OpenBGPD handling

2009-02-11 Thread Justin Krejci
I am curious to know how well OpenBGPD handles the BGP update dynamics as
described in this Cisco RFP.

 

http://www.cisco.com/web/about/ac50/ac207/crc_new/university/RFP/rfp07026.ht
ml

 

This is assuming running OpenBGPD with full tables over gig ethernet
connections and on a modern hardware (multi gigahertz CPU and multi
gigabytes of RAM + intel gigE nics). Are there any general concerns or
issues with BGP updates causing performance issues on the system?
Compatibility problems with any hardware vendors' BGP implementations? Etc

 

 

>From my reading it seems that all normal/standard BGP functionality is
present if not enhanced (bgp session key management, etc) in OpenBGPD and
that performance is comparable to expensive Cisco grade router hardware and
the user testimonials look pretty good too.
http://www.openbgpd.org/users.html. Are there any features or functionality
that anyone has found lacking in OpenBGPD?

 

Thanks for your time



Mobile IP routing

2007-08-08 Thread Justin Krejci
Hello List,

Is there any sort of transparent Mobile IP implementation in OpenBSD? I see 
the use of GRE is supported. I am looking for something along the lines of 
TMIP (www.slyware.com/projects_tmip.shtml) where the layer 2 and or layer 3 
devices can communicate with each other on the separate networks to allow end 
users to roam between these multiple networks without the need of some Mobile 
IP agent installed and let the end user retain the same IP address throughout 
the multiple layer 2 and layer 3 networks. TMIP looks like exactly what I am 
looking for but it appears to not be maintained (last update was in 2003). It 
does not appear just using GRE by itself would address this scenario.

Almost all commercial products that implement Mobile IP technology requires 
end user software to be installed. I have heard Juniper equipment can handle 
this but I have not received any details on this yet. Another commercial 
vendor that appears to have this functionality is Blue Socket 
(bluesocket.com/products/controllerfamily.html  then search on page for "Adds 
New Meaning to Wireless Lan Security")

Someone could be hired to look into updating/maintaining TMIP or scrapping it 
and start fresh but I was hoping someone here might have some experience or 
insight on this or point me in another direction. I know OpenBSD prides 
itself (rightly so) on quality programming so if there was an OpenBSD version 
of what I am looking for that would be awesome.

Thanks for your time,
Justin



Re: How can i send syslogd message to a OPENBSD server ?

2006-01-19 Thread Justin Krejci
On Thursday 19 January 2006 01:37 am, Michael Bibby wrote:
> hello ,[EMAIL PROTECTED]
>
> I have a Linux(SUSE ENTERPRISE LINUX 9) system ,and i want to send all
> syslogd messages
> to another system which runs OpenBSD 3.8 release . How can i do with
> OpenBSD ?
>
> well ,i know how to configure it in Linux(suse):
>
> Server (get all messages sent from client,IP:192.168.0.1):
> == /etc/syslogd.conf ==
> *.* -/var/log/messages
>
> == /etc/sysconfig/syslog ==
> SYSLOGD_PARAMS="-r"
>
> Client (send all syslogd messages to Server):
> == /etc/syslogd.conf ==
> *.* @192.168.0.1


You will need to start syslog on the openbsd server with the -u option 
(see /etc/rc.conf and syslogd man pages) and also make sure you have pf.conf 
allowing port 514 udp from your linux host.



Re: acpi

2005-11-10 Thread Justin Krejci
On Wednesday 09 November 2005 10:52 pm, Jordan Hargrave wrote:
> Thanks for all the ACPI dumps everyone!  I think I have enough of a sample
> set now, no more, please! :)
> Hmm.. the acpiscan should not be core dumping; there maybe an invalid
> address in the ACPI table?
>
>   --jordan hargrave
>

It did not core dump on me.



Re: nat vpn pptp issues

2005-10-05 Thread Justin Krejci
Looks like this is the homepage for the project now.

http://www.placid.tv/pie.php?page=FrickinPPTP

On Wednesday 05 October 2005 06:29 am, James Wright wrote:
> frickin, discussed here:
> http://www.undeadly.org/cgi?action=article&sid=20041009000521
> though the frickin sourceforge page does not appear to be functional you
> can still download the tarball.
> Only supports one pptp server.



Re: Spamd/Postfix behaving strangely

2005-09-11 Thread Justin Krejci
On Sunday 11 September 2005 10:48 am, Jason Dixon wrote:
> On Sep 11, 2005, at 11:26 AM, jared r r spiegel wrote:
> >   i don't recall having seen a PIX do a 220 banner with
> >   _only_ asterisks.  i think they've always had 2s and 0s mixed
> >   in there in an f'd up fashion
> >
> >   but my knee-jerk is still to think of a PIX and getting it to
> >   shut the hell up.
> >
> >   what is the command.. "no fix smtp" or something?
>
> Yes, that was indeed the problem.  Thanks to everyone (Steve, Jared,
> Tamas, Benny) who suggested it.  The commands to verify and "unfix"
> the setting:
>
> pixa(config)# sh fixup
> 
> pixa(config)# no fixup protocol smtp 25
>
>

The SMTP Fixup "feature" also includes several other "features" such as 
limiting concurrent connections from each external host. This "feature" 
causes so many problems for anyone with a lot of mail and are also using an 
external mail spam/virus filtering service because usually tons of mail 
originates from only a handful of servers, the filtering servers.

If anyone has any know how on tweaking Cisco's smtp fixup protocol, that would 
be great.