Re: Blocking web content

2007-04-18 Thread Siju George
On 4/18/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: I run an openbsd firewall. I want to block certain sites either by IP address or by domain name. How do I get more information on how to set this up? I use Squid Cache proxy because you can Block by URLs URL regular expression, users ,

Re: layer 2 pf question

2007-04-18 Thread Siju George
On 4/18/07, poncenby <[EMAIL PROTECTED]> wrote: Dear list, What do openbsd users do when they need to filter/redirect traffic based on layer 2 addresses? I'm using 4.0 generic on a 386. http://www.openbsd.org/faq/faq6.html#Bridge for MAC address filtering using PF. http://bio3d.colorado.ed

Re: OpenBSD/alpha Status

2007-04-18 Thread Henning Brauer
* Bryan Vyhmeister <[EMAIL PROTECTED]> [2007-04-17 19:55]: > On Apr 17, 2007, at 10:19 AM, Henning Brauer wrote: > > >* Bryan Vyhmeister <[EMAIL PROTECTED]> [2007-04-17 18:29]: > >>This doesn't sound so promising. I guess the basic idea is that I > >>need to hope that any CS20 machines I get are n

Re: OpenBSD/alpha Status

2007-04-18 Thread Bryan Vyhmeister
On Apr 18, 2007, at 12:53 AM, Henning Brauer wrote: * Bryan Vyhmeister <[EMAIL PROTECTED]> [2007-04-17 19:55]: Do you use any Alpha machines in production? not any more, and i would not quite recommend doing so, to be honest Did you stop using them for performance and age reasons or more fo

Webservers with Terrabytes of Data in - recomended setups

2007-04-18 Thread Siju George
Hi, How Do you handle when you have to Serve terrabytes of Data through http/https/ftp etc? Put it on Differrent machines and use some knid of loadbalancer/intelligent program that directs to the right mahine? use some kind of clustering Software? Waht hardware do you use to make your System Sc

Re: 8-Bit RISC Microcontroller Programming

2007-04-18 Thread Alexandre Ratchov
On Tue, Apr 17, 2007 at 04:20:22AM -0700, Clint Pachl wrote: > What options are available for programming 8-bit microcontrollers? I > found gputils for Microchip and avr for Amtel in the ports. What is the > most supported option? > > gputils in ports is a three year old version; does it work we

Re: Blocking web content

2007-04-18 Thread Soner Tari
On Tue, 2007-04-17 at 17:34 -0700, [EMAIL PROTECTED] wrote: > I run an openbsd firewall. I want to block certain sites either by IP > address or by domain name. How do I get more information on how to set > this up? DansGuardian: http://dansguardian.org/

Re: Blocking web content

2007-04-18 Thread Reyk Floeter
On Tue, Apr 17, 2007 at 05:34:48PM -0700, [EMAIL PROTECTED] wrote: > I run an openbsd firewall. I want to block certain sites either by IP > address or by domain name. How do I get more information on how to set > this up? > > Thanks in advance. > you can also use the hoststated relay from -cu

Re: Webservers with Terrabytes of Data in - recomended setups

2007-04-18 Thread Jacob Yocom-Piatt
Siju George wrote: > Hi, > > How Do you handle when you have to Serve terrabytes of Data through > http/https/ftp etc? > Put it on Differrent machines and use some knid of > loadbalancer/intelligent program that directs to the right mahine? > > use some kind of clustering Software? > > Waht hardwar

Re: OpenBSD/alpha Status

2007-04-18 Thread Henning Brauer
* Bryan Vyhmeister <[EMAIL PROTECTED]> [2007-04-18 10:29]: > On Apr 18, 2007, at 12:53 AM, Henning Brauer wrote: > > >* Bryan Vyhmeister <[EMAIL PROTECTED]> [2007-04-17 19:55]: > >>Do you use any Alpha machines in production? > > > >not any more, and i would not quite recommend doing so, to be hon

Re: Blocking web content

2007-04-18 Thread Matt Bettinger
On 4/18/07, Reyk Floeter <[EMAIL PROTECTED]> wrote: On Tue, Apr 17, 2007 at 05:34:48PM -0700, [EMAIL PROTECTED] wrote: > I run an openbsd firewall. I want to block certain sites either by IP > address or by domain name. How do I get more information on how to set > this up? > > Thanks in advanc

Les meilleurs tarifs pour vos telecom ...

2007-04-18 Thread Recevez vos devis
Ce message est au format HTML. Si vous ne parvenez pas ` le lire, cliquez ici. [IMAGE] GESTION D'ENTREPRISE MARKETING ET COMMUNICATION NOUVELLES TECHNOLOGIES GESTION DU PERSONNEL LOGISTIQUE ET EQUIPEMENT VEHICULES ET UTILITAIRES BOUTIQUE EN LIGNE [IMAGE] --

Back again with funny network interfaces

2007-04-18 Thread Manuel Ravasio
Hello list. Maybe you remember I'm trying to build a firewall/proxy/DNS server/DHCP server/access point using an old Toshiba laptop and 3 network interfaces. A friend of mine gave me a pcmcia card with no recognizable brand/model on it. I plugged it in and OpenBSD told me it's a Realtek 8139 card

Re: OpenBSD/alpha Status

2007-04-18 Thread Bryan Vyhmeister
On Apr 18, 2007, at 5:52 AM, Henning Brauer wrote: * Bryan Vyhmeister <[EMAIL PROTECTED]> [2007-04-18 10:29]: Did you stop using them for performance and age reasons or more for stability and reliability especially as it is related to The Alpha Bug? production use was an old AXPpci w/ 21064

Re: Static Ip's: Routing and Fowarding

2007-04-18 Thread Bryan Vyhmeister
On Apr 18, 2007, at 8:42 AM, Bray Mailloux wrote: Bryan Vyhmeister wrote: and post the output of both. pfctl -sn ---> nat on rl0 inet from 192.168.0.0/24 to any -> (rl0) round-robin pfctl -sr ---> scrub in all fragment reassemble pass out all keep state

Re: Blocking web content

2007-04-18 Thread 666a
Nick Holland <[EMAIL PROTECTED]> wrote: >I'm very fond of DNS blocking: > http://www.holland-consulting.net/tech/imblock.html >simple effective, in spite of theoretical shortcomings... I found this to be effective too, but... I used it to block internet radio sites at my former company. The u

Re: Static Ip's: Routing and Fowarding

2007-04-18 Thread Bryan Vyhmeister
On Apr 18, 2007, at 10:01 AM, BradenM - Sonoma Computer wrote: Yes, ip fowarding is enabled in the sysctl.conf file. I did have an alias on rl0 but removed it to try and simplify my nat process. I've heard the term binat thrown around, could that possibly aid my project? No, binat is not

Re: Back again with funny network interfaces

2007-04-18 Thread Dustin Lundquist
Manuel Ravasio wrote: A friend of mine gave me a pcmcia card with no recognizable brand/model on it. I plugged it in and OpenBSD told me it's a Realtek 8139 card, and called it "rl0". I can use the card, but apparently it works at 10Mbps instead of 100. I tried to force the card's speed and duple

Re: It is coming to a mailbox near you

2007-04-18 Thread Alex Lee
Sighting of BSD 4.1 in the U.S. +++ USPS tracking number 0305083131xx assigned to a shipment as follows: BSD41.0015 Computer Shop/OpenBSD Box 28 Sweet Grass, MT 59484

Re: Recommendation for a UPS

2007-04-18 Thread Michael Scheliga
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Dave > Sent: Tuesday, April 17, 2007 8:52 AM > To: [EMAIL PROTECTED] Org > Subject: Re: Recommendation for a UPS > > what is the nut list > - Original Message - > From: "bofh" <[EMAIL PROTECTED]>

Gestion de la paie, formation, recrutement, interim ...

2007-04-18 Thread Recevez vos devis
Ce message est au format HTML. Si vous ne parvenez pas ` le lire, cliquez ici. [IMAGE] GESTION D'ENTREPRISE MARKETING ET COMMUNICATION NOUVELLES TECHNOLOGIES GESTION DU PERSONNEL LOGISTIQUE ET EQUIPEMENT VEHICULES ET UTILITAIRES BOUTIQUE EN LIGNE [IMAGE] [IMAGE] Formation de votre iquipe

Re: Loading a Second Kernel

2007-04-18 Thread Rodrigo V. Raimundo
use grub and make a script to edit its "default N" config line you can mount your ext2 partition from gentoo on openbsd and edit /boot/grub/menu.lst this way you can make an script to reboot into openbsd or reboot into gentoo it can be useful for systems controlled through ssh Jon Steel wrote:

Re: Blocking web content

2007-04-18 Thread Nick Ryan
I second using PF and transparent squid. It works extremely well and is pretty much foolproof. This is what I use at work and it's blocking sites by domain name, regex matching, flash videos, mp3 sites and also limiting filetype downloads. The interesting bit of squid.conf is here: acl a

Re: Blocking web content

2007-04-18 Thread Siju George
On 4/19/07, Nick Ryan <[EMAIL PROTECTED]> wrote: acl blockfiles urlpath_regex \.flv(\?.*)?$ \.mp3(\?.*)?$ \.wmv(\?.*)? $ \.avi(\?.*)?$ \.mov(\?.*)?$ \.zip(\?.*)?$ \.exe(\?.*)?$ \.cab(\?.*)? $ \.vbs(\?.*)?$ http_access deny blockfiles !adminpc1 !adminpc2 !adminwsus acl adregex dstdom_regex -i (^)

Re: Blocking web content

2007-04-18 Thread Steve Shockley
[EMAIL PROTECTED] wrote: I run an openbsd firewall. I want to block certain sites either by IP address or by domain name. How do I get more information on how to set this up? The article is old (I think it was written for 3.1 or 3.2) but I did the same thing using Squid: http://shockley.ne

Re: Recommendation for a UPS

2007-04-18 Thread Daniel A. Ramaley
NUT = Network UPS Tools http://www.networkupstools.org/ Check the compatibility list. Even better, check the compatibility list for the version that is available in an OpenBSD package. The list will be in /usr/local/share/ups/driver.list after the package is installed. On Tuesday 17 April 2007 1

Re: Blocking web content

2007-04-18 Thread Tom Hayko
Matt Bettinger wrote: On 4/18/07, Reyk Floeter <[EMAIL PROTECTED]> wrote: On Tue, Apr 17, 2007 at 05:34:48PM -0700, [EMAIL PROTECTED] wrote: > I run an openbsd firewall. I want to block certain sites either by IP > address or by domain name. How do I get more information on how to set > this

PF, CARP, PFsync and multiple default routes

2007-04-18 Thread Gilles Chehade
Hi misc@, I am trying to setup a set of "carp"-ed firewalls as follow: ISP 1 ISP 2 | | \ / _ SWITCH # 1 _ / || \ / || \ bge

Re: Static Ip's: Routing and Fowarding

2007-04-18 Thread Bryan Vyhmeister
On Apr 18, 2007, at 12:59 PM, BradenM - Sonoma Computer wrote: I just read an article on dhcp-dns which updates the tinydns data file each time a new computer comes online using dynamic host control. I do plan on having my own in house DNS server but it currently is not implemented. Could t

Re: PF, CARP, PFsync and multiple default routes

2007-04-18 Thread Joel Knight
--- Quoting Gilles Chehade on 2007/04/18 at 22:23 +0200: > Hi misc@, > > I am trying to setup a set of "carp"-ed firewalls as follow: > > > > ISP 1 ISP 2 > | | >\ / > _ SWITCH # 1 _ >

ahci & intel sata

2007-04-18 Thread giovanni
hello, sorry for the question but I would like to understand a bit more I've added PCI_PRODUCT_INTEL_82801GBM_SATA (product code 0x27c4) to the ahci_devices list because I've (wrongly?) read somewhere that Intel 82801GBM was ahci compliant. Indeed at boot I've: ahci0 at pci0 dev 31 function 2 "

Routing all traffic to PPTP VPN tunnel

2007-04-18 Thread Loïc Séguin-Charbonneau
Hi, I am fairly new to OpenBSD and I am struggling to be able to connect to my university's network. I need to establish a VPN connection using the PPTP protocol. I installed the pptp package, rebuilt my kernel without gre support (as indicated in the pptp man page), and wrote a configuration file

Re: Routing all traffic to PPTP VPN tunnel

2007-04-18 Thread Adam Hawes
> My computer is connected to internet through a router whose internal > address is 192.168.1.1. > > Here is some interesting stuff after the vpn as been brought up: > > ifconfig tun0 > tun0: flags=8011 mtu 1500 > groups: tun > inet 132.204.232.32 --> 132.204.2.20 netmask 0x

Automatic boot of i386 occassionally fails; manually boots OK

2007-04-18 Thread Damon McMahon
Greetings, This is quite strange: very occassionally (perhaps a rate of 1 in 25 occasions or so?) automatic booting 3.9/i386 fails, but manually booting via the console works. Below is the console output and other potentially relevant information - is this faulty hardware (I suspect it is given t

Re: Distributed File System

2007-04-18 Thread Almir Karic
considered nfs over kerberos? On 4/17/07, Pete Vickers <[EMAIL PROTECTED]> wrote: try web DAV - works a treat for me on OpenBSD with linux, Mac & windows clients... /pete On 17 Apr 2007, at 2:28 AM, Rico Secada wrote: > Hi all. > > At work I am experiencing with setting up some distributed

Re: Automatic boot of i386 occassionally fails; manually boots OK

2007-04-18 Thread Nick Holland
Damon McMahon wrote: > Greetings, > > This is quite strange: very occassionally (perhaps a rate of 1 in 25 > occasions or so?) automatic booting 3.9/i386 fails, but manually > booting via the console works. Below is the console output and other > potentially relevant information - is this faulty h

Re: Automatic boot of i386 occassionally fails; manually boots OK

2007-04-18 Thread Damon McMahon
On 19/04/07, Nick Holland <[EMAIL PROTECTED]> wrote: Damon McMahon wrote: > Greetings, > > This is quite strange: very occassionally (perhaps a rate of 1 in 25 > occasions or so?) automatic booting 3.9/i386 fails, but manually > booting via the console works. Below is the console output and other

X Window System crash

2007-04-18 Thread Karel Kulhavy
Looks like X Windows have some race condition or maybe it's in the kernel? I've been running spamassassin learning which loaded the system. Then I started X Windows System with "startx". During normal startup, a screen of garbage flashes and is replaced with black screen and then with X background