Re: OpenBSD + isakmpd + VPN concentrator 3060

2008-09-26 Thread Mariusz Makowski
I finally was able to setup vpn connection. Other side was configured in wrong way and sum of all my ipsec.conf look in this way: -- ipsec.conf -- other_peer = c.c.c.c_public_ip ike esp tunnel from a.a.a.a_net to d.d.d.d_net peer $other_peer \ main auth hmac-sha1 enc 3des group modp1024 \

Re: ral(4) and Gigabyte GN-WI01GS 802.11b/g card

2008-09-26 Thread Kevin Elliott
Nick, Good to hear. It's going into a Soekris 4501 for wireless access duty so hostap is necessary but anything got to work better than my current Atheros based card. If anyone else has used this card with success in hostap mode, I'd love to hear about it. -Kevin On Thu, Sep 25, 2008 at 3:55

[OT] IronPort mail servers

2008-09-26 Thread Chris
I know this is not OpenBSD related but I'm just asking for if someone has any first-hand experience with IronPort [1] My company has decided to move away from Solaris 8 mail system (sendmail, clamav, mimedefang, relaydelay and god-knows-what-else) - the reason for the move is that the current

Re: OpenBSD + isakmpd + VPN concentrator 3060

2008-09-26 Thread Claer
On Fri, Sep 26 2008 at 45:07, Mariusz Makowski wrote: I finally was able to setup vpn connection. Other side was configured in wrong way and sum of all my ipsec.conf look in this way: -- ipsec.conf -- other_peer = c.c.c.c_public_ip ike esp tunnel from a.a.a.a_net to d.d.d.d_net peer

Re: how to turn off greylisting?

2008-09-26 Thread Juan Miscaro
2008/9/25 jared r r spiegel [EMAIL PROTECTED]: On Thu, Sep 25, 2008 at 10:25:19PM -0400, Juan Miscaro wrote: I have stopped my spamd on my 4.3 box and went ahead and restarted it with the '-b' switch. However, the output of spamdb tells me that greylisting is still active. What is happening?

Le Guide des salons en France et à l'étranger enfin disponible

2008-09-26 Thread Editions Expo News
Le Guide des salons en France et ` l'itranger est paru. Commmandez votre exemplaire. A partir de 29 € TTC (version PDF) Sur 300 pages, toutes les informations nicessaires pour priparer sa participation ` un salon : a) Des conseils techniques : b) L'agenda des salons Du 1er octobre 2008 au 31

Re: OpenBSD + isakmpd + VPN concentrator 3060

2008-09-26 Thread [EMAIL PROTECTED]
Claer wrote: On Fri, Sep 26 2008 at 45:07, Mariusz Makowski wrote: I finally was able to setup vpn connection. Other side was configured in wrong way and sum of all my ipsec.conf look in this way: -- ipsec.conf -- other_peer = c.c.c.c_public_ip ike esp tunnel from a.a.a.a_net to

how to turn on em for Intel 1000PT quad port NIC

2008-09-26 Thread Jorge Medina
hi guys I have this device: Intel PRO 1000PT Quad Port 1GbE NIC and OpenBSD 4.3 man em(4) indicate supported device but the device not been created after installation, how can turn on this device? -- Jorge Andris Medina Oliva. Evolve or die!

Re: how to turn on em for Intel 1000PT quad port NIC

2008-09-26 Thread Stuart Henderson
Send dmesg. On 2008-09-26, Jorge Medina [EMAIL PROTECTED] wrote: hi guys I have this device: Intel PRO 1000PT Quad Port 1GbE NIC and OpenBSD 4.3 man em(4) indicate supported device but the device not been created after installation, how can turn on this device? -- Jorge Andris Medina

PR4 link exchange request

2008-09-26 Thread Rose Brady
Hello! My name is Rose Brady. I have just visited your website (pkre.com.pl) and I was wondering if you'd be interested in exchanging links with my website. Currently I have real estate website and I'm looking to get other related pages to link to it. Of course, in exchange I can provide you

Re: Sendmail issue with sparc/ALOM mails

2008-09-26 Thread Stuart Henderson
On 2008-09-25, Michael [EMAIL PROTECTED] wrote: Hi, I've got a Sun v440 with OpenBSD running with an ALOM card configured to send out mails on events. However, since the hostname can not be read it is set to unknown in the ALOM. It also is not possible to manually set the hostname. Now,

Help with pf

2008-09-26 Thread Ricardo Augusto de Souza
# pfctl -e pf enabled # ping www.terra.com.br PING www.terra.com.br (200.176.3.142): 56 data bytes ping: sendto: No route to host ping: wrote www.terra.com.br 64 chars, ret=-1 ping: sendto: No route to host ping: wrote www.terra.com.br 64 chars, ret=-1 --- www.terra.com.br ping statistics

Re: [OT] IronPort mail servers

2008-09-26 Thread Joshua Gimer
We have been using Ironport for about a year now as our email security appliance. We have roughly 60,000 addresses that we route mail for and take in about 16 million messages a day. We went from a total of 16 systems running just about everything imaginable including email encryption, to 2

Re: OpenBSD + isakmpd + VPN concentrator 3060

2008-09-26 Thread Christoph Leser
This is interesting. We suffer from spurious connection losses since we started with OBSD ipsec. Do you have any details what caused your problem, and why setting DPD-check-interval helped? In our environnement (we manage openbsd tunnels to cisco 3030 which is out of our scope) we debugged a

Odd spamd-white update issues

2008-09-26 Thread Derek Buttineau
Good Day, We have an OpenBSD 4.3 machine that is acting as a firewall for our scanning service and has spamd employed (which we've been using ever since hearing Bob talk about it at BSDCan 2005). Yesterday though, we had our first issue with it, for some reason about 4pm yesterday all of

How do I add nat to other subnet in pf

2008-09-26 Thread Ricardo Augusto de Souza
I have already have nat configured in pf.conf. It4s working good and all my clients are connected to the internet. I need to tell to openBSD route when my clients try to access subnet 10.100.0.0/26. From openbsd I can access this network. I think when I add other nat rule in pf its missing

Re: making man(1) to open a file

2008-09-26 Thread Cezary Morga
Dnia czwartek, 25 wrze6nia 2008, Bryan Irvine napisa3: Next to the useful suggestions you've received so far, you can try groff -man -Tascii /path/to/manpage.X | less man -a is easier though. -B -a Display all of the manual pages for a specified section and name

Re: [OT] IronPort mail servers

2008-09-26 Thread Stijn
Joshua Gimer wrote: We have been using Ironport for about a year now as our email security appliance. We have roughly 60,000 addresses that we route mail for and take in about 16 million messages a day. We went from a total of 16 systems running just about everything imaginable including email

Re: how to turn on em for Intel 1000PT quad port NIC

2008-09-26 Thread Jorge Medina
On Fri, Sep 26, 2008 at 11:54 AM, Stuart Henderson [EMAIL PROTECTED] wrote: On 2008/09/26 11:28, Jorge Medina wrote: On Fri, Sep 26, 2008 at 10:37 AM, Stuart Henderson [EMAIL PROTECTED] wrote: Send dmesg. to the list, not to me personally please. (CC'd). sorry Intel PRO/1000 QP (82575GB)

OT: elliptic curve crypto

2008-09-26 Thread John Nietzsche
Dear list members, i am searching for a tutorial on this regards that explain howto implement it using ANSI C (I don't really care about the math background abot this subject). May some one point me the URL for a tutorial on this regard? Thanks a lot for your time and cooperation. Best

Re: making man(1) to open a file

2008-09-26 Thread Stuart Henderson
On 2008-09-26, Cezary Morga [EMAIL PROTECTED] wrote: Dnia czwartek, 25 wrze6nia 2008, Bryan Irvine napisa3: Next to the useful suggestions you've received so far, you can try groff -man -Tascii /path/to/manpage.X | less man -a is easier though. -B -a Display all of the

Re: OT: elliptic curve crypto

2008-09-26 Thread Ted Unangst
On Fri, Sep 26, 2008 at 4:02 PM, John Nietzsche [EMAIL PROTECTED] wrote: i am searching for a tutorial on this regards that explain howto implement it using ANSI C (I don't really care about the math background abot this subject). The people who are qualified to do this work generally just do

Re: making man(1) to open a file

2008-09-26 Thread Bryan Irvine
On Fri, Sep 26, 2008 at 11:43 AM, Cezary Morga [EMAIL PROTECTED] wrote: Dnia czwartek, 25 wrze6nia 2008, Bryan Irvine napisa3: Next to the useful suggestions you've received so far, you can try groff -man -Tascii /path/to/manpage.X | less man -a is easier though. -B -a

Re: OT: elliptic curve crypto

2008-09-26 Thread Bob Beck
On 26-Sep-08, at 14:43, Ted Unangst [EMAIL PROTECTED] wrote: On Fri, Sep 26, 2008 at 4:02 PM, John Nietzsche [EMAIL PROTECTED] wrote: i am searching for a tutorial on this regards that explain howto implement it using ANSI C (I don't really care about the math background abot this subject).

Re: making man(1) to open a file

2008-09-26 Thread François Chambaud
Cezary Morga [EMAIL PROTECTED] writes: Dnia czwartek, 25 wrze6nia 2008, Bryan Irvine napisa3: Next to the useful suggestions you've received so far, you can try groff -man -Tascii /path/to/manpage.X | less man -a is easier though. -B -a Display all of the manual

relayd: does timeout-directive limits time for SSL-handshake?

2008-09-26 Thread Till Neudecker
Hi, I have a pretty normal loadbalancing setup (2 relayd-loadbalancer, 2 backend hosts). The loadbalancer accepts ssl-encrypted sessions and forwards them unencrypted to the backend-hosts. Because all the hosts are on the same LAN I set the global timeout-directive to 200ms. When now connecting

Re: Sendmail issue with sparc/ALOM mails

2008-09-26 Thread Bryan
On Fri, Sep 26, 2008 at 7:43 AM, Stuart Henderson [EMAIL PROTECTED] wrote: snipped... Second question... is there any way to set the hostname of the ALOM? ;-) *shrug* you could try looking in eeprom(8), but I don't know if ALOM has anything to do with that. According to this

Intel Atom and D945GCLF2

2008-09-26 Thread Steve B
Is anyone running OpenBSD on one of these boards? The supported platform page does not list either the chipset or the CPU so I'm guesing it is not supported at this time. Steve

Dell SC440 hangs

2008-09-26 Thread Steve Shockley
I'm running -current from September 9 on a Dell SC440. When I try to do a bulk ports build using dpb, it runs for a couple of hours and hangs. The console screen is blank and doesn't respond to keyboard, but I can still ping the machine. If I try to ssh in, I get a connection but no logon

Re: Dell SC440 hangs

2008-09-26 Thread johan beisser
On Sep 26, 2008, at 9:16 PM, Steve Shockley wrote: I'm running -current from September 9 on a Dell SC440. When I try to do a bulk ports build using dpb, it runs for a couple of hours and hangs. The console screen is blank and doesn't respond to keyboard, but I can still ping the machine. If

Re: Dell SC440 hangs

2008-09-26 Thread Steve Shockley
On 9/27/2008 12:44 AM, johan beisser wrote: anything in /var/log/messages? No, just the usual syslogd: restart followed by syslogd: start and the dmesg. I did notice the log file for gcc 4.2 had a bunch of garbage (^@) at the end, and I think maybe it died on gcc in previous runs as well.