Re: Anyone know of an smtp-proxy (or other mechanism) for routing mail to different IMAP servers depending recipient address?

2011-07-07 Thread tico
On 7/7/2011 12:42 PM, IT Guy wrote: Hi all, I'm in the process of migrating our company from a certain proprietary mail system to a new OpenBSD mailserver (IMAP + Postfix). I'd like to be able to migrate our users one at a time rather than do the whole company in one fell swoop. Does anyone

Re: [Now, other problem] Re: high load cpu with trunk+vlan+carp

2009-10-12 Thread tico
Luiz Gustavo wrote: Luiz Gustavo S. Costa wrote: exists other maillist for the discussion about this ? dev ? pf ? please, anybody help-me :) 2009/9/28 Luiz Gustavo S. Costa luizgust...@mundounix.com.br: has anyone with the same problem? developers? what could this be? 2009/9/26

Re: /31 subnets (RFC 3021)

2009-09-21 Thread tico
Aaron Mason wrote: Hi all, Does OpenBSD comply with RFC 3021, allowing /31 subnets for point-to-point links? I'd resigned to the fact that you couldn't since each subnet needs a network and broadcast address, though in the grand scheme of things it makes sense. TIA ::yawn:: $ sudo

Re: Defending OpenBSD Performance

2009-09-14 Thread tico
is code and donations, not more devotees unless I'm severely mistaken. If someone wants to use inferior tools to for a given project's requirements I'm more than happy to let them do so (unless they're paying me for consulting). Cheers, Tico

Re: Recommended Switches for Trunking?

2009-09-02 Thread tico
Toni Mueller wrote: Hi, I'm looking into getting switches to be used in port-extender style, and found a thread from last year recommending Cisco switches. I need about 20-50 ports atm, and would like to avoid Cisco. My current preference is using Procurve (2810 or 29xx). Do they work? What do

Re: New Project - MICO

2009-07-22 Thread tico
, but I was curious why you wanted to start over? What problem with nsh are you trying to fix? !Saludos! Tico [A] http://www.nmedia.net/nsh/

Re: PF performance problem

2009-07-18 Thread tico
use (but still gives an idea on how long you have to wait). - In other words, ditto. I've always noticed (and then ignored) a difference between BSD/Solaris load average running the same processes vs Linux on the same hw. systat is much more useful, IMNSHO. -tico On BSD, load

Re: BGP and NATting to multiple ISPs

2009-06-18 Thread tico
. Cheers, Tico Karl k...@meme.com Free Software: You don't pay back, you pay forward. -- Robert A. Heinlein

Re: BGP and NATting to multiple ISPs

2009-06-18 Thread tico
on top. I'm glad I checked my inbox again before responding -- that's exactly what I was going to say. +1. I'm in *no* way convinced that running out of a resource (IPv4 addresses) would be a good thing. It's been my experience that most network engineers agree with me. -tico

Re: BGP and NATting to multiple ISPs

2009-06-18 Thread tico
, it might be wise to either undertake massive testing of your configurations and/or contract an engineer to set up your routers initially and then turn over maintenance to you. Cheers, -Tico Thanks for the help. Karl k...@meme.com Free Software: You don't pay back, you pay forward

Re: slim and capable hardware for firewalls use

2009-06-15 Thread tico
of like these guys: http://www.fubra.com/blog/2007/10/mac-mini-bgp-routers-part-2.html Cheers, Tico

Re: slim and capable hardware for firewalls use

2009-06-15 Thread tico
Stuart Henderson wrote: On 2009-06-15, tico tico-o...@raapid.net wrote: Also, if you want to cram two boxes in 1U and still have a decent number of NICs, check out ABMX: http://www.abmx.com/1u-twin-server those are supermicro machines. Correct. I should have specified

Re: Hardware recommendations for gigabit throughput ipsec

2009-04-28 Thread tico
John Arnold wrote: They all did 60+ MB/s, meaning I got at least 60% out of the gig links, without resorting to jumbo frames, creative recv/sendspace sysctls or anything, and also I did generate and sink the traffic on the end nodes, so that also adds to the load for them. Given that they

Re: STM-1 connectivity (OT?)

2009-02-20 Thread tico
. Imagestream (proprietary+linux based) works for a good+cheap solution that can talk iBGP to your other ethernet-only routers. Or just get a used Juniper/Crisco/whatever. See also Sangoma's Wanpipe offerings (FreeBSD/linux). -Tico

Re: Problem of recognizing sangoma A102 2006 in openbsd 4.4

2009-02-09 Thread tico
=openbsd-miscm=118245939832197w=2 http://marc.info/?l=openbsd-miscm=119403349716792w=2 -Tico

Re: bgpd fails to install ipv6 routes in kernel routing table

2009-02-08 Thread tico
destination gateway lpref med aspath origin *2400:6800::/32 2001:470:1:53::1100 0 6939 10105 i $ uname -mr 4.4 i386 What does your bgpctl sho nex give you? -tico

Re: bgpd fails to install ipv6 routes in kernel routing table

2009-02-08 Thread tico
Graeme Lee wrote: tico wrote: Graeme Lee wrote: snip Network layout is somewhat complicated. 1 x ebgp and 1 x ibgp session receive ipv4 world tables. Gif tunnel to a hurricane router in Hong Kong. I'm receiving ipv6 world bgp tables from this peer. Connectivity to the peer is fine

Re: Bug OpenBGPD, IPv6 peer gets cleared, never gets up again

2009-01-29 Thread tico
, but YMMV. Cheers, Tico

Re: 10G NIC - Netxen

2009-01-13 Thread tico
=0sektion=0manpath=OpenBSD+Currentarch=i386format=html And CVS shows that nx is no longer in the tree: http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/Attic/if_nx.c As for the hardware itself, I have no experience with it. -Tico

Re: OpenBGPD Flaps, 32bit ASn in the wild.

2009-01-10 Thread tico
. Sound good for me. Is there any patch I can download and compile bgpd on my own? Regards, Falk Falk, Read the rest of the thread to which you've just responded: http://marc.info/?l=openbsd-miscm=122894875212174w=2 http://www.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/bgpd/rde.c -Tico

Re: OpenBGPd on OpenBSD (Failover + Load balancing)

2009-01-10 Thread tico
infrastructure to support your company's needs there are a number of folks that can provide commercial support, many of which either lurk on this list or are listed here: http://www.openbsd.org/support.html Best regards -Tico

Re: Testing in a virtual environment

2009-01-06 Thread tico
-- resetting em0: watchdog timeout -- resetting messages on the console when using the e1000 NIC emulation, but it doesn't seem to be too severe right now, and is only occurring when I'm serving a decent bit of data (55-68mbps SSH/rsync data). Best of luck, -Tico Dongsheng Song wrote: When I

Re: OpenLDAP w/o bdb okay?

2009-01-05 Thread tico
Damn, forgot to send my response to list: Message-ID: 49624a88.3020...@raapid.net Date: Mon, 05 Jan 2009 11:59:36 -0600 From: tico tico-o...@raapid.net User-Agent: Thunderbird 2.0.0.18 (Macintosh/20081105) MIME-Version: 1.0 To: P.Pruett ppru...@webengr.com Subject: Re: OpenLDAP w/o bdb okay

Re: OpenBGPD Flaps, 32bit ASn in the wild.

2008-12-11 Thread tico
for a valid AS4_PATH before announcing it onwards to cause problems for OpenBGPd users, if not others. I'd rather be missing a route than missing an entire feed and/or propagating attributes that will kill others' BGP sessions. -tico

Re: OpenBGPD Flaps, 32bit ASn in the wild.

2008-12-10 Thread tico
Ditto. This has just caused me the same problems. Alex at Hurricane Electric found this for me, and my ipv4 BGP sessions have *only* stabilized after filtering out this prefix (4.4-RELEASE on i386). I'll post up MRT dumps if anyone's interested. -Tico Peter Bristow wrote: Hi All

Re: OpenBGPD Flaps, 32bit ASn in the wild.

2008-12-10 Thread tico
tico wrote: Ditto. This has just caused me the same problems. Alex at Hurricane Electric found this for me, and my ipv4 BGP sessions have *only* stabilized after filtering out this prefix (4.4-RELEASE on i386). I'll post up MRT dumps if anyone's interested. -Tico Peter Bristow wrote: Hi

Re: OpenBGPD Flaps, 32bit ASn in the wild.

2008-12-10 Thread tico
So either of you should contact the ukranian ISP who is at that prefix; that is the problem, right? Yes we've been in contact with said ISP. They have called out their on call engineer and their upstreams are applying pressure. This time it was unintentional. A rouge isp DoSing all

Re: BGPLG mostly working

2008-12-07 Thread tico
info. -Tico

Re: OpenBSD and XenSource

2008-12-01 Thread tico
. If you manage to make any progress in your efforts (or any one else's) to run OpenBSD under Xen with any amount of usefulness, I'd be interested to hear about it. Feel free to contact me off-list. Cheers! -Tico

Re: 4.4 Samba write performance

2008-11-20 Thread tico
Whyzzi wrote: Answers to your questions are inline /w the question 2008/11/18 tico [EMAIL PROTECTED]: 1. Why is this sent to the ports@ mailing list ? I've lurked the list for a long time - since around 2.8. I've asked the odd question here and/or there, and got flamed once when I

Re: openbgpd bgplg ping and traceroute do not work

2008-11-14 Thread tico
/0.000 ms $ mount | grep var /dev/wd0e on /var type ffs (local, nodev) /dev/wd0h on /var/spool/imap type ffs (local, noatime, nodev, nosuid, softdep) Read: http://www.openbsd.org/faq/faq10.html afterboot(8), httpd(8), bgplg(8), mount(8) -tico

filters in bgpd.conf when running IPv6 feeds on a 4.3 box

2008-09-24 Thread tico
be similar is http://marc.info/?l=openbsd-miscm=121036759606446w=2 et voila! $ ping6 -S 2607:f618:1::1 ipv6.google.com PING6(56=40+8+8 bytes) 2607:f618:1::1 -- 2001:4860:0:2001::68 16 bytes from 2001:4860:0:2001::68, icmp_seq=0 hlim=59 time=76.009 ms Anyhow, cheers! -Tico

Re: filters in bgpd.conf when running IPv6 feeds on a 4.3 box

2008-09-24 Thread tico
On 2008-09-24, tico [EMAIL PROTECTED] wrote: Reading the FILTERS section of bgpd.conf lead me to believe that simply adding allow from any inet6 prefixlen 12 - 48 would allow the IPv6 prefixes that my neighbor was announcing to me be added from the RIB into the FIB, however

Re: filters in bgpd.conf when running IPv6 feeds on a 4.3 box

2008-09-24 Thread tico
glass up at http://208.86.95.250/cgi-bin/bgplg and the IPv6 address (not running the v6-enabled Apache at the moment) is 2607:f618:1::1 Cheers! Tico