Re: pf + voip security

2007-02-25 Thread Reyk Floeter
On Sun, Feb 25, 2007 at 08:45:25AM +0100, Julien TOUCHE wrote: is there some plan to make pf voip-aware so it can handle dynamic port allocation ? i suppose answer risks to be no as else, there would be one for ftp (and not ftp-proxy). So, what openbsd users use to add security to their voip

Re: slow io operations on xSeries 336

2007-02-25 Thread Andreas Bihlmaier
On Fri, Feb 23, 2007 at 01:40:29PM -0500, Jose Fragoso wrote: Hi, Looking at the diff between dmesg running GENERIC kernel and dmesg running .MP kernel, I noticed the line below: ioapic0: pin 16 shares different IPL interrupts (40..50), degraded performance in the .MP dmesg. Could that

Clock running 1/4 of real time

2007-02-25 Thread Daniel Ouellet
I had various problem with my bgpd as session were dropping and couldn't figure out why that was. But luck I happen to monitor the sessions and realize that the clock on the server run about 1/4 of real time. Everything run 1/4 of what it should be. Ping answer oneping each 4 seconds

rdist versus rsync ?

2007-02-25 Thread Sebastian Rother
I had some spare time and read some more manual pages and so I found rdist. I never heared about that tool and what I did read at the manpage sounds like a rsync replacement. Because rdist is in the Base-System I would like to know about the detailed differences between rdist and rsync because

[OT] openbsd + terminal server usage

2007-02-25 Thread Julien TOUCHE
is there an easy way to handle terminal server usage on openbsd, like equinox/advocent ones ? for example to connect an application like nut to /dev/tty01 or /dev/cua01, how do you handle it to telnet or tap terminal server port n ? thanks Regards Julien note: i've checked on

Re: Clock running 1/4 of real time

2007-02-25 Thread Ronnie Garcia
Daniel Ouellet a icrit : But luck I happen to monitor the sessions and realize that the clock on the server run about 1/4 of real time. Everything run 1/4 of what it should be. Ping answer oneping each 4 seconds instead of one. Top refresh every 20 seconds instead of 5, etc. [...] dmesg

[OT] Need a OpenBSD Rock solid aka concrete server?

2007-02-25 Thread Varoudis
Ive got one for free (this is not an advertisement)! Some days age in the simulation lab of NTUA :) http://daemons.gr/photos/stable-server/ Full *concrete* server! :) Tasos Varoudis daemons.gr

Re: [OT] Need a OpenBSD Rock solid aka concrete server?

2007-02-25 Thread Darrin Chandler
On Sun, Feb 25, 2007 at 05:30:54PM +0200, Varoudis wrote: Ive got one for free (this is not an advertisement)! Some days age in the simulation lab of NTUA :) http://daemons.gr/photos/stable-server/ Full *concrete* server! :) That's ONE way to harden your server! ;-) -- Darrin Chandler

Re: [OT] Need a OpenBSD Rock solid aka concrete server?

2007-02-25 Thread Jack J. Woehr
Varoudis wrote: http://daemons.gr/photos/stable-server/ Talk about a stable platform ... -- Jack J. Woehr Director of Development Absolute Performance, Inc. [EMAIL PROTECTED] 303-443-7000 ext. 527

Programming Ada on OpenBSD?

2007-02-25 Thread Timo Schoeler
hi list, does anybody use OpenBSD as Ada programming platform? i'd love to, but it seems to require tweaking of GCC. any hints? tia, timo

keyboard lockup, KVM, dual-boot

2007-02-25 Thread Stefan Kell
Hallo list, I want to use this machine as a dual-boot system together with windows. It is connected to a standard PS2-KVM, no USB-mouse or keyboard. Installation of both Windows and OpenBSD 4.0 from CDs worked without any problems. But now if I boot OpenBSD from harddisk the keyboard is

Re: Programming Ada on OpenBSD?

2007-02-25 Thread Trond Danielsen
2007/2/25, Timo Schoeler [EMAIL PROTECTED]: hi list, does anybody use OpenBSD as Ada programming platform? Take a look at the list of availble packages - http://www.openbsd.org/4.0_packages/i386.html - and search for gnat. -- Trond Danielsen

site-to-site vpn 4.0 to cisco 3000

2007-02-25 Thread c l
Hello list, I'm trying to get a site-to-site tunnel running between a 4.0 box and a cisco 3000 concentrator. Here's the networks... (ip's changed to protect the innocent) 192.168.1.x [OpenBSD 4.0] 1.1.1.1 - internet - 2.2.2.2 [cisco 3000] 10.10.x.x My ipsec.conf looks like

Re: keyboard lockup, KVM, dual-boot

2007-02-25 Thread Nick Holland
Stefan Kell wrote: Hallo list, I want to use this machine as a dual-boot system together with windows. It is connected to a standard PS2-KVM, no USB-mouse or keyboard. Installation of both Windows and OpenBSD 4.0 from CDs worked without any problems. But now if I boot OpenBSD from

Re: Programming Ada on OpenBSD?

2007-02-25 Thread Markus Hennecke
Trond Danielsen wrote: 2007/2/25, Timo Schoeler [EMAIL PROTECTED]: hi list, does anybody use OpenBSD as Ada programming platform? Take a look at the list of availble packages - http://www.openbsd.org/4.0_packages/i386.html - and search for gnat. Last time I looked into gnat on OpenBSD I

Re: Programming Ada on OpenBSD?

2007-02-25 Thread Timo Schoeler
In epistula a Markus Hennecke [EMAIL PROTECTED] die horaque Sun, 25 Feb 2007 19:14:14 +0100: Trond Danielsen wrote: 2007/2/25, Timo Schoeler [EMAIL PROTECTED]: hi list, does anybody use OpenBSD as Ada programming platform? Take a look at the list of availble packages -

Re: Programming Ada on OpenBSD?

2007-02-25 Thread Ted Unangst
On 2/25/07, Markus Hennecke [EMAIL PROTECTED] wrote: Trond Danielsen wrote: 2007/2/25, Timo Schoeler [EMAIL PROTECTED]: hi list, does anybody use OpenBSD as Ada programming platform? Take a look at the list of availble packages - http://www.openbsd.org/4.0_packages/i386.html - and search

Re: Programming Ada on OpenBSD?

2007-02-25 Thread Markus Hennecke
Ted Unangst wrote: On 2/25/07, Markus Hennecke [EMAIL PROTECTED] wrote: Last time I looked into gnat on OpenBSD I stumbled across some problems. The fpu was not initialized, so using floating point arithmetic lead to interesting results. when was this? i didn't notice this a few months

DragonflyBSD creating a new FS

2007-02-25 Thread Jean-Daniel Beaubien
Hi everyone, It seems that DragonflyBSD is going to create a new FS: ( http://leaf.dragonflybsd.org/mailarchive/kernel/2007-02/msg00097.html). I know Dragonfly has totally different goals than OpenBSD but I was wondering if this new FS might be useful to OpenBSD. Since I know little about

Re: Clock running 1/4 of real time

2007-02-25 Thread Daniel Ouellet
Ronnie Garcia wrote: Daniel Ouellet a icrit : But luck I happen to monitor the sessions and realize that the clock on the server run about 1/4 of real time. Everything run 1/4 of what it should be. Ping answer oneping each 4 seconds instead of one. Top refresh every 20 seconds instead of 5,

Re: DragonflyBSD creating a new FS

2007-02-25 Thread Marco Peereboom
I am mystified by these questions. If you don't know about filesystems, why would you ask about an addition? On Sun, Feb 25, 2007 at 04:04:48PM -0500, Jean-Daniel Beaubien wrote: Hi everyone, It seems that DragonflyBSD is going to create a new FS: (

Re: DragonflyBSD creating a new FS

2007-02-25 Thread Miod Vallat
Since I know little about filesystems, I'm basically asking to any developper if this FS would be a good addition to OpenBSD...or the goals are way too different and it wouldn't be very useful. How can we answer your question as long as the design itself is a moving target? Miod

Re: [OT] openbsd + terminal server usage

2007-02-25 Thread Stuart Henderson
On 2007/02/25 16:08, Julien TOUCHE wrote: is there an easy way to handle terminal server usage on openbsd, like equinox/advocent ones ? for example to connect an application like nut to /dev/tty01 or /dev/cua01, how do you handle it to telnet or tap terminal server port n ?

Re: site-to-site vpn 4.0 to cisco 3000

2007-02-25 Thread c l
Hello, thanks for the reply, it helped if I'm not mistaken. I think I'm getting closer but still no joy. See below. From: William Bloom [EMAIL PROTECTED] To: c l [EMAIL PROTECTED] CC: misc@openbsd.org Subject: Re: site-to-site vpn 4.0 to cisco 3000 Date: Sun, 25 Feb 2007 14:02:13 -0700

Re: Clock running 1/4 of real time

2007-02-25 Thread Daniel Ouellet
Last update. The only thing that I also saw what this clock: In normal operation: cpu0: apic clock running at 199MHz Before a reboot when I have the problem: cpu0: apic clock running at 678MHz, But this is not always the same value. Anyway, that's all I have. Not a huge deal, I can always

Re: keyboard lockup, KVM, dual-boot

2007-02-25 Thread Stefan Kell
Hello Nick, On Sun, 25 Feb 2007, Nick Holland wrote: Stefan Kell wrote: Hallo list, I want to use this machine as a dual-boot system together with windows. It is connected to a standard PS2-KVM, no USB-mouse or keyboard. Installation of both Windows and OpenBSD 4.0 from CDs worked without

DHCP server issues.

2007-02-25 Thread Bray Mailloux
I've been toying with the DHCP server options but cannot seem to bring up the process; everytime I run ps there is no dhcpd process to be found and no computers on my network are pulling down addresses from the server. My DHCPD.conf file looks as such. -bash-3.1# nano /etc/dhcpd.conf GNU nano

Re: DHCP server issues.

2007-02-25 Thread Darren Spruell
On 2/25/07, Bray Mailloux [EMAIL PROTECTED] wrote: I've been toying with the DHCP server options but cannot seem to bring up the process; everytime I run ps there is no dhcpd process to be found Take a look in /etc/rc and see how the system initializes dhcpd. Are you missing the leases file?

Re: DHCP server issues.

2007-02-25 Thread djgoku
On Feb 25, 2007, at 6:45 PM, Bray Mailloux wrote: I've been toying with the DHCP server options but cannot seem to bring up the process; everytime I run ps there is no dhcpd process to be found and no computers on my network are pulling down addresses from the server. My DHCPD.conf file

Re: Router performance on OpenBSD and OpenBGPD

2007-02-25 Thread Daniel Ouellet
Stuart Henderson wrote: On 2007/02/21 18:38, Daniel Ouellet wrote: problem is really I can't replace Cisco DS3 and multi channel DS3 with OpenBSD yet for the lack of decent hardware for that! (; eotdm may be worth a look where you have both ends of the line. some vendors mentioned here:

Re: DHCP server issues.

2007-02-25 Thread Jon Morby
Hi Bray What do the logs say? Also, try running dhcpd with -d -f -d Force dhcpd to log to stderr. This can be useful for debugging, and also at sites where a complete log of all dhcp activity must be kept, but syslogd(8) is not reliable or otherwise

Re: site-to-site vpn 4.0 to cisco 3000

2007-02-25 Thread William Bloom
I've setup maybe 78 LAN-to-LAN VPNs between my datacenter and other sites of customers and partners. However, I haven't had occasion to use OpenBSD as a VPN endpoint yet and I'm not an expert on the ike/ ipsec features of OpenBSD. Having said that, I've done quite a bit of VPN

Re: site-to-site vpn 4.0 to cisco 3000 SOLVED

2007-02-25 Thread c l
Finally got this to work. Here's the config that ended up working. I'm not sure why I didn't notice before but the quick mode stuff wasn't setup correctly. ipsec.conf ike esp from 192.168.1.0/24 to 10.10.0.0/16 peer 2.2.2.2 \ main auth hmac-sha1 enc 3des group modp768 \ quick

Re: keyboard lockup, KVM, dual-boot

2007-02-25 Thread Nick Holland
Stefan Kell wrote: Hello Nick, On Sun, 25 Feb 2007, Nick Holland wrote: ... It sounds like this: http://www.openbsd.org/faq/faq12.html#i386smouse Some KVM switches work great, some don't. I've got some that work great while they work, but then the KVM switch itself crashes regularly.

Re: DHCP server issues.

2007-02-25 Thread Peter Hessler
On 2007 Feb 25 (Sun) at 16:45:46 -0800 (-0800), Bray Mailloux wrote: :And my interfaces are configured as such. : :cat /etc/hostname.rl0 External interface :inet 192.168.1.2255.255.255.0 NONE : :cat /etc/hostname.rl1 Internal Interface :192.168.1.3 255.255.255.0 You

Re: site-to-site vpn 4.0 to cisco 3000

2007-02-25 Thread William Bloom
The man page for isakpd.conf indeed sheds some light, there's an example in that page that show's how to specify lifetimes for both phases... [General] Default-phase-1-lifetime= 3600,60:86400 Default-phase-2-lifetime= 1200,60:86400 At this point, if

Re: site-to-site vpn 4.0 to cisco 3000

2007-02-25 Thread William Bloom
On further study of the iskampd.conf man page, I am thinking that you may be correct by turning you attention to the isakmpd.conf as a possible trouble spot. I notice that you specified group mod768 (Diffie -Hellman group 1)in your ipsec statements. As I said, not having had occasion to run a

Re: site-to-site vpn 4.0 to cisco 3000 SOLVED

2007-02-25 Thread William Bloom
Ah. Disregard my last post. I didn't realize that the 'ipsec' configuration specifies main mode (phase 1 negotiation) and quick mode (phase 2 negotiation) in separate substatements. Good find. That makes perfect sense. Bill On Feb 25, 2007, at 19:06, c l wrote: Finally got this to work.

OpenBGPD bug??

2007-02-25 Thread Anderson Nadal
Hy all. I found a possible OpenBGPD bug. I have a bgp session with Cymru to receive a bogon network using bgp. I have others sessions with my local carrier to. Sometimes, the Cymru sessions go down, after some seconds the session is established. Wheel, after some sessions up and down, the

Anchor naming / evaluation (naming mismatch)

2007-02-25 Thread Craig Barraclough
Having trouble sending this to [EMAIL PROTECTED] list, so I'm sending to misc@ instead -- I got caught by an interesting situation recently, which I eventually tracked down to the following situation. The anchor in the main ruleset was given like: anchor test/* However the anchor was populated

Re: Clock running 1/4 of real time

2007-02-25 Thread Srebrenko Sehic
I have a 326m running 3.9/amd64 for months without a glitch. Dmesg below. Perhaps something changed after 3.9 that causes the before mentioned problems. OpenBSD 3.9-stable (GENERIC.MP) #7: Mon Aug 21 10:28:18 CEST 2006 [EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem =

Re: [OT] openbsd + terminal server usage

2007-02-25 Thread Julien TOUCHE
Stuart Henderson wrote on 25/02/07 22:55: ports/comms/sredird to run a terminal server on OpenBSD, ftp://ftp.opengear.com/opengear-serial-client-2.0.9p0.tar.gz might work to let you connect to another terminal server as if it were a local port, I don't know whether it works on OpenBSD or

Re: OpenBGPD bug??

2007-02-25 Thread Henning Brauer
* Anderson Nadal [EMAIL PROTECTED] [2007-02-26 05:28]: I found a possible OpenBGPD bug. you're petty much leaving out all relevant information. you don't mention which version you run, you don't show your config, and you don't show complete logs at time of failure. impossible to track down