Shared-SADB option in isakmpd.conf

? Will it be documented in the man page ? Thanks, Matthias Bertschy

Re: Problems with vpn roadwarriors using the same public ip

in both isakmpd and racoon; but I haven't found a fix yet. Matthias Bertschy

Re: authpf: real world uses of $user_id ?

Bob Beck wrote: * Matthias Bertschy [EMAIL PROTECTED] [2007-05-02 11:26]: I think this would only make sense if authpf could stand multiple connections from same host... Unfortunately, it is not possible: http://www.mail-archive.com/[EMAIL PROTECTED]/msg08318.html

PF: route-to nexthop when nexthop is dynamic

pf.conf 3. ??? magic spell ??? I am sure some PF wizards already have the solution for me... thanks in advance. Matthias Bertschy PS: here are my PF rules... (If stands for interface) (Gw stands for gateway) pass out on $ISP1If route-to ($ISP2If $ISP2Gw) from $ISP2If keep state pass out

Re: authpf: real world uses of $user_id ?

I think this would only make sense if authpf could stand multiple connections from same host... Unfortunately, it is not possible: http://www.mail-archive.com/[EMAIL PROTECTED]/msg08318.html So, I still wonder why such a feature exists... Matthias Bertschy Matthias Bertschy wrote: Ted

Re: authpf: real world uses of $user_id ?

Ted Unangst wrote: 2. Is anybody using it successfully? honestly, about the only thing i can think of is that instead of having per user authpf rules, you could create tables named by user, and reference them by $user_id. i don't know if this works. I think you have a point here.

Re: authpf: real world uses of $user_id ?

Well, in fact, I was wondering: 1. What is the purpose of the $user_id macro in authpf rules? 2. Is anybody using it successfully? 3. Is it possible to use it to track per user traffic? Thanks if you read this and help me :-) Matthias Bertschy Matthias Bertschy wrote: Hello

authpf: real world uses of $user_id ?

for that... Hmm, I would really like to have this wonderfull tool with pfflowd on my network routers :-) Matthias Bertschy

Re: Moving a 100GB directory tree with lots of hardlinks

Otto Moerbeek wrote: Ok, I assume you no longer have the core file you generated early. If there's a bug i pax, I really like to fix it... I'll see if I can reproduce the problem on a file system with lots of links and while giving pax little memory. -Otto Unfortunately not :-( But

Moving a 100GB directory tree with lots of hardlinks

because I really don't know what to do next. Matthias Bertschy Echo Technologies SA

Re: implementing an aggregating pseudo-device for virtual interfaces ?

Claudio Jeker wrote: On Fri, Sep 15, 2006 at 06:22:05PM +0200, Matthias Bertschy wrote: Would it be possible to implement such a tool that works for tun, gif, gre, pppoe, ... The features would be load balancing and fail over with virtual interfaces. I see no need

trunk(4) with gif(4) interfaces

isn't implemented yet with gif(4) driver... Would it be possible to implement it? I know pf(4) can also do load balancing, but I find this way less intuitive as the resulting interface cannot be monitored as easily as a trunk(4). Thanks for your help. Matthias Bertschy OpenBSD 3.9 on i386

Re: trunk(4) with gif(4) interfaces

Jason McIntyre wrote: On Fri, Sep 15, 2006 at 12:01:20PM +0200, Matthias Bertschy wrote: I would like to use a round robin aggregation of 2 (or more) gif(4) interfaces. trunk.4: The trunk interface allows aggregation of multiple network interfaces as one virtual

implementing an aggregating pseudo-device for virtual interfaces ?

Hello, From my previous post, it looks like trunk(4) cannot be used for software based pseudo-devices. Would it be possible to implement such a tool that works for tun, gif, gre, pppoe, ... The features would be load balancing and fail over with virtual interfaces. Thanks. Matthias

Re: alias addresses with dhclient - exits with buf_read (connection closed)

not doing anything bad... Of course, once they have been tested by Kenneth, he will surely add them to CVS. I saw several changes in the sources beyond 3.9-release, but it'd be easier to check with the diffs around. For sure :-) Cheers, Rogier Matthias Bertschy

Re: alias addresses with dhclient - exits with buf_read (connection closed)

I have encountered this problem, and Kenneth helped me with some diffs. I have tested them and they work, but I don't know if they are already in CVS... The main problem comes from ifconfig, but dhclient needs a patch too. Good luck! Matthias Bertschy Rogier Krieger wrote: When using

Re: dynamic dns update

Personaly I use: http://ipcheck.sourceforge.net/ riwanlky wrote: Hi, I will like to know if OpenBSD have the capability to update my dynamic ip to www.dyndns.org. I am currently running myDYNIPPRO on Windows to update my dynamic ip. I want to move to OpenBSD. I had currently running

dhclient exits while creating aliases

:01:31 riri dhclient[26486]: exiting. Thanks in advance. Matthias Bertschy Here is the dmesg output: $ dmesg OpenBSD 3.9 (GENERIC) #617: Thu Mar 2 02:26:48 MST 2006 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel(R) Pentium(R) 4 CPU 1.90GHz (GenuineIntel 686-class) 1.92

individual file system bigger than 1Tbyte anytime soon?

than 1T. Ok, well, I am not a system programmer, but would it be difficult to make an OpenBSD support for 2Tbyte file systems like on Linux? (for the moment terabyte server runs Linux, but I would prefer OpenBSD) Thanks for your help! Matthias Bertschy