CARP + OSPF help needed
Hello misc, I'm trying to replace my single OpenBSD firewall with a pair of redundant firewalls. I've been testing this (thanks to the power of VMware) and so far haven't gotten it to work the way I want/need. My current setup is: (Cisco router) <-> (OpenBSD) <-> (Cisco switch running layer 3 routing) There are a variety of 10.x.x.x subnets floating around so OSPF was implemented to manage that. All three devices run OSPF. In its current setup it all works very well. In my testing of using a pair of boxes with carp/pfsync I've run into a bit of a snag. I've read every google result I can in an attempt to figure this out but have come up empty. Everything I've found is either too vague or isn't offering the solution to the same scenario I'm attempting to setup. I'd like OSPF to hand out the carp addresses to the routing tables so that pfsync can work its magic when a firewall goes down. What I've manage to accomplish is one of two things. 1) OSPF doesn't work at all and never peers up with its neighbor 2) OSPF works, but hands out both IPs from the physical interfaces and not the carp interface Does anyone have any experience with getting this setup working? I can provide configurations done on the openbsd boxes but really it's nothing special that I've done. -brian
Re: CARP and transit network to ISP
I have set up a pair of gateways for a similar scenario where the provider gave me /30 and an ethernet jack instead of providing a router on-premises. This is what I did: -Configured an interface on each machine to come up with no IP. -Configured a carpdev to use the no IP interface on each machine. -Configured my ip from the /30 on the carpdev on each machine. Other things included CARP on other interfaces like LAN and DMZ. In my case those IP networks were large enough to allow me 1 CARP IP and an IP for each gateway. Not sure if that helps, but the best general advice is to draw a picture of what you want. Read the FAQ/manpages to draft a config. Test all that, and if you are like me, realize you didn't really want bridge at the one place in the drawing and revise--repeat. Good luck!
Paghi solo i risultati
Assistenza al contenzioso bancario -- La banca ha attivato una delle seguenti procedure: -- richiesta di rientro, decreto ingiuntivo, precetto, pignoramento, revoca dell'affidamento. La tua azienda ha necessità di assistenza? -- Per maggiori informazioni Clicca qui Mutui Prestiti Agevolazioni per le aziende in crisi Leasing Cessione del quinto Presito con delega Recupero crediti Visure on-line Conciliazione on-line Ricerca e/o Vendita Immobili Moratoria mutui Prevenzione insoluti Consultazione su banche dati World marketing Assistenza al contenzioso bancario Unsubscribe Queste nostre comunicazioni si propongono come servizio informativo, come tali non sono sempre necessariamente sollecitate dai destinatari, i cui indirizzi derivanti da ricerche commerciali, elenchi e servizi di pubblico dominio, visite e/o registrazioni sul nostro sito, contatti diretti o comunque occasionali e quant'altro, non sono in alcun modo suscettibili di essere divulgati a terzi (ai sensi dell'art. 13 del D.Lgs. 196 del 30/06/2003 (Testo Unico Privacy). Questo messaggio non può essere considerato Spam in quanto (ai sensi del D.Lgs. 196/2003 del 1 Gennaio 2004)
Единый нaлог -новыe правила!
Âñå äëÿ ×ÀÑÒÍÎÃÎ ÏÐÅÄÏÐÈÍÈÌÀÒÅËß åäèíùèêà. Êðàòêî äëÿ þðèäè÷åñêèõ ëèö - ïëàòåëüùèêîâ åäèíîãî íàëîãà ÂÍÈÌÀÍÈÅ!!- ñ 1.07 áóäóò äîíà÷èñëÿòü ïî îáû÷íûì öåíàì ïðè ðàáîòå ñ ×Ï: êàê ïîäñòðàõîâàòüñÿ. Ââîäÿòñÿ íîâûå ãðóïïû (5 è 6) åäèíîãî íàëîãà. 22 àâãóñòà, Êèåâ âàæíî äëÿ âñåõ ïðåäïðèíèìàòåëåé ÷òîáû íå ïîïàñòüñÿ íà ÁÎËÜØÈÅ øòðàôû! ÅÄÈÍÛÉ ÍÀËÎà ÈÇÌÅÍÅÍÈß 2012. ÊÀÊ ÐÀÁÎÒÀÒÜ ×Ï. 22 àâãóñòà 2012 (Ñðåäà) ñ 10:00-18:00 Êèåâ, óë. Øåëêîâè÷íàÿ 12 Ñòîèìîñòü ó÷àñòèÿ: 940 ãð-í. (o99) 56÷-î6-I2 Öåëåâàÿ àóäèòîðèÿ: áóäåò ïîëåçíî âñåì åäèíùèêàì. ×àñòíûì ïðåäïðèíèìàòåëÿì, áóõãàëòåðàì è äèðåêòîðàì.  ïðîãðàììå: ×òî äåëàòü ×Ï 2 ãðóïïû, êîòîðûé â 1-2 êâàðòàëå ïîðàáîòàë íå ñ åäèíùèêîì è íàñåëåíèåì?Ïî÷åìó íåëüçÿ ïðîñòî "æäàòü ó ìîðÿ ïîãîäû"? Íî ÷óòü-÷óòü ïîäîæäàòü ìîæíî, áëàãîäàðÿ Çàêîíó ¹4834-VI Íîâûå ïðàâèëà ñ 1.07.2012: · Ïåðåõîä èç ãðóïïû â ãðóïïó áóäåò âîçìîæåí ïî÷òè ñâîáîäíî ñ 1.07 èëè 1.10? · Ñìåíà Ñâèäåòåëüñòâà äëÿ 3 ãðóïïû. Ìîæíî ëè áóäåò îñóùåñòâëÿòü âñå âèäû äåÿòåëüíîñòè, êðîìå çàïðåùåííûõ · Ðàçúÿñíåíèå íàëîãîâîé, Âåðõîâíîãî ñóäà: ÷òî áóäåò ñ òåìè, êòî íàðóøàåò êðèòåðèè íàõîæäåíèÿ íà åäèíîì íàëîãå: ìåñòî îñóùåñòâëåíèÿ äåÿòåëüíîñòè, îáîðîò, ðàáîòà ñ "íå òåìè" íàëîãîïëàòåëüùèêàìè... · Äîõîä ïî ïîäàðêàì: íîâûå ïðàâèëà ñ 1.07.2012 · Óïðîùåííàÿ ñèñòåìà ðåãèñòðàöèè ïëàòåëüùèêîì ÍÄÑ... · Êàêèå íþàíñû óãîòàâëèâàåò Òàìîæíÿ äëÿ ïðîäàæè èìïîðòíîãî òîâàðà Äîíà÷èñëåíèå îáû÷íûõ öåí ñ 1.07.2012. · Äîñòàòî÷íûé ïàêåò äîêóìåíòîâ äëÿ ïîäòâåðæäåíèÿ "îáû÷íîñòè" ìèíèìàëüíîé öåíû · ÂÀÑÓ î ïðîöåäóðå äîíà÷èñëåíèé, èçìåíåíèÿ â Íàëîãîâûé êîäåêñ ñ 1.07.2012 5 è 6 ãðóïïà åäèíîãî íàëîãà · Êðèòåðèè ïî êîòîðûì ñòîèò èçáðàòü íîâûå ãðóïïû · Ïîðÿäîê ïåðåõîäà è íþàíñû ðàáîòû Âåäåíèå ó÷åòà íà åäèíîì íàëîãå. · ÊÍÈÃÀ ó÷åòà äîõîäîâ, äîõîäîâ è ðàñõîäîâ : êàê ïðàâèëüíî çàïîëíÿòü êíèãó. "Ñòàíäàðòíîå çàïîëíåíèå", êîòîðîå â áóäóùåì ìîæåò ïðèâîäèòü ê ìèëëèîííûì øòðàôàì. Êàê çàïîëíèòü êíèãó, ÷òîáû òî÷íî íå ïîïàñòü â øòðàôû. Ïåðèîäè÷íîñòü çàïîëíåíèÿ (åæåäíåâíî, ïî êàæäîìó ôàêò?...). · Óòåðÿ Êíèãè ó÷åòà äîõîäîâ (èëè ô.10): âîçìîæíûå ïîñëåäñòâèÿ íà ïðîâåðêå (ïîçèöèÿ ÃÍÀÓ). · Êàê âåñòè ðàñõîäû åäèíùèêà áåç ïîäòâåðæäàþùèõ äîêóìåíòîâ. Ó÷åò òîâàðà åäèíùèêîì - ïðåäïðèíèìàòåëåì. Íåîáõîäèìîñòü èìåòü äîêóìåíòû íà òîâàð. · Ïðîäàæà èìïîðòíîãî òîâàðà: îôèöèàëüíàÿ ïîçèöèÿ îòíîñèòåëüíî ïðîäàæè èìïîðòíîãî òîâàðà âñâÿçè ñ ââåäåíèåì â äåéñòâèå ñ 1.06 ÒÊÓÏðàâà ïðîâåðÿþùèõ îðãàíîâ çàïðàøèâàòü ïåðâè÷íûå äîêóìåíòû: â ðàìêàõ íàëîãîâîé ïðîâåðêè, îïåðàòèâíî-ðîçûñêíîãî, óãîëîâíîãî äåëà. · Ñòîèò ëè äëÿ ó÷åòà òîâàðà âåñòè äîïîëíèòåëüíûå âåäîìîñòè, òîâàðíûå îò÷åòû. Ïðîâåäåíèå èíâåíòàðèçàöèè òîâàðà ïðåäïðèíèìàòåëåì: åñòü ëè çàêîíîäàòåëüíîå òðåáîâàíèå, ìîæíî ëè èíâåíòàðèçèðîâàòü òîâàð áåç ïðèõîäíûõ äîêóìåíòîâ - ñîîòíîøåíèå Íàëîãîâîãî êîäåêñà, Õîçÿéñòâåííîãî è Ãðàæäàíñêîãî êîäåêñà. Ìîæíî ëè ïðè èíâåíòàðèçàöèè èñïîëüçîâàòü äîêóìåíòû ñòàðøå 3 ëåò. Òðåáîâàíèå îòíîñèòåëüíî íàëè÷èÿ ïðèõîäíûõ äîêóìåíòîâ ó åäèíùèêà- ïðåäïðèíèìàòåëÿ: àðãóìåíòàöèÿ òîãî, ÷òî â ðàìêàõ íàëîãîâîé ïðîâåðêè ïðèõîäíûå äîêóìåíòû íà òîâàð íå íóæíû. · Ìîæíî ëè òîâàð, íà êîòîðûé íåò ïðèõîäíûõ äîêóìåíòîâ, êâàëèôèöèðîâàòü êàê áåñïëàòíî ïîëó÷åííûé èëè ïîëó÷åííûì îò ôèç.ëèöà è âêëþ÷èòü â áàçó îáëîæåíèÿ åäèíûì íàëîãîì. · Øòðàô çà íå ó÷åò òîâàðíî-ìàòåðèàëüíûõ öåííîñòåé - ïî÷åìó ïîêà ðåäêî ïðèìåíÿåòñÿ íà ïðàêòèêå. · Ëè÷íîå èìóùåñòâî ó÷ðåäèòåëåé (ðàáîòíèêîâ), âûÿâëåííîå âî âðåìÿ ïðîâåðêè - êàê ïðàâèëüíî îáúÿñíèòü, ÷òîáû íå ïîïàñòü ïîä øòðàôû. · Ìîãóò ëè îøòðàôîâàòü ×Ï, ñäåëàâ êîíòðîëüíóþ çàêóïêó, íåâåäåíèå ó÷åòà òîâàðîâ ïî ìåñòó ðåàëèçàöèè. Êàê ïðàâèëüíî îòâåòèòü íà âîïðîñû: âåäåòñÿ ëè ó÷åò ïî ìåñòó ðåàëèçàöèè, ãäå äîêóìåíòû îò ïîñòàâùèêîâ òîâàðà, êàê ðåàëèçàòîð âåäåò ó÷åò ïîëó÷åííûõ îò ïîêóïàòåëåé äåíåã. Ïðåäïðèíèìàòåëè - ÑÏÓÒÍÈÊÈ è ÑÎÄÐÓÆÅÑÒÂÀ ×Ï è þð. ëèö. · Ïîñëåäñòâèÿ íåñîîòâåòñòâèÿ îðãàíèçàöèîííî-ïðàâîâûì ôîðìàì: êàêèå ïîñëåäñòâèå ïî Íàëîãîâîìó êîäåêñó, · «Îáû÷íûå» ïðåäïðèÿòèÿ áóäóò èìåòü ïðàâî îòíîñèòü íà ðàñõîäû åäèíùèêîâ, íî ñîòðóäíè÷åñòâî áóäåò çàòðóäíåíî: ïðåäïðèíèìàòåëè-ÑÏÓÒÍÈÊÈ è ÑÎÄÐÓÆÅÑÒÂÀ - íà ÷òî ïðèäåòñÿ îáðàùàòü âíèìàíèå. · Íîâûå òðåáîâàíèÿ ê "ïàêåòó äîêóìåíòîâ", êîòîðûé äîëæåí äàòü ïðåäïðèíèìàòåëü íà óïðîùåííîé ñèñòåìå ñ 1.01.2012 · Ïîêóïàòü ó ×Ï èëè äåëàòü ïàðàëëåëüíî. · ÍÀÕÎÆÄÅÍÈÅ ÂÑÅÕ â ÎÄÍÎÌ ÎÔÈÑÅ. Åñëè "ñîäðóæåñòâî" ñâÿçàííûå ëèöà. Ðàáîòà ïîä îäíîé òîðãîâîé ìàðêîé. ÑÎÒÐÓÄÍÈ×ÅÑÒÂÎ ÔÈÐÌÛ è ×Ï ñ 2012ã.- óñïååì ïîäãîòîâèòüñÿ: ïðîäàæà íèæå ñåáåñòîèìîñòè, îáû÷íûå öåíû: íîâûå ðåàëèè ñ 2012 ã. Óïëàòà ÍÄÔË ñ äîëãîâ â 2011 ã.-2012 ã.- ñ êàêîé êðåäèòîðñêîé çàäîëæåííîñòè ïëàòèòñÿ ÍÄÔË. · Âñå ïðî Äåÿòåëüíîñòü â ñôåðå èíôîðìàòèçàöèè
Re: ERP on OpenBSD
On 17/08/12 16:24 +0100, Mik J wrote: > Hello, > Has anyone tried to install OpenERP on OpenBSD ? I succeed to run on it on my laptop under OpenBSD but I only used the thin-client. By the way, I did not install it nor make packages but just run from the bazaar sources. -- Cédric Krier B2CK SPRL Rue de Rotterdam, 4 4000 Liège Belgium Tel: +32 472 54 46 59 Email/Jabber: cedric.kr...@b2ck.com Website: http://www.b2ck.com/
ERP on OpenBSD
Hello, Has anyone tried to install OpenERP on OpenBSD ? I tried tryton but I really didn't like it. There's no web interface and it requires a heavy client. And also for other reasons. I also tried Adempierre but it required a libmap.conf file and OpenBSD will not have this.
CARP and transit network to ISP
Can anyone give me a hint how to setup a pair of "CARPed" firewall machines to access an ISP via an direct ethernet link (fiber). He assigned us a customer network ( /29) and a transit network ( /30) to connect our (customer) network with his backbone without extra router machine. All (active) addresses of the customer network should become aliases of the CARP-interface (firewall is using NAT and proxies). This setup is running fine on some of our sites but there we always have a direct access to the backbone - without transit network. I understand that these transit networks are usually used in access networks to insert a router machine between customer network and the backbone but in this case we'd like to avoid this extra SPOF. Any idea how to deal with this issue? Or should we try to discuss with the ISP to leave out this transit network? TIA, Tobias.
Re: ugen(4) and libusb1 confusion
On 17/08/12(Fri) 14:51, Artturi Alm wrote: > Hi, > > Bugs section of ugen(4) up to date? or does devel/libusb1 > support reads from isochronous endpoints by mistake? It "supports" reads from isochronous endpoints mainly because the interface is the same as for bulk and interrupts ones, and in the secret hope that someone will fix the remaining issues ;) > In my tests with cheap chinese video capture usb-stick, > for which the userland code > using libusb supposedly works on other platforms, it never > seems to return from read() in _sync_gen_transfer() within > openbsd backend of libusb. > > I added more debug messages into ugen.c, while trying to find out > where it fails, only to find out that the code _seems_ to work as > supposed (with minimal knowledge about everything related), > just that usbd_get_xfer_status does always return 0 count. > I see that the bugs section hasn't been touched since the initial > commit about 13years ago. > > Comparing uvideo(4) code in relevant parts for isoc transfers > gave me no obvious clues as to what might still be wrong with ugen.c. > I think going deeper to find out more is too much for me, without > reading specs etc.. If you change your mind, don't hesitate to contact me :) > > > > Totally off-topic: > > Index: ehci.c > === > RCS file: /cvs/src/sys/dev/usb/ehci.c,v > retrieving revision 1.125 > diff -u -p -r1.125 ehci.c > --- ehci.c 7 Aug 2012 23:51:36 - 1.125 > +++ ehci.c 15 Aug 2012 17:36:17 - > @@ -3884,7 +3884,7 @@ ehci_device_isoc_start(usbd_xfer_handle > splx(s); > > if (sc->sc_bus.use_polling) { > - DPRINTF(("Starting ohci isoc xfer with polling. Bad > idea?\n")); > + DPRINTF(("Starting ehci isoc xfer with polling. Bad > idea?\n")); > ehci_waitintr(sc, xfer); > }
ugen(4) and libusb1 confusion
Hi, Bugs section of ugen(4) up to date? or does devel/libusb1 support reads from isochronous endpoints by mistake? In my tests with cheap chinese video capture usb-stick, for which the userland code using libusb supposedly works on other platforms, it never seems to return from read() in _sync_gen_transfer() within openbsd backend of libusb. I added more debug messages into ugen.c, while trying to find out where it fails, only to find out that the code _seems_ to work as supposed (with minimal knowledge about everything related), just that usbd_get_xfer_status does always return 0 count. I see that the bugs section hasn't been touched since the initial commit about 13years ago. Comparing uvideo(4) code in relevant parts for isoc transfers gave me no obvious clues as to what might still be wrong with ugen.c. I think going deeper to find out more is too much for me, without reading specs etc.. Totally off-topic: Index: ehci.c === RCS file: /cvs/src/sys/dev/usb/ehci.c,v retrieving revision 1.125 diff -u -p -r1.125 ehci.c --- ehci.c 7 Aug 2012 23:51:36 - 1.125 +++ ehci.c 15 Aug 2012 17:36:17 - @@ -3884,7 +3884,7 @@ ehci_device_isoc_start(usbd_xfer_handle splx(s); if (sc->sc_bus.use_polling) { - DPRINTF(("Starting ohci isoc xfer with polling. Bad idea?\n")); + DPRINTF(("Starting ehci isoc xfer with polling. Bad idea?\n")); ehci_waitintr(sc, xfer); }
Маркетинг в социальных сетях
Ìàðêåòèíã â ñîöèàëüíûõ ñåòÿõ. ÌÎÄ (ìåõàíèçì îáðàçîâàíèÿ äîõîäà) 18-19 àâãóñòà â Êèåâå ïðîéäåò 12-÷àñîâûé òðåíèíã äèðåêòîðà ïåðâîãî â Ðîññèè PR-àãåíñòâà "GREENPR", ñïåöèàëèçèðîâàííîãî íà ìàðêåòèíãå â ñîöèàëüíûõ-ñåòÿõ Äàìèðà Õàëèëîâà. Äàìèð Õàëèëîâ - SMM - ñïåöèàëèñò ¹1 â ÑÍÃ. Êëèåíòû Äàìèðà Õàëèëîâà: Pepsi, Sony Pictures, Universal, BenQ, Renault, ISIC, Stockholm School Of Economics, Åâðîñåòü, Áàëòèêà. Óíèêàëüíûé êóðñ, ïîñâÿùåííûé âñåì àñïåêòàì ïðîäâèæåíèÿ â ñîöèàëüíûõ ñåòÿõ (áëîããèíã, Òâèòòåð, ïðîäâèæåíèå âî ÂÊîíòàêòå, ñêðûòûé ìàðêåòèíã, âèðóñíûé ìàðêåòèíã è ò.ä.).  ïðîãðàììå: 1. Âîçìîæíîñòè ìàðêåòèíãà â ñîöèàëüíûõ ñåòÿõ (SMM) 2. Ïðîäâèæåíèå âî ÂÊîíòàêòå 3. Ïðîäâèæåíèå íà Facebook 4. Êîðïîðàòèâíûå áëîãè 5. Ïðîäâèæåíèå â Òâèòòåðå 6. Ðàáîòà ñ ëèäåðàìè ìíåíèé 7. Âèðóñíûé ìàðêåòèíã 8. Ñêðûòûé ìàðêåòèíã 9. Íåéòðàëèçàöèÿ íåãàòèâà 10. Ìîíèòîðèíã è îöåíêà ýôôåêòèâíîñòè Áèçíåñ-òðåíåð: Äàìèð Õàëèëîâ - ãåíåðàëüíûé äèðåêòîð àãåíòñòâà GreenPR. Êóðñ îñíîâàí íà ìíîãîëåòíåé ïðàêòèêå è âìåùàåò â ñåáÿ âåñü îáúåì ñîâðåìåííîãî SMM (Social Media Marketing). Ñ óâàæåíèåì, © 2007 Áèçíåñ-Öåíòð "Íàöèîíàëüíûé" Telephone: (044) 221-23-85/221-23-87 | Mailto: off...@send.seminar1.net.ua | Www: seminar1.org.ua Ýòî ïèñüìî ÿâëÿåòñÿ èíôîðìàöèåé äëÿ îçíàêîìëåíèÿ ïîëüçîâàòåëÿ.  ñëó÷àå, åñëè Âû õîòèòå ïðèîñòàíîâèòü ïîëó÷åíèå êîììåð÷åñêèõ ïðåäëîæåíèé, ïðîñèì ñîîáùèòü íàì http://seminar1.org.ua/delete.php c óêàçàíèåì ñðîêîâ, íà êîòîðûå íåîáõîäèìî îñòàíîâèòü îòïðàâêó ïî÷òû.
Creative Design, Gift & Premium
Having problems viewing this email? Please click here.For enquiry, please send email to i...@montegle.com å¦ç¡æ³é±è®ä»¥ä¸çå §å®¹ï¼è«ææ¤.å¦æä»»ä½æ¥è©¢è«é»éµè³ i...@montegle.com www.montegle.com å¦ææ¨ä¸æ³åæ¶å°æåç信件ï¼è«æéè£éå® Important Notice: Base on the Unsolicited Electronic Messages Ordinance, if you DO NOT want to receive any promotional email messages from us in the future, please kindly reply this e-mail for DELETION. If you would like to continue to receive our promotional email massages, you do not need to reply us.