Re: What's a patch? Can I build only changes to openbsd source?

2008-05-20 Thread Kendall Shaw
On Tue, 2008-05-20 at 22:37 -0400, Martin Gignac wrote: > On Tue, 20 May 2008, Kendall Shaw wrote: > > > Can you also help me understand these words about -current, from the > > FAQ: > > > > "There are also flag days and major system changes that the developers > > navigate with one-time tools, wh

Re: What's a patch? Can I build only changes to openbsd source?

2008-05-20 Thread Martin Gignac
On Tue, 20 May 2008, Kendall Shaw wrote: Can you also help me understand these words about -current, from the FAQ: "There are also flag days and major system changes that the developers navigate with one-time tools, which mean that source-based updating is not possible." There are changes that

Re: What's a patch? Can I build only changes to openbsd source?

2008-05-20 Thread Kendall Shaw
On Tue, 2008-05-20 at 18:25 -0400, Martin Gignac wrote: > On Tue, 20 May 2008, Kendall Shaw wrote: > > > I'm following -stable until I read some more, and I'm unclear on some > > aspects of syncing source. > > > > There was an earlier post about why there are no security patches for > > 4.3 listed

Re: openbgpd community strings

2008-05-20 Thread Lu Vo
2008/5/20 Aaron Glenn <[EMAIL PROTECTED]>: > On Tue, May 20, 2008 at 4:21 PM, Lu Vo <[EMAIL PROTECTED]> wrote: > > I am hoping someone in the know can shed some lights on this. > > match to group MCI set { community 701:120 } > match to group Allstream set { community 15290:90 } > Stuart and Aa

Re: openbgpd community strings

2008-05-20 Thread Aaron Glenn
On Tue, May 20, 2008 at 4:21 PM, Lu Vo <[EMAIL PROTECTED]> wrote: > I am hoping someone in the know can shed some lights on this. match to group MCI set { community 701:120 } match to group Allstream set { community 15290:90 }

Re: openbgpd community strings

2008-05-20 Thread Stuart Henderson
On 2008-05-20, Lu Vo <[EMAIL PROTECTED]> wrote: > group "MCI" { > remote-as $mci_as > set community 701:120 > } > None of the upstream providers (MCI and Allstream) claim they see the > community strings set by me. Is this not the correct way of setting > community attribute ? see bgpd.c

fsck_ffs algorithms

2008-05-20 Thread Geoff Steckel
For really large file systems or for small memory machines, the algorithms in fsck_ffs will inevitably run out of memory. It appears that there are two possibilities to deal with this: 1) multiple sub-passes over the file system, dealing with parts of the data each time 2) modifying t

MacPPC interrupt controller change testing

2008-05-20 Thread Dale Rahn
As was announced on undeadly recently, I have been back hacking on PowerPC. One of the things noticed once SMP was working was that an occasionally seen wdc DRQ error message occurred very frequently. This pointed out that the interrupt controller was doing something poorly. After several attempts

openbgpd community strings

2008-05-20 Thread Lu Vo
I am hoping someone in the know can shed some lights on this. My snippet of bgpd.conf: # MCI mci_as="11486" mci_peer1="142.77.114.132" mci_peer2="142.77.114.133" mci_peer3="208.218.245.33" # Allstream allstream_as="15290" allstream_peer1="209.82.101.41" allstream_carp_ip="209.

No 4.2 or 4.3 Love

2008-05-20 Thread dontek
The last version of OpenBSD I have been able to install on my Compaq Prolient DL360 G2 is 4.1. In all cases I am attempting to boot and install using the i386 cd4x.iso. In both cases of attempting to install 4.2 and 4.3, the installer hard-locks at the end of the dmesg. No keyboard input is poss

Re: using lynx to manage router

2008-05-20 Thread ropers
s/EMCAScript/ECMAScript 2008/5/21 ropers <[EMAIL PROTECTED]>: > 2008/5/20 Default User <[EMAIL PROTECTED]>: >> Hello! >> >> I would like to use lynx to manage my local small lan router. I can >> manage a broadband modem that way. But the router webpage expects to be >> managed by a graphical bro

Re: using lynx to manage router

2008-05-20 Thread ropers
2008/5/20 Default User <[EMAIL PROTECTED]>: > Hello! > > I would like to use lynx to manage my local small lan router. I can > manage a broadband modem that way. But the router webpage expects to be > managed by a graphical browser, so the initial control webpage just > shows up as unintelligible

Re: Can't browse to Microsoft web sites...

2008-05-20 Thread Jeff Ross
Stuart Henderson wrote: On 2008-05-20, Daniel Melameth <[EMAIL PROTECTED]> wrote: Might be an MTU issue. Probably. Microsoft block *all* ICMP at their border. (you at the back of the classroom, stop sniggering.. :-) "scrub max-mss" should work around it, or [EMAIL PROTECTED] may be able to ge

Re: What's a patch? Can I build only changes to openbsd source?

2008-05-20 Thread Martin Gignac
On Tue, 20 May 2008, Kendall Shaw wrote: I'm following -stable until I read some more, and I'm unclear on some aspects of syncing source. There was an earlier post about why there are no security patches for 4.3 listed at: http://www.openbsd.org/pkg-stable.html Is that different from: http:/

Re: openbsd multiboot

2008-05-20 Thread Imre Oolberg
Hallo! Some time ago i did experiment with dual-booting (actually multi-booting) from one harddisk several OpenBSD instances, for the sake of fun. I settled to using dualboot OpenBSD to make upgrades more suitable for me (just unpacking new distribution's file sets under /mnt mounted empty p

What's a patch? Can I build only changes to openbsd source?

2008-05-20 Thread Kendall Shaw
I'm following -stable until I read some more, and I'm unclear on some aspects of syncing source. What's a patch? --- There was an earlier post about why there are no security patches for 4.3 listed at: http://www.openbsd.org/pkg-stable.html Is that different from: http://www.openbs

Re: small pc recommendation

2008-05-20 Thread Paul de Weerd
On Tue, May 20, 2008 at 02:26:11PM -0700, Lord Sporkton wrote: | this is indeed the system im going to go with, the alix2c3, i found a | nice crypto accelerator for it too :) Just FYI : $ dmesg | grep ^glxsb glxsb0 at pci0 dev 1 function 2 "AMD Geode LX Crypto" rev 0x00: RNG AES $ apropos glxsb g

using lynx to manage router

2008-05-20 Thread Default User
Hello! I would like to use lynx to manage my local small lan router. I can manage a broadband modem that way. But the router webpage expects to be managed by a graphical browser, so the initial control webpage just shows up as unintelligible garbage. Since I run command line only, I do not w

Re: small pc recommendation

2008-05-20 Thread Lord Sporkton
2008/5/20 Mark Rolen <[EMAIL PROTECTED]>: > Tobias Walkowiak wrote: >> >> On Mon, May 19, 2008 at 11:51:04PM -0500, Andrew Konkol wrote: >> >>> >>> If you're looking for a single board computer using compact >>> flash...I've had good luck with my ALIX 2c3 >>> http://pcengines.ch/alix2c3.htm >>> >>

Re: small pc recommendation

2008-05-20 Thread Christer Solskogen
Lord Sporkton wrote: requirements are simple: usb 2.0 at least 1 pci slot free or 2 built in ethernet ports OpenBSD compatible cheap FitPC! I use one my self, and it works purrfectly! http://www.fit-pc.com/new/ -- chs

Re: small pc recommendation

2008-05-20 Thread xSAPPYx
I have a couple jetway mini-itx boxen I like. There are daughter boards for these guys, I put a 3x10/100/1000 card in there for 4 nics total. Boards: http://www.jetwaycomputer.com/VIA.html Daughter: http://www.jetwaycomputer.com/Daughter_Board.html Sample Dealer: http://www.logicsupply.com/ On

openbsd multiboot

2008-05-20 Thread Leo Baltus
Hi, I would like to have more than one openbsd root filesystem on my hardrive. Could somebody please explain how to go about this? In a linux environment I could set up 2 lv's and point to each of them by kernel commandlines. Using openbsd I could use multiple bios-partitions each having an a: l

Re: small pc recommendation

2008-05-20 Thread Paul de Weerd
On Tue, May 20, 2008 at 01:52:15PM -0500, Mark Rolen wrote: > I agree with all of the above (I love my little alix2c3 firewall and it was > definitely cheaper than a soekris, less than half the cost for three > interfaces + USB), but the OP is complaining about slow USB speeds... > aren't the po

Re: port/package messages about manual optional configuration?

2008-05-20 Thread Chris Smith
On Tuesday 20 May 2008, Jay wrote: > I even pay for the premium service > to remove the annoying signature ads.. at least one good thing about gmail (besides the excellent spam filtering) is no signature ads -- Chris

Re: [rn_walktree+0x3f] Panic During BGP+CARP Fail-Over

2008-05-20 Thread Stuart Henderson
On 2008-05-20, Insan Praja SW <[EMAIL PROTECTED]> wrote: > There is a project called bogon list and de-bogon list. We continue > monitor these un-allocated IP's to make sure that nothing from this bogons > gettin to the net. > Or it just me being paranoid... > http://www.cymru.com/Documents/bog

Re: port/package messages about manual optional configuration?

2008-05-20 Thread Jay
I don't know why the quoting that way. And my mail program (hotmail/IE7) can't set line lengths. Up to me to just eyeball it and hit return every so often, and then, often returns get removed somewhere anyway, like when I put them in for other formatting reasons. It does stink. (I even pay for the

Re: Can't browse to Microsoft web sites...

2008-05-20 Thread Stuart Henderson
On 2008-05-20, Daniel Melameth <[EMAIL PROTECTED]> wrote: > Might be an MTU issue. Probably. Microsoft block *all* ICMP at their border. (you at the back of the classroom, stop sniggering.. :-) "scrub max-mss" should work around it, or [EMAIL PROTECTED] may be able to get in touch with the admin

Re: [rn_walktree+0x3f] Panic During BGP+CARP Fail-Over

2008-05-20 Thread Insan Praja SW
On Tue, 20 May 2008 01:17:52 +0700, ropers <[EMAIL PROTECTED]> wrote: Well, There is a project called bogon list and de-bogon list. We continue monitor these un-allocated IP's to make sure that nothing from this bogons gettin to the net. Or it just me being paranoid... http://www.cymru.com/Do

Re: Can't browse to Microsoft web sites...

2008-05-20 Thread Jeff Ross
Jeff Ross wrote: I know, "Who cares?" or "Great!" is my own response but my users have other wishes that include msn.com and this one has me stumped. I had a more complex pf rule set but now I'm using a simple rule set based almost entirely on the one from the PF FAQ: ext_if="em0" # Extern

Re: small pc recommendation

2008-05-20 Thread Mark Rolen
Tobias Walkowiak wrote: On Mon, May 19, 2008 at 11:51:04PM -0500, Andrew Konkol wrote: If you're looking for a single board computer using compact flash...I've had good luck with my ALIX 2c3 http://pcengines.ch/alix2c3.htm would be my recommendation, too. just bought one as my home rou

Re: Can't browse to Microsoft web sites...

2008-05-20 Thread Marti Martinez
On Tue, May 20, 2008 at 10:31 AM, Jeff Ross <[EMAIL PROTECTED]> wrote: > I think I smell hot tar, and I just saw a couple of naked chickens run past > the window... For some reason I kept reading that as "naked chicks"...and while a nice metal image, it wasn't fitting in well with the rest of the

Re: Can't browse to Microsoft web sites...

2008-05-20 Thread Daniel Melameth
Might be an MTU issue. Try tcpdumping an interface other than pflog0. On Tue, May 20, 2008 at 10:15 AM, Jeff Ross <[EMAIL PROTECTED]> wrote: > I had a more complex pf rule set but now I'm using a simple rule set based > almost entirely on the one from the PF FAQ: > > ext_if="em0" # External Publ

DHCPd with CARP

2008-05-20 Thread Dave Wilson
I have been following with interest the developments with regard to dhcpd gaining spamd-like synchronisation features. I would like to be able to make use of these features if I can. However, I have a question: Currently, I have a pair of CARP firewalls in a failover configuration. We have car

Re: Problems with apache vhosts

2008-05-20 Thread Marc Balmer
Taleon wrote: > Hi, I meet the same problem. The error messages looks like following: > > $ sudo apachectl start > [Tue May 20 16:45:58 2008] [warn] VirtualHost *:80 overlaps with VirtualHost > *:80, the first has precedence, perhaps you need a NameVirtualHost directive > [Tue May 20 16:45:58 20

Re: Can't browse to Microsoft web sites...

2008-05-20 Thread Jeff Ross
On Tue, 20 May 2008, Jay Hart wrote: Maybe we could create a fake blog site stating that MSN.COM is offline until the M$Soft-Yahoo deal is completed. Would that help you out. Jay I think I smell hot tar, and I just saw a couple of naked chickens run past the window... Jeff I know, "Who

Re: ssh_exchange_identification: Connection closed by remote host

2008-05-20 Thread Anthony Carl Perkins
Could you be connected behind a proxy? Some company routing rules will automatically forward all port-80 requests to a proxy box. -acp On Tue, May 20, 2008 at 01:57:20PM +0200, GVG GVG wrote: > On Tue, May 20, 2008 at 11:25 AM, Floor Terra <[EMAIL PROTECTED]> wrote: > > > Hi, > > > > On Tue, 20

Re: Small diff to make dhclient(8) go to background immediately

2008-05-20 Thread Jona Joachim
On 2008-05-19, Cesare Gargano <[EMAIL PROTECTED]> wrote: > On 19/05/08 15:50 +0200, Cesare Gargano wrote: >> On 18/05/08 17:20 +0200, Jona Joachim wrote: >> > I very much appreciate the work of reyk@ on dhclient to make it renew the >> > lease when the >> > link is lost. However it might happen th

Re: Small diff to make dhclient(8) go to background immediately

2008-05-20 Thread Jona Joachim
On 2008-05-19, Cesare Gargano <[EMAIL PROTECTED]> wrote: > On 19/05/08 15:50 +0200, Cesare Gargano wrote: >> On 18/05/08 17:20 +0200, Jona Joachim wrote: >> > I very much appreciate the work of reyk@ on dhclient to make it renew the >> > lease when the >> > link is lost. However it might happen th

Re: Can't browse to Microsoft web sites...

2008-05-20 Thread Jay Hart
Maybe we could create a fake blog site stating that MSN.COM is offline until the M$Soft-Yahoo deal is completed. Would that help you out. Jay > I know, "Who cares?" or "Great!" is my own response but my users have > other wishes that include msn.com and this one has me stumped. > > I had a more

Can't browse to Microsoft web sites...

2008-05-20 Thread Jeff Ross
I know, "Who cares?" or "Great!" is my own response but my users have other wishes that include msn.com and this one has me stumped. I had a more complex pf rule set but now I'm using a simple rule set based almost entirely on the one from the PF FAQ: ext_if="em0" # External Public Interfac

Re: ssh_exchange_identification: Connection closed by remote host

2008-05-20 Thread Aaron Stellman
> On Tue, May 20, 2008 at 11:25 AM, Floor Terra <[EMAIL PROTECTED]> wrote: > > Thanks for your reply! > > Apache doesn't run nor any other httpd service. And yes, when defining port > 80 in the sshd_config file I did re-start the whole box! Also when I go via > a browser to my server it displays

Re: Problems with apache vhosts

2008-05-20 Thread Paco Esteban
On Tue, May 20, 2008 at 4:55 PM, Taleon <[EMAIL PROTECTED]> wrote: > Hi, I meet the same problem. The error messages looks like following: > > $ sudo apachectl start > [Tue May 20 16:45:58 2008] [warn] VirtualHost *:80 overlaps with VirtualHost > *:80, the first has precedence, perhaps you need a

Re: Problems with apache vhosts

2008-05-20 Thread Taleon
Hi, I meet the same problem. The error messages looks like following: $ sudo apachectl start [Tue May 20 16:45:58 2008] [warn] VirtualHost *:80 overlaps with VirtualHost *:80, the first has precedence, perhaps you need a NameVirtualHost directive [Tue May 20 16:45:58 2008] [warn] VirtualHost *:8

Re: Problems with apache vhosts

2008-05-20 Thread Taleon
Hi, I meet the same problem. The error messages looks like following: $ sudo apachectl start [Tue May 20 16:45:58 2008] [warn] VirtualHost *:80 overlaps with VirtualHost *:80, the first has precedence, perhaps you need a NameVirtualHost directive [Tue May 20 16:45:58 2008] [warn] VirtualHost *:8

pf rules, using user for icmp traffic

2008-05-20 Thread Papo Napolitano
Hello all, I've RTFM (man pf.conf) and found this : "Only TCP and UDP packets can be associated with users; for other protocols these parameters are ignored." But I'm pretty sure it was working before the upgrade from 4.0 to 4.1, then 4.2, then 4.3 (in fact, what caught my attention is that

Re: ssh_exchange_identification: Connection closed by remote host

2008-05-20 Thread Otto Moerbeek
On Tue, May 20, 2008 at 03:42:18PM +0200, GVG GVG wrote: > On Tue, May 20, 2008 at 2:58 PM, Maxim Belooussov <[EMAIL PROTECTED]> > wrote: > > > Hi, > > > > > I know but I don't try to go via root! I'm using a regular user! > > > > Can you try to do ssh -v [EMAIL PROTECTED] and take a look at the

Re: ssh_exchange_identification: Connection closed by remote host

2008-05-20 Thread Nico Meijer
Hey, > I know but I don't try to go via root! I'm using a regular user! What does `ssh -v [***]` say? Buhbye... Nico

Re: ssh_exchange_identification: Connection closed by remote host

2008-05-20 Thread GVG GVG
On Tue, May 20, 2008 at 2:58 PM, Maxim Belooussov <[EMAIL PROTECTED]> wrote: > Hi, > > > I know but I don't try to go via root! I'm using a regular user! > > Can you try to do ssh -v [EMAIL PROTECTED] and take a look at the output? > There can be so many reasons, and shooting them off one by one i

Re: ssh_exchange_identification: Connection closed by remote host

2008-05-20 Thread Pierre Riteau
On Tue, May 20, 2008 at 02:32:08PM +0200, Maxim Belooussov wrote: > Hi, > > > when I try to remotely ssh connect to a OpenBSD 4.3 box via port 80 I get: > > Not enough info, but in case you are trying to ssh into box as root, > you will most probably fail. Root login is disabled by default in > O

Re: ssh_exchange_identification: Connection closed by remote host

2008-05-20 Thread GVG GVG
On Tue, May 20, 2008 at 2:32 PM, Maxim Belooussov <[EMAIL PROTECTED]> wrote: > Hi, > > > when I try to remotely ssh connect to a OpenBSD 4.3 box via port 80 I > get: > > Not enough info, but in case you are trying to ssh into box as root, > you will most probably fail. Root login is disabled by de

Re: ssh_exchange_identification: Connection closed by remote host

2008-05-20 Thread Paul de Weerd
On Tue, May 20, 2008 at 02:32:08PM +0200, Maxim Belooussov wrote: | Hi, | | > when I try to remotely ssh connect to a OpenBSD 4.3 box via port 80 I get: | | Not enough info, but in case you are trying to ssh into box as root, | you will most probably fail. Root login is disabled by default in | O

Re: ssh_exchange_identification: Connection closed by remote host

2008-05-20 Thread Maxim Belooussov
Hi, > when I try to remotely ssh connect to a OpenBSD 4.3 box via port 80 I get: Not enough info, but in case you are trying to ssh into box as root, you will most probably fail. Root login is disabled by default in OpenBSD. Maxim

Re: Your help is needed: Please help us fund a replacement for ga@'s stolen laptop

2008-05-20 Thread Paul de Weerd
On Tue, May 20, 2008 at 02:02:43PM +0200, Marc Balmer wrote: > Owain Ainsworth wrote: > >> I'm very pleased to announce that about 2.5 hours after the initial >> email went out, enough money had been donated to fulfill the needed >> amount! I'm shocked at how fast that all happened. > > Well, actua

Sauvegarde de votre messagerie

2008-05-20 Thread Morgane Moity
Si ce message ne s'affiche pas correctement, vous pouvez le visualiser en suivant ce lien. [IMAGE] [IMAGE] [IMAGE] [IMAGE] Bonjour, La sauvegarde de fichier est indispensable aujourd'hui pour toute entreprise. Protigez efficacement votre messagerie, fichiers contre le piratage, mauvaises man

Re: Your help is needed: Please help us fund a replacement for ga@'s stolen laptop

2008-05-20 Thread Marc Balmer
Owain Ainsworth wrote: I'm very pleased to announce that about 2.5 hours after the initial email went out, enough money had been donated to fulfill the needed amount! I'm shocked at how fast that all happened. Well, actually it took a little bit longer than just 2.5 hours, but nevertheless it

Re: ssh_exchange_identification: Connection closed by remote host

2008-05-20 Thread GVG GVG
On Tue, May 20, 2008 at 11:25 AM, Floor Terra <[EMAIL PROTECTED]> wrote: > Hi, > > On Tue, 20 May 2008, GVG GVG wrote: > > Dear Group, >> >> when I try to remotely ssh connect to a OpenBSD 4.3 box via port 80 I get: >> >> ssh_exchange_identification: Connection closed by remote host >> >> Are yo

Re: Your help is needed: Please help us fund a replacement for ga@'s stolen laptop

2008-05-20 Thread Owain Ainsworth
Hello guys, I'm very pleased to announce that about 2.5 hours after the initial email went out, enough money had been donated to fulfill the needed amount! I'm shocked at how fast that all happened. I'd like to publically thank everybody who donated any money towards this, I can't express how muc

Re: small pc recommendation

2008-05-20 Thread Tobias Walkowiak
On Mon, May 19, 2008 at 11:51:04PM -0500, Andrew Konkol wrote: > If you're looking for a single board computer using compact > flash...I've had good luck with my ALIX 2c3 > http://pcengines.ch/alix2c3.htm would be my recommendation, too. just bought one as my home router and works really great! an

Re: How can I determine ethernet speed?

2008-05-20 Thread Tobias Walkowiak
On Tue, May 20, 2008 at 10:47:14AM +0200, Claudio Jeker wrote: > > > I'm an openbsd novice. I replaced cards on computers in my home network > > > with gigabit ethernet and got a a gigabit switch. Can I determine what > > > > you can use iperf or ttcp from the packages. > > Isn't it insane to fig

Re: ssh_exchange_identification: Connection closed by remote host

2008-05-20 Thread Floor Terra
Hi, On Tue, 20 May 2008, GVG GVG wrote: Dear Group, when I try to remotely ssh connect to a OpenBSD 4.3 box via port 80 I get: ssh_exchange_identification: Connection closed by remote host Are you sure you are not trying to connect to httpd? -bash-3.2$ ssh -p 80 -v brobding.mine.nu OpenSSH

Re: Your help is needed: Please help us fund a replacement for ga@'s stolen laptop

2008-05-20 Thread Peter N. M. Hansteen
Marc Balmer <[EMAIL PROTECTED]> writes: > If you think you can step in and help oga and the project, then please > contact me off-list. We can accept donations by wire, Visacard and > Mastercard (creditcard fees are covered by my company). is there a specific account or URL for this, or should w

Re: Your help is needed: Please help us fund a replacement for ga@'s stolen laptop

2008-05-20 Thread Tim Post
On Mon, 2008-05-19 at 21:04 +0200, Marc Balmer wrote: > If you think you can step in and help oga and the project, then please > contact me off-list. We can accept donations by wire, Visacard and > Mastercard (creditcard fees are covered by my company). I am flat ass broke. If you can provide a U

ssh_exchange_identification: Connection closed by remote host

2008-05-20 Thread GVG GVG
Dear Group, when I try to remotely ssh connect to a OpenBSD 4.3 box via port 80 I get: ssh_exchange_identification: Connection closed by remote host Please note, that the same box allows me to use port 443 and both ports (80 and 443) are registered in the sshd_config file. Thanks for your suppo

Re: How can I determine ethernet speed?

2008-05-20 Thread Claudio Jeker
On Tue, May 20, 2008 at 10:35:23AM +0200, Tobias Walkowiak wrote: > On Mon, May 19, 2008 at 03:06:21PM -0700, Kendall Shaw wrote: > > I'm an openbsd novice. I replaced cards on computers in my home network > > with gigabit ethernet and got a a gigabit switch. Can I determine what > > speed or maybe

Re: How can I determine ethernet speed?

2008-05-20 Thread Tobias Walkowiak
On Mon, May 19, 2008 at 03:06:21PM -0700, Kendall Shaw wrote: > I'm an openbsd novice. I replaced cards on computers in my home network > with gigabit ethernet and got a a gigabit switch. Can I determine what > speed or maybe what media my re0 interface is using? you can use iperf or ttcp from the

Strange tos bits?

2008-05-20 Thread Martin Hedenfalk
Hello list, I have a problem with an IPsec peer. My OpenBSD 4.1 responder (obsd in the tcpdump below) doesn't reply to pings in the tunnel. The initiator is an OpenBSD 4.1 appliance (not GENERIC kernel, but I don't think that's the problem). There are two NATed hosts behind the peer-gw, and