support new

2014-08-01 Thread Socrates Papachilleos
0 C Cyprus P Limassol T Limassol Z 3026 O Pagasoft4u I Socrates Papapachilleos A 1 Viotias Street, Ay Zoni M socratesp1...@gmail.com U B +35799222339 X N Consulting and Implementation of OpenBSD Networking Solutions

Re: CARP cluster: howto keep pf.conf in sync?

2014-08-01 Thread R0me0 ***
I wrote a little script sometime ago and it run from crontab every 5 min and do: check and generate md5 of important files like hostname.if , pf include files, etc ... All necessaries modification is monitored natively by OpenBSD, but there is an ossec in deployment as well. ifstated is used to

Re: Not able to pass BIOS drive check with OpenBSD drive attached

2014-08-01 Thread Kim Zeitler
Hello Adrian, On 31.07.2014 18:59, Adrian Jervolino wrote: My questions to you are: Has anybody ran into similar issues and was able to resolve them? Do you think this is a OpenBSD related issue and actually solveable (in a reasonable amount of time)? Swaping the motherboard is currently

Re: [Bulk] athn channel 2 issue AR9271

2014-08-01 Thread Kevin Chadwick
previously on this list Kevin Chadwick contributed: The AR9271 is a single-chip USB 2.0 802.11n solution. It operates in the 2GHz spectrum and supports a single stream (1T1R). When adding the option wpa wpaprotos wpa2 to hostname.athn0; ifconfig shows chan 2 and the connection fails with

Re: Not able to pass BIOS drive check with OpenBSD drive attached

2014-08-01 Thread Adrian Jervolino
Hello Kim, On Fri, Aug 01, 2014 at 10:56:48AM +0200, Kim Zeitler wrote: Hello Adrian, On 31.07.2014 18:59, Adrian Jervolino wrote: My questions to you are: Has anybody ran into similar issues and was able to resolve them? Do you think this is a OpenBSD related issue and actually

Re: CARP cluster: howto keep pf.conf in sync?

2014-08-01 Thread sven falempin
On Fri, Aug 1, 2014 at 4:56 AM, R0me0 *** knight@gmail.com wrote: I wrote a little script sometime ago and it run from crontab every 5 min and do: check and generate md5 of important files like hostname.if , pf include files, etc ... doh ! this is done in daily/security look at

Re: CARP cluster: howto keep pf.conf in sync?

2014-08-01 Thread Claer
Hello, On Mon, Jul 28 2014 at 07:23, Nick Holland wrote: On 07/28/14 07:50, Peus, Christoph wrote: Hi all, is there a standard or recommended way to keep the pf.conf on the CARP cluster members in sync? Thanks! No one standard or recommended way, but lots of ideas, as

Re: CARP cluster: howto keep pf.conf in sync?

2014-08-01 Thread Giancarlo Razzolini
On 01-08-2014 09:07, sven falempin wrote: doh ! this is done in daily/security look at /etc/changelist It's not md5, it's sha256. md5 should not be used anymore. But what Romeo does is to run a script from cron every 5 minutes. Daily runs, obviously, daily. It's not suited for the task at hand.

Re: CARP cluster: howto keep pf.conf in sync?

2014-08-01 Thread sven falempin
On Fri, Aug 1, 2014 at 8:22 AM, Giancarlo Razzolini grazzol...@gmail.com wrote: On 01-08-2014 09:07, sven falempin wrote: doh ! this is done in daily/security look at /etc/changelist It's not md5, it's sha256. md5 should not be used anymore. But what Romeo does is to run a script from cron

Re: [Bulk] Re: [Bulk] athn channel 2 issue AR9271

2014-08-01 Thread Kevin Chadwick
previously on this list Kevin Chadwick contributed: Just thought I would report my findings. It seems that wasn't repeatable even when unplugging during power off. It seems to default to chan 2. Having chan 8 in hostname.athn0 oddly sets it to chan 1 and then having

Re: CARP cluster: howto keep pf.conf in sync?

2014-08-01 Thread Giancarlo Razzolini
On 01-08-2014 09:32, sven falempin wrote: actually if you dont put a + it is plain diff and a backup in /var, the security could be run more often (it is called in the cron), and because the script is present there is no need to write it again. security(8) is called by daily(8). You could call

Re: Not able to pass BIOS drive check with OpenBSD drive attached

2014-08-01 Thread Adam Thompson
On 14-08-01 05:33 AM, Adrian Jervolino wrote: Yep, I can see how you arrived at this conclusion. In sheer desperation I installed GRUB2. Now it's constantly rebooting, so I think there is no real problem with the MBRi boot code. Of course I disabled the UEFI. disabled hence the lack of

IPv6 problem

2014-08-01 Thread Bastien Durel
Hello, I face a strange problem with my IPv6 connection. (one of them, actually) I got an OpenBSD router I use to connect to 2 ISPs and various internal networks. One of my link cannot use IPv6 from some time (as it's my backup link, I can't say exactly when it failed). This provider have

Re: CARP cluster: howto keep pf.conf in sync?

2014-08-01 Thread Zach Leslie
Configuration management tools, like Puppet, can quickly abstract knowledge of a particular technology away from the user and isolate understanding for said technology to a smaller group of people with those skills. This is the nature of technology, though, is it not? Abstractions built

DHCPLIENT Issue with 5.5 Stable

2014-08-01 Thread Armin Tüting
Hello , I've received the following while acquiring an adress:- dhclient vlan8 DHCPREQUEST on vlan8 to 255.255.255.255 port 67 classless-static-routes: expecting 9 bytes: got 17 DHCPACK from 79.227.127.254 (40:55:39:bf:0e:40) bound to 79.227.113.147 -- renewal in 43200 seconds.

Re: DHCPLIENT Issue with 5.5 Stable

2014-08-01 Thread sven falempin
On Fri, Aug 1, 2014 at 1:03 PM, Armin Tüting armin.tuet...@tueting-online.com wrote: Hello , I've received the following while acquiring an adress:- dhclient vlan8 DHCPREQUEST on vlan8 to 255.255.255.255 port 67 classless-static-routes: expecting 9 bytes: got 17 DHCPACK from

two wireless networks on one interface?

2014-08-01 Thread Tobias Stoeckmann
Hi, haven't found anything about this, so it's time to ask misc@ ... Is it (technically) possible to join two wireless networks with just one chip? My system has an athn0 interface, would be nice if I can join two networks with that. Is it possible? Are there limitations? Could I use the

Access Point Section of the faq

2014-08-01 Thread Kevin Chadwick
I wonder if a short list of access mode capable devices or chipsets that are known to work well for atleast 24 hours or maybe 60 days would be a good addition to the access point section of the faq (6.13) especially with OpenBSD being such a good system to use as an access point. In the mailing

Re: two wireless networks on one interface?

2014-08-01 Thread Daniel Melameth
On Fri, Aug 1, 2014 at 12:50 PM, Tobias Stoeckmann tob...@stoeckmann.org wrote: Is it (technically) possible to join two wireless networks with just one chip? My system has an athn0 interface, would be nice if I can join two networks with that. I don't believe this is possible with OpenBSD.

Re: Access Point Section of the faq

2014-08-01 Thread Mike Larkin
On Fri, Aug 01, 2014 at 07:47:51PM +0100, Kevin Chadwick wrote: I wonder if a short list of access mode capable devices or chipsets that are known to work well for atleast 24 hours or maybe 60 days would be a good addition to the access point section of the faq (6.13) especially with OpenBSD

openbsd and badusb

2014-08-01 Thread Ted Unangst
You may have heard about the badusb talk coming at blackhat. In theory, we should wait to watch the talk and see what it's actually about, but since some people can't wait that long, here's a few thoughts. (I'm a little surprised nobody has asked here already. I have some time free, thought I'd

iwn0 - Intel Centrino Ultimate-N 6300 and hit or miss WPA

2014-08-01 Thread Chess Griffin
Hi - I have an Intel Centrino Ultimate-N 6300 card in my Thinkpad X230 and WPA works with some access points but doesn't with other access points. I had the same behavior on amd64 5.5 and I'm currently running the July 30 snapshot and this still happens. I have admin access to one AP at work

Re: iwn0 - Intel Centrino Ultimate-N 6300 and hit or miss WPA

2014-08-01 Thread Ted Unangst
On Fri, Aug 01, 2014 at 17:29, Chess Griffin wrote: Hi - I have an Intel Centrino Ultimate-N 6300 card in my Thinkpad X230 and WPA works with some access points but doesn't with other access points. I had the same behavior on amd64 5.5 and I'm currently running the July 30 snapshot and this

Re: openbsd and badusb

2014-08-01 Thread Gustav Fransson Nyvell
On 08/01/14 23:01, Ted Unangst wrote: You may have heard about the badusb talk coming at blackhat. In theory, we should wait to watch the talk and see what it's actually about, but since some people can't wait that long, here's a few thoughts. (I'm a little surprised nobody has asked here

Re: openbsd and badusb

2014-08-01 Thread patrick keshishian
#badbios redux? I seem to recall it was suspected that badbios started with an infected USB stick. On 8/1/14, Ted Unangst t...@tedunangst.com wrote: You may have heard about the badusb talk coming at blackhat. In theory, we should wait to watch the talk and see what it's actually about, but

Re: openbsd and badusb

2014-08-01 Thread patrick keshishian
On 8/1/14, Gustav Fransson Nyvell gus...@nyvell.se wrote: On 08/01/14 23:01, Ted Unangst wrote: You may have heard about the badusb talk coming at blackhat. In theory, we should wait to watch the talk and see what it's actually about, but since some people can't wait that long, here's a few

Re: iwn0 - Intel Centrino Ultimate-N 6300 and hit or miss WPA

2014-08-01 Thread Chess Griffin
On Fri, Aug 1, 2014, at 05:59 PM, Ted Unangst wrote: On Fri, Aug 01, 2014 at 17:29, Chess Griffin wrote: Hi - I have an Intel Centrino Ultimate-N 6300 card in my Thinkpad X230 and WPA works with some access points but doesn't with other access points. I had the same behavior on amd64

Re: iwn0 - Intel Centrino Ultimate-N 6300 and hit or miss WPA

2014-08-01 Thread Chess Griffin
On Fri, Aug 1, 2014, at 08:06 PM, Chess Griffin wrote: On Fri, Aug 1, 2014, at 05:59 PM, Ted Unangst wrote: On Fri, Aug 01, 2014 at 17:29, Chess Griffin wrote: Hi - I have an Intel Centrino Ultimate-N 6300 card in my Thinkpad X230 and WPA works with some access points but doesn't

Re: CARP cluster: howto keep pf.conf in sync?

2014-08-01 Thread R0me0 ***
Hi Giancarlo, I would like to thank your background (: Yes the important files is included @changelist and it's sha256, but as firewall rules has modifications during all time, another nodes need be updated. So, it's because of this I run the script every 5 min and I sync it using SCP. * My

Re: CARP cluster: howto keep pf.conf in sync?

2014-08-01 Thread Nick Holland
On 08/01/14 08:12, Claer wrote: On Mon, Jul 28 2014 at 07:23, Nick Holland wrote: ... I'll leave you to develop the script. My design philosophy: 1) No additional hw, other than the two firewalls. 2) EITHER machine should be able to act as master. 3) EITHER machine should be able to