Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-12 Thread Dan Farrell
Not quite... but you have the right idea.

A 'vanilla' VLAN created for an IP network will allow L2 communications
between the hosts in the shared VLAN, given that they exist in the same
IP subnet.

A private VLAN, on the other hand, sees all of the hosts in the same
VLAN and IP subnet, but makes restrictions on what hosts in the VLAN can
talk to each other, restricting direct L2 traffic that gets transmitted
from one host to the other via the switch.

The 'nutshell' response is that private VLANs are like ACL's for
VLANS... you restrict/all communications between hosts that would
otherwise have unrestricted L2 access to each other.

You get the benefit of IP usage conservation with the power of separate
VLANs.

It's been a long evening, so if muddled things even further I
apologize...



Dan Farrell
Applied Innovations
[EMAIL PROTECTED]
 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of Lars Hansson
Sent: Friday, May 12, 2006 12:26 AM
To: misc@openbsd.org
Subject: Re: FYI, 1and1 hosting fun (ip subnet zero)

On Friday 12 May 2006 02:58, Stuart Henderson wrote:
 These are, uh, quite large operations, and if there's a way to reduce
 IP address use by 3/4 without putting a bunch of customers in the same
 subnet that's probably a good thing.

Wouldnt that be what VLAN's are for?

---
Lars Hansson



Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-12 Thread Henning Brauer
* Lars Hansson [EMAIL PROTECTED] [2006-05-12 06:35]:
 On Friday 12 May 2006 02:58, Stuart Henderson wrote:
  These are, uh, quite large operations, and if there's a way to reduce
  IP address use by 3/4 without putting a bunch of customers in the same
  subnet that's probably a good thing.
 
 Wouldnt that be what VLAN's are for?

how does L2 partitioning help conserving L3 address space?
not related, here.

-- 
BS Web Services, http://www.bsws.de/
OpenBSD-based Webhosting, Mail Services, Managed Servers, ...
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)



Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-12 Thread Constantine A. Murenin

I didn't know that Linux has such an ugly dmesgs. Please, resist from
posting them on this list, they hurt my screen. :)

On 11/05/06, Timo Schoeler [EMAIL PROTECTED] wrote:

thus Robert spake:
 Timo Schoeler wrote:
 thus Robert spake:
 Timo Schoeler wrote:
 thus Alexander Farber spake:
 Do you see any kernel output at all? I believe one
 should always see at least the boot prompt -
 unless the serial speed of the console doesn't match

 Do you see the boot prompt and have you tried verbose?

 On 5/11/06, Robert [EMAIL PROTECTED] wrote:
 Alexander Farber wrote:
h754815:afarber {103} cat /etc/hostname.fxp0
inet 81.169.186.95 255.255.255.255 NONE
!route add 81.169.186.1 -link \$if: -interface

 PS: I wonder if anyone successfully runs OpenBSD
 at Strato's SR2, MR2 or LR2 as I'd like to upgrade

 On 5/11/06, Dan Farrell [EMAIL PROTECTED] wrote:
 Geez network setups just shouldn't be that strained... I mean, what
 happened to hooking up a server with a /30 connection to the nearest
 router? Am I missing something?
 I think Strato, 11 and co introduced the .255 hack to counter
 sniffing.
 Using .0 netmask works, but won't allow traffic with other hosts in
 the
 same subnet. (Which shouldn't be a problem for most.)

 I have not tried any of the new Strato servers, but am experimenting
 with one of 11's new AMD64 systems.
 So far, nothing that i dd to the hd will boot.
 (tried 3.9 and current floppy and cd, modified for serial-acc and also
 disabling the usual kernel-options like pcibios)

 Anyone got one of those systems to run OpenBSD?

 For those interested here's the debian-resycue-system dmesg and lspci
 output for an 11 L64 server. Perhaps someone can see unsupported
 hardware i don't.
 http://openbsd.pap.st/1und1_L64.txt

 Any advice'd be much apreciated.
 did anybody into the problem of device timeouts for the NIC itself? i
 tried to install OpenBSD on three or few machines at strato, none did
 the job. i also tried NetBSD, same problem. it seems to be up to a weird
 interrupt routing...

 Which kind of servers did you try?
 At Strato i had no problems with the Highend SR. That's what they
 offered last year. i386/Celeron 2400 running OpenBSD without a problem.

 fxp0 at pci2 dev 6 function 0 Intel 82557 rev 0x08, i82559: irq 11,
 address 00:30:48:52:12:34
 inphy0 at fxp0 phy 1: i82555 10/100 PHY, rev. 4
 fxp1 at pci2 dev 7 function 0 Intel 82557 rev 0x08, i82559: irq 10,
 address 00:30:48:52:12:35
 inphy1 at fxp1 phy 1: i82555 10/100 PHY, rev. 4

 -Robert
 STRATO HighEnd-Server SR (v3.4)

 tried OpenBSD 3.8 and NetBSD 3.0 and -current. no dmesg as i don't
 maintain that machine any longer. what i remember is that the MAC
 addresses were not the actual addresses of the interfaces. linux,
 however, figured them out correctly (which is the main fact i don't
 maintain them any longer ;)


 Oh, differnt version, had v2.6. Quite happy with it. Only the ExelStore
 hd is damn slow.

IDE. puke. 'ExelStore'. wtf? i wouldn't give such hardware to my enemies. ;D

 Had it running OpenBSD since 3.7. Just some plain Intel hw.

 Think i'll have to write some docs if i get the new 11 running.

for the record: dmesg (Linux 2.6.11.4-20a-default i386 GNU/Linux) of the
machine... (seems the high quality HD is not /that/ healthy...)

 Thanks for your reply.

you're welcome! :)

 -Robert

Linux version 2.6.11.4-20a-default ([EMAIL PROTECTED]) (gcc version 3.3.5
20050117 (prerelease) (SUSE Linux)) #1 Wed Mar 23 21:52:37 UTC 2005
BIOS-provided physical RAM map:
  BIOS-e820:  - 000a (usable)
  BIOS-e820: 000f - 0010 (reserved)
  BIOS-e820: 0010 - 1fff (usable)
  BIOS-e820: 1fff - 1fff3000 (ACPI NVS)
  BIOS-e820: 1fff3000 - 2000 (ACPI data)
  BIOS-e820: ffb0 - 0001 (reserved)
0MB HIGHMEM available.
511MB LOWMEM available.
On node 0 totalpages: 131056
   DMA zone: 4096 pages, LIFO batch:1
   Normal zone: 126960 pages, LIFO batch:16
   HighMem zone: 0 pages, LIFO batch:1
DMI 2.3 present.
ACPI: RSDP (v000 IntelR) @ 0x000f6940
ACPI: RSDT (v001 IntelR AWRDACPI 0x42302e31 AWRD 0x) @ 0x1fff3000
ACPI: FADT (v001 IntelR AWRDACPI 0x42302e31 AWRD 0x) @ 0x1fff3040
ACPI: DSDT (v001 INTELR AWRDACPI 0x1000 MSFT 0x010e) @ 0x
ACPI: PM-Timer IO Port: 0x408
ACPI: local apic disabled
Allocating PCI resources starting at 2000 (gap: 2000:dfb0)
Built 1 zonelists
Kernel command line: root=/dev/hda3 selinux=0 console=tty0
console=ttyS0,57600 showopts
Initializing CPU#0
PID hash table entries: 2048 (order: 11, 32768 bytes)
Detected 2400.038 MHz processor.
Using pmtmr for high-res timesource
Console: colour VGA+ 80x25
Dentry cache hash table entries: 131072 (order: 7, 524288 bytes)
Inode-cache hash table entries: 65536 (order: 6, 262144 bytes)
Memory: 514360k/524224k available (1865k kernel code, 9316k reserved,
659k data, 204k 

Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-12 Thread Timo Schoeler

thus Constantine A. Murenin spake:

I didn't know that Linux has such an ugly dmesgs. Please, resist from
posting them on this list, they hurt my screen. :)


they just mirror the (ugly) internals of Linux ;)



Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-11 Thread sebastian . rother
*cut*

Once I set up a Serve rat a very moronic and clueless Hoster (Strato) wich
used/uses the same Setup.
Depends on their Network you may wanna try 255.255.0.0 or 255.255.255.0. :)

fxp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
lladdr 00:00:aa:77:cc:22
groups: egress
media: Ethernet autoselect (100baseTX full-duplex)
status: active
inet 81.169.x.x netmask 0x broadcast 81.169.255.255

As you can see it works. So it should work on 11 and other Hosters too.


Btw: Do not use STRATO. Their Support is somewhat poor, their tecnicans
are clueless and they block you if their Fail-Over-Fails and blame you
for getting a DDoS and tell you to stop it (crazy or.. I eman IF you get
DDoSed how should YOU be able to stop it?).
Just mofu* idiots.. realy.
I hope you`ll be happy at 11. :)

Kind regards,
Sebastian



Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-11 Thread Dan Farrell
Geez network setups just shouldn't be that strained... I mean, what
happened to hooking up a server with a /30 connection to the nearest
router? Am I missing something? 

Dan Farrell
Applied Innovations
[EMAIL PROTECTED]
 
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of [EMAIL PROTECTED]
Sent: Thursday, May 11, 2006 11:02 AM
To: misc@openbsd.org
Subject: Re: FYI, 1and1 hosting fun (ip subnet zero)

*cut*

Once I set up a Serve rat a very moronic and clueless Hoster (Strato)
wich
used/uses the same Setup.
Depends on their Network you may wanna try 255.255.0.0 or 255.255.255.0.
:)

fxp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
lladdr 00:00:aa:77:cc:22
groups: egress
media: Ethernet autoselect (100baseTX full-duplex)
status: active
inet 81.169.x.x netmask 0x broadcast 81.169.255.255

As you can see it works. So it should work on 11 and other Hosters too.


Btw: Do not use STRATO. Their Support is somewhat poor, their tecnicans
are clueless and they block you if their Fail-Over-Fails and blame you
for getting a DDoS and tell you to stop it (crazy or.. I eman IF you get
DDoSed how should YOU be able to stop it?).
Just mofu* idiots.. realy.
I hope you`ll be happy at 11. :)

Kind regards,
Sebastian



Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-11 Thread Alexander Farber

Hello,

I probably have a similar setup at strato.de and use Kili's trick:

   h754815:afarber {103} cat /etc/hostname.fxp0
   inet 81.169.186.95 255.255.255.255 NONE
   !route add 81.169.186.1 -link \$if: -interface

See the explanation at http://www.dettus.net/

Regards
Alex

PS: I wonder if anyone successfully runs OpenBSD
at Strato's SR2, MR2 or LR2 as I'd like to upgrade

On 5/11/06, Dan Farrell [EMAIL PROTECTED] wrote:

Geez network setups just shouldn't be that strained... I mean, what
happened to hooking up a server with a /30 connection to the nearest
router? Am I missing something?




Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-11 Thread Robert
Alexander Farber wrote:
 Hello,
 
 I probably have a similar setup at strato.de and use Kili's trick:
 
h754815:afarber {103} cat /etc/hostname.fxp0
inet 81.169.186.95 255.255.255.255 NONE
!route add 81.169.186.1 -link \$if: -interface
 
 See the explanation at http://www.dettus.net/
 
 Regards
 Alex
 
 PS: I wonder if anyone successfully runs OpenBSD
 at Strato's SR2, MR2 or LR2 as I'd like to upgrade
 
 On 5/11/06, Dan Farrell [EMAIL PROTECTED] wrote:
 Geez network setups just shouldn't be that strained... I mean, what
 happened to hooking up a server with a /30 connection to the nearest
 router? Am I missing something?
 
 

I think Strato, 11 and co introduced the .255 hack to counter sniffing.
Using .0 netmask works, but won't allow traffic with other hosts in the
same subnet. (Which shouldn't be a problem for most.)

I have not tried any of the new Strato servers, but am experimenting
with one of 11's new AMD64 systems.
So far, nothing that i dd to the hd will boot.
(tried 3.9 and current floppy and cd, modified for serial-acc and also
disabling the usual kernel-options like pcibios)

Anyone got one of those systems to run OpenBSD?

For those interested here's the debian-resycue-system dmesg and lspci
output for an 11 L64 server. Perhaps someone can see unsupported
hardware i don't.
http://openbsd.pap.st/1und1_L64.txt

Any advice'd be much apreciated.


-Robert



Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-11 Thread Stuart Henderson
On 2006/05/11 13:28, Dan Farrell wrote:
 Geez network setups just shouldn't be that strained... I mean, what
 happened to hooking up a server with a /30 connection to the nearest
 router? Am I missing something? 

These are, uh, quite large operations, and if there's a way to reduce
IP address use by 3/4 without putting a bunch of customers in the same
subnet that's probably a good thing.



Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-11 Thread Alexander Farber

Do you see any kernel output at all? I believe one
should always see at least the boot prompt -
unless the serial speed of the console doesn't match

Do you see the boot prompt and have you tried verbose?

On 5/11/06, Robert [EMAIL PROTECTED] wrote:

Alexander Farber wrote:
h754815:afarber {103} cat /etc/hostname.fxp0
inet 81.169.186.95 255.255.255.255 NONE
!route add 81.169.186.1 -link \$if: -interface

 PS: I wonder if anyone successfully runs OpenBSD
 at Strato's SR2, MR2 or LR2 as I'd like to upgrade

 On 5/11/06, Dan Farrell [EMAIL PROTECTED] wrote:
 Geez network setups just shouldn't be that strained... I mean, what
 happened to hooking up a server with a /30 connection to the nearest
 router? Am I missing something?



I think Strato, 11 and co introduced the .255 hack to counter sniffing.
Using .0 netmask works, but won't allow traffic with other hosts in the
same subnet. (Which shouldn't be a problem for most.)

I have not tried any of the new Strato servers, but am experimenting
with one of 11's new AMD64 systems.
So far, nothing that i dd to the hd will boot.
(tried 3.9 and current floppy and cd, modified for serial-acc and also
disabling the usual kernel-options like pcibios)

Anyone got one of those systems to run OpenBSD?

For those interested here's the debian-resycue-system dmesg and lspci
output for an 11 L64 server. Perhaps someone can see unsupported
hardware i don't.
http://openbsd.pap.st/1und1_L64.txt

Any advice'd be much apreciated.




Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-11 Thread Timo Schoeler

thus Alexander Farber spake:

Do you see any kernel output at all? I believe one
should always see at least the boot prompt -
unless the serial speed of the console doesn't match

Do you see the boot prompt and have you tried verbose?

On 5/11/06, Robert [EMAIL PROTECTED] wrote:

Alexander Farber wrote:
h754815:afarber {103} cat /etc/hostname.fxp0
inet 81.169.186.95 255.255.255.255 NONE
!route add 81.169.186.1 -link \$if: -interface

 PS: I wonder if anyone successfully runs OpenBSD
 at Strato's SR2, MR2 or LR2 as I'd like to upgrade

 On 5/11/06, Dan Farrell [EMAIL PROTECTED] wrote:
 Geez network setups just shouldn't be that strained... I mean, what
 happened to hooking up a server with a /30 connection to the nearest
 router? Am I missing something?



I think Strato, 11 and co introduced the .255 hack to counter sniffing.
Using .0 netmask works, but won't allow traffic with other hosts in the
same subnet. (Which shouldn't be a problem for most.)

I have not tried any of the new Strato servers, but am experimenting
with one of 11's new AMD64 systems.
So far, nothing that i dd to the hd will boot.
(tried 3.9 and current floppy and cd, modified for serial-acc and also
disabling the usual kernel-options like pcibios)

Anyone got one of those systems to run OpenBSD?

For those interested here's the debian-resycue-system dmesg and lspci
output for an 11 L64 server. Perhaps someone can see unsupported
hardware i don't.
http://openbsd.pap.st/1und1_L64.txt

Any advice'd be much apreciated.


did anybody into the problem of device timeouts for the NIC itself? i 
tried to install OpenBSD on three or few machines at strato, none did 
the job. i also tried NetBSD, same problem. it seems to be up to a weird 
interrupt routing...


--
Timo Schoeler | http://riscworks.net/~tis | [EMAIL PROTECTED]
RISCworks -- Perfection is a powerful message
ISP | POWER  PowerPC afficinados | Networking, Security, BSD services
GPG Key fingerprint = B5F6 68A4 EC45 C309 6770  38C4 50E8 2740 9E0C F20A

There are 10 types of people in the world. Those who understand binary
and those who don't.



Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-11 Thread Thorsten Glaser
(keeping cross-post of original poster because I
 don't have a better idea)

Todd T. Fries dixit:

The problem is that 1and1 hosting choses to have any root servers
setup with `ip subnet zero'.  That's a fancy way of stating that they
expect systems to setup IP's with netmasks of 255.255.255.255 and then
route to 10.255.255.1 `magically'.

Ah, they're doing it the same as Strato then.

Thanks to Matthias Kilian for discovering the following fix:

(hostname.fxp0)
inet 1.2.3.4 0x NONE
!route -n add -inet -host 5.6.7.8 -link -iface fxp0:
!route -n add -inet default 5.6.7.8

It does suck somehow, though. There are arp messages in dmesg.

bye,
//mirabile
-- 
 emacs als auch vi zum Kotzen finde (joe rules) und pine f|r den einzig
 bedienbaren textmode-mailclient halte (und ich hab sie alle ausprobiert). ;)
Hallo, ich bin der Holger (Hallo Holger!), und ich bin ebenfalls
... pine-User, und das auch noch gewohnheitsmd_ig (Oooohhh).  [aus dasr]



Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-11 Thread Robert
Alexander Farber wrote:
 Do you see any kernel output at all? I believe one
 should always see at least the boot prompt -
 unless the serial speed of the console doesn't match
 
 Do you see the boot prompt and have you tried verbose?
 

The machine doesn't come up. No boot prompt.
stty is set to 57000 in the image i try to boot. same settings as the
linux kernels they provide.
I suspect that it's a hardware problem or bios setting.
A yaifo image didn't come up either.

 On 5/11/06, Robert [EMAIL PROTECTED] wrote:
 Alexander Farber wrote:
 h754815:afarber {103} cat /etc/hostname.fxp0
 inet 81.169.186.95 255.255.255.255 NONE
 !route add 81.169.186.1 -link \$if: -interface
 
  PS: I wonder if anyone successfully runs OpenBSD
  at Strato's SR2, MR2 or LR2 as I'd like to upgrade
 
  On 5/11/06, Dan Farrell [EMAIL PROTECTED] wrote:
  Geez network setups just shouldn't be that strained... I mean, what
  happened to hooking up a server with a /30 connection to the nearest
  router? Am I missing something?
 
 

 I think Strato, 11 and co introduced the .255 hack to counter sniffing.
 Using .0 netmask works, but won't allow traffic with other hosts in the
 same subnet. (Which shouldn't be a problem for most.)

 I have not tried any of the new Strato servers, but am experimenting
 with one of 11's new AMD64 systems.
 So far, nothing that i dd to the hd will boot.
 (tried 3.9 and current floppy and cd, modified for serial-acc and also
 disabling the usual kernel-options like pcibios)

 Anyone got one of those systems to run OpenBSD?

 For those interested here's the debian-resycue-system dmesg and lspci
 output for an 11 L64 server. Perhaps someone can see unsupported
 hardware i don't.
 http://openbsd.pap.st/1und1_L64.txt

 Any advice'd be much apreciated.



Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-11 Thread sebastian . rother
 Geez network setups just shouldn't be that strained... I mean, what
 happened to hooking up a server with a /30 connection to the nearest
 router? Am I missing something?

 Dan Farrell

Depends on the fact if you may wanna sniff or not... :-)

Kind regards,
Sebastian
-- 
Don't buy anything from YeongYang.
Their Computercases are expensiv, they WTX-powersuplies start burning and
their support refuse any RMA even there's still some warenty.



Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-11 Thread Robert
Timo Schoeler wrote:
 thus Alexander Farber spake:
 Do you see any kernel output at all? I believe one
 should always see at least the boot prompt -
 unless the serial speed of the console doesn't match

 Do you see the boot prompt and have you tried verbose?

 On 5/11/06, Robert [EMAIL PROTECTED] wrote:
 Alexander Farber wrote:
 h754815:afarber {103} cat /etc/hostname.fxp0
 inet 81.169.186.95 255.255.255.255 NONE
 !route add 81.169.186.1 -link \$if: -interface
 
  PS: I wonder if anyone successfully runs OpenBSD
  at Strato's SR2, MR2 or LR2 as I'd like to upgrade
 
  On 5/11/06, Dan Farrell [EMAIL PROTECTED] wrote:
  Geez network setups just shouldn't be that strained... I mean, what
  happened to hooking up a server with a /30 connection to the nearest
  router? Am I missing something?
 
 

 I think Strato, 11 and co introduced the .255 hack to counter sniffing.
 Using .0 netmask works, but won't allow traffic with other hosts in the
 same subnet. (Which shouldn't be a problem for most.)

 I have not tried any of the new Strato servers, but am experimenting
 with one of 11's new AMD64 systems.
 So far, nothing that i dd to the hd will boot.
 (tried 3.9 and current floppy and cd, modified for serial-acc and also
 disabling the usual kernel-options like pcibios)

 Anyone got one of those systems to run OpenBSD?

 For those interested here's the debian-resycue-system dmesg and lspci
 output for an 11 L64 server. Perhaps someone can see unsupported
 hardware i don't.
 http://openbsd.pap.st/1und1_L64.txt

 Any advice'd be much apreciated.
 
 did anybody into the problem of device timeouts for the NIC itself? i
 tried to install OpenBSD on three or few machines at strato, none did
 the job. i also tried NetBSD, same problem. it seems to be up to a weird
 interrupt routing...
 

Which kind of servers did you try?
At Strato i had no problems with the Highend SR. That's what they
offered last year. i386/Celeron 2400 running OpenBSD without a problem.

fxp0 at pci2 dev 6 function 0 Intel 82557 rev 0x08, i82559: irq 11,
address 00:30:48:52:12:34
inphy0 at fxp0 phy 1: i82555 10/100 PHY, rev. 4
fxp1 at pci2 dev 7 function 0 Intel 82557 rev 0x08, i82559: irq 10,
address 00:30:48:52:12:35
inphy1 at fxp1 phy 1: i82555 10/100 PHY, rev. 4

-Robert



Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-11 Thread Robert
Robert wrote:
 Alexander Farber wrote:
 Do you see any kernel output at all? I believe one
 should always see at least the boot prompt -
 unless the serial speed of the console doesn't match

 Do you see the boot prompt and have you tried verbose?

 
 The machine doesn't come up. No boot prompt.
 stty is set to 57000 in the image i try to boot. same settings as the

57600 ...

 linux kernels they provide.
 I suspect that it's a hardware problem or bios setting.
 A yaifo image didn't come up either.
 
 On 5/11/06, Robert [EMAIL PROTECTED] wrote:
 Alexander Farber wrote:
h754815:afarber {103} cat /etc/hostname.fxp0
inet 81.169.186.95 255.255.255.255 NONE
!route add 81.169.186.1 -link \$if: -interface

 PS: I wonder if anyone successfully runs OpenBSD
 at Strato's SR2, MR2 or LR2 as I'd like to upgrade

 On 5/11/06, Dan Farrell [EMAIL PROTECTED] wrote:
 Geez network setups just shouldn't be that strained... I mean, what
 happened to hooking up a server with a /30 connection to the nearest
 router? Am I missing something?

 I think Strato, 11 and co introduced the .255 hack to counter sniffing.
 Using .0 netmask works, but won't allow traffic with other hosts in the
 same subnet. (Which shouldn't be a problem for most.)

 I have not tried any of the new Strato servers, but am experimenting
 with one of 11's new AMD64 systems.
 So far, nothing that i dd to the hd will boot.
 (tried 3.9 and current floppy and cd, modified for serial-acc and also
 disabling the usual kernel-options like pcibios)

 Anyone got one of those systems to run OpenBSD?

 For those interested here's the debian-resycue-system dmesg and lspci
 output for an 11 L64 server. Perhaps someone can see unsupported
 hardware i don't.
 http://openbsd.pap.st/1und1_L64.txt

 Any advice'd be much apreciated.



Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-11 Thread sebastian . rother
Comments to Strato:

I used Yaifo to install OpenBSD on STRATO.
And I used the Netmask 255.255.0.0.

I forgot to change Yaifo so I had to rename my installsets to *38.tgz. :))

Here`s a DMESG (Server is from an older offer):

OpenBSD 3.9 (GENERIC) #617: Thu Mar  2 02:26:48 MST 2006
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Celeron(R) CPU 2.40GHz (GenuineIntel 686-class) 2.40 GHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,CNXT-ID
real mem  = 534552576 (522024K)
avail mem = 480755712 (469488K)
using 4278 buffers containing 26828800 bytes (26200K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(00) BIOS, date 06/03/04, BIOS32 rev. 0 @ 0xf0010
pcibios0 at bios0: rev 2.1 @ 0xf/0x1
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf6180/192 (10 entries)
pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82801EB/ER LPC rev 0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc/0xa600 0xca800/0x1000
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 Intel 82865G/PE/P CPU-I/0-1 rev 0x02
vga1 at pci0 dev 2 function 0 Intel 82865G Video rev 0x02: aperture at
0xf000, size 0x800
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
ppb0 at pci0 dev 30 function 0 Intel 82801BA AGP rev 0xc2
pci1 at ppb0 bus 1
fxp0 at pci1 dev 8 function 0 Intel PRO/100 VE rev 0x02, i82562: irq 5,
address 00:00:aa:dd:cc:aa
inphy0 at fxp0 phy 1: i82562ET 10/100 PHY, rev. 0
ichpcib0 at pci0 dev 31 function 0 Intel 82801EB/ER LPC rev 0x02
pciide0 at pci0 dev 31 function 1 Intel 82801EB/ER IDE rev 0x02: DMA,
channel 0 configured to compatibility, channel 1 configured to
compatibility
wd0 at pciide0 channel 0 drive 0: ST380011A
wd0: 16-sector PIO, LBA48, 76319MB, 156301488 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
pciide0: channel 1 disabled (no drives)
ichiic0 at pci0 dev 31 function 3 Intel 82801EB/ER SMBus rev 0x02: irq 10
iic0 at ichiic0
unknown at iic0 addr 0x18 not configured
isa0 at ichpcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: PC speaker
spkr0 at pcppi0
lm0 at isa0 port 0x290/8: W83627THF
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
biomask ffcd netmask ffed ttymask ffef
pctr: user-level cycle counter enabled
dkcsum: wd0 matches BIOS drive 0x80
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302


Btw: If you can fuck STRATOs DNS-Failerover (I wont emntion any methods)
you can sniff even their internal Network-Traffic from the 172er LAN
(somebody told me so).
Anyway STRATO sucks and their Admins are fucke dup...

Example:
arp info overwritten for 81.169.163.106 by 00:0f:35:3b:cf:40 on fxp0
arp info overwritten for 81.169.163.106 by 00:00:5e:00:01:02 on fxp0
arp info overwritten for 81.169.163.106 by 00:0f:35:3b:cf:40 on fxp0
arp info overwritten for 81.169.163.106 by 00:00:5e:00:01:02 on fxp0
arp info overwritten for 81.169.163.106 by 00:0f:35:3b:cf:40 on fxp0
arp info overwritten for 81.169.163.106 by 00:00:5e:00:01:02 on fxp0
arp info overwritten for 81.169.163.106 by 00:0f:35:3b:cf:40 on fxp0
arp info overwritten for 81.169.163.106 by 00:0f:35:3b:cf:40 on fxp0

They can`t even configure their CISCO-Switches.
Realy just retarded morons...


Kind regards,
Sebastian



Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-11 Thread Timo Schoeler

thus Robert spake:

Timo Schoeler wrote:

thus Alexander Farber spake:

Do you see any kernel output at all? I believe one
should always see at least the boot prompt -
unless the serial speed of the console doesn't match

Do you see the boot prompt and have you tried verbose?

On 5/11/06, Robert [EMAIL PROTECTED] wrote:

Alexander Farber wrote:

   h754815:afarber {103} cat /etc/hostname.fxp0
   inet 81.169.186.95 255.255.255.255 NONE
   !route add 81.169.186.1 -link \$if: -interface

PS: I wonder if anyone successfully runs OpenBSD
at Strato's SR2, MR2 or LR2 as I'd like to upgrade

On 5/11/06, Dan Farrell [EMAIL PROTECTED] wrote:

Geez network setups just shouldn't be that strained... I mean, what
happened to hooking up a server with a /30 connection to the nearest
router? Am I missing something?



I think Strato, 11 and co introduced the .255 hack to counter sniffing.
Using .0 netmask works, but won't allow traffic with other hosts in the
same subnet. (Which shouldn't be a problem for most.)

I have not tried any of the new Strato servers, but am experimenting
with one of 11's new AMD64 systems.
So far, nothing that i dd to the hd will boot.
(tried 3.9 and current floppy and cd, modified for serial-acc and also
disabling the usual kernel-options like pcibios)

Anyone got one of those systems to run OpenBSD?

For those interested here's the debian-resycue-system dmesg and lspci
output for an 11 L64 server. Perhaps someone can see unsupported
hardware i don't.
http://openbsd.pap.st/1und1_L64.txt

Any advice'd be much apreciated.

did anybody into the problem of device timeouts for the NIC itself? i
tried to install OpenBSD on three or few machines at strato, none did
the job. i also tried NetBSD, same problem. it seems to be up to a weird
interrupt routing...



Which kind of servers did you try?
At Strato i had no problems with the Highend SR. That's what they
offered last year. i386/Celeron 2400 running OpenBSD without a problem.

fxp0 at pci2 dev 6 function 0 Intel 82557 rev 0x08, i82559: irq 11,
address 00:30:48:52:12:34
inphy0 at fxp0 phy 1: i82555 10/100 PHY, rev. 4
fxp1 at pci2 dev 7 function 0 Intel 82557 rev 0x08, i82559: irq 10,
address 00:30:48:52:12:35
inphy1 at fxp1 phy 1: i82555 10/100 PHY, rev. 4

-Robert


STRATO HighEnd-Server SR (v3.4)

tried OpenBSD 3.8 and NetBSD 3.0 and -current. no dmesg as i don't 
maintain that machine any longer. what i remember is that the MAC 
addresses were not the actual addresses of the interfaces. linux, 
however, figured them out correctly (which is the main fact i don't 
maintain them any longer ;)


--
Timo Schoeler | http://riscworks.net/~tis | [EMAIL PROTECTED]
RISCworks -- Perfection is a powerful message
ISP | POWER  PowerPC afficinados | Networking, Security, BSD services
GPG Key fingerprint = B5F6 68A4 EC45 C309 6770  38C4 50E8 2740 9E0C F20A

There are 10 types of people in the world. Those who understand binary
and those who don't.



Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-11 Thread Dan Farrell
Oh, uh, really? Had no idea 1and1 was quite large ;)

If that's what they're worried about, then they could use private
vlans...

http://www.cisco.com/en/US/tech/tk389/tk814/tk840/tsd_technology_support
_sub-protocol_home.html

http://www.riverstonenet.com/support/configdb/0026.html

Now THAT's a good thing (with ACL's of course to cover things.)

This way the client doesn't have to do anything, and they conserve
address space...

Of course, let's say the vendor offers the /30 connection for a slightly
increased rate? You think this customer would've said yes? I betcha they
would've.

Then there's the annual 'cost' of IP addressing... $2500 for a /19?
$4500 for a /16? For a company that size, I'm just not sure what the
fuss over the expense is ... that should be a drop in the bucket for
them.

So what do they get instead? Support staff tied up with this client, and
the same unhappy client trashing them on this mailing list. Good job,
1and1 !!!


Dan Farrell
Applied Innovations
[EMAIL PROTECTED]
 

-Original Message-
From: Stuart Henderson [mailto:[EMAIL PROTECTED] 
Sent: Thursday, May 11, 2006 2:59 PM
To: Dan Farrell
Cc: misc@openbsd.org
Subject: Re: FYI, 1and1 hosting fun (ip subnet zero)

On 2006/05/11 13:28, Dan Farrell wrote:
 Geez network setups just shouldn't be that strained... I mean, what
 happened to hooking up a server with a /30 connection to the nearest
 router? Am I missing something? 

These are, uh, quite large operations, and if there's a way to reduce
IP address use by 3/4 without putting a bunch of customers in the same
subnet that's probably a good thing.



Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-11 Thread Timo Schoeler

thus Robert spake:

Timo Schoeler wrote:

thus Robert spake:

Timo Schoeler wrote:

thus Alexander Farber spake:

Do you see any kernel output at all? I believe one
should always see at least the boot prompt -
unless the serial speed of the console doesn't match

Do you see the boot prompt and have you tried verbose?

On 5/11/06, Robert [EMAIL PROTECTED] wrote:

Alexander Farber wrote:

   h754815:afarber {103} cat /etc/hostname.fxp0
   inet 81.169.186.95 255.255.255.255 NONE
   !route add 81.169.186.1 -link \$if: -interface

PS: I wonder if anyone successfully runs OpenBSD
at Strato's SR2, MR2 or LR2 as I'd like to upgrade

On 5/11/06, Dan Farrell [EMAIL PROTECTED] wrote:

Geez network setups just shouldn't be that strained... I mean, what
happened to hooking up a server with a /30 connection to the nearest
router? Am I missing something?

I think Strato, 11 and co introduced the .255 hack to counter
sniffing.
Using .0 netmask works, but won't allow traffic with other hosts in
the
same subnet. (Which shouldn't be a problem for most.)

I have not tried any of the new Strato servers, but am experimenting
with one of 11's new AMD64 systems.
So far, nothing that i dd to the hd will boot.
(tried 3.9 and current floppy and cd, modified for serial-acc and also
disabling the usual kernel-options like pcibios)

Anyone got one of those systems to run OpenBSD?

For those interested here's the debian-resycue-system dmesg and lspci
output for an 11 L64 server. Perhaps someone can see unsupported
hardware i don't.
http://openbsd.pap.st/1und1_L64.txt

Any advice'd be much apreciated.

did anybody into the problem of device timeouts for the NIC itself? i
tried to install OpenBSD on three or few machines at strato, none did
the job. i also tried NetBSD, same problem. it seems to be up to a weird
interrupt routing...


Which kind of servers did you try?
At Strato i had no problems with the Highend SR. That's what they
offered last year. i386/Celeron 2400 running OpenBSD without a problem.

fxp0 at pci2 dev 6 function 0 Intel 82557 rev 0x08, i82559: irq 11,
address 00:30:48:52:12:34
inphy0 at fxp0 phy 1: i82555 10/100 PHY, rev. 4
fxp1 at pci2 dev 7 function 0 Intel 82557 rev 0x08, i82559: irq 10,
address 00:30:48:52:12:35
inphy1 at fxp1 phy 1: i82555 10/100 PHY, rev. 4

-Robert

STRATO HighEnd-Server SR (v3.4)

tried OpenBSD 3.8 and NetBSD 3.0 and -current. no dmesg as i don't
maintain that machine any longer. what i remember is that the MAC
addresses were not the actual addresses of the interfaces. linux,
however, figured them out correctly (which is the main fact i don't
maintain them any longer ;)



Oh, differnt version, had v2.6. Quite happy with it. Only the ExelStore
hd is damn slow.


IDE. puke. 'ExelStore'. wtf? i wouldn't give such hardware to my enemies. ;D


Had it running OpenBSD since 3.7. Just some plain Intel hw.

Think i'll have to write some docs if i get the new 11 running.


for the record: dmesg (Linux 2.6.11.4-20a-default i386 GNU/Linux) of the 
machine... (seems the high quality HD is not /that/ healthy...)



Thanks for your reply.


you're welcome! :)


-Robert


Linux version 2.6.11.4-20a-default ([EMAIL PROTECTED]) (gcc version 3.3.5 
20050117 (prerelease) (SUSE Linux)) #1 Wed Mar 23 21:52:37 UTC 2005

BIOS-provided physical RAM map:
 BIOS-e820:  - 000a (usable)
 BIOS-e820: 000f - 0010 (reserved)
 BIOS-e820: 0010 - 1fff (usable)
 BIOS-e820: 1fff - 1fff3000 (ACPI NVS)
 BIOS-e820: 1fff3000 - 2000 (ACPI data)
 BIOS-e820: ffb0 - 0001 (reserved)
0MB HIGHMEM available.
511MB LOWMEM available.
On node 0 totalpages: 131056
  DMA zone: 4096 pages, LIFO batch:1
  Normal zone: 126960 pages, LIFO batch:16
  HighMem zone: 0 pages, LIFO batch:1
DMI 2.3 present.
ACPI: RSDP (v000 IntelR) @ 0x000f6940
ACPI: RSDT (v001 IntelR AWRDACPI 0x42302e31 AWRD 0x) @ 0x1fff3000
ACPI: FADT (v001 IntelR AWRDACPI 0x42302e31 AWRD 0x) @ 0x1fff3040
ACPI: DSDT (v001 INTELR AWRDACPI 0x1000 MSFT 0x010e) @ 0x
ACPI: PM-Timer IO Port: 0x408
ACPI: local apic disabled
Allocating PCI resources starting at 2000 (gap: 2000:dfb0)
Built 1 zonelists
Kernel command line: root=/dev/hda3 selinux=0 console=tty0 
console=ttyS0,57600 showopts

Initializing CPU#0
PID hash table entries: 2048 (order: 11, 32768 bytes)
Detected 2400.038 MHz processor.
Using pmtmr for high-res timesource
Console: colour VGA+ 80x25
Dentry cache hash table entries: 131072 (order: 7, 524288 bytes)
Inode-cache hash table entries: 65536 (order: 6, 262144 bytes)
Memory: 514360k/524224k available (1865k kernel code, 9316k reserved, 
659k data, 204k init, 0k highmem)

Checking if this processor honours the WP bit even in supervisor mode... Ok.
Calibrating delay loop... 4751.36 BogoMIPS (lpj=2375680)
Security Framework v1.0.0 initialized
SELinux:  Disabled at boot.

Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-11 Thread Matthias Kilian
On Thu, May 11, 2006 at 08:55:20PM +0200, Robert wrote:
  I probably have a similar setup at strato.de and use Kili's trick:
[...]
 !route add 81.169.186.1 -link \$if: -interface
[...]
 Using .0 netmask works, but won't allow traffic with other hosts in the
 same subnet. (Which shouldn't be a problem for most.)

The link-level route does it. Except for *one* arpresolve message,
there's no problem, and I can reach *every* host.

Nevertheless, it's an ugly workaround. I hate it. But you get what
you pay for, and a server with serial console access for 39 EUR...

Ciao,   
Kili



Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-11 Thread Marian Hettwer
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1



Timo Schoeler wrote:

 
 
 IDE. puke. 'ExelStore'. wtf? i wouldn't give such hardware to my
 enemies. ;D
You're right with ExelStore ;)
Anyway, my server at strato is running fine for 2,5 years now. FreeBSD
5.2.1, 5.3, 6.0, 6.1 ;)
But I do have to make my mind up about backups... don't trust those
ExelStore at all..

regards,
Marian
iD8DBQFEY8HcgAq87Uq5FMsRAh87AJ0fEiJ7/7As4LWNvCmgm9iILs7QwACguGKm
lqQxTBAwqnv6dByNyvOjuFQ=
=S6+A
-END PGP SIGNATURE-



[SOLVED] Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-11 Thread Robert
Robert wrote:
 Alexander Farber wrote:
 Hello,

 I probably have a similar setup at strato.de and use Kili's trick:

h754815:afarber {103} cat /etc/hostname.fxp0
inet 81.169.186.95 255.255.255.255 NONE
!route add 81.169.186.1 -link \$if: -interface

 See the explanation at http://www.dettus.net/

 Regards
 Alex

 PS: I wonder if anyone successfully runs OpenBSD
 at Strato's SR2, MR2 or LR2 as I'd like to upgrade

 On 5/11/06, Dan Farrell [EMAIL PROTECTED] wrote:
 Geez network setups just shouldn't be that strained... I mean, what
 happened to hooking up a server with a /30 connection to the nearest
 router? Am I missing something?

 
 I think Strato, 11 and co introduced the .255 hack to counter sniffing.
 Using .0 netmask works, but won't allow traffic with other hosts in the
 same subnet. (Which shouldn't be a problem for most.)
 
 I have not tried any of the new Strato servers, but am experimenting
 with one of 11's new AMD64 systems.
 So far, nothing that i dd to the hd will boot.
 (tried 3.9 and current floppy and cd, modified for serial-acc and also
 disabling the usual kernel-options like pcibios)
 
 Anyone got one of those systems to run OpenBSD?
 
 For those interested here's the debian-resycue-system dmesg and lspci
 output for an 11 L64 server. Perhaps someone can see unsupported
 hardware i don't.
 http://openbsd.pap.st/1und1_L64.txt
 
 Any advice'd be much apreciated.
 
 
 -Robert
 
 

Thanks everyone!

Got OpenBSD 3.9 running on one of the new 11 L64 dedicated servers.
(It's the german offer. Was told, that 11 shows diffrent products
depending on your location.)

Here's how:
- on a 3.9 system get the yaifo src
http://openbsd-geek.de/projects/yaifo/wiki/BuildingInstaller
- before compiling edit yaifo-0.2/config
  - DHCP=off
  - enter your ip and nameserver (one from a diffent subnet than your
server. see below)
  - SPECIAL=1 (Alturo is/was a reseller of old 11 servers. netmask-hack)
- edit yaifo-0.2/install.sub
  - VERSION=39
- you can follow the instructions on the yaifo page from here on

Had a problem with the nameresolution while installing. ctrl+z and an
echo to /etc/hosts helped.

I do not realy know why serial didn't work for me in my images. After
the yaifo install and a reboot later the serial console works. 'll have
to check that one out.

Now the up to -stable.

-Robert


PS: Yes, i installed i386 intentionally on an Athlon64 system.

btw:

OpenBSD 3.9 (GENERIC) #617: Thu Mar  2 02:26:48 MST 2006
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: AMD Athlon(tm) 64 Processor 3200+ (AuthenticAMD 686-class, 512KB
L2 cache) 2 GHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,SSE3
cpu0: AMD Powernow: TS FID VID TTP TM STC
cpu0: AMD Cool`n'Quiet K8 available states (38600,69400,77100)
real mem  = 1038589952 (1014248K)
avail mem = 940888064 (918836K)
using 4278 buffers containing 52031488 bytes (50812K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(39) BIOS, date 01/02/06, BIOS32 rev. 0 @ 0xfd780
pcibios0 at bios0: rev 2.1 @ 0xfd780/0x880
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdf10/208 (11 entries)
pcibios0: PCI Interrupt Router at 000:02:0 (SiS 85C503 System rev 0x00)
pcibios0: PCI bus #3 is the last bus
bios0: ROM list: 0xc/0xc000 0xcc000/0x1000 0xe2800/0x1400!
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 SiS 761 PCI rev 0x01
ppb0 at pci0 dev 1 function 0 SiS 86C202 VGA rev 0x00
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 SiS 6330 VGA rev 0x03: aperture at
0xf000, size 0x40
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
pcib0 at pci0 dev 2 function 0 SiS 965 ISA rev 0x48
pciide0 at pci0 dev 2 function 5 SiS 5513 EIDE rev 0x01: 5597/5598:
DMA, channel 0 configured to compatibility, channel 1 configured to
compatibility
pciide0: channel 0 disabled (no drives)
stray interrupt 14
pciide0: channel 1 disabled (no drives)
stray interrupt 15
auich0 at pci0 dev 2 function 7 SiS 7012 AC97 rev 0xa0: irq 9, SiS7012
AC97
auich0: reset failed!
ohci0 at pci0 dev 3 function 0 SiS 5597/5598 USB rev 0x0f: irq 9,
version 1.0, legacy support
usb0 at ohci0: USB revision 1.0
uhub0 at usb0
uhub0: SiS OHCI root hub, rev 1.00/1.00, addr 1
uhub0: 3 ports with 3 removable, self powered
ohci1 at pci0 dev 3 function 1 SiS 5597/5598 USB rev 0x0f: irq 11,
version 1.0, legacy support
usb1 at ohci1: USB revision 1.0
uhub1 at usb1
uhub1: SiS OHCI root hub, rev 1.00/1.00, addr 1
uhub1: 3 ports with 3 removable, self powered
ohci2 at pci0 dev 3 function 2 SiS 5597/5598 USB rev 0x0f: irq 10,
version 1.0, legacy support
usb2 at ohci2: USB revision 1.0
uhub2 at usb2
uhub2: SiS OHCI root hub, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
ehci0 at pci0 dev 3 function 3 SiS 7002 USB rev 0x00: irq 5
ehci0: timed out waiting for BIOS
usb3 at ehci0: USB revision 2.0
uhub3 at 

Re: FYI, 1and1 hosting fun (ip subnet zero)

2006-05-11 Thread Lars Hansson
On Friday 12 May 2006 02:58, Stuart Henderson wrote:
 These are, uh, quite large operations, and if there's a way to reduce
 IP address use by 3/4 without putting a bunch of customers in the same
 subnet that's probably a good thing.

Wouldnt that be what VLAN's are for?

---
Lars Hansson