Re: any web management gui for pf ?

2010-03-13 Thread Bret S. Lambert
On Sun, Mar 14, 2010 at 12:42:21PM +0500, ??? wrote: > the situation is pretty clear - any web gui for pf, something what > pfsense already is, but installable on "clean" OpenBSD box. you > probably do not make sense what are mailing lists for. > mailing lists are for asking questions and

Re: any web management gui for pf ?

2010-03-13 Thread Илья Шипицин
the problem was described very precisely "pf gui like pfsense, but installable on clean OpenBSD box", wasn't it ? > State the problem you're trying to solve before try to enlist > the help of others in solving it. read the letter before answering to it. 2010/3/14 Bret S. Lambert : > On Sun, Ma

Re: any web management gui for pf ?

2010-03-13 Thread Илья Шипицин
the situation is pretty clear - any web gui for pf, something what pfsense already is, but installable on "clean" OpenBSD box. you probably do not make sense what are mailing lists for. mailing lists are for asking questions and for answering questions. if you have nothing to say except "read the f

Re: any web management gui for pf ?

2010-03-13 Thread Bret S. Lambert
On Sun, Mar 14, 2010 at 12:30:58PM +0500, ??? wrote: > I just want to make sure there's no wheel already invented )) While that's a fair enough thing to do, you didn't really tell anybody what you were going to use the wheel for. I could continue the metaphor, but that would quickly beco

Re: any web management gui for pf ?

2010-03-13 Thread Илья Шипицин
I just want to make sure there's no wheel already invented )) 2010/3/14 Bret S. Lambert : > On Sun, Mar 14, 2010 at 12:05:48PM +0500, ??? wrote: >> a) two CARP-connected OpenBSD boxes >> >> b) many "real" IP addresses bound to OpenBSD >> >> c) RFC1918 (non routable) network with servers >

Re: any web management gui for pf ?

2010-03-13 Thread Jason Dixon
On Sun, Mar 14, 2010 at 12:12:31PM +0500, ??? wrote: > 2010/3/14 Jason Dixon : > > On Sun, Mar 14, 2010 at 11:48:44AM +0500, ??? wrote: > >> we have many people who know ISA very well and all they do with ISA is > >> "publishing applications", rdr rules in terms of pf. > >> they d

install stalls on base64.tgz

2010-03-13 Thread patrick keshishian
I've gone through the steps outlined in release(8) to create a release set which then i used mkisofs and cdrecord from cdrtools (ports) to burn a CD image that I use to upgrade my other machines with. The last two times I had to do this, after an errata update, I notice that during the set install

Re: any web management gui for pf ?

2010-03-13 Thread Bret S. Lambert
On Sun, Mar 14, 2010 at 12:05:48PM +0500, ??? wrote: > a) two CARP-connected OpenBSD boxes > > b) many "real" IP addresses bound to OpenBSD > > c) RFC1918 (non routable) network with servers > > d1) monkey button for "nat" rules, so some servers can connect to > certain services (say, s

Re: any web management gui for pf ?

2010-03-13 Thread Илья Шипицин
2010/3/14 Jason Dixon : > On Sun, Mar 14, 2010 at 11:48:44AM +0500, ??? wrote: >> we have many people who know ISA very well and all they do with ISA is >> "publishing applications", rdr rules in terms of pf. >> they do not need to know "all the pf detailed", all they need is >> >> a) some

Re: any web management gui for pf ?

2010-03-13 Thread Илья Шипицин
a) two CARP-connected OpenBSD boxes b) many "real" IP addresses bound to OpenBSD c) RFC1918 (non routable) network with servers d1) monkey button for "nat" rules, so some servers can connect to certain services (say, smtp to Gmail) d2) monkey button for "rdr" rules, so some servers could be"pub

Re: OpenBSD 4.7 pre-orders are live!

2010-03-13 Thread Predrag Punosevac
I am probably missing something big time but could somebody enlight me and explain why would 4.7 be released May 19 2010? If the schedule is going back to normal it should be May 1st. If 4.7 is to be released six months from 4.6 it should be released April 19th. Right? Cheers, Predrag

Re: any web management gui for pf ?

2010-03-13 Thread Jason Dixon
On Sun, Mar 14, 2010 at 11:48:44AM +0500, ??? wrote: > we have many people who know ISA very well and all they do with ISA is > "publishing applications", rdr rules in terms of pf. > they do not need to know "all the pf detailed", all they need is > > a) something ISA-like > b) syntax-che

Re: any web management gui for pf ?

2010-03-13 Thread Bret S. Lambert
On Sun, Mar 14, 2010 at 11:48:44AM +0500, ??? wrote: > we have many people who know ISA very well and all they do with ISA is > "publishing applications", rdr rules in terms of pf. > they do not need to know "all the pf detailed", all they need is > > a) something ISA-like > b) syntax-che

Re: any web management gui for pf ?

2010-03-13 Thread Илья Шипицин
we have many people who know ISA very well and all they do with ISA is "publishing applications", rdr rules in terms of pf. they do not need to know "all the pf detailed", all they need is a) something ISA-like b) syntax-checker, I mean that gui should only allow adding correct rules (what is not

Re: any web management gui for pf ?

2010-03-13 Thread Jason Dixon
On Sun, Mar 14, 2010 at 11:02:29AM +0500, ??? wrote: > Hello, > > is there any GUI (like pfsense) around which can be installed on a > clean OpenBSD box (or even two CARP-connected boxes) for pf management > ? > I've found comixwall, but it seems to be dead already. None that are worth i

PPPOE/IPSEC/PF

2010-03-13 Thread Steve
Hi all, I know this is extremely vague but I am hoping someone can advise whether this is known/rectified in the upcoming release so I dont have to interfere with production equipment to test. We have a wan configired with pppoe/ipsec/pf configured at each gateway. As soon as 4.6 is in place the

any web management gui for pf ?

2010-03-13 Thread Илья Шипицин
Hello, is there any GUI (like pfsense) around which can be installed on a clean OpenBSD box (or even two CARP-connected boxes) for pf management ? I've found comixwall, but it seems to be dead already. Cheers, Ilya Shipitsin

Online dis ticaret egitimleri

2010-03-13 Thread info
ATCO MARKETING VE DERSIMONLINE ISBIRLIGI ILE UYGULAMALI DIS TICARET UZMANLIK PROGRAMINI ONLINE OLARAK SIZLERE SUNUYORUZ. Sermaye ve mal degisimi |retimi igin |lke genelinde veya ulus

Re: OpenBSD 4.7 pre-orders are live!

2010-03-13 Thread Ted Roby
On Sat, Mar 13, 2010 at 7:42 PM, Jason Dixon wrote: > https://https.openbsd.org/cgi-bin/order?CD47=1&CD47%2b=Add > > -- > Jason Dixon > DixonGroup Consulting > http://www.dixongroup.net/ > > You're late! I already put my order in with the USA distributor as soon as I saw Theo's post. Their automa

OpenBSD 4.7 pre-orders are live!

2010-03-13 Thread Jason Dixon
https://https.openbsd.org/cgi-bin/order?CD47=1&CD47%2b=Add -- Jason Dixon DixonGroup Consulting http://www.dixongroup.net/

Re: RouterBOARD RB600A support

2010-03-13 Thread Theo de Raadt
> I was hoping that it might work as the RB600A and RB1000 CPU / SOC > seem similar (MPC8343/E and MPC8547/E). They are not similar. The MPC8547/E is shockingly different.

Re: RouterBOARD RB600A support

2010-03-13 Thread David Gwynne
On 14/03/2010, at 10:36 AM, P. Souza wrote: >> Has anyone tested the network throughput on these sweet little things? > > Not that relevant but I thought I'd share my findings anyway. > According to some page I found(TM), the RB600 measured about 250 Mbps > on iperf on both debian and routerOS[1].

Re: No login prompt on Intel Atom board.

2010-03-13 Thread Gabriel Read
Just an update: I am able to cat > /dev/ttyC0 and cat /dev/ttyC0 and send and get text both ways. If I run /usr/klibexec/getty std.9600 /dev/ttyC0, I get nothing. the only way to get out is ^Z and then kill it. Also, getty is not running when I start up. I check ps ax and its not there. Thanks

Re: RouterBOARD RB600A support

2010-03-13 Thread P. Souza
> Has anyone tested the network throughput on these sweet little things? Not that relevant but I thought I'd share my findings anyway. According to some page I found(TM), the RB600 measured about 250 Mbps on iperf on both debian and routerOS[1]. I was expecting more since the routerboard performa

Re: usb(3) to usb(4) migration issue at http://www.openbsd.org/cgi-bin/man.cgi

2010-03-13 Thread Jason McIntyre
On Sun, Mar 14, 2010 at 01:07:31AM +0100, Adriaan wrote: > The following URL which is supposed to show the usb(4) man page still > shows the old usb(3) man page: > http://www.openbsd.org/cgi-bin/man.cgi?query=usb&sektion=4&apropos=0&manpath=OpenBSD+Current&arch= > > I know it is release time and t

usb(3) to usb(4) migration issue at http://www.openbsd.org/cgi-bin/man.cgi

2010-03-13 Thread Adriaan
The following URL which is supposed to show the usb(4) man page still shows the old usb(3) man page: http://www.openbsd.org/cgi-bin/man.cgi?query=usb&sektion=4&apropos=0&manpath=OpenBSD+Current&arch= I know it is release time and that everybody is extremely busy :) Adriaan

Re: Opteron 250 Overheating

2010-03-13 Thread Jeff Ross
On Sun, 14 Mar 2010, Ross Cameron wrote: On Sun, Mar 14, 2010 at 12:27 AM, Jeff Ross wrote: Jeff Ross wrote: Henning Brauer wrote: * Jeff Ross [2010-03-02 16:59]: I bought a replacement supermicro motherboard off fleabay that has dual Opteron 250 @2.4GHz. B The cpus have passive heatsin

Re: Opteron 250 Overheating

2010-03-13 Thread Ross Cameron
On Sun, Mar 14, 2010 at 12:27 AM, Jeff Ross wrote: > Jeff Ross wrote: >> >> Henning Brauer wrote: >>> >>> * Jeff Ross [2010-03-02 16:59]: I bought a replacement supermicro motherboard off fleabay that has dual Opteron 250 @2.4GHz. B The cpus have passive heatsinks, it is in a

Re: Joomla - MySQL Problem: "Could not connect to MySQL"

2010-03-13 Thread Stuart Henderson
On 2010-03-13, Sunnz wrote: > 2010/3/12 Daniel Gracia Garallar : >> Not quite a solution, I think. What about if /var/www mounts in a different >> filesystem than /var? >> >> Hardlinks from chrooted environments don't seem to be a wise solution >> anyway... Just IMHO. >> > > In that case you could

"I call bullshit on audiors all the time. " [Was: Re: suggested patch to httpd.conf in base]

2010-03-13 Thread chefren
On 13-03-10 17:04, Bob Beck wrote: > I call bullshit on audiors all the time. I normally get away with it. > Why? I know something about the field, They actually do not, they are > working from a cookbook. Once you explain coherently why the cookbook > is wrong for your environment you know what

Re: Opteron 250 Overheating

2010-03-13 Thread Jeff Ross
Jeff Ross wrote: Henning Brauer wrote: * Jeff Ross [2010-03-02 16:59]: I bought a replacement supermicro motherboard off fleabay that has dual Opteron 250 @2.4GHz. The cpus have passive heatsinks, it is in a supermicro 2U chassis with 4 front fans. do you have the air shroud? this plastic t

Re: Easy money with OpenBSD & OpenBGPd?

2010-03-13 Thread Graeme Lee
FreeBSD and Linux The routing is done on FreeBSD. UI on Linux It's hardly rocket science either. It could easily be done on OpenBSD, but we would need to add a "strip private" or similar to make it implementable. On 14/03/2010 2:24 AM, Sevan / Venture37 wrote: Hi guys, I was reading the

Re: RouterBOARD RB600A support

2010-03-13 Thread Liam Farr
I'd be quite keen to get OpenBSD running on the RB1000. I tried writing the miniroot47.fs to a CF card and booting off that, (on the off chance that it might work), but didn't get very far. -- RouterBOOT booter 2.20 RouterBoard

Re: Easy money with OpenBSD & OpenBGPd?

2010-03-13 Thread Sevan / Venture37
I'm not trying to over throw bypass governments or make money being a thug I was trying to imply a possibly that the white box is nothing more then a fancy white box running OpenBSD? Sevan / Venture37

Re: RouterBOARD RB600A support

2010-03-13 Thread David Gwynne
On 14/03/2010, at 4:41 AM, P. Souza wrote: > Has anyone tested the network throughput on these sweet little things? not really. ive always been limited by the speed of wireless, or the speed of the dsl link im using. i havent got close to high cpu usage on my rb600 unless i was compiling stuff.

Re: RouterBOARD RB600A support

2010-03-13 Thread P. Souza
Has anyone tested the network throughput on these sweet little things?

Re: Filtering based on MAC adress

2010-03-13 Thread Jean-Francois
All, As suggested. Just to confirm that it perfectly works. I made a NAT on ext_if from int_if In principle : - create a bridge, add the int_if to the bridge - add a rule filtering and tagging based on MAC address ex : brconfig bridge0 rule pass in on fxp0 src 9:8:7:6:5:4 tag boss - filter with

Re: Easy money with OpenBSD & OpenBGPd?

2010-03-13 Thread Peter N. M. Hansteen
Sevan / Venture37 writes: > they're using called a "Whitebox" which uses a "BSD-Unix" Their marketers apparently do not know (or do not care) that term is 15+ years out of date and used to be the focusing point of a legal dust-up back in the days. Not a good sign in itself, their website (which

Re: Joomla - MySQL Problem: "Could not connect to MySQL"

2010-03-13 Thread bert beaudin
This has also worked for me in the past. Bert On 3/13/10 9:27 AM, "L. V. Lammert" wrote: > On Sat, 13 Mar 2010, Sunnz wrote: > >> 2010/3/12 Daniel Gracia Garallar : >>> Not quite a solution, I think. What about if /var/www mounts in a different >>> filesystem than /var? >>> >>> Hardlinks from

Re: Easy money with OpenBSD & OpenBGPd?

2010-03-13 Thread Toni Mueller
Hi, technical issues aside, On Sat, 13.03.2010 at 15:24:30 +, Sevan / Venture37 wrote: > I was reading the arstechnica article on the internet filtering > that's now in place in New Zealand & they mentioned that the > appliance they're using called a "Whitebox" which uses a "BSD-Unix" > Any

Re: Joomla - MySQL Problem: "Could not connect to MySQL"

2010-03-13 Thread L. V. Lammert
On Sat, 13 Mar 2010, Sunnz wrote: > 2010/3/12 Daniel Gracia Garallar : > > Not quite a solution, I think. What about if /var/www mounts in a different > > filesystem than /var? > > > > Hardlinks from chrooted environments don't seem to be a wise solution > > anyway... Just IMHO. > > > > In that ca

Re: nmbd does not listen

2010-03-13 Thread Jean-Francois
> [...] > > As for answering requests, how do you know it isn't? Did you trace > > the process? Did you use tcpdump to confirm that the packets were > > being received? Have you confirmed that your pf config isn't blocking > > them? > > I did'nt trace the process, but tcpdump show the packets,

Easy money with OpenBSD & OpenBGPd?

2010-03-13 Thread Sevan / Venture37
Hi guys, I was reading the arstechnica article on the internet filtering that's now in place in New Zealand & they mentioned that the appliance they're using called a "Whitebox" which uses a "BSD-Unix" Anyone know more about the OS used in this system?? Sevan / Venture37 http://arstechnica.c

comprovante deposito em conta !

2010-03-13 Thread Financeiro
- This mail is a HTML mail. Not all elements could be shown in plain text mode. - axei vc !!! Anexo: Comprovante_Deposito (151,0 Kb) Segue em anexo o comprovante de deposito feito em Conta Corrente, por favor pedimos que os dados e valores sejam confirmados atravis do comprovante em anexo, para q

authlog messages

2010-03-13 Thread fqui nonez
hello i founded messages on authlog of a OBSD-4.6, i have not seen it before, and i was not able to find information at archives and google. Mar 9 02:20:25 OpenBSD kdeinit: gethostby*.getanswer: asked for "srx.main.ebayrtm.com IN ", got type "SOA" Mar 9 02:47:32 OpenBSD kdeinit: gethostby*.

Re: errata46.html update

2010-03-13 Thread Ingo Schwarze
Hi David, David Vasek wrote on Sat, Mar 13, 2010 at 10:38:48AM +0100: > On Fri, 12 Mar 2010, Christopher Ahrens wrote: >> You aren't missing anything, these are 2 different webservers: >> OpenBSD.org [199.185.137.3, IP registered to Theos Software] Yes, and that is cvs.openbsd.org, one

Carregue gratuitamente o telemovel!

2010-03-13 Thread Saldo Mobile
-- -- Powered by PHPlist, www.phplist.com -- [demime 1.01d removed an attachment of type image/jpeg which had a name of mail9_4_0.jpg] [demime 1.01d removed an attachment of type image/jpeg which had a name of mail9_4_1.jpg] [demime 1.01d removed an attachment of type image/jpeg which had a

ipsecctl(8): delete by SPI index?

2010-03-13 Thread Toni Mueller
Hi, I dimly remember that it was possible to delete flows by specifying their SPI index in the SADB, but when I say # ipsecctl -d 0x12345678 with 0x12345678 being a number obtained by running # ipsecctl -v -ss I only get back an error message. If I say "ipsecctl -sf" and feed one of these line

Re: Joomla - MySQL Problem: "Could not connect to MySQL"

2010-03-13 Thread Sunnz
2010/3/12 Daniel Gracia Garallar : > Not quite a solution, I think. What about if /var/www mounts in a different > filesystem than /var? > > Hardlinks from chrooted environments don't seem to be a wise solution > anyway... Just IMHO. > In that case you could change the location mysqld itself uses

Re: Joomla - MySQL Problem: "Could not connect to MySQL"

2010-03-13 Thread Edho P Arief
On Fri, Mar 12, 2010 at 6:58 PM, Daniel Gracia Garallar wrote: > Not quite a solution, I think. What about if /var/www mounts in a different > filesystem than /var? > how about - tell mysql to create sock file in /var/www/var/run/mysql; or - tell php to connect to mysql over tcp/ip -- O< ascii

Re: Joomla - MySQL Problem: "Could not connect to MySQL"

2010-03-13 Thread Daniel Gracia Garallar
Not quite a solution, I think. What about if /var/www mounts in a different filesystem than /var? Hardlinks from chrooted environments don't seem to be a wise solution anyway... Just IMHO. Regards, Dani El 12/03/2010 12:16, Sunnz escribiC3: 2010/3/11 Jan: I didn't notice, that httpd was s

Re: 4.7: huge partition at install time

2010-03-13 Thread Harald Dunkel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/11/10 22:49, Stuart Henderson wrote: > On 2010-03-11, Harald Dunkel wrote: >> >> I am not talking about the boot partition, but about a data partition >> set up at install time. >> >> Not to mention that OpenBSD is so easy to install, you hardly

Re: errata46.html update

2010-03-13 Thread David Vasek
On Fri, 12 Mar 2010, Christopher Ahrens wrote: You aren't missing anything, these are 2 different webservers: OpenBSD.org [199.185.137.3, IP registered to Theos Software] Perhaps Theo swapped it with them for theos.com. Good joke! Regards, David