Re: replacement pix firewall with pf

2008-05-11 Thread sonjaya
i want make NAT from ip public to server inside ( with non Ip public )/dmz without make ip alias. replacement PIX Fw cisco with PF in openbsd the main point . On Mon, May 12, 2008 at 12:35 PM, Almir Karic <[EMAIL PROTECTED]> wrote: > On Mon, May 12, 2008 at 6:40 AM, sonjaya <[EMAIL PROTECTED]

Re: replacement pix firewall with pf

2008-05-11 Thread Almir Karic
On Mon, May 12, 2008 at 6:40 AM, sonjaya <[EMAIL PROTECTED]> wrote: > so i have some question : > - In PIX FW cisco i just make translate ipublic to ip dmz , so how do > it in pf without ip alias in wan interface? AFAIK you can't. why would you want to do that? -- For far too long, power has b

Re: replacement pix firewall with pf

2008-05-11 Thread sonjaya
i try using binat : ### interface ## ## wan interface ( ip public-01 )## ext_if="fxp0" LAN Interface ( 192.168.0.0/24) prv_if="fxp1" DMZ Interface ( 192.168.2.0/24) dmz_if="xl0" ip public & LAN ## ext_ad01="ipublic-01" ext_ad02="ipublic-02" prv_ad="192.168.1

Re: Screen,colorls,xterms issue. 4.2

2008-05-11 Thread Denny White
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Quoted from Jesus Sanchez on Sun, May 11, 2008 at 03:59:17AM +0200,: > Stuart Henderson escribis: > >On 2008-05-10, Jesus Sanchez <[EMAIL PROTECTED]> wrote: > > > >>I have set an alias for ls='colorls -GF' (color output) and this causes > >>the pro

Re: Old EmBSD docs

2008-05-11 Thread Nick Holland
Jason George wrote: >>Sometime ago I had run EmBSD on a little P100 and it served me nicely. Since >>its disappearance from the landscape I've been using a stock OpenBSD install >>on my home machine. However, I recently acquired a nice little Jetway board >>with a PicoPSU and the idea of running Em

Re: Old EmBSD docs

2008-05-11 Thread Jason George
>Sometime ago I had run EmBSD on a little P100 and it served me nicely. Since >its disappearance from the landscape I've been using a stock OpenBSD install >on my home machine. However, I recently acquired a nice little Jetway board >with a PicoPSU and the idea of running EmBSD came to mind again.

Error in fdisk(8) documentation

2008-05-11 Thread Adam Patterson
In the fdisk(8) manpage you will see the following table. #: idC H S -C H S [ start: size ] - 0: 040 1 1 - 170 0 63 [ 63: 2570462 ] DOS FAT-16 1: 000 0 0 -0 0 0

Old EmBSD docs

2008-05-11 Thread Steve B
Sometime ago I had run EmBSD on a little P100 and it served me nicely. Since its disappearance from the landscape I've been using a stock OpenBSD install on my home machine. However, I recently acquired a nice little Jetway board with a PicoPSU and the idea of running EmBSD came to mind again. Woul

Re: Spamd table

2008-05-11 Thread Pui Edylie
Hi, Those IP addresses in table are loaded when i ran the spamd-setup command which has ua and nixspam enabled only. Now i am worried because it is loading spammer IP addresses into the would be legitimate table When i look at it is still as empty as ever. ta -e Girish Venkatachalam wr

Re: Spamd table

2008-05-11 Thread Girish Venkatachalam
On 23:45:06 May 11, Pui Edylie wrote: > Hi > > When i ran pfctl -t spamd-white -T show it shows a list of IP addresses and > those IP addresses are mostly from China and etc ... (IE spamming > countries) > > I have enabled syslog logging with -v from the log file when tailing it, i > did not see

Re: PF Congestion and state table question

2008-05-11 Thread Henning Brauer
* Steve Johnson <[EMAIL PROTECTED]> [2008-05-11 19:08]: > Henning Brauer wrote: >> >> congestion in what sense? the congestion counter increasing? this isnot >> necessarily a problem, it just must not grow fast. andof course you want >> to bump your ipintrq length. >> > Yes, the congestion cou

Re: Can't build 4.3-stable binaries: don't know how to make mkmakefile.c

2008-05-11 Thread Michael
On Sun, May 11, 2008 at 05:32:37PM -0400, Steven Surdock wrote: > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > .. > > While rebuilding the binaries for 4.3-stable, I get this error: > > > > ===> usr.sbin/config > > make: don't know how to make mk

Re: Can't build 4.3-stable binaries: don't know how to make mkmakefile.c

2008-05-11 Thread Steven Surdock
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of .. > While rebuilding the binaries for 4.3-stable, I get this error: > > ===> usr.sbin/config > make: don't know how to make mkmakefile.c. Stop in /usr/src/usr.sbin/config. > *** Error code 2 Same here.

Spamd table

2008-05-11 Thread Pui Edylie
Hi When i ran pfctl -t spamd-white -T show it shows a list of IP addresses and those IP addresses are mostly from China and etc ... (IE spamming countries) I have enabled syslog logging with -v from the log file when tailing it, i did not see any (WHITE) entry only (GREY) and (BLACK) I am

Re: PF Congestion and state table question

2008-05-11 Thread Steve Johnson
Henning Brauer wrote: congestion in what sense? the congestion counter increasing? this isnot necessarily a problem, it just must not grow fast. andof course you want to bump your ipintrq length. Yes, the congestion counter is what I meant. It's increasing at around 7/s when the traffic we

Re: geom network driver times out on sparc 4.2?

2008-05-11 Thread Sevan / Venture37
Are you running the latest version of OBP on the system? _ All new Live Search at Live.com http://clk.atdmt.com/UKM/go/msnnkmgl001006ukm/direct/01/

Can't build 4.3-stable binaries: don't know how to make mkmakefile.c

2008-05-11 Thread Andrés
While rebuilding the binaries for 4.3-stable, I get this error: ===> usr.sbin/config make: don't know how to make mkmakefile.c. Stop in /usr/src/usr.sbin/config. *** Error code 2 Stop in /usr/src/usr.sbin (line 48 of /usr/share/mk/bsd.subdir.mk). *** Error code 1 Stop in /usr/src (line 48 of /us

geom network driver times out on sparc 4.2?

2008-05-11 Thread Jay
ANECDOTALLY, network driver geom times out under moderate steady load on a Sun Blade 150 within an hour of use. (as in network stops working, everything else is ok, and dmesg says "geom0: device timeout" about every 30 seconds; and reboot fixes it) Haven't seen the problem yet under Linux. Have se

Re: [4.3]: ThinkPad X61s cannot boot i386 or amd64 ISO's with AHCI

2008-05-11 Thread Brad Walker
Off list someone advised me that r1.62 of src/sys/dev/ata/atascsi.c might have fixed this. I built an i386 RAMDISK_CD kernel from freshly updated CVS HEAD with that updated file and recreated cd43.iso with the new bsd.rd. The problem persisted on the new boot cd. I've attached a console log obtaine

Re: ath freezes system

2008-05-11 Thread Richard Daemon
On Sun, May 11, 2008 at 11:24 AM, comfooc <[EMAIL PROTECTED]> wrote: > Hi, > I'm using OpenBSD-current and I have Atheros AR2413 MiniPCI card. > If I use twice command: "ifconfig -M athN" system freeze-up (only hard > reboot helps). > > Cheers. > > pcidump: > 0:12:0: Atheros AR2413 >

Re: WPA in -current

2008-05-11 Thread Jonathan
On Sun, May 11, 2008 at 5:28 AM, Paul de Weerd <[EMAIL PROTECTED]> wrote: > Just yesterday I tried setting up a WPA access point (with rum(4)) and > my ifconfig output looks stunningly similar. There's two things > though... Are you sure you're not running a non-GENERIC kernel ? > Either you are, o

gem0 device timeout

2008-05-11 Thread Markus Lude
Hello, when I tried to send a mail today I get gem0: device timeout This happens on every try to send that special mail. Sending other mails works well. I send mails from mutt with the msmtp port. The machine is running the sparc64 snapshot from May 2nd (dmesg below). Any hints what is going o

Re: mac filter for host ap mode?

2008-05-11 Thread Jonathan
On Sun, May 11, 2008 at 7:28 AM, Didier Wiroth <[EMAIL PROTECTED]> wrote: > hello, > I'm using a ral wireless interface in host ap with wpa: > $ ifconfig ral0 > ral0: flags=8843 mtu 1500 >lladdr 00: >groups: wlan >media: IEEE802.11 autoselect mode 11g hostap >status:

ath freezes system

2008-05-11 Thread comfooc
Hi, I'm using OpenBSD-current and I have Atheros AR2413 MiniPCI card. If I use twice command: "ifconfig -M athN" system freeze-up (only hard reboot helps). Cheers. pcidump: 0:12:0: Atheros AR2413 0x: 001a168c 02900016 0201 5008 0x0010: fc01 00

ACPI issue

2008-05-11 Thread Cesare Gargano
Hi all. I'm playing with acpi to get it working on my T23 thinkpad. Thermal zone and battery status are working ok. But when I play with hotkey buttons, open/close lid, unplug AC cable, nothing happens. After reading acpi.c I've noted that this line is not correct for me (from [EMAIL PROTECTED]):

Re: Screen,colorls,xterms issue. 4.2

2008-05-11 Thread Marc Espie
On Sun, May 11, 2008 at 07:45:06AM +0200, Jesus Sanchez wrote: > Girish Venkatachalam escribis: >> On 22:20:18 May 10, Jesus Sanchez wrote: >> >>> Hi, I'm using OpenBSD 4.2, a clean install. >>> >>> I have experienced some problems using screen and X with colorsls. The >>> issue is that when I l

mac filter for host ap mode?

2008-05-11 Thread Didier Wiroth
hello, I'm using a ral wireless interface in host ap with wpa: $ ifconfig ral0 ral0: flags=8843 mtu 1500 lladdr 00: groups: wlan media: IEEE802.11 autoselect mode 11g hostap status: active ieee80211: nwid wifi2 chan 2 bssid 00:12:0e:61:80:6c wpapsk wpaprotos

Re: WPA in -current

2008-05-11 Thread Paul de Weerd
Just yesterday I tried setting up a WPA access point (with rum(4)) and my ifconfig output looks stunningly similar. There's two things though... Are you sure you're not running a non-GENERIC kernel ? Either you are, or you're not showing us the full ifconfig output since the link local address for

Re: Screen,colorls,xterms issue. 4.2

2008-05-11 Thread Girish Venkatachalam
On 07:45:06 May 11, Jesus Sanchez wrote: > I tried to set the TERM variable to rxvt value "export TERM=rxvt" > on the /etc/profile and I have problems with the virtual terminals now. > (the ones invoked by Ctrl+Alt+F1 to F4). I get weird color > when doing colorls -G in screen session, so your solu