Bridge PF with spamd but getting RST packet

?. Thanks, Edy

spamd deny users from using the SMTP

address into the whitelist before hand because users could be connected from anywhere. Thanks, Edy

Re: VPN solutions for OpenBSD to Windows

Hi Peter, Have you look at OpenVPN? Please check out this document http://blog.innerewut.de/articles/2005/07/04/openvpn-2-0-on-openbsd Cheers, Edy [EMAIL PROTECTED] wrote: Hi gang, I'm looking for peoples' experiences and advice for setting up a VPN between OpenBSD (I will be using 4.0

Re: spamd deny users from using the SMTP

Hi Mike, MTA is Qmail and it is running on a separate server ... Thanks, Edy Mike Erdely wrote: Edy wrote: Spamd is running fine now but when an user trying to send out email using the SMTP he is getting Server temporary failure please try again later error message. They have to retry

Re: spamd deny users from using the SMTP

Good Day, port 587 (submission) has been working great and it is enabled on Qmail :) Thank you. Edy Mike Erdely wrote: Edy wrote: Spamd is running fine now but when an user trying to send out email using the SMTP he is getting Server temporary failure please try again later error message

Anyone setup mod_security on bridge PF (transparent firewall) ?

Hi, I am wondering if anyone has configured PF transparent firewall to perform mod_security? Assuming you have 4 interfaces ext_if and int_if setup as bridge state_if is for pfsync mgmt_if has an IP address and able to route to internet Cheers, Edy

brconfig: bridge0: Operation not permitted

20 discarding role designated fxp0 flags=abLEARNING,DISCOVER,STP,AUTOEDGE,AUTOP2P port 1 ifpriority 128 ifcost 20 discarding role designated Addresses (max cache: 100, timeout: 240): any idea? Thanks, edy

Re: brconfig: bridge0: Operation not permitted

Issue resolved! It seems like in 4.0 current you are not allowed to have hellotime parameter in /etc/bridgename.bridge0 by removing that sentence from the file stops the error message. Cheers, Edy Edy wrote: Hi I am trying to execute the following command from CLI (as root user) brconfig

auto start mysql and snort OpenBSD 4.0

Hi I have googled and read on the man pages but something is missing here. For example i have the following in my /etc/rc.local if [ X${mysql} == XYES -a -x /usr/local/bin/safe_mysqld ]; then echo -n ' mysqld'; /usr/local/share/mysql/mysql.server start fi if [ X${snort} == XYES -a -x

Re: auto start mysql and snort OpenBSD 4.0

Daniel, I have been to that site already and it does not start mysql when the system rebooted but i could start mysql by using the command. Cheers, -e Daniel Ouellet wrote: Edy wrote: Hi I have googled and read on the man pages but something is missing here. For example i have

Re: auto start mysql and snort OpenBSD 4.0

it to 20seconds) if [ -x /usr/local/bin/snort ]; then /usr/local/bin/snort -D -d -i fxp0 -c /etc/snort/snort.conf -u _snort -g _snort /dev/null echo -n ' snort' fi Cheers, -e Edy wrote: Daniel, I have been to that site already and it does not start mysql when the system rebooted but i could start

create an ISO based on the running system

Good Day, I have setup a box OpenBSD 4.0 with bridge firewall, spamd, snort with mysql + BASE and snort2pf. I would like to create an ISO image of the box so that I could install the exact setup on any system. Is there a document which explains on how to achieve this? Thank you -e PS.

Re: pf - altq shaping http download

Please disregard this email. Sent to wrong mailing list :) Edy wrote: Hi, I am thinking to implement altq to limit the download speed to our web server. Ideally I would like to limit everyone let's say to 30Kbps/thread and every source IP is allowed to open 1 download connection only

pf - altq shaping http download

it evenly. Thanks! Edy

Re: pkg_create error

use-rel-suffix compress # Ports Collection. OpenBSD-ports tag=. is there anyway to get the old ports back to its place ? e.g. extract ports.tar.gz from the CD-ROM ? tia. From: Stuart Henderson [EMAIL PROTECTED] To: Edy Purnomo [EMAIL PROTECTED], misc@openbsd.org Subject: Re

Re: pkg_create error

] To: Edy Purnomo [EMAIL PROTECTED] CC: misc@openbsd.org Subject: Re: pkg_create error Date: Thu, 22 Sep 2005 09:23:02 +0200 On Thu, Sep 22, 2005 at 02:08:39AM +, Edy Purnomo wrote: argh! yes, it's true, i did update the ports by typing cvsup -g -L 2 cvs-supfile with conf

iptables vs pf

). is there any program that can proof what he says ? thanks. -edy-

help: smmsp

hi, i keep having the smmsp daemon shows on the ps aux list. so it fills up my clientmqueue directory. how to rid off this thing ? i've sendmail disabled already. thanks in advance. -edy-

help: pf pop3

hi, trying to: block all pop3 to outbound connection BUT allow one client AND inbound (local mail server) connection. any suggestion ? -edy-