Re: pf issues with a web-server

2008-02-04 Thread Imre Oolberg
Hi! If i understood correctly all your stuff behind pf firewall is in the 192.168.0.0/24 subnet and when trying to access your webserver from one of the workstations it doesnt work. My guess is that you are using public nameserver which resolves webserver's name to the ip address which is

Re: pf issues with a web-server

2008-02-04 Thread scott
You need a triad of rdr-pass in-pass out. tag/tagged is better way to do it, because rdr does its thing on the packets to before the pass in and out rules are evaluated. tag/tagged means you don't need to adjust the in/out rules. # --- rdr on $ext_if inet proto tcp \ from any to any ($ext_if:0)

Re: pf issues with a web-server

2008-02-04 Thread johan beisser
Your pass rule for the web server is screwed up, so it won't match. The rule after it matches and should permit it to pass. On Feb 3, 2008, at 10:31 PM, Bales, Tracy wrote: # macros ext_if=dc0 int_if=dc1 web_server=192.168.0.4 # scrub scrub in # nat nat on $ext_if from !($ext_if) to any -

Re: async and softdep

2008-02-04 Thread ZeXeL Zexelut
yeah, I read the man page of my system and the phrase: The options async and softdep are mutually exclusive. does not appear. I always try to find the awnser in man pages, but from now it's a good tip to look the man page in the web. Thanks for all. On Sun, Feb 03, 2008 at 07:37:58PM +0001,

Authenticate squid in Active Directory

2008-02-04 Thread Luca Dell'Oca
Hi all, i'm have very little experienced on squid. I would like to authenticate user and password of users in an Active Directory based network (windows Server 2003) in order to assign specific ACL to each of them. I do not nead to read group membership... I founded on the internet this

Re: : booting openbsd on eee without cd-rom

2008-02-04 Thread frantisek holop
hmm, on Thu, Jan 31, 2008 at 04:40:58PM +0100, frantisek holop said that hmm, on Thu, Jan 31, 2008 at 02:26:17PM +0100, Raimo Niskanen said that Since you probably will need the install sets as well, I have posted a compressed filesystem image of size 199864838 bytes at

auto responder broken

2008-02-04 Thread Jean-Marc Harang
Hi Misc, I'm very sorry about my autoresponder for my society email address :( I didn't realise the problem of my mailing lists when I set it. It's a function of our mail server and I have no control on the difference between a classic mail and a mail from a ML...stupid tool. My apologies

pf scrub max-mss question

2008-02-04 Thread Richard Green
Hi Using OpenBSD as a firewall and NAT box, OpenBSD 4.2: I have this rule: 'scrub in all max-mss 1400' When when two peers on opposite sides of this firewall attempt to connect, a TCP SYN packet passes in from peer-1 though one interface, with it's MSS field set to 1360, through a bi-nat

Re: Authenticate squid in Active Directory

2008-02-04 Thread Lars Noodén
Luca Dell'Oca wrote: I would like to authenticate user and password of users in an Active Directory No. You wouldn't.

pf rtable, bgpd, and route (8) (was: Anyone lucky with pf rtable ?)

2008-02-04 Thread Insan Praja SW
On Fri, 25 Jan 2008 16:28:42 +0700, Henning Brauer [EMAIL PROTECTED] wrote: * Insan Praja SW [EMAIL PROTECTED] [2008-01-24 18:43]: Hi Misc@, I'm currently setup bgp router using openbgp. Routes learned from openbgpd are stored in routing table 1. So, I got this client from NET2, coming

חדרי חזרות חדשים בכפס

2008-02-04 Thread live
dii xvipe ldfnio `ezj lwentlwq dgcy ylpe aktq wiinim gcxi gfxez, gcxi zetim e`elto `pe nvirim yrz pqieo ll` zylem txhim peqtim a`zx http://www.2all.co.il/web/Sites/roomlive/ pyng lx`ezj

4.1 panic: bogus long slot station count 0

2008-02-04 Thread Damon McMahon
Greetings, Not sure if this is worthy of reporting, but Google hasn't turned up any other reports and there's nothing in 42.html or plus.html so just in case. ral(4) has been running on this machine without incident for about a year, some changes to dhcpd.conf(5) are the only notable

Re: ftp.openbsd.org?

2008-02-04 Thread xavier brinon
man pages too On Feb 4, 2008 3:23 PM, Alexey Vatchenko [EMAIL PROTECTED] wrote: Hi! I can't get into ftp.openbsd.org and http://www.openbsd.org/cgi-bin/cvsweb/ shows me Internal Server Error page. Is it OK? -- Alexey Vatchenko http://www.bsdua.org

Re: ftp.openbsd.org?

2008-02-04 Thread Joe Warren-Meeks
On Mon, Feb 04, 2008 at 03:40:50PM +0100, xavier brinon wrote: man pages too www.openbsd.org too. That'd explain spamd-setup ftp connect timeouts all over the place :-) -- joe. Every single day we have to wait at Edgware Road.

Re: pf scrub max-mss question

2008-02-04 Thread Daniel Melameth
On 2/4/08, Richard Green [EMAIL PROTECTED] wrote: I have this rule: 'scrub in all max-mss 1400' When when two peers on opposite sides of this firewall attempt to connect, a TCP SYN packet passes in from peer-1 though one interface, with it's MSS field set to 1360, through a bi-nat rule and

Re: : : booting openbsd on eee without cd-rom

2008-02-04 Thread Raimo Niskanen
On Mon, Feb 04, 2008 at 10:48:15AM +0100, frantisek holop wrote: hmm, on Thu, Jan 31, 2008 at 04:40:58PM +0100, frantisek holop said that hmm, on Thu, Jan 31, 2008 at 02:26:17PM +0100, Raimo Niskanen said that Since you probably will need the install sets as well, I have posted a

slow network

2008-02-04 Thread Gábri Máté
Hey there! I've installed OpenBSD 4.2 on a Compaq DL580 machine and i dunno why but the initial phase of the network connections are really slow. The machine is behing a linksys router with fix ip address, resolv.conf set up correclty. It has an intel pro 100 ethernet card. PF is disabled. If i

Re: pf rtable, bgpd, and route (8) (was: Anyone lucky with pf rtable ?)

2008-02-04 Thread Henning Brauer
* Insan Praja SW [EMAIL PROTECTED] [2008-02-04 11:48]: On Fri, 25 Jan 2008 16:28:42 +0700, Henning Brauer [EMAIL PROTECTED] wrote: * Insan Praja SW [EMAIL PROTECTED] [2008-01-24 18:43]: Hi Misc@, I'm currently setup bgp router using openbgp. Routes learned from openbgpd are stored in

3G/UMTS/HSDPA: best device(s)

2008-02-04 Thread Jacob Yocom-Piatt
am looking for a device that works with openbsd and will give broadband internet over cellular networks. it would be preferable that this device work in most of the jurisdictions listed in http://www.wireless.att.com/learn/international/dataconnect-global.jsp i am not sure about the extent of

ftp.openbsd.org?

2008-02-04 Thread Alexey Vatchenko
Hi! I can't get into ftp.openbsd.org and http://www.openbsd.org/cgi-bin/cvsweb/ shows me Internal Server Error page. Is it OK? -- Alexey Vatchenko http://www.bsdua.org

Re: 3G/UMTS/HSDPA: best device(s)

2008-02-04 Thread NetOne - Doichin Dokov
Jacob Yocom-Piatt ??: am looking for a device that works with openbsd and will give broadband internet over cellular networks. it would be preferable that this device work in most of the jurisdictions listed in http://www.wireless.att.com/learn/international/dataconnect-global.jsp i am

Re: slow network

2008-02-04 Thread Gábri Máté
Mon, 4 Feb 2008 20:48:21 +0100 -n GC!bri MC!tC) [EMAIL PROTECTED] C-rta: Hey there! I've installed OpenBSD 4.2 on a Compaq DL580 machine and i dunno why but the initial phase of the network connections are really slow. The machine is behing a linksys router with fix ip address, resolv.conf

Re: slow network

2008-02-04 Thread Josh Grosse
On Mon, 4 Feb 2008 21:18:50 +0100, Gabri Mati wrote Then why is it slow on the local network using ip addresses? :) It sounds like FAQ 8.22 applies -- since some services still attempt reverse DNS. You might review that section of the FAQ for applicability to your specific config.

Re: slow network

2008-02-04 Thread Richard Daemon
On Feb 4, 2008 3:18 PM, GC!bri MC!tC) [EMAIL PROTECTED] wrote: Mon, 4 Feb 2008 14:10:37 -0600 (CST) -n L. V. Lammert [EMAIL PROTECTED] C-rta: On Mon, 4 Feb 2008, [UTF-8] GC!bri MC!tC) wrote: Hey there! I've installed OpenBSD 4.2 on a Compaq DL580 machine and i dunno why but the

Re: slow network

2008-02-04 Thread Stuart Henderson
On 2008/02/04 21:18, Gabri Mati wrote: Mon, 4 Feb 2008 14:10:37 -0600 (CST) -n L. V. Lammert [EMAIL PROTECTED] C-rta: On Mon, 4 Feb 2008, [UTF-8] GC!bri MC!tC) wrote: Hey there! I've installed OpenBSD 4.2 on a Compaq DL580 machine and i dunno why but the initial phase of the

Re: package tools misbehaving

2008-02-04 Thread Ingo Schwarze
Edd Barrett wrote on Mon, Feb 04, 2008 at 12:24:22AM +: On Feb 4, 2008 12:03 AM, Ingo Schwarze [EMAIL PROTECTED] wrote: When you request a non-existant package, printing an error message and exiting is OK imho. Agree, but it did not exit directly after the error, it continued to query

Re: slow network

2008-02-04 Thread Gábri Máté
Mon, 4 Feb 2008 14:10:37 -0600 (CST) -n L. V. Lammert [EMAIL PROTECTED] C-rta: On Mon, 4 Feb 2008, [UTF-8] GC!bri MC!tC) wrote: Hey there! I've installed OpenBSD 4.2 on a Compaq DL580 machine and i dunno why but the initial phase of the network connections are really slow. The machine

Re: slow network

2008-02-04 Thread Stuart Henderson
On 2008/02/04 20:35, Stuart Henderson wrote: On 2008/02/04 21:18, Gabri Mati wrote: Mon, 4 Feb 2008 14:10:37 -0600 (CST) -n L. V. Lammert [EMAIL PROTECTED] C-rta: On Mon, 4 Feb 2008, [UTF-8] GC!bri MC!tC) wrote: Hey there! I've installed OpenBSD 4.2 on a Compaq DL580

Re: slow network

2008-02-04 Thread L. V. Lammert
On Mon, 4 Feb 2008, [UTF-8] GC!bri MC!tC) wrote: Hey there! I've installed OpenBSD 4.2 on a Compaq DL580 machine and i dunno why but the initial phase of the network connections are really slow. The machine is behing a linksys router with fix ip address, resolv.conf set up correclty. It has

Re: OpenBSD 4.2 - Netgear WG511 pcmcia wireless card - not respondiing

2008-02-04 Thread Julien Cabillot
Did you install the firmware ? cf. http://www.nabble.com/OpenBSD-4.2---Netgear-WG511-pcmcia-wireless-card---not-respondiing-td15232095.html On lun, 2008-02-04 at 15:21 -0600, Theodore Wynnychenko wrote: Hi: Last week I asked about the failure of OpenBSD to work with a wireless pcmcia network

Re: OpenBSD 4.2 - Netgear WG511 pcmcia wireless card - not respondiing

2008-02-04 Thread Theodore Wynnychenko
Hi: Last week I asked about the failure of OpenBSD to work with a wireless pcmcia network card (WG511). I hope the question is not too basic, but, is the misc list the wrong place to ask the question? Does anyone have any advice for me about this? It seems the kernel correctly identifies the card

Re: Authenticate squid in Active Directory

2008-02-04 Thread David Gwynne
On 04/02/2008, at 8:13 PM, Lars Noodin wrote: Luca Dell'Oca wrote: I would like to authenticate user and password of users in an Active Directory No. You wouldn't. pretty sure he would. it's useful.

Re: pf scrub max-mss question

2008-02-04 Thread Stuart Henderson
On 2008/02/04 18:12, Richard Green wrote: When when two peers on opposite sides of this firewall attempt to connect, a TCP SYN packet passes in from peer-1 though one interface, with it's MSS field set to 1360, through a bi-nat rule and the above scrub rule, and exits another interface, and

Re: slow network

2008-02-04 Thread Pierre Riteau
On Feb 4, 2008 9:18 PM, Gabri Mati [EMAIL PROTECTED] wrote: Mon, 4 Feb 2008 14:10:37 -0600 (CST) -n L. V. Lammert [EMAIL PROTECTED] C-rta: On Mon, 4 Feb 2008, [UTF-8] GC!bri MC!tC) wrote: Hey there! I've installed OpenBSD 4.2 on a Compaq DL580 machine and i dunno why but the

Lean to Sustainability Article

2008-02-04 Thread Dwayne Butcher
Article: From Lean to Sustainability Gary Langenwalter takes a thorough and practical look at sustainability in this AME Target article. In the article he contends that, like lean principles, sustainability has a positive impact on finances because emphasis is placed on reducing waste. Read the

Re: OpenBSD 4.2 - Netgear WG511 pcmcia wireless card - notrespondiing

2008-02-04 Thread Theodore Wynnychenko
Yes, I installed the firmware as it directs in the pgt man page (http://www.nazgul.ch/pgt/pgt-firmware-1.2.tgz - actually, the man page links to the 1.1 version of the firmware, but there is a 1.2 version available - which is what i used - i had the same problem (with the not responding message)

Sysadmin vacancy Edmonton area, AB

2008-02-04 Thread Sherwood Botsford
I've told my boss that I'm not renewing my contract. The Job: 20 hours per week as the entire IT department for the school. Optional half time teaching position. (Must have teaching certificate) Optional average 5 hours per week Outdoor Program Instructor. The computers: 3

WAP setup problems

2008-02-04 Thread Brian Richardson
Hi, Here's my problem and my current understanding: I have 3 interfaces in my WAP box, external, internal and wireless. I'd like to have MAC filtering for addresses with access to the external network, but allow guests to connect to the wireless network to help with copying files around in

Re: Authenticate squid in Active Directory

2008-02-04 Thread Eduardo Alvarenga
I am the patch author. It's working since it's first implementation. Maybe it's time for the maintainers to consider committing it. 2008/2/4, David Gwynne [EMAIL PROTECTED]: On 04/02/2008, at 8:13 PM, Lars Noodin wrote: Luca Dell'Oca wrote: I would like to authenticate user and password of

Re: pf scrub max-mss question (solved)

2008-02-04 Thread Richard Green (via iPrimus)
On Tuesday 05 February 2008 07:18:34 Stuart Henderson wrote: On 2008/02/04 18:12, Richard Green wrote: When when two peers on opposite sides of this firewall attempt to connect, a TCP SYN packet passes in from peer-1 though one interface, with it's MSS field set to 1360, through a bi-nat

Re: WAP setup problems

2008-02-04 Thread David Higgs
On Feb 4, 2008 10:12 PM, Brian Richardson [EMAIL PROTECTED] wrote: Hi, Here's my problem and my current understanding: I have 3 interfaces in my WAP box, external, internal and wireless. I'd like to have MAC filtering for addresses with access to the external network, but allow guests to

Re: OpenBSD 4.2 - Netgear WG511 pcmcia wireless card - notrespondiing

2008-02-04 Thread Marcus Glocker
Hi, On Mon, Feb 04, 2008 at 03:55:37PM -0600, Theodore Wynnychenko wrote: Yes, I installed the firmware as it directs in the pgt man page (http://www.nazgul.ch/pgt/pgt-firmware-1.2.tgz - actually, the man page links to the 1.1 version of the firmware, but there is a 1.2 version available -

FW: OpenBSD 4.2 - Netgear WG511 pcmcia wireless card - notrespondiing

2008-02-04 Thread Theodore Wynnychenko
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Marcus Glocker Sent: Monday, February 04, 2008 11:56 PM Are you sure your CardBus WG511 device is a Taiwanese model as stated in the man page (you will find this information on the back-side of the device)?