Re: PF: 3 NICS. 1 WAN, 2 LAN. How to manage each LAN open ports individually?

2009-07-26 Thread patrick keshishian
On Sat, Jul 25, 2009 at 9:23 PM, Jason Dixonja...@dixongroup.net wrote: On Sat, Jul 25, 2009 at 09:41:45PM -0500, Andres Salazar wrote: Hello OpenBSD-misc, I have a newbie question in pf that Ive been trying to debug on what would be wrong with my ruleset. Iam trying to have the users that

Re: PF: 3 NICS. 1 WAN, 2 LAN. How to manage each LAN open ports individually?

2009-07-26 Thread Jason Dixon
On Sun, Jul 26, 2009 at 12:58:08AM -0500, Andres Salazar wrote: I apologize that my ruleset isnt very clear. Iam trying to put together a ruleset that will allow the following access: Outbound port 80 (web) 53 (domain) from users at $int_if via $ext_if Outbound port 80 (web) 53 (domain)

Re: PF: 3 NICS. 1 WAN, 2 LAN. How to manage each LAN open ports individually?

2009-07-26 Thread Andres Salazar
I apologize that my ruleset isnt very clear. Iam trying to put together a ruleset that will allow the following access: Outbound port 80 (web) 53 (domain) from users at $int_if via $ext_if Outbound port 80 (web) 53 (domain) 443 (ssl) 22 (ssh) from $int_if2 via $ext_if Thank you for the help.

Re: Unexpected port change inside STUN packet

2009-07-26 Thread John Blaze
Amazing, I can't believe it was something so simple. Thank you both for the response, now the PS3 is working as it should On 7/25/09, TorbjC8rn H. Orskaug torbjorn.orsk...@gmail.com wrote: I had this issue with my PS3 aswell. Adding a rule like nat on $ext_if from $ps3 to any - ($ext_if)

Invitation from schnudel com

2009-07-26 Thread rhd
www.schnudel.com Invitation Schnudel.com is the brain child of technical divers who had way too much time on their hands during deco stops. With thousands of classifieds web sites, mostly local, all around the world, how can we reach the global community? With this question in mind, we have

Re: Sun Sparc64 problems

2009-07-26 Thread Duncan Patton a Campbell
So as it turns out, Sparc64 IDE circuitry behaves a little different than PC IDE (I've only used sbus sparcs b4). You can install the software, and mount the disk with the IDE Slave/Master/CableSelect set WRONG, but you cannot boot it. Hm. Dhu On Sat, 25 Jul 2009 18:44:18 -0600 Duncan

Re: man pages conflict or clarification for mount_vnd, newfs and man 5 disklabel

2009-07-26 Thread Kenneth R Westerback
On Sun, Jul 26, 2009 at 04:44:45AM +1100, leon zadorin wrote: Man page for mount_vnd states: The `c' partition of a vnd image should not be used. When a superblock becomes damaged, fsck_ffs(8) needs information contained in the disklabel to determine the location of alternate

Re: Unexpected port change inside STUN packet

2009-07-26 Thread Daniel Melameth
I use something similar, but it appears this is only required for UDP packets: nat on $ext_pppoe_if proto udp from $ps3 to ! $ext_ether_if:network - \ ( $ext_pppoe_if ) static-port 2009/7/25 John Blaze ssjkakar...@gmail.com: Amazing, I can't believe it was something so simple. Thank

Re: PF: 3 NICS. 1 WAN, 2 LAN. How to manage each LAN open ports individually?

2009-07-26 Thread Andres Salazar
Thank you for the help, I believe that I already tried something similar and could not access the internet behind $int_if, ot $int_if2. Traffic is getting blocked by block all as per the following pflog1: Jul 26 05:11:51.250502 rule 0/(match) block out on re1: 192.168.1.2.55533 190.40.3.10.53:

Re: PF: 3 NICS. 1 WAN, 2 LAN. How to manage each LAN open ports individually?

2009-07-26 Thread Jason Dixon
On Sun, Jul 26, 2009 at 12:14:53PM -0500, Andres Salazar wrote: Thank you for the help, I believe that I already tried something similar and could not access the internet behind $int_if, ot $int_if2. Traffic is getting blocked by block all as per the following pflog1: Jul 26 05:11:51.250502

Re: PF: 3 NICS. 1 WAN, 2 LAN. How to manage each LAN open ports individually?

2009-07-26 Thread Andres Salazar
Hello Jason, I understood the purpose of allowing internet access for the firewall itself. However this is exactly where Iam still stuck. By doing this after our default block all: pass out on $ext_if inet proto { tcp udp } from ($ext_if) to any \ port { 53 80 22 443 } Iam actually

rplay dependency unsatisfied : cannot install

2009-07-26 Thread Jean-François SIMON
Hi, The following happens. gsm seems to have been removed due to liscence. Please let me know how to proceed ? I need audio with fvwm which rplay seems to be able to provide with minimal resources as in my case. quote $ sudo pkg add rplay-3.3.2p1.tgz Can't find gsm-1.0.10p0 /usr/sbin/pkg_add:

Re: Microsoft mouse, ums and wsmouse

2009-07-26 Thread Miod Vallat
Hello, I am new to OpenBSD and I was giving it a try by installing in my laptop. My problem is that my usb wireless mouse does not work on X or with wsmoused. From a message standpoint, everything seem normal. I got from dmesg: uhidev0 at uhub4 port 2 configuration 1 interface 0 Microsoft

Re: PF: 3 NICS. 1 WAN, 2 LAN. How to manage each LAN open ports individually?

2009-07-26 Thread Andres Salazar
Hello Patrick, I also tried your approach, but at the end it behaves the same. Without the pass out i dont have internet in any of the two interfaces, with it then I just have totally opened ports on both of the interfaces. The restrictive port rules are being ignored. Any help is much

Re: rplay dependency unsatisfied : cannot install

2009-07-26 Thread Josh Grosse
On Sun, Jul 26, 2009 at 11:38:25PM +0200, Jean-Fran?ois SIMON wrote: Hi, The following happens. gsm seems to have been removed due to liscence. Please let me know how to proceed ? I need audio with fvwm which rplay seems to be able to provide with minimal resources as in my case. At

Re: PF: 3 NICS. 1 WAN, 2 LAN. How to manage each LAN open ports individually?

2009-07-26 Thread Jason Dixon
On Sun, Jul 26, 2009 at 01:16:02PM -0500, Andres Salazar wrote: Hello Jason, I understood the purpose of allowing internet access for the firewall itself. However this is exactly where Iam still stuck. By doing this after our default block all: pass out on $ext_if inet proto { tcp udp }

locale en_US.ASCII?

2009-07-26 Thread Geoff
If this has been discussed somewhere before, just tell me where to search - it doesn't come up in the archives of the misc, etc. mailing lists... Because I work from a number of locations and computers which have inconsistent ideas of what UTF-8, ISO8859-1, etc. mean for character codes above

usr.bin/aucat fails to build on sparc64 -current

2009-07-26 Thread Brian Keefer
# make cc -O2 -pipe -DDEBUG -Wall -Wstrict-prototypes -Wundef -c /usr/src/ usr.bin/aucat/aucat.c cc -O2 -pipe -DDEBUG -Wall -Wstrict-prototypes -Wundef -c /usr/src/ usr.bin/aucat/abuf.c cc -O2 -pipe -DDEBUG -Wall -Wstrict-prototypes -Wundef -c /usr/src/ usr.bin/aucat/aparams.c cc -O2

Curso a Distancia:Administración de la Empresa Agropecuaria 10/8/09

2009-07-26 Thread egea - SRA
[IMAGE] [IMAGE] [IMAGE] La Sociedad Rural Argentina y la Universidad Catslica de La Plata, lo invitan a participar del curso: Administracisn de la Empresa Agropecuaria Segunda Edicisn Con la participacisn del profesor titular: Ing. Alfredo Moler ?Por qui este Curso? 7 Permite conocer

Re: man pages conflict or clarification for mount_vnd, newfs and man 5 disklabel

2009-07-26 Thread leon zadorin
On 7/27/09, Kenneth R Westerback kwesterb...@rogers.com wrote: On Sun, Jul 26, 2009 at 04:44:45AM +1100, leon zadorin wrote: Man page for mount_vnd states: The `c' partition of a vnd image should not be used. When a superblock becomes damaged, fsck_ffs(8) needs information contained in

Re: man pages conflict or clarification for mount_vnd, newfs and man 5 disklabel

2009-07-26 Thread Kenneth R Westerback
On Mon, Jul 27, 2009 at 11:11:21AM +1000, leon zadorin wrote: On 7/27/09, Kenneth R Westerback kwesterb...@rogers.com wrote: On Sun, Jul 26, 2009 at 04:44:45AM +1100, leon zadorin wrote: Man page for mount_vnd states: The `c' partition of a vnd image should not be used. When a

Re: man pages conflict or clarification for mount_vnd, newfs and man 5 disklabel

2009-07-26 Thread leon zadorin
On 7/27/09, Kenneth R Westerback kwesterb...@rogers.com wrote: On Mon, Jul 27, 2009 at 11:11:21AM +1000, leon zadorin wrote: On 7/27/09, Kenneth R Westerback kwesterb...@rogers.com wrote: On Sun, Jul 26, 2009 at 04:44:45AM +1100, leon zadorin wrote: Man page for mount_vnd states: The

Re: man pages conflict or clarification for mount_vnd, newfs and man 5 disklabel

2009-07-26 Thread Theo de Raadt
I'd say. Anywhere does it say this? My understanding was that 'c' partition depicts the entire device. If this is correct, than it's not even close to describing it as 'freely changing' it's semantics as per kernel's mood. Artistic perhaps, but precise... not. hey, feel free to believe

Re: man pages conflict or clarification for mount_vnd, newfs and man 5 disklabel

2009-07-26 Thread Theo de Raadt
Sounds a little nonsensical to me. 1) for example, it would make no sense to 'shrink' the size of conceptual 'whole disk' (esp. if such represents the entire *physical* disk as per man pages) to be less than other partitions -- so '*arbitrary* changing its [disk's] limits' is an

Re: man pages conflict or clarification for mount_vnd, newfs and man 5 disklabel

2009-07-26 Thread leon zadorin
On 7/27/09, Theo de Raadt dera...@cvs.openbsd.org wrote: I'd say. Anywhere does it say this? My understanding was that 'c' partition depicts the entire device. If this is correct, than it's not even close to describing it as 'freely changing' it's semantics as per kernel's mood. Artistic

Re: man pages conflict or clarification for mount_vnd, newfs and man 5 disklabel

2009-07-26 Thread Theo de Raadt
On 7/27/09, Theo de Raadt dera...@cvs.openbsd.org wrote: Sounds a little nonsensical to me. 1) for example, it would make no sense to 'shrink' the size of conceptual 'whole disk' (esp. if such represents the entire *physical* disk as per man pages) to be less than other partitions -- so

Re: man pages conflict or clarification for mount_vnd, newfs and man 5 disklabel

2009-07-26 Thread leon zadorin
On 7/27/09, Theo de Raadt dera...@cvs.openbsd.org wrote: Sounds a little nonsensical to me. 1) for example, it would make no sense to 'shrink' the size of conceptual 'whole disk' (esp. if such represents the entire *physical* disk as per man pages) to be less than other partitions -- so

Re: man pages conflict or clarification for mount_vnd, newfs and man 5 disklabel

2009-07-26 Thread leon zadorin
On 7/27/09, Theo de Raadt dera...@cvs.openbsd.org wrote: On 7/27/09, Theo de Raadt dera...@cvs.openbsd.org wrote: Sounds a little nonsensical to me. 1) for example, it would make no sense to 'shrink' the size of conceptual 'whole disk' (esp. if such represents the entire *physical* disk

Re: Microsoft mouse, ums and wsmouse

2009-07-26 Thread Luis Useche
Sigh. Yet another Microsoft mouse with a botched report descriptor layout. I'm afraid that this device will not work under OpenBSD until enough information is found to make it work. This is weird. What do you mean by more information? I think I have been able to use this mouse under freebsd,

Re: man pages conflict or clarification for mount_vnd, newfs and man 5 disklabel

2009-07-26 Thread Theo de Raadt
On 7/27/09, Theo de Raadt dera...@cvs.openbsd.org wrote: On 7/27/09, Theo de Raadt dera...@cvs.openbsd.org wrote: Sounds a little nonsensical to me. 1) for example, it would make no sense to 'shrink' the size of conceptual 'whole disk' (esp. if such represents the entire *physical*

Re: man pages conflict or clarification for mount_vnd, newfs and man 5 disklabel

2009-07-26 Thread Marco Peereboom
:-) :-) :-) relax, take a pill -- no need to get emotional. besides I don't think we are seeing things that much differently. I didn't say you were making mistakes, but if you make krap-inviting statements like the source code *defines* the behavior then expect the likewise, albeit

Intel Mac mini Server Mode

2009-07-26 Thread Bryan Vyhmeister
As detailed in the following message, it is possible to use a magic tweak to get the Mac mini into server mode. http://marc.info/?l=openbsd-miscm=120631459418290w=2 This was accomplished with pcitweak which unfortunately no longer exists in X.Org. The only way to get it at this point is to

Re: PF: 3 NICS. 1 WAN, 2 LAN. How to manage each LAN open ports individually?

2009-07-26 Thread patrick keshishian
On Sun, Jul 26, 2009 at 4:02 PM, Andres Salazarndrsslz...@gmail.com wrote: Hello Patrick, I also tried your approach, but at the end it behaves the same. Without the pass out i dont have internet in any of the two interfaces, with it then I just have totally opened ports on both of the

Re: man pages conflict or clarification for mount_vnd, newfs and man 5 disklabel

2009-07-26 Thread leon zadorin
On 7/27/09, Theo de Raadt dera...@cvs.openbsd.org wrote: On 7/27/09, Theo de Raadt dera...@cvs.openbsd.org wrote: On 7/27/09, Theo de Raadt dera...@cvs.openbsd.org wrote: Sounds a little nonsensical to me. 1) for example, it would make no sense to 'shrink' the size of conceptual

Re: man pages conflict or clarification for mount_vnd, newfs and man 5 disklabel

2009-07-26 Thread leon zadorin
On 7/27/09, Marco Peereboom sl...@peereboom.us wrote: :-) :-) :-) relax, take a pill -- no need to get emotional. besides I don't think we are seeing things that much differently. I didn't say you were making mistakes, but if you make krap-inviting statements like the source code *defines*