Re: ipsec vpn unexpected flow

2010-11-27 Thread Andrea Parazzini
On Thu, 11/25/10, Andrea Parazzini a.parazz...@sirtisistemi.net wrote: Hi, we have a vpn connection with a customer. The remote peer is not under our management. Our box is an OpenBSD 4.7 i386. We have configured the vpn as follows: /etc/rc.conf.local ipsec=YES isakmpd_flags=-K -v

Re: ipsec vpn unexpected flow

2010-11-26 Thread Andrea Parazzini
On Fri, 26 Nov 2010 10:32:59 +0330, Bahador NazariFard bahador.nazarif...@gmail.com wrote: On Fri, Nov 26, 2010 at 8:50 AM, Andrea Parazzini a.parazz...@sirtisistemi.net wrote: Hi, from 10.1.0.0/16 is the network id that I would negotiate with the remote peer. (0.0.0.0/0) is our real

Re: ipsec vpn unexpected flow

2010-11-26 Thread Andrea Parazzini
On Fri, 26 Nov 2010 12:58:09 + (UTC), Stuart Henderson s...@spacehopper.org wrote: On 2010-11-25, Andrea Parazzini a.parazz...@sirtisistemi.net wrote: As you can see there is a flow that is not configured on our box. It is probably configured on the remote peer. Is a normal behavior

ipsec vpn unexpected flow

2010-11-25 Thread Andrea Parazzini
Hi, we have a vpn connection with a customer. The remote peer is not under our management. Our box is an OpenBSD 4.7 i386. We have configured the vpn as follows: /etc/rc.conf.local ipsec=YES isakmpd_flags=-K -v /etc/ipsec.conf ike active esp tunnel \ from 10.1.0.0/16 (0.0.0.0/0) to

Re: ipsec vpn unexpected flow

2010-11-25 Thread Andrea Parazzini
traffic in the tunnel?3. is nat allowed in the tunnel? 4. you may have let in more networks than you realize -damon --- On Thu, 11/25/10, Andrea Parazzini a.parazz...@sirtisistemi.net wrote: From: Andrea Parazzini a.parazz...@sirtisistemi.net Subject: ipsec vpn unexpected flow To: misc

Re: Any good/bad experiences on OpenBSD4.6-release Dell R(2|4|6)10 or HP DL320 G6

2010-01-16 Thread Andrea Parazzini
wrote: On 2010-01-16, Andrea Parazzini a.parazz...@sirtisistemi.net wrote: The controller Dell SAS6IR does not have cache. the disks have write cache, though; the controller probably disables this unless you tell it otherwise, http://kerneltrap.org/mailarchive/openbsd-tech/2008/5/5/1725504 I

Re: Any good/bad experiences on OpenBSD4.6-release Dell R(2|4|6)10 or HP DL320 G6

2010-01-15 Thread Andrea Parazzini
to enable that by default. On Thu, Jan 14, 2010 at 11:46:18PM +0100, Andrea Parazzini wrote: We have some Dell R610 and they do not work very well with OpenBSD: - very bad disk performance, perhaps the mpi(4) driver. - the optional Intel PRO/1000 QP does not work well (see my previous post

Re: Any good/bad experiences on OpenBSD4.6-release Dell R(2|4|6)10 or HP DL320 G6

2010-01-14 Thread Andrea Parazzini
We have some Dell R610 and they do not work very well with OpenBSD: - very bad disk performance, perhaps the mpi(4) driver. - the optional Intel PRO/1000 QP does not work well (see my previous post). - amd64 version does not work. I have not tried the latest snapshots. Regards, Andrea On Tue,

Intel PRO/1000 QP

2009-11-18 Thread Andrea Parazzini
Hi, we have a Dell PowerEdge R610 with two Intel PRO/1000 QP cards connected to a Cisco 2960G switch. Each card has four giga interfaces, but only two interfaces per card work properly. Works only the first and third interface of each card. The other interfaces do not negotiate the correct speed.

iwi(4) does not work with latest snapshot

2008-07-29 Thread Andrea Parazzini
Hi misc, iwi(4) does not work, it worked well with 4.3: iwi0: timeout waiting for ucode to initialize iwi0: could not load microcode iwi0: fatal firmware error iwi0: timeout waiting for firmware initialization to complete iwi0: could not load main firmware Regards, Andrea Parazzini OpenBSD 4.4

Re: bnx tcp offload

2007-09-05 Thread A . Parazzini
You can disable the broadcom TOE removing the key on the motherboard. http://support.euro.dell.com/support/edocs/systems/pe2950/en/hom/html/jumpers .htm#wp1054670 Ciao. Andrea Renaud Allard [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 05/09/2007 09.45 To misc@openbsd.org cc Subject bnx tcp

bnx and vlan

2007-04-19 Thread Andrea Parazzini
/1000baseT PHY, rev. 6 tcpdump shows something like 10:55:40.124521 802.1Q vid 512 pri 1 cfi arp who-has 10:55:40.124841 802.1Q vid 768 pri 1 cfi arp who-has 10:55:40.133313 802.1Q vid 1024 pri 3 CARPv2-advertise 36: vlan id don't match the switch vlan id Thanks. Regards, Andrea Parazzini

Re: Dell 1950 under OpenBSD

2007-04-02 Thread A . Parazzini
[EMAIL PROTECTED] wrote: - To: openbsd misc misc@openbsd.org From: carlopmart [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] Date: 02/04/2007 12:36PM Subject: Dell 1950 under OpenBSD Hi all, Somebody have test it this Dell server under OpenBSD 4.0? this server use SAS or SATA disk with PERC

Re: VPN stability issues with a Fortigate peer

2006-12-07 Thread A . Parazzini
Hi, IPSEC.CONF(5) says tell about ike dynamic: The dynamic mode will additionally enable Dead Peer Detection (DPD) In your ipsec.conf I see aggressive auth, but the manual says nothing about. It doesn't work for me. Regards, Andrea [EMAIL PROTECTED] wrote: - To: misc@openbsd.org From:

Re: VPN stability issues with a Fortigate peer

2006-12-06 Thread A . Parazzini
Hi, try to disable DPD. I have a tunnel between OpenBSD 4.0 and Fortigate 300A 3.00MR3 and it doesn't work well with DPD enabled. Regards, Andrea. [EMAIL PROTECTED] wrote: - To: misc@openbsd.org From: Chris Jones [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] Date: 06/12/2006 04:35PM

Re: Change a FR keyboard into a US one

2006-08-21 Thread A . Parazzini
You could try with /sbin/kbd us and then edit /etc/kbdtype. Regards, Andrea Hello, I have a US keyboard but the french one is loaded instead the US. I tape a I have a q and so on. I have used the following command, as root: #wsconsctl -w keyboard.encoding=us but the keyboard remains a fr

stop icmp6 traffic

2005-12-09 Thread A . Parazzini
Hi all, my i386 3.8 box generates this kind of traffic: :: ff02::1:ff96:b73f: icmp6: neighbor sol: who has fe80::260:97ff:fe96:b73f fe80::260:97ff:fe96:b73f ff02::1:ff96:b73f: HBH icmp6: multicast listener report max resp delay: 0 addr: ff02::1:ff96:b73f [hlim 1] fe80::260:97ff:fe96:b73f

Solved: stop icmp6 traffic

2005-12-09 Thread A . Parazzini
[EMAIL PROTECTED] wrote: - Hi all, my i386 3.8 box generates this kind of traffic: :: ff02::1:ff96:b73f: icmp6: neighbor sol: who has fe80::260:97ff:fe96:b73f fe80::260:97ff:fe96:b73f ff02::1:ff96:b73f: HBH icmp6: multicast listener report max resp delay: 0 addr: ff02::1:ff96:b73f [hlim