pf FAQ: redirection back through the incoming interface

2011-01-20 Thread Harald Dunkel
Hi folks, In the example for the rdr-to and nat-to combination in the pf FAQs it seems that the http traffic is redirected back through the incoming interface: pass in on $int_if proto tcp from $int_net to $ext_if port 80 \ rdr-to $server pass out on $int_if proto tcp to $server port 80 \

pf commands to discuss

2011-01-20 Thread Indunil Jayasooriya
Hi list, I have an question. I want my pc (i.e admin_pc) to be able to traceroute which is behind a OpenBSD 4.8 pf firewall ( Doing NAT). So , I have added below rules in pf.conf file. match out on $ext_if from $lan_net nat-to ($ext_if) pass in log (all) on $int_if inet proto udp from

Re: Please help me decide: OpenWrt vs. OpenBSD

2011-01-20 Thread Alexander Schrijver
On Wed, Jan 19, 2011 at 04:32:21PM -0800, Scott Stanley wrote: b. have been on this list for a while and totally disregarded the culture you were within. grepping my mailbox it looks this is the case. Although he might be just a troll.

Re: pf commands to discuss

2011-01-20 Thread David Gwynne
either: pass in log (all) on $int_if inet proto udp from $admin_pc to !$int_if \ port 33433 33626 keep state tag mytracert pass out log on $ext_if inet proto udp from $ext_if to any \ port 33433 33626 keep state tagged mytracert or: pass in log (all) on $int_if inet proto udp from

Re: pf commands to discuss

2011-01-20 Thread Ryan McBride
On Thu, Jan 20, 2011 at 01:47:20PM +0530, Indunil Jayasooriya wrote: my question is that How can I exclude my firewall from being able to doing it ? I'm really not sure why you don't want the firewall to be able to traceroute. (hint: if you can't trust the users on your firewall to behave

Re: pf commands to discuss

2011-01-20 Thread MERIGHI Marcus
l...@animata.net (David Gwynne), 2011.01.20 (Thu) 10:20 (CET): either: pass in log (all) on $int_if inet proto udp from $admin_pc to !$int_if \ port 33433 33626 keep state tag mytracert pass out log on $ext_if inet proto udp from $ext_if to any \ port 33433 33626 keep state tagged

Re: pf FAQ: redirection back through the incoming interface

2011-01-20 Thread Henning Brauer
* Harald Dunkel harald.dun...@aixigo.de [2011-01-20 09:18]: Hi folks, In the example for the rdr-to and nat-to combination in the pf FAQs it seems that the http traffic is redirected back through the incoming interface: pass in on $int_if proto tcp from $int_net to $ext_if port 80 \

sticky rdr-to in pass rules?

2011-01-20 Thread Harald Dunkel
Hi folks, are the rdr-to and nat-to options in pass rules as sticky as for match rules? Sample: pass in on $ext_if from any to 1.2.3.0/24 port 80 tag MYTAG rdr-to $host_a pass in on $ext_if from any to 1.2.3.42 port 80 AFAIU traffic to 1.2.3.42 port 80 would be tagged with MYTAG. Would it be

How to enable sendmail auth in OpenBSD ?

2011-01-20 Thread OpenBSD Geek
Hi, I use OpenBSD 4.7, and so Sendmail MTA 8.14.3 I enabled TLS using good manpages : starttls. It's ok. But now, i want to enable AUTH for smtp. How can i achieve that ? Thank you very much. Wesley M.

Re: sticky rdr-to in pass rules?

2011-01-20 Thread roberth
On Thu, 20 Jan 2011 11:51:34 +0100 Harald Dunkel harald.dun...@aixigo.de wrote: Hi folks, are the rdr-to and nat-to options in pass rules as sticky as for match rules? No, match is what makes the options sticky. They are not sticky by themselfs. Sample: pass in on $ext_if from any to

Re: sticky rdr-to in pass rules?

2011-01-20 Thread Henning Brauer
* Harald Dunkel harald.dun...@aixigo.de [2011-01-20 11:55]: are the rdr-to and nat-to options in pass rules as sticky as for match rules? no. as outlined in the mnapage. Of course I checked the man page, but it didn't tell. blasphemia. of course it does. match The packet is

Re: GigE Chipset

2011-01-20 Thread Per Fogelström
On Wed, 19 Jan 2011 20:16:28 -0800, Edward Martinez mindbende...@live.com wrote: On 01/19/11 18:27, Korey Kaczor wrote: The netgear and linksys are realtek 8169 devices However, many of these companies may sneak different chipset. the following link shows a picture form newegg of a

Re: pf commands to discuss

2011-01-20 Thread Indunil Jayasooriya
anyway, Thanks for enlightening me. pass in log (all) on $int_if inet proto udp from $admin_pc to !$int_if \ port 33433 33626 keep state tag mytracert pass out log on $ext_if inet proto udp from $ext_if to any \ port 33433 33626 keep state tagged mytracert the above 2 rules were

Re: pf commands to discuss

2011-01-20 Thread Indunil Jayasooriya
pass in log (all) on $int_if inet proto udp from $admin_pc to !$int_if \ port 33433 33626 keep state pass out log on $ext_if inet proto udp from $ext_if to any \ port 33433 33626 keep state tagged mytracert received-on $int_if I guess there is a ``tagged mytracert'' copy-paste

Re: sticky rdr-to in pass rules?

2011-01-20 Thread Harald Dunkel
On 01/20/11 12:39, Henning Brauer wrote: * Harald Dunkel harald.dun...@aixigo.de [2011-01-20 11:55]: Of course I checked the man page, but it didn't tell. blasphemia. of course it does. match The packet is matched. This mechanism is used to provide fine

Re: How to enable sendmail auth in OpenBSD ?

2011-01-20 Thread Harald Dunkel
Hi Wes, On 01/20/11 12:27, OpenBSD Geek wrote: Hi, I use OpenBSD 4.7, and so Sendmail MTA 8.14.3 I enabled TLS using good manpages : starttls. It's ok. But now, i want to enable AUTH for smtp. How can i achieve that ? Thank you very much. Maybe this helps:

Re: How to enable sendmail auth in OpenBSD ?

2011-01-20 Thread Paul Wittmayer
http://www.sendmail.org/~ca/email/auth.html OpenBSD Geek open...@e-solutions.re 20.01.2011 12:27 Hi, I use OpenBSD 4.7, and so Sendmail MTA 8.14.3 I enabled TLS using good manpages : starttls. It's ok. But now, i want to enable AUTH for smtp. How can i achieve that ? Thank you very much.

Re: How to enable sendmail auth in OpenBSD ?

2011-01-20 Thread Otto Moerbeek
On Thu, Jan 20, 2011 at 03:27:15PM +0400, OpenBSD Geek wrote: Hi, I use OpenBSD 4.7, and so Sendmail MTA 8.14.3 I enabled TLS using good manpages : starttls. It's ok. But now, i want to enable AUTH for smtp. How can i achieve that ? Thank you very much. Wesley M. install the

Re: Offerta Super

2011-01-20 Thread Sconto Promozionale
Offerta super: Scheda Video Palit GT430 1GB solo euro 42,68, se ne prendete minimo 10, il prezzo h di 41.77; sempre piy iva e trasporto. Approfittatene. Vegastore S.r.l.

LDAPD with NFS Home mounts

2011-01-20 Thread Timothy Legge
Hello list! I hope this message finds you all well. Ive been spending some time today trying to figure out how to get NFS working under OpenBSD with the shiny new LDAPD daemon. As far as I can tell, I have LDAPD working as intended, but I would welcome it if someone could give my config files a

Re: LDAPD with NFS Home mounts

2011-01-20 Thread Martin Hedenfalk
tor 2011-01-20 klockan 14:31 + skrev Timothy Legge: Hello list! I hope this message finds you all well. Ive been spending some time today trying to figure out how to get NFS working under OpenBSD with the shiny new LDAPD daemon. As far as I can tell, I have LDAPD working as

Re: Please help me decide: OpenWrt vs. OpenBSD

2011-01-20 Thread S Mathias
I've been using OpenBSD since 2.5, '99. Does anyone using OpenBSD as a Desktop OS? :O you do? :O wow. --- On Thu, 1/20/11, SJP Lists sjp.li...@flashbsd.net wrote: From: SJP Lists sjp.li...@flashbsd.net Subject: Re: Please help me decide: OpenWrt vs. OpenBSD To: S Mathias

BGPD Multipath

2011-01-20 Thread Mindless Gr
Hello, is there any plans to make BGPD to work with recursive multipath? Current implementation doesnt allow this, it forwards traffic only from one link. to achive load-sharing between 2 links, i have announced default route from ISP's OSPF and i filtering the bgp prefixes to receive none, so

Re: Please help me decide: OpenWrt vs. OpenBSD

2011-01-20 Thread Peter N. M. Hansteen
S Mathias smathias1...@yahoo.com writes: Does anyone using OpenBSD as a Desktop OS? :O you do? :O wow. I use OpenBSD for desktop (laptop) as well as other settings, unless there is a specific reason to drag in something else. The 'firewall os' is a lot more capable in desktop/laptop space than

Re: GigE Chipset

2011-01-20 Thread Christopher Ahrens
On 1/19/2011 8:16 PM, Edward Martinez wrote: On 01/19/11 18:27, Korey Kaczor wrote: The Netgear and Linksys are Realtek 8169 devices However, many of these companies may sneak different chipset. The following link. Just like Dell... Found out the hard way that they will change

Re: Please help me decide: OpenWrt vs. OpenBSD

2011-01-20 Thread Joel Wiramu Pauling
On 20 January 2011 11:18, S Mathias smathias1...@yahoo.com wrote: I have a RouterBoard 450G [680 Mhz cpu, 256 MB ram, 512 MB flash]. I just can't decide what to put on it: Use mikrotik - as they manufacture the product, test and integrate it MikrotikOS (which is linux with a bunch of custom

Re: Please help me decide: OpenWrt vs. OpenBSD

2011-01-20 Thread STeve Andre'
On 01/20/11 12:07, Peter N. M. Hansteen wrote: S Mathiassmathias1...@yahoo.com writes: Does anyone using OpenBSD as a Desktop OS? :O you do? :O wow. I use OpenBSD for desktop (laptop) as well as other settings, unless there is a specific reason to drag in something else. The 'firewall os'

Curso El Credito y la Cobranza... Una Actividad de Exito en MEX - MTY - CANCUN

2011-01-20 Thread Obteniendo Grandes Utilidades
CURSO TALLER El Credito y la Cobranza... Una Actividad de Exito. Duracion: (1 dia) 10 hrs. Inversion: $4,400 pesos mas IVA Objetivo: Conocer por medio de practicas vivenciales las razones por las que una empresa tiene ixito al

Re: SV

2011-01-20 Thread Luis F Urrea
dear, I found a good company several days ago, and try to buy some goods, and I received satisfactory item 5 days later. Introducing to you: fallinele.com , maybe also useful for you.

Re: Please help me decide: OpenWrt vs. OpenBSD

2011-01-20 Thread Andres Perera
On Thu, Jan 20, 2011 at 12:12 PM, S Mathias smathias1...@yahoo.com wrote: I've been using OpenBSD since 2.5, '99. Does anyone using OpenBSD as a Desktop OS? :O you do? :O wow. I used to, for about 2 months. But then I realized that my internet lifestyle is too accustomed to flash to pretend I

Re: Please help me decide: OpenWrt vs. OpenBSD

2011-01-20 Thread Stuart Henderson
On 2011-01-19, S Mathias smathias1...@yahoo.com wrote: I have a RouterBoard 450G [680 Mhz cpu, 256 MB ram, 512 MB flash]. I just can't decide what to put on it: OpenWrt or OpenBSD RB450G? OpenBSD, please. Send the diffs you use to tech@.

Re: BGPD Multipath

2011-01-20 Thread Stuart Henderson
On 2011-01-20, Mindless Gr nomindles...@yahoo.com wrote: Hello, is there any plans to make BGPD to work with recursive multipath? Current implementation doesnt allow this, it forwards traffic only from one link. to achive load-sharing between 2 links, i have announced default route from

Re: CARP between 4.7 and 48 possible?

2011-01-20 Thread Stuart Henderson
On 2011-01-19, Alastair Johnson att...@gmail.com wrote: We also have a very similar question. I have a pair of CARP'd pfsync'd firewalls of embarrasing vintage and would like to be able to swap them for new 4.8 machines (new hardware) one at a time. Is this possible? pfsync on a firewall of

Re: Please help me decide: OpenWrt vs. OpenBSD

2011-01-20 Thread Aaron Glenn
On Thu, Jan 20, 2011 at 9:07 PM, Stuart Henderson s...@spacehopper.org wrote: On 2011-01-19, S Mathias smathias1...@yahoo.com wrote: I have a RouterBoard 450G [680 Mhz cpu, 256 MB ram, 512 MB flash]. I just can't decide what to put on it: OpenWrt or OpenBSD RB450G? OpenBSD, please. Send

Re: Please help me decide: OpenWrt vs. OpenBSD

2011-01-20 Thread Jan Stary
I have a RouterBoard 450G [680 Mhz cpu, 256 MB ram, 512 MB flash]. I just can't decide what to put on it: OpenWrt or OpenBSD Depends mainly on whether yo mama so fat.

Re: Please help me decide: OpenWrt vs. OpenBSD

2011-01-20 Thread Fred Crowson
On 20 January 2011 16:42, S Mathias smathias1...@yahoo.com wrote: I've been using OpenBSD since 2.5, '99. Does anyone using OpenBSD as a Desktop OS? :O you do? :O wow. It's been my preferred OS desktop since 2.9, and since I changed jobs its now my work desktop :~)

Strange network problem. Debugging hints needed.

2011-01-20 Thread Andre Keller
Hi there I have a strange problem with network connectivity on a device of mine. The setup is carp on vlan on vr(4). The problem is that the link runs for 10minutes, 10hours or 10days and suddenly it stops working. Doing a ifconfig vr0 down ; ifconfig vr0 up solves the problem temporarly but as

Re: Please help me decide: OpenWrt vs. OpenBSD

2011-01-20 Thread Mehma Sarja
On 1/20/11 1:32 PM, Aaron Glenn wrote: On Thu, Jan 20, 2011 at 9:07 PM, Stuart Hendersons...@spacehopper.org wrote: [stuff] it took a full 8 replies to get to the correct response? now I understand why enlightened people find misc@ complete noise with negligible signal. I find the

Re: Please help me decide: OpenWrt vs. OpenBSD

2011-01-20 Thread Predrag Punosevac
On 20 January 2011 16:42, S Mathias smathias1...@yahoo.com wrote: I've been using OpenBSD since 2.5, '99. Does anyone using OpenBSD as a Desktop OS? :O you do? :O wow. All my desktops and laptops run OpenBSD. As a matter of fact the desktops and laptops of all my students also run OpenBSD:-)

Re: Please help me decide: OpenWrt vs. OpenBSD

2011-01-20 Thread Paul M
On 21/01/2011, at 10:32 AM, Aaron Glenn wrote: On Thu, Jan 20, 2011 at 9:07 PM, Stuart Henderson s...@spacehopper.org wrote: On 2011-01-19, S Mathias smathias1...@yahoo.com wrote: I have a RouterBoard 450G [680 Mhz cpu, 256 MB ram, 512 MB flash]. I just can't decide what to put on it:

Re: Please help me decide: OpenWrt vs. OpenBSD

2011-01-20 Thread Daniel B.
On Wed, 19 Jan 2011, S Mathias wrote: What is more secure/reliable in this case? OpenWrt or OpenBSD? Anyone got any opinions? What should i choose? OpenBSD. If you ask in OpenWrt mailing list, they will tell you the same, for sure.

Re: Please help me decide: OpenWrt vs. OpenBSD

2011-01-20 Thread Andres Perera
On Thu, Jan 20, 2011 at 7:32 PM, Predrag Punosevac punoseva...@gmail.com wrote: On 20 January 2011 16:42, S Mathias smathias1...@yahoo.com wrote: I've been using OpenBSD since 2.5, '99. Does anyone using OpenBSD as a Desktop OS? :O you do? :O wow. All my desktops and laptops run OpenBSD. As

Re: Please help me decide: OpenWrt vs. OpenBSD

2011-01-20 Thread SJP Lists
On Friday, 21 January 2011, Aaron Glenn aaron.gl...@gmail.com wrote: On Thu, Jan 20, 2011 at 9:07 PM, Stuart Henderson s...@spacehopper.org wrote: On 2011-01-19, S Mathias smathias1...@yahoo.com wrote: I have a RouterBoard 450G [680 Mhz cpu, 256 MB ram, 512 MB flash]. I just can't decide

New document: How to build a port for OpenBSD

2011-01-20 Thread Fernando Quintero
Hi lists, I just wrote a new document about how to build a port for OpenBSD. Enjoy it! note: Only in spanish! (sorry) Download the PDF: https://groups.google.com/group/openbsd-colombia/browse_thread/thread/30c4b800a5cfc868# -- -- Fernando Quintero http://www.openbsdcolombia.org/

Re: Please help me decide: OpenWrt vs. OpenBSD

2011-01-20 Thread Hugo Osvaldo Barrera
On 20/01/11 22:47, Andres Perera wrote: On Thu, Jan 20, 2011 at 7:32 PM, Predrag Punosevac punoseva...@gmail.com wrote: On 20 January 2011 16:42, S Mathias smathias1...@yahoo.com wrote: I've been using OpenBSD since 2.5, '99. Does anyone using OpenBSD as a Desktop OS? :O you do? :O wow.

Re: pf commands to discuss

2011-01-20 Thread Indunil Jayasooriya
On Thu, Jan 20, 2011 at 2:57 PM, Ryan McBride mcbr...@openbsd.org wrote: On Thu, Jan 20, 2011 at 01:47:20PM +0530, Indunil Jayasooriya wrote: my question is that How can I exclude my firewall from being able to doing it ? I'm really not sure why you don't want the firewall to be able to

Re: Strange network problem. Debugging hints needed.

2011-01-20 Thread Markus Hennecke
Am 21.01.2011 00:38, schrieb Andre Keller: I have a strange problem with network connectivity on a device of mine. The setup is carp on vlan on vr(4). The problem is that the link runs for 10minutes, 10hours or 10days and suddenly it stops working. Doing a ifconfig vr0 down ; ifconfig vr0 up