, Yasuoka Masahiko, Yojiro Uo
--
Thank you
Indunil Jayasooriya
On Wed, Nov 9, 2011 at 10:33 PM, bigboy big...@tormail.net wrote:
Hi
Has anyone got examples of the right way of configuring the nginx no in
base?
what about this?
https://calomel.org/nginx.html
--
Thank you
Indunil Jayasooriya
%2F%2Fftp.irisa.fr
%2Fpub%2FOpenBSD%2Fsrc%2Fsys%2Fdev%2Fpci%2Fif_pcn.cei=0KMGT8bKJPHQmAWiutSxAgusg=AFQjCNE_6v0It-SIaxCx7Yblsbf2Po1Y9gcad=rja
But, I can't get an idea from it.
It is normal or should I solve it ?
Hope to hear from you.
--
Thank you
Indunil Jayasooriya
.
Stuart, many thanks for your effort to help me.
--
Thank you
Indunil Jayasooriya
Bugs in virtual SW are not problem of OpenBSD ;-)
yeah, U r right. OpenBSD is always excellent
--
Thank you
Indunil Jayasooriya
connects to Leased line.
when there is one default route is available, it is possible.
But, When there are 2 default routes, I can NOT access.
How can I archive this ?
--
Thank you
Indunil Jayasooriya
Hi ,
Can I archive it with
reply-to option
what about below URL ( it gives about rdr-to rule ). Can I get an help from
this below URL
http://n4p1.wordpress.com/2011/10/10/how-to-route-traffic-from-two-isp-in-openbsd-wo-bgp/
--
Thank you
Indunil Jayasooriya
info, I would like to
provide.
--
Thank you
Indunil Jayasooriya
192.168.1.1UGSP 0 2274 - 8 ne2
default172.16.10.254 UGSP 1 280 - 8 ne1
I have enabled below values in /etc/sysctl.conf file.
net.inet.ip.forwarding=1
net.inet.ip.multipath=1
hope to hear from you.
--
Thank you
Indunil Jayasooriya
in regard to it.
I am using squid as transparent proxy on my PF box. So I think I only
need pass out traffic.
So , I am trying the below URL.
http://www.openbsd.org/faq/faq6.html#Multipath
That's why I try to configure ifstated..
any comments?
--
Thank you
Indunil Jayasooriya
Thanks for your reply. I am still studying your scripts.
anyway, I came across this below URL ( it is for Linux with fail over)
http://tech.gaeatimes.com/index.php/archive/how-to-load-balancing-failover-with-dual-multi-wan-adsl-cable-connections-on-linux/
They are doing it. Your comments?
Can
$wan_gw)
It works . Why It does NOT work for udp?
Hope to hear from you..
, it works
--
Thank you
Indunil Jayasooriya
and receive a lot of spam mail through the lists.
I only receive a couple a day - no problem at all.
I have subscribed to misc , ipv6 and tech. I am free from spam too.
works great. No, problem at all.
--
Thank you
Indunil Jayasooriya
...@brodewicz.pl wrote:
Hi.
How can I pass with PF traffic from all subdomains, for example
*.microsoft.com ?
Thanks.
--
Rafal Brodewicz
--
Gula_Gula =;=; BNF
--
Thank you
Indunil Jayasooriya
bit, could You pls let me know where
can I download a 64 bit cvsup pkg?
Hope to hear from you.
*
*
--
Thank you
Indunil Jayasooriya
That's it.
On Tue, Dec 21, 2010 at 2:29 PM, Rune Lynge rune.ly...@gmail.com wrote:
On Tue, Dec 21, 2010 at 7:33 AM, Indunil Jayasooriya
induni...@gmail.com wrote:
I installed OpenBSD 64 bit. I want to update it by using cvsup.But, I am
not
able to find a *cvsup* 64 bit pkg .
cvsup
* - I
have installed Vitualbox on fedora 12 64 bit PC)
I have attached 2 errors. It says at least run trace and ps and give the
OUTPUT. So I am sending those here with.
Pls view and let me know what has gone wrong.
--
Thank you
Indunil Jayasooriya
[demime 1.01d removed an attachment
Indunil Jayasooriya
U x11/dbus/patches/patch-dbus_dbus-message-factory_c
U x11/dbus/patches/patch-doc_dbus-specification_xml
--
Thank you
Indunil Jayasooriya
Indunil Jayasooriya
to help troubleshoot or resolve this problem would be
greatly
appreciated.
Do you have powerdown=YES in /etc/rc.shutdown?
Thanks in advance!
MC.
--
Thank you
Indunil Jayasooriya
and pfsync without any
problem (on 4.8/amd64). IMO it should work (but I don't use the
carp peer option).
One remark, you should use a dedicated interface for pfsync. In your
setup, rl0 is shared by pfsync and carp1. This is a no sense.
Best regards and happy new year to all.
--
Thank you
Indunil
it!
--
--
Fernando Quintero
http://nonroot.blogspot.com/
Just a nonroot User
--
Thank you
Indunil Jayasooriya
in my /etc/local-host-names :
domainchosed.net
i also done :
makemap hash genericstable.db genericstable
makemap hash virtusertable.db virtusertable
restart sendmail
But it still send mail using @box.my.domain ; someone can help me ? thanks
--
Thank you
Indunil Jayasooriya
/sendmail/cf/cf.m4 /etc/mail/openbsd-proto.mc /etc/mail/
sendmail.cf
If it works, Pls let me know.
--
Thank you
Indunil Jayasooriya
Hi,
I am on a 64 bit OpenBSD 4.8 stable.
Here is mine
on OpenBSD 4.8 firewall/router
# both traceroute www.google.lk and traceroute -I www.google.lk work.
From my fedora client,
traceroute www.google.lk works.
and
traceroute -I www.google.lk also works. But second hope gives in this way
. I *do NOT* want firewall to be able to traceroute.
my question is that How can I exclude my firewall from being able to doing
it ?
--
Thank you
Indunil Jayasooriya
anyway, Thanks for enlightening me.
pass in log (all) on $int_if inet proto udp from $admin_pc to !$int_if \
port 33433 33626 keep state tag mytracert
pass out log on $ext_if inet proto udp from $ext_if to any \
port 33433 33626 keep state tagged mytracert
the above 2 rules were
Thank you
Indunil Jayasooriya
On Thu, Jan 20, 2011 at 2:57 PM, Ryan McBride mcbr...@openbsd.org wrote:
On Thu, Jan 20, 2011 at 01:47:20PM +0530, Indunil Jayasooriya wrote:
my question is that How can I exclude my firewall from being able to
doing
it ?
I'm really not sure why you don't want the firewall to be able
are enough..
any ideas?
--
Thank you
Indunil Jayasooriya
it will pass back to
$student_pc
Yeah, I understand.
Hope to hear from you.
--
Thank you
Indunil Jayasooriya
no luck?
Any idea?
--
Thank you
Indunil Jayasooriya
inet proto tcp from $ext_if to any \
port { 21 49151 } flags S/SA modulate state*
Now, Student gets the download speed of *80Kbps*.
Is this way is right? Is there a better way. If so, I would like to hear...
--
Thank you
Indunil Jayasooriya
from any to $web_servers port 8080 \
flags S/SA modulate state*
I visited this url as well. http://www.openbsd.org/faq/pf/pools.html
Still no luck.
Where have I gone wrong?
--
Thank you
Indunil Jayasooriya
modulate state
##END
But, it always directs to one particular ip address. How to see load
balancing?
--
Thank you
Indunil Jayasooriya
. Further connections from that host will be redirected to
*the next web server* in the round robin.
If i removed *sticky-address *from the above rule, It will load balance *one
by one manner*.
*
*Thanks you all for your wonderful support.
--
Thank you
Indunil Jayasooriya
--
Thank you
* from the above rule and see ?
--
Thank you
Indunil Jayasooriya
inet alias 192.168.6.62 255.255.255.0
inet alias 192.168.6.63 255.255.255.255
your comments?
--
Thank you
Indunil Jayasooriya
in a right way.
Hope to hear from you.
--
Thank you
Indunil Jayasooriya
to know, which method is recommended? havp as a parent proxy
( i am currently running) or squid as a parent proxy?
Hope to hear from you.
--
Thank you
Indunil Jayasooriya
On Sat, Mar 12, 2011 at 1:00 PM, Joachim Schipper
joac...@joachimschipper.nl wrote:
On Sat, Mar 12, 2011 at 07:39:12AM +0100, Antoine Jacoutot wrote:
On Sat, 12 Mar 2011, Indunil Jayasooriya wrote:
# /usr/local/sbin/havp
Starting HAVP Version: 0.91
*Mandatory locking disabled
,
graph 13 bps ssh bits/s color 255 0 0,
graph 14 bps std bits/s color 192 192 0
}
I dig from the net. I did NOT come across an answer. That's why I sent it.
Could you pls let me know what will I have to do ?
--
Thank you
Indunil Jayasooriya
it is OKAY. I have replied too. Thanks for your reply.
--
Thank you
Indunil Jayasooriya
{ ssh telnet }
do you have one interface?
re0 may be your external interface. What is your internal interface
--
Thank you
Indunil Jayasooriya
_squid /dev/pf
# chmod g+rw /dev/pf
but, for squid 2.7.9 on OpenBSD 4.8, I have the default. Pls see .I
did NOT change /dev/pf
# ls -al /dev/pf
crw--- 1 root wheel 73, 0 Dec 17 16:33 /dev/pf
any comments?
--
Thank you
Indunil Jayasooriya
://www.mail-archive.com/squid-users@squid-cache.org/msg78541.html
--
Thank you
Indunil Jayasooriya
127.0.0.1:3129 intercept in squid.conf file.
Here's the rule in pf.conf
pass in log on $int_if proto tcp from $lan_net to any port 80 \
divert-to 127.0.0.1 port 3129
--
Thank you
Indunil Jayasooriya
On Tue, Apr 19, 2011 at 12:00 PM, Indunil Jayasooriya
induni...@gmail.com wrote:
many thanks. I got it working. I changed from http_port 3129 intercept to
http_port 127.0.0.1:3129 intercept in squid.conf file.
Here's the rule in pf.conf
pass in log on $int_if proto tcp from $lan_net
to port https \
route-to ($ext_if2 $ext_gw2)
If I am right, How to delete the existing rule and add other rule when
failover happens?
Hope to hear from you.
--
Thank you
Indunil Jayasooriya
to your effort that put forth me to go
ahead,
Hope to hear from ALL.
--
Thank you
Indunil Jayasooriya
why you not try the relayd way ?
look at
http://gouloum.fr/doc/multilink.html
the part with relayd
holger
On 2012/05/17 13:20, Indunil Jayasooriya wrote:
Route lookups are based on the *destination* address not the source
address, you could add a route
why you not try the relayd way ?
look at
http://gouloum.fr/doc/multilink.html
the part with relayd
I found that URL yesterday, I will have to learn it. I just try to
do it with a shell script.
anyway, Thanks a lot.
--
Thank you
Indunil Jayasooriya
pfctl -D ONEWAYHTTPS=2.2.2.2@em1 -f /etc/pf.conf
Is it allringt ?
I think a few miles left for me to reach the goal.
If you can give an example it is worth millions time.
Your comments are welcome...
--
Thank you
Indunil Jayasooriya
.
Hope to hear from you.
--
Thank you
Indunil Jayasooriya
happy since the script worked .
Stuart, Thanks trillions times for your compassion and effort. Anyway, I
welcome your ideas, if I have to look any further and if there are things
to be improved.
--
Thank you
Indunil Jayasooriya
GPL is also doing a good job in the world of Open Source.
--
Thank you
Indunil Jayasooriya
Seeking your ideas to solve this? where have I gone wrong?
I referred to below 2 URLs
http://www.openbsd.org/faq/pf/carp.html#failover
http://meinit.nl/openbsd-loadbalancing-and-failover-relayd-pf-and-carp
--
Thank you
Indunil Jayasooriya
on { em1 } proto pfsync keep state (no-sync)
pass on { em0 em1 } proto carp keep state*
I added below lines
# anchor for relayd(8)
*anchor relayd/*
pass on em1 proto pfsync
pass on { em0 em1 } proto carp *
Now. my setup works
On Thu, Aug 16, 2012 at 12:13 PM, Indunil Jayasooriya
induni
to know why this happened. (This is on Openbsd 5.1 64 bit -
actually 2 boxes with relayd, PF , pfsync and carp )
These are actually 2 Vms running on 2 redhat 6.2 - 64bit KVMs ( network
drivers are e1000 ( em0 and em1)
Any comments ?
--
Thank you
Indunil Jayasooriya
am sending 2 attachments for you guys to see and let me know what
actually happens?
Services running on these 2 Open BSD Servers are carp , pf and relayd
Any comments?
--
Thank you
Indunil Jayasooriya
[demime 1.01d removed an attachment of type image/jpeg which had a name of
ddb1.jpg
. In OpenBSD what's the
command for it?
--
Thank you
Indunil Jayasooriya
Hi misc
Thanks a lot
On Fri, Dec 21, 2012 at 10:07 AM, Wesley open...@e-solutions.re wrote:
Hi,
you can try this :
/usr/sbin/sysctl hw.disknames
Cheers,
Wesley
Le 2012-12-21 7:17, Indunil Jayasooriya a écrit :
HI,
I would like to know How to list available all hard disks
You can list multiple gateways in priority order (I would usually
add these in hostname.if files e.g. !route add)
route add default -priority 10 10.1.1.1
route add default -priority 12 10.2.2.2
should the file /etc/mygate be deleted? I think yes
--
Thank you
Indunil Jayasooriya
and bad things exist in the world. It is the way of the world.
It is quite normal. It is the True Nature of the world. Intention (
volition ) to add protection (security) is the WISE man's characteristic.
So this wise man is always protected. He will win his life.
--
Thank you
Indunil
the same ip address (10.0.1.6)
Why's that?
this is the source I referred to
http://www.kernel-panic.it/openbsd/vpn/vpn4.html
any idea?
--
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala
Fonts
it.
--
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala
Fonts
is also OpenBSD. Theo and his guys protect the world. so
they are naturally protected.
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala
Fonts
state
But, I can't access
Why?
--
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala
Fonts
is
/ is not being passed...
hth
Fred
Not sure but what does:
--
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala
Fonts
Thanks for enlightening me.
Have a good day.
On Fri, May 2, 2014 at 8:53 PM, John D. Verne j...@clevermonkey.org wrote:
On Fri, May 02, 2014 at 12:53:05PM +0530, Indunil Jayasooriya wrote:
Thanks for the support.
I changed the port from to 2224. Now it works. This PF box
Dear ALL,
netstat gives below output on my openbsd 5 64 bit firewall. it is a VM.
tcp 0128 mail.ssh 192.168.x.y.57850
ESTABLISHED
I think it is unusual?
your comment?
How to find this mail.ssh ?
--
Thank you
Indunil Jayasooriya
http://www.theravadanet.net
an interface
named mail?
--patrick
Thank you. I got it. this Openbsd box's /etc/host file says
mail.example.com
--
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala
Fonts
?
--
cat /etc/motd
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala
Fonts
. But We got it WITHOUT getting it mirrored.
We can tell the Hardware vendor to mirror this 2 hard disks.
My question is after mirroring, Will OpenBSD work or again will have to
change BIOS settings ?
Hope to hear from you.
--
cat /etc/motd
Thank you
Indunil Jayasooriya
http://www.theravadanet.net
Aurehøj
--
cat /etc/motd
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala
Fonts
you may have to enter into RAID carte separate BIOS than the
mother board BIOS to activate disks setup RAID-levels
maybe you missed that step or exited without saving setup.
Hmm, I will look in to it.
--
cat /etc/motd
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http
/motd
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala
Fonts
/etc/motd
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala
Fonts
is already running, PID: [4909]
I think may be something is wrong with perl modules.
U guys are experts. any comments?
--
cat /etc/motd
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala
Fonts
to hear from you.
--
cat /etc/motd
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala
Fonts
/2009-March/004206.html
Can you guys have any comment on this?
--
cat /etc/motd
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala
Fonts
Oooo, thats an exciting possibility :)
Any opportunities for reducing PF rule sets is always great.
Yes, Indeed. +1
--
cat /etc/motd
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala
Fonts
: https://github.com/TeeBSB
Blog: http://teebsd.github.io/
--
cat /etc/motd
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala
Fonts
*
--
cat /etc/motd
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala
Fonts
$wan1_gw) tag
ip_list1_traffic
pass out quick log on $wan1_if tagged ip_list1_traffic
--
cat /etc/motd
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala
Fonts
via wan2_gw
How to achive this goal?
--
cat /etc/motd
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala
Fonts
);
if (EVBUFFER_LENGTH(dst))
return;
- } else
+ } else if (cre-output != NULL
EVBUFFER_LENGTH(cre-output))
return;
relay_close(con, done);
--
cat /etc/motd
Thank you
Indunil Jayasooriya
http
/motd
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala
Fonts
.
2015-04-08 10:54 GMT+03:00 Indunil Jayasooriya induni...@gmail.com:
Hi Mics,
I have a requirement that Users in LAN wan to browse INTERNET with squid
proxy server via 3 outgoing links. So I have a box with 4 Network
interfaces. One for LAN. 3 for outgoing links. I need fail-over as well
16:27 access.log
-rw-r- 1 _squid _squid56380324 Jul 13 16:24 access.log.0.gz
Let's see tomorrow morning,
On Mon, Jul 13, 2015 at 4:24 PM, Craig Skinner skin...@britvault.co.uk
wrote:
On 2015-07-13 Mon 13:25 PM |, Indunil Jayasooriya wrote:
Hi mics,
I want /etc/newsyslog.conf
it seems to be OK
On Mon, Jul 13, 2015 at 8:29 PM, Stuart Henderson s...@spacehopper.org
wrote:
On 2015-07-13, Indunil Jayasooriya induni...@gmail.com wrote:
I delted 30 from that line. Now it looks like this.
/var/squid/logs/access.log _squid:_squid 640 14 *
@T00
This is correct, Squid wants a SIGUSR1 as this triggers the
rotate ( like calling squid -k rotate).
You need to configure
logfile_rotate 0
in the squid.conf. This tells squid to rotate the files but keep itself.
Added, Thank you.
--
cat /etc/motd
Thank you
Indunil Jayasooriya
comments ?
I referred to below urls
http://jamesoff.net/site/reference/squid-log-rotation-with-newsyslog/
http://lists.freebsd.org/pipermail/freebsd-questions/2007-July/154219.html
http://lists.freebsd.org/pipermail/freebsd-questions/2003-October/021765.html
--
cat /etc/motd
Thank you
Indunil
both 8.8.8.8 and 8.8..4.4 work for me.
On Tue, Jun 14, 2016 at 8:26 PM, Chris Bennett <
chrisbenn...@bennettconstruction.us> wrote:
> Neither 8.8.8.8 or 8.8.4.4 works.
> After netstart, no. After reboot, no.
>
>
--
cat /etc/motd
Thank you
Indunil Jayasooriya
http://ww
de
>
> Could this problem be because of my being behind the wifi NAT?
>
> Chris Bennett
>
>
--
cat /etc/motd
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala
Fonts
nets.
> I would recommend RFC 7208 these are all easily answered in Appendix A.
>
>
thanks for the above
>
> >
> > --
> > cat /etc/motd
> >
> > Thank you
> > Indunil Jayasooriya
> > http://www.theravadanet.net/
> > http://www.siyaba
aiting your INPUTS.
--
cat /etc/motd
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala
Fonts
't seen a
> release in over 11 years.
>
> What about darkstat ( /usr/ports/net/darkstat/ )
or something else you can recommend?
> Regards,
>
> Raf
>
--
cat /etc/motd
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala
Fonts
/etc/motd
Thank you
Indunil Jayasooriya
http://www.theravadanet.net/
http://www.siyabas.lk/sinhala_how_to_install.html - Download Sinhala
Fonts
1 - 100 of 112 matches
Mail list logo
