Re: pf block IP range

2007-05-26 Thread James Mackinnon
yes block out quick on $external from any to 123.123.100.0/24 for example. Of course, the / equiv will need to be that of the size of the segment you are blocking on Enjoy - Original Message - From: "Jim M" <[EMAIL PROTECTED]> To: Sent: Saturday, May 26, 2007 7:54 PM Subject: pf bl

Re: ftp-proxy, pf and single machine network

2007-05-26 Thread Stuart Henderson
> I have a problem getting my ftp client to work through a pf firewall. I > have a local machine (quark) with only one interface (fxp0) which > connects to the internet through a > router. PF is running on quark with a very simple set of rules (see > below). I tried to follow the FAQ and the ftp-pr

Re: pf block IP range

2007-05-26 Thread Jeroen Massar
Jim M wrote: > I know I can block an outgoing IP address such as > > block out quick on $external from any to 123.123.123.123 > > But can you also block a range of IP addresses? Such as > > block out quick on $external from any to 123.123.100.0-123.123.200.255 Yes, but one writes this in CIDR sty

i386: ath: HAL status 22

2007-05-26 Thread vladas
Hi all, CardBus adapter, Corega CG-WLCB54GS, on i386 #176: ath0 at cardbus1 dev 0 function 0: irq 9 ar5k_ar5212_nic_wakeup: failed to resume the AR5212 (again) ath0: unable to attach hardware; HAL status 22 http://www.openbsd.org/plus41.html says "Disable 802.11g mode on AR5211 and 5212 based d

ftp-proxy, pf and single machine network

2007-05-26 Thread Loïc Séguin-Charbonneau
Hi, I have a problem getting my ftp client to work through a pf firewall. I have a local machine (quark) with only one interface (fxp0) which connects to the internet through a router. PF is running on quark with a very simple set of rules (see below). I tried to follow the FAQ and the ftp-proxy m

pf block IP range

2007-05-26 Thread Jim M
I know I can block an outgoing IP address such as block out quick on $external from any to 123.123.123.123 But can you also block a range of IP addresses? Such as block out quick on $external from any to 123.123.100.0-123.123.200.255 Thanks, Jim

Re: [Fwd: Re: update: net/tor [OT: [EMAIL PROTECTED] not working]]

2007-05-26 Thread Rui Reis
hmm, weird, I've been using my mail without any problem. just use [EMAIL PROTECTED] if you want. Regards, rui On Sat, May 26, 2007 at 11:10:22PM +0100, OpenBSD - Wire Consulting wrote: > > > Original Message > Subject: Re: update: net/tor [OT: [EMAIL PROTECTED] not work

Re: update: net/tor [OT: [EMAIL PROTECTED] not working]

2007-05-26 Thread Michael
@rui I've just got a failure notice when sending to [EMAIL PROTECTED]: The following message to <[EMAIL PROTECTED]> was undeliverable. The reason for the problem: 5.1.0 - Unknown address error 554-'5.1.0 Sender Denied' Final-Recipient: rfc822;[EMAIL PROTECTED] Action: failed Status: 5.0.0 (per

openldap -- syncrepl and dynamic backend modules

2007-05-26 Thread Vijay Sankar
I have been using the openldap (openldap-server-2.3.33p1-bdb) from ports and it works great when I use slurpd for replication. I would like to use syncrepl instead of slurpd, just to see what the benefits are. However I don't know how to enable the dynamic backend modules since they are not in

Re: panic: ffs_alloccg: map corrupted - SCSI parity errors

2007-05-26 Thread Kenneth R Westerback
On Sat, May 26, 2007 at 12:51:09PM +0100, Steve Fairhead wrote: > Hi folks, > > One of the servers (running 4.0, generic, fully patched) I'm responsible for > has had a panic (see title line). I'll confess right away that I wasn't able > to run trace or ps; I was away from the machine at the time

to russian OpenBSD fans who wants official 4.1 CDs

2007-05-26 Thread Anton Karpov
I've got package* from Wim recently, with 4.1 CDs and stickers, for russian obsd fans who ordered it via me on some russian opensource forums. But there are some extra CDs (3-4 I think) which I can redistribute. So if you are living in Moscow or Saint-Petersburg, I can give it to you directly. If y

Re: Keys lots in Xenocara update ?

2007-05-26 Thread Antoine Jacoutot
On Sat, 26 May 2007, Matthieu Herrb wrote: Section "InputDevice" Identifier "Keyboard0" Driver "kbd" Option "Protocol" "wskbd" Option "Device" "/dev/wskbd0" #"/dev/wskbd1" Option "XkbModel" "dell"#"pc105" Option "XkbRules" "xorg"

Re: Keys lots in Xenocara update ?

2007-05-26 Thread Matthieu Herrb
On 5/26/07, Landry Breuil <[EMAIL PROTECTED]> wrote: Hello, i lost various keys in last Xenocara update (i had the same issue when updating to snapshot with *41.tgz from 22/5 + x*41.tgz from 8/5 and to latest snapshot from ftp.ca, *41.tgz from 25/5 + x*41.tgz from 24/5). i removed /etc/X11 and /

panic: ffs_alloccg: map corrupted - SCSI parity errors

2007-05-26 Thread Steve Fairhead
Hi folks, One of the servers (running 4.0, generic, fully patched) I'm responsible for has had a panic (see title line). I'll confess right away that I wasn't able to run trace or ps; I was away from the machine at the time and had to guide a colleague by phone through restarting the machine in a

complex packet filter setup

2007-05-26 Thread [EMAIL PROTECTED]
hi list, i've a complex packet filter setup on a 4.0 box. +--+ ++ |Switch| |OBSD4.0 | pc 1 --|vlan1 | || 192.168.1.2/24 | | | +---+ | | |Trunk|vlan1-| | | pc 2

Keys lots in Xenocara update ?

2007-05-26 Thread Landry Breuil
Hello, i lost various keys in last Xenocara update (i had the same issue when updating to snapshot with *41.tgz from 22/5 + x*41.tgz from 8/5 and to latest snapshot from ftp.ca, *41.tgz from 25/5 + x*41.tgz from 24/5). i removed /etc/X11 and /usr/X11R6 before update, and unrolled xetc41.tgz. to g

Re: mergemaster users, check login.conf

2007-05-26 Thread Tobias Ulmer
On Wed, May 23, 2007 at 06:31:31PM +, Christian Weisgerber wrote: > People who use ports/sysutils/mergemaster to update /etc might want > to manually check their /etc/login.conf: > > # cd /usr/src/etc > # make DESTDIR=/var/tmp/temproot distribution-etc-root-var > # diff -u /etc/login.conf /var

Re: PFSYNC

2007-05-26 Thread Ryan McBride
On Sat, May 26, 2007 at 09:36:48AM +0200, Alberich de megres wrote: > I know i repeat myself, but that's important for me: my pf isn't syncing > tables i create. Can I solve this? Write a tool that synchronises your tables. The pfsync protocol as it stands is not an appropriate protocol for synch

PFSYNC

2007-05-26 Thread Alberich de megres
Hi, I know i repeat myself, but that's important for me: my pf isn't syncing tables i create. Can I solve this? Thanks