Re: OpenBSD VPN SonicWall Problems

2005-10-01 Thread Trepliev
I've been told that the remote side is a Sonicwall TZ170, firmware SonicOS Enhanced 3.1.0.7-4e. I'm going to keep monkeying with the configuration to see if I can get it to work. Thanks! On 9/30/05, Will H. Backman [EMAIL PROTECTED] wrote: What sonicwall firmware version? I have a spare

Re: PPTP client

2005-10-01 Thread Otto Moerbeek
On Fri, 30 Sep 2005, Peter Bako wrote: I have a situation where I need to connect an OpenBSD box to a MS Windows PPTP server (yep, I know it is not secure, but in this case I have no choice in the matter). After looking around the net I found myself at http://pptpclient.sourceforge.net/.

Is there chennel bonding for network cards

2005-10-01 Thread dagrichards
Does open BSD support Trunking as Sun calls it, or Etherchannel as Cisco calls it. Or aggregating seperate Ethernet cards to increase bandwidth and provide rendundancy as I call it ? I have seen the queston asked on the list but never answered.

Migration to PF - some questions

2005-10-01 Thread Travis H.
In pf nat rules also the first match wins __but__ in pf filter rules the __last__ match wins. In fact that is the one thing I don't like in pf, but to have a first match win you can use the magic word quick in all your pass and block rules. (e.g pass in quick) And thereby end up with yards of

Re: Is there chennel bonding for network cards

2005-10-01 Thread Darren Tucker
On Sat, Oct 01, 2005 at 08:18:14AM +, [EMAIL PROTECTED] wrote: Does open BSD support Trunking as Sun calls it, or Etherchannel as Cisco calls it. Or aggregating seperate Ethernet cards to increase bandwidth and provide rendundancy as I call it ? Yes, trunk(4). It's in 3.8.

Re: Migration to PF - some questions

2005-10-01 Thread Rod.. Whitworth
On Sat, 1 Oct 2005 04:43:40 -0500, Travis H. wrote: In pf nat rules also the first match wins __but__ in pf filter rules the __last__ match wins. In fact that is the one thing I don't like in pf, but to have a first match win you can use the magic word quick in all your pass and block rules.

compaq evo t20

2005-10-01 Thread Bachman Kharazmi
We have a few evo t20 at school that are unused so I planned to take one home and prepare it for diskless. I've had diskless working flawless with a generic pc as terminal and obsd as terminal server. But these t20's seem made for WinXP so there's something in the flash that tries to boot winxp.

Re: Is there chennel bonding for network cards

2005-10-01 Thread Jens Teglhus Møller
Does open BSD support Trunking as Sun calls it, or Etherchannel as Cisco calls it. Or aggregating seperate Ethernet cards to increase bandwidth and provide rendundancy as I call it ? I have seen the queston asked on the list but never answered. trunk(4) will be in 3.8. /jtm

Re: Is there chennel bonding for network cards

2005-10-01 Thread Marc Espie
On Sat, Oct 01, 2005 at 12:17:11PM +0200, Jens Teglhus Mxller wrote: Does open BSD support Trunking as Sun calls it, or Etherchannel as Cisco calls it. Or aggregating seperate Ethernet cards to increase bandwidth and provide rendundancy as I call it ? I have seen the queston asked on

OpenBSD MetaStore

2005-10-01 Thread Szechuan Death
The MetaStore is at this point essentially complete, save for content. There are links on the page to assist in populating it. There are about 20 pieces of hardware featured on this: IT NEEDS MORE. I have received several bits and pieces of information, but to make this more useful, I need even

Re: Migration to PF - some questions

2005-10-01 Thread Stuart Henderson
--On 01 October 2005 04:43 -0500, Travis H. wrote: Ah, but the matching engine doesn't have to traverse the whole rule list that way. Unless pf is doing something really tricky, every packet will have to traverse every firewall rule without use of quicks. huh? Before any rules are evaluated,

Re: Migration to PF - some questions

2005-10-01 Thread Travis H.
huh? Before any rules are evaluated, the filter checks whether the packet matches any state. If it does, the packet is passed without evaluation of any rules. - pf.conf(5) Yeah, I neglected stateful matching. I should have said that every packet that has to run the gauntlet of rules, has to

Re: Migration to PF - some questions

2005-10-01 Thread Stuart Henderson
--On 01 October 2005 08:50 -0500, Travis H. wrote: huh? Before any rules are evaluated, the filter checks whether the packet matches any state. If it does, the packet is passed without evaluation of any rules. - pf.conf(5) Yeah, I neglected stateful matching. I should have said that every

Re: Migration to PF - some questions

2005-10-01 Thread Moritz Grimm
Travis H. wrote: Yeah, I neglected stateful matching. I should have said that every packet that has to run the gauntlet of rules, has to run all of them. Not necessarily. Search for pf and skip-steps, something that isn't documented much inside OpenBSD, because it is always on and being

PF story, happy ending.

2005-10-01 Thread Diana Eichert
I helped a friend setup a firewall environment years ago in front of his web business, first it was on IPF(back when OpenBSD shipped w/IPF), then PF. Amazingly he's managed to keep his business up, running and growing through the dot-bomb period, but I digress. Once I configured PF on his

K3B - FreeBSD binaries

2005-10-01 Thread [EMAIL PROTECTED]
Hi With the risk of making a complete fool of myself.. Is it possible to get K3B running on OpenBSD 3.7? I am running KDE as the desktop, I have tried to install K3B from source without succes. Make fails with errors. Having no prior experience in using FreeBSD binaries, I read the

Re: Migration to PF - some questions

2005-10-01 Thread Tobias Weingartner
On Saturday, October 1, Travis H. wrote: Yeah, I neglected stateful matching. I should have said that every packet that has to run the gauntlet of rules, has to run all of them. Subsequent reading of the PF FAQ confirms that there's no deep evaluation-reordering magic going on, that quick

Re: K3B - FreeBSD binaries

2005-10-01 Thread Marc Espie
On Sat, Oct 01, 2005 at 05:32:23PM +0200, [EMAIL PROTECTED] wrote: Hi With the risk of making a complete fool of myself.. Is it possible to get K3B running on OpenBSD 3.7? I am running KDE as the desktop, I have tried to install K3B from source without succes. Make fails with

Re: PF story, happy ending.

2005-10-01 Thread Mike Hernandez
On 10/1/05, Diana Eichert [EMAIL PROTECTED] wrote: I helped a friend setup a firewall environment years ago in front of his web business, first it was on IPF(back when OpenBSD shipped w/IPF), then PF. Amazingly he's managed to keep his business up, running and growing through the dot-bomb

Re: K3B - FreeBSD binaries

2005-10-01 Thread [EMAIL PROTECTED]
Hi Marc and thanks! After having read through k3b, and having a partial port, I'm quite certain the FreeBSD port won't work 100%. The part that accesses disks directly has got some extensive code that uses FreeBSD's CAM support. I don't see our emulation layer coping with that. Ok, but other

Amazon.com Inquiry

2005-10-01 Thread Amazon
Dear Amazon member, Due to concerns we have for the safety and integrity of the Amazon community we have issued this warning. Per the User Agreement, Section 9, we may immediately issue a warning, temporarily suspend, indefinitely suspend or terminate your membership and refuse to

Re: PF story, happy ending.

2005-10-01 Thread Diana Eichert
On Sat, 1 Oct 2005, Mike Hernandez wrote: SNIP Great story ;) I'm just wondering what version the firewall is running, and if it's an old version, have you considered upgrading? Would there be any benefit to upgrading? (I suppose that last question is what I'm really wondering about) Mike

Re: PF story, happy ending.

2005-10-01 Thread ed
On Sat, 1 Oct 2005 09:05:47 -0600 (MDT) Diana Eichert [EMAIL PROTECTED] wrote: So now my buddy, realizing it was one of his Windows systems, becomes very contrite and apologizes for interupting me at the office. I beg to differ, as nice as it is to know the windows box caused the many states,

Re: K3B - FreeBSD binaries

2005-10-01 Thread Marc Espie
On Sat, Oct 01, 2005 at 06:41:31PM +0200, [EMAIL PROTECTED] wrote: Does anyone know of an alternative to K3B which will burn DVD's? dvd+rw-tools doesn't have any gui, but it does burn dvd. In fact, it's what k3b uses to burn dvd. It works (more or less) under OpenBSD, I've burnt quite a few

Re: PF story, happy ending.

2005-10-01 Thread Diana Eichert
On Sat, 1 Oct 2005, ed wrote: On Sat, 1 Oct 2005 09:05:47 -0600 (MDT) Diana Eichert [EMAIL PROTECTED] wrote: So now my buddy, realizing it was one of his Windows systems, becomes very contrite and apologizes for interupting me at the office. I beg to differ, as nice as it is to know the

Netgear WG311 and ath driver on amd64.

2005-10-01 Thread Brian McKerr
Hello all, I went and bought a netgear WG311 PCI 54g (Wg311GE) card the other day to put in my firewall. I intended to use this is as an access point for a WLAN. This card is listed in the support hardware section on the openbsd website under i386 but not amd64. Anyways, I grabbed the

Re: Load Balancing

2005-10-01 Thread Brian A. Seklecki
So have him send the message pre-formatted to the list? HTML? How about just draw the diagram using ports/graphics/dia/* and export to PNG, post the URL? ~BAS On Fri, 2005-09-30 at 10:01, J.C. Roberts wrote: On Fri, 30 Sep 2005 18:35:16 +0530, Manpreet Singh Nehra [EMAIL PROTECTED] wrote:

3.8 Snapshot with 'ath' based card.

2005-10-01 Thread OpenBSD Admin
Hello all, I went and bought a netgear WG311 PCI 54g (Wg311GE) card the other day to put in my firewall. I intended to use this is as an access point for a WLAN. This card is listed in the support hardware section on the openbsd website under i386 but not amd64. Anyways, I grabbed the

Re: ntop

2005-10-01 Thread Brian A. Seklecki
What platform are you on? Are you compiling it from source? It works just fine in 3.7/i386. Just: bash-3.00# cd /usr/ports/net/ntop make install clean If you insist on source, try looking at /usr/ports/net/ntop/patches/* Try reading about Ports in the FAQ. ~BAS On Thu, 2005-09-29 at

Re: Netgear WG311 and ath driver on amd64.

2005-10-01 Thread Stuart Henderson
--On 02 October 2005 06:07 +1000, Brian McKerr wrote: Texas Instruments ACX111 rev 0x00 at pci0 dev 12 function 0 not configured That's not an ath, they've changed the chipset to TI (non-open, unfortunately). Unfortunately wireless chipsets change often, TI and Marvell are appearing from

Re: Load Balancing

2005-10-01 Thread J.C. Roberts
On Sat, 01 Oct 2005 15:22:18 -0400, Brian A. Seklecki [EMAIL PROTECTED] wrote: So have him send the message pre-formatted to the list? HTML? How about just draw the diagram using ports/graphics/dia/* and export to PNG, post the URL? ~BAS No. When a fixed pitch font is used to create the

Re: Netgear WG311 and ath driver on amd64.

2005-10-01 Thread OpenBSD Admin
Stuart Henderson wrote: --On 02 October 2005 06:07 +1000, Brian McKerr wrote: Texas Instruments ACX111 rev 0x00 at pci0 dev 12 function 0 not configured That's not an ath, they've changed the chipset to TI (non-open, unfortunately). Unfortunately wireless chipsets change often, TI and

getting usb networking up on the Zaurus

2005-10-01 Thread Chuck Robey
I want to get usb to usb networking up on the Zaurus running OpenBSD (a snap from about a week ago). I wish to get it to communicate to the FreeBSD box that is sitting next to it. When I :reboot: the Zaurus back to Linux, FreeBSD immediately sees a new cdce0 device, and I could communicate,

Re: 3.8 Snapshot with 'ath' based card.

2005-10-01 Thread Darrin Chandler
I went through the same process. I swapped it for a LinkSys, which had the revision number on the box (yes, it matters for chipset). It comes up as supported, but I haven't been able to get it to work yet. I'm not sure, but I may have a PCI version less than 2.2 and that's listed at a problem

Re: getting usb networking up on the Zaurus

2005-10-01 Thread Dale Rahn
On Sat, Oct 01, 2005 at 05:03:48PM -0400, Chuck Robey wrote: I want to get usb to usb networking up on the Zaurus running OpenBSD (a snap from about a week ago). I wish to get it to communicate to the FreeBSD box that is sitting next to it. When I :reboot: the Zaurus back to Linux,

Geode GX1

2005-10-01 Thread Bachman Kharazmi
When I try to boot a Geode GX1 with generic kernel it freeze here: OpenBSD/i386 PXEBOOT 1.02 booting tftp:/bsd 4807268- (and here it freeze) I've tried bsd.rd both from the 3.7 and 3.8 dir without any luck, am I missing any support in kernel? /bkw -- ## BKW - Bachman

Re: PPPoE troubles.

2005-10-01 Thread Pedro Martelletto
Hi Marcos, I never used PPPoE myself, but let me try to help you out... On Sat, Oct 01, 2005 at 05:36:24PM -0300, Marcos Vinicius Buzo wrote: I live in Brazil and my connection is an ADSL link with Telefonica. Then you probably live somewhere in the state of Sao Paulo :-) !/sbin/ifconfig

Re: PPPoE troubles.

2005-10-01 Thread Jason McIntyre
On Sat, Oct 01, 2005 at 07:04:47PM -0300, Pedro Martelletto wrote: !/sbin/ifconfig \$if inet 0.0.0.0 0.0.0.1 netmask 0x !/sbin/route add default 0.0.0.1 Why are you doing this? You're setting your gateway to 0.0.0.1. it is correct for this scenario - pppoe(4) explains why. jmc

Re: PPPoE troubles.

2005-10-01 Thread Marcos Vinicius Buzo
Yes Pedro, I live in the state of Sao Paulo. I used that configuration because is how the man 4 pppoe is telling i should do, these adresses should be replaced with the adresses I would receive from my ISP. A typical */etc/hostname.pppoe0* file looks like this: pppoedev ne0

Linux expo - London

2005-10-01 Thread ed
Hello, Is OpenBSD doing anything at the linux conference and expo this week at the London Olympia? -- Regards, Ed http://www.openbsdhacker.com

Webmail recommendations?

2005-10-01 Thread Chris
Hello I want to setup a OBSD box for my email server. It will service probably about 2 dozen people, but It could conceivably double or more over the next year or two. I was wondering if anyone had any recommendations for an mta, and for a webmail program that is easy to use and fully featured

Re: PPPoE troubles.

2005-10-01 Thread Pedro Martelletto
On Sat, Oct 01, 2005 at 07:23:55PM -0300, Marcos Vinicius Buzo wrote: Yes Pedro, I live in the state of Sao Paulo. I used that configuration because is how the man 4 pppoe is telling i should do, these adresses should be replaced with the adresses I would receive from my ISP. Oh, so never

Re: PPPoE troubles.

2005-10-01 Thread Pedro Martelletto
On Sat, Oct 01, 2005 at 07:04:47PM -0300, Pedro Martelletto wrote: On Sat, Oct 01, 2005 at 05:36:24PM -0300, Marcos Vinicius Buzo wrote: Does anybody here live in Brazil and use the adsl link from telefonica and can get it working with OpenBSD/pppoe ? No. I've a friend who uses PPPoE for

Serial Weather Station

2005-10-01 Thread Marc MAURICE
Hi everybody, I have a laptop at home which is an old dell latitude xpi p133 st. I use it as a small server, running OpenBSD 3.7. I would like to have my weather station connected to the laptop, serving the weather via http. The weather station is a WS3600, racorded to the server via a

Re: PF story, happy ending.

2005-10-01 Thread ed
On Sat, 1 Oct 2005 12:27:56 -0600 (MDT) Diana Eichert [EMAIL PROTECTED] wrote: So Dweeb, what you recommend is upping the state table so we can increase the amount of crap that's leaking out from the Windows system? Brilliant, next time there's a Windows worm polluting the network I'll just

Re: Webmail recommendations?

2005-10-01 Thread Roger Neth Jr
maildroid www.maildroid.org http://www.maildroid.org rogern John 3:16 On 10/1/05, Chris [EMAIL PROTECTED] wrote: Hello I want to setup a OBSD box for my email server. It will service probably about 2 dozen people, but It could conceivably double or more over the next year or two. I was

Re: Webmail recommendations?

2005-10-01 Thread C. Bensend
I am at a loss for a good web interface. Anyone care to make any recommendations? I'm a pretty big fan of SquirrelMail. It's a web-based IMAP client, so you'd need an IMAP server as well (I use Courier). It works just fine with OpenBSD's chrooted Apache, which is a big plus. Benny --

Re: PF story, happy ending.

2005-10-01 Thread Bob Beck
If I had a dollar for every time some mouth breathing twit did that here well, I could at least buy some very good bottles of wine. Upgrade the firewall to use the state limits and the overload table, then filter the overload table and rdr web connections from it to a web

Re: PF story, happy ending.

2005-10-01 Thread Diana Eichert
On Sun, 2 Oct 2005, ed wrote: SNIP rather than choke the network. Oh and don't resort to name calling, it makes the rest of the post look childish, even if there is content of technical merit. Oh, but see I like name calling against misogynous men, 'cause in your eyes all women probably appear

Re: PF story, happy ending.

2005-10-01 Thread Diana Eichert
On Sat, 1 Oct 2005, Bob Beck wrote: If I had a dollar for every time some mouth breathing twit did that here well, I could at least buy some very good bottles of wine. Upgrade the firewall to use the state limits and the overload table, then filter the overload table and rdr web

OpenBSD and KDE printing

2005-10-01 Thread coolzone
Hi During my printer testing the last couple of days I have been running some few tests. I have made a test machine (i386) running OpenBSD 3.7 with KDE and all it's application. During this test I found that every single program, started from within KDE, crashes when I use the print option

Re: Ports question

2005-10-01 Thread J Moore
On Fri, Sep 30, 2005 at 03:12:33AM +0100, the unit calling itself Stuart Henderson wrote: --On 29 September 2005 20:36 -0500, J Moore wrote: Can someone tell me if and when the clamav in the -stable tree is going to have the security flaw patched? On Wednesday just gone.