Re: limit ftp download

On 3-11-2011 6:07, Wesley M. wrote: I suppose it is because traffic are redirect to 127.0.0.1 (ftpproxy) sample of my pf.conf: ... anchor ftp-proxy/* pass in on $lan inet proto tcp from $limithost \ to port 21 divert-to 127.0.0.1 port 8021 queue ilimit ... Is there a way to

Re: Updating plus.html

I've worked with Janne and some stuff are almost but not yet published (to week #26, the beginning of c2k11 for 5.0, and week #33 and #34 of current). I've done some work I could submit soon to Janne with weeks #35, #36 and #37. Let me know if it's needed. Please

Re: limit ftp download

On 2011-11-03, Wesley M. open...@e-solutions.re wrote: I'm using OpenBSD 5.0 I'm testing traffic shapping using altq. I can limit a user (his Ip address) to a 160Kb/s, it works great. But when this user try to download a file using ftp, he downloads it at 1024Kb/s. I suppose it is

Re: limit ftp download

Thank you for your reply. I read the man page of ftp-proxy. There's an option like you said, -q queue. But in my way, i have 2 queue : ilimit and istd ilimit : bandwidth - 20Ko/s istd : bandwidth - 128 Ko/s So i just modified to my /etc/rc.conf.local : ftpproxy_flags= to ftpproxyflags=-q ilimit

Re: limit ftp download

On 3-11-2011 9:01, Wesley M. wrote: Thank you for your reply. I read the man page of ftp-proxy. There's an option like you said, -q queue. But in my way, i have 2 queue : ilimit and istd ilimit : bandwidth - 20Ko/s istd : bandwidth - 128 Ko/s So i just modified to my /etc/rc.conf.local :

Re: High interrupt rates after resume

On Tue, Nov 1, 2011 at 10:12 AM, Alexander Polakov polac...@gmail.com wrote: * Leroy van Engelen leroy.vanenge...@gmail.com [111019 19:07]: This was also seen on a macbook by Jan Stary: http://marc.info/?l=openbsd-miscm=131213545109050w=2 And on my Samsung N210:

Packet Tagging issues with NAT in pf OBSD 4.9

Hello all, I recently stood up an OpenBSD server to replace and older ASA. I read the faq and was interested in the packet tagging aspect because I have a DMZ and it makes the rule set seem more readable to my brain.. In any case I have the following taken from the PF faqs on the OpenBSD

Re: how to gain high performance with big memory

Take a look at this: http://www.packetmischief.ca/openbsd-compact-flash-firewall/ http://blog.spoofed.org/2007/12/openbsd-on-soekris-cheaters-guide.html It's about installing on a flash card but how to mount filesystems to memory is in there. ___t_ From:

Re: Packet Tagging issues with NAT in pf OBSD 4.9

Hi, try this sample _int = re0 _ext = fxp1 int_net = 192.168.200.0/24 set block-policy drop set skip on lo match in all scrub (no-df max-mss 1440) match out on $_ext inet from $int_net to any nat-to (egress) block log all pass in on $_int inet proto udp from $int_net to any port domain pass in on

Re: Updating plus.html

That said, i don't think having individual developers provide plus.html entries in addition to commit messages would work - additional workload, lack of uniform style, and lack of a big picture pespective. So it has to be done by one person, or by a small team. The ideal person to do it would

Re: Packet Tagging issues with NAT in pf OBSD 4.9

Hi, thanks for replying I was looking to use packet tagging though. -Original Message- From: Wesley M. [mailto:open...@e-solutions.re] Sent: Thursday, November 03, 2011 6:20 AM To: Bentley, Dain Cc: misc@openbsd.org Subject: Re: Packet Tagging issues with NAT in pf OBSD 4.9

Re: Updating plus.html

On Thu, Nov 03, 2011 at 11:42:55AM +0100, Kristaps Dzonsons wrote: [...] (ducks) _ _ _ _ _ ('), ('), ('), ('), (') ___, (` =~~/(` =~~/(` =~~/(` =~~/(` =~~/ jgs

Re: Packet Tagging issues with NAT in pf OBSD 4.9

On 2011-11-03, Bentley, Dain dbent...@nas.edu wrote: Hello all, I recently stood up an OpenBSD server to replace and older ASA. I read the faq and was interested in the packet tagging aspect because I have a DMZ and it makes the rule set seem more readable to my brain.. In any case I have

Re: Packet Tagging issues with NAT in pf OBSD 4.9

you aren't using tagging in your sample. On 2011-11-03, Wesley M. open...@e-solutions.re wrote: Hi, try this sample _int = re0 _ext = fxp1 int_net = 192.168.200.0/24 set block-policy drop set skip on lo match in all scrub (no-df max-mss 1440) match out on $_ext inet from $int_net to any

Re: www/faq/index.html mentioning 4.9

committed, thank you. On 2011-11-03, Mike Putnam m...@theputnams.net wrote: Noticed by wepy in #openbsd on freenode. 21:21 wepy http://www.openbsd.org/faq/index.html -- says installation guide is for 4.9, but links to 5.0 Mike Index: www/faq/index.html

Flashboot for OpenBSD 5.0 is now available

Hi Flashboot is a small infrastructure to build minimal OpenBSD installations suitable for booting of flash and USB devices originally by Damien Miller. Flashboot his is derived from the scripts and tools used to build the OpenBSD installation media and has evolved over the years. You will found

Re: limit ftp download

I tried this : added a second ftpproxy_flags in my /etc/rc.conf.local So in the file, we have : ftpproxy_flags=-q ilimit # Listen by default on 8021 ftpproxy_flags=-q istd # It doesn't work, it use the last line in /etc/rc.conf.local : istd queue I suppose that it doesn't listen on the same

Re: limit ftp download

You can only start one ftp-proxy with rc.conf. Just start the other one like this in /etc/rc.local (example from my own system, where I bind them to other addresses, you just need the -q and the -p): # Add your local startup actions here. echo -n ' ftp-proxy' /usr/sbin/ftp-proxy -D6 -a Y -p

Re: how to gain high performance with big memory

On Thu, Nov 3, 2011 at 4:24 AM, Bentley, Dain dbent...@nas.edu wrote: Take a look at this: http://www.packetmischief.ca/openbsd-compact-flash-firewall/ http://blog.spoofed.org/2007/12/openbsd-on-soekris-cheaters-guide.html Why send people to third party documentation that won't be properly

Re: traffic shaping in OpenBSD

On Tue, 1 Nov 2011 08:55:07 -0400 Nico Kadel-Garcia nka...@gmail.com wrote: On Tue, Nov 1, 2011 at 4:10 AM, Gregory Edigarov g...@bestnet.kharkov.ua wrote: On Tue, 1 Nov 2011 08:53:46 +0100 Bret S. Lambert bret.lamb...@gmail.com wrote: On Tue, Nov 01, 2011 at 09:47:35AM +0200, Gregory

Full ruleset Packet filter OpenBSD 5.0

Hi, See here : http://mouedine.net/ruleset49.aspx (with divert/tag use) All the best, Wesley MOUEDINE ASSABY

Re: Flashboot for OpenBSD 5.0 is now available

Would be awsome if the're was support for embedded board MIPS processor. Le 2011-11-03 07:17, Johan Ryberg a icrit : Hi Flashboot is a small infrastructure to build minimal OpenBSD installations suitable for booting of flash and USB devices originally by Damien Miller. Flashboot his is derived

Merhaba

Muyyuuytdfuucize 36 saat etkialsana bir oyuncakli Eralsana bir oyuncakkeklere vzelCialsana bir oyuncakalalsana bir oyuncakisalsana bir oyuncak. ile Mutlu ve Uzun s|reli ilialsana bir oyuncakşkiler Yaşamaya Merhaba deyin.Ciallxcxcis Erksssxcxcsssiyon Haalsana bir oyuncakpı şimdi

Re: Has php-fpm been left out of OBSD 5.0 ?

yes you have to go to -current ports if you want php-fpm keith [ke...@scott-land.net] wrote: Was planning on setting php-fpm up today on a new OpenBSD 5.0 box but can't find php-fpm. I though it was built in to php from version 5.3.3 onwards but it doesn't seem to be. I am trying to setup a

Re: Flashboot for OpenBSD 5.0 is now available

Sorry but we can only support official hardware platforms but you are right, it would be awesome =) Best regards Johan 2011/11/3 Michel Blais mic...@targointernet.com: Would be awsome if the're was support for embedded board MIPS processor. Le 2011-11-03 07:17, Johan Ryberg a icrit : Hi

Re: Packet Tagging issues with NAT in pf OBSD 4.9

Hello Stuart and thanks for your reply. It still doesn't help, this seems to work but I'm not sure if this is a good config: # NAT RULES match out on $ext tagged LAN nat-to ($ext) # BLOCKING AND PACKET TAGGING pass in on $int from $int_net tag LAN #pass in on $int tag LAN block out on $ext

post-Altq

Hi, What's about the post-Altq ? See here : http://bsdly.blogspot.com/2011/07/anticipating-post-altq-world.html Does someone have any news about that? Cheers, Wesley.

Re: Packet Tagging issues with NAT in pf OBSD 4.9

On Thu, Nov 3, 2011 at 12:26 PM, Bentley, Dain dbent...@nas.edu wrote: Hello Stuart and thanks for your reply. It still doesn't help, this seems to work but I'm not sure if this is a good config: # NAT RULES match out on $ext tagged LAN nat-to ($ext) # BLOCKING AND PACKET TAGGING pass

Xeito Novo - Folk Celta y Bailes de Galicia - 19/11 ND Ateneo

Sabado 19 de Noviembre - 21:00 hs ND/ATENEO Paraguay 918  Ciudad de Buenos Aires Entradas en venta por Plateanet (www.plateanet.com) o en el teatro: 4328-2888 Este espectaculo en el que conviven lo moderno y lo tradicional de esta entraqable cultura, es ya un clasico de 27 aqos consecutivos,

Re: Packet Tagging issues with NAT in pf OBSD 4.9

Hello Axton...cool name by the way. I noticed the match statements work for me as well, Perhaps it is required? From: Axton [axton.gr...@gmail.com] Sent: Thursday, November 03, 2011 2:06 PM To: Bentley, Dain Cc: Stuart Henderson; misc@openbsd.org Subject:

Re: Packet Tagging issues with NAT in pf OBSD 4.9

On Thu, Nov 3, 2011 at 1:33 PM, Bentley, Dain dbent...@nas.edu wrote: Hello Axton...cool name by the way. I noticed the match statements work for me as well, Perhaps it is required? This changed with 4.7: http://openbsd.org/faq/upgrade47.html#newPFnat More details available here:

Re: post-Altq

Quoting Wesley M. open...@e-solutions.re: Hi, What's about the post-Altq ? See here : http://bsdly.blogspot.com/2011/07/anticipating-post-altq-world.html Does someone have any news about that? You need to read undeadly.org

Re: Packet Tagging issues with NAT in pf OBSD 4.9

http://www.openbsd.org/faq/pf/tagging.html From: Axton [axton.gr...@gmail.com] Sent: Thursday, November 03, 2011 2:51 PM To: Bentley, Dain Cc: Stuart Henderson; misc@openbsd.org Subject: Re: Packet Tagging issues with NAT in pf OBSD 4.9 On Thu, Nov 3, 2011 at

Has any one had any problem with install50.iso?

Hi there I has done some testing with install50.iso and USB stick installations and yesterday I had problem with corrupt packages like xetc50.tgz and others and I wanted to debug what happened but today every things works perfectly. I haven't changed any scripts that I'm using and the only thing

..

Dear friend! http://co-p.com/index135tww--.php?lulyCIDID=50 Thu, 3 Nov 2011 22:12:46 __ While the ingenious lad was fond of machinery--to make a machine of himself was utterly distasteful to him. (c) OLIN vkga489

Re: Has any one had any problem with install50.iso?

Hi Johan, Have you checked the SHA256 sig with the iso? They can be found here: http://ftp.openbsd.org/pub/OpenBSD/5.0/arch/SHA256 If you don't have an OpenBSD installation already running to use the sha256 command, you can pick up tools over on sourceforge http://md5deep.sourceforge.net/ that

Re: Has any one had any problem with install50.iso?

On 11/03/11 17:02, Johan Ryberg wrote: Hi there I has done some testing with install50.iso and USB stick installations and yesterday I had problem with corrupt packages like xetc50.tgz and others and I wanted to debug what happened but today every things works perfectly. _corrupt_, or

Patch for FAQ - PF: Packet Tagging (Policy Filtering) - New NAT Syntax

This is a patch to update the FAQ at http://www.openbsd.org/faq/pf/tagging.html with the nat syntax changes introduced in 4.7 (http://openbsd.org/faq/upgrade47.html#newPFnat): $ diff -ub tagging.html.bak tagging.html --- tagging.html.bak2011-11-03 17:40:01.596053714 -0500 +++ tagging.html

Re: Has any one had any problem with install50.iso?

The problem was on my side. I found the problem in the building scripts. Thanks anyway Regards Johan Den 3 nov 2011 23:45 skrev Nick Holland n...@holland-consulting.net: On 11/03/11 17:02, Johan Ryberg wrote: Hi there I has done some testing with install50.iso and USB stick installations

symon monitor pf?

symon monitor pf? http://wpd.home.xs4all.nl/symon/documentation.html Installation notes == Privileges == symux needs read and write access to its rrdfiles. symon needs to interface with your kernel. Depending on your host system this leads to different privilege

hola

hola Estoy muy contenta de presentar un sitio web de la electrC3nicapara usted hay muchos tipos de telC)fonos mC3viles, cC!maras digitales,laptop.watch, television.gultar podemos ofrecer el precio mC!s bajo si usted estC! interesado en nuestros productos S ite : rol .com 2011-11-4