Sendmail Issue

2007-02-05 Thread Giancarlo Razzolini
domain, not the frw.domain.com, respectively. But neither of them worked. I would like to have another solution than configuring my MTA to accept mail from those domains. I would like to have the domain rewrited to domain.com not frw.domain.com. Any ideias? My regards, -- Giancarlo Razzolini Linux

Re: Sendmail Issue

2007-02-05 Thread Giancarlo Razzolini
Giancarlo Razzolini escreveu: Hi all, I'm having some trouble with sendmail. My problem is the following: i do have many firewalls in many places and would like to receive all the daily/weekly/monthly reports in my e-mail. All the machines have their fqdn hostnames as frw.domain.com

Re: Annoying problem with dnsmasq

2007-02-14 Thread Giancarlo Razzolini
internal net port 68 udp to your firewall internal ip port 68 udp for dhcp renews. Try opening up these ports on your internal interface. My regards, -- Giancarlo Razzolini Linux User 172199 Red Hat Certified Engineer no:804006389722501 Moleque Sem Conteudo Numero #002 Slackware Current OpenBSD Stable

Re: dhcpd and bootp

2008-09-19 Thread Giancarlo Razzolini
. If there isn't any subnet declaration that match that if, it will simply drop. Check you syslog and daemon log files. They will tell you what is wrong. My regards, -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat Certified Engineer no:804006389722501 Verify:https

Re: New scheduler, same problem (ALTQ questions)

2008-09-22 Thread Giancarlo Razzolini
on that, you can have cron entries to change you hfsc rates trough the day. This could work also. My regards, -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat Certified Engineer no:804006389722501 Verify:https://www.redhat.com/certification/rhce/current/ Moleque Sem Conteudo

Re: Problems to compile squid with ldap auth on openBSD 4.3

2008-09-23 Thread Giancarlo Razzolini
kernel and userland. Or, i could send you the patches i made for it. Since on this list there is the demime, as me and i sent to you the patches in private. But first, try with ports. My regards, -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat Certified Engineer

Re: default route ignored

2008-09-24 Thread Giancarlo Razzolini
configured wrong and it was passed to me wrong. I configured it, and it simply would not work. I used a program to do the calculation of what would be the correct subnet mask. It was ipcalc, AFAICR. It's in ports. My regards, -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat

Re: New scheduler, same problem (ALTQ questions)

2008-09-24 Thread Giancarlo Razzolini
regards, -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat Certified Engineer no:804006389722501 Verify:https://www.redhat.com/certification/rhce/current/ Moleque Sem Conteudo Numero #002 OpenBSD Stable Ubuntu 8.04 Hardy Heron 4386 2A6F FFD4 4D5F 5842 6EA0 7ABE BBAB 9C0E

Re: Bad MD5 on snapshot i386 install.iso

2008-09-29 Thread Giancarlo Razzolini
checked the master fanout site because I got repeated too many users errors. tcpdump on your if and see if you're getting bad tcp checksum's. Most likely it's a problem with you network if, or switch, or router, corrupting packets. -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User

Re: Bad MD5 on snapshot i386 install.iso

2008-09-30 Thread Giancarlo Razzolini
Steve Shockley escreveu: On 9/29/2008 12:36 PM, Giancarlo Razzolini wrote: tcpdump on your if and see if you're getting bad tcp checksum's. Most likely it's a problem with you network if, or switch, or router, corrupting packets. If you're used to seeing bad TCP checksums in tcpdump, you

Re: pf - queue filter directive sticky?

2008-09-30 Thread Giancarlo Razzolini
not sure. -HKS from pf.conf man page: default Packets not matched by another queue are assigned to this one. Exactly one default queue is *required.* -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat Certified Engineer no:804006389722501

Re: Limit number of login sessions

2008-10-01 Thread Giancarlo Razzolini
Maximo Pech escreveu: I mean, I don't know if there's another way to do it without having to login in the ssh server. What about a VPN? You can filter on vpn ip's. -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat Certified Engineer no:804006389722501

Re: redhat_base not found in packages

2008-11-04 Thread Giancarlo Razzolini
/4.4_packages/ Is the starting point to find packages. I always recall to it when i need to find something. Or, if you have it, you can use the ports and make a search on it. My regards, -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat Certified Engineer no:804006389722501

Re: Duplicate incoming packets to multiple destinations using pf

2008-11-04 Thread Giancarlo Razzolini
the destination address to multiple hosts Cheers, Simon. On Nov 4, 2008, at 5:32 PM, Giancarlo Razzolini wrote: Simen Stavdal escreveu: Hello, I have the following scenario. A router (let's call it router A) is sending snmp traps to an nms (Network Monitoring System). Between the router

Re: [SPAM Detectado]OpenVPN on OpenBSD auth via username/password question

2008-11-11 Thread Giancarlo Razzolini
Linyin escreveu: Thanks Giancarlo Razzolini very much!!! It is very helpful for me. I try to build it after read your README: BUILD To build openvpn-auth-passwd on systems that use shadow, you will need to have the shadow suite and it's devel headers installed. On GNU systems build

Re: [SPAM Detectado]OpenVPN on OpenBSD auth via username/password question

2008-11-11 Thread Giancarlo Razzolini
give me some advise or others softwares can use on OpenBSD, Thank you. I've developed a plugin for openvpn that do just what you want. http://auth-passwd.sourceforge.net My regards, -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat Certified Engineer

Re: [SPAM Detectado]OpenVPN on OpenBSD auth via username/password question

2008-11-11 Thread Giancarlo Razzolini
file. It won't work, because the shadow suite is only available on linux and solaris, AFAIK. You have to edit the Makefile and define the USE_SHADOW variable to 0. Then it will compile cleanly. Also, you need gmake, as i stated before. My regards, -- Giancarlo Razzolini http

Re: PF + ATLQ on openbsd 4.4

2008-11-24 Thread Giancarlo Razzolini
. Daniel Not necessarily an error, since you can assign packets from one interface to queue of others interfaces. We need more info to help, like your interfaces configuration. My regards, -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat Certified Engineer

Re: PF + ATLQ on openbsd 4.4

2008-11-24 Thread Giancarlo Razzolini
remove the flags any from the rule. Also, when i want to debug something i put the log modifier in it to see if it was matched with the pflog. My regards, -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat Certified Engineer no:804006389722501 Verify:https

Re: rtfm

2008-12-17 Thread Giancarlo Razzolini
, -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat Certified Engineer no:804006389722501 Verify:https://www.redhat.com/certification/rhce/current/ Moleque Sem Conteudo Numero #002 OpenBSD Stable Ubuntu 8.04 Hardy Heron 4386 2A6F FFD4 4D5F 5842 6EA0 7ABE BBAB 9C0E 6B85

Re: help with pf and transparent squid

2008-12-30 Thread Giancarlo Razzolini
on other firewalls, but on pf, it doesn't work. But, using the inetd work just as the same. My regards, -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat Certified Engineer no:804006389722501 Verify:https://www.redhat.com/certification/rhce/current/ Moleque Sem Conteudo

Re: help with pf and transparent squid

2008-12-30 Thread Giancarlo Razzolini
Stuart Henderson escreveu: On 2008-12-30, Giancarlo Razzolini linux-...@onda.com.br wrote: fRANz escreveu: Hi. I've some trouble with this configuration: LAN -- fw (openbsd 4.4) -- adsl router LAN: 192.168.100.0/24 fw int int: sis1 fw int ind: 192.168.100.2 fw ext int: sis0 fw ext

Re: Release IP-adress OpenBSD 3.8

2009-01-06 Thread Giancarlo Razzolini
and manually remove the entries corresponding to the desired ip address. 3) start the dhcpd server again. Keep in mind the next time you answer something on the list to be more specific and descriptive. My regards, -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat

Re: Why so cool OS doesn't have vuln database?

2009-05-15 Thread Giancarlo Razzolini
/errata.html -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat Certified Engineer no:804006389722501 Verify:https://www.redhat.com/certification/rhce/current/ Moleque Sem Conteudo Numero #002 OpenBSD 4.5 Ubuntu 9.04 Jaunty Jackalope 4386 2A6F FFD4 4D5F 5842 6EA0 7ABE BBAB

Re: Wireless Freeze

2009-05-21 Thread Giancarlo Razzolini
Jeremy O'Brien escreveu: On Sun, Apr 26, 2009 at 03:18:04PM -0300, Giancarlo Razzolini wrote: Hi Guys, I finally got rid of my old access point and bought an internal pci wireless card to put on my openbsd firewall. But i've been having some weird freezes. It simply stop sending

Re: differencing subnet's hosts in gateway based on hosts' gateway address

2009-05-21 Thread Giancarlo Razzolini
the other as GW2. Then, you can use the route-to flag to decide, based on the tags, to which link you should route your packets. I believe that this is a way to accomplish that. There are others, but tags are simple to use and it will work perfectly for you. My regards, -- Giancarlo Razzolini

Re: Commercials for TV?

2009-06-15 Thread Giancarlo Razzolini
Fernando Quintero escreveu: http://www.bbspot.com/News/2009/06/openbsd.html?from=rss wtf? http://www.bbspot.com/Legal/about.html -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat Certified Engineer no:804006389722501 Verify:https://www.redhat.com/certification

Re: Open Vs Free BSD

2009-06-19 Thread Giancarlo Razzolini
way i would never use ubuntu on my firewall, because it won't do neither. My 2 cents, -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat Certified Engineer no:804006389722501 Verify:https://www.redhat.com/certification/rhce/current/ Moleque Sem Conteudo Numero #002

Re: ZTE-MF626 USB Modem

2009-10-14 Thread Giancarlo Razzolini
the same thing for OpenBSD. There is really no way around this. My regards, -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat Certified Engineer no:804006389722501 Verify:https://www.redhat.com/certification/rhce/current/ Moleque Sem Conteudo Numero #002 OpenBSD 4.5

Wireless Freeze

2009-04-26 Thread Giancarlo Razzolini
, -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat Certified Engineer no:804006389722501 Verify:https://www.redhat.com/certification/rhce/current/ Moleque Sem Conteudo Numero #002 OpenBSD Stable Ubuntu 8.04 Hardy Heron 4386 2A6F FFD4 4D5F 5842 6EA0 7ABE BBAB 9C0E 6B85

Re: Wireless Freeze

2009-04-26 Thread Giancarlo Razzolini
patrick keshishian escreveu: On Sun, Apr 26, 2009 at 11:18 AM, Giancarlo Razzolini linux-...@onda.com.br wrote: Hi Guys, B I finally got rid of my old access point and bought an internal pci wireless card to put on my openbsd firewall. But i've been having some B weird freezes. It simply

Wireless ral(4) problem

2009-05-01 Thread Giancarlo Razzolini
registers) softraid0 at root root on wd0a swap on wd0b dump on wd0b Thanks on advance, -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat Certified Engineer no:804006389722501 Verify:https://www.redhat.com/certification/rhce/current/ Moleque Sem Conteudo Numero #002 OpenBSD

Re: Wireless ral(4) problem

2009-05-02 Thread Giancarlo Razzolini
was already planning on replacing my firewall machine, guess i'll have to do it faster than planned. My regards, -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat Certified Engineer no:804006389722501 Verify:https://www.redhat.com/certification/rhce/current/ Moleque

Re: Migration from IPTABLES to PF

2009-05-04 Thread Giancarlo Razzolini
it and referring to the faq when you are in doubt. It will be quite helpful. My regards, -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat Certified Engineer no:804006389722501 Verify:https://www.redhat.com/certification/rhce/current/ Moleque Sem Conteudo Numero #002 OpenBSD Stable

Re: OpenVPN destroys tun

2009-05-06 Thread Giancarlo Razzolini
, -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat Certified Engineer no:804006389722501 Verify:https://www.redhat.com/certification/rhce/current/ Moleque Sem Conteudo Numero #002 OpenBSD 4.5 Ubuntu 9.04 Jaunty Jackalope 4386 2A6F FFD4 4D5F 5842 6EA0 7ABE BBAB 9C0E 6B85

Re: OpenVPN destroys tun

2009-05-06 Thread Giancarlo Razzolini
Jason Dixon escreveu: On Wed, May 06, 2009 at 04:29:10PM -0300, Giancarlo Razzolini wrote: Jason Dixon escreveu: So apparently OpenVPN is a douche of an application by destroying/recreating any tun devices you ask it to bind to. This causes havoc with pf/altq if you queue on those tun

Re: OpenVPN destroys tun

2009-05-06 Thread Giancarlo Razzolini
Jason Dixon escreveu: On Wed, May 06, 2009 at 05:38:51PM -0300, Giancarlo Razzolini wrote: Well, i wasn't OT with my reply. And i use openvpn from the beginning of the project, even made a plugin for it. So i know i little of it. My suggestion was to avoid what you might be already

Re: OpenVPN destroys tun

2009-05-06 Thread Giancarlo Razzolini
Jason Dixon escreveu: On Wed, May 06, 2009 at 06:04:19PM -0300, Giancarlo Razzolini wrote: Jason Dixon escreveu: Well, my rude friend, i guess you'll have to accept my suggestion because you're simply stuck with it. I shouldn't but, i took a little time and dove in openvpn

Re: QEMU CPU cores not showing up

2013-11-14 Thread Giancarlo Razzolini
. To add to the strange thing, I have another bare metal machine, with a different hardware, but using the same qemu version, and I had never experienced any lockups. But it also will not show more cores on OpenBSD. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: QEMU CPU cores not showing up

2013-11-14 Thread Giancarlo Razzolini
Em 14-11-2013 11:43, David Coppa escreveu: On Thu, Nov 14, 2013 at 2:33 PM, Giancarlo Razzolini grazzol...@gmail.com wrote: Em 13-11-2013 22:40, Jeff Fuhrman escreveu: I'm the tech Bruno has been working with regarding this. QEMU version is 1.5 and the relevant section of the KVM Config file

Re: QEMU CPU cores not showing up

2013-11-14 Thread Giancarlo Razzolini
the problem. -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: QEMU CPU cores not showing up

2013-11-15 Thread Giancarlo Razzolini
justing making simple pci passthrough. Anyway, I'm not worrying much because it's OpenBSD. But it's kind of a bummer not being able to have more cores on it. Perhaps when I finish migrating the servers I can look into it. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

OpenBSD DNS/Web Infrastructure

2013-11-18 Thread Giancarlo Razzolini
be happy to help implement them. What you guys think? Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: LDAP TLS/SSL certificates and easy-rsa

2013-11-19 Thread Giancarlo Razzolini
that openvpn has between servers and clients (the only thing you won't have is the hmac firewall). The easy-rsa scripts provide a full PKI and I did used it's certs for other uses than openvpn itself. Regards, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: OpenBSD DNS/Web Infrastructure

2013-11-19 Thread Giancarlo Razzolini
Em 19-11-2013 16:04, Nicolai escreveu: On Mon, Nov 18, 2013 at 05:07:08PM -0200, Giancarlo Razzolini wrote: One thing I've been doing is using dnscrypt, because my ISP did use transparent dns proxying Nice! I use DNSCurve. First, thank your for your response Nicolai. DNSCurve adds a lot

Re: Patch to remove adult content from spamd(8) man page

2013-11-22 Thread Giancarlo Razzolini
with the diff you so happily provided, and live the rest of your life happy. Remember to always take this pill again on 1st of May, and 1st of November, every year. This thread at least put some laughs on some people's faces. -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: smtpd config issue

2013-11-25 Thread Giancarlo Razzolini
page, there is the source directive, which does what you are trying to accomplish. Also, there is always the possibility of doing so using pf and route-to rules, that enforce things to be routed through a specified gateway. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Intermediate cert in relayd?

2013-12-02 Thread Giancarlo Razzolini
in a separate file. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: creating a VPN tunnel with an iPhone client

2013-12-03 Thread Giancarlo Razzolini
no need for an app. -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: OpenBSD and NetFlow

2013-12-04 Thread Giancarlo Razzolini
your current problem, but if you can run them both on the same machine, I strongly advise you to do so. The setup is very simple, I've even managed to run it using the chrooted apache. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: OpenBSD and NetFlow

2013-12-04 Thread Giancarlo Razzolini
an ip address on that interface for the communication between them. There isn't any encryption nor authentication on netflow packets, so a vpn between them is necessary. In my case I have two routers, they talk through a vpn, and I collect on only one of them. Cheers, -- Giancarlo Razzolini GPG

Re: DNS problem

2013-12-06 Thread Giancarlo Razzolini
this and see if it improves your situation. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: DNS problem

2013-12-06 Thread Giancarlo Razzolini
, it won't hurt if you use dnscrypt proxy. -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: ipv6 static routing

2013-12-09 Thread Giancarlo Razzolini
through the right interface. Do not forget that traffic coming out of the firewall itself is one thing and traffic passing through it is another thing completely different. You have to enforce both. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: NPPPD

2013-12-09 Thread Giancarlo Razzolini
helpful. The problem can be from misconfiguration on npppd, pf rules, routing issues, or problems with the windows clients itself. Things like, anti-virus firewalls, etc. They could all be the problem. Try to elaborate a little more on the next one. Cheers, -- Giancarlo Razzolini GPG: 4096R

Re: NPPPD

2013-12-09 Thread Giancarlo Razzolini
are connecting but after connection is made I cannot get anywhere. my client config is l2tp/ipsec with secret optional encryption mschapv2 And I made the connection to take VPN gateway - Original Message - From: Giancarlo Razzolini grazzol...@gmail.com To: Or Elimelech o

Re: NPPPD

2013-12-09 Thread Giancarlo Razzolini
. You can install wireshark on windows to debug the client. These can definitely point where is the problem. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Keeping a carp backup connected to the internet

2013-12-12 Thread Giancarlo Razzolini
, but these are the ones that I remember from the top of my head. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: How to segregate forwarded and firewall-generated traffic in pf?

2013-12-19 Thread Giancarlo Razzolini
flow. -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: How to segregate forwarded and firewall-generated traffic in pf?

2013-12-19 Thread Giancarlo Razzolini
and used tags to match the packets and tcpdump/pfctl to be sure that the rules where indeed not working and made the necessary changes. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: (5.4) System hangs during shutdown

2013-12-20 Thread Giancarlo Razzolini
.html applied? Specifically, I had random issues until I've applied this one: http://ftp.openbsd.org/pub/OpenBSD/patches/5.4/common/003_vnode.patch Also, try enabling the ddb.panic sysctl flag, it might help debugging the issue. A dmesg would help too. -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: (5.4) System hangs during shutdown

2013-12-24 Thread Giancarlo Razzolini
Em 21-12-2013 21:52, Adam Jensen escreveu: On 12/20/2013 09:05 AM, Giancarlo Razzolini wrote: Em 19-12-2013 17:56, Adam Jensen escreveu: I've been using a KVM switch (USB keyboard and mouse) on a couple of machines recently and I noticed that when the Keyboard, Video, and Mouse connections

Re: Unable to associate with wifi AP until channel changed on AP

2013-12-26 Thread Giancarlo Razzolini
in your area and set it on your hostname.if. -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Unable to associate with wifi AP until channel changed on AP

2013-12-26 Thread Giancarlo Razzolini
. Cheers Eike I believe this is the default behavior, to use channel 1, or, in your case, the first 5GHz channel which is 36. This probably can vary from card to card, firmware to firmware. Anyway, it's always better the declare the channel. -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: dnscrypt-proxy

2013-12-31 Thread Giancarlo Razzolini
local attacks on your network, because, unless you install it on all your machines, it still vulnerable to attacks. But there this added complexity of having to install a dns cache in all of them. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: dnscrypt-proxy

2014-01-01 Thread Giancarlo Razzolini
, the dreams. Let 2014 be a year that some of these dreams come true, hopefully. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Transparent proxy with Squid on OpenBSD 5.4

2014-01-03 Thread Giancarlo Razzolini
divert rule is on your external interface, that should be done on packets coming IN your internal interface. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Transparent proxy with Squid on OpenBSD 5.4

2014-01-03 Thread Giancarlo Razzolini
. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Transparent proxy with Squid on OpenBSD 5.4

2014-01-09 Thread Giancarlo Razzolini
, with an extra effort, but I would need to rig me a setup to test it. But if you have control over the router, I strongly suggest using 2 nics, and the openbsd machine as your network gateway. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: VPN Between OpenBSD and iOS

2014-01-13 Thread Giancarlo Razzolini
behavior if it were a mtu issue. This might be something worth looking into. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Virtualize or bare-metal?

2014-01-13 Thread Giancarlo Razzolini
like a charm (there are potential security issues, worth noting). I believe that the other obvious choice is Xen. I would not go with virtualbox. And Vmware is expensive. Qemu/kvm tights nicely into the system so it's my choice. You should make your own choice. Cheers, -- Giancarlo Razzolini GPG

Re: Virtualize or bare-metal?

2014-01-14 Thread Giancarlo Razzolini
the hardware of 10, spending the same amount of money. That's why I didn't blink when choosing to virtualize everything. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: PPPoE ip unnumbered

2014-01-14 Thread Giancarlo Razzolini
addres, then yes, it works. For us to help you we need a little more than this. -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: PPPoE ip unnumbered

2014-01-15 Thread Giancarlo Razzolini
\ pppoedev physical_dev authproto pap \ authname 'user' authkey 'pass' up dest 0.0.0.1 !/sbin/route add default -ifp pppoe0 0.0.0.1 -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Process monitoring

2014-01-16 Thread Giancarlo Razzolini
. Cyrus, There are lots of ways to accomplish this. I personally use symon and syweb. They are both in ports/packages and work nicely. There are other options, like nagios with nagiosgraph, munin, etc. There are lots of choices. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Apache able to open tty

2014-01-22 Thread Giancarlo Razzolini
a look on the nagios-chroot package. It works exactly like this. There is a chrooted web interface that communicates with a daemon which executes commands in it's behalf. I advise against changing the user of apache or running it as root to be able to open the tty's. Cheers, -- Giancarlo Razzolini

Re: athn weirdness with two subnets

2014-01-25 Thread Giancarlo Razzolini
In this case I can ping 192.168.12.1 and 192.168.12.130 (ping from inside the ALIX that is) [rest snipped for brevity] Or even better, bridge them and a vether(4) and assign the ip address to it, instead of one of the physical interfaces. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Question about debugging WLAN communication

2014-01-27 Thread Giancarlo Razzolini
assuming this is possible, which AFAIK is not), it will drain your battery too quickly. So I believe the way is to change to another chipset that supports power saving. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: NAT reliability in light of recent checksum changes

2014-01-27 Thread Giancarlo Razzolini
a decade, and it's still here. I guess the death will be very, very, very slow. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: NAT reliability in light of recent checksum changes

2014-01-27 Thread Giancarlo Razzolini
the application. This kind of things, where bits randomly flip, proves that computer science can be anything but an EXACT science. That's one of the reasons why the machines will (hopefully) always need humans. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: NAT reliability in light of recent checksum changes

2014-01-28 Thread Giancarlo Razzolini
the application job to detect if it is receiving good or bad data. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: dhclient

2014-01-30 Thread Giancarlo Razzolini
modifier. There are a lot of options in this regard. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: pf redirect through socks tunnel?

2014-01-30 Thread Giancarlo Razzolini
it would help if you elaborate a little bit more. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: pf redirect through socks tunnel?

2014-01-30 Thread Giancarlo Razzolini
be biased by me and see what's is best for your case. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: cheapest firewall?

2014-02-03 Thread Giancarlo Razzolini
spare hardware. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Does this usb wireless adapter works?

2014-02-03 Thread Giancarlo Razzolini
of the sudden. You have to physically remove and attach them again, for them to work. I do not know of any card that has a decent tx power and works great with openbsd for being an ap. If you guys know one, name it. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: They are watching you

2014-02-03 Thread Giancarlo Razzolini
with a laptop. It would be nice to have an agent to take me out for dinner. But I believe that we would run out of topics to talk about very quickly, since they already know so much about me. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: dhclient

2014-02-03 Thread Giancarlo Razzolini
wrote: Am 30.01.2014 13:10, schrieb Giancarlo Razzolini: Em 29-01-2014 18:13, Holger Glaess escreveu: hi i try to setup and multipath configuration with 2 line provider 1 cable with dhcp(client) 1 with pppoe just dynamic ips. the pppoe config create well the new default route

Re: They are watching you

2014-02-03 Thread Giancarlo Razzolini
Em 03-02-2014 18:06, patrick keshishian escreveu: On 2/3/14, Giancarlo Razzolini grazzol...@gmail.com wrote: Em 02-02-2014 20:04, Jason Barbier escreveu: On 02/02/14 11:45, Chris Cappuccio wrote: Christian Weisgerber [na...@mips.inka.de] wrote: http://www.cbc.ca/news/politics/csec-used

Re: Is [binary] package signing planned?

2014-02-04 Thread Giancarlo Razzolini
homework. People who do not care, will blindly trust or not even know that things are signed. That's the beauty of signify. It works for both the stupid and the smart. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Is [binary] package signing planned?

2014-02-04 Thread Giancarlo Razzolini
feet, sometimes just for fun and other times because they will take a gun, assemble it, load it, and start playing around with it until it accidentally fires on their feet. For these, I really do not know what I'd say. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Is [binary] package signing planned?

2014-02-04 Thread Giancarlo Razzolini
are welcome to stay.) They generally are entertaining. Reading misc@ sometimes is pure comedy. From the top of my mind and recently there was the case of the crackpot that was offended by the mails on the spamd man page. Man that was a very funny thread. Cheers, -- Giancarlo Razzolini GPG

Re: Is [binary] package signing planned?

2014-02-04 Thread Giancarlo Razzolini
things using many internet links from different locations just to be sure I'm getting the original version and it was not tampered along the way. You could do all of these things. But ultimately you have to either trust or not. Your mileage may vary. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Is [binary] package signing planned?

2014-02-04 Thread Giancarlo Razzolini
of the kernel itself. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Is [binary] package signing planned?

2014-02-05 Thread Giancarlo Razzolini
more code and I didn't read them all yet. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: openvpn in rdomain hangs

2014-02-05 Thread Giancarlo Razzolini
for a simple thing. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Documentation on rc.conf.local lacks important warning

2014-02-10 Thread Giancarlo Razzolini
in this specific case. Perhaps we could use the same text from the faq, since it is a little more explicit on what you need to do. I'll write a patch and send it to tech@. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Does OpenBSD's wpa_supplicant support PSK?

2014-02-10 Thread Giancarlo Razzolini
matter of curiosity, can I rely on wpa_supplicant at all (in other situations), or it's not reliable. Yes, it is reliable. But if you do not need EAP authentication methods, you won't need it and I should say that OpenBSD's wpa-psk implementation, is faster. Cheers, -- Giancarlo Razzolini GPG

Re: Does OpenBSD's wpa_supplicant support PSK?

2014-02-12 Thread Giancarlo Razzolini
disk encryption. -- Giancarlo Razzolini GPG: 4096R/77B981BC

Re: Documentation on rc.conf.local lacks important warning

2014-02-12 Thread Giancarlo Razzolini
Em 12-02-2014 07:48, Ingo Schwarze escreveu: Hi, Giancarlo Razzolini wrote on Mon, Feb 10, 2014 at 03:18:39PM -0200: The main issue here is, that, the human brain, although being this wonderful machine, makes a lot of assumptions to fill in the gaps, even when there are *no *gaps

<    1   2   3   4   5   6   >