redudant firewalls

Hey folks, i am in need to figure out some info about setting a redudant. I can manage to have two boxes setted in my end side. My problem is to have the other end to support for redundance and provide a two internet uplink connection. How have you faced such problem ?

Re: redudant firewalls

On Monday 06 June 2005 06:43, Gustavo Rios wrote: Hey folks, i am in need to figure out some info about setting a redudant. I can manage to have two boxes setted in my end side. My problem is to have the other end to support for redundance and provide a two internet uplink connection. How

Vsftpd compile error on 3.7

I'm trying to compile vsftpd 2.03 with tcpwrappers and SSL support on OpenBSD 3.7. I've edited the builddefs.h per the readme.ssl file #ifndef VSF_BUILDDEFS_H #define VSF_BUILDDEFS_H #define VSF_BUILD_TCPWRAPPERS #define VSF_BUILD_PAM #define VSF_BUILD_SSL #endif /* VSF_BUILDDEFS_H */ but when

Re: OpenNTPd issue

Kvvesdan Gabor wrote: The time sample was rejected because: The peer's stratum is less than the host's stratum. I had the same issue too. But i've solved it by pressing several times on Update now button on winxp. -- %cat ~/doc/personal.txt mailto: [EMAIL PROTECTED] JID: [EMAIL

How to shorten NFS timeout?

I have a PC with a couple of programs that have to write in a directory in an NFS server. Both (client and server) are i386 OpenBSD systems. Normally everything works perfectly, but I made a test to see what happens if the NFS server is down: all client programs freeze for exactly 10 minutes,

ldap ldif problem on bsd 3.7

hi list, i am very new in bsd and i have a problem with ldap. we have a suse linux server with ldap on it. i have made a export from the ldap directory in a ldif file. this file i can import on various linux machines without a problem. but when i want to import the ldif file on bsd, it always

Carp + IP broadcast

Hello, I try to have a redundant DHCP server setup with CARP to no avail. The IP multicast packets do not seem to appear on the carp interface, which certainly is enough for the failure. OS is OpenBSD 3.7 GENERIC. The carp interface looks like this: #ifconfig carp192 carp192:

Re: ldap ldif problem on bsd 3.7

afaiR, ldif files can't have blank lines nonsense. slapadd: could not parse entry (line=421) added: ou=addr,uid=markert,ou=Users,ou=OxObjects,dc=suchtreffer,dc=de (0019) but the line 421 is empty. strange. What do the entries before and after line 421 look like? What happens when

Re: A Business Case for integrating OpenBSD into IT Infrastructures

This is a Very Nicely Done Presentation! Dave Feustel Hi Dave, Thanks a lot for this. I'm glad that people like it because it was a lot of work to put it together. More so than building and configuring systems ;) Actually, I did get a lot of help along the way and Ryan McBride who was

Re: ldap ldif problem on bsd 3.7

Am Montag, 6. Juni 2005 16:41 schrieben Sie: afaiR, ldif files can't have blank lines nonsense. slapadd: could not parse entry (line=421) added: ou=addr,uid=markert,ou=Users,ou=OxObjects,dc=suchtreffer,dc=de (0019) but the line 421 is empty. strange. What do the entries

Vsftpd compile error

I'm trying to compile vsftpd 2.03 with tcpwrappers and SSL support on OpenBSD 3.7. I've edited the builddefs.h per the readme.ssl file #ifndef VSF_BUILDDEFS_H #define VSF_BUILDDEFS_H #define VSF_BUILD_TCPWRAPPERS #define VSF_BUILD_PAM #define VSF_BUILD_SSL #endif /* VSF_BUILDDEFS_H */

Re: ldap ldif problem on bsd 3.7

Markus, What do the entries before and after line 421 look like? 420 modifyTimestamp: 20050531112005Z 421 422 dn: ou=addr,uid=markert,ou=Users,ou=OxObjects,dc=suchtreffer,dc=de I meant the whole records, not single lines. Records are separated by blank lines. Try to find the

Re: Booting off USB-stick emulated as floppy

Booting USB is no problem for me... here is a snippet of code I use to automate this process: (note, you might have to run this on a -current box) #!/bin/sh # read disk from command line DISK=$1 # default values for Kingston 64M DataTraveler CYLS=120 HEADS=16 SECTS=63 if [ $DISK ]; then

Fwd: IDE problems with OpenBSD 3.7

Hi! As I wrote the following problem a few days ago to the sparc list and until now did not receive any answer, so I'll give the misc list a try. Sorry for crosposting, but its urgent: A few days ago I installed OpenBSD 3.7. Now I encounter problems with my IDE drives. I have an Ultra 60, two

Re: Problem compiling wget from ports

Why not just: pkg_add ftp://ftp.openbsd.org/pub/OpenBSD/3.7/packages/`uname -m`/wget-1.8.2.tgz Federico Giannici wrote: Clint M. Sand wrote: On Sun, Jun 05, 2005 at 11:09:23PM +0200, Federico Giannici wrote: I have a problem compiling wget from the ports. Here is the final part of the

Re: IDE problems with OpenBSD 3.7

That has bad hardware written all over it. Try to reproduce on a different drive. On Jun 6, 2005, at 11:08 AM, Matthias Schreiber wrote: Hi! As I wrote the following problem a few days ago to the sparc list and until now did not receive any answer, so I'll give the misc list a try.

Re: ldap ldif problem on bsd 3.7

--On 06 June 2005 17:08 +0200, Markus Markert wrote: ou=SharedFolder,ou=OxObjects,dc=suchtreffer,dc=de (0015) added: ou=imapServer,ou=AvailableServers,ou=AdminObjects,ou=OxObjects,dc=su chtreffer,dc=de (0016) added:

Re: Problem compiling wget from ports

Tony Lambiris wrote: Why not just: pkg_add ftp://ftp.openbsd.org/pub/OpenBSD/3.7/packages/`uname -m`/wget-1.8.2.tgz In fact, this is what I did! But I'd like to know the reason of that error. I don't like the idea that something is wrong in the system... Bye. Federico Giannici wrote:

Re: Problem compiling wget from ports

On Jun 6, 2005, at 11:38 AM, Federico Giannici wrote: Tony Lambiris wrote: Why not just: pkg_add ftp://ftp.openbsd.org/pub/OpenBSD/3.7/packages/`uname -m`/ wget-1.8.2.tgz In fact, this is what I did! But I'd like to know the reason of that error. I don't like the idea that something is

Re: Problem compiling wget from ports

Marco Peereboom wrote: On Jun 6, 2005, at 11:38 AM, Federico Giannici wrote: Tony Lambiris wrote: Why not just: pkg_add ftp://ftp.openbsd.org/pub/OpenBSD/3.7/packages/`uname -m`/ wget-1.8.2.tgz In fact, this is what I did! But I'd like to know the reason of that error. I don't like the

Compiling Sendmail

Hello, I have 3.6 and I downloaded sendmail 8.13.0. I ran sh Build, and got the following compile error: cc -O -I. -I../../sendmail -I../../include -DNEWDB -DNIS -DMAP_REGEX -DNETISO -DFAST_PID_RECYCLE -DNOT_SENDMAIL -c debug.c In file included from debug.c:11:

Re: Compiling Sendmail

On 6/6/05, Timothy Horie [EMAIL PROTECTED] wrote: Hello, I have 3.6 and I downloaded sendmail 8.13.0. I ran sh Build, and got the following compile error: You are probably not going to get any help here on that subject. The sendmail version that comes with OpenBSD is more than fine for your

Re: safe way to reduce partition

Hello! On Tue, May 31, 2005 at 08:31:55PM +0200, mess-mate wrote: Hannah Schroeter [EMAIL PROTECTED] wrote: | On Tue, May 31, 2005 at 06:05:39PM +0200, mess-mate wrote: | Hi list, | anyone known a safe way to reduce my /usr partition and moving my | /var ? | Here my slice : | Filesystem

Problems with Gnumeric

I am having a LOT of problems with formatting/previewing/printing in GnuMeric on 3.6. Clicking on the gnumeric home page button produces an error. Where do I report bugs? Thanks, Dave Feustel

Re: Compiling Sendmail

I need to recompile it without TLS. I've tried a lot of ways to get rid of it without a recompile, but all paths led nowhere. I don't want TLS, I don't want to Start TLS, I don't want any error messages in the logs regarding TLS, I don't want to have to disable or enable TLS, I don't want

Re: Compiling Sendmail

Edit devtools/OS/OpenBSD and remove -DNETISO from confENVDEF - todd

Re: Compiling Sendmail

Like everyone (including me) has said, just use OpenBSD source. It looks like TLS is enabled in OpenBSD's sendmail, so it's just a simple matter of commenting out the few lines in the Makefile(s) to disable it, then recompiling. The source code is all there, please just take a look. You're still

Re: Compiling Sendmail

On Mon, Jun 06, 2005, Timothy Horie wrote: I need to recompile it without TLS. I've tried a lot of ways to get rid of it without a recompile, but all paths led nowhere. I don't want TLS, I don't want to Start TLS, I don't want any error messages in the logs regarding TLS, I don't want to

Vsftpd compile error

I'm trying to compile vsftpd 2.03 with tcpwrappers and SSL support on OpenBSD 3.7. I've edited the builddefs.h per the readme.ssl file #ifndef VSF_BUILDDEFS_H #define VSF_BUILDDEFS_H #define VSF_BUILD_TCPWRAPPERS #define VSF_BUILD_PAM #define VSF_BUILD_SSL #endif /* VSF_BUILDDEFS_H */ but

Cross compile release from amd64 to i386?

Hello everyone, Is it possible to use an AMD64 machine (as 64 bit not i386) to cross compile release for i386, without additional tools or extras? Google reveals that cross compiling releases is an issue for some people, but with i386 being fairly similar to AMD, would this still affect me?

Re: Vsftpd compile error

--On 06 June 2005 11:07 -0700, [EMAIL PROTECTED] wrote: I'm trying to compile vsftpd 2.03 with tcpwrappers and SSL support on OpenBSD 3.7. I've edited the builddefs.h per the readme.ssl file [..] *** Error code 1 Stop in /tmp/vsftpd-2.0.3. What's this /tmp/? Surely you'd do better to start

Re: Problems with Gnumeric

Never Mind. Sorry for the dumb question. On Monday 06 June 2005 03:08 pm, Dave Feustel wrote: I am having a LOT of problems with formatting/previewing/printing in GnuMeric on 3.6. Clicking on the gnumeric home page button produces an error. Where do I report bugs? Thanks, Dave Feustel

Re: Compiling Sendmail

On Mon, Jun 06, 2005 at 04:27:39PM -0400, Joel Dinel wrote: On 6/6/05, Timothy Horie [EMAIL PROTECTED] wrote: I need to recompile it without TLS. I've tried a lot of ways to get rid of it without a recompile, but all paths led nowhere. I don't want TLS, I don't want to Start TLS, I don't

Re: ccd mirroring on sparc64

--On 23 May 2005 23:25 +0100, I wrote: Can anyone suggest what's going wrong with this attempt at setting up a ccd mirror on sparc64 (t1 105)? Making any changes to the disklabel (with -e or -E) results in ccd0's disk information changing, e.g.: I've just been looking at this again - for the

Re: A Business Case for integrating OpenBSD into IT Infrastructures

Ray Percival wrote: To start with http://www.schneier.com/pptp.html and also because I for one don't trust *any* security related code that I can't get the source for. I think I'm not alone here by any means. You're talking about PPTP, I'm talking about IPsec. Fact of the matter is we can

Re: A Business Case for integrating OpenBSD into IT Infrastructures

Theo de Raadt wrote: Lots of commentary from you, Steve... is that why you are the one giving the talks? I'm not sure I have anyone to give a talk to, and I haven't done anything quite as interesting (or large-scale) as this with OpenBSD. (Besides, isn't it less talk, more code? Of course

Re: Cross compile release from amd64 to i386?

On Monday 06 June 2005 23.04, you wrote: Hello everyone, Is it possible to use an AMD64 machine (as 64 bit not i386) to cross compile release for i386, without additional tools or extras? Google reveals that cross compiling releases is an issue for some people, but with i386 being fairly

Re: perl crashes

As I suspected this was caused by the change to random addresses returned by malloc. In this specific case, PL_oldbufptr is NULL and, depending on the addresses of the other buf pointers, the while() loop that trims spaces can go off into la la land. The fix is to simply check that the buf ptr

Re: A Business Case for integrating OpenBSD into IT Infrastructures

(Besides, isn't it less talk, more code? Of course I'm probably better at talking than coding.) Actually, I don't know why, but people keep getting the sentence wrong, for no good reason. The real sentence is ``less talk, more cheese''. Note that, I have a list if you somehow can't find

Re: A Business Case for integrating OpenBSD into IT Infrastructures

Mark Uemura wrote: six month prior to me taking over the SysAdmin position. Ah, see when I read the slides, I got the impression that you came in as a consultant to do all this, not that you did it all in-house. I for one have problems putting a Windows Server on the Internet. Even within

CARP and isakmpd ipsec

Is there a way to make a pair of carp hosts to renegotiate with an existing ipsec peer when a new carp master is elected? I tried it once and it didn't work out. -- [EMAIL PROTECTED]

lladdr in ipconfig - what's the story?

Hi all, I'd like some clarification on the support or non-support of the lladdr option in ipconfig. I'm getting conflicting evidence from various sources: on-line man page (+), man page of my brand new 3.7 install (-), various forums (mix of + and -). It looks as if the ipconfig that comes with

Re: lladdr in ipconfig - what's the story?

* Steffen Kluge [EMAIL PROTECTED] [2005-06-07 02:13]: I'd like some clarification on the support or non-support of the lladdr option in ipconfig. I'm getting conflicting evidence from various sources: on-line man page (+), man page of my brand new 3.7 install (-), various forums (mix of + and

Re: lladdr in ipconfig - what's the story?

On Tue, 2005-06-07 at 10:11 +1000, Steffen Kluge wrote: I'd like some clarification on the support or non-support of the lladdr option in ipconfig. For crying out loud. Don't know where that came from, probably from setting up a LAN party for my son last weekend... Please

Re: lladdr in ipconfig - what's the story?

lladdr was added after 3.7. It will exist in 3.8 and later. On Tue, Jun 07, 2005 at 10:11:35AM +1000, Steffen Kluge wrote: :Hi all, :I'd like some clarification on the support or non-support of the lladdr :option in ipconfig. I'm getting conflicting evidence from various :sources: on-line man

Re: Slow Downloads with Userpace PPPoE and High Speed ADSL link

Mick wrote: On Tue, 2005-05-31 at 08:33 -0400, Melameth, Daniel D. wrote: Mick wrote: I seem to be seeing somewhat odd behaviour with regards to the userpace PPPoE program and my high speed ADSL link. By high speed I mean 8Mbps down and 1Mbps up. Initially, I was on a 512/128 plan

Re: CARP and isakmpd ipsec

On Tue, Jun 07, 2005 at 01:06:53AM +0100, Stephen Marley wrote: Is there a way to make a pair of carp hosts to renegotiate with an existing ipsec peer when a new carp master is elected? I tried it once and it didn't work out. If the connection to the ipsec peer is not passive, you can use

Re: lladdr in ipconfig - what's the story?

I don't see lladdr in the OpenBSD 3.7 version of the online man page, maybe you should check that. The default man pages for the website are current, unless you specify a stable version. Make sure you do that next time. Back on lladdr, you must use a snapshot in order to get it, as it was put in

Re: lladdr in ipconfig - what's the story?

On Tue, Jun 07, 2005 at 10:44:26AM +1000, Steffen Kluge wrote: Can I simply pick the ifconfig binary out of snapshots/i386/base37.tgz, or must I upgrade the whole thing, including packages and ports? If I upgrade, will the installer detect installed packages and attempt to No, you'll need to

Re: PPPoE Download Performance Woes

I've looked into this further and still cannot determine where the issue lies. Based on some advice, I unplugged the OpenBSD machine and setup a Windows XP machine instead. The Windows native PPPoE client was able to download at 5.5Mb/s and the OpenBSD machine was still stuck at 1.5Mb/s. A

PF syntax error during boot

Ok, this is an odd one. I just finished upgrading a firewall from 3.6 to 3.7 -release using the tarballs. After completing everything as per the upgrade guide, I noticed a syntax error reported by pfctl during boot. However, I can login and enable PF manually without any errors. pfctl -nf

Re: PPPoE Download Performance Woes

Without researching this too much; have you guys tried -current which contains the idle loop fix? On Jun 6, 2005, at 8:41 PM, Melameth, Daniel D. wrote: I've looked into this further and still cannot determine where the issue lies. Based on some advice, I unplugged the OpenBSD machine and

Re: PF syntax error during boot

Jason Dixon wrote: Ok, this is an odd one. I just finished upgrading a firewall from 3.6 to 3.7 -release using the tarballs. After completing everything as per the upgrade guide, I noticed a syntax error reported by pfctl during boot. However, I can login and enable PF manually without

Re: PF syntax error during boot

Jason Dixon wrote: Hmm. might be possible to do a typo in such a way that with DNS, it might resolve to an address, and without, it is an error. Probably wouldn't work as desired, but that may have been unnoticed. Or maybe I shouldn't speculate when over-tired. Not a bad idea, but nothing

Re: PPPoE Download Performance Woes

Melameth, Daniel D. wrote: I've looked into this further and still cannot determine where the issue lies. Based on some advice, I unplugged the OpenBSD machine and setup a Windows XP machine instead. The Windows native PPPoE client was able to download at 5.5Mb/s and the OpenBSD machine was

Re: quick malloc guard patch

On Wed, 25 May 2005, Ted Unangst wrote: it is part of G. we will wait to see what effects it has. and now it's option P. for some apps, it interfered with normal operation too much. -- And that's why he won't get my vote.

Weird MAC Address Problem with 3.7 on Dell 600 series

I have an old Dell server that used to crash with 3.5. Now, it stays up with 3.7. However, something strange is going on with the mac addresses of the two onboard 100 F/D nics fxp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 address: 00:02:b3:b1:a8:9a description: