Re: Multiple FTP servers behind firewalls

2008-06-05 Thread Joe Warren-Meeks
On Wed, Jun 04, 2008 at 06:06:47PM -0400, Calomel wrote: Joe, We have used a CARP firewall (two machines in failover and not load balancing) in front of a dozen ftp servers. We use 12 different ip addresses in total. One ftp-proxy for each CARP interface and forwarding the traffic to one of

Re: spamd sync question

2008-06-05 Thread Jose Fragoso
I forgot to mention that both bridges will run i386 kernel. If anyone with experience in this kind of setup would like to comment, I would appreciate. Regards, Jose -- See Exclusive Videos: 10th Annual Young Hollywood Awards http://www.hollywoodlife.net/younghollywoodawards2008/

saa7134 in OpenBSD ?

2008-06-05 Thread Tomas Bodzar
Hi, Have someone running tv card with this chipset? I was looking throw google and can't find useful info.I know,that it's not in HW supported list and dmesg only detect it. Thx

Re: NAT over internet VPN?

2008-06-05 Thread Almir Karic
On Wed, Jun 4, 2008 at 5:49 AM, Matt Garman [EMAIL PROTECTED] wrote: What I'd like to do is have my OBSD box to NAT on the tun device (VPN tunnel). I.e., so I can use the VPN connection seamlessly from any system on my home network. basically you want to route your traffic encrypted to your

Lost sensors info when upgraded from 4.2 to 4.3

2008-06-05 Thread Per-Olov Sjöholm
Hi I did an upgrade (read reinstall) last week on a Dell PE830 server from OpenBSD 4.2 to 4.3. It is a 4.3 RELEASE std install, but a stable update of kernel and userland from May 29. The sensors worked ok in 4.2. In 4.3 it looks like this where the sensor info is null.. [EMAIL

Re: Lost sensors info when upgraded from 4.2 to 4.3

2008-06-05 Thread Stuart Henderson
On 2008-06-05, Per-Olov Sjvholm [EMAIL PROTECTED] wrote: I did an upgrade (read reinstall) last week on a Dell PE830 server from OpenBSD 4.2 to 4.3. It is a 4.3 RELEASE std install, but a stable update of kernel and userland from May 29. The sensors worked ok in 4.2. In 4.3 it looks like

pciide and hot swapping disks?

2008-06-05 Thread Harald Dunkel
Hi folks, I haven't seen this mentioned on the mailing list, and the man page doesn't tell, either, so hopefully it is allowed to ask: Does pciide support hot-swapping hard disks? (I've got a ServerWorks HT-1000 SATA2 controller and the appropriate disks.) Regards Harri

PF, self keyword

2008-06-05 Thread Yuri Spirin
Hello, misc. In pf.conf syntax there is a self keyword which means all addresses assigned to all interfaces. r1:/root# grep self /etc/pf.conf table this_box persist { self } r1:/root# r1:/root# pfctl -T show -t this_box 10.1.1.1 10.3.3.3 127.0.0.1 r1:/root# ifconfig tun2 10.3.3.5

Re: PF, self keyword

2008-06-05 Thread viq
On Thu, Jun 05, 2008 at 07:59:09PM +0400, Yuri Spirin wrote: Hello, misc. In pf.conf syntax there is a self keyword which means all addresses assigned to all interfaces. r1:/root# grep self /etc/pf.conf table this_box persist { self } r1:/root# r1:/root# pfctl -T show -t this_box

Re: PF, self keyword

2008-06-05 Thread Chris Kuethe
On Thu, Jun 5, 2008 at 8:59 AM, Yuri Spirin [EMAIL PROTECTED] wrote: Is it possible to automatically update rules and tables containing self keyword when interface address changes (like ($ext_if) behaviour)? Did I missed something in manual? depending on what you're trying to accomplish, some

Re: knowing spamd blacklist size

2008-06-05 Thread Jim Razmus
* Jose Fragoso [EMAIL PROTECTED] [080604 09:04]: Hi, In OpenBSD 4.3, is there a way to find out via script the current size of the spamd blacklist? Thanks in advance. Regards, Jose -- Mail.com Autos- Powered by Oncars.com: Drive By Today! http://www.oncars.com man 8 spamdb

Re: knowing spamd blacklist size

2008-06-05 Thread Juan Miscaro
2008/6/5 Jim Razmus [EMAIL PROTECTED]: * Jose Fragoso [EMAIL PROTECTED] [080604 09:04]: Hi, In OpenBSD 4.3, is there a way to find out via script the current size of the spamd blacklist? Thanks in advance. Regards, Jose -- Mail.com Autos- Powered by Oncars.com: Drive By Today!

dhcrelay question

2008-06-05 Thread Christopher Sean Hilton
I'm running OpenBSD as an IP less bridge between a DMZ and a protected internet. The protection comes from using a set of pf rules on the exterior interface of the bridge. My pf rules block all traffic on UDP/ 67 and UDP/68 from traversing the bridge so I currently run two DHCP servers, one

Re: NAT over internet VPN?

2008-06-05 Thread Matt Garman
On Thu, Jun 05, 2008 at 03:07:30PM +0200, Almir Karic wrote: On Wed, Jun 4, 2008 at 5:49 AM, Matt Garman [EMAIL PROTECTED] wrote: What I'd like to do is have my OBSD box to NAT on the tun device (VPN tunnel). I.e., so I can use the VPN connection seamlessly from any system on my home

have to add pass in rdr statement

2008-06-05 Thread Lord Sporkton
on OpenBSD fire.sporkton.com 4.3 GENERIC#698 i386 I have this pf.conf config, it does not work for vnc ext_if=xl0 lawrence=10.0.0.17 rdr on $ext_if proto tcp from any to $ext_if port vncweb - $lawrence port vncweb rdr on $ext_if proto tcp from any to $ext_if port vnc - $lawrence port vnc pass

Re: have to add pass in rdr statement

2008-06-05 Thread John Jackson
Your pass rules need to reference the IP address after processing by the rdr rule. So it should be passing traffic destined to '10.0.0.17' See http://openbsd.org/faq/pf/rdr.html#filter for more info. John On Thu, Jun 05, 2008 at 03:46:57PM -0700, Lord Sporkton wrote: on OpenBSD

remove any unwanted devices from the kernel.

2008-06-05 Thread Jon
I usually name the kernel to the machine hostname, but you can give it any name. Edit the kernel config file: Remove any hardware related options that are not relevant to your machine. http://www.muine.org/~hoang/openpf.html#customize Why would someone want to do this? Is this nothing

Are there any Open Source / Free Software vt220 / vt320 / vt400 terminal emulators out there?

2008-06-05 Thread Jon
Any that support the status line where the application thinks there is an 80x24 terminal and some meta character tells the terminal to display text after it in the status line, which looks like a 25th line below the 80x24 terminal?

Re: remove any unwanted devices from the kernel.

2008-06-05 Thread Juan Miscaro
2008/6/5 Jon [EMAIL PROTECTED]: I usually name the kernel to the machine hostname, but you can give it any name. Edit the kernel config file: Remove any hardware related options that are not relevant to your machine. http://www.muine.org/~hoang/openpf.html#customize Why would someone want

Re: Are there any Open Source / Free Software vt220 / vt320 / vt400 terminal emulators out there?

2008-06-05 Thread Josh Smith
Screen? On 6/5/08, Jon [EMAIL PROTECTED] wrote: Any that support the status line where the application thinks there is an 80x24 terminal and some meta character tells the terminal to display text after it in the status line, which looks like a 25th line below the 80x24 terminal? -- Sent

Re: remove any unwanted devices from the kernel.

2008-06-05 Thread Ted Unangst
On 6/5/08, Jon [EMAIL PROTECTED] wrote: I usually name the kernel to the machine hostname, but you can give it any name. Edit the kernel config file: Remove any hardware related options that are not relevant to your machine. http://www.muine.org/~hoang/openpf.html#customize

Re: remove any unwanted devices from the kernel.

2008-06-05 Thread Nick Holland
Jon wrote: I usually name the kernel to the machine hostname, but you can give it any name. Edit the kernel config file: Remove any hardware related options that are not relevant to your machine. http://www.muine.org/~hoang/openpf.html#customize Why would someone want to do this? Is

Can connect to some sites but not others

2008-06-05 Thread Kareem Kazkaz
Hello all. I have an OpenBSD box running as my firewall (v4.2, PPPoE with ATT over a Netopia 2210). I am using pf to share the internet connection to the local network, which is made up of two Mac laptops (one 10.5.3, one 10.4.6) and one Mac Mini (10.5.3). From the local network, I can connect

Re: Can connect to some sites but not others

2008-06-05 Thread Daniel Melameth
On Thu, Jun 5, 2008 at 8:47 PM, Kareem Kazkaz [EMAIL PROTECTED] wrote: I have an OpenBSD box running as my firewall (v4.2, PPPoE with ATT over a Netopia 2210). I am using pf to share the internet connection to the local network, which is made up of two Mac laptops (one 10.5.3, one 10.4.6) and

Re: Can connect to some sites but not others

2008-06-05 Thread Aaron Stellman
On Thu, Jun 05, 2008 at 07:47:22PM -0700, Kareem Kazkaz wrote: Hello all. I have an OpenBSD box running as my firewall (v4.2, PPPoE with ATT over a Netopia 2210). I am using pf to share the internet connection to the local network, which is made up of two Mac laptops (one 10.5.3, one 10.4.6)

Re: Can connect to some sites but not others

2008-06-05 Thread Kareem Kazkaz
This was indeed an MTU issue. Although it may lower my TCP/IP throughput, I used the pf.conf fix so that when I have guests I don't have to worry about changing their MTUs as well. Thanks a bunch for the suggestion! -- View this message in context: