Re: The keyboard doesn't work in X after the most recent update
Hello Norman, On 11/05/11 20:13, Norman Golisz wrote: ... since 5.0, xenocara uses xkeyboard-config instead of the old /etc/X11/xkb. In the last couple of days, some code has been changed in xkeyboard-config, however, and made keyboards in X non-functional, when the /usr/X11R6/share/X11/xkb/symbols/srvr_ctrl directory was present. This directory was removed and replaced by a bare file [1]. So, chances are, older versions are not affected on your netbook. Thx -- I suppose I missed the part with the single file. The keyboard works now under Xorg on current. Best Regards Andreas
Will patch branch of packages come back ?
some years ago, when port update because found vulnerability and tag stable the ftp://ftp.openbsd.org/pub/OpenBSD/?.?/packages/$arch/; site will build the latest stable packages there. these days, when new OpenBSD 5.0 release We have to cvs -qd anoncvs@anoncvs.*.openbsd.org:/cvs get -rOPENBSD_5_0 -P ports and make install with ports.
Re: The keyboard doesn't work in X after the most recent update
On Sat, Nov 5, 2011 at 5:45 PM, Andreas Bartelt o...@bartula.de wrote: On 11/05/11 15:39, tkdchen wrote: Hi all, My keyboard does not work in fvwm, GNOME or KDE after the most recent update. No key response except the Fn+brightness-up and down. I run 5.0-current on Thinkpad x201i. Thanks a lot for your help. I've noticed that the keyboard of an Asus EEE 701 also doesn't work with Xorg on current (I followed the steps from current.html). However, I didn't test any older versions of OpenBSD on this netbook. Does anybody know if this a known or a new problem with this model? I'm not aware of any specific problem to this model. Without more details it's hard to give you any useful advice. Also, normally, the install/upgrade script in binary snapshots includes code to remove the extra directory. If you upgraded by using bsd.rd and a snapshot, you should not be affected. -- Matthieu Herrb
hardware looking for a new home
Hi all, I am moving soon and want to take that opportunity to get rid of some old hardware I either don't need anymore or don't have the space for. All items are located in Germany, about an hour drive north of Frankfurt. 1x 19 Schroff rack - 2x door, 1 key - 2x side walls (from another model, but can be made to fit) - roof with 6 fans - lots of universal rack mount rails - 2x EU Schuko power bars 1x Sun Fire v440 - 4x 1062 Mhz - 8GB RAM - 2x 36GB and 2x 73GB HDD inside + 1x36GB and 1x73GB as spare - some fibrechannel card - 1x CPU replacement board with RAM 1x Sun Fire v100 - 1x 650 Mhz - 1GB RAM - 1x 40GB HDD 1x Dell PE750 - 1x 2.8 Ghz - 4 GB RAM - 2x WD Raptor 73GB - DRAC III - 4x USB 2.0 PCI card 1x Soekris 4801 - 256 MB RAM - 7x 100MBit - VPN encryption card - no power supply 1x PC Engines wrap - 128 MB RAM - 1x 100Mbit - no power supply 2x Dell Optiplex SX270 (working) - some CPU - some RAM - some HDD - with power supply 1x Dell Optiplex SX270 (defective) - some CPU - some RAM - no HDD - with power supply - doesn't power up, I have the replacement parts for the mainboard though. If you know how to use a soldering iron, it is easy to fix, did it for 2 others already a few years ago and they are still running. 1x Linksys SRW2016, 16 Port Gbit managed switch, 19 1x LevelOne 16 Port 100Mbit switch, 19 If anyone is interested in something please contact me off-list so we can talk about how to get it to you. For all items, if a developer is interested, he/she gets priority over other requests. -Michael
NAT64 sample config
Maybe you are interested in giving NAT64 a try which has been committed to the tree a few weeks ago. In my first test I found it works great. Thanks to the developers for their hard work! Eventually, the following sample config saves you some time while the man pages are in the works, although looking through the commit logs, source code, and conference presentations is always educational. Note that NAT64 is not in 5.0-release, but you need a snapshot which is not older than three weeks or so. The following line in /etc/pf.conf is all which is required to setup a stateful NAT64 on an OpenBSD box which has one interface in an IPv6 segment, and another interface in an IPv4 segment (private LAN, or even the Internet): pass in log on vic1 inet6 from any to 64:ff9b::/96 \ af-to inet from 192.168.98.74 For my test, I installed OpenBSD i386 snapshot from 3 Nov 11 on ESXi 4.1u1. vic1 is the inside interface on a vSwitch that accomodate IPv6 hosts exclusively. The outside interface vic0 is in IPv4-only segment and has the IP address 192.168.98.74. The above pf rule translates all ingress IPv6 traffic on vic1, which wants to go to destinations with the special prefix 64:ff9b::/96, to IPv4 with the source (NAT64) address of the outer interface vic0 ingress. pf implicitly takes the IPv4 destination (NAT64) from the lower 32 bits of the IPv6 destination address. This rule creates state, therefore return traffic is translated implicitly, e.g. you should not add any rule for return traffic. I derived this rule from Claudio@'s example in the commit log, which translates from v4 to v6, and where Claudio mentioned that the trailing to is optional for NAT64 http://marc.info/?l=openbsd-cvsm=131853093528864 Besides testing a separate commercial virtual IPAM/DNS appliance from Infoblox to provide DNS64 Application Level Gateway functionality, I have also successfully tested the totd DNS proxy which provides similar DNS64 functionality (less DNS resolver and caching). OpenBSD has a package for totd, so just do pkg_add totd. As time allows, I might move the virtual NAT64 and DNS64 gateway over to an ALIX board. This portable demonstrator shall eventually gateway IPv6-only clients on its wireless LAN IPv6-only interface to IPv4-only Internet over 3G/UMTS - just for a fun alternative to v6 over v4 tunnels... Regards, Rolf A) /etc/totd.conf : interfaces vic1 #port 53 forwarder 192.168.99.26 prefix 64:ff9b:: retry 300 B) DNS lookup for resource records of google.com using the DNS64 proxy yields answers with the 64:ff9b::/96 prefix: [root@v6client:etc]# dig @2001:db8:123:64::1 google.com ; DiG 9.4.2-P2 @2001:db8:123:64::1 google.com ; (1 server found) ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 30572 ;; flags: qr rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 4, ADDITIONAL: 0 ;; QUESTION SECTION: ;google.com.IN ;; ANSWER SECTION: google.com. 300 IN 64:ff9b::d155:9468 google.com. 300 IN 64:ff9b::d155:9467 google.com. 300 IN 64:ff9b::d155:9469 google.com. 300 IN 64:ff9b::d155:9493 google.com. 300 IN 64:ff9b::d155:946a google.com. 300 IN 64:ff9b::d155:9463 ;; AUTHORITY SECTION: google.com. 8019IN NS ns3.google.com. google.com. 8019IN NS ns1.google.com. google.com. 8019IN NS ns4.google.com. google.com. 8019IN NS ns2.google.com. ;; Query time: 71 msec ;; SERVER: 2001:db8:123:64::1#53(2001:db8:123:64::1) ;; WHEN: Sun Nov 6 13:25:08 2011 ;; MSG SIZE rcvd: 308 C) ping6 from IPv6-only client to google.com on the IPv4 Internet via the NAT64 gateway works: [root@v6client:etc]# ping6 64:ff9b::d155:9469 PING6(56=40+8+8 bytes) 2001:db8:123:64:20c:29ff:feaf:ad2f -- 64:ff9b::d155:9469 16 bytes from 64:ff9b::d155:9469, icmp_seq=0 hlim=55 time=23.094 ms 16 bytes from 64:ff9b::d155:9469, icmp_seq=1 hlim=55 time=22.825 ms 16 bytes from 64:ff9b::d155:9469, icmp_seq=2 hlim=55 time=22.762 ms ^C --- 64:ff9b::d155:9469 ping6 statistics --- 3 packets transmitted, 3 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 22.762/22.894/23.094/0.144 ms [root@v64gate:~]# tcpdump -i vic1 -nv icmp6 tcpdump: listening on vic1, link-type EN10MB 14:49:05.583129 2001:db8:123:64:20c:29ff:feaf:ad2f 64:ff9b::d155:9469: icmp6: echo request (id:7397 seq:0) (len 16, hlim 64) 14:49:05.605904 64:ff9b::d155:9469 2001:db8:123:64:20c:29ff:feaf:ad2f: icmp6: echo reply (id:7397 seq:0) (len 16, hlim 55) 14:49:06.589012 2001:db8:123:64:20c:29ff:feaf:ad2f 64:ff9b::d155:9469: icmp6: echo request (id:7397 seq:1) (len 16, hlim 64) 14:49:06.611583 64:ff9b::d155:9469 2001:db8:123:64:20c:29ff:feaf:ad2f: icmp6: echo reply (id:7397 seq:1) (len 16, hlim 55) 14:49:07.588874
Re: kernel panic on openbsd i386 snapshot 20111103
On Sat, Nov 5, 2011 at 10:29 AM, Norman Golisz li...@zcat.de wrote: On Sat Nov 5 2011 15:07, David Vasek wrote: On Sat, 5 Nov 2011, Norman Golisz wrote: On Sat Nov 5 2011 09:13, Forman, Jeffrey wrote: Am I barking up the wrong tree trying to deduce if I really do have a hardware problem? I am open to accepting diffs and compiling from source if other developers think there might be a bug to fix here. It seems to be a hardware fault. To trap memory issues, you could try memtest86+ [1]. [1] http://www.memtest.org/ Or ports/sysutils/memtest86+, which is the same and as a package it is easier to deal with - it can be loaded by boot(8) directly from /stand on your root filesystem. No CDs, floppies etc. are needed. Thanks for the pointer. I was thinking of burning the ISO, but that's indeed better. Thanks to all that mentioned memtest. I did end up booting from the memtest image provided in the openbsd package, and sure enough, there were tons of RAM errors. Memtest has been running for over an hour on new RAM hardware without error. Cheers,
Re: Copy root partition to another machine
Thanks, but without skip=1 dd will copy partition table and mbr too (first block 521b). So it may damage my partition table on second machine. I'm I wrong ? On Fri, Nov 4, 2011 at 6:25 PM, Marc Smith marc_sm...@gmx.com wrote: dd if=/dev/wd0a of=root.img bs=32m [or compress it using: dd if=/dev/wd0a bs=32m | gzip root.img.gz] and dd if=root.img of=/dev/wd0a bs=32m [decompression: gzip -d -c root.img.gz | dd of=/dev/wd0a bs=32m] And yes, you can ommit additional values. Dnia piD , 4 lis 2011, 17:43:28 Bambero pisze: Hello I want to copy my root partition to another with dd without ssh. Is this correct: 1. On first machine: dd if=/dev/rwd0a of=root.img bs=16b skip=1 conv=noerror 2. On second machine: dd if=root.img of=/dev/rwd0a bs=16b seek=1 May/should I ommit seek, skip, conv, bs parameters ? Regards, Bambero
Re: Copy root partition to another machine
Well, to me the point of using DD is to save everything in one file: filesystem, boot sectors, etc. Otherwise I'd probobly use dump, as someone else suggested, or other backup tool. Saving additional info [MBR, PBR] is not a problem, you can always restore your system using 'skip' parameter [skipping MBR info]. That'd make you go Dnia nie, 6 lis 2011, 18:00:45 Bambero pisze: Thanks, but without skip=1 dd will copy partition table and mbr too (first block 521b). So it may damage my partition table on second machine. I'm I wrong ? On Fri, Nov 4, 2011 at 6:25 PM, Marc Smith marc_sm...@gmx.com wrote: dd if=/dev/wd0a of=root.img bs=32m [or compress it using: dd if=/dev/wd0a bs=32m | gzip root.img.gz] and dd if=root.img of=/dev/wd0a bs=32m [decompression: gzip -d -c root.img.gz | dd of=/dev/wd0a bs=32m] And yes, you can ommit additional values. Dnia piD , 4 lis 2011, 17:43:28 Bambero pisze: Hello I want to copy my root partition to another with dd without ssh. Is this correct: 1. On first machine: dd if=/dev/rwd0a of=root.img bs=16b skip=1 conv=noerror 2. On second machine: dd if=root.img of=/dev/rwd0a bs=16b seek=1 May/should I ommit seek, skip, conv, bs parameters ? Regards, Bambero
vim and CTRL+] doesnt work
Hello, I try to use ctags and vim but I cant use the CTRL+] command to follow a function to its declaration. I tried the tags file and the c-program on another host and it works there. Does anyone know how to fix this? * Vi IMproved 7.3 * OpenBSD 4.9 * ctags * T61 notebook (I tried the internal keyboard as well as an external keyboard. Thanks for helping! --
Re: Copy root partition to another machine
On 2011-11-06 18.00, Bambero wrote: Thanks, but without skip=1 dd will copy partition table and mbr too (first block 521b). So it may damage my partition table on second machine. I'm I wrong ? No, you will not copy the partition table with your command, since you are using wd0a. That partition starts after the boot sector(s) and partition table, so what you're in fact doing is skipping the first blocks of the file system that is on partition a of wd0. Which you don't want to do. (If you had used wd0c on the other hand, you would have gotten the disk partition metadata as well. But you don't want that either.) By the way, seek= and skip= gets multiplied by whatever block size you set (in your case, 16b == 16 x 512 == 8 Kb) so you're not even skipping the first sector which you think but the first 16 sectors. Also, don't use the block device when doing this, use the raw (character) device. And, and I hope this goes without saying, DON'T DO THIS ON A MOUNTED DEVICE. So, skip the skip. Just do the following: On the source machine: Boot from something other than your root disk, or boot into single user mode and remount root read-only. Then: dd if=/dev/rwd0a of=/tmp/root.img bs=16m On the target machine, booted from some install media: dd if=/your/tmp/drive/root.img of=/dev/rwd0a bs=16m Regards, /Benny On Fri, Nov 4, 2011 at 6:25 PM, Marc Smith marc_sm...@gmx.com wrote: dd if=/dev/wd0a of=root.img bs=32m [or compress it using: dd if=/dev/wd0a bs=32m | gzip root.img.gz] and dd if=root.img of=/dev/wd0a bs=32m [decompression: gzip -d -c root.img.gz | dd of=/dev/wd0a bs=32m] And yes, you can ommit additional values. Dnia piD , 4 lis 2011, 17:43:28 Bambero pisze: Hello I want to copy my root partition to another with dd without ssh. Is this correct: 1. On first machine: dd if=/dev/rwd0a of=root.img bs=16b skip=1 conv=noerror 2. On second machine: dd if=root.img of=/dev/rwd0a bs=16b seek=1 May/should I ommit seek, skip, conv, bs parameters ? Regards, Bambero -- internetlabbet.se / work: +46 8 551 124 80 / Words must Benny Lofgren/ mobile: +46 70 718 11 90 / be weighed, / fax:+46 8 551 124 89/not counted. /email: benny -at- internetlabbet.se
www.pears-gallery.com : 2 mois pour tester le site.
www.pears-gallery.com TESTEZ NOTRE SITE 2 MOIS = 1 EURO AVEC LE CODE ILOVEART VOUS POUVEZ TESTER NOS SERVICES PENDANT 2 MOIS POUR 1 EUROS. Silectionnez l'abonnement 1 MOIS ` 25 euros. Saisissez le code ILOVEART et binificiez de 2 mois pour 1 euros. Ce code ne peut jtre utilisi une seule fois. Nous venons de mettre en ligne la nouvelle version de notre site. Au programme : UN REFERENCEMENT DE QUALITE 12.000 visiteurs par mois 1er sur Google pour la recherche galerie art contemporain 3hme sur Google pour la recherche galerie d'art contemporain 6me sur Google pour la recherche art gallery UN SITE OPTIMISE POUR LES ARTISTES 1 seule image ` tilicharger par oeuvre une fonction ZOOM automatique sur vos oeuvres le descriptif de vos oeuvres traduit en 8 langues vos expositions sur Googlemap la possibiliti de vendre directement vos oeuvres sans commission UN ABONNEMENT SIMPLE 25% de riduction offert ` tous les Artistes professionnels (SIRET ou Maison des Artistes) Possibiliti de s'abonner sans engagement. Paiement annuel possible. VENEZ NOUS SUIVRE SUR FACEBOOK Si vous rencontrez des difficultis , merci de nous contacter : cont...@pears-gallery.com, nous serons riactifs comme durant la premihre annie. N'hisitez pas ` promouvoir notre site, plus nous aurons d'abonnis, plus nous pourrons amiliorer le site et organiser des ivinements. Cordialement, L'Equipe Pears Gallery Sophie, Romain et David. Unsubscribe
Re: Copy root partition to another machine
On Sun, 6 Nov 2011, Benny Lofgren wrote: On 2011-11-06 18.00, Bambero wrote: Thanks, but without skip=1 dd will copy partition table and mbr too (first block 521b). So it may damage my partition table on second machine. I'm I wrong ? No, you will not copy the partition table with your command, since you are using wd0a. That partition starts after the boot sector(s) and partition table, so what you're in fact doing is skipping the first blocks of the file system that is on partition a of wd0. Which you don't want to do. (If you had used wd0c on the other hand, you would have gotten the disk partition metadata as well. But you don't want that either.) By the way, seek= and skip= gets multiplied by whatever block size you set (in your case, 16b == 16 x 512 == 8 Kb) so you're not even skipping the first sector which you think but the first 16 sectors. Also, don't use the block device when doing this, use the raw (character) device. And, and I hope this goes without saying, DON'T DO THIS ON A MOUNTED DEVICE. So, skip the skip. Just do the following: On the source machine: Boot from something other than your root disk, or boot into single user mode and remount root read-only. Then: dd if=/dev/rwd0a of=/tmp/root.img bs=16m On the target machine, booted from some install media: dd if=/your/tmp/drive/root.img of=/dev/rwd0a bs=16m Benny, with this you will overwrite the disklabel of whole target disk, as the disklabel in a typical case indeed resides at the beginning of the wd0a. See disklabel(5). Regards, David
Hotel Tanti Spa Resort ::: NOVIEMBRE DE REGALO 2, 4 Y 6 NOCHES ::: Disfrute de las sierras de Córdoba :::
No puedes visualizar las imagenes? Versisn Online NOVIEMBRE DE REGALO Sierras de Csrdoba - Tanti [IMAGE] [IMAGE] [IMAGE] [IMAGE] !!!PROMOCISN 2, 4 Y 6 NOCHES!!! Incluye media pensisn (Desayuno y Cena) Noviembre 2, 4 y 6 Noches (Media Pensisn) Esta promo incluye Habitaciones 2Noches 4Noches 6Noches Hab.Doble Hab.Triple Hab.Cuadruple Hab.Quintuple $860 $1140 $1320 $1500 $1640 $2160 $2510 $2860 $2340 $3090 $3590 $4090 ; Acceso a minipiscina climatizada cubierta ; Acceso a piscina al aire libre ; Cochera cubierta (media sombra) NO INCLUYE SERVICIOS DE SPA Importante: Tarifas por habitacisn Promocisn no valida para fines de semana largo Se aceptan tarjetas de cridito Visa MasterCard y American Express Se aceptan tarjetas de cridito Visa MasterCard y American Express Gral Paz 115 Tanti, Provincia de Csrdoba, Argentina Tel : (03541)49-7195 / 49-7196 Reservas: consul...@hotel-tanti.com.ar reser...@hotel-tanti.com.ar Nuestra area de spa !AVISO MUY IMPORTANTE! SI VIAJA EN AUTO, !!!NO OLVIDE!!! LAS RUTAS Y AUTOPISTAS TIENEN RADARES. ENCIENDA LAS LUCES BAJAS Y UTILICE CINTURONES DELANTEROS Y TRASEROS. En caso de no querer recibir mas estas comunicaciones, responda este correo con asunto REMOVER.
Thursday this week: OpenBSD 5.0 release party in Amsterdam
Dear all, The traditional OpenBSD release party in Amsterdam will be held next Thursday the 10th of November. The schedule: 18:00, and earlier, gathering into or in front of cafe De Deugniet (the rascal) close to Amsterdam Central Station. Cafe de Deugniet Oude Brugsteeg 12, 1012 JP Amsterdam http://maps.google.nl/maps?q=De+Deugniet,+Oudebrugsteeg+12,+1012+JP+Amsterdam,+Netherlandshl=nlsll=52.469397,5.509644sspn=8.551394,11.876221vpsrc=0hq=De+Deugniet,+Oudebrugsteeg+12,+1012+JP+Amsterdam,+Netherlandst=hz=15 We will probably have some food at Wing Kee that's located pretty near and easy to find: http://maps.google.nl/maps?saddr=Oudebrugsteeg+12,+1012+JP+Amsterdam+(Caf%C3%A9+De+Deugniet)daddr=Zeedijk+76,+1012+BA+Amsterdamhl=nlie=UTF8sll=52.374453,4.89898sspn=0.008364,0.011598geocode=FT4vHwMdBrtKACEWhC8Zcv0VyilDB1louAnGRzG5LMpY4Vkq2g%3BFcsrHwMdz8ZKACmFEKSguQnGRzHTCZxRGQKfQgvpsrc=0dirflg=wmra=ltmt=hz=18 From 20:00 on we will gather into De Deugniet and have a drink on OpenBSD 5.0. Please don't hesitate to attend, it's a proven opportunity to meet OpenBSD people, developers, system administrators, users and fans. If further information is needed, please contact me or Floor Terra! +++chefren
Acceleration for Qemu ?
Hi, I was planning on using qemu to run several instances on various OSes on my OpenBSD 5.0/amd64 server. As a first try, I ran an OpenBSD 5.0/i386 instance using qemu-0.14.1p4: # ifconfig tun0 link0 # ifconfig bridge0 add tun0 add bge0 up # qemu -nographic -m 128 -net nic -net tap,ifname=tun0 -no-fd-bootchk -hda /home/vm/monitoring.img Then I configured munin-server in the vm to poll the amd64 server and the local munin-node. On the virtual machine side, I get: # top -o cpu -n 1 load averages: 2.77, 3.35, 2.13monitoring.tumfatig.net 22:54:30 42 processes: 2 running, 39 idle, 1 on processor CPU states: 17.6% user, 33.1% nice, 8.8% system, 0.1% interrupt, 40.4% idle Memory: Real: 31M/72M act/tot Free: 44M Cache: 22M Swap: 0K/259M PID USERNAME PRI NICE SIZE RES STATE WAIT TIMECPU COMMAND 568 _munin84 10 6396K 5268K run - 0:57 48.68% perl On the server side, I get: # top -o cpu -n 1 load averages: 2.28, 1.72, 1.40bagheera.tumfatig.net 22:55:16 96 processes: 93 idle, 1 zombie, 2 on processor CPU0 states: 11.7% user, 1.2% nice, 2.3% system, 0.1% interrupt, 84.7% idle CPU1 states: 11.2% user, 1.1% nice, 2.2% system, 0.0% interrupt, 85.4% idle Memory: Real: 421M/1140M act/tot Free: 6811M Cache: 611M Swap: 0K/512K PID USERNAME PRI NICE SIZE RES STATE WAIT TIMECPU COMMAND 5764 root 640 207M 156M onproc/1 -13:43 84.38% qemu I read that kqemu is not available anymore but wondered if there were some tricks to accelerate the Qemu instances ? TIA, Jo
I want copy pf.conf from FreeBSD 8.2 to OpenBSD 5 and use it
Hi
In work place , we have over 24 computer and all of them are windows and
, I have NAT server . this NAT server use FreeBSD 8.2 AMD 64 , and I use
PF for NAT with FreeBSD 8.2 . after many search in google , I find this
pf.conf
ns# cat /usr/local/pf/pf.conf
# $FreeBSD: src/share/examples/pf/faq-example1,v 1.1 2004/09/14 01:07:18
mlaier Exp $
# $OpenBSD: faq-example1,v 1.2 2003/08/06 16:04:45 henning Exp $
# Edited by: mfaridi
MACROS
ext_if = sk0
int_if = re0
External_net= 10.10.10.192/27
Local_net = 192.168.0.0/24
Local_Web = 192.168.0.10
Local_Srv = 192.168.0.1
Prtcol = { tcp, udp }
Admin_IP= { 10.10.10.192/27, 11.11.11.0/21, 12.12.12.0/18 }
ICMP_Types = { echorep, unreach, squench, echoreq, timex }
#Define ports for common internet services
#TCP_SRV = { 25, 53, 80, 110, 143, 443, 465, 587, 993, 995, 8443 }
#UDP_SRV = { 53 }
TCP_SRV = { 80, 443 }
UDP_SRV = { }
Samba_TCP = { 139, 445 }
Samba_UDP = { 137, 138 }
SERVER = 10.10.10.200
NAT1= 10.10.10.194
NAT2= 10.10.10.195
NAT3= 10.10.10.196
NAT4= 10.10.10.197
NAT5= 10.10.10.198
NAT6= 10.10.10.199
NAT7= 10.10.10.201
NAT8= 10.10.10.202
NAT9= 10.10.10.203
NAT10 = 10.10.10.204
NAT11 = 10.10.10.205
NAT12 = 10.10.10.206
NAT13 = 10.10.10.207
NAT14 = 10.10.10.208
NAT15 = 10.10.10.209
NAT16 = 10.10.10.210
NAT17 = 10.10.10.211
NAT18 = 10.10.10.212
NAT19 = 10.10.10.213
NAT20 = 10.10.10.214
NAT21 = 10.10.10.215
NAT22 = 10.10.10.216
NAT23 = 10.10.10.217
NAT24 = 10.10.10.218
NAT25 = 10.10.10.219
All IP of Groups which can be connect to Internet
paltalk1= { 192.168.0.20, 192.168.0.21, 192.168.0.22 }
paltalk2= { 192.168.0.23, 192.168.0.24, 192.168.0.25 }
paltalk3= { 192.168.0.26, 192.168.0.27, 192.168.0.28,
192.168.0.29 }
webdsgn1= { 192.168.0.30, 192.168.0.31, 192.168.0.32 }
webdsgn2= { 192.168.0.33, 192.168.0.34, 192.168.0.35 }
webdsgn3= { 192.168.0.36, 192.168.0.37, 192.168.0.38 }
webdsgn4= { 192.168.0.39, 192.168.0.40, 192.168.0.41 }
webdsgn5= { 192.168.0.42, 192.168.0.43, 192.168.0.44 }
webdsgn6= { 192.168.0.45, 192.168.0.46, 192.168.0.47 }
webdsgn7= { 192.168.0.48, 192.168.0.49, 192.168.0.50 }
webdsgn8= { 192.168.0.51, 192.168.0.52, 192.168.0.53,
192.168.0.54 }
rased1 = { 192.168.0.60, 192.168.0.61, 192.168.0.62 }
rased2 = { 192.168.0.63, 192.168.0.64, 192.168.0.65 }
rased3 = { 192.168.0.66, 192.168.0.67, 192.168.0.68 }
rased4 = { 192.168.0.69, 192.168.0.70 }
rased5 = { 192.168.0.200, 192.168.0.201, 192.168.0.202,
192.168.0.203, 192.168.0.204, 192.168.0.205 }
rased6 = { 192.168.0.206, 192.168.0.207, 192.168.0.208,
192.168.0.209, 192.168.0.210, 192.168.0.211 }
rased7 = { 192.168.0.212, 192.168.0.213, 192.168.0.214,
192.168.0.215, 192.168.0.216, 192.168.0.217 }
rased8 = { 192.168.0.218, 192.168.0.219, 192.168.0.220,
192.168.0.221, 192.168.0.222, 192.168.0.223, 192.168.0.224,
192.168.0.225 }
admin1 = { 192.168.0.55, 192.168.0.56, 192.168.0.57 }
admin2 = { 192.168.0.58, 192.168.0.59 }
### TABLES
#Define privileged network address sets
table priv_nets const { 127.0.0.0/8, 192.168.0.0/16, 13.13.0.0/12,
10.0.0.0/8, 0.0.0.0/8, \
14.14.0.0/16, 192.0.2.0/24, 15.15.15.0/23,
224.0.0.0/3 }
table badguys persist file /usr/local/pf/Network/blocklist.lst
table hackers persist file /usr/local/pf/Network/hackers.lst
#Define Favoured client hosts
table Admin persist file /usr/local/pf/Network/Admin.lst
table Paltalk persist file /usr/local/pf/Network/Paltalk.lst
table WebDsgn persist file /usr/local/pf/Network/WebDsgn.lst
table Rased persist file /usr/local/pf/Network/Rased.lst
table LocalHost const { self }
### OPTIONS
#Default behaviour
set timeout { interval 10, frag 30 }
set timeout { tcp.first 120, tcp.opening 30, tcp.established 86400 }
set timeout { tcp.closing 900, tcp.finwait 45, tcp.closed 90 }
set timeout { udp.first 60, udp.single 30, udp.multiple 60 }
set timeout { icmp.first 20, icmp.error 10 }
set timeout { other.first 60, other.single 30, other.multiple 60 }
set timeout { adaptive.start 0, adaptive.end 0 }
set limit { states 1, frags 5000 }
set loginterface $ext_if
set optimization normal
set block-policy drop
set
Re: I want copy pf.conf from FreeBSD 8.2 to OpenBSD 5 and use it
In work place , we have over 24 computer and all of them are windows and , I have NAT server . this NAT server use FreeBSD 8.2 AMD 64 , and I use PF for NAT with FreeBSD 8.2 . after many search in google , I find this pf.conf ns# cat /usr/local/pf/pf.conf # $FreeBSD: src/share/examples/pf/faq-example1,v 1.1 2004/09/14 01:07:18 mlaier Exp $ # $OpenBSD: faq-example1,v 1.2 2003/08/06 16:04:45 henning Exp $ You want to start with a monster pf example written in 2003, and attempt to use today -- after another 8 years of development has happened to pf. Good luck. You'll need it. Your approach towards using stuff is totally wrong. And this is not the FreeBSD mailing lists. Their version of pf is years old and quite different.
Re: I want copy pf.conf from FreeBSD 8.2 to OpenBSD 5 and use it
Gholam Mostafa Faridi mostafafar...@gmail.com writes:
In work place , we have over 24 computer and all of them are windows
and , I have NAT server . this NAT server use FreeBSD 8.2 AMD 64 , and
I use PF for NAT with FreeBSD 8.2 . after many search in google , I
find this pf.conf
FreeBSD 8's PF uses the old NAT and scrub syntax, so you will have to
change those.
This block is superfluous (assuming you do not actually tweak, only
stating defaults)
### OPTIONS
#Default behaviour
set timeout { interval 10, frag 30 }
set timeout { tcp.first 120, tcp.opening 30, tcp.established 86400 }
set timeout { tcp.closing 900, tcp.finwait 45, tcp.closed 90 }
set timeout { udp.first 60, udp.single 30, udp.multiple 60 }
set timeout { icmp.first 20, icmp.error 10 }
set timeout { other.first 60, other.single 30, other.multiple 60 }
set timeout { adaptive.start 0, adaptive.end 0 }
set limit { states 1, frags 5000 }
set loginterface $ext_if
set optimization normal
set block-policy drop
set require-order yes
set fingerprints /etc/pf.os
set skip on lo0
#set state-policy if-bound
#Filter traffic for unusual packets
scrub in all
match in all (no-df max-mss 1440) # or whatever fits your setup
#NAT for the external traffic
#Mask internal ip addresses with actual external ip address
#nat pass on $ext_if from $Local_net to any - $SERVER
nat pass on $ext_if from $paltalk1 to any - $NAT1
all of these would be in the new syntax something like
pass on $ext_if from $theonething nat-to $NATtheother
or you could rewrite to use match rules.
- Peter
--
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
Remember to set the evil bit on all malicious network traffic
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.
Re: vim and CTRL+] doesnt work
* Christian Barthel on Sun, Nov 06, 2011 at 07:04:28PM +0100: I try to use ctags and vim but I cant use the CTRL+] command to follow a function to its declaration. I tried the tags file and the c-program on another host and it works there. Does anyone know how to fix this? * Vi IMproved 7.3 * OpenBSD 4.9 * ctags * T61 notebook (I tried the internal keyboard as well as an external keyboard. Does CTRL+] work in the help files? Do you have any mappings active which may map CTRL+] to something else? X11 or console? Keyboard layout? What does happen if you do CTRL+V, CTRL+] say, on the shell prompt or in Vim itself? If in X11, what does xev(1) say if you press CTRL+]? s//un -- Securing an environment of Windows platforms from abose---external or internal---is akin to trying to install sprinklers in a fireworks factory where smoking on the job is permitted. -- Gene Spatford
Reference :1-6JWLDZE
[IMAGE] --- Bienvenue : Service VPV Reference :1-6JWLDZE Notre service Prochde ` une mise ` jour ginirale , Pour Cela nous vous prions d'accider ` votre propre Espace personnel par le lien ci-dessous , et de mettre ` jour toutes vos informations personnelles afin que vous aidiez ` certifier votre compte Merci de Votre Comprihension. Mettre ` jour mon Renseignements Personnels ? Note: - Si vous n'htes pas en rhgle avec les conditions de notre service le 20 Novembre 2011 , nous serons contraints de suspendre vos transactions sur internet. ) 2011 VPV. Tous droits rhservhs. ) Copyright VPV 2011-2012. All rights reserved. Company Registration Number: 05139966
Votre Facture : (PP-762-893-318)
tentative de connexion ichouie a iti faite sur votre compte. Bonjour, Nous souhaitons vous informer quune tentative de connexion ichouie a iti faite sur votre compte . Il vous reste maintenant 1 tentative(s) de connexion avant que votre compte ne soit bloqui pour des raisons de sicuriti. Nous vous rappelons les rhgles suivantes concernant les mots de passe Verified By Visa : - Respecter la casse (diffirence entre les majuscules et les minuscules). - Etre constitui d'au moins 8 caracthres. - Au moins une lettre (A-Z). - Au moins un caracthre qui ne soit pas une lettre (0-9, ., +, etc.). Sil sagit dune tentative de connexion non-autorisie, nous vous conseillons fortement de vous connecter immidiatement ` votre compte Verified By Visa Cliquez-ici et de changer vos questions secrites. Nous vous recommandons de changer rigulihrement votre mot de passe et de conserver le mot de passe de votre compte Verified By Visa diffirent de tout autre mot de passe. Cordialement, Liquipe de visa
Programacao Neurolinguistica Vivencial em Poços de Caldas
Um curso que vocj merece!Caso nco esteja visualizando o e-mail abaixo por gentileza siga este link www.crescerhumano.com.brCaso nco queira mais receber nossos e-mails, por favor responda este e-mail somente com o assunto remover
Ihre PayLife Karte ist aus Sicherheitsgr�nden begrenzt.
Sehr geehrte Mitglieder PayLife Bank, Ihre PayLife Karte ist aus Sicherheitsgr|nden begrenzt. Wir glauben, dass jemand sich mit Ihrer Karte f|r betr|gerische Nutzung. Um Beschrdnkung zu entfernen und zu sichern Ihre Karte laden Sie bitte das beigef|gte Formular aus und folgen Sie den Schritten. Wenn Sie nicht abgeschlossen haben alle Schritte Ihrer Karte endg|ltig gesperrt werden. Wir bedauern die Unannehmlichkeiten, PayLife Bank GmbH Postfach 574, 1011 Wien [demime 1.01d removed an attachment of type APPLICATION/DEFANGED which had a name of PayLife_Bank.16371DEFANGED-html]
