Re: bridge segment LAN/DMZ

2005-05-21 Thread Antoine Jacoutot
Joel Rees a icrit : and what you are wanting to do is something like this (internet) -[x]obsd firewall[i0][i1] [x]obsd firewall[i0]- (private address range{A} LAN with no port forewarding) [x]obsd firewall[i1]- (private address range{B} LAN with port forwarding) but without

Re: bridge segment LAN/DMZ

2005-05-21 Thread Antoine Jacoutot
Jason Dixon a icrit : Yes, this sounds similar to what you want to do. So basically, you want to bridge $ext_if with $dmz_if, and NAT $lan_if:network to ($ext_if). The NAT will happen first, then the outbound packet should see the DMZ server announcing itself via the arp proxy. It sounds

Re: Network performance

2005-05-21 Thread Henning Brauer
* Philip Olsson [EMAIL PROTECTED] [2005-05-20 21:34]: In the end, I'm just looking for advice about how to increase performance in the cheapest way possible :) More Mhz. Not crappy nics, get xl,fxp,dc etc. Or maybe gigabit nics like em(4). xl is crap. sk is probably the best you can get

Re: Alpha - floppy as root device ?

2005-05-21 Thread J.C. Roberts
On Sat, 21 May 2005 14:05:45 +1000, Steve Murdoch [EMAIL PROTECTED] wrote: Hi all, Can someone throw me in the right direction. I have an Alphaserver 1000. The SCSI drives have failed so I have installed a PCI IDE contoller and IDE drive. The SRM doesnt recognise the IDE so after install I

Re: Network performance

2005-05-21 Thread Antonios Anastasiadis
I don't remember where I got it, but I always had the impression that at least some of the 3coms where good cards, like those with the 3c905B chip. Am I wrong here? Are all the xl-based cards crap without exceptions? xl is crap.

Re: ssh

2005-05-21 Thread Joel Rees
On 2005.5.19, at 01:11 AM, J.C. Roberts wrote: On Thu, 19 May 2005 00:12:29 +0900, Joel Rees [EMAIL PROTECTED] wrote: This whole thread has me wondering if I haven't been kidnapped by aliens. No, not recently. Since the accident where you toasted the neural interface on the Enterprise,

Re: Booting OpenBSD without any console output

2005-05-21 Thread Rickard Dahlstrand
A couple of more direct questions: Have anyone successfully booted a kernel without any console output? What related kernel options can I play with? If not, where in the kernel source should I start digging? Thanks, Rickard. Rickard Dahlstrand wrote: Hi, I'm trying to connect a modem to the

xconsole customize.

2005-05-21 Thread Mike
i was not able to find any information from anywhere, how could i split long messages to many lines instead of one line in xconsole, so i don't have to scroll horizontal?

Re: Network performance

2005-05-21 Thread Henning Brauer
* Antonios Anastasiadis [EMAIL PROTECTED] [2005-05-21 11:27]: Are all the xl-based cards crap without exceptions? yes.

Re: Alpha - floppy as root device ?

2005-05-21 Thread Martin Reindl
Steve Murdoch [EMAIL PROTECTED] wrote: Hi all, Can someone throw me in the right direction. I have an Alphaserver 1000. The SCSI drives have failed so I have installed a PCI IDE contoller and IDE drive. The SRM doesnt recognise the IDE so after install I wont be able to boot from

libiconv fails at ports - 3.7

2005-05-21 Thread Uwe Dippel
I'm trying to build wget from ports, 3.7, fresh install. What has gone wrong ? (The same happens on pfstat, etc.) === wget-1.8.2 depends on: gmake-3.80p0 - not found === Verifying install for gmake-3.80p0 in devel/gmake === Checking files for gmake-3.80p0

Re: Network performance

2005-05-21 Thread Sandro
* Antonios Anastasiadis [EMAIL PROTECTED] [2005-05-21 11:27]: Are all the xl-based cards crap without exceptions? yes. That's odd. I have a 3905tx-m in my openbsd box, but it isn't doing much, so that may be why it appears to work fine. I have the same card in FreeBSD boxes, and a few

Re: xconsole customize.

2005-05-21 Thread Stein Boerge Sylvarnes
On Sat, May 21, 2005 at 10:15:10PM +0300, Mike wrote: i was not able to find any information from anywhere, how could i split long messages to many lines instead of one line in xconsole, so i don't have to scroll horizontal? Try this resource setting: XConsole.*.wrap:word Possible

Re: CART with multiple if_aliases?

2005-05-21 Thread Jason Dixon
On May 21, 2005, at 1:43 PM, Per olof Ljungmark wrote: Could somebody please enlighten me if it is possible to use CARP when one interface has several ip aliases? If it's in the docs I have missed it completely, sorry. Yes. -- Jason Dixon DixonGroup Consulting http://www.dixongroup.net

Re: DNS Configuration Problem

2005-05-21 Thread Dimitry Andric
On 2005-05-21 at 16:02:46 Michael wrote: This is when I check again, and yes, /etc/rndc.key is there but /usr/sbin/named again tells me that it is not there. Read the named(8) manpage; it uses a chroot to /var/named by default. Put your rndc.key file in /var/named/etc, and you should be ok.

Re: DNS Configuration Problem

2005-05-21 Thread Matthew L. Shobe
On Sat, May 21, 2005 at 07:02:46AM -0700, Michael wrote: I have recently installed OpenBSD 3.7 on my future router and I had the surpise to see that I am not able to properly config DNS (bind) on this box. I have generated /etc/rndc.key with the help of rndc-confgen. The file is

Re: Network performance

2005-05-21 Thread Siegbert Marschall
Hi, More Mhz. Not crappy nics, get xl,fxp,dc etc. Or maybe gigabit nics like em(4). I think he has xl and sk in the machine, sk is probably the most decent thing one can get at the moment. xl I had quite mixed results in the past, so changing that one into another sk might be all the change

DNS Configuration Problem

2005-05-21 Thread Michael
Hello. I have recently installed OpenBSD 3.7 on my future router and I had the surpise to see that I am not able to properly config DNS (bind) on this box. I have generated /etc/rndc.key with the help of rndc-confgen. The file is successfully generated and I cat and see its content, it is nicely

Re: DNS Configuration Problem

2005-05-21 Thread Sandro
I don't run bind on my openbsd box, but isn't it setup to chroot into /var/named? I believe that you need to put rndc.key relative to the chroot'd environment (/var/named/etc/...) ...of course, it's a shot in the dark, I don't know how you configured bind, if you changed anything at all etc...

Looking for info re: IPSec MTU

2005-05-21 Thread Richard P. Koett
OpenBSD is working great instead of the Cisco router that our VPN peer recommended. Thanks again to the developers who make it all possible. I notice that we're receiving some fragmented packets, however. It's not a big deal but I'd like to see if things can be better optimized (and learn a bit

Re: DNS Configuration Problem

2005-05-21 Thread sbr
Silly question, but then so are mistakes. Did you put the second half of the rndc.key output into your /var/named/etc/named.conf file? I just configured bind for the first time yesterday, so its all very fresh in my mind. sbr. On Sat, 21 May 2005, Sandro wrote: I don't run bind on my

Re: Wifi frustration

2005-05-21 Thread Steve Shockley
Chris Zakelj wrote: So I suppose the best question to ask is, has anyone encountered a 2.1 friendly card, or am I up a creek? I believe my Compaq Deskpro 5233MMX is PCI 2.1, and it's worked with two different wi cards; a Netgear MA311 and a Sohoware NCP130. I did purchase a cheap ral card

Re: Network performance

2005-05-21 Thread Steve Shockley
Sandro wrote: That's odd. I have a 3905tx-m in my openbsd box, but it isn't doing much, so that may be why it appears to work fine. I have the same card in FreeBSD boxes, and a few linux boxes and they perform great there. Are there maybe tweaks involved on an openbsd platform that are

Re: libiconv fails at ports - 3.7

2005-05-21 Thread Uwe Dippel
On Sat, 21 May 2005 13:21:52 -0700, Jacob Meuser wrote: I'm trying to build wget from ports, 3.7, fresh install. What has gone wrong ? clean install or upgrade? is the ports tree clean? As clean as can be, after an install on a new harddisk, reboot, afterboot, tar xfvz ports.tar.gz, cd

Re: Wifi frustration (SUCCESS)

2005-05-21 Thread Chris Zakelj
Chris Zakelj wrote: I should probably add that I did check the archives, where the solutions tended to point towards Just buy an access point, they're just as cheap. I would (they're around), but that defeats the intent of learning how to do it, trying to reduce underdesk wire clutter, and