On Mon, 29 Aug 2005, Vinicius Pavanelli Vianna wrote:
I'm currently using an OpenBSD 3.7 as a firewall for my network, since
this machines is a 1U rack I can't add an extra ethernet card to it, so
I was looking for an alternative solution to use redundancy, since there
are plenty of usb ports
So have him send the message pre-formatted to the list? HTML?
How about just draw the diagram using ports/graphics/dia/* and export to
PNG, post the URL?
~BAS
On Fri, 2005-09-30 at 10:01, J.C. Roberts wrote:
On Fri, 30 Sep 2005 18:35:16 +0530, Manpreet Singh Nehra
[EMAIL PROTECTED] wrote:
What platform are you on? Are you compiling it from source?
It works just fine in 3.7/i386.
Just:
bash-3.00# cd /usr/ports/net/ntop make install clean
If you insist on source, try looking at /usr/ports/net/ntop/patches/*
Try reading about Ports in the FAQ.
~BAS
On Thu, 2005-09-29 at
.
But you need a technique for queuing a shared ingress
~BAS
--
http://2suck.net/hhwl.html - http://www.bsws.de/
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)
--
l8r* --
~ Brian A. Seklecki
From back in the heady days when 'Help Desk' meant
2005 11:28:24 -0400 (EDT)
From: Brian A. Seklecki [EMAIL PROTECTED]
To: Henning Brauer [EMAIL PROTECTED]
Cc: misc@openbsd.org, Tony Sarendal [EMAIL PROTECTED],
jared r r spiegel [EMAIL PROTECTED], Seamus Wassman [EMAIL PROTECTED]
Subject: Queing on Multiple Interfaces Revisited (WAS: Re
Would anyone like to elaborate on the impacts of using keep state on
conjunction with pass rules that assign traffic to queues?
One might assume that inverted traffic flows would also be queued, however
that would break the traffic can only be queued egress an interface
rule...
There should
I'll double check this today and verify. Will the IPMI on the
motherboard only work with the onboard ethernet controllers, or will it
get its grubby little hands on any/all controllers it finds? If it only
The IPMI configuration screen gives you the option of configuring which
Interface to
On Wed, 19 Oct 2005, Theo de Raadt wrote:
Someone with one of these problematic cards should put it in the
It isn't so much a bug; more so a caveat of Dell's implenentation.
Maybe you can order PowerEdge 1850s w/o a hardware IPMI implementation,
but I don't think it's an issue that warrants
For the record, these systems run 3.7/i386 rock solid. Just forget
entirely about using the Software Assist RAID support on the motherboard
and use RAIDFrame instead.
In the BIOS, you can toggle it between RAID and NON-RAID mode, but it
makes no difference. The kernel probes it just the
contains
an
example much as you describe (as I recall, specifying a queue for -incoming-
traffic will indeed cause that traffic to be processed through the named queue
as it is -outgoing-).
Bill
Brian A. Seklecki wrote:
Would anyone like to elaborate on the impacts of using keep state
On Fri, 21 Oct 2005, Xavier Beaudouin wrote:
Hello there,
I have 2 openbsd box (that does as well openbgpd but this is not the aim
of this mail).
Question is that any problems to do
sysctl net.inet.carp.preempt=1
and
ifconfig em0 up
ifconfig vlan0 vlan 11 vlandev em0
Each machine must
You said you entered into those files. Did you vi(1) them mnaually?
Did you rebuild the database afterward? When you finger the user, what
does the shell show up as? Use either vipw(8) as root, to do this, or
use chfn(1) as the user.
~BAS
On Fri, 21 Oct 2005, morla wrote:
hello all,
i
More to the point, how to find this info.
1: Go to http://www.openbsd.org/cgi-bin/man.cgi
2: click apropos
3: make sure current is selected
4: query sync
5: click on sasynchd(8) and sasychd.conf(5)
it goes to the default queue.
* Brian A. Seklecki [EMAIL PROTECTED] [2005-10-21 17:59]:
I was just curious if any of the developers (or experts) would care to
articulate officially :}
~BAS
On Wed, 19 Oct 2005, William Bloom wrote:
The PF queueing FAQ page at http://www.openbsd.org has a wealth
...a while back, i wrote a tutorial for RAIFRame RAID1 as a root FS on
NetBSD. I used the bootstrap method. Sometime not soon after, NetBSD
added RAIDFrame to the INSTALL* kernels and presumably menus to sysinst,
mitigating the need for this approach.
the boostrap process is:
*) do a basic
This is confirmed to work? I suppose that would resolve part of my
problem with 4314/system
~BAS
On Thu, 2005-10-27 at 05:02, Runo Forrisdahl wrote:
On Wed, Oct 26, 2005 at 02:40:52PM -0400, Roy Morris wrote:
| I have been reading through the archives but have not found a reliable
answer
Try to 'tar tzvf [file]' each member. Do any of them exit with
Unexepected EOF ? That means that the download never completed that the
file is truncated (which leads to the SHA1 and Size mismatch)
~BAS
On Sun, 19 Aug 2007, Chris wrote:
I downloaded all the packages put them in
raid(4) hasn't been touched in a while (years), so short answer: No.
NetBSD is still actively committing to it, though, and has functional
background parity recalculation.
I understand there is interest in replacing RAIDFrame instead of
resynchronizing the subtree.
In the mean time, find a
Ok, it's running now. The cause was not the move from 4.0 - 4.1, but
the move from a diskful to a diskless setup: The machine mounts its root
fs via nfs.
WHAT?!?!?! What the heck kind of security-minded sanity check would
fail based on the underlying VFS?
Did you eventually get a PR open
Any word on the degraded performance of fork operations inside the
vmware server guest? Or am I imagining that thread of e-mails?
~BAS
On Sat, 2007-07-07 at 10:04 -0500, Todd Pytel wrote:
On Sat, 2007-07-07 at 10:44 -0400, Nick Holland wrote:
There's the answer to your question: For your
Safe to ignore - most i810 devices have duplicate PCI bus entries for
the internal and external video. Both are drive by the same logical
GPU, though.
~BAS
On Sun, 2007-07-01 at 00:21 +0800, Alex Kwan wrote:
Hello!
When I exit from the X, I got following warning message:
I810: No matching
I know it is a lot faster but would that solve the parity problem on
boot completely? 'man bio' doesn't seem to answer that.
For a variety of reasons, hardware raid controllers handle ungraceful
shutdown better -- onboard batteries for the HBA's RAM/Cache, etc.
Hardware RAID almost never goes
Also:
1) Does the documentation in ipsec(4) / isakmpd.conf(5) /
sasyncd.conf(5) imply that all policies / security associations should
be between the CARP HA L3 address?
2) Is your isakmpd(8) binding to wildcard address?
3) Did this problem evolve with the implementation of sasyncd(8) or did
. The other
side is in passive mode.
Thanks for the replies.
Patrick
Brian A. Seklecki schrieb:
Also:
1) Does the documentation in ipsec(4) / isakmpd.conf(5) /
sasyncd.conf(5) imply that all policies / security associations should
be between the CARP HA L3 address?
2) Is your
To get debugging info out of pf(4):
$ sudo pfctl -x loud
Also check netstat -s for layer 3/4 errors, and netstat -m for
kernel memory resource consumption, and ifconfig -i(?) for layer 2
errors.
~BAS
On Tue, 2007-10-02 at 14:20 +0700, dika wrote:
Dear teams,
Im using OpenBSD4.1 for my
.
~BAS
On Wed, 2007-10-03 at 20:32 -0700, Jeff Simmons wrote:
3002
--
Brian A. Seklecki [EMAIL PROTECTED]
Collaborative Fusion, Inc.
IMPORTANT: This message contains confidential information and is intended only
for the individual named. If the reader of this message is not an intended
On Thu, 2007-10-04 at 15:24 +0200, Marc Balmer wrote:
Tang Tse wrote:
Just one question regarding VPNs OpenBSD and HW, is there any recomendation
for hardware? i mean, i want to setup a VPN between 2 offices and i need
some reasonable speed.. with a computer with some recent hardware do i
On Thu, 2007-10-04 at 17:54 +0200, Piotrek Kapczuk wrote:
2007/10/4, Brian A. Seklecki [EMAIL PROTECTED]:
I'm demo'ing some 1U P4-class network appliance hardware that will
probably fit your needs well. See URLs below.
[...]
http://code.google.com/p/bsd-appliance/wiki
Timo Schoeler [EMAIL PROTECTED] wrote:
On an semi-related note, I recently tested the vpn1411 in a
significantly faster (2.8GHz P4 Celeron D):
des3/3des:
w/ acceleration:
# time dd if=/dev/zero bs=1m count=100 | openssl des3 -pass pass:test
-engine cryptodev -out /dev/null
engine cryptodev
On Fri, 2007-10-05 at 12:14 -0700, Jeff Simmons wrote:
On Friday 05 October 2007 01:17, Claer wrote:
The Cisco client license forbids explicitely to connect to anything but
Cisco Hardware.
If that's so, then legal forgot to tell marketing. ;-)
The Cisco VPN 3002 Hardware Client works
On Fri, 2007-10-05 at 18:50 -0400, Rod Dorman wrote:
On Friday, October 5, 2007, 15:14:41, Jeff Simmons wrote:
On Friday 05 October 2007 01:17, Claer wrote:
The Cisco client license forbids explicitely to connect to anything but
Cisco Hardware.
You could rip the ISA controller out of a Pix
*
-lava (Brian A. Seklecki - Pittsburgh, PA, USA)
http://www.spiritual-machines.org/
!
--
Brian A. Seklecki [EMAIL PROTECTED]
Collaborative Fusion, Inc.
IMPORTANT: This message contains confidential information and is intended only
for the individual named. If the reader of this message is not an intended
recipient (or the individual responsible for the delivery
x.east.verizon.net
vpncxxx.pub.collaborativefusion.com spi 0x0ACAEE17 seq 89 len 116
ICMP packets giving me the old slip-a-roo out the back door :}
--
Brian A. Seklecki [EMAIL PROTECTED]
IMPORTANT: This message contains confidential information and is intended only
for the individual named
On Thu, 18 Oct 2007 14:16:59 +0100
Tony Sarendal [EMAIL PROTECTED] wrote:
Just a 5 minute quick test, nothing too scientific.
Thanks! What was your IXIA platform? RHEL with gig interface or an appliance?
~BAS
--
Brian A. Seklecki [EMAIL PROTECTED]
IMPORTANT: This message contains
pciide0 at pci0 dev 15 function 2 AMD CS5536 IDE rev 0x01: DMA, channel 0
wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: Turbo Industrial CF Card
wd0: 1-sector PIO, LBA, 1983MB, 4062240 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
Please confirm that the following are applicable:
* boot(8), biosboot(8), installboot(8), boot_i386(8) lack any
support for booting off RAIDFrame volumes (a 13 line patch 22
months ago fixed this on the b other side of the isleb (r)).
* No support is planned
The same behavior happens on Dell's serial console redirection. It
happens when you boot FreeBSD too. As soon as the kernel starts output
ANSI characters it goes dead.
Dell lets you toggle between VT100/220 mode and ANSI mode, but it's
unaffected. The kernel output just kills it.
Dell has an
The URL:
http://digitalfreaks.org/~lavalamp/openbsd_ipsec_generic.png
Outlines the generic cookie-cutter configuration from vpn(8) with
addressing changes. A couple of comments on that document:
*) The output of 'netstat -rn -f encap' should probably be included at the
end.
*)
On Sat, 23 Jul 2005, Hans-Joerg Hoexer wrote:
Hi,
On Fri, Jul 22, 2005 at 06:43:34PM -0400, Brian A. Seklecki wrote:
The URL:
http://digitalfreaks.org/~lavalamp/openbsd_ipsec_generic.png
Outlines the generic cookie-cutter configuration from vpn(8) with
addressing changes. A couple
Wait...1280x1024 or 1600x1200 w/ 8MB of RAM? Is that right? Onboard
video only occupies 8MB?
(II) ATI(0): Using Block 1 MMIO aperture at 0x00426000.
(II) ATI(0): MMIO write caching enabled.
(--) ATI(0): 8192 kB of SDRAM (1:1) detected (using 8191 kB).
(WW) ATI(0): Cannot shadow an accelerated
Why were they given to you? Something wrong with them perhaps. Try
booting Memtest86+ ISO and let it ride for a while?
Try another kernel from another OS? Try a non MP kernel?
~BAS
On Wed, 2005-11-16 at 22:01, Lokkju wrote:
Hey all, hoping someone might be able to point me in some sort of
I'm not sure what to make of 'component1'. It's not an explicit
For some reason, RAIDFrame refers to a missing drive component1
whenever the RAID device is initialized and the drive is absent.
~BAS
device, did you use that string your raid0.conf? The first slot in
these commands should
Are you expiring lifetime on bandwidth or time? Probably the defaults
of whatever transforms suite you're using.
Try manually defining it? If you expire on time, say...10 minutes, you
can tcpdump for udp 500 on either side at the expected time and watch
the renegotiation.
Maybe UDP packets are
for local
Is /tmp mounted MFS or so? Is it mode 777?
~BAS
On Thu, 17 Nov 2005, Simon Morgan wrote:
On 17/11/05, Brian A. Seklecki [EMAIL PROTECTED] wrote:
Wait...1280x1024 or 1600x1200 w/ 8MB of RAM? Is that right? Onboard
video only occupies 8MB?
Sorry, yes. AFAIK the onboard video is 8MB
On Thu, 17 Nov 2005, Simon Morgan wrote:
On 17/11/05, Brian A. Seklecki [EMAIL PROTECTED] wrote:
I just dont see 8mb video cards making it to 1280x1024 at 24/16bpp
I've now managed to get a display up. Many thanks to you and everyone
else who offered advice. Unfortunately the mouse
On Thu, 17 Nov 2005, Simon Morgan wrote:
On 17/11/05, Brian A. Seklecki [EMAIL PROTECTED] wrote:
I had a U5 270? 330? Mhz for a year or two; the only way to get into
1280x1024 (the max res of the monitor that it shipped with) was to drop
into 8bpp. At 16/24 bpp, with the 8mb integrated ATI
The thing emulates a USB keyboard. Trying toggling legacy emulation
mode in the BIOS.
~BAS
On Thu, 2005-12-01 at 03:55, Xavier MilliC(s-Lacroix wrote:
Hello,
I 'm trying to install OBSD 3.8 on a Dell Poweredge 750 server using the Card
DRAC III/XT (provides remote console/screen).
But
I opened a PR on this earlier this year. Seach my last name in
query-pr.
The Cisco 3000 supports SA Proposals with multiple discontiguous
subnets.
~BAS
On Tue, 2005-06-07 at 20:54, Tamas TEVESZ wrote:
hi,
i have a situation where a branch office with multiple,
non-overlapping,
All:
It may seem rudimentary, but no where in the FAQ or man pages is it
explicitly stated that the source address or address pool of a NAT
translation must be assigned to an interface.
Obviously it can be either be a primary address (such as 99.9% of the PAT
configurations on the Internet)
I've only had the priv. to run OpenBSD on the 750 and 850 1Us from Dell.
However I have a number of FreeBSD 5.3x hosts on single and dual-proc 1850
models, some with RAID and some with standard SCSI.
The standard SCSI config (on which I run software RAID) probes as:
NAME
mpt(4) -- LSI
All:
I'm CC'ing everyone who has previously posted the destination host
unreachable behavior when setting up a generic 4-host IPSec VPN tunnel
config per the template in vpn(8) / isakmpd.conf(5).
NOTE: This is not the I can't ping the other side of the tunnel from the
remote gateway because
no, you just need a route to the destination, this is a known
a route to the destination of the tunnel...(that overlaps with the encap
route...)...
but and there's no simple fix. however, just create a network
route for the peer that points back to the sender. this way
...or a route to the
There is the (expensive) Real Weasel for x86 kit, Dell's crappy lights
DRAC/4 isn't that bad :}
You can always use serial console redirection on the 1850s/2850s; it
works well until OS boot (BIOS menus works, RAID, IPMI menus), when you
have to setup serial console redirection on the boot
started filing PR's for RAIDframe stuff in OpenBSD -- there have been
a lot of changes/fixes to RAIDframe in the last 5 years that aren't
I have $100 via Paypal for the person who commits RAID enabled boot
blocks for Sparc[64] and i386/amd64 on OpenBSD.
I have an $100 additional via Paypal
PC speaker beep (something action on the console?)
Or possibly hardware alarm?
~BAS
On Sat, 2005-12-17 at 09:12, dimaz wrote:
I've installed OpenBSD on my small server, before on server was linux,
and 2-3 times a day my server beeps (3 times)...
What does it mean? And how I can control this
But as soon as I start an scp from Perspex to Soekris, Perspex reboots
after a few hundred kb. Unfortunately, Perspex is in a datacenter and I
do not have console access to it to see what the heck is happening at that
exact moment.
I don't recall. But for the record (IPSEC inside GRE):
If
have to play
with it. All that I can personally attest to is: It works fine with
Drac/4 on FreeBSD 5.x =/
~BAS
-Message d'origine-
De : Brian A. Seklecki [mailto:[EMAIL PROTECTED]
Envoyi : lundi 5 dicembre 2005 02:11
@ : Xavier Millihs-Lacroix
Cc : misc@openbsd.org
Objet : Re
All:
Regarding the future of IPMI and SNMP, where do they intersect in the
evolution of enterprise free software (aka, BSD) ?
Specifically, the OpenBSD implementation we're seeing here seems to
provide sysctl style access to Sensor data, watchdog info, etc., but what
about other IPMI
On Thu, 26 Jan 2006, Bruce Shaw wrote:
We've actually got several different problems here.
Specifically, the OpenBSD implementation we're seeing here seems to
provide sysctl style access to Sensor data, watchdog info, etc., but what
about other IPMI functions?
I've been working on better
Does anyone have a personal archive that they can export via MUA and
share? Is there a way to ask Majordomo for it (playing with the 'get'
command now)
I'm doing some number crunching and analysis and I'd like a few year-long
data sample.
TIA,
l8*
-lava (Brian A. Seklecki
know I can write my own, but I hope not to be
Christopher Columbus :)
dirty hack would be net-snmpd and lots of 'exec' OIDS
--
Brian A. Seklecki [EMAIL PROTECTED]
Collaborative Fusion, Inc.
IMPORTANT: This message contains confidential information and is intended only
I ran into some kernel panics (watchdog reset) with GRE + ESP/Transport
(or ESP+GRE) back in the day. It was related to MTU assumptions etc.
There was a sendbug(8) related to it. Google seklecki gre ipsec
openbsd
http://archives.neohapsis.com/archives/openbsd/2006-01/0623.html
etc...
On
xinit -- -logverbose 9 -verbose 9 send the EDID info? Try a liveCD
that that has the 'nvidia' binary driver and see if they have support
yet, it may be a simple hack.
~BAS
On Sat, 2007-03-31 at 18:46 +0200, Eric Dillenseger wrote:
Hi,
I just bought a 22 inches 16/10 flat panel.
Saddly, I
DDC/EDID can be a killjoy. I want to say that there was an
Option NoEDID true
~~BAS
On Sat, 2007-03-31 at 21:09 +0200, Eric Dillenseger wrote:
(II) NV(0): Supported VESA Video Modes:
(II) NV(0): [EMAIL PROTECTED]
(II) NV(0): [EMAIL PROTECTED]
(II) NV(0): [EMAIL PROTECTED]
(II) NV(0):
It would help to see the dmesg(8) output of the card on a supported
platform. Do you mean ral(4)? Many PCI drivers will just-work.
~BAS
On Sat, 2007-03-31 at 16:12 +0200, Maxim Belooussov wrote:
Hi,
I plan to turn my Sun Ultra 10 into a firewall/access point using a
supported Ralink PCI
megarc(8) has been ported to some non-Linux platforms. MegaCli runs in
emulation mode in others (dirty dirty hack). The best bet is a bio(4)
interface or a hardware raid that has a non-BIOS/proprietary CLI
management interface.
~BAS
On Sat, 2007-03-31 at 14:37 +1000, David Gwynne wrote:
On
.
I've read that there may be problems with 'older' computers. I have
this
in a PIII - perhaps that would qualify as 'older' ?
--
Brian A. Seklecki [EMAIL PROTECTED]
Collaborative Fusion, Inc.
IMPORTANT: This message contains confidential information and is intended only
for the individual
http://xorg.freedesktop.org/archive/X11R6.8.0/doc/scanpci.1.html
On Mon, 2007-04-30 at 14:14 -0400, Bret Lambert wrote:
On Mon, 2007-04-30 at 14:03 -0400, Brian A. Seklecki wrote:
Full lspci(8) / pciconf(8) and dmesg(8) output would help us answer the
question.
~~BAS
From
Kettenis wrote:
the Calgary or Edmonton area that can loan us a dual g4 machine end
--
Brian A. Seklecki [EMAIL PROTECTED]
Collaborative Fusion, Inc.
IMPORTANT: This message contains confidential information and is intended only
for the individual named. If the reader of this message
where I'm at in relationship to the max (if there's no
hard number, I'm guessing the number depends on hardware and other
system options that affect kernel memory).
--Bill
l8*
-lava (Brian A. Seklecki - Pittsburgh, PA, USA)
http://www.spiritual-machines.org/
Guilty? Yeah
(Brian A. Seklecki - Pittsburgh, PA, USA)
http://www.spiritual-machines.org/
Guilty? Yeah. But he knows it. I mean, you're guilty.
You just don't know it. So who's really in jail?
~James Maynard Keenan
all
If you were to argue that pf.conf(5) is unclear on this point, especially
where it it says
By default, packets coming in and out of any interface can match a state
then I would not disagree with you :-)
HTH,
Brian.
l8*
-lava (Brian A. Seklecki - Pittsburgh, PA, USA
understanding these will be dropped.
Tim
--
Darksun rising over blood red sea
l8*
-lava (Brian A. Seklecki - Pittsburgh, PA, USA)
http://www.spiritual-machines.org/
Guilty? Yeah. But he knows it. I mean, you're guilty.
You just don't know it. So who's really in jail
though.
Has anyone else experienced this problem or seen documentation on it?
If there is no documentation, I'm going to submit it as a bug.
Thanks...
-Lawren
l8*
-lava (Brian A. Seklecki - Pittsburgh, PA, USA)
http://www.spiritual-machines.org/
Guilty? Yeah
--
Brian A. Seklecki [EMAIL PROTECTED]
Collaborative Fusion, Inc.
IMPORTANT: This message contains confidential information and is intended only
for the individual named. If the reader of this message is not an intended
recipient (or the individual responsible for the delivery of this message
!
Post your dmesg, the contents of /etc/pf.conf and your BGP configuration
file. Doing so will not solve your issue but it will give other members of
the list more information about your setup.
l8*
-lava (Brian A. Seklecki - Pittsburgh, PA, USA)
http://www.spiritual
Athalon, an AMD Geode, and a VMWare machine.
l8*
-lava (Brian A. Seklecki - Pittsburgh, PA, USA)
http://www.spiritual-machines.org/
Guilty? Yeah. But he knows it. I mean, you're guilty.
You just don't know it. So who's really in jail?
~James Maynard Keenan
PS
Athalon, an AMD Geode, and a VMWare machine.
l8*
-lava (Brian A. Seklecki - Pittsburgh, PA, USA)
http://www.spiritual-machines.org/
Guilty? Yeah. But he knows it. I mean, you're guilty.
You just don't know it. So who's really in jail?
~James Maynard Keenan
PS
!
l8*
-lava (Brian A. Seklecki - Pittsburgh, PA, USA)
http://www.spiritual-machines.org/
Guilty? Yeah. But he knows it. I mean, you're guilty.
You just don't know it. So who's really in jail?
~James Maynard Keenan
Just recompiled with:
#define NKPTP_MIN 8
#define NKPTP_MAX 191
Same result. Thank you though. We'll revisit it in the future when the
money is available?
~BAS
On Thu, 7 Jun 2007, mickey wrote:
On Wed, Jun 06, 2007 at 01:39:47PM -0400, Brian A. Seklecki wrote:
The 1st
Could it be memory ? hard disk ? Box has a 256mb + 512mb , and i don't
know
a way to test this memory without os on the box. Smth like memconf
There should be a memtest_obp_sparc whatever -- there's already one for
the OBP platform on the Apple PowerPC platform. Most Sun shops have
It works; free beer on me for all on me ... (Columbia maybe)
Thanks again,
~BAS
On Thu, 7 Jun 2007, mickey wrote:
On Thu, Jun 07, 2007 at 11:52:24AM -0400, Brian A. Seklecki wrote:
Just recompiled with:
#define NKPTP_MIN 8
#define NKPTP_MAX 191
Same result. Thank you
On Fri, 8 Jun 2007, Geraerts Andy wrote:
We have an OpenBSD firewall running for a while now. Since a few days we
encounter some sort of selective natting. I try to ping a host, I get reply,
and 2 minutes later I try to ping the same host and I dont get replies.
So despite the state being
-duplex based on negotiated link capability.
entry point at 0x200120
Any ideas why this is and what needs to be done to stop the stalling?
My board has the following memory, if that helps.
real mem = 132657152 (129548K)
avail mem = 106545152 (104048K)
Thanks for your time
l8*
-lava (Brian
On Mon, 11 Jun 2007, Otto Moerbeek wrote:
Please contact krw@, he has been searching testers for RAIDframe root
autoconfig on [EMAIL PROTECTED] There's even a diff posted there, iirc.
I'm your point-man there. A while back I wrote 3 pages of
technical detritus on making it work in 3.9/4.0.
, Thierry Lacoste wrote:
Hello,
I'm using mod_auth_ldap-1.6.0p3 on OpenBSD 4.1
and I'd like to make it authenticate on 2 ldap servers
in case one is down.
I fought with the AuthLDAPURL directive but with no success.
Any help would be appreciated.
Regards,
Thierry.
l8*
-lava (Brian
provide.
Thanks!
JohnM
--
john mendenhall
[EMAIL PROTECTED]
surf utopia
internet services
l8*
-lava (Brian A. Seklecki - Pittsburgh, PA, USA)
http://www.spiritual-machines.org/
Guilty? Yeah. But he knows it. I mean, you're guilty.
You just don't know it. So
message has been swept by Sophos
for the presence of computer viruses.
__
l8*
-lava (Brian A. Seklecki - Pittsburgh, PA, USA)
http://www.spiritual-machines.org/
Guilty? Yeah. But he knows it. I mean
and 200.232.140.0 to sk0?
Thank you very much.
Jeff
--
Get a Free E-mail Account at Mail.com!
Choose From 100+ Personalized Domains
Visit http://www.mail.com today
l8*
-lava (Brian A. Seklecki - Pittsburgh, PA, USA)
http://www.spiritual-machines.org/
Guilty? Yeah. But he
have to follow step by
step the process here:
http://marc.info/?l=openbsd-ppcm=117871289207004w=2
Meaning trick the disklabel to get it going.
Best,
Daniel
l8*
-lava (Brian A. Seklecki - Pittsburgh, PA, USA)
http://www.spiritual-machines.org/
Guilty? Yeah. But he
Good catch on this guys. We should remember that most modern NAT is
PAT, or hybrid NAT+PAT. You should ask your ISP for more space to NAT
to (A NAT+PAT hybrid pool).
Cisco calls it overloading. Reminds me of a Soundgarden song.
~BAS
On Wed, 2007-06-13 at 12:03 +0100, Stuart Henderson wrote:
/13 02:00, Kian Mohageri wrote:
Is my best option to kill syslogd from rc.local or manually edit /etc/rc?
How about leaving them both running, and binding syslog-ng to just
the relevant IP address?
--
Brian A. Seklecki [EMAIL PROTECTED]
Collaborative Fusion, Inc.
IMPORTANT: This message
requests but I don't think apache
re-directs will suffice.
Cheers,
Linden.
--
Brian A. Seklecki [EMAIL PROTECTED]
Collaborative Fusion, Inc.
IMPORTANT: This message contains confidential information and is intended only
for the individual named. If the reader of this message
Such as Distributed computing environments where you have your HAL4
service VIP on the same segment/subnet as your distributed server farm.
Or HA databses
~BAS
On Wed, 2007-06-13 at 17:49 +0200, Pierre-Yves Ritschard wrote:
best pf network stack cannot solve.
--
Brian A. Seklecki [EMAIL
about the checksum format, md5 tends to rule the
world these days.
What is it called exactly?
You mean, in CKSUM? Cyclic redundancy check. See cksum(1).
--
Brian A. Seklecki [EMAIL PROTECTED]
Collaborative Fusion, Inc.
IMPORTANT: This message contains confidential information
at 12:36:33PM -0400, Brian A. Seklecki wrote:
Such as Distributed computing environments where you have your HAL4
service VIP on the same segment/subnet as your distributed server farm.
so they should redesign their network instead of inventing crazy
features. this DSR sounds like a hack
Kuhlman
Network Administrator
ColoradoVnet.com
l8*
-lava (Brian A. Seklecki - Pittsburgh, PA, USA)
http://www.spiritual-machines.org/
Guilty? Yeah. But he knows it. I mean, you're guilty.
You just don't know it. So who's really in jail?
~Maynard James Keenan
see the -x argument to pfctl(8); try turning up the debugging level to
various settings and watch syslog ~BAS
On Mon, 2007-06-18 at 13:46 +0200, Alberich de megres wrote:
I'm wandering if there is some way to log when an ip is inserted in a
table?
--
Brian A. Seklecki [EMAIL PROTECTED
*
-lava (Brian A. Seklecki - Pittsburgh, PA, USA)
http://www.spiritual-machines.org/
Guilty? Yeah. But he knows it. I mean, you're guilty.
You just don't know it. So who's really in jail?
~Maynard James Keenan
1 - 100 of 213 matches
Mail list logo
