Re: pf for routers?

2010-09-24 Thread Joachim Schipper
On Wed, Sep 22, 2010 at 02:04:39PM -0600, Beavis wrote:
 Greetings List,
 
 I would like to ask if someone has done routing via pf(4) (non-NAT
 rules). My idea is to be able to route packets from one interface to
 the other. say from tun0 to rl0. I've been googling a lot and most of
 the rules im seeing have something to do with NAT routes.
 
 any help would be awesomely appreciated.

What is the problem you are trying to solve, and what have you tried so
far? And why pf(4) instead of route(8)?

Joachim



Taller sobre el Manual Administrativo de Obras Públicas, 5 de Octubre en México D.F.

2010-09-24 Thread Lic. Maria Jose Herrera
[IMAGE]

Mayores informes responda este correo electrsnico con los siguientes
datos.
Empresa:
Nombre:
Telifono:
Email:
Nzmero de Interesados:
Y en breve le haremos llegar la informacisn completa del evento. 
O bien comunmquense a nuestros telifonos  un ejecutivo con gusto le
atendera
Tels. (33) 8851-2365, (33)8851-2741.

Copyright (C) 2010, PMS Capacitacisn Efectiva de Mixico  S.C. Derechos
Reservados. PMS de Mixico, El logo de PMS de Mixico son marcas
registradas. ADVERTENCIA PMS de Mixico no cuenta con alianzas
estratigicas de ningzn tipo dentro de la Republica Mexicana. NO SE DEJE
ENGAQAR - DIGA NO A LA PIRATERIA. Todos los logotipos, marcas comerciales
e imagenes son propiedad de sus respectivas corporaciones y se utilizan
con fines informativos solamente.

Este Mensaje ha sido enviado a misc@openbsd.org  como usuario de Pms de
Mixico o bien un usuario le refiris para recibir este boletmn.
Como usuario de Pms de Mixico, en este acto autoriza de manera expresa
que Pms de Mixico le puede contactar vma correo electrsnico u otros
medios.
Si usted ha recibido este mensaje por error, haga caso omiso de el y
reporte su cuenta respondiendo este correo con el subject BAJAOBRA.
Unsubscribe to this mailing list, reply a blank message with the subject
UNSUBSCRIBE BAJAOBRA
Tenga en cuenta que la gestisn de nuestras bases de datos es de suma
importancia y no es intencisn de la empresa la inconformidad del
receptor.

[demime 1.01d removed an attachment of type image/jpeg which had a name of 
manual_administrativo_obra.jpg]



Reminder: friends invited you to join Select2gether.

2010-09-24 Thread Lucia Bassano
Dear Misc,

 

Lucia Bassano sent a request to add you as a contact on Select2gether.
 

Just a friendly reminder to join Lucia Bassano's network, follow the link
below:

Join Lucia Bassano's Network

 

Thanks,
Lucia Bassano

You can remove yourself from Lucia Bassano's network at any time.
If you do not wish to receive this type of email from Select2gether in the
future, please click here to unsubscribe.
Select2gether, 555 Bryant st #444, Palo Alto, CA, 94301

[demime 1.01d removed an attachment of type image/png which had a name of 
logo-s2g.png]

[demime 1.01d removed an attachment of type image/jpeg which had a name of 
avatar_216db91edbfff7e2ccae7575a88a1399.jpg]



Re: Installing OpenBSD from Linux Xen VPS

2010-09-24 Thread Stephano Zanzin
I know arpnetworks, their price are really cool, but I need a VPS with an
API. :-(

On Wed, Sep 22, 2010 at 7:05 AM, Kevin Chadwick ma1l1i...@yahoo.co.ukwrote:

 There is a much higher potential of variation of implementations of xens
 and it is next to impossible to find out any particular hosts, xen
 details.

 If anyone has these details, maybe they could share, but you may have a
 more reliable experience with a Linux KVM host.

 arpnetworks.com (linux KVM) was recommended to me by someone on this
 list recently and they advertise OpenBSD 4.7 images.


 On Wed, 22 Sep 2010 09:47:52 +0700
 sonjaya sonj...@gmail.com wrote:

  i try install in my xen  at opensuse , when install success but when
  reboot after finish installation blank and try againt same happen
  againt.
 
 
 
  On Tue, Sep 21, 2010 at 12:25 PM, Stephano Zanzin m...@zan.st wrote:
   Hello,
  
   I was wondering if anyone had installed OpenBSD from a Linux VPS
 running
   over a Xen hosting(like slicehost, linode, etc). So, someone tried it?
  
   --
   stephano
  
  
 
 
 
  --
  sonjaya
  http://www.sharenupload.com
  http://www.farmproxy.com




-- 
stephano



Re: Linux or OpenBSD

2010-09-24 Thread Ross Cameron
Depends what you want to do exactly I suppose...

Personally I use Linux based firewalls for many of my sites purely because
the clients in question want deep packet inspection (aka OSI layer 7
filtering) done on the network traffic.
But that said they are always the second skin firewalls, sitting behind
PF firewalls, filtering outbound traffic while the OpenBSD/FreeBSD boxen
filter inbound traffic.

Thats just my 5c worth and I've always been of the opinion that at least two
different skins of firewalls should be deployed, build ontop of different
technologies.
Makes life a lot harder for whomever you want to keep out.




Opportunity is most often missed by people because it is dressed in
overalls and looks like work.
Thomas Alva Edison
Inventor of 1093 patents, including:
The light bulb, phonogram and motion pictures.



On Wed, Sep 22, 2010 at 9:29 PM, Rikky Taylor rikkytay...@hotmail.co.ukwrote:

 I was after some general advice. I need to setup a routing firewall with 3
 interfaces, moderate traffic and a fair amount of NAT'ing in the rules.



 Given identical modern server hardware would I expect a performance
 difference
 between an OpenBSD/PF setup and a Linux/IPTables one?



 Rikky



Re: Linux or OpenBSD

2010-09-24 Thread R0me0 ***
You can to filter layer 7 with snort

By example, detect bittorrent and p2p traffic with snort and drop it

2010/9/24 Ross Cameron ross.came...@unix.net

 Depends what you want to do exactly I suppose...

 Personally I use Linux based firewalls for many of my sites purely because
 the clients in question want deep packet inspection (aka OSI layer 7
 filtering) done on the network traffic.
But that said they are always the second skin firewalls, sitting behind
 PF firewalls, filtering outbound traffic while the OpenBSD/FreeBSD boxen
 filter inbound traffic.

 Thats just my 5c worth and I've always been of the opinion that at least
 two
 different skins of firewalls should be deployed, build ontop of different
 technologies.
Makes life a lot harder for whomever you want to keep out.




 Opportunity is most often missed by people because it is dressed in
 overalls and looks like work.
Thomas Alva Edison
Inventor of 1093 patents, including:
The light bulb, phonogram and motion pictures.



 On Wed, Sep 22, 2010 at 9:29 PM, Rikky Taylor rikkytay...@hotmail.co.uk
 wrote:

  I was after some general advice. I need to setup a routing firewall with
 3
  interfaces, moderate traffic and a fair amount of NAT'ing in the rules.
 
 
 
  Given identical modern server hardware would I expect a performance
  difference
  between an OpenBSD/PF setup and a Linux/IPTables one?
 
 
 
  Rikky



MICROCREDITO Haciendo Negocios desde Abajo...Publicidad

2010-09-24 Thread Centro Global para el Desarrollo y la Democracia
MICROCREDITO: Haciendo Negocios desde abajo - Conferencia Magistral

Este 27 de Setiembre, a las 2: p.m.

INGRESO LIBRE

El hombre que ha sacado de la pobreza a mas de 120 millones de
personas en el mundo a traves del microcredito.

Dr. Muhammad Yunus

Premio Nobel de la Paz 2006

Lugar: Plaza Comercial Plaza Norte (Cruce Pamericana Norte y Tomas
Valle)

Hora: 2:00 p.m.

ENTRADA LIBRE

Separa un Stand para exhibir tus productos o servicios con
anticipacion

Organiza: Centro Global para el Desarrollo y a Democracia

Inscribete en:

Web: http://www.cgdd.org

Telf: 721-2793

conferenciayu...@cgdd.org mailto:conferenciayu...@cgdd.org

-

r e t i r a r : quitarmedelab...@yahoo.es
mailto:quitarmedelab...@yahoo.es



--
To unsubscribe from this list visit
http://hpusb.info/lists/?p=unsubscribeuid=4ab9d754892522ea10bc20d463d089e1

To update your preferences visit
http://hpusb.info/lists/?p=preferencesuid=4ab9d754892522ea10bc20d463d089e1



--



ibm 380d pcic irqs

2010-09-24 Thread James M. Pothering
Why does OpenBSD 4.7 i386 assign the pcic irq to 4 which is the
com0 isa port irq? Also, if there is a pcmcia card in a slot during
boot that card gets irq 3 which is the com1 isa port irq.

Later in the boot when com0 and com1 are detected dmesg shows:
com0: irq 4 already in use
com1: irq 3 already in use

irq 9, 10, 11, etc. are free and the bios is set correctly.

Any way to fix or get around this?
I need both com ports so I do not want to disable them.
(FreeBSD works perfect on same machine.)

Machine is an old IBM 380D ThinkPad laptop.


OpenBSD 4.7 (GENERIC) #558: Wed Mar 17 20:46:15 MDT 2010
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel Pentium (P54C) (GenuineIntel 586-class) 153 MHz
cpu0: FPU,V86,DE,PSE,TSC,MSR,MCE,CX8
real mem  = 83456000 (79MB)
avail mem = 71454720 (68MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 03/28/97, BIOS32 rev. 0 @
0xfd960
apm0 at bios0: Power Management spec V1.2
apm0: battery life expectancy 100%
apm0: AC on, battery charge high
pcibios0 at bios0: rev 2.1 @ 0xfd9a0/0x800
pcibios0: PCI BIOS has 2 Interrupt Routing table entries
pcibios0: PCI Exclusive IRQs: 15
pcibios0: PCI Interrupt Router at 000:01:0 (Intel 82371 ISA and
IDE rev 0x00)
pcibios0: PCI bus #0 is the last bus
bios0: ROM list: 0xc/0x8000
cpu0 at mainbus0: (uniprocessor)
cpu0: F00F bug workaround installed
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Intel 82437 PCI/Cache/DRAM rev 0x02
pcib0 at pci0 dev 1 function 0 Intel 82371 ISA and IDE rev 0x03
vga1 at pci0 dev 3 function 0 Neomagic Magicgraph 128ZV rev 0x02
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
pcic3 at pci0 dev 19 function 0 Cirrus Logic CL-PD6729 rev 0x07
pcic3 controller 0: Cirrus PD672X has sockets A and B
pcmcia0 at pcic3 controller 0 socket 0
sm1 at pcmcia0 function 0 Megahertz, CC10BT/2, PCMCIA 10BASE-T/2
ETHERNET ADAPTER port 0x400/16, irq 3: address 50:00:b6:11:95:f7
pcmcia1 at pcic3 controller 0 socket 1
pcic3: interrupting at irq 4
pcic3: irq 4, polling enabled
isa0 at pcib0
isadma0 at isa0
com0: irq 4 already in use
com1: irq 3 already in use
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pms0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pms0 mux 0
wdc0 at isa0 port 0x1f0/8 irq 14
wd0 at wdc0 channel 0 drive 0: IBM-DMCA-21440
wd0: 16-sector PIO, LBA, 1376MB, 2818368 sectors
atapiscsi0 at wdc0 channel 0 drive 1
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: TEAC, CD-38E, 2.0A ATAPI 5/cdrom
removable
wd0(wdc0:0:0): using BIOS timings
cd0(wdc0:0:1): using BIOS timings
sb0 at isa0 port 0x220/24 irq 5 drq 1: dsp v3.02
midi0 at sb0: SB MIDI UART
audio0 at sb0
opl0 at sb0: model OPL3
midi1 at opl0: SB Yamaha OPL3
wss0 at isa0 port 0x530/8 irq 10 drq 0: CS4236/CS4236B (vers 63)
audio1 at wss0
pcppi0 at isa0 port 0x61
midi2 at pcppi0: PC speaker
spkr0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
biomask eb45 netmask eb4d ttymask fbdf
vscsi0 at root
scsibus1 at vscsi0: 256 targets
softraid0 at root
root on wd0a swap on wd0b dump on wd0b



4.7 smtpd 500 Pipelining unsupported

2010-09-24 Thread Mr. Roboto
I have a fairly generic configuration for smtpd accepting mail on an
IPv6 interface. In the following email attempts, I'm seeing a 500
error from smtpd. The entry in /var/log/maillog is:

Sep 24 16:04:35 mail smtpd[9272]: 1285362275.rTy5IAatxEJ1PUGX:
from=i...@example.org, relay=blog.example.net [IPv6:2001:x:y::25],
stat=LocalError (500 Pipelining unsupported)

The SMTP conversation looks as such:


220 mail.ipv6.example.org ESMTP OpenSMTPD
EHLO ipv6.example.org
250-mail.ipv6.example.org Hello ipv6.example.net [IPv6:2001:x:y::25],
pleased to meet you
250-8BITMIME
250 HELP
MAIL FROM: i...@example.net
250 Sender ok
RCPT TO: al...@ipv6.example.org
250 Recipient ok
DATA

354 Enter mail, end with . on a line by itself

To:
From: i...@example.net
Message-ID: 4c9d12631b29a.1285362...@ipv6.example.net
Subject: Test Message
Date: Fri, 24 September 2010 14:04:35 -0700

Hello
.

QUIT

500 Pipelining unsupported


Here's my /etc/mail/smtpd.conf

listen on ::1 port 25
listen on 10.10.10.10 port 25
listen on 2001:h:h::5 port 25
hostname mail.ipv6.example.org

map aliases { source db /etc/mail/aliases.db }
map virtual { source db /etc/mail/virtual.db }

accept from all for local alias aliases deliver to mbox
accept from all for domain ipv6.example.org deliver to mbox
accept for all relay

The aliases.db file is generic as shipped, and the virtual.db table
looks as such:

# cat /etc/mail/virtual
al...@ipv6.example.org:  alice
t...@ipv6.example.org:   alice

And a /var/run/dmesg.boot

OpenBSD 4.7 (GENERIC) #112: Wed Mar 17 20:43:49 MDT 2010
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC
real mem = 267321344 (254MB)
avail mem = 247496704 (236MB)
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.4 @ 0xfbd3f (10 entries)
bios0: vendor QEMU version QEMU date 01/01/2007
acpi0 at bios0: rev 0
acpi0: tables DSDT FACP APIC
acpi0: wakeup devices
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
acpiprt0 at acpi0: bus 0 (PCI0)
acpicpu0 at acpi0
mpbios at bios0 not configured
cpu0 at mainbus0: (uniprocessor)
cpu0: QEMU Virtual CPU version 0.9.1, 2400.48 MHz
cpu0: FPU,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH
,MMX,FXSR,SSE,SSE2,SSE3,NXE,LONG
cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 1
6-way L2 cache
cpu0: ITLB 255 4KB entries direct-mapped, 255 4MB entries direct-mapped
cpu0: DTLB 255 4KB entries direct-mapped, 255 4MB entries direct-mapped
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 Intel 82441FX rev 0x02
pcib0 at pci0 dev 1 function 0 Intel 82371SB ISA rev 0x00
pciide0 at pci0 dev 1 function 1 Intel 82371SB IDE rev 0x00: DMA, channel 0 wi
red to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: QEMU HARDDISK
wd0: 16-sector PIO, LBA48, 5632MB, 11534336 sectors
atapiscsi0 at pciide0 channel 0 drive 1
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: QEMU, QEMU DVD-ROM, 0.9. ATAPI 5/cdrom removable
wd0(pciide0:0:0): using PIO mode 0, DMA mode 2
cd0(pciide0:0:1): using PIO mode 0
atapiscsi1 at pciide0 channel 1 drive 0
scsibus1 at atapiscsi1: 2 targets
cd1 at scsibus1 targ 0 lun 0: QEMU, QEMU DVD-ROM, 0.9. ATAPI 5/cdrom removable
cd1(pciide0:1:0): using PIO mode 0
uhci0 at pci0 dev 1 function 2 Intel 82371SB USB rev 0x01: irq 11
piixpm0 at pci0 dev 1 function 3 Intel 82371AB Power rev 0x03: irq 10
iic0 at piixpm0
iic0: addr 0x18 00=00 01=00 02=00 03=00 04=00 05=00 06=00 07=00 08=00 words 00=0
000 01= 02= 03= 04= 05= 06= 07=
iic0: addr 0x1a 00=00 01=00 02=00 03=00 04=00 05=00 06=00 07=00 08=00 words 00=0
000 01= 02= 03= 04= 05= 06= 07=
iic0: addr 0x29 00=00 01=00 02=00 03=00 04=00 05=00 06=00 07=00 08=00 words 00=0
000 01= 02= 03= 04= 05= 06= 07=
iic0: addr 0x2b 00=00 01=00 02=00 03=00 04=00 05=00 06=00 07=00 08=00 words 00=0
000 01= 02= 03= 04= 05= 06= 07=
iic0: addr 0x48 48=00 words 00= 01= 02= 03= 04= 05= 06=0
000 07=
iic0: addr 0x49 48=00 words 00= 01= 02= 03= 04= 05= 06=0
000 07=
iic0: addr 0x4a 48=00 words 00= 01= 02= 03= 04= 05= 06=0
000 07=
iic0: addr 0x4b 48=00 words 00= 01= 02= 03= 04= 05= 06=0
000 07=
iic0: addr 0x4c 00=00 01=00 02=00 03=00 04=00 05=00 06=00 07=00 08=00 48=00 word
s 00= 01= 02= 03= 04= 05= 06= 07=
iic0: addr 0x4d 48=00 words 00= 01= 02= 03= 04=
05= 06= 07=
iic0: addr 0x4e 00=00 01=00 02=00 03=00 04=00 05=00 06=00 07=00 08=00 48=00 word
s 00= 01= 02= 03= 04= 05= 06= 07=
vga1 at pci0 dev 2 function 0 Cirrus Logic CL-GD5446 rev 0x00
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
em0 at pci0 dev 3 function 0 Intel PRO/1000MT (82540EM) rev 0x03: 

Re: 4.7 smtpd 500 Pipelining unsupported

2010-09-24 Thread Darrin Chandler
As indicated, pipelining isn't (yet) supported. See
http://tools.ietf.org/html/rfc2920, specifically:

3. The Pipelining Service Extension

   When a client SMTP wishes to employ command pipelining, it first
   issues the EHLO command to the server SMTP. If the server SMTP
   responds with code 250 to the EHLO command, and the response includes
   the EHLO keyword value PIPELINING, then the server SMTP has indicated
   that it can accommodate SMTP command pipelining.

Ideally the sender would obey this, but many assume pipelining support
is present and do not check.


On Fri, Sep 24, 2010 at 04:53:39PM -0500, Mr. Roboto wrote:
 I have a fairly generic configuration for smtpd accepting mail on an
 IPv6 interface. In the following email attempts, I'm seeing a 500
 error from smtpd. The entry in /var/log/maillog is:
 
 Sep 24 16:04:35 mail smtpd[9272]: 1285362275.rTy5IAatxEJ1PUGX:
 from=i...@example.org, relay=blog.example.net [IPv6:2001:x:y::25],
 stat=LocalError (500 Pipelining unsupported)
 
 The SMTP conversation looks as such:
 
 
 220 mail.ipv6.example.org ESMTP OpenSMTPD
 EHLO ipv6.example.org
 250-mail.ipv6.example.org Hello ipv6.example.net [IPv6:2001:x:y::25],
 pleased to meet you
 250-8BITMIME
 250 HELP
 MAIL FROM: i...@example.net
 250 Sender ok
 RCPT TO: al...@ipv6.example.org
 250 Recipient ok
 DATA
 
 354 Enter mail, end with . on a line by itself
 
 To:
 From: i...@example.net
 Message-ID: 4c9d12631b29a.1285362...@ipv6.example.net
 Subject: Test Message
 Date: Fri, 24 September 2010 14:04:35 -0700
 
 Hello
 .
 
 QUIT
 
 500 Pipelining unsupported
 
 
 Here's my /etc/mail/smtpd.conf
 
 listen on ::1 port 25
 listen on 10.10.10.10 port 25
 listen on 2001:h:h::5 port 25
 hostname mail.ipv6.example.org
 
 map aliases { source db /etc/mail/aliases.db }
 map virtual { source db /etc/mail/virtual.db }
 
 accept from all for local alias aliases deliver to mbox
 accept from all for domain ipv6.example.org deliver to mbox
 accept for all relay
 
 The aliases.db file is generic as shipped, and the virtual.db table
 looks as such:
 
 # cat /etc/mail/virtual
 al...@ipv6.example.org:  alice
 t...@ipv6.example.org:   alice
 
 And a /var/run/dmesg.boot
 
 OpenBSD 4.7 (GENERIC) #112: Wed Mar 17 20:43:49 MDT 2010
 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC
 real mem = 267321344 (254MB)
 avail mem = 247496704 (236MB)
 mainbus0 at root
 bios0 at mainbus0: SMBIOS rev. 2.4 @ 0xfbd3f (10 entries)
 bios0: vendor QEMU version QEMU date 01/01/2007
 acpi0 at bios0: rev 0
 acpi0: tables DSDT FACP APIC
 acpi0: wakeup devices
 acpitimer0 at acpi0: 3579545 Hz, 24 bits
 acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
 acpiprt0 at acpi0: bus 0 (PCI0)
 acpicpu0 at acpi0
 mpbios at bios0 not configured
 cpu0 at mainbus0: (uniprocessor)
 cpu0: QEMU Virtual CPU version 0.9.1, 2400.48 MHz
 cpu0: 
 FPU,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH
 ,MMX,FXSR,SSE,SSE2,SSE3,NXE,LONG
 cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 
 64b/line 1
 6-way L2 cache
 cpu0: ITLB 255 4KB entries direct-mapped, 255 4MB entries direct-mapped
 cpu0: DTLB 255 4KB entries direct-mapped, 255 4MB entries direct-mapped
 pci0 at mainbus0 bus 0
 pchb0 at pci0 dev 0 function 0 Intel 82441FX rev 0x02
 pcib0 at pci0 dev 1 function 0 Intel 82371SB ISA rev 0x00
 pciide0 at pci0 dev 1 function 1 Intel 82371SB IDE rev 0x00: DMA, channel 0 
 wi
 red to compatibility, channel 1 wired to compatibility
 wd0 at pciide0 channel 0 drive 0: QEMU HARDDISK
 wd0: 16-sector PIO, LBA48, 5632MB, 11534336 sectors
 atapiscsi0 at pciide0 channel 0 drive 1
 scsibus0 at atapiscsi0: 2 targets
 cd0 at scsibus0 targ 0 lun 0: QEMU, QEMU DVD-ROM, 0.9. ATAPI 5/cdrom 
 removable
 wd0(pciide0:0:0): using PIO mode 0, DMA mode 2
 cd0(pciide0:0:1): using PIO mode 0
 atapiscsi1 at pciide0 channel 1 drive 0
 scsibus1 at atapiscsi1: 2 targets
 cd1 at scsibus1 targ 0 lun 0: QEMU, QEMU DVD-ROM, 0.9. ATAPI 5/cdrom 
 removable
 cd1(pciide0:1:0): using PIO mode 0
 uhci0 at pci0 dev 1 function 2 Intel 82371SB USB rev 0x01: irq 11
 piixpm0 at pci0 dev 1 function 3 Intel 82371AB Power rev 0x03: irq 10
 iic0 at piixpm0
 iic0: addr 0x18 00=00 01=00 02=00 03=00 04=00 05=00 06=00 07=00 08=00 words 
 00=0
 000 01= 02= 03= 04= 05= 06= 07=
 iic0: addr 0x1a 00=00 01=00 02=00 03=00 04=00 05=00 06=00 07=00 08=00 words 
 00=0
 000 01= 02= 03= 04= 05= 06= 07=
 iic0: addr 0x29 00=00 01=00 02=00 03=00 04=00 05=00 06=00 07=00 08=00 words 
 00=0
 000 01= 02= 03= 04= 05= 06= 07=
 iic0: addr 0x2b 00=00 01=00 02=00 03=00 04=00 05=00 06=00 07=00 08=00 words 
 00=0
 000 01= 02= 03= 04= 05= 06= 07=
 iic0: addr 0x48 48=00 words 00= 01= 02= 03= 04= 05= 
 06=0
 000 07=
 iic0: addr 0x49 48=00 words 00= 01= 02= 03= 04= 05= 
 06=0
 000 07=
 iic0: addr 0x4a 

Re: 4.7 smtpd 500 Pipelining unsupported

2010-09-24 Thread Mr. Roboto
On Fri, Sep 24, 2010 at 17:06, Darrin Chandler dwchand...@stilyagin.com wrote:
 As indicated, pipelining isn't (yet) supported. See
 http://tools.ietf.org/html/rfc2920, specifically:

[..]

 Ideally the sender would obey this, but many assume pipelining support
 is present and do not check.

Ah, I see. Thanks much.



Re: 4.7 smtpd 500 Pipelining unsupported

2010-09-24 Thread Claus Assmann
On Fri, Sep 24, 2010, Mr. Roboto wrote:

[Sorry, I can't resist...]

 MAIL FROM: i...@example.net

Syntax error: space after colon is invalid.

 RCPT TO: al...@ipv6.example.org

Same here.



invitatie cursuri gratuite online

2010-09-24 Thread invitatie cursuri gratuite online
 Cursuri Gratuite

   Salut ,

Ai primit o invitatie la Cursuri Gratuite !

  - Iti poti alege singur timpul si ritmul de invatare;
  - Echipa de profesionisti;
  - Usor accesibil;
  - Forma de pregatire moderna;
  - GRATUIT !

  Succes !
www.cursurigratuiteonline.ro

Ai fost invitat pe Cursuri Gratuite.
Copyright ) 2009 Cursuri Gratuite. Toate drepturile rezervate.



Re: Linux or OpenBSD

2010-09-24 Thread Ross Cameron
Indeed, I never said that you CANT do it on OpenBSD,... I just mentioned how
I do it...

That said though the snort+PF combo though is two tools to do the job where
I only need on in the wee Linux distro that I (roll myself) use for
firewalls.




Opportunity is most often missed by people because it is dressed in
overalls and looks like work.
Thomas Alva Edison
Inventor of 1093 patents, including:
The light bulb, phonogram and motion pictures.



On Fri, Sep 24, 2010 at 9:51 PM, R0me0 *** knight@gmail.com wrote:

 You can to filter layer 7 with snort

 By example, detect bittorrent and p2p traffic with snort and drop it

 2010/9/24 Ross Cameron ross.came...@unix.net

 Depends what you want to do exactly I suppose...

 Personally I use Linux based firewalls for many of my sites purely because
 the clients in question want deep packet inspection (aka OSI layer 7
 filtering) done on the network traffic.
But that said they are always the second skin firewalls, sitting behind
 PF firewalls, filtering outbound traffic while the OpenBSD/FreeBSD boxen
 filter inbound traffic.

 Thats just my 5c worth and I've always been of the opinion that at least
 two
 different skins of firewalls should be deployed, build ontop of different
 technologies.
Makes life a lot harder for whomever you want to keep out.




 Opportunity is most often missed by people because it is dressed in
 overalls and looks like work.
Thomas Alva Edison
Inventor of 1093 patents, including:
The light bulb, phonogram and motion pictures.



 On Wed, Sep 22, 2010 at 9:29 PM, Rikky Taylor rikkytay...@hotmail.co.uk
 wrote:

  I was after some general advice. I need to setup a routing firewall with
 3
  interfaces, moderate traffic and a fair amount of NAT'ing in the rules.
 
 
 
  Given identical modern server hardware would I expect a performance
  difference
  between an OpenBSD/PF setup and a Linux/IPTables one?
 
 
 
  Rikky



Re: gcc4 cross-tools

2010-09-24 Thread Dale Rahn
On Sun, Sep 19, 2010 at 12:58:51PM -0500, Dale Rahn wrote:
 On Sun, Sep 19, 2010 at 09:37:59PM +0900, Hitoshi NAKAMORI wrote:
  HI all,
  I run make obj and try to make cross-tools again.
  
  looks a variable errors are  caused same factor.
  every target failed in generating _muldi3.o from libgcc2.c.
  
  for example, in sparc64 target, last command which cause error occured
  is follow.
  
 [snip]

I have posted a diff to fix most of the gcc4 cross compile issues on tech@

There is one remaining problem for i386 host, amd64 target that
remains

/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/gcc/libgcc2.h:153: error: no data ty
pe for mode 'TI'
/usr/src/gnu/usr.bin/cc/libgcc/../../../gcc/gcc/libgcc2.h:154: error: no data ty
pe for mode 'TI'

If anyone wants to look into that specific problem, feel free.

But that diff should get most cross builds working succesfully.

Dale Rahn   dr...@dalerahn.com