Re: pf: state key linking mismatch (?)

2011-07-31 Thread Henning Brauer
* Limaunion limaun...@fibertel.com.ar [2011-07-17 02:26]: hi all: I'm getting tons of messages like this one: pf: state key linking mismatch! dir=OUT, if=vr1, stored af=2, a0: 83.237.186.131:51413, a1: 192.168.1.2:64768, proto=17, found af=2, a0: 192.168.1.2:64768, a1: 181.110.135.229:51413,

Re: routing problem with 2nd default route via ipsec

2011-07-31 Thread Axel Rau
Am 28.07.2011 um 13:23 schrieb Axel Rau: all CARP traffic from its carp2) go to enc0, like this: What may cause IPv4 CARP traffic to not go out on its parent device but on enc0 instead? IPv6 CARP and other CARP devises behave as expected. Axel --- PGP-Key:29E99DD6 b +49 151 2300 9283 b

Re: Mouse0: No Device specified, looking for one.. (it's specified)

2011-07-31 Thread LEVAI Daniel
Hali! FWIW, on my thinkpad t60 I can not configure the EmulateWheel option for the trackpoint because of this. The configure option for the input devices in xorg.conf are simply getting ignored. Daniel Section InputDevice Identifier TrackPoint Driver mouse

Re: Mouse0: No Device specified, looking for one.. (it's specified)

2011-07-31 Thread Christopher Zimmermann
Can you post your Xorg.log and complete xorg.conf? See also xorg.conf(5); this may be what you need. Option AllowEmptyInput boolean If enabled, don't add the standard keyboard and mouse drivers, if there are no input devices in the config file. Enabled by default if AutoAddDevices and

Re: current: high interrupts on a macbook

2011-07-31 Thread Jan Stary
On Jun 17 17:53:10, Jan Stary wrote: Since a few snapshots ago, current/amd64 has occassionaly been interrupting like crazy on my macbook. top(1) shows above 90% interrupt, and On Jun 17 18:02:17, Otto Moerbeek wrote: Try a more recent snap, various things related to interrupt handling have

Re: make an firewall with IDS

2011-07-31 Thread Simeon Rusev
Sure, take a look at http://www.sec-net.net/en/2011/07/openbsd/snort-2-9-0-5-on-openbsd-current.html On Sun, 31 Jul 2011 00:37:41 +0400 Wesley MOUEDINE ASSABY open...@e-solutions.re wrote Hi, Does someone already build an IDS on OpenBSD, and would help me ? I want to use snort on an

Re: pf: state key linking mismatch (?)

2011-07-31 Thread Limaunion
On 07/31/2011 07:13 AM, Henning Brauer wrote: * Limaunionlimaun...@fibertel.com.ar [2011-07-17 02:26]: hi all: I'm getting tons of messages like this one: pf: state key linking mismatch! dir=OUT, if=vr1, stored af=2, a0: 83.237.186.131:51413, a1: 192.168.1.2:64768, proto=17, found af=2, a0:

Re: dual-stack IPv4/IPv6 CARP SOLVED

2011-07-31 Thread Jussi Peltola
On Sun, Jul 31, 2011 at 02:16:15PM -0700, David Newman wrote: 2. CARP heartbeat messages use multicast. This means a switch with dual-stack CARP-attached devices should support not only IGMP snooping for IPv4 but also MLD snooping for IPv6. Hmm. carppeer does not seem to like an inet6 address

zedist

2011-07-31 Thread director
van arn ME-NS BE-ST PROD-UCKT G-O!jqx C+L+I+C+K H+E+R+Ehqe glamourgirlsofthesilverscreennrl wedgienylonxttexturedpicksbuyyvk bowlingforbearsrko

Re: dual-stack IPv4/IPv6 CARP SOLVED

2011-07-31 Thread David Newman
On 7/31/11 4:02 PM, Jussi Peltola wrote: On Sun, Jul 31, 2011 at 02:16:15PM -0700, David Newman wrote: 2. CARP heartbeat messages use multicast. This means a switch with dual-stack CARP-attached devices should support not only IGMP snooping for IPv4 but also MLD snooping for IPv6. Hmm.

Re: make an firewall with IDS

2011-07-31 Thread Wesley MOUEDINE ASSABY
First, thank you very much for your link. I will try it this night. On Mon, 01 Aug 2011 00:18:06 +0300, Simeon Rusev sim...@sec-net.net wrote: Sure, take a look at http://www.sec-net.net/en/2011/07/openbsd/snort-2-9-0-5-on-openbsd-current.html On Sun, 31 Jul 2011 00:37:41 +0400 Wesley