Re: Verizon FIOS, OpenBSD, and DHCP

2013-02-06 Thread bofh
On Tue, Feb 5, 2013 at 11:18 PM, Jay Hart jh...@kevla.org wrote: Solved this. It took Verizon three tries (three calls by me), to actually get the RJ-45 port working on the ONT. Hmm... I had to set my MAC address to the Actiontec's. $ cat /etc/hostname.em0 !ifconfig \$if lladdr

Re: problem with iscsid

2013-02-06 Thread Alexey E. Suslikov
Allan Liblik allan at tarivara.ee writes: hi! I have problem with iscsid - can't connect to NAS4Free iSCSI target. There are - OpenBSD robert.vkhk.ee 5.2 GENERIC.MP#368 amd64 - NAS4Free 9.1.0.1 - Sandstorm (revision 573) In mid of 2012 I have discussed similar issue with another

Re: Verizon FIOS, OpenBSD, and DHCP

2013-02-06 Thread Liviu Daia
On 6 February 2013, bofh goodb...@gmail.com wrote: On Tue, Feb 5, 2013 at 11:18 PM, Jay Hart jh...@kevla.org wrote: Solved this. It took Verizon three tries (three calls by me), to actually get the RJ-45 port working on the ONT. Hmm... I had to set my MAC address to the Actiontec's. $

Re: UNIX A to Z List RFC

2013-02-06 Thread James Griffin
-- William Boshuck bos...@math.mcgill.ca [2013-02-04 14:25:04 -0500]: On Mon, Feb 04, 2013 at 10:27:42AM +, James Griffin wrote: I think vi(1) - not vim - would be a great tool for him to learn. A real hardcore UNIX editor, ed(1) Yes, absolutely. There was a thread on this list

pppx interface group

2013-02-06 Thread Robert Blacquiere
Hi, I've seen on the tech mailing list a patch for implementing a pppx interface group (just one line code addition). Is this going to be in 5.3 release? It would make PF filtering much nicer with many dynamic ipsec/l2tp connections. Regards Robert Blacquiere

Re: NAT over enc(4)

2013-02-06 Thread Denis Fondras
Hello Mitja, Le 05/02/2013 22:36, Mitja Muženič a écrit : I'm the author of the article you quoted. Your article is really great, I'm glad to get some help from you :) Do you have a default gateway? IPsec on OpenBSD behaves weirdly if you don't have one (even if it's not needed!). This

Re: Verizon FIOS, OpenBSD, and DHCP

2013-02-06 Thread Bentley, Dain
You shouldn't have to input the actiontec MAC. I feel your pain about the support though. It sucks. To alleviate this put the actiontec back in. Log into it and go to the interface and actually release the IP. After that unplug it immediately. Plug your ONT into your BSD firewall and boot it up

bge(4) Broadcom 5720/Dell R320 support backout

2013-02-06 Thread Rodolfo Gouveia
Hi all, It seems that the support for 5720 was backout because it broke another chipset. [1] The thing is that the newer Dell R320 has this chipset and I'm currently evaluating the its support. So I would like to know if the support would indeed work if I applied the patch again. I mean was the

Re: Verizon FIOS, OpenBSD, and DHCP

2013-02-06 Thread Diana Eichert
FIOS doesn't have any influence on whether an O/S will work with it. The GPON gear tracks DHCP requests, storing response. At least that is how it works on Tellabs and I believe Verizon FIOS uses Tellabs gear. I've been using OpenBSD's dhclient on an enterprise GPON implementation for a couple

Re: OpenBSD VAX on SIMH, sloooow networking!

2013-02-06 Thread Stuart Henderson
On 2013-02-05, John Long codeb...@inbox.lv wrote: I installed OpenBSD VAX on SIMH. Host is OpenBSD 5.2 stable amd64. Networking from within SIMH is unbelievably slow. It takes 5 hours to download base52.tgz. I've done ftp and NFS installs from my own local servers, performance to my host box

Re: OpenBSD VAX on SIMH, sloooow networking!

2013-02-06 Thread John Long
On Wed, Feb 06, 2013 at 06:03:04PM +, Stuart Henderson wrote: On 2013-02-05, John Long codeb...@inbox.lv wrote: I installed OpenBSD VAX on SIMH. Host is OpenBSD 5.2 stable amd64. Networking from within SIMH is unbelievably slow. It takes 5 hours to download base52.tgz. I've done ftp

Safe bruteforce rule for mobile-friendly website

2013-02-06 Thread Mikkel Bang
Hi, Turns out this (http://home.nuug.no/~peter/pf/en/long-firewall.html) bans any IP connecting from mobile devices: pass in on $ext_if inet proto tcp from any to any port 80 keep state (max-src-conn 100, max-src-conn-rate 15/5, overload bruteforce flush global) Works fine when connecting from

Re: Safe bruteforce rule for mobile-friendly website

2013-02-06 Thread Michał Markowski
2013/2/6 Mikkel Bang facebookman...@gmail.com: Works fine when connecting from regular PCs though. Why is that? Do mobile devices connect differently somehow? Start in /var/log, I suppose. -- Michał Markowski

Re: Safe bruteforce rule for mobile-friendly website

2013-02-06 Thread Jan Stary
On Feb 06 21:52:20, facebookman...@gmail.com wrote: Hi, Turns out this (http://home.nuug.no/~peter/pf/en/long-firewall.html) bans any IP connecting from mobile devices: pass in on $ext_if inet proto tcp from any to any port 80 keep state (max-src-conn 100, max-src-conn-rate 15/5, overload

Re: Safe bruteforce rule for mobile-friendly website

2013-02-06 Thread Peter N. M. Hansteen
Mikkel Bang facebookman...@gmail.com writes: Turns out this (http://home.nuug.no/~peter/pf/en/long-firewall.html) bans any IP connecting from mobile devices: Well, that document says a lot of other stuff too, so please be more specific. pass in on $ext_if inet proto tcp from any to any port

label-like output for pf table stats

2013-02-06 Thread Byron Klippert
Curious to know if anyone else has had the need for a label-like output option for displaying pf table stats. $ `pfctl -vsl' produces a nice parse-able output; int_if_icmp 50247 160 221120 80 110560 80 110560 2 $ `pfctl -v -t table_name -T show' produces similar data but difficult to parse;

Relayd as Transparent HTTP Proxy problem

2013-02-06 Thread Keith
I have been trying to get relayd to work as a Transparent http proxy on a old OBSD 4.7 server today but I am having some trouble getting it to do what I want. The transparent proxy works perfectly but I want to block access to all websites unless their on a whitelist in the relayd.conf file.

Re: openbsd and vmware

2013-02-06 Thread Jan Lambertz
I'm Using KVM to virtualize OpenBSD 5.2 right now. I'm not that impressed about Vmware. I used a esxi server for 2 years extensivly. Things i didnt like : cli,closed software,bloated,technical documentation,gui. Not that KVM is much better at this point,but at least, i have the sources. problems i

Re: Relayd as Transparent HTTP Proxy problem

2013-02-06 Thread Philip Guenther
On Wed, Feb 6, 2013 at 4:03 PM, Keith ke...@scott-land.net wrote: I have been trying to get relayd to work as a Transparent http proxy on a old OBSD 4.7 server today but I am having some trouble getting it to do what I want. The transparent proxy works perfectly but I want to block access to