carp active/active setup problem
Hi, I followed the instructions in the carp man page example to setup a pair of firewalls in active/active mode. For some reason, I can not make both firewalls to stay active. I tried balancing ip, ip-stealth, and ip-unicast. But, in all attempts, I get fw1# ifconfig carp carp1: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 B B B B lladdr 00:00:5e:00:01:01 B B B B priority: 0 B B B B carp: carpdev sk1 advbase 1 balancing ip-unicast B B B B B B B B state BACKUP vhid 1 advskew 100 B B B B B B B B state MASTER vhid 2 advskew 0 B B B B groups: carp B B B B status: backup B B B B inet6 fe80::227:eff:fe19:6a4f%carp1 prefixlen 64 scopeid 0x8 B B B B inet 150.161.200.4 netmask 0xff00 broadcast 150.161.200.255 fw2# ifconfig carp carp1: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 B B B B lladdr 00:00:5e:00:01:01 B B B B priority: 0 B B B B carp: carpdev sk1 advbase 1 balancing ip-unicast B B B B B B B B state MASTER vhid 1 advskew 0 B B B B B B B B state BACKUP vhid 2 advskew 100 B B B B groups: carp B B B B status: master B B B B inet6 fe80::227:eff:fe19:44c7%carp1 prefixlen 64 scopeid 0x8 B B B B inet 150.161.200.4 netmask 0xff00 broadcast 150.161.200.255 Could someone please help me to identify what I am doing wrong? Here are some of the packets I see on the external interface: 11:05:44.703805 00:00:5e:00:01:02 01:00:5e:00:00:12 0800 70: carp 150.161.200.3 224.0.0.18: CARPv2-advertise 36: vhid=2 advbase=1 advskew=0 demote=0 (DF) [tos 0x10] (ttl 255, id 16851, len 56) 11:05:44.889831 00:00:5e:00:01:01 01:00:5e:00:00:12 0800 70: carp 150.161.200.8 224.0.0.18: CARPv2-advertise 36: vhid=1 advbase=1 advskew=0 demote=0 (DF) [tos 0x10] (ttl 255, id 41185, len 56) Thanks in advance. Regards, Joao
Re: carp active/active setup problem
I forgot to mention that I am running 4.9 STABLE on both firewalls I have the rule below in both firewalls: pass proto carp all keep state And fw1# sysctl net.inet.carp net.inet.carp.allow=1 net.inet.carp.preempt=1 net.inet.carp.log=2 fw2# sysctl net.inet.carp net.inet.carp.allow=1 net.inet.carp.preempt=1 net.inet.carp.log=2 Regards, Joao
install questions
I've downloaded the /install50.iso (x86) and verified the sha-256. Under Ubuntu 11.10 running the virtualbox 4.1.10-76795~Ubuntu~oneiric from the Oracle site, I've set up a virtual machine to go through the install process and learn how not to shoot myself in the foot. But virtualbox reports it as having aborted. I suspect a bug in the latest virtualbox update, has anyone else been able to run this ISO under this latest version of virtualbox? I've seen references to openBSD requiring a primary partition for install, and I've also seen references to some previous version (4.4?) having added support for installing to an extended partition, can someone verify that 5.0 will install in an extended partition? Before burning a USB stick and attempting a live install, I'd like to do whatever is possible to avoid wiping my entire hard-drive. I have an extended partition available but will have to do some shifting if a primary partition is required. TIA, apologies if this email is not sent as plain-text, Thunderbird doesn't always do what I expect. /
I Ateneo 2012 - La situación nacional e internacional
Escuela Sistimica Argentina Institucisn dedicada a la formacisn, asistencia e investigacisn psicolsgica. Hoy nos acercamos a Uds. para invitarlos a la realizacisn del I Ateneo 2012 LA SITUACISN NACIONAL E INTERNACIONALPolmtica Dma: Jueves 22 de marzo de 2012, 19 horasCoordina: Daniel Muchnik (*)Presentador: Alberto Serebrinsky (*) Periodista desde fines de los aqos sesenta. Licenciado en Historia. Columnista en los diarios El Cronista Comercial, La Nacisn, Perfil. Conductor del Programa de Radio Mas que Economma (FM Identidad -Miircoles de 19 a 20 hs) y otro programa sobre Mzsica e Historia en Radio Cultura, a partir del prsximo mes de marzo. Autor de 18 libros sobre temas econsmicos, polmticos, sociales e histsricos. Entre los que tuvieron repercusisn en el pams y en el exterior figuran : Fuegos de artificio- Las zonas errsneas del Modelo de Convertibilidad ; Pams archiilago (Ed. Planeta); Negocios son negocios - Los empresarios que financiaron el acceso de Hitler al poder (Ed. Norma-Kapelusz) y varias veces reeditado, con una edicisn en Colombia y Espaqa; Gallo rojo, gallo negro- Los intereses en juego en la guerra civil espaqola (Ed. Norma-Kapelusz) ;El derrumbe del humanismo- Una historia del Siglo XX; La negacisn de la realidad (Editorial Edhasa); Breve historia de la economma Argentina (Ed. El Ateneo ). Es Docente universitario. Es Analista de temas econsmicos y sociales. Fue Secretario de Redaccisn del semanario El Economista y de los diarios La Opinisn , Conviccisn y Clarmn. Ahora es Columnista de los diarios Perfil y El Cronista Comercial. Conductor de programas de radio y TV .El 3 de enero de 2011 inicis el programa de radio Mas que economma, los viernes a las 22 horas. Ha sido y es invitado por instituciones nacionales y extranjeras para dictar cursos sobre temas de actualidad. Ha recibido el PREMIO KONEX en 1987 y en 2007 y el PREMIO KONEX DE PLATINO en 2007 por el Periodismo de Temas Econsmicos. ENTRADA LIBRE Y GRATUITA (Sin inscripcisn previa) Prsximos ateneos:30/03: Ateneo clmnico 20 aqos en el borda. Judmo, peronista, hincha de boca y psicstico. Dr. Horacio Serebrinsky / Presentadora: Lic. Marina Perrone13/04: Que tienen los polmticos en la cabeza Diego Sehinkman / Presentador: Dr. Marcelo R. Ceberio20/04: Ateneo clmnico El diagnsstico de la posible pareja. Lic. Fernando Rubano / Presentadora: Lic. Eliana Durand04/05: La vejez no pensada. Dr. Enrique Rozitchner / Presentador: Dr. Marcelo R. Ceberio11/04: Ateneo clmnico La dinamica de la psicopatologma durante el tratamiento terapiutico. Lic. Silvia Mitjans / Presentador: Dr. Horacio Serebrinsky ESCUELA SISTIMICA ARGENTINA Fray J. S. M. Oro 1843 (C1414DBC) Cap. Fed. Tel/ Fax: 4774-2875/6112 - 4899-1053 i...@escuelasistemica.com.ar / www.escuelasistemica.com.ar
Re: install questions
I'd like to do whatever is possible to avoid wiping my entire hard-drive. Then you should backup your current hard drive, or at least the files that are important to you, before you attempt an install. Then you won't have to worry at all if you toast your hd. CheersFish 18.03.2012, 09:11, fullmoon fullm...@newsguy.com: I've downloaded the /install50.iso (x86) and verified the sha-256. Under Ubuntu 11.10 running the virtualbox 4.1.10-76795~Ubuntu~oneiric from the Oracle site, I've set up a virtual machine to go through the install process and learn how not to shoot myself in the foot. But virtualbox reports it as having aborted. I suspect a bug in the latest virtualbox update, has anyone else been able to run this ISO under this latest version of virtualbox? I've seen references to openBSD requiring a primary partition for install, and I've also seen references to some previous version (4.4?) having added support for installing to an extended partition, can someone verify that 5.0 will install in an extended partition? Before burning a USB stick and attempting a live install, I'd like to do whatever is possible to avoid wiping my entire hard-drive. I have an extended partition available but will have to do some shifting if a primary partition is required. TIA, apologies if this email is not sent as plain-text, Thunderbird doesn't always do what I expect. /
Re: install questions
On 03/18/12 10:10, fullmoon wrote: I've downloaded the /install50.iso (x86) and verified the sha-256. Under Ubuntu 11.10 running the virtualbox 4.1.10-76795~Ubuntu~oneiric from the Oracle site, I've set up a virtual machine to go through the install process and learn how not to shoot myself in the foot. But virtualbox reports it as having aborted. I suspect a bug in the latest virtualbox update, has anyone else been able to run this ISO under this latest version of virtualbox? I've run it under some versions of virtualbox, but can't vouch for most recent versions. Most virtualization solutions have proven very clearly they are about getting the things they care about (all the world is Windows and Linux) to seem to work, as opposed to providing true virtual hardware emulation that any OS can utilize. I've seen references to openBSD requiring a primary partition for install, and I've also seen references to some previous version (4.4?) having added support for installing to an extended partition, can someone verify that 5.0 will install in an extended partition? it can work...it depends on a lot of things BEYOND OpenBSD. On a single-booting machine, there's no reason to worry about extended partitions. If you are multibooting, you have a lot of bits and pieces to make work. I've heard trustworthy reports that extended partitions can work...but you will have to verify all your bits. Before burning a USB stick and attempting a live install, I'd like to do whatever is possible to avoid wiping my entire hard-drive. I have an extended partition available but will have to do some shifting if a primary partition is required. ok. stop. Re-read the section of the FAQ on multibooting...pay close attention to the parts that point out how difficult it is, how it isn't recommended for new users. This is all stuff that if you have to ask, you shouldn't be doing it. At the point you are asking these questions, the process to find the answers yourself should be moderately clear. When you can do that, you will be at a position to understand the process well enough to avoid disasters...or at least immediately understand what you did wrong should you make an error. I'm curious about this reference to USB stick for install. Second time I've heard a new user rolling-their-own install process using flash drives on multi-boot systems in the last month or so. What is prompting this? Someone providing some questionable advice out there? TIA, apologies if this email is not sent as plain-text, Thunderbird doesn't always do what I expect. came through fine. Familiar with that problem, though... :-/ Nick.
עידכון לגבי הרצאות לשיפור החיים
ylem lj, nd ylenj? yni `expd e`pi reacz a'wicnd `iyiz'. ltpi kypd ivxpe `izj wyx lkzeaz dniil dfe kci lrpiio `ezj adxv`ez nzej dicr yl qiiphelebid . aiyx`l pkpq lzews gew e`pe l` ikelim lyleg lj rckeo `l` `m ylgz lpe awyd aniil gefx. lko xvipe ly`el : d`m zxvd lwal rckeo yaeri aniil apebr ltrileiez ylpe ? ainim `ld `pe nraixim yleyd yxezim ydm gipm: 1. zyead lnacw `iyiez ypezo ryxd zgenim agiim kne : xnz zwyexz , aihgeo rvni , n`eyx nel ncek`, xber nel nzeg erec. dnacw iizo `z dpwecez dgfwez edglyez ylj e`tyx lwal hit `ij pizo lytx pwecez `ld. 2. dxv`ez apey`im yepim, kbeo: `ij ldyib `z dy`itez ylj, febiez, gifei dzpdbez `peyiz (nidm dgaxim d`niziim ylj), xby nel ykl, `ij ldzbax rl rliez eixicez agiim, kivc zbir lrevnd `iyiz, nd npir `cm ltrel end nepr `z fd, lnd `pyim nzpdbim kne ydm nzpdbim erec... 3. `tyxez lx`ez qxh ao yrd egvi ynqaix rl dykl d`peyi e`ij pizo ldithx nxbrim yl k`a tifi eptyi yndeed nwex lqtwez, c`bez egxcez eko lnrld n 70% ndnglez dicerez kiem. d`m diiz xevd lwal rckepim rl dtrileiez d`ld? `m ko ylg/i lpe niil gefx (`tyx wvx ) l: pki...@gmail.com `m `io rpio l` vxij lyleg niil diez el` pylg lj niil peqs. iem hea! ( -: `expd wicnd `iyiz
Re: install questions
Under Ubuntu 11.10 running the virtualbox 4.1.10-76795~Ubuntu~oneiric from the Oracle site, I've set up a virtual machine to go through the install process and learn how not to shoot myself in the foot. But virtualbox reports it as having aborted. I suspect a bug in the latest virtualbox update, has anyone else been able to run this ISO under this latest version of virtualbox? Last I checked VirtualBox needs both a AMD-V + AMD-Vi or if you go the Intel route VT-x and VT-d. VMWare Player works better if you don't have AMD-Vi or Intel VT-d i.e it at least lets you play with a working box (you have to select FreeBSD 64 bits if you want to install OpenBSD AMD64 bits). Please correct me here if I am wrong. For what I wanted: a machine capable of full ports builds for KDE 4.X work, VMWare Player is totally unsuitable. It just bogs down and its just better to have configured a 1 CPU machine, 2GB VM. I tested about a month ago. Better to buy a cheap old machine with no data on it and go the full native route for testing.
Re: install questions
On Sun, 18 Mar 2012 08:11:12 -0600 fullmoon wrote: I suspect a bug in the latest virtualbox update, has anyone else been able to run this ISO under this latest version of virtualbox? Theo ended up wasting time on a bug report that turned out to be virtualbox handling memory badly I think. Vmware player works a lot better than virtualbox. I tried switching to virtualbox for 3D support, but switched right back when I found out. Remember before reporting any bugs to try them on real hardware with a generic kernel first though.
Re: install questions
On 2012-03-18, Kevin Chadwick ma1l1i...@yahoo.co.uk wrote: On Sun, 18 Mar 2012 08:11:12 -0600 fullmoon wrote: I suspect a bug in the latest virtualbox update, has anyone else been able to run this ISO under this latest version of virtualbox? Theo ended up wasting time on a bug report that turned out to be virtualbox handling memory badly I think. Worse. More like virtualbox detecting that the guest OS is OpenBSD and live-patching the running kernel. Vmware player works a lot better than virtualbox. I tried switching to virtualbox for 3D support, but switched right back when I found out. esx/esxi and kvm work for me (-current may well do better than 5.0 especially if the emulated BIOS has broken interrupt routing tables, this is a known problem with at least some versions of kvm). Haven't tried myself but reportedly OpenBSD is meant to work pretty well in hyperv. I think I tried vmware player at one point and had absolutely dreadful i/o performance, no idea if that is still the case. Virtualbox, see above ;) No idea how well OpenBSD does in xen. Remember before reporting any bugs to try them on real hardware with a generic kernel first though.
Re: install questions
I think I tried vmware player at one point and had absolutely dreadful i/o performance, no idea if that is still the case. Virtualbox, see above ;) No idea how well OpenBSD does in xen. Yep, atrocious i/o performance in VMWare Player as of 4.0.2. This was before rthreads though, I don't think it would alter much after rthreads.
Re: install questions
On Sun, Mar 18, 2012 at 08:11:12AM -0600, fullmoon wrote: Before burning a USB stick and attempting a live install, I'd like to do whatever is possible to avoid wiping my entire hard-drive. I have an extended partition available but will have to do some shifting if a primary partition is required. I have a better idea. You can burn the iso image in a CD and install the system in your USB stick. Now you have a liveusb with openbsd. Anyway, read the FAQ. Cheers. -- Juan Francisco Cantero Hurtado http://juanfra.info
Re: ifconfig.8 manpage
On Mon, Mar 12, 2012 at 04:31:03PM -0400, Doug Fordham wrote: List, While assisting a colleague in configuring the wireless interfaces on some OBSD testbed laptops...referencing the IFCONFIG(8) manpage, within the 'nwkey' subsection regarding configuration of the WEP key, it states The length of each key must be either 40 bits, i.e. a 5-character string or 10 hexadecimal digits or 104 bits (13-character). ...the question was posed to me whether or not 128 bit WEP was supported. As the contents of the manpage caused a bit of confusion, the following is provided for consideration: The length of each key must be either 40 bits, i.e. a 5-character ASCII string or 10 hexadecimal digits (64 bit encryption); 104 bits i.e. a 13-character ASCII string or 26 hexadecimal digits (128 bit encryption); or, for cards that support it, 232 bits, i.e a 29-character ASCII string or 58 hexadecimal digits (256 bit encryption). diff provided next if useful: - --- /usr/src/sbin/ifconfig/ifconfig.8 Sun Mar 4 09:36:46 2012 +++ ifconfig.8Mon Mar 12 15:19:13 2012 @@ -940,8 +940,11 @@ within the key must be escaped with a backslash. Note that if multiple keys are used, their order must be the same within the network. -The length of each key must be either 40 bits, i.e. a 5-character string or -10 hexadecimal digits or 104 bits (13-character). +The length of each key must be either 40 bits, i.e. a 5-character ASCII +string or 10 hexadecimal digits (64 bit encryption); 104 bits i.e. a +13-character ASCII string or 26 hexadecimal digits (128 bit encryption); +or, for cards that support it, 232 bits, i.e a 29-character ASCII string +or 58 hexadecimal digits (256 bit encryption). .It Fl nwkey Disable WEP encryption. .It Cm nwkey Cm persist - df committed, but we tweaked it. jsg prompted me to drop the 256-bit stuff as a vendor extension and it could potentially be confused with 256 bit aes WPA which we do support. the final version is included below. thanks for your mail. jmc Index: ifconfig.8 === RCS file: /cvs/src/sbin/ifconfig/ifconfig.8,v retrieving revision 1.226 diff -u -r1.226 ifconfig.8 --- ifconfig.8 2 Feb 2012 12:34:37 - 1.226 +++ ifconfig.8 18 Mar 2012 23:37:02 - @@ -940,8 +940,13 @@ within the key must be escaped with a backslash. Note that if multiple keys are used, their order must be the same within the network. -The length of each key must be either 40 bits, i.e. a 5-character string or -10 hexadecimal digits or 104 bits (13-character). +.Pp +The length of each key must be either 40 bits for 64-bit encryption +(5-character ASCII string +or 10 hexadecimal digits) +or 104 bits for 128-bit encryption +(13-character ASCII string +or 26 hexadecimal digits). .It Fl nwkey Disable WEP encryption. .It Cm nwkey Cm persist
Re: ifconfig.8 manpage
On Sun, Mar 18, 2012 at 11:39:55PM +0001, Jason McIntyre wrote: On Mon, Mar 12, 2012 at 04:31:03PM -0400, Doug Fordham wrote: List, While assisting a colleague in configuring the wireless interfaces on some OBSD testbed laptops...referencing the IFCONFIG(8) manpage, within the 'nwkey' subsection regarding configuration of the WEP key, it states The length of each key must be either 40 bits, i.e. a 5-character string or 10 hexadecimal digits or 104 bits (13-character). ...the question was posed to me whether or not 128 bit WEP was supported. As the contents of the manpage caused a bit of confusion, the following is provided for consideration: The length of each key must be either 40 bits, i.e. a 5-character ASCII string or 10 hexadecimal digits (64 bit encryption); 104 bits i.e. a 13-character ASCII string or 26 hexadecimal digits (128 bit encryption); or, for cards that support it, 232 bits, i.e a 29-character ASCII string or 58 hexadecimal digits (256 bit encryption). diff provided next if useful: - --- /usr/src/sbin/ifconfig/ifconfig.8 Sun Mar 4 09:36:46 2012 +++ ifconfig.8 Mon Mar 12 15:19:13 2012 @@ -940,8 +940,11 @@ within the key must be escaped with a backslash. Note that if multiple keys are used, their order must be the same within the network. -The length of each key must be either 40 bits, i.e. a 5-character string or -10 hexadecimal digits or 104 bits (13-character). +The length of each key must be either 40 bits, i.e. a 5-character ASCII +string or 10 hexadecimal digits (64 bit encryption); 104 bits i.e. a +13-character ASCII string or 26 hexadecimal digits (128 bit encryption); +or, for cards that support it, 232 bits, i.e a 29-character ASCII string +or 58 hexadecimal digits (256 bit encryption). .It Fl nwkey Disable WEP encryption. .It Cm nwkey Cm persist - df committed, but we tweaked it. jsg prompted me to drop the 256-bit stuff as a vendor extension and it could potentially be confused with 256 bit aes WPA which we do support. the final version is included below. thanks for your mail. jmc Glad to be of help...and thanks for the clarification. df Index: ifconfig.8 === RCS file: /cvs/src/sbin/ifconfig/ifconfig.8,v retrieving revision 1.226 diff -u -r1.226 ifconfig.8 --- ifconfig.82 Feb 2012 12:34:37 - 1.226 +++ ifconfig.818 Mar 2012 23:37:02 - @@ -940,8 +940,13 @@ within the key must be escaped with a backslash. Note that if multiple keys are used, their order must be the same within the network. -The length of each key must be either 40 bits, i.e. a 5-character string or -10 hexadecimal digits or 104 bits (13-character). +.Pp +The length of each key must be either 40 bits for 64-bit encryption +(5-character ASCII string +or 10 hexadecimal digits) +or 104 bits for 128-bit encryption +(13-character ASCII string +or 26 hexadecimal digits). .It Fl nwkey Disable WEP encryption. .It Cm nwkey Cm persist
Re: install questions
On Sun, 18 Mar 2012 17:31:39 -0500 Amit Kulkarni wrote: Yep, atrocious i/o performance in VMWare Player as of 4.0.2. This was before rthreads though, I don't think it would alter much after rthreads. Hmm, glad this came up. I'm on 3 and was recently thinking of getting the latest version.
Re: install questions
On Sun, 18 Mar 2012 21:50:15 + (UTC) Stuart Henderson wrote: I think I tried vmware player at one point and had absolutely dreadful i/o performance, no idea if that is still the case. I've done a lot of testing on one machine using vmware player and I haven't noticed the reduced HDD I/O and net which should be as fast as loopback is fast enough. From tests I do know HDD I/O is reduced though. It is annoying the way it seems to incessantly eat hdd space in your home partition though. It can be fixed but I haven't risked the alleged potential instability yet. My socket on the machine I want to use doesn't have hardware virtualisation support unfortunately, though my TV does.
rito gratis
Salve mi chiamo antonio ritiro gratis vari tipi di metallo faccio la raccolta o ritiro a domicilio come cavi elettrici acciaio rame ottone ferro zinco alluminio stagno ecc.. ritiro solo in campania contatti . cell. 389 0654722 [demime 1.01d removed an attachment of type image/jpg which had a name of ragno.jpg]
