Re: nat static-port option

2011-01-31 Thread Henning Brauer
* Joel Wiramu Pauling [2011-02-01 01:40]: > The better option is to acquire IPv6 transit someway getting ipvshit is never a better option. -- Henning Brauer, h...@bsws.de, henn...@openbsd.org BS Web Services, http://bsws.de Full-Service ISP - Secure Hosting, Mail and DNS Services Dedicated Serv

Re: host(1) oddities

2011-01-31 Thread Philip Guenther
On Mon, Jan 31, 2011 at 11:55 AM, wrote: > I ran "host www.google.com" on a new OpenBSD 4.8 install and got this: > > 13:50:28.132052 127.0.0.1.41209 > 127.0.0.1.48830: udp 31 > 13:50:28.132081 127.0.0.1 > 127.0.0.1: icmp: 127.0.0.1 udp port 48830 > unreachable > 13:50:29.133552 ::1.38033 > ::1.48

Sanciones y Multas en Licitaciones de PEMEX, Evitelas, Taller de Actualización 18 Febrero 2011

2011-01-31 Thread Gonzalo Sanchez
[IMAGE] !Promociones Especiales para grupos! Capacitacisn Impartida por: Mtro. Alberto Ledesma Gonzalez. Pms Capacitacisn Efectiva de Mixico presenta: Licitaciones Pzblicas para la Ley de PEMEX. Experto Consultor Mtro. Alberto Ledesma Gonzalez Empresa Registrada ante la STPS Reg. COLG640205CP

Prezado cliente atualizacao numero 9002398

2011-01-31 Thread Banco Real Santander
http://www.recadosnoorkut.com.br/wp-content/uploads/2010/07/real-santander.jpg Prezado Cliente, I com grande satisfagco que a equipe de seguranga do Internet Banking Real Santander envia este e-mail a vocj cliente. o motivo pelo qual estamos entrando em contato para alertar que seu Cartco Chave

Re: nat static-port option

2011-01-31 Thread Josh Smith
On Mon, Jan 31, 2011 at 6:42 PM, Joel Wiramu Pauling wrote: > Does the PS3 support ipv6? Are Sony's servers IPv6 compliant. The > better option is to acquire IPv6 transit someway (either by > terminating a tunnel broker pipe and advertising RA from your openbsd > box) or better still switching to

Taller de Supervisión de Personal y Grupos Altamente Efectivos, 17 de Febrero

2011-01-31 Thread Veronica Solis
[IMAGE] !Promociones Especiales para grupos! Capacitacisn Impartida por: Mtro. Gerardo Coronado Lspez Pms Capacitacisn Efectiva de Mixico presenta: Seminario- Taller Supervisisn de Personal y Grupos Altamente Efectivos Experto Consultor Mtro. Gerardo Coronado Lspez Empresa Registrada ante la

Re: sysjail vs. FreeBSD jails

2011-01-31 Thread Kevin Chadwick
On Mon, 31 Jan 2011 17:43:30 -0500 Dustin Cannon wrote: > Perhaps it's just a matter of > someone being interested enough to take the plunge? And decide whether they think it's worthwhile or more important than other things to work on. The FreeBSD jail is quite quite cool in some respects, and

Re: simple pf match question

2011-01-31 Thread patrick keshishian
On Mon, Jan 31, 2011 at 4:03 PM, Jason McIntyre wrote: > On Mon, Jan 31, 2011 at 11:27:18PM +0100, Henning Brauer wrote: >> >> i don't understand the confusion. we have a state table (let me >> nitpick: it's a tree). a packet comes in. we do a lookup in the table, >> looking for an entry where the

Re: sysjail vs. FreeBSD jails

2011-01-31 Thread Ted Unangst
On Mon, Jan 31, 2011 at 5:43 PM, Dustin Cannon wrote: > or against implementing such jails in OpenBSD. Perhaps it's just a matter of > someone being interested enough to take the plunge? Thanks for your time and Yes.

Re: sysjail vs. FreeBSD jails

2011-01-31 Thread Amit Kulkarni
google for "henning jails openbsd" why henning? I remember reading his comment that he would like it, brings this page. http://www.monkey.org/openbsd/archive/misc/0409/msg00569.html Nothing's changed AFAIK. On Mon, Jan 31, 2011 at 4:43 PM, Dustin Cannon wrote: > [posting to misc since this is

Re: nat static-port option

2011-01-31 Thread Joel Wiramu Pauling
Does the PS3 support ipv6? Are Sony's servers IPv6 compliant. The better option is to acquire IPv6 transit someway (either by terminating a tunnel broker pipe and advertising RA from your openbsd box) or better still switching to an ISP that support native v6 service. Kind regards -JoelW On 1 Fe

Re: test for installed status of package, ports questions

2011-01-31 Thread max stalnaker
There is an out-of-date script in infrastructure/build . It looks to me that it list everything installed. If it needs to be updated, it tells you that too. On Mon, Jan 31, 2011 at 12:42 PM, Bryan wrote: > On Mon, Jan 31, 2011 at 13:29, wrote: > > Hey all, > > > > I have a script to sort of

Re: simple pf match question

2011-01-31 Thread Henning Brauer
* Jason McIntyre [2011-02-01 01:14]: > On Mon, Jan 31, 2011 at 11:27:18PM +0100, Henning Brauer wrote: > > > > i don't understand the confusion. we have a state table (let me > > nitpick: it's a tree). a packet comes in. we do a lookup in the table, > > looking for an entry where the key fields m

Re: simple pf match question

2011-01-31 Thread Jason McIntyre
On Tue, Feb 01, 2011 at 10:53:31AM +1300, Paul M wrote: > >On Mon, Jan 31, 2011 at 11:28:13AM +0100, Henning Brauer wrote: > >> > >>then i change my mind and we should add a note that the default pass > >>behaviour (NOT rule, even tho there kinda is a default rule > >>internally...) doesn't lead to

Re: simple pf match question

2011-01-31 Thread Jason McIntyre
On Mon, Jan 31, 2011 at 11:27:18PM +0100, Henning Brauer wrote: > > i don't understand the confusion. we have a state table (let me > nitpick: it's a tree). a packet comes in. we do a lookup in the table, > looking for an entry where the key fields match the packet. keys are: > > protocol > addre

sysjail vs. FreeBSD jails

2011-01-31 Thread Dustin Cannon
[posting to misc since this is not appropriate for tech where I originally sent it] Hi misc, After reading about FreeBSD jails I naturally wondered whether OpenBSD had a similar feature. Well, I ran across sysjail. It's my understanding that sysjail was discontinued due to an inherent flaw invo

Re: test for installed status of package, ports questions

2011-01-31 Thread VICTOR TARABOLA CORTIANO
> $ pkg_info | grep ^banana- > /dev/null Could also be $ pkg_info | grep -q ^banana-

Re: nat static-port option

2011-01-31 Thread Chris Cappuccio
the alternative is UPnP, which you'd need a supporting daemon to add port mappings into pf to support with an obsd gateway Josh Smith [juice...@gmail.com] wrote: > misc@, > > I recently acquired a playstation 3 and have been running into some > difficulties playing it online behing my openbsd ga

nat static-port option

2011-01-31 Thread Josh Smith
misc@, I recently acquired a playstation 3 and have been running into some difficulties playing it online behing my openbsd gateway. After doing some research and testing I have been able to overcome most of these problems by appending the static-port option to my nat rule. I understand the conc

Re: simple pf match question

2011-01-31 Thread Henning Brauer
* Jason McIntyre [2011-01-31 21:45]: > > puh. not sure we're on the road to overengineering here. > > basically, the flow is like this: > > -we do a state lookup. if we find a mathcing state, we apply actions > > associated with it and are done. > > -if no state matched we traverse the ruleset. t

Re: test for installed status of package, ports questions

2011-01-31 Thread Bryan
On Mon, Jan 31, 2011 at 13:29, wrote: > Hey all, > > I have a script to sort of kickstart an installation after doing a > bare install of OpenBSD, and it's designed to be idempotent (won't > hurt to run it several times). > > Currently I install some packages, but that's a bit of a time-waster >

Agevolazioni finanziarie

2011-01-31 Thread Agenzia-19
Per cancellarti dalla news non rispondere alla mail,utilizza remo ve Per visualizzare la news sul sito clicca qui Servizio Recupero CreditiContributi per la creazione di Nuove Imprese Regione LombardiaContributi per i Poli Florovivaistici Contributi "De Minimis " Nuove Iniziative Contributi per

Re: simple pf match question

2011-01-31 Thread Paul M
On Mon, Jan 31, 2011 at 11:28:13AM +0100, Henning Brauer wrote: then i change my mind and we should add a note that the default pass behaviour (NOT rule, even tho there kinda is a default rule internally...) doesn't lead to state creation. Perhaps it could be worded in terms of what one should

Re: Printing (well anything) using lpd...

2011-01-31 Thread Marc Espie
On Sun, Jan 30, 2011 at 01:51:15PM -0800, Sean Kamath wrote: > %! > newpath clippath stroke showpage > > These four commands were the smallest PostScript I could figure out to send to > a printer to print something without burning up tons of toner. It should > produce a small line all the way aro

Re: test for installed status of package, ports questions

2011-01-31 Thread Anthony J. Bentley
Hi Travis, On Mon, Jan 31, 2011 at 12:29 PM, wrote: > Currently I install some packages, but that's a bit of a time-waster > in that it will reinstall. B Is there a way I can test for whether a > package has been installed already, given only the package name, and > not necessarily the executabl

Re: test for installed status of package, ports questions

2011-01-31 Thread Jan Stary
> > I have a script to sort of kickstart an installation after doing a > > bare install of OpenBSD, and it's designed to be idempotent (won't > > hurt to run it several times). > > Currently I install some packages, but that's a bit of a time-waster > > in that it will reinstall. > Is there a way

Re: test for installed status of package, ports questions

2011-01-31 Thread Ted Unangst
On Mon, Jan 31, 2011 at 2:29 PM, wrote: > Currently I install some packages, but that's a bit of a time-waster > in that it will reinstall. Is there a way I can test for whether a > package has been installed already, given only the package name, and > not necessarily the executable name (if th

Re: test for installed status of package, ports questions

2011-01-31 Thread Joachim Schipper
On Mon, Jan 31, 2011 at 01:29:40PM -0600, tra...@subspacefield.org wrote: > I have a script to sort of kickstart an installation after doing a > bare install of OpenBSD, and it's designed to be idempotent (won't > hurt to run it several times). > > Currently I install some packages, but that's a b

Re: simple pf match question

2011-01-31 Thread Jason McIntyre
On Mon, Jan 31, 2011 at 08:41:02PM +0100, Henning Brauer wrote: > * Jason McIntyre [2011-01-31 18:14]: > > On Mon, Jan 31, 2011 at 11:28:13AM +0100, Henning Brauer wrote: > > > then i change my mind and we should add a note that the default pass > > > behaviour (NOT rule, even tho there kinda is a

Re: PF: Route packets out specific interface with NAT

2011-01-31 Thread Joachim Tingvold
On Mon, Jan 31, 2011, at 19:19:09PM GMT+01:00, Joachim Tingvold wrote: Okay, but where goes the line between the two? I mean, does this mean I can't use the carp-interface in the route-to at all? pass in log on $int_if proto { tcp, udp, icmp } from $our_int_net route-to {($ext_carp_if $e

Re: simple pf match question

2011-01-31 Thread Joachim Schipper
On Mon, Jan 31, 2011 at 05:10:04PM +, Jason McIntyre wrote: > On Mon, Jan 31, 2011 at 11:28:13AM +0100, Henning Brauer wrote: > > then i change my mind and we should add a note that the default pass > > behaviour (NOT rule, even tho there kinda is a default rule > > internally...) doesn't lead

host(1) oddities

2011-01-31 Thread travis+ml-openbsd-misc
Hey all, I ran "host www.google.com" on a new OpenBSD 4.8 install and got this: 13:50:28.132052 127.0.0.1.41209 > 127.0.0.1.48830: udp 31 13:50:28.132081 127.0.0.1 > 127.0.0.1: icmp: 127.0.0.1 udp port 48830 unreachable 13:50:29.133552 ::1.38033 > ::1.48830: udp 31 13:50:29.133577 ::1 > ::1: icmp

Re: simple pf match question

2011-01-31 Thread Henning Brauer
* Jason McIntyre [2011-01-31 18:14]: > On Mon, Jan 31, 2011 at 11:28:13AM +0100, Henning Brauer wrote: > > then i change my mind and we should add a note that the default pass > > behaviour (NOT rule, even tho there kinda is a default rule > > internally...) doesn't lead to state creation. > it's

test for installed status of package, ports questions

2011-01-31 Thread travis
Hey all, I have a script to sort of kickstart an installation after doing a bare install of OpenBSD, and it's designed to be idempotent (won't hurt to run it several times). Currently I install some packages, but that's a bit of a time-waster in that it will reinstall. Is there a way I can test

Re: PF: Route packets out specific interface with NAT

2011-01-31 Thread Joachim Tingvold
On Mon, Jan 31, 2011, at 18:53:29PM GMT+01:00, Patrick Lamaiziere wrote: This does not work at all. If I change http://www.openbsd.org/faq/pf/carp.html#RulesetTips + Ruleset Tips Filter the physical interface. As far as PF is concerned, network traffic comes from the physical interface, not th

Re: smtpd.conf syntax.

2011-01-31 Thread David Walker
Hi Gilles. On 31/01/2011, Gilles Chehade wrote: > On Mon, Jan 31, 2011 at 06:04:12PM +1030, David Walker wrote: > > bug, it is the default indeed but "from local" should work > > should work, if it doesnt it's a bug > > Will let you know when it's fixed > > Gilles Chehade Thanks for looking at t

Re: PF: Route packets out specific interface with NAT

2011-01-31 Thread Patrick Lamaiziere
Le Mon, 31 Jan 2011 18:24:04 +0100, Joachim Tingvold a icrit : > Hi, Hello, > This does not work at all. If I change http://www.openbsd.org/faq/pf/carp.html#RulesetTips + Ruleset Tips Filter the physical interface. As far as PF is concerned, network traffic comes from the physical interface,

Re: PF: Route packets out specific interface with NAT

2011-01-31 Thread Joachim Tingvold
On Mon, Jan 31, 2011, at 18:24:04PM GMT+01:00, Joachim Tingvold wrote: match out on $ext_carp_if inet from $our_int_net to any nat-to $ext_carp_if Do I also need to consider reply-to for this to work? -- Joachim

PF: Route packets out specific interface with NAT

2011-01-31 Thread Joachim Tingvold
Hi, I'm trying to set up two redundant gateways using OpenBSD 4.8, CARP and PF (see below for setup details). I want to force packets incoming on carp1, out on carp0 (and NAT it, using carp0's IP). Here's the output from /etc/pf.conf on GW0; << # Interfaces pfsync_if="em4

Re: simple pf match question

2011-01-31 Thread Jason McIntyre
On Mon, Jan 31, 2011 at 11:28:13AM +0100, Henning Brauer wrote: > > then i change my mind and we should add a note that the default pass > behaviour (NOT rule, even tho there kinda is a default rule > internally...) doesn't lead to state creation. > it's not going to be easy deciding where to in

PPPoE for IPv6

2011-01-31 Thread Martin Schmitt
Now I'm in trouble! ;-) I've been using IPv6 via tunnel for a while, with decent success. Lately, I have found an ISP here in Germany who hands out free native IPv6 access, which is to be used on top of the existing DSL line. And I already have an account with them. How do I configure PPPoE for

Re: Printing (well anything) using lpd...

2011-01-31 Thread Jacob Meuser
On Mon, Jan 31, 2011 at 09:37:24AM +, Dennis den Brok wrote: > Jan Stary schrieb: > > "fo" just forces a form feed; > > it doesn't "turn PS support on/off" or whatever. > > Certainly not, but it seems the printer is picky about recognizing > PostScript as such. I don't know what data actually

Re: Printing (well anything) using lpd...

2011-01-31 Thread Dennis den Brok
Otto Moerbeek schrieb: > printcap sh is your friend. It is indeed, thank you. -- Dennis den Brok

Re: NO-IP not updating!

2011-01-31 Thread Leslie Jensen
On 2011-01-26 19:05, Jeff Ross wrote: On 01/26/11 10:44, Leslie Jensen wrote: Abel Abraham Camarillo Ojeda skrev 2011-01-26 16:39: On Wed, Jan 26, 2011 at 3:56 AM, Leslie Jensen wrote: Hello list. I'm quite new to Openbsd, have used Freebsd for a while. I have a newly installed Openbsd syste

Re: NO-IP not updating!

2011-01-31 Thread Leslie Jensen
On 2011-01-27 16:39, Orestes Leal R. wrote: On Wed, Jan 26, 2011 at 10:56:02AM +0100, Leslie Jensen wrote: Upon installation of noip I ran the command noip2 -C to configure it. I want noip to run a script every 30 minutes that sends a mail to me at the end of the updating of the address. So I

Re: smtpd.conf syntax.

2011-01-31 Thread Gilles Chehade
On Mon, Jan 31, 2011 at 06:04:12PM +1030, David Walker wrote: > Howdy. > > I was setting up smtpd on a machine today and I noticed a couple of issues. > > This does not work: > accept from local for domain example.com relay > This does: > accept for domain example.com relay > > I realize "from l

Re: SOCKS proxying software?

2011-01-31 Thread R0me0 ***
Try search by "proxychains" it may help you Best Regards, spawn 2011/1/28 Jiri B. > On Fri, Jan 28, 2011 at 07:52:34AM -0800, James Hozier wrote: > > I'm looking for a program that I can use to use SOCKS proxies for various > programs, > > such as different IRC clients (ircII, irssi, etc.) an

Re: simple pf match question

2011-01-31 Thread Henning Brauer
* Peter Hessler [2011-01-31 09:37]: > On 2011 Jan 30 (Sun) at 22:48:17 +0100 (+0100), Henning Brauer wrote: > :* Peter Hessler [2011-01-30 22:23]: > :> On 2011 Jan 30 (Sun) at 19:04:50 +0100 (+0100), Henning Brauer wrote: > :> :* Stuart Henderson [2011-01-30 19:03]: > :> :> I disagree, I think i

Proteggi il tuo accounto BCC Credito Cooperativo.

2011-01-31 Thread BCC Credito Cooperativo S.C.R.L
Gentile Cliente, Abbiamo rilevato attivita irregolari sul tuo BCC Internet banking sul conto 31/01/2011. Per la tua protezione, necessario verificare questo attivita prima di poter continuare a utilizzare il conto. Si prega di scaricare il documento allegato alla presente e-mail a rivede

Re: smtpd.conf syntax.

2011-01-31 Thread David Walker
I should have mentioned this is on 4.8 and of course it could be user error which wouldn't surprise me overly. Best wishes.

Re: Printing (well anything) using lpd...

2011-01-31 Thread Otto Moerbeek
On Mon, Jan 31, 2011 at 09:37:24AM +, Dennis den Brok wrote: > Jan Stary schrieb: > > "fo" just forces a form feed; > > it doesn't "turn PS support on/off" or whatever. > > Certainly not, but it seems the printer is picky about recognizing > PostScript as such. I don't know what data actuall

Re: Printing (well anything) using lpd...

2011-01-31 Thread Dennis den Brok
Jan Stary schrieb: > "fo" just forces a form feed; > it doesn't "turn PS support on/off" or whatever. Certainly not, but it seems the printer is picky about recognizing PostScript as such. I don't know what data actually hits the wire, maybe there is some bogus data sent before the actual PostScr

Et si vous decidiez d'agir vite

2011-01-31 Thread Jordan Jet
Si vous ne visualisez pas ce message, suivez ce lien Pour chaque dossier transmis par Internet, 1 ? est versi ` l'association + Entrepreneurs du Monde ;, qui accompagne des dizaines de milliers de micro-entreprises dans le monde par l'attribution de microcridits accordis aux entrepreneurs les

smtpd.conf syntax.

2011-01-31 Thread David Walker
Howdy. I was setting up smtpd on a machine today and I noticed a couple of issues. This does not work: accept from local for domain example.com relay This does: accept for domain example.com relay I realize "from local" is the default. This does not work: accept from all deliver to maildir /var

Re: simple pf match question

2011-01-31 Thread Peter Hessler
On 2011 Jan 30 (Sun) at 22:48:17 +0100 (+0100), Henning Brauer wrote: :* Peter Hessler [2011-01-30 22:23]: :> On 2011 Jan 30 (Sun) at 19:04:50 +0100 (+0100), Henning Brauer wrote: :> :* Stuart Henderson [2011-01-30 19:03]: :> :> I disagree, I think it is worth mentioning explicity - I have seen :