Re: Sun Fire X2100 M2

2007-03-05 Thread Han Hwei Woo
I just picked one an X2100 M2 a few days ago... I'm running 2x 320GB Seagate SATA drives in it, no problem so it's because they're only listing what they support, not what the hardware supports. There are HD sleds, well, more like HD rails. They do the job, and will allow you to hot swap

Problem with load-balancing

2012-02-04 Thread Han Hwei Woo
Hello, I'm currently having some troubles with 4.6 configuration for a load-balancing configuration. $ext_if is the external interface to the Internet $vip is a valid routable IP address, but not bound to any interface, just used as a 'virtual' IP $server1, $server2 are also real routable IP

Re: Problem with load-balancing

2012-02-04 Thread Han Hwei Woo
Never mind, had a 'no state' rule that crept in. Gah, that was many hours wasted. On 2/4/2012 7:11 PM, Han Hwei Woo wrote: Hello, I'm currently having some troubles with 4.6 configuration for a load-balancing configuration. $ext_if is the external interface to the Internet $vip is a valid

Re: Source NAT using PF on OpenBSD 4.9

2011-05-16 Thread Han Hwei Woo
On 5/16/2011 3:29 AM, Stefan N wrote: Hi All, I have done some testing using PF Open BSD 4.9. There are 2 testing: 1. without nat (successfull) 2.With source NAT(not successfull) The diagram is notebook--em0[OpenBSD 4.9 PF]em1-webserver(TCP/443) em0 is 192.168.1.216/24

Re: BGP and NATting to multiple ISPs

2009-06-18 Thread Han Hwei Woo
Hi Karl, If you can justify a single /24, you can request it from one of your ISP's, and get a LOA from them to advertise it to your other ISP, getting it added to your prefix list. I believe the minimum for your own ARIN assignment is a /23 if you're multi-homing, and either a /20 or /22 for

Re: BGP and NATting to multiple ISPs

2009-06-18 Thread Han Hwei Woo
Karl O. Pinc wrote: The number of networks that filter prefixes smaller than /22 don't appear to be that numerous IMHO, but if they do, your /24 will still be reachable as they'll see the larger /19 or whatever from your provider that it's carved out of. But not from the 2nd provider, which

Re: managing authorized_keys

2009-09-18 Thread Han Hwei Woo
We've used perl scripts on crontabs that lookup a postgres db. bofh wrote: Hi, Just wanted to see how you guys manage authorized_keys. I'm trying to move everyone off legacy protocols onto openssh, and one of my proposals will involve using authorized keys for scripts/automated processes.

Re: Refusal to mention OpenBSD in a MSc Advanced Networking course

2010-02-19 Thread Han Hwei Woo
. Features like hashing of address lists, source-based rate-limiting, stateful failover, and synproxy are either missing or too immature for production use. Cheers, Han Hwei Woo TS Lura wrote: Thank you all for the replies. I might do a lecture on my own, presenting OpenBSD. If I where

Re: Calomel.org

2012-07-26 Thread Han Hwei Woo
On 07/26/12 03:04, Peter Laufenberg wrote: Everytime you follow a non official documentation, you waste your time and the developer's time, we're not cranky about calomel only, we're cranky about people following unofficial documentation, remember, our FAQ and manpages are accurate 99.99% of the

Re: Panic at pmap_remove_ptes, 5.2/i386

2013-03-04 Thread Han Hwei Woo
On 01/05/13 16:19, Marcin wrote: Hello, I have been running machine with ddb.panic=1 and ddb.console=1 in hope I will be able to provide more info after next crash. Unfortunately, when it crashed today the kernel went to ddb but it was not responding - it did not show what I typed and even when

net.inet.ip.arpqueued

2013-11-21 Thread Han Hwei Woo
Hi, I was doing some ARP troubleshooting, and noticed this sysctl variable, and was wondering what it is for? On our office firewall with just 14 ARP entries, I see it's normally at 0 but on a busy data centre firewall with 1,541 ARP entries, it seems to always be at or near 100, and never

Re: net.inet.ip.arpqueued

2013-12-09 Thread Han Hwei Woo
Hi, Would anyone be able to share some insight on this? On 11/21/2013 3:44 AM, Han Hwei Woo wrote: Hi, I was doing some ARP troubleshooting, and noticed this sysctl variable, and was wondering what it is for? On our office firewall with just 14 ARP entries, I see it's normally at 0

Re: Request for Funding our Electricity

2014-01-16 Thread Han Hwei Woo
Rather than raising prices on CD's/T-Shirts, how about allowing for subscriptions? I've bought CD's and shirts in the past, but don't do so regularly simply as it's not something I think/remember to do at every release. However, I'd gladly signup to purchase a CD and T-Shirt every release on