOU
De : Frans Haarman [mailto:[EMAIL PROTECTED]
Envoyé : mercredi 8 o
On Tue, Oct 07, 2008 at 11:25:27PM -0600, Theo de Raadt wrote:
> Anyone got one of the posters yet?
>
> I've gotten one of the first ones (of course).
>
> Shiny, shiny, shiny.
I saw it at Wim's booth at Open Source Days in the past weekend. Indeed
shiny :-)
Wim even promised that I could have i
On Tue 08/10/07 20:02, "Damian Gerow" [EMAIL PROTECTED] wrote:
> Sevan / Venture37 wrote:
> > Are you running the latest version of the BIOS on
> the board??
> http://clk.atdmt.com/UKM/go/111354029/direct/01/
>
> Ah, yes, I knew I forgot to include something.
>
> I also updated the BIOS to the lat
2008/10/8 Martin Toft <[EMAIL PROTECTED]>
> On Tue, Oct 07, 2008 at 11:25:27PM -0600, Theo de Raadt wrote:
> > Anyone got one of the posters yet?
> >
> > I've gotten one of the first ones (of course).
> >
> > Shiny, shiny, shiny.
>
> I saw it at Wim's booth at Open Source Days in the past weekend.
I bought a poster but my virtual card expired, so I put a new order again,
please, process this fast order (OpenBSD Order 2008/10/6-18:10:9-9987), but
virtual card will expire again.
Dimitri.-
http://es.geocities.org/trichotecene
http://deoxyt2.livejournal.com
OpenBSD - Free, Functional & Secure
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of Theo de Raadt
> Anyone got one of the posters yet?
I just got notice that my poster order shipped so I can't wait until
it arrives here in BC.
Cheers!
don
Just wondering if this will effect OpenBSD with java:
Per the interim governance guidelines for Projects [1] I'm pleased
to announce the creation of the BSD Port Project [2,3] following
the Porters Group's decision [4] to sponsor it. Dalibor Topic
will serve as the Project's Moderator.
- Mark
Hi,
To whom it may concern
I suspected of, and later verified a case, in which spamd in
grey-trapping mode may be forced to a DOS.
I use exactly this configuration, so I am concerned too. In this case I
am a FreeBSD user with a fresh
spamd-4.1.2 installed through ports(7).
Conditions:
1) A
Hello.
I need to write program (in C) for my classes to communicate two PC's through
RS232C interface
using hardware registers.
I'm mostly interested how to get to these registers.
Can someone guide my, or give some point from which should I start?
Maybe some relevant book?
By the way, is it eas
I'm not just seeing this wrong I hope. Let me explain:
http://www.openbsd.org/cgi-bin/cvsweb/src/sys/net/if_tun.c
when looking at the top seeing the change 1.95 done by brad@, but when
selecting to see diffs with 1.94 the change in $OpenBSD$ tag reflects
damien and mpf who were the committers
Hi,
First off lets clear up to things:
OSPF is an igp protocol, you would use it to share routes between your
own routers not a transit providers.
iBGP is again an igp, this time BGP will automatically talk iBGP when
talking to routers within the same AS. Your BGP sessions will
automatically
On Wed, Oct 8, 2008 at 12:27 PM, Peter J. Philipp <[EMAIL PROTECTED]> wrote:
> I'm not just seeing this wrong I hope. Let me explain:
>
> http://www.openbsd.org/cgi-bin/cvsweb/src/sys/net/if_tun.c
>
> when looking at the top seeing the change 1.95 done by brad@, but when
> selecting to see diffs w
One way to do this is to have both client fw/routers running in their
own right, i.e. no carp failover.
Each router peers with one of the ISP routers via eBGP and then peers
with it's partner via iBGP.
On each router use the 'weight' option to make each router believe it's
learned routes are
On Wed, Oct 08, 2008 at 12:44:43PM -0700, Philip Guenther wrote:
> On Wed, Oct 8, 2008 at 12:27 PM, Peter J. Philipp <[EMAIL PROTECTED]> wrote:
> > I'm not just seeing this wrong I hope. Let me explain:
> >
> > http://www.openbsd.org/cgi-bin/cvsweb/src/sys/net/if_tun.c
> >
> > when looking at the
On Wed, Oct 8, 2008 at 1:08 PM, Otto Moerbeek <[EMAIL PROTECTED]> wrote:
> On Wed, Oct 08, 2008 at 12:44:43PM -0700, Philip Guenther wrote:
>> On Wed, Oct 8, 2008 at 12:27 PM, Peter J. Philipp <[EMAIL PROTECTED]> wrote:
>> > I'm not just seeing this wrong I hope. Let me explain:
>> >
>> > http://w
On 2008-10-08, Simon Slaytor <[EMAIL PROTECTED]> wrote:
>
> It's also important to tune the BGP dead timers as low as you can
if you do this, do it with care, it's a double-edged sword.
sure you pick up a dead session sooner, but, it greatly increases
the chance of killing a session when your or
On Wed, Oct 8, 2008 at 8:56 PM, Rafal Brodewicz <[EMAIL PROTECTED]> wrote:
> Hello.
>
> I need to write program (in C) for my classes to communicate two PC's through
> RS232C interface
> using hardware registers.
>
> I'm mostly interested how to get to these registers.
> Can someone guide my, or g
On 2008-10-08, Michael Boev (TRIC) <[EMAIL PROTECTED]> wrote:
> To whom it may concern
>
> I suspected of, and later verified a case, in which spamd in
> grey-trapping mode may be forced to a DOS.
>
> I use exactly this configuration, so I am concerned too. In this case I
> am a FreeBSD user with
On Wed, Oct 08, 2008 at 10:08:03PM +0200, Otto Moerbeek wrote:
> > > Is CVSWEB broken?
> >
> > No, that's just the way CVS keywords work: the expansion is done at
> > *checkout* and not at commit. This can be seen using the -ko option
> > to "cvs up" or "cvs co" to disable the expansion done at c
Hi.
I've now tested GENERIC and GENERIC.MP on amd64 with bigmem enabled.
src/sys was updated yesterday from CVS. With bigmem=0 both GENERIC [1]
and GENERIC.MP [4] works fine (I am using GENERIC.MP on a daily basis).
With bigmem=1 and the BIOS "Memory Remap Feature" _disabled_, both
GENERIC and
True, although in this scenario would soft reconfig not be an answer?
As each router has two copies of the full table, one via the eBGP peer
and another from the iBGP peer. If the eBGP peer dropped all the iBGP
learned routes would remain and be used. When the eBGP peer came back up
soft recon
On Wed, Oct 8, 2008 at 4:32 PM, Matthias Kilian <[EMAIL PROTECTED]> wrote:
> On Wed, Oct 08, 2008 at 10:08:03PM +0200, Otto Moerbeek wrote:
>> > > Is CVSWEB broken?
>> >
>> > No, that's just the way CVS keywords work: the expansion is done at
>> > *checkout* and not at commit. This can be seen usi
Hi,
On Wed, 8 Oct 2008 17:01:03 -0400
"Ted Unangst" <[EMAIL PROTECTED]> wrote:
> On Wed, Oct 8, 2008 at 4:32 PM, Matthias Kilian
> <[EMAIL PROTECTED]> wrote:
> > On Wed, Oct 08, 2008 at 10:08:03PM +0200, Otto Moerbeek wrote:
> >> > > Is CVSWEB broken?
> >> >
> >> > No, that's just the way CVS key
On Wed, Oct 8, 2008 at 2:40 PM, umaxx <[EMAIL PROTECTED]> wrote:
> Sorry for hijacking this thread,
I didn't know starting new threads was more difficult than hijacking
an existing one.
> but I stumbled today over this error in cvsweb if downloading any file:
...
> http://www.openbsd.org/cgi-bin
On 2008-10-07, Henning Brauer <[EMAIL PROTECTED]> wrote:
> * Christophe Rioux <[EMAIL PROTECTED]> [2008-10-07 13:15]:
>> > # pfctl -f pf.conf
>> > pfctl: failed to create table __automatic_e11ee055_282 in :
>> > Cannot allocate memory
>
> so the ruleset optiomizer optimized a large list of addresse
Hello All,
I have been attempting to use rfcomm_sppd to create a serial connection
to a Scribbler Robot. When I run
$ rfcomm_sppd -a -s SP
it will start connecting to the robot, but then, if I let the machine
timeout, it hangs the whole machine to the point where I am unable to
do an
Hey everyone,
I can't seem to find any information outside of mail.html that
indicates what should and should not be sent as a bug through
sendbug(1). It was my understanding that any bugs revealed in the
OS should use the sendbug(1) but I apparently am wrong. When
should a problem be sent usi
> I can't seem to find any information outside of mail.html that
> indicates what should and should not be sent as a bug through
> sendbug(1).
That's right; you should use sendbug(1).
> It was my understanding that any bugs revealed in the
> OS should use the sendbug(1) but I apparently am wr
Hi guys,
This is really an OpenBSD, but because I was going to install OpenBSD
on it, I figured you all with Blade experience can help me
troubleshoot this problem.
So I don't have a Sun Monitor, just a regular CRT. I'm given two
places to connect my monitor, one on the Bellerophon daughter board
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Thought this was pretty useful and interesting, especially for those
of us who aren't on the same level as developers and gurus. And for
them, there's also a contributions and corrections link.
http://bhami.com/rosetta.html
Found it in the 10/07/200
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi all!
Today I was testing the installation of a VM OpenBSD 4.3 on KVM in a
host Hardy Heron and although I could finish to the installation and the
virtual machine taking IP via DHCP and I can be connected via ssh, I
obtain in the console a continuo
> Thought this was pretty useful and interesting, especially for those
> of us who aren't on the same level as developers and gurus. And for
> them, there's also a contributions and corrections link.
>
> http://bhami.com/rosetta.html
As always, it is a shame that those types of pages have so many
Theo,
Thanks for your advice . . .
From [EMAIL PROTECTED] Wed Oct 8 21:38:13 2008
To: "Aaron W. Hsu" <[EMAIL PROTECTED]>
cc: misc@openbsd.org
Subject: Re: Appropriate use of sendbug
From: Theo de Raadt <[EMAIL PROTECTED]>
(You may be confused bec
> As always, it is a shame that those types of pages have so many
> errors.
>
> For instance, check out the disklabel section. 2 out of 4 answers
> being right is still only 50% accurate.
Is that because the information is outdated (it was once correct) or is it
plain wrong (it was never the case
On Wed, Oct 8, 2008 at 10:09 PM, Theo de Raadt <[EMAIL PROTECTED]> wrote:
>> Thought this was pretty useful and interesting, especially for those
>> of us who aren't on the same level as developers and gurus. And for
>> them, there's also a contributions and corrections link.
>>
>> http://bhami.com
I can't get X running in mode 1280x800 on a notebook Acer Aspire 4520.
I have read about with no success. Is this possible? Can someone help
me?
I included dmesg, xorg.conf and Xorg.0.log. The ModeLine used in
xorg.conf was get following
http://www.x.org/wiki/FAQVideoModes#head-82230a582646cbf28
On Wed, Oct 08, 2008 at 08:09:16PM -0600, Theo de Raadt spoke thusly:
> > Thought this was pretty useful and interesting, especially for those
> > of us who aren't on the same level as developers and gurus. And for
> > them, there's also a contributions and corrections link.
> >
> > http://bhami.c
> The card is a Gigabit Ethernet RTL-8169. Can it have some problem of
> compatibility with OpenBSD? Somebody had the same problem and could
> solve?
>
There are issues with re(4) which are being worked on, use a snapshot
instead.
http://clk.atdmt.com/UKM/go/111354029/direct/01/
"Michael Boev (TRIC)" <[EMAIL PROTECTED]> writes:
> I suspected of, and later verified a case, in which spamd in
> grey-trapping mode may be forced to a DOS.
I'd say rather that you have found a possible conflict between
greytrapping and milter-sender. I see the backscatter bounces for
enough me
> There are issues with re(4) which are being worked on, use a snapshot
> instead.
There are not "issues with re(4) which are being worked on" which pertain
to this issue. The problem mentioned by the original poster is an issue
with the (emulated) RTL8139 driver provided by QEMU which KVM is deri
Vivek Ayer wrote:
Hi guys,
This is really an OpenBSD, but because I was going to install OpenBSD
on it, I figured you all with Blade experience can help me
troubleshoot this problem.
So I don't have a Sun Monitor, just a regular CRT. I'm given two
places to connect my monitor, one on the Beller
Using the serial connection, will I get to see the entire boot
process? Wow, that would be great. Again..I just want to install
OpenBSD + sshd + static IP and I'll be set.
Thanks again,
Vivek
On Wed, Oct 8, 2008 at 11:41 PM, Mariusz Makowski <[EMAIL PROTECTED]> wrote:
> Vivek Ayer wrote:
>>
>> Hi
52 matches
Mail list logo
