Re: pf+FTP external interface only

2010-11-05 Thread OpenBSD Geek
take a look at : http://mouedine.net/ruleset47.aspx On Thu, 4 Nov 2010 22:27:21 -0700, onteria onte...@scarletdevil.net wrote: I'm currently working on locking down one of my machines with pf. Right now it has a default deny policy and FTP is causing issues. I did a search on how to around

Re: pf+FTP external interface only

2010-11-05 Thread patrick keshishian
On Thu, Nov 4, 2010 at 10:27 PM, onteria onte...@scarletdevil.net wrote: I'm currently working on locking down one of my machines with pf. Right now it has a default deny policy and FTP is causing issues. I did a search on how to around FTP oddities using ftp-proxy, but from what I understand

Re: OT IPv6 Was: nfsv4?

2010-11-05 Thread Michael Simpson
On 31 October 2010 20:01, Diana Eichert deich...@wrench.com wrote: On Sat, 30 Oct 2010, Marco Peereboom wrote: On Sat, Oct 30, 2010 at 10:02:47AM -0600, Diana Eichert wrote: whether you like it or not, IPv6 deployment is gaining strength. I worked on more exception documents and other

diskmap(4) interface and live USB fstab file

2010-11-05 Thread Marcus
http://www.openbsd.org/faq/faq1.html#WhatsNew says: diskmap(4) interface People using USB attached storage or softraid(4) configurations often had difficulty with drive identifiers changing from boot to boot, or between hardware configurations. diskmap(4) allows you to mount drives by unique

Architeture Choose

2010-11-05 Thread Felipe Mesquita de Oliveira
Hi All, I'm long time far from OpenBSD world, but planning to come back. The plan is to buy an old machine, but, maybe try an new platform, if the investment worths... I have these options, all in the same price range: A) Sun Fire V100 UltraSPARC IIi 650 Mhz - 2x160Gb Hd - 2Gb RAM - CDROM - US$

Re: Architeture Choose

2010-11-05 Thread LeviaComm Networks
On 05-Nov-10 05:47, Felipe Mesquita de Oliveira wrote: C) Atlhon 64 X2 +5200, 2 GB RAM, 160Gb HD - US$ 320,00 The idea is to build an server with: WWW/Email/Firewall funcionalities, with better stablity as possible. You'll get a lot more performance out of the AMD X2. Plus both i386 and

OpenBSD 4.8: is diskmap(4) missing ?

2010-11-05 Thread Remco
An earlier post to misc@ made me look into diskmap(4), but the man page seems to be missing: This was a fresh install from CD: # uname -a OpenBSD srv000.home.lan 4.8 GENERIC.MP#335 amd64 # man diskmap man: no entry for diskmap in the manual. # ls /dev/diskmap /dev/diskmap This was an upgrade

gre mpls packet decapsulation (4.8/i386)

2010-11-05 Thread Vladimir Ostrovskiy
Hello All, a question: i have a setup where an mpls P router sends via GRE SDP (service delivery path) traffic to an openbsd machine, acting as a PE, i need to have my traffic decapsulated to the original payload (minus gre, minus mpls headers) however i have difficulties getting proper

Re: gre mpls packet decapsulation (4.8/i386)

2010-11-05 Thread Claudio Jeker
On Fri, Nov 05, 2010 at 03:43:07PM +0100, Vladimir Ostrovskiy wrote: Hello All, a question: i have a setup where an mpls P router sends via GRE SDP (service delivery path) traffic to an openbsd machine, acting as a PE, i need to have my traffic decapsulated to the original payload

Re: gre mpls packet decapsulation (4.8/i386)

2010-11-05 Thread Vladimir Ostrovskiy
see pcap's attached, On Fri, Nov 5, 2010 at 4:08 PM, Claudio Jeker cje...@diehard.n-r-g.comwrote: On Fri, Nov 05, 2010 at 03:43:07PM +0100, Vladimir Ostrovskiy wrote: Hello All, a question: Please just include tcpdump -nvi vic1 -X and tcpdump -nvi gre0 -X output. Tcpdump is in base for

Re: gre mpls packet decapsulation (4.8/i386)

2010-11-05 Thread Vladimir Ostrovskiy
forgot the routes # route -n show -mpls Routing tables MPLS: In label Out label Op Gateway Flags Refs Use Mtu Prio Interface 3 - LOCAL default UGT 0 0 - 56 vic0 16 - LOCAL 10.166.41.1 UGT 0 0 - 56 vic0 17 131071 SWAP 10.163.0.161 UGT 0 0 - 56 vic1 18 - LOCAL 192.168.255.1 UGT 0 0 33200 56 lo1

Re: Architeture Choose

2010-11-05 Thread Jeremy Chase
I have an emac that I just updated to 4.8 macppc, and it as expected, it works great.B I used to run OpenBSD on an old ultra5, and it also worked great. x86 might be the most common, but the other architectures work very well too. For what you are doing it looks like all these machines will be

pf rules order

2010-11-05 Thread R0me0 ***
Hello there, I posted previously my doubt with the follow subject: 4.7 and ftp-proxy I don't know what are occurring. I have the follow rules: table ftp { address1, address2, address3 } table ftppriv { internal_addr1, internal_addr2 } pass in quick on $int_if proto tcp from ftppriv to port

relayd port to linux

2010-11-05 Thread Aleksandar Lazic
Dear Listmember, due to the fact that openssh and some other parts of openbsd are ported to linux maybe you can tell me if you plan to make a openrelayd which is able to compile on linux. I'am willing to try it by my self, maybe you can help me to miss the most common pitfalls ;-). thanks

Re: relayd port to linux

2010-11-05 Thread Theo de Raadt
due to the fact that openssh and some other parts of openbsd are ported to linux maybe you can tell me if you plan to make a openrelayd which is able to compile on linux. relayd depends deeply on pf. so the answer is no.

Re: relayd port to linux

2010-11-05 Thread Joe McDonagh
I can only imagine Reyk's face if he saw this. On 11/05/2010 11:54 AM, Aleksandar Lazic wrote: Dear Listmember, due to the fact that openssh and some other parts of openbsd are ported to linux maybe you can tell me if you plan to make a openrelayd which is able to compile on linux. I'am

Re: gre mpls packet decapsulation (4.8/i386)

2010-11-05 Thread Stuart Henderson
In gmane.os.openbsd.misc, you wrote: see pcap's attached, On Fri, Nov 5, 2010 at 4:08 PM, Claudio Jeker cje...@diehard.n-r-g.comwrote: On Fri, Nov 05, 2010 at 03:43:07PM +0100, Vladimir Ostrovskiy wrote: Hello All, a question: Please just include tcpdump -nvi vic1 -X and tcpdump -nvi

Re: Architeture Choose

2010-11-05 Thread Nick Holland
On 11/05/10 08:46, Felipe Mesquita de Oliveira wrote: Hi All, I'm long time far from OpenBSD world, but planning to come back. The plan is to buy an old machine, but, maybe try an new platform, if the investment worths... I have these options, all in the same price range: A) Sun Fire V100

Re: gre mpls packet decapsulation (4.8/i386)

2010-11-05 Thread Vladimir Ostrovskiy
tcpdump -nvi vic1 -X ip proto 47 18:20:27.697032 gre 10.163.0.8 10.163.0.162: [] gre-proto-0x8847 (DF) (ttl 255, id 276, len 130) : 4500 0082 0114 4000 ff2f 6449 0aa3 0008 e.@./dI.#.. 0010: 0aa3 00a2 8847 032c 91ff 0016 4d40 .#G.,...M@ 0020: 17f3 0050 5601 009e 8100 05e6 0800

Re: Architeture Choose

2010-11-05 Thread Jeremy Chase
I'm not fond of MacPPC machines for the very reason many people love them: the style. B The cute cases are a pain in the butt to deal with I second that. I had to replace the HD in my emac and I literally had to take the motherboard out to get access. -- Jeremy Chase

Re: OpenBSD 4.8 freezes on certain activities

2010-11-05 Thread Bob Beck
Are you able to try the following? see if it solves your problem. Index: sys/kern/vfs_bio.c === RCS file: /cvs/src/sys/kern/vfs_bio.c,v retrieving revision 1.126 diff -u -r1.126 vfs_bio.c --- sys/kern/vfs_bio.c 3 Aug 2010 06:30:19

Re: Architeture Choose

2010-11-05 Thread Joe McDonagh
If your Sun fails -- that's a big IF. It's approaching a possibility of 0 in my experience. If performance isn't an issue and stability is your chief goal, none of this hardware is as stable as a Sun. On 11/05/2010 01:14 PM, Nick Holland wrote: On 11/05/10 08:46, Felipe Mesquita de Oliveira

Re: Architeture Choose

2010-11-05 Thread Felipe Mesquita de Oliveira
Back to tha listing =) Thank you everybody for the answers. About the prices, in Brazil we have MercadoLivre (sort of a eBay) Every kind of equipament here is more expensive because of both shipping and fees.. I've translated the prices to US dollar for you to know which choice will be

Re: Architeture Choose

2010-11-05 Thread Bryan Irvine
On Fri, Nov 5, 2010 at 11:30 AM, Joe McDonagh joseph.e.mcdon...@gmail.com wrote: If your Sun fails -- that's a big IF. It's approaching a possibility of 0 in my experience. If performance isn't an issue and stability is your chief goal, none of this hardware is as stable as a Sun. Agreed

Re: OpenBSD 4.8 freezes on certain activities

2010-11-05 Thread Michał Koc
Thank You for your time. The patch seems to resolve both problems on Atom platform. Will check Core2Duo later. Thanks once again Best regard M.K. W dniu 2010-11-05 18:36, Bob Beck pisze: Are you able to try the following? see if it solves your problem. Index: sys/kern/vfs_bio.c

Le Concours Art7 : plus que 10 jours !!!

2010-11-05 Thread Pears gallery
ATTENTION !!! Il vous reste plus que 10 jours pour participer au Concours Art7 de Pears Gallery. Voud jtes dij` plus de 300 artistes... Pears Gallery organise du 15 octobre jusqu'au 15 novembre 2010 un concours riservi aux artistes professionnels frangais (catigories : peintures, estampes,

Re: OpenBSD 4.8 freezes on certain activities

2010-11-05 Thread Michał Koc
Hmmm, I was a little bit too optimistic. The hight disk IO seems not to cause problems now, but network io (re adapter) from nagios(probably) has freezed the Atom machine after approximately 2 hours. This is top header right after freeze: 75 processes: 1 running, 70 idle, 4 on processor

xenocara: make release fails on vax/4.8-stable

2010-11-05 Thread Maurice Janssen
Hi, On vax/4.8-stable, make release in /usr/xenocara fails with + install -c -o root -g wheel -m 644 /usr/xenocara/etc/X11.vax/xorg.conf /usr/dest/etc/X11 install: /usr/xenocara/etc/X11.vax/xorg.conf: No such file or directory *** Error code 71 Stop in /usr/xenocara (line 97 of Makefile).

Re: relayd port to linux

2010-11-05 Thread Aleksandar Lazic
On Fre 05.11.2010 10:45, Theo de Raadt wrote: due to the fact that openssh and some other parts of openbsd are ported to linux maybe you can tell me if you plan to make a openrelayd which is able to compile on linux. relayd depends deeply on pf. so the answer is no. ok, sorry for rush. Do

Re: relayd port to linux

2010-11-05 Thread Rod Whitworth
On Fri, 5 Nov 2010 22:31:42 +0100, Aleksandar Lazic wrote: On Fre 05.11.2010 10:45, Theo de Raadt wrote: due to the fact that openssh and some other parts of openbsd are ported to linux maybe you can tell me if you plan to make a openrelayd which is able to compile on linux. relayd depends

Re: relayd port to linux

2010-11-05 Thread Ted Unangst
http://en.wikipedia.org/wiki/Reverse_proxy On Fri, Nov 5, 2010 at 5:31 PM, Aleksandar Lazic al-open...@none.at wrote: On Fre 05.11.2010 10:45, Theo de Raadt wrote: due to the fact that openssh and some other parts of openbsd are ported to linux maybe you can tell me if you plan to make a

Font Rendering Issue on 4.8-release

2010-11-05 Thread Skylar Hawk
Hey Misc, I just did a fresh install of 4.8 to celebrate the release but I'm having some issues with fonts rendering in X (using Openbox as my wm). I've seen the issues in a few different applications, including Firefox, gnome-terminal, xterm and claws-mail. I don't know all fonts that are

Re: relayd port to linux

2010-11-05 Thread Marco Peereboom
On Fri, Nov 05, 2010 at 10:31:42PM +0100, Aleksandar Lazic wrote: On Fre 05.11.2010 10:45, Theo de Raadt wrote: due to the fact that openssh and some other parts of openbsd are ported to linux maybe you can tell me if you plan to make a openrelayd which is able to compile on linux. relayd

Re: diskmap(4) interface and live USB fstab file

2010-11-05 Thread Jacob Meuser
fwiw, in -current, USB attach order should be quite predictable. there are no longer multiple threads attaching USB devices. attachment is now done in a single thread, and it is done in the same order every time. of course, if you change which USB ports the devices are connected to between

Seminario Nacional Compradores 2010, Puerto Vallarta 22 y 23 de Noviembre

2010-11-05 Thread Ing. Barbara Velarde
[IMAGE] PRESENTA De la Planeacisn al Control Seminario Nacional Compradores 2010 Puerto Vallarta 22 y 23 de Noviembre PMS Capacitacisn Efectiva de Mixico con el compromiso de presentar a usted estrategias y herramientas que proporcionen a su empresa resultados inmediatos, presentamos este

Re: SSH Connection Accounting

2010-11-05 Thread Tito Mari Francis Escaño
Thanks for the reply, but what I hope to find was an administrative tool rather than resource/building blocks to build such an application. On Thu, Nov 4, 2010 at 2:46 PM, Jan Stary h...@stare.cz wrote: On Nov 04 14:35:12, Tito Mari Francis Esca??o wrote: Good day! I'm googling for

OpenBSD bridge setup

2010-11-05 Thread James A. Peltier
Problem Description: I'm trying to filter VLANs on the bridge. However, when enabling VLAN devices on the em1 interface the bridge does not work. Test Setup: The 2910AL-24G port 19 has its ports configured as TAGGED for VLAN 300 and VLAN 302 with no other VLANs are enabled on

Re: diskmap(4) interface and live USB fstab file

2010-11-05 Thread Nick Holland
On 11/05/10 08:37, Marcus wrote: ---Question Would somebody rewrite #flashmemLive section for the diskmap interface change? or how to edit the /etc/fstab for live USB device without worrying wheter it would come up as sd0, sd1 sd2, etc. ---Answer: Somebody will, as time permits.

Re: relayd port to linux

2010-11-05 Thread Joe McDonagh
On 11/05/2010 05:31 PM, Aleksandar Lazic wrote: On Fre 05.11.2010 10:45, Theo de Raadt wrote: due to the fact that openssh and some other parts of openbsd are ported to linux maybe you can tell me if you plan to make a openrelayd which is able to compile on linux. relayd depends deeply on pf.