Re: It is 2010. Still no 3GB support by default?

2010-06-08 Thread Chris Cameron
On Mon, Jun 7, 2010 at 9:32 PM, VICTOR TARABOLA CORTIANO vt...@c3sl.ufpr.br wrote: Most people that have those big amounts of memory don't use their PCs full potential. CPU is mostly idle, etc. Also they don't realize how big those amounts of memory are... Also there is the environment

Post-intrusion forensics

2008-05-08 Thread Chris Cameron
For our Windows/Solaris/Linux servers, we've had PWC say that they're qualified and able to do post-intrusion forensics on our server(s). I'm told this will go a long way in making everyone in our company as well as our customers feel better. Partly because it's an outside party verification of

Intel Gigabit VT Quad NIC support

2008-01-16 Thread Chris Cameron
I made a mistake and bought a couple Dell servers with Intel VT NICs. These aren't recognized by 4.2, and the January 15th Snapshot seems to recognize them, but they're marked as not configured. So, in the most humble way I possibly can, (without any hint of demand I hope) can someone tell me

Helping with Softraid testing

2007-11-16 Thread Chris Cameron
I'm in a good position to test Softraid on an AMD and an UltraSPARC, however I've realized I don't know a lot about it (what -exactly- it's working to accomplish, and commands to use). Is there an overview of Softraid to get me started so I can be of some use? Chris

Re: Helping with Softraid testing

2007-11-16 Thread Chris Cameron
to the area that isn't clear? On Fri, Nov 16, 2007 at 11:29:20AM -0700, Chris Cameron wrote: I'm in a good position to test Softraid on an AMD and an UltraSPARC, however I've realized I don't know a lot about it (what -exactly- it's working to accomplish, and commands to use). Is there an overview

pf_src_connlimit messing things up

2007-05-01 Thread Chris Cameron
I'm getting the following: pf_src_connlimit: blocking address xx.xx.xx.xx, 7 states killed Which is a pretty neat feature except I can't find anything on it, and it's (somewhat) silently doing this. Can someone point me to where I can read about this? I'd like to know how it decides to

Wireless access point being flakey

2007-04-09 Thread Chris Cameron
Have a Soekris with and Atheros AR5212. Wirelessly, out to the internet packets get dropped. Wired, out to the internet, no problem. This is with the same laptop using the same outbound internet connection. Wirelessly, from this laptop to the router no packets are dropped. From the router to

dhclient on a Sokeris

2007-03-14 Thread Chris Cameron
I'm trying to setup a Soekris that I can hand to someone and have it work just like a Linksys might. My one snag is grabbing a DHCP address from a server that may always not be there. For instance if they plug the device in, but then don't plug in the network cable until several minutes

Re: Firewall partially failing with high traffic (Updated)

2006-11-15 Thread Chris Cameron
Just building off my last message. Answering Ryans questions first: - Do you have dedicated addresses on the carp parent interfaces? For sure. - Are all the carp devices on the master firewall MASTER; what about the backup? Before and after the network dies, primary firewall is all MASTER,

Firewall partially failing with high traffic

2006-11-14 Thread Chris Cameron
I have a 3.8 PF/CARP setup that I can reproducibly screw up simply by cat'ing lots of text over a telnet session. It has several subnets, and several NICs, but only 1 subnet becomes unavailable. Everything else continues to work. There are no errors in messages, daemon, with PF debug set to misc.

Re: Firewall partially failing with high traffic

2006-11-14 Thread Chris Cameron
memory stateshard limit1 src-nodes hard limit1 frags hard limit 5000 tableshard limit 1000 table-entries hard limit 10 $ Chris On Tue, 2006-11-14 at 13:05 -0500, Carlos A. Carnero Delgado wrote: Hi, On 11/14/06, Chris Cameron [EMAIL

Re: Sun BlackBox

2006-11-01 Thread Chris Cameron
Do you plan to need a trailer full of Sun hardware? They're just normal Sun machines in a trailer. On Wed, 2006-11-01 at 14:55 -0300, Gustavo Rios wrote: Dear list members, While visiting sun blackbox home page, i saw they have a new project called blackbox. But i don't know whether

Website(s) being blocked by CARP/PF firewall (2 of 2)

2006-09-07 Thread Chris Cameron
Sorry, hit Ctrl+Enter. 192.168.0.1 - CARP IP 192.168.0.2 - Master firewall IP On the master CARP firewall, with tcpdump on the external interface: Connecting behind firewall: 08:18:30.705631 192.168.0.1.53119 209.104.48.144.80: S 4111080674:4111080674(0) win 16384 mss

Re: Website(s) being blocked by CARP/PF firewall

2006-09-07 Thread Chris Cameron
On Thu, 2006-09-07 at 10:46 -0400, Asenchi wrote: On 9/7/06, Chris Cameron [EMAIL PROTECTED] wrote: Have two 3.8 firewalls in a CARP setup, and through this firewall I'm unable to get to ticketmaster.ca or .com. They both have different IPs. But make sure you have read and understand

isakmpd - Two subnets behind 1 server

2006-05-16 Thread Chris Cameron
I have 3 subnets, 192.168.120.x, 121.x and 122.x. 120 and 121 are physically connected, 122 connects through a VPN. In my VPN config, in Phase 2 I have: Local-ID= 120network Remote-ID= 122network As expected, the 120 and 122 networks talk fine, traffic coming from

Compiling BandwidthD

2006-05-09 Thread Chris Cameron
Has anyone recently compiled BandwidthD on OpenBSD? I've been banging my head against this for a while, and it's just one thing after another not working. This is on 3.8/Sparc64, but would be willing to hear from anyone who has done this before. Chris

Re: using queues to limit bandwidth

2006-05-01 Thread Chris Cameron
On Mon, 2006-05-01 at 13:02 -0400, Chris Bullock wrote: Can queues be used to queue overall bandwidth? We have a project where we will be sharing an Internet connection with another company, we will have an IP and they will have an IP each company providing their own firewall. I understand

'set skip on' being inconsistent

2006-04-13 Thread Chris Cameron
In my pf.conf I have: set skip on tun0 set skip on enc0 set skip on lo0 tun0 is for OpenVPN. If I run pfctl -f /etc/pf.conf, I can connect with OpenVPN and telnet to a server. If I disconnect OpenVPN, wait for a couple of minutes, then try connecting with telnet again, pf blocks the

Hanging Sun V100

2006-03-02 Thread Chris Cameron
Have/had a V100 working as an office firewall. It maintains a VPN connection between itself and another OBSD firewall. All running OBSD 3.8. Both are quite new in their current positions. Previous to this an Ultra2 with 3.5 was doing this job without issue. The V100 twice now has hung without

Preventing breaks on Sparc's

2006-02-05 Thread Chris Cameron
What is it OpenBSD does to prevent breaks/Stop+A from working? Did a net install of 3.8 on a V100 and was playing with RAIDFrame. Trying to get it to boot off the second disk, it refuses to go to an ok prompt. If I unplug both drives, set bootmode to reset_nvram in LOM and boot the machine

Re: Preventing breaks on Sparc's

2006-02-05 Thread Chris Cameron
Bryan Irvine wrote: If I unplug both drives, set bootmode to reset_nvram in LOM and boot the machine I can use break to get to an ok prompt. However if I plug the drives back in, the instant the OpenBSD boot loader comes up, I again can't get back to an ok prompt. This is while

CARP not preempt-ing correctly

2006-01-22 Thread Chris Cameron
When one interface fails in a carp setup, it is my understanding that if net.inet.carp.preempt is set to '1', that both interfaces on the single machine should fail. However I'm not seeing this happening and I'm hoping this is why I'm dropping connections during fail over. If I fail both

Re: CARP not preempt-ing correctly

2006-01-22 Thread Chris Cameron
Running 3.8. Chris Daniel Ouellet wrote: Chris Cameron wrote: When one interface fails in a carp setup, it is my understanding that if net.inet.carp.preempt is set to '1', that both interfaces on the single machine should fail. However I'm not seeing this happening and I'm hoping

3 VPNs, 3 networks, 2 subnets

2005-10-12 Thread Chris Cameron
I'm trying to do something I'm pretty sure I recall reading couldn't be done. Although I wasn't able to find any information this last time around. We're going to be temporarily splitting our data centre, but still want both data centre halfs connected to our office through our VPN. Everyone

Pausing firewall

2005-08-21 Thread Chris Cameron
Have an OpenBSD firewall working in an office doing very straight forward NAT and some persistent VPN tunnels. Couple weeks ago, this firewall just stopped responding to any traffic. It was sporadic, as after several minutes it'd start going again. At that point it was a patched Sparc64 3.5.