Re: Unable to reach server in dmz. Whats wrong?

2006-01-10 Thread Abraham Al-Saleh
On 1/10/06, Jonas Lindskog [EMAIL PROTECTED] wrote: Hello, We are using OpenBSD 3.8 as a firewall/router. We have two internal nets; one with workstations (NAT) and one DMZ with a single server. And thus we have three network interfaces installed in the router: one for the NAT, one for the

Re: dhcpd and static entries

2005-12-12 Thread Abraham Al-Saleh
On 12/12/05, Peter Hessler [EMAIL PROTECTED] wrote: This is with -current dhcpd within the last month. On Mon, 12 Dec 2005 12:15:37 -0800 Peter Hessler [EMAIL PROTECTED] wrote: : I have a dhcp'd network, with static entries for a ton of machines. : The problem is that the range is for .10

Re: dhcpd and static entries

2005-12-12 Thread Abraham Al-Saleh
On 12/12/05, Peter Hessler [EMAIL PROTECTED] wrote: On Mon, 12 Dec 2005 13:59:23 -0700 Abraham Al-Saleh [EMAIL PROTECTED] wrote: : On 12/12/05, Peter Hessler [EMAIL PROTECTED] wrote: : : : : Moving the static entries to outside the range is unfeasable right : : now. And it doesn't

Re: dhcp overwriting resolv.conf

2005-10-25 Thread Abraham Al-Saleh
On 10/25/05, Chris Smith [EMAIL PROTECTED] wrote: Hello, Running 3.8, 2 nics, 1 statically assigned, and the other using dhcp. Problem is that resolv.conf is always overwritten. Using resolv.conf.tail doesn't help as the information is just tacked on at the end of the dhcp supplied

Re: Two Isp Fault Tollerance Help

2005-10-07 Thread Abraham Al-Saleh
On 10/7/05, Olivier Mehani [EMAIL PROTECTED] wrote: On Fri, 7 Oct 2005 14:29:08 +0200 Johan M:son Lindman [EMAIL PROTECTED] wrote: One of my clients has got an Internet connection with a no much affidable provider. He reports continual disconnection and so on. I would like to do a

Re: is there a way to block sshd trolling?

2005-09-23 Thread Abraham Al-Saleh
You could use connection throttling, it won't eliminate them, but it will make it take longer. If you don't need ssh on that host (although, you probably do, I'd be lost without it) disable it. You could bind sshd to a different port, and disable port 22 (most of these attacks are automated bots).

Re: is there a way to block sshd trolling?

2005-09-23 Thread Abraham Al-Saleh
just to add my $0.02. The best they could hope for would be disallowing your default gateway from connecting to your ssh server... whoop-de-doo. On 9/23/05, Wolfgang S. Rupprecht [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] writes: My only question is what if I traceroute to you, find out the

Re: OpenBSD website Design.

2005-09-08 Thread Abraham Al-Saleh
The current one is great. Functional and easy to use, much like the OS itself. No reason to fix it if it's not broken. On 9/7/05, Siju George [EMAIL PROTECTED] wrote: Hi, One of my friends sent me this new OpenBSD website design he created. Please have a look at it :-D

Re: Lifecycle question

2005-09-06 Thread Abraham Al-Saleh
On 9/5/05, Stephan A. Rickauer [EMAIL PROTECTED] wrote: Ramiro Aceves schrieb: I like and use both systems. But If you are concerned about easy upgrading, I would recommend Debian GNU/Linux (no flamewars please ;-) ). It is a very stable system that it is upgraded slowly, about 2 years

Re: via S3 Unichrome, anyone ? ;)

2005-09-01 Thread Abraham Al-Saleh
The problem with the unichrome is that stock xorg identifies it (correctly) as a via, but it does not support it's specific chipset. The unichrome.sf.net http://unichrome.sf.net project has patches for XF86 and Xorg that fix this, but you will have to recompile xorg for it to work. It should work,

Re: Help!

2005-08-29 Thread Abraham Al-Saleh
You've not indicated which kernel you used (it should be bsd.mp), nor have you included a dmesg so that the more experienced users can help you with your problem, if indeed there is one. Also, I understand that English is probably not your native language, but I'm having a little trouble

Re: Help!

2005-08-29 Thread Abraham Al-Saleh
On 8/29/05, MySHOP [EMAIL PROTECTED] wrote: Hi Abraham Al-Saleh , I am use OpenBSD 3.7 for test computer. My computer with P4 - HT cpu like 2 CPUs . It find in some linux or windows with 2 CPU. and my home computer P4 Not HT = 1CPU only How can make OpenBSD support 2 CPU

Re: NAT doesn't appear to work for some websites

2005-08-14 Thread Abraham Al-Saleh
On 8/14/05, Matt Garman [EMAIL PROTECTED] wrote: I have a number of websites that I cannot load from machines connected to the 'net through my OpenBSD firewall/NAT box. One such site is directron.com. Using Mozilla Firefox, it will just say Waiting for directron.com... but the page never

Re: syslogd udp port

2005-08-05 Thread Abraham Al-Saleh
On 8/5/05, poncenby [EMAIL PROTECTED] wrote: Firstly I never said mentioned the word security, so I don't know where Tobias got that from. I apologise once again for not searching the archives and reading the man pages. May I suggest some tolerance(doesn't have to be sincere) for people

Re: Soekris OBSD as servers

2005-08-05 Thread Abraham Al-Saleh
On 8/4/05, Gustavo Rios [EMAIL PROTECTED] wrote: On 8/5/05, Scott Francis [EMAIL PROTECTED] wrote: On 8/4/05, Gustavo Rios [EMAIL PROTECTED] wrote: I would like to set a obsd and soekris boxes as a server for about 100 users. This box is supposed to handle NIS + Kerberos. Does

Re: Load Balance net connections w/ redirect

2005-07-18 Thread Abraham Al-Saleh
On 7/18/05, James Harless [EMAIL PROTECTED] wrote: Well, my objective is to have fail-over on the outbound connections, primarily. The load-balancing comes about because of that. Load-balancing is definitely not a requirement for this site and I probably should have worded my email a bit

Re: Theo gave an interview to Forbes Mag. about Linux

2005-06-17 Thread Abraham Al-Saleh
I'm actually curious as to the apparent change of stance between interviews. In the last two interviews I've read, you've made it clear that you've never used it, and had no comment. Am I missing something? Just curious. On 6/17/05, Theo de Raadt [EMAIL PROTECTED] wrote: On Fri, Jun 17, 2005

Re: interface groups and pf

2005-06-16 Thread Abraham Al-Saleh
Marvelous work. Thank you. :)

Re: subversion port 3.7 problem

2005-05-25 Thread Abraham Al-Saleh
use the package, I was able to successfully install it on my openbsd workstation. On 5/25/05, Price, Joe [EMAIL PROTECTED] wrote: Hi, when I try to build subversion on 3.7 i386 I get: [] main.o -c /usr/ports/devel/subversion/w-subversion-1.1.3p0/subversion-

Re: Bandwidth loss

2005-05-14 Thread Abraham Al-Saleh
I had a similar problem a month or so back, I have a 4 Mb/s cable connection, and I could only get about 200 Kb/s. I switched my nics out, changed the tcp receive window size, etc, but nothing worked. I was running 3.6, so I installed a fresh 3.7 snapshot, and haven't had a problem since. So, if

Re: beginner, intermediate, and advanced scripting

2005-05-14 Thread Abraham Al-Saleh
It's a good scripting language because of how well regular expressions are integrated into the language. It's also easy to pick up and use, because it's pretty lenient in specific syntax. I can't recommend a book though, as most of what I know of perl has been from reading other peoples scripts

Re: exposing an internal server to the Internet

2005-05-14 Thread Abraham Al-Saleh
detailed docs or examples how to use it. If you have time to provide me some directions to this? Thanks for your support George On Saturday 14 May 2005 23:46, Abraham Al-Saleh wrote: Use binat. From man (5) pf.conf: binat A binat rule specifies a bidirectional mapping between

Openbgpd routing for redundancy.

2005-05-06 Thread Abraham Al-Saleh
Alright, before I go to far, I'm going to present what I know, what I need, and what I've read so far. We had a recent scare at my company, we lost conectivity with our isp for about ten minutes because of a glitch. Due to the nature of our company, we have to have 100% uptime, and our SLA

Re: Openbgpd routing for redundancy.

2005-05-06 Thread Abraham Al-Saleh
eric wrote: On Fri, 2005-05-06 at 14:35:09 -0600, Abraham Al-Saleh proclaimed... Alright, before I go to far, I'm going to present what I know, what I need, and what I've read so far. We had a recent scare at my company, we lost conectivity with our isp for about ten minutes because of a glitch

Re: Openbgpd routing for redundancy.

2005-05-06 Thread Abraham Al-Saleh
eric wrote: On Fri, 2005-05-06 at 14:54:31 -0600, Abraham Al-Saleh proclaimed... We have a backup generator that will run for five days and can be refilled while in operation, as well as dual matrix 5000 UPS'. We're working on an online medical prescribing and patient management solution

Re: Openbgpd routing for redundancy.

2005-05-06 Thread Abraham Al-Saleh
Stuart Henderson wrote: --On 06 May 2005 14:35 -0600, Abraham Al-Saleh wrote: uptime, and our SLA only guarantees us 99.999%. So, I'm currently You sometimes find that SLA means something like we'll charge you more so that when things break, we can pay some of it back... talking with several

Re: Openbgpd routing for redundancy.

2005-05-06 Thread Abraham Al-Saleh
L. V. Lammert wrote: On Fri, 6 May 2005, Abraham Al-Saleh wrote: Yes, there's only so much I can do to keep everything redundant at present, something that will change later when we have sufficient money, a big concern is that someone might dig out our local loop with a back hoe, nothing I can do

Re: Will different CPU and RAM matter?

2005-05-05 Thread Abraham Al-Saleh
. But it doesn't matter, because they're both i386. -- Cordially, Abraham Al-Saleh Systems Administrator CaduRx