Re: simple pf match question

2011-01-31 Thread Peter Hessler
On 2011 Jan 30 (Sun) at 22:48:17 +0100 (+0100), Henning Brauer wrote: :* Peter Hessler phess...@theapt.org [2011-01-30 22:23]: : On 2011 Jan 30 (Sun) at 19:04:50 +0100 (+0100), Henning Brauer wrote: : :* Stuart Henderson s...@spacehopper.org [2011-01-30 19:03]: : : I disagree, I think it is worth

smtpd.conf syntax.

2011-01-31 Thread David Walker
Howdy. I was setting up smtpd on a machine today and I noticed a couple of issues. This does not work: accept from local for domain example.com relay This does: accept for domain example.com relay I realize from local is the default. This does not work: accept from all deliver to maildir

Et si vous decidiez d'agir vite

2011-01-31 Thread Jordan Jet
Si vous ne visualisez pas ce message, suivez ce lien Pour chaque dossier transmis par Internet, 1 ? est versi ` l'association + Entrepreneurs du Monde ;, qui accompagne des dizaines de milliers de micro-entreprises dans le monde par l'attribution de microcridits accordis aux entrepreneurs les

Re: Printing (well anything) using lpd...

2011-01-31 Thread Dennis den Brok
Jan Stary h...@stare.cz schrieb: fo just forces a form feed; it doesn't turn PS support on/off or whatever. Certainly not, but it seems the printer is picky about recognizing PostScript as such. I don't know what data actually hits the wire, maybe there is some bogus data sent before the actual

Re: Printing (well anything) using lpd...

2011-01-31 Thread Otto Moerbeek
On Mon, Jan 31, 2011 at 09:37:24AM +, Dennis den Brok wrote: Jan Stary h...@stare.cz schrieb: fo just forces a form feed; it doesn't turn PS support on/off or whatever. Certainly not, but it seems the printer is picky about recognizing PostScript as such. I don't know what data

Re: smtpd.conf syntax.

2011-01-31 Thread David Walker
I should have mentioned this is on 4.8 and of course it could be user error which wouldn't surprise me overly. Best wishes.

Proteggi il tuo accounto BCC Credito Cooperativo.

2011-01-31 Thread BCC Credito Cooperativo S.C.R.L
Gentile Cliente, Abbiamo rilevato attivita irregolari sul tuo BCC Internet banking sul conto 31/01/2011. Per la tua protezione, necessario verificare questo attivita prima di poter continuare a utilizzare il conto. Si prega di scaricare il documento allegato alla presente e-mail a

Re: simple pf match question

2011-01-31 Thread Henning Brauer
* Peter Hessler phess...@theapt.org [2011-01-31 09:37]: On 2011 Jan 30 (Sun) at 22:48:17 +0100 (+0100), Henning Brauer wrote: :* Peter Hessler phess...@theapt.org [2011-01-30 22:23]: : On 2011 Jan 30 (Sun) at 19:04:50 +0100 (+0100), Henning Brauer wrote: : :* Stuart Henderson

Re: SOCKS proxying software?

2011-01-31 Thread R0me0 ***
Try search by proxychains it may help you Best Regards, spawn 2011/1/28 Jiri B. ji...@live.com On Fri, Jan 28, 2011 at 07:52:34AM -0800, James Hozier wrote: I'm looking for a program that I can use to use SOCKS proxies for various programs, such as different IRC clients (ircII, irssi,

Re: smtpd.conf syntax.

2011-01-31 Thread Gilles Chehade
On Mon, Jan 31, 2011 at 06:04:12PM +1030, David Walker wrote: Howdy. I was setting up smtpd on a machine today and I noticed a couple of issues. This does not work: accept from local for domain example.com relay This does: accept for domain example.com relay I realize from local is

Re: NO-IP not updating!

2011-01-31 Thread Leslie Jensen
On 2011-01-27 16:39, Orestes Leal R. wrote: On Wed, Jan 26, 2011 at 10:56:02AM +0100, Leslie Jensen wrote: Upon installation of noip I ran the command noip2 -C to configure it. I want noip to run a script every 30 minutes that sends a mail to me at the end of the updating of the address. So I

Re: NO-IP not updating!

2011-01-31 Thread Leslie Jensen
On 2011-01-26 19:05, Jeff Ross wrote: On 01/26/11 10:44, Leslie Jensen wrote: Abel Abraham Camarillo Ojeda skrev 2011-01-26 16:39: On Wed, Jan 26, 2011 at 3:56 AM, Leslie Jensenles...@eskk.nu wrote: Hello list. I'm quite new to Openbsd, have used Freebsd for a while. I have a newly

Re: Printing (well anything) using lpd...

2011-01-31 Thread Dennis den Brok
Otto Moerbeek o...@drijf.net schrieb: printcap sh is your friend. It is indeed, thank you. -- Dennis den Brok

Re: Printing (well anything) using lpd...

2011-01-31 Thread Jacob Meuser
On Mon, Jan 31, 2011 at 09:37:24AM +, Dennis den Brok wrote: Jan Stary h...@stare.cz schrieb: fo just forces a form feed; it doesn't turn PS support on/off or whatever. Certainly not, but it seems the printer is picky about recognizing PostScript as such. I don't know what data

PPPoE for IPv6

2011-01-31 Thread Martin Schmitt
Now I'm in trouble! ;-) I've been using IPv6 via tunnel for a while, with decent success. Lately, I have found an ISP here in Germany who hands out free native IPv6 access, which is to be used on top of the existing DSL line. And I already have an account with them. How do I configure PPPoE for

Re: simple pf match question

2011-01-31 Thread Jason McIntyre
On Mon, Jan 31, 2011 at 11:28:13AM +0100, Henning Brauer wrote: then i change my mind and we should add a note that the default pass behaviour (NOT rule, even tho there kinda is a default rule internally...) doesn't lead to state creation. it's not going to be easy deciding where to insert

PF: Route packets out specific interface with NAT

2011-01-31 Thread Joachim Tingvold
Hi, I'm trying to set up two redundant gateways using OpenBSD 4.8, CARP and PF (see below for setup details). I want to force packets incoming on carp1, out on carp0 (and NAT it, using carp0's IP). Here's the output from /etc/pf.conf on GW0; # Interfaces pfsync_if=em4 ext_if=trunk0

Re: PF: Route packets out specific interface with NAT

2011-01-31 Thread Joachim Tingvold
On Mon, Jan 31, 2011, at 18:24:04PM GMT+01:00, Joachim Tingvold wrote: match out on $ext_carp_if inet from $our_int_net to any nat-to $ext_carp_if Do I also need to consider reply-to for this to work? -- Joachim

Re: PF: Route packets out specific interface with NAT

2011-01-31 Thread Patrick Lamaiziere
Le Mon, 31 Jan 2011 18:24:04 +0100, Joachim Tingvold joac...@tingvold.com a icrit : Hi, Hello, This does not work at all. If I change http://www.openbsd.org/faq/pf/carp.html#RulesetTips + Ruleset Tips Filter the physical interface. As far as PF is concerned, network traffic comes from the

Re: smtpd.conf syntax.

2011-01-31 Thread David Walker
Hi Gilles. On 31/01/2011, Gilles Chehade gil...@poolp.org wrote: On Mon, Jan 31, 2011 at 06:04:12PM +1030, David Walker wrote: bug, it is the default indeed but from local should work should work, if it doesnt it's a bug Will let you know when it's fixed Gilles Chehade Thanks for

Re: PF: Route packets out specific interface with NAT

2011-01-31 Thread Joachim Tingvold
On Mon, Jan 31, 2011, at 18:53:29PM GMT+01:00, Patrick Lamaiziere wrote: This does not work at all. If I change http://www.openbsd.org/faq/pf/carp.html#RulesetTips + Ruleset Tips Filter the physical interface. As far as PF is concerned, network traffic comes from the physical interface, not

test for installed status of package, ports questions

2011-01-31 Thread travis
Hey all, I have a script to sort of kickstart an installation after doing a bare install of OpenBSD, and it's designed to be idempotent (won't hurt to run it several times). Currently I install some packages, but that's a bit of a time-waster in that it will reinstall. Is there a way I can test

Re: simple pf match question

2011-01-31 Thread Henning Brauer
* Jason McIntyre j...@kerhand.co.uk [2011-01-31 18:14]: On Mon, Jan 31, 2011 at 11:28:13AM +0100, Henning Brauer wrote: then i change my mind and we should add a note that the default pass behaviour (NOT rule, even tho there kinda is a default rule internally...) doesn't lead to state

host(1) oddities

2011-01-31 Thread travis+ml-openbsd-misc
Hey all, I ran host www.google.com on a new OpenBSD 4.8 install and got this: 13:50:28.132052 127.0.0.1.41209 127.0.0.1.48830: udp 31 13:50:28.132081 127.0.0.1 127.0.0.1: icmp: 127.0.0.1 udp port 48830 unreachable 13:50:29.133552 ::1.38033 ::1.48830: udp 31 13:50:29.133577 ::1 ::1: icmp6:

Re: simple pf match question

2011-01-31 Thread Joachim Schipper
On Mon, Jan 31, 2011 at 05:10:04PM +, Jason McIntyre wrote: On Mon, Jan 31, 2011 at 11:28:13AM +0100, Henning Brauer wrote: then i change my mind and we should add a note that the default pass behaviour (NOT rule, even tho there kinda is a default rule internally...) doesn't lead to

Re: PF: Route packets out specific interface with NAT

2011-01-31 Thread Joachim Tingvold
On Mon, Jan 31, 2011, at 19:19:09PM GMT+01:00, Joachim Tingvold wrote: Okay, but where goes the line between the two? I mean, does this mean I can't use the carp-interface in the route-to at all? pass in log on $int_if proto { tcp, udp, icmp } from $our_int_net route-to {($ext_carp_if

Re: simple pf match question

2011-01-31 Thread Jason McIntyre
On Mon, Jan 31, 2011 at 08:41:02PM +0100, Henning Brauer wrote: * Jason McIntyre j...@kerhand.co.uk [2011-01-31 18:14]: On Mon, Jan 31, 2011 at 11:28:13AM +0100, Henning Brauer wrote: then i change my mind and we should add a note that the default pass behaviour (NOT rule, even tho there

Re: test for installed status of package, ports questions

2011-01-31 Thread Joachim Schipper
On Mon, Jan 31, 2011 at 01:29:40PM -0600, tra...@subspacefield.org wrote: I have a script to sort of kickstart an installation after doing a bare install of OpenBSD, and it's designed to be idempotent (won't hurt to run it several times). Currently I install some packages, but that's a bit

Re: test for installed status of package, ports questions

2011-01-31 Thread Ted Unangst
On Mon, Jan 31, 2011 at 2:29 PM, tra...@subspacefield.org wrote: Currently I install some packages, but that's a bit of a time-waster in that it will reinstall. Is there a way I can test for whether a package has been installed already, given only the package name, and not necessarily the

Re: test for installed status of package, ports questions

2011-01-31 Thread Jan Stary
I have a script to sort of kickstart an installation after doing a bare install of OpenBSD, and it's designed to be idempotent (won't hurt to run it several times). Currently I install some packages, but that's a bit of a time-waster in that it will reinstall. Is there a way I can

Re: test for installed status of package, ports questions

2011-01-31 Thread Anthony J. Bentley
Hi Travis, On Mon, Jan 31, 2011 at 12:29 PM, tra...@subspacefield.org wrote: Currently I install some packages, but that's a bit of a time-waster in that it will reinstall. B Is there a way I can test for whether a package has been installed already, given only the package name, and not

Re: Printing (well anything) using lpd...

2011-01-31 Thread Marc Espie
On Sun, Jan 30, 2011 at 01:51:15PM -0800, Sean Kamath wrote: %! newpath clippath stroke showpage These four commands were the smallest PostScript I could figure out to send to a printer to print something without burning up tons of toner. It should produce a small line all the way around

Re: simple pf match question

2011-01-31 Thread Paul M
On Mon, Jan 31, 2011 at 11:28:13AM +0100, Henning Brauer wrote: then i change my mind and we should add a note that the default pass behaviour (NOT rule, even tho there kinda is a default rule internally...) doesn't lead to state creation. Perhaps it could be worded in terms of what one

Agevolazioni finanziarie

2011-01-31 Thread Agenzia-19
Per cancellarti dalla news non rispondere alla mail,utilizza remo ve Per visualizzare la news sul sito clicca qui Servizio Recupero CreditiContributi per la creazione di Nuove Imprese Regione LombardiaContributi per i Poli Florovivaistici Contributi De Minimis Nuove Iniziative Contributi per

Re: test for installed status of package, ports questions

2011-01-31 Thread Bryan
On Mon, Jan 31, 2011 at 13:29, tra...@subspacefield.org wrote: Hey all, I have a script to sort of kickstart an installation after doing a bare install of OpenBSD, and it's designed to be idempotent (won't hurt to run it several times). Currently I install some packages, but that's a bit

Re: simple pf match question

2011-01-31 Thread Henning Brauer
* Jason McIntyre j...@kerhand.co.uk [2011-01-31 21:45]: puh. not sure we're on the road to overengineering here. basically, the flow is like this: -we do a state lookup. if we find a mathcing state, we apply actions associated with it and are done. -if no state matched we traverse the

nat static-port option

2011-01-31 Thread Josh Smith
misc@, I recently acquired a playstation 3 and have been running into some difficulties playing it online behing my openbsd gateway. After doing some research and testing I have been able to overcome most of these problems by appending the static-port option to my nat rule. I understand the

Re: nat static-port option

2011-01-31 Thread Chris Cappuccio
the alternative is UPnP, which you'd need a supporting daemon to add port mappings into pf to support with an obsd gateway Josh Smith [juice...@gmail.com] wrote: misc@, I recently acquired a playstation 3 and have been running into some difficulties playing it online behing my openbsd

Re: test for installed status of package, ports questions

2011-01-31 Thread VICTOR TARABOLA CORTIANO
$ pkg_info | grep ^banana- /dev/null Could also be $ pkg_info | grep -q ^banana-

Re: simple pf match question

2011-01-31 Thread Jason McIntyre
On Mon, Jan 31, 2011 at 11:27:18PM +0100, Henning Brauer wrote: i don't understand the confusion. we have a state table (let me nitpick: it's a tree). a packet comes in. we do a lookup in the table, looking for an entry where the key fields match the packet. keys are: protocol address

Re: simple pf match question

2011-01-31 Thread Jason McIntyre
On Tue, Feb 01, 2011 at 10:53:31AM +1300, Paul M wrote: On Mon, Jan 31, 2011 at 11:28:13AM +0100, Henning Brauer wrote: then i change my mind and we should add a note that the default pass behaviour (NOT rule, even tho there kinda is a default rule internally...) doesn't lead to state

Re: simple pf match question

2011-01-31 Thread Henning Brauer
* Jason McIntyre j...@kerhand.co.uk [2011-02-01 01:14]: On Mon, Jan 31, 2011 at 11:27:18PM +0100, Henning Brauer wrote: i don't understand the confusion. we have a state table (let me nitpick: it's a tree). a packet comes in. we do a lookup in the table, looking for an entry where the

Re: test for installed status of package, ports questions

2011-01-31 Thread max stalnaker
There is an out-of-date script in infrastructure/build . It looks to me that it list everything installed. If it needs to be updated, it tells you that too. On Mon, Jan 31, 2011 at 12:42 PM, Bryan bra...@gmail.com wrote: On Mon, Jan 31, 2011 at 13:29, tra...@subspacefield.org wrote: Hey

Re: nat static-port option

2011-01-31 Thread Joel Wiramu Pauling
Does the PS3 support ipv6? Are Sony's servers IPv6 compliant. The better option is to acquire IPv6 transit someway (either by terminating a tunnel broker pipe and advertising RA from your openbsd box) or better still switching to an ISP that support native v6 service. Kind regards -JoelW On 1

Re: sysjail vs. FreeBSD jails

2011-01-31 Thread Amit Kulkarni
google for henning jails openbsd why henning? I remember reading his comment that he would like it, brings this page. http://www.monkey.org/openbsd/archive/misc/0409/msg00569.html Nothing's changed AFAIK. On Mon, Jan 31, 2011 at 4:43 PM, Dustin Cannon dustin.can...@gmail.com wrote: [posting

Re: sysjail vs. FreeBSD jails

2011-01-31 Thread Ted Unangst
On Mon, Jan 31, 2011 at 5:43 PM, Dustin Cannon dustin.can...@gmail.com wrote: or against implementing such jails in OpenBSD. Perhaps it's just a matter of someone being interested enough to take the plunge? Thanks for your time and Yes.

Re: simple pf match question

2011-01-31 Thread patrick keshishian
On Mon, Jan 31, 2011 at 4:03 PM, Jason McIntyre j...@kerhand.co.uk wrote: On Mon, Jan 31, 2011 at 11:27:18PM +0100, Henning Brauer wrote: i don't understand the confusion. we have a state table (let me nitpick: it's a tree). a packet comes in. we do a lookup in the table, looking for an entry

Re: sysjail vs. FreeBSD jails

2011-01-31 Thread Kevin Chadwick
On Mon, 31 Jan 2011 17:43:30 -0500 Dustin Cannon dustin.can...@gmail.com wrote: Perhaps it's just a matter of someone being interested enough to take the plunge? And decide whether they think it's worthwhile or more important than other things to work on. The FreeBSD jail is quite quite cool

Taller de Supervisión de Personal y Grupos Altamente Efectivos, 17 de Febrero

2011-01-31 Thread Veronica Solis
[IMAGE] !Promociones Especiales para grupos! Capacitacisn Impartida por: Mtro. Gerardo Coronado Lspez Pms Capacitacisn Efectiva de Mixico presenta: Seminario- Taller Supervisisn de Personal y Grupos Altamente Efectivos Experto Consultor Mtro. Gerardo Coronado Lspez Empresa Registrada ante la

Re: nat static-port option

2011-01-31 Thread Josh Smith
On Mon, Jan 31, 2011 at 6:42 PM, Joel Wiramu Pauling j...@aenertia.net wrote: Does the PS3 support ipv6? Are Sony's servers IPv6 compliant. The better option is to acquire IPv6 transit someway (either by terminating a tunnel broker pipe and advertising RA from your openbsd box) or better still

Prezado cliente atualizacao numero 9002398

2011-01-31 Thread Banco Real Santander
http://www.recadosnoorkut.com.br/wp-content/uploads/2010/07/real-santander.jpg Prezado Cliente, I com grande satisfagco que a equipe de seguranga do Internet Banking Real Santander envia este e-mail a vocj cliente. o motivo pelo qual estamos entrando em contato para alertar que seu Cartco Chave

Sanciones y Multas en Licitaciones de PEMEX, Evitelas, Taller de Actualización 18 Febrero 2011

2011-01-31 Thread Gonzalo Sanchez
[IMAGE] !Promociones Especiales para grupos! Capacitacisn Impartida por: Mtro. Alberto Ledesma Gonzalez. Pms Capacitacisn Efectiva de Mixico presenta: Licitaciones Pzblicas para la Ley de PEMEX. Experto Consultor Mtro. Alberto Ledesma Gonzalez Empresa Registrada ante la STPS Reg.

Re: host(1) oddities

2011-01-31 Thread Philip Guenther
On Mon, Jan 31, 2011 at 11:55 AM, travis+ml-openbsd-m...@subspacefield.org wrote: I ran host www.google.com on a new OpenBSD 4.8 install and got this: 13:50:28.132052 127.0.0.1.41209 127.0.0.1.48830: udp 31 13:50:28.132081 127.0.0.1 127.0.0.1: icmp: 127.0.0.1 udp port 48830 unreachable

Re: nat static-port option

2011-01-31 Thread Henning Brauer
* Joel Wiramu Pauling j...@aenertia.net [2011-02-01 01:40]: The better option is to acquire IPv6 transit someway getting ipvshit is never a better option. -- Henning Brauer, h...@bsws.de, henn...@openbsd.org BS Web Services, http://bsws.de Full-Service ISP - Secure Hosting, Mail and DNS