Re: OpenBGPD prepend-self/neighbor question

2011-07-07 Thread peter dunaskin
Yet my upstream still prefers core2a as correct route to our network. I noticed, that only core2a networks have announced flag, is that right? Any other ideas what could be wrong? If you look at the Loc-Rib aka 'bgpctl show rib 194.143.152.1 all' it will show you that there are two networks

Re: OpenBGPD prepend-self/neighbor question

2011-07-06 Thread peter dunaskin
A) look at bgpd -nv output and check if the filter rules make sense. They look fine, only filter rules on core2b are affected and they look like this: match from 159.148.214.101 set { prepend-neighbor 3 } match to 159.148.214.101 set { prepend-self 3 } deny from any allow from any

Re: OpenBGPD prepend-self/neighbor question

2011-07-06 Thread peter dunaskin
# core2a: flags: * = Valid, = Selected, I = via IBGP, A = Announced origin: i = IGP, e = EGP, ? = Incomplete flags destination gateway lpref med aspath origin AI* 194.143.152.0/230.0.0.0100 0 21178 i # core2b: flags: * = Valid, = Selected, I =

OpenBGPD prepend-self/neighbor question

2011-07-05 Thread peter dunaskin
Hello, I'm having hard time figuring out what's wrong with my or my upstream setup. I have set up 2 BGP routers, each with its own session to the same upstream BGP router. Primary router has pretty much default settings for upstream router and IBGP session with secondary router. Secondary router

Re: OpenBGPD prepend-self/neighbor question

2011-07-05 Thread peter dunaskin
What am I missing here? A) look at bgpd -nv output and check if the filter rules make sense. They look fine, only filter rules on core2b are affected and they look like this: match from 159.148.214.101 set { prepend-neighbor 3 } match to 159.148.214.101 set { prepend-self 3 } deny from any

OpenBGP on CARP

2009-09-29 Thread peter dunaskin
Hello, I'm trying to implement CARP on our edge BGP OpenBSD routers. CARP itself seems to be working perfectly but I'm having problems figuring out how to propertly configure BGP. I have couple of external IP's on my network, so limited number of them is not an issue (as it's often with internet

Re: jails in openbsd

2007-03-01 Thread peter dunaskin
Hello, I'd like to look at some virtualization options for openbsd. The ultimate goal would be to get several isolated Debian systems running inside some kind of enironment for virtualization. Can you point me to an openbsd package, port or source code for the freebsd jail or an equivalent? You

Re: ssh local aliases in known_hosts

2007-02-21 Thread peter dunaskin
i was wondering if it was possible to use known_hosts for some kind of local alias database. That's what ~/.ssh/config file is for, for example: -- Host box HostName 111.222.333.444 Host box2 HostName some.domain.name -- p.

Re: problem with spamd-white table and greylisting

2006-12-07 Thread peter dunaskin
# - # FILTER SETTINGS: set block-policy drop set skip on lo0 set loginterface $ext_if set limit table-entries 25 A guess: the table-entries limits the total table entries 183469+70604 is larger than 25. You're right, limiting

Re: problem with spamd-white table and greylisting

2006-12-06 Thread peter dunaskin
You forgot spamlogd I did not, it starts automatically when spamd_grey is enabled in Oh. Sorry. I didn's see it in your ps grep. I see it with the same ps grep on my system. dumbcat[root]# ps aux | grep spamd _spamd 14450 0.0 0.1 9040 1376 ?? IsTue12AM1:53.41 spamd: (pf

Re: problem with spamd-white table and greylisting

2006-12-06 Thread peter dunaskin
What could be wrong? What have I been missing? probably a pf rules thing, (not logging port 25 connections, etc.) This is content of my pf.conf: # - # TABLES AND VARIABLES: ext_if=rl0 table spamd persist table spamd-white persist #

Re: problem with spamd-white table and greylisting

2006-12-06 Thread peter dunaskin
I don't see anything obvious, other than if you have somehow broken your system to pfctl can't add the addreses to the table. try pfctl -tspamd-white -Tadd 111.111.111.111 pfctl -tspamd-white -Tshow Do you see the address addeed to the table when you do it manually? I do: -- #

problem with spamd-white table and greylisting

2006-12-05 Thread peter dunaskin
Hello, I'm having some weird problem with spamd in greylisting mode. The problem is that spamd-white table stays empty all the time. I've reread the manpages for a few times now and I have other spamd setup running on other mailserver (3.9 though) like a charm without any problems with pretty

splitting one AS between two physical locations

2006-09-28 Thread peter dunaskin
Hello, We're a small ISP working on redesigning our network's topology and the overall architecture before replacing the existing infrastructure, which happens to be different variations of low cost router-boards running Linux. The ultimate goal thus being to run OpenBSD wherever we can. A job