Re: support update

2022-10-31 Thread Martin Hein
On Mon, 31 Oct 2022 02:07:00 +0100 (CET) i...@tutanota.com wrote: > The entry under Denmark listed with a company name "Zen System" > doesn't exist. There no longer is such a company, and the URL > redirects to a completely different company that doesn't provide > any kind of OpenBSD service.

Re: support update

2022-10-31 Thread Martin Hein
On Mon, 31 Oct 2022 02:07:00 +0100 (CET) i...@tutanota.com wrote: > The entry under Denmark listed with a company name "Zen System" > doesn't exist. There no longer is such a company, and the URL > redirects to a completely different company that doesn't provide > any kind of OpenBSD service. I

Re: bgplg doesn't work with wildcard httpd servers

2019-01-12 Thread Martin Hein
On Fri, 11 Jan 2019 10:50:21 -0600 Adam Thompson wrote: > server "*" { server "default" /Martin

Re: OpenBGPd multiple local AS

2013-01-18 Thread Martin Hein
You can absolutely run external BGP and internal BGP with the same AS. This is a very common configuration. You should peer with your real AS on iBGP. If you do not you will end up with a split autonomous system. :AS 5 65006 My guess is this is the error. A normal BGP speaker do have on

Re: Why anyone in their right mind would like to use NAT64

2012-10-26 Thread Martin Hein
On Wed, 24 Oct 2012 22:16:04 +0200 Claudio Jeker cje...@diehard.n-r-g.com wrote: Just as an example. A few weeks ago it was a lot easier to get one of the last IPv4 PI address blocks at RIPE than getting a PI IPv6 block. Since the first one has no strings attached (apart from having an AS

Re: OpenBGPd - how to blackhole traffic?

2012-08-16 Thread Martin Hein
On Thu, 16 Aug 2012 14:47:25 +0200 Bernd be...@kroenchenstadt.de wrote: Is there a way to achieve this on OpenBSD? Directly from my mind... To blackhole some google stuff. route add -blackhole 8.8.0.0/16 127.0.0.1 /Martin

Re: firewall virtualization using tagging?

2011-05-23 Thread Martin Hein
On Tue, 24 May 2011 12:33:55 +1200 Joel Wiramu Pauling j...@aenertia.net wrote: stacking (802.11ah/QinQ) is ok for most situations, however it would be nice to have a SAP style construct (service access port), which essentially is a logical customer interface - most switch/router vendors have

Re: OpenBGPD communities, localpref on originating prefixes

2011-04-28 Thread Martin Hein
On Thu, 28 Apr 2011 08:50:41 -0500 falz m...@falz.net wrote: PREFIX_ORIGINATE= { 10.171.0.0/19, 101.192.144.0/24, 91.199.248.0/24 } COMMUNITY_TEST = 65000:666 network 10.171.0.0/19 network 101.192.144.0/24 network 91.199.248.0/22 #

Re: bgpd help!!

2009-12-16 Thread Martin Hein
On Tue, 15 Dec 2009 16:18:31 -0700 Andy Nguyen andy.ngu...@cityofthornton.net wrote: Is there a way to strip Private As (65xxx) so it does not advertise to the ISP provider? Thanks Use communities on peers with real ASNs. match from $peer set community 666:666 Then when announcing to peers

Re: bgpd help!!

2009-12-16 Thread Martin Hein
On Wed, 16 Dec 2009 11:19:33 -0700 Andy Nguyen andy.ngu...@cityofthornton.net wrote: If I configure community as Martin suggested this will also take out the path to my network. Thanks. If your real AS is transit only for your prefix it wont work. Your real AS should announce your prefix. The

destroying vlan interfaces

2009-01-29 Thread Martin Hein
Hi misc Has anyone had crashes when destroying vlan interfaces? I had two issues with the 4.4-current snap from 16. jan. When running ex: ifconfig vlan1804 destroy crash... unfortunately i havent got any kernel debugger output, but will setup conserver today and do a detailed error report if