Re: removing a pesky file

2009-05-14 Thread Prabhu Gurumurthy
why can't you use ls -i, find the inode, and do find . -inum INODENUM -exec rm {} \; is it a list of file that you want to remove put all the files in a text file and do a for loop. HTH! Prabhu - On May 14, 2009, at 5:47 PM, Ryan Flannery wrote: I've been in similar situations

Re: Intel quad port PRO/1000QP 82575GB chipset

2008-10-24 Thread Prabhu Gurumurthy
10/100/1000baseT PHY, rev. 6 On Oct 23, 2008, at 4:30 PM, Chris Kuethe wrote: On Thu, Oct 23, 2008 at 4:14 PM, Prabhu Gurumurthy [EMAIL PROTECTED] wrote: I installed 4.4 (current) on Dell 2950, dmesg at the bottom, I am having trouble seeing the Intel quad port PRO/1000 QP card in OpenBSD

Intel quad port PRO/1000QP 82575GB chipset

2008-10-23 Thread Prabhu Gurumurthy
I installed 4.4 (current) on Dell 2950, dmesg at the bottom, I am having trouble seeing the Intel quad port PRO/1000 QP card in OpenBSD. When I look into /usr/src/sys/dev/pci/{pcidevs, pcidevs.h} I see that the chipset is listed, Does it require a firmware of some sort, because em(4) does

NAT/PAT over IPsec (enc0 interface)

2008-10-07 Thread Prabhu Gurumurthy
All - How can I do NAT/PAT over IPsec. To explain more. I have 4 hosts in 2 different networks (10.200.0/22 and 10.57.132/24). They are 10.57.132.18, 10.57.132.24, 10.57.132.41 and 10.200.1.208. When these hosts access 10.200.200/24, 10.200.136/24, 10.200.205/24 and 10.200.132/24 I want

Re: OSPFd and ipsec routes

2008-09-25 Thread Prabhu Gurumurthy
May be use redistribute static from ospfd, but I dont think there is a way for doing it automatically. hope this helps! Prabhu - On Sep 25, 2008, at 10:32 AM, B A wrote: Hello! Can ospfd redistribute routes in Encap table `netstat -nr -f encap` ? Are they considering static? There is no

Re: make ls not show dot-files as root

2008-07-28 Thread Prabhu Gurumurthy
man ls shows -A option is implicit when using as root. So in short it would be no. On Jul 28, 2008, at 3:33 PM, Jesus Sanchez wrote: Hi, using 4.2. Just for curiosity... Can I make ls to NOT show the hidden files (.xinitrc , .vimrc, etc) when using as Root?? Thanks 4 all.

blackholed route on 4.3 (stable, generic)

2008-06-30 Thread Prabhu Gurumurthy
I have got a weird problem with my network setup. I have a pair of identical OpenBSD 4.3 (stable, GENERIC) boxes running in Active/Standby failover using carp, pfsync and sasyncd uname: OpenBSD nitehawk.contoso.com 4.3 GENERIC#698 i386 The CARP boxes external interface (bge0) are:

Re: isakmpd -- NCP IPsec client: peer proposed invalid phase 2 IDs

2008-06-27 Thread Prabhu Gurumurthy
I do not know whether Windows XP native IPsec stack supports AES, I know it only supports upto 3des. With OpenBSD, the default is AES (128), that is why IKE is giving you NO_PROPOSAL_CHOSEN. Change you settings to include 3des and sha1 (or md5 may be) and you would get quick mode working.

ipsec.conf question

2008-05-05 Thread Prabhu Gurumurthy
All, I have a question regarding ipsec.conf. Example: IPsec peers: 3.3.3.3, 3.3.3.2 Interesting traffic: 1.1.1.1 - 192.168.100.2 2.2.2.2 - 192.168.100.0/24 Main/Quick mode crypto/groups being: aes, sha1 and group2 PSK being test123 How can I define the above concisely?

Re: Bind stopped Listening on UDP port suddenly in 4.2

2008-04-29 Thread Prabhu Gurumurthy
Siju George wrote: Hi, I was using the Internet and name resolution suddenly stopped. When I checked I found out = $ netstat -an |grep 53 tcp0 0 127.0.0.1.953 *.*LISTEN tcp0 0 59.93.35.248.53

ICMP6 message size

2008-01-22 Thread Prabhu Gurumurthy
Hi all, I have two hosts, one in OpenBSD 4.2 (stable) and another is Redhat ESv4u4 When I ping (ipv6) from OpenBSD to Redhat with custom size for icmp6 (-s option), I cannot go past 8184, 8185 and above give me an error EMSGSIZE. Whereas pinging from Redhat to OpenBSD I can go beyond 8184,

OSPF and CARP question

2007-12-12 Thread Prabhu Gurumurthy
All - This is going to be a lengthy email, Sorry about that, I have question about running CARP + OSPF, I looked at all the email pertaining to it on marc.info website? Network scenario: I have an ethernet segment (172.21.171.0/24) Cisco 1760 (.1), Cisco 2621(.4), Dell PowerConnect(.2),

Re: OpenBSD isakmpd and pf vs Cisco PIX or ASA

2007-11-07 Thread Prabhu Gurumurthy
Brian A Seklecki (Mobile) wrote: On Mon, 2007-11-05 at 07:23 +0100, Martin Toft wrote: On Mon, Nov 05, 2007 at 01:29:05AM +0100, Cabillot Julien wrote: Have you try openbsd 4.2 ? PF have been really improved in this release. pf(4) has nothing to do with isakmpd(8), except as it relates to

Re: problem with ipsec tunnel between pix and openbsd

2007-09-10 Thread Prabhu Gurumurthy
Sebastian Reitenbach wrote: Hi, I setup a tunnel between a pix and an openbsd isakmpd to connect two networks behind each tunnel endpoint. pinging through the tunnel from both sides works, for the first 15 minutes. then the ping stops working. When I recreate the tunnel, then the ping starts

Re: ipsec slave

2007-04-30 Thread Prabhu Gurumurthy
Steven Surdock wrote: Can anyone provide some insight as to the correct configuration of a sasyncd slave server with respect to /etc/rc.conf.local? For example, is the following correct? --- ntpd_flags= # enabled during install sasyncd_flags=# for normal use:

Re: Problems with second ipsec(ctl) tunnel

2007-04-23 Thread Prabhu Gurumurthy
Steven Surdock wrote: Greetings, I recently converted from isakmpd.conf to ipsec.conf and I seem to be having problem bringing up a second tunnel to a PIX. It _appears_ that the OBSD side is trying to use the default hmac (sha2_256) even though it is configured to use md5 for the second tunnel.

Re: Problems with second ipsec(ctl) tunnel

2007-04-23 Thread Prabhu Gurumurthy
Steven Surdock wrote: Prabhu Gurumurthy wrote: Steven Surdock wrote: ... I too have the same problem. I have a Lan 2 Lan tunnel with pfsync, carp, sasync and it works flawlessly with another OpenBSD system as the peer. I tried to enable OpenBSD to PIX tunnel (PIX 501, OS: 6.3(5)) I defined

Re: Problems with second ipsec(ctl) tunnel

2007-04-23 Thread Prabhu Gurumurthy
Steven Surdock wrote: Prabhu Gurumurthy wrote: Steven Surdock wrote: Prabhu Gurumurthy wrote: Steven Surdock wrote: ... Yes, thanks but that was a typo.. sorry for the confusion, still the tunnel does not come up. What does your ACL VPN_ACL look like? How about the output from a debug

IPSec OSPF

2007-04-19 Thread Prabhu Gurumurthy
All - Scenario: We have two OpenBSD firewalls/VPN gateways working in failover mode using pf, pfsync, carp and sasync. The firewalls on their inside network is connected to a Cisco router which is connected back to the main corp network using a P2P serial connections (two bonded T1s). The

Re: Symbolic link insecure?

2006-12-01 Thread Prabhu Gurumurthy
Heinrich Rebehn wrote: Hi list, i am getting a daily insecurity report from my system system saying: ## Checking special files and directories. Output format is: filename: criteria (shouldbe, reallyis) etc/pf.conf: type

Re: ksh .profile not evaluated using screen, xterm or subshells

2006-10-16 Thread Prabhu Gurumurthy
Bruno Carnazzi wrote: Hi misc, I export/alias some important stuff in my ksh .profile. It works normally, but since I run screen or xterm, my .profile is not evaluated (or even if I launch a sub-shell). I know there is a difference between login shell and sub shell but how can I have some

ipsecctl parser behavior on OpenBSD 4.0 running generic kernel#1137

2006-10-11 Thread Prabhu Gurumurthy
I wanted to test ipsec.conf before loading it and I noticed this odd behavior. pgurumur-vm-openbsd (OpenBSD): [~/working/networking/docs] 10.200.0.46: [570]$ cat ipsec.conf remote_gw = 192.168.0.1 remote_net = { 10.0.100.0/22, 10.0.2/24 } local_net = { 172.16.18.0/26 } ike esp from $local_net

OpenNTPD Question/Problem on OpenBSD 3.9 (stable) GENERIC #617 kernel

2006-10-03 Thread Prabhu Gurumurthy
All - This is going to be a long email. My apologies for that! I have a question regarding performance of OpenNTPD vs generic/DaveMills NTPD. Setup: 1. We have 3 machines in our DMZ which act as our primary NTP servers. 2. We have close to 8 machines in our Intranet which act as secondary

Re: Active Directory authentication

2006-08-16 Thread Prabhu Gurumurthy
Steve Shockley wrote: Prabhu Gurumurthy wrote: How about using login_radius feature by modifying login.conf to add a new radius profile and authenticate against a RADIUS server. You can compile freeradius and have rad_ldap plugin on the RADIUS server to authenticate against AD

Re: Active Directory authentication

2006-08-15 Thread Prabhu Gurumurthy
Steve Shockley wrote: I'm researching setting up a wireless gateway using OpenBSD and authpf. We've got an existing Active Directory (2003) domain with about 5000 user accounts that I'd like to authenticate against. LDAP seemed like the obvious choice, but it appears I need to create local

Re: Why ksh?

2006-07-21 Thread Prabhu Gurumurthy
Pedro Timsteo wrote: Speaking of ksh, is there any way to configure it to clear the screen with CTRL+L, as bash does? Thanks. Was in the mailing list before I guess, but you can bind it (being Ctrl-L) on your .profile or .kshrc, bind -m '^L'=clear^M

Re: pf on loopback interfaces?

2006-01-23 Thread Prabhu Gurumurthy
If I understand correctly, pf will see packets on all interfaces by default unless you specify set skip on lo { which tells pf to skip seeing packets on the specified interface, in this case loopback } - Prabhu Christian Weisgerber wrote: Say I create a loopback interface lo1 lo1: