Re: PF references

2006-05-12 Thread News Collector

Nick Holland wrote:


Thanks Nick I should have said I checked all the usual suspects.  Sorry.

News Collector wrote:

Hello:

Where (what) is the canonical site (or book) for PF.


documentation-wise?

Yeah

that would be the OpenBSD man pages.  They are authoritative.  When
things change, they get updated, or people get beaten.  In particular,
see pf.conf(5), pfct.(8), pf(4) and the SEE ALSOs in each.

Beyond that, there are several websites and books.  My personal favorite
website is the OpenBSD website itself, but I may be biased. :)



OK what book? I'm a PF users and I used it for non-trivial tasks. So I 
all (take with gain of salt) most at the level of many docs.
Also PF is a moving target. I wished (wish is the correct word) all 
authoritative document. Give to prefect my PF chops.



Are there any site where talk about PF is a application (like for OS X).


probably.  There's a website for just about everything.
Talk is cheap.


OS X has PF, but there's a interface that limits what you can do. They 
don't document their interface to it. OS X has lot of fancy way to do 
trivial thinks you meant not want done.


One Last, has anyone done any work on using CARP, 


Quite a few people have, yes. ;)

 I know

synchronizations depends
on similar cpus with similar clocks and constrained  clock drift.


read it in a book but I thank you are well within their bounds. The book 
makes the statement that given a set of hosts which can communicate. It 
is impossible for a given host to tell the difference between a slow 
host and a failed  host( in the absence of timeouts). So if the timeout 
is too fast on a fast host it may think a slow host has failed.

The book doesn't give parameter for this kind of failure.


This answer my question because I was had close matching machine but not 
exactly.





oh?  News to me.  And the Celeron 600 that I CARPed with a PIII-750.

Don't really have to even be the same platform, though it can create
administrative problems (On this machine, carp0 is on the dc0, on
that machine, it's on hme3).

Nick.




PF references

2006-05-11 Thread News Collector

Hello:

Where (what) is the canonical site (or book) for PF.

Are there any site where talk about PF is a application (like for OS X).


One Last, has anyone done any work on using CARP, I know 
synchronizations depends
on similar cpus with similar clocks and constrained  clock drift. Just 
wonder.



Re: Network problems

2006-05-08 Thread News Collector

dave feustel wrote:

I just upgraded to 3.9 yesterday and today I am having
severe network problems. This has been happening for the
past week, but is now much worse. Browser requests take forever
to complete, 


Make sure your DNS is working and that you're using the right one.  A 
Domain
Namer server (DNS) map host names to ip addresses. Many network 
applications

query DNS.


try :

use dig :   dig  @your DNS .  some site  A

example : dig @ns1.yahoo.com www.yahoo.com

If browsers is slow but renders nevertheless.  DNS could be the problem. 


I can't ping verizon.com, traceroute doesn't
  

Can you ping using the ip address.

Try pinging :  209.125.236.3  www.yahoo.com

It the first work and the second doesn't it could be your DNS

work through the new verizon dsl modem which assigns
a local address of 192.168.1.47 to my computer. The
modem has address 192.168.1.1. Here is some sample console
  


I'm not sure that the Warning: mindspring.com has multiple addresses is
part of the problem. Mindspring and newedge networks are merging

log showing the ping and traceroute problems.
I called Verizon technical support, but it is useless.
Any ideas about how to fix this?

Thanks,
Dave Feustel
=
/home/daf}ping mindspring.com
PING mindspring.com (207.69.189.28): 56 data bytes
64 bytes from 207.69.189.28: icmp_seq=0 ttl=246 time=80.915 ms
64 bytes from 207.69.189.28: icmp_seq=1 ttl=246 time=81.187 ms
64 bytes from 207.69.189.28: icmp_seq=2 ttl=246 time=80.871 ms
64 bytes from 207.69.189.28: icmp_seq=3 ttl=246 time=83.075 ms
64 bytes from 207.69.189.28: icmp_seq=4 ttl=246 time=82.433 ms
64 bytes from 207.69.189.28: icmp_seq=5 ttl=246 time=82.232 ms
64 bytes from 207.69.189.28: icmp_seq=6 ttl=246 time=81.964 ms
--- mindspring.com ping statistics ---
7 packets transmitted, 7 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 80.871/81.811/83.075/0.780 ms
/home/daf}traceroute mindspring.com
traceroute: Warning: mindspring.com has multiple addresses; using 
207.69.189.28

traceroute to mindspring.com (207.69.189.28), 64 hops max, 40 byte packets
 1  dslrouter (192.168.1.1)  0.632 ms  0.601 ms  0.464 ms
 2  * * *
 3  * * *
 4  * * *
 5  * * *
 6  * * *
 7  * * *
 8  * * *
 9  smtpsvc8.mindspring.com (207.69.189.28)  79.695 ms *  105.213 ms
/home/daf}traceroute verizon.com
traceroute to verizon.com (192.76.85.245), 64 hops max, 40 byte packets
 1  dslrouter (192.168.1.1)  0.602 ms  0.555 ms  0.483 ms
 2  * * *
 3  * * *
 4  * * *
 5  * * *
 6  * * *
 7  * * *
 8  * * *
 9  * * *
10  * * *
11  * * *
12  * * *
13  * * *
14  * * *
15  * * *
16  * * *
^C
/home/daf}


/home/daf}ping verizon.com
PING verizon.com (192.76.85.245): 56 data bytes
--- verizon.com ping statistics ---
170 packets transmitted, 0 packets received, 100.0% packet loss
===