Need some suggestions abt application inside chroot

2012-01-01 Thread Stefan N
Hi All, I need some suggestions/feedback about application on OpenBSD whether it should or should not be installed inside chroot environment. For example,apache webserver is installed in chroot environment by default. Are there specific guidelines to check and verify whether the application

Re: Diskless Install using PXEboot

2011-11-10 Thread Stefan N
. Rgds, Stefan From: Li, David l...@cloudshield.com To: Stefan N stefanbsd...@yahoo.com Cc: misc@openbsd.org misc@openbsd.org Sent: Thursday, November 10, 2011 6:58 AM Subject: RE: Diskless Install using PXEboot Hi Stefan, B No,B the external storage is the DHCP

Re: Diskless Install using PXEboot

2011-11-09 Thread Stefan N
Hi David, As you intend to boot up OpenBSD via PXE, I assume that you have external storage. Will you install the OpenBSD in the iSCSI Storage? Regards, Stefan From: Li, David l...@cloudshield.com To: misc@openbsd.org misc@openbsd.org Sent: Thursday, November

Re: Question: c_config.sh and symon.conf on symon for OpenBSD PF

2011-10-26 Thread Stefan N
Hi Hassan, Okay thanks. I will try again. Regards, Stefan From: Hassan Monfared hmonfa...@gmail.com To: Stefan N stefanbsd...@yahoo.com Cc: misc@openbsd.org misc@openbsd.org Sent: Wednesday, October 26, 2011 2:07 PM Subject: Re: Question: c_config.sh

Re: Question: c_config.sh and symon.conf on symon for OpenBSD PF

2011-10-26 Thread Stefan N
Hi Hassan, Thanks. I'll try again. Regards, Stefanus From: Hassan Monfared hmonfa...@gmail.com To: Stefan N stefanbsd...@yahoo.com Cc: OpenBSD misc misc@openbsd.org Sent: Wednesday, October 26, 2011 9:30 PM Subject: Re: Question: c_config.sh and symon.conf

Question: c_config.sh and symon.conf on symon for OpenBSD PF

2011-10-25 Thread Stefan N
Hi Guys, This is the first time I tried to install symon on OpenBSD and my main goal is to monitor OpenBSD interface,disk,cpu as well as PF statistic. As per symon documentation on http://wpd.home.xs4all.nl/symon/documentation.html, the symon config file is located in /etc/symon.conf However,

Need suggestion about Firewall Reporter for OpenBSD PF

2011-10-13 Thread Stefan N
Hi guys, Have you ever used firewall reporting tool for OpenBSD PF which is able to do some comprehensive reporting for example: showing in a pie chart how many allowed and blocked connections based on services(http,https etc), incoming and outgoing user traffic,destination,connection etc. I

Re: Need suggestion about Firewall Reporter for OpenBSD PF

2011-10-13 Thread Stefan N
Hi Erling, Thanks. I will try and test it. Regards, Stefan From: Erling Westenvik erling.westen...@gmail.com To: Stefan N stefanbsd...@yahoo.com Sent: Friday, October 14, 2011 7:46 AM Subject: Re: Need suggestion about Firewall Reporter for OpenBSD PF You might

Re: Help setting up a PF NAT gateway

2011-10-11 Thread Stefan N
...@gmail.com To: Stefan N stefanbsd...@yahoo.com Cc: misc@openbsd.org misc@openbsd.org Sent: Tuesday, October 11, 2011 1:25 PM Subject: Re: Help setting up a PF NAT gateway No I was not aware of this. Could you please explain the meaning of an alias address on the external interface for NAT

Re: Help setting up a PF NAT gateway

2011-10-10 Thread Stefan N
Hi Stefan, As you mentioned that the IP forwarding is already enabled on your system. Have you configured the IP alias on the network interface for the NAT purpose? If the NAT is done on external interface then you'll need to add in the IP alias on /etc/hostname.vic2 Please read the guide from

Re: Problem with installing OpenBSD

2011-09-29 Thread Stefan N
What is the problem? Can you share with us the detail of the problems you are facing? Did you install via network or CD? Which type of CD installation did you use? Regards, Stefan From: Sales - OrangeWebsite.com sa...@orangewebsite.com To: misc@openbsd.org

Time interval based pf rule

2011-09-02 Thread Stefan N
Hi all, Does OpenBSD PF engine have the feature to create time interval based rule? I have tried to do that but I could not find any relevant documentation. Is time interval based rule supported to be created on OpenBSD PF? Regards, Stefan

Re: Time interval based pf rule

2011-09-02 Thread Stefan N
Hi Jim, If I used anchor to create pf rules which means there is another configuration needs to be taken care. Beside /etc/pf.conf, we need to take care and maintain crontab for schedulling. Regards, Stefan From: James Hartley jjhart...@gmail.com To: Stefan N

Re: Time interval based pf rule

2011-09-02 Thread Stefan N
To: Stefan N stefanbsd...@yahoo.com Cc: misc@openbsd.org misc@openbsd.org Sent: Friday, September 2, 2011 8:14 PM Subject: Re: Time interval based pf rule On 2 September 2011 09:11, Stefan N stefanbsd...@yahoo.com wrote: Hi Jim, If I used anchor to create pf rules which means there is another

Re: Time interval based pf rule

2011-09-02 Thread Stefan N
Okay guys. Thanks for the suggestion. Regards, Stefan From: Christiano F. Haesbaert haesba...@openbsd.org To: Stefan N stefanbsd...@yahoo.com Cc: misc@openbsd.org misc@openbsd.org Sent: Friday, September 2, 2011 8:34 PM Subject: Re: Time interval based pf rule

Re: static IP

2011-08-31 Thread Stefan N
First, check the syntax refering to hostname.if(5) openbsd manual guide Did you configure it during installation process or after installation process was done? What do you mean by giving you login and password? Which user did you use to configure IP address? Did you login as root or as

Gigabit Ethernet Controller compatibility with OpenBSD 4.9

2011-07-25 Thread Stefan N
Hi All, Have anyone of you ever installed OpenBSD 4.9(i386/amd64 platform) on a machine using Gigabit Ethernet Controller as follows: 1.Realtek 8111C Gigabit Ethernet Controller 2.Intel 82574L Gigabit Ethernet Controller 3.Intel 82567V Gigabit Ethernet Controller 4.Intel 82583V Gigabit Ethernet

Question: IP NAT syntax on CARP interface

2011-06-22 Thread Stefan N
Hi guys, I am in the midst of configuring the OpenBSD 4.9 PF using ip balancing and active-passive solution. Every interface was configured successfully but I hit the problem when I am going to add IP Alias/NAT IP on carp interface. 1)For active-passive scenario: Let say I am going to

Re: what's with Open Source Fanshop - CDs T-shirts

2011-06-14 Thread Stefan N
Hi Cheng, Perhaps the owner of the domain and website configured the website to do URL redirection to www.openbsd.org. You can follow up with the registration service provider below: Domain Name: OSWEBSHOP.COMRegistrar: TUCOWS.COM CO.Whois Server: whois.tucows.comReferral URL:

Re: Need some input about: OpenBSD 4.9/amd64 and Dell PowerEdge Server R210,R410,R610,R710

2011-06-08 Thread Stefan N
Hi guys, Thank you so much for all of the replies. Regards, Stefan From: Paul de Weerd we...@weirdnet.nl To: Stefan N stefanbsd...@yahoo.com Cc: misc@openbsd.org Sent: Wed, June 8, 2011 5:42:04 PM Subject: Re: Need some input about: OpenBSD 4.9/amd64 and Dell

Need some input about: OpenBSD 4.9/amd64 and Dell PowerEdge Server R210,R410,R610,R710

2011-06-07 Thread Stefan N
Hi All, Have you ever tried to install OpenBSD 4.9/amd64 on the Dell PowerEdge Server R210,R410,R610,R710 (2.5 SAS Disk) with additional Intel. Gigabit ET Quad Port Server Adapter? If yes, are those servers fully compatible with OpenBSD 4.9/amd64? Regards, Stefan

Re: Routing Issue

2011-05-17 Thread Stefan N
Hey David, I was doing the testing more less the same scenario with yours and having the source NAT issue. Below is my diagram: There are 2 scenarios that I did: 1.without nat (successfull) - can ping from notebook --webserver, notebook can access webserver/tcp-443 successfully 2.With source

Source NAT using PF on OpenBSD 4.9

2011-05-16 Thread Stefan N
Hi All, I have done some testing using PF Open BSD 4.9. There are 2 testing: 1. without nat (successfull) 2.With source NAT(not successfull) The diagram is notebook--em0[OpenBSD 4.9 PF]em1-webserver(TCP/443) em0 is 192.168.1.216/24 notebook is 192.168.1.21/24 em1 is

Re: Source NAT using PF on OpenBSD 4.9

2011-05-16 Thread Stefan N
: Rodrigo Mosconi open...@mosconi.mat.br To: Stefan N stefanbsd...@yahoo.com Sent: Mon, May 16, 2011 9:25:55 PM Subject: Re: Source NAT using PF on OpenBSD 4.9 2011/5/16 Stefan N stefanbsd...@yahoo.com: Hi All, I have done some testing using PF Open BSD 4.9. There are 2 testing: 1. without nat

Re: Source NAT using PF on OpenBSD 4.9

2011-05-16 Thread Stefan N
...@pce-net.com To: misc@openbsd.org Cc: Stefan N stefanbsd...@yahoo.com Sent: Tue, May 17, 2011 3:34:32 AM Subject: Re: Source NAT using PF on OpenBSD 4.9 On 5/16/2011 3:29 AM, Stefan N wrote: Hi All, I have done some testing using PF Open BSD 4.9. There are 2 testing: 1. without nat

Re: Creating release using site48.tgz

2011-05-12 Thread Stefan N
and other commands once it is done,I made it as bootable iso file and try to install to the pc and it works as expected. Regards, Stefan From: Stefan N stefanbsd...@yahoo.com To: Ingo Schwarze schwa...@usta.de Cc: misc@openbsd.org Sent: Tue, May 10, 2011 11:47:34

Re: Creating release using site48.tgz

2011-05-10 Thread Stefan N
:40:28 AM Subject: Re: Creating release using site48.tgz On Mon, May 09, 2011 at 05:28:12PM -0700, Stefan N wrote: Thanks. By the way, I don't see the release directory inside the source file(/usr/src) directory. Does it mean that I need to create directory mkdir /usr/release first if my

Re: Creating release using site48.tgz

2011-05-10 Thread Stefan N
will add in inside site48.tgz. Regards, Stefanus From: Ingo Schwarze schwa...@usta.de To: Stefan N stefanbsd...@yahoo.com Cc: misc@openbsd.org Sent: Tue, May 10, 2011 10:50:58 PM Subject: Re: Creating release using site48.tgz Hi Stefanus, Stefan N wrote

Re: Creating release using site48.tgz

2011-05-10 Thread Stefan N
Hi Ingo, Thanks a lot. I will try again. Regards, Stefanus From: Ingo Schwarze schwa...@usta.de To: Stefan N stefanbsd...@yahoo.com Cc: misc@openbsd.org Sent: Tue, May 10, 2011 11:31:53 PM Subject: Re: Creating release using site48.tgz Hi Stefanus, Stefan N

Creating release using site48.tgz

2011-05-09 Thread Stefan N
Hi All, The OpenBSD version that I am using is 4.8 and the default source file is at /usr/src I was trying to make a new release using site48.tgz. I have plan to put /etc/pf.conf, /etc/rc.firsttime and /etc/backup.sh inside site48.tgz Below is my steps: 1.I need to prepare of

Re: Creating release using site48.tgz

2011-05-09 Thread Stefan N
and...@afresh1.com To: misc@openbsd.org Sent: Tue, May 10, 2011 8:15:53 AM Subject: Re: Creating release using site48.tgz On Mon, May 09, 2011 at 04:59:17PM -0700, Stefan N wrote: Are my steps correct? Close, but install sets are created in /usr/release and extracted relative to root so you need

Re: Creating release using site48.tgz

2011-05-09 Thread Stefan N
at 05:28:12PM -0700, Stefan N wrote: Thanks. By the way, I don't see the release directory inside the source file(/usr/src) directory. Does it mean that I need to create directory mkdir /usr/release first if my source files is at /usr/src? The release man page does describe creating RELEASEDIR

Re: Creating release using site48.tgz

2011-05-09 Thread Stefan N
don't need to build your own release for this, just put the siteXX.tgz file with the base*.tgz man*.tgz and other files from a normal release on an ftp/http server / burned CD / etc. On 2011-05-09, Stefan N stefanbsd...@yahoo.com wrote: Hi All, The OpenBSD version that I am using is 4.8

Need Suggestion: To limit the access of root account

2011-04-28 Thread Stefan N
Hi All, I would need some suggestions from you. Currently I am setting up OpenBSD Firewall using PF at my working place. However, some of my colleagues are not so familiar with the OpenBSD and we would like to take turn to do that. I have the intention that I would like to limit the usage and

Re: Need Suggestion: To limit the access of root account

2011-04-28 Thread Stefan N
Hi guys, Noted and thanks for your suggestions. Regards, Stefan From: Stefan N stefanbsd...@yahoo.com To: misc@openbsd.org Sent: Fri, April 29, 2011 10:52:32 AM Subject: Need Suggestion: To limit the access of root account Hi All, I would need some

Compiling OpenBSD source in order to get the customized 'uname' version.

2011-04-20 Thread Stefan N
Hi All, I have a plan to do some testing to compile and build release of OpenBSD from the source code. My question is which part of the source code do I need to modify in order to get and use the my own and customized 'uname' (eg: TestBSD)? # uname -a TestBSD server.lab.com 1.0-RELEASE