time exceeded in-transit

2012-04-17 Thread R0me0 ***
Hello misc, I have an OpenBSD 5.0 running with outgoing load balance and ifstated to check link status I've pf.conf with rules for outgoing load balance for link 1 and link 2 , pf.link1 and pf.link2 respectively ifstated.conf link1_test = '(ping -q -c 3 74.125.234.212 /dev/null every 20)'

Re: PPPoE for IPv6

2012-04-17 Thread David Diggles
Hi Martin Aha! Sounds complicated, and a bit different to my situation, so I am replying back to the list. :/ My ISP provides native dual stack IPv4 and IPv6 over PPPoE. The IPv4 address is static, and the IPv6 address is dynamic. I've tested connecting with the PPPoE client on MacOSX and

Hardware (firewall) recommendation

2012-04-17 Thread Marcin
Hello, I am looking for a hardware recommendation for a new OpenBSD based firewalls. So far I have been using IBM x336s, but they are slowly approaching end of life. What I am after: * 1U i386/amd64 server, * 2 sockets, * RAID 1 SAS/SATA controller (2 hard drives are enough) * decent dual LAN

Re: Hardware (firewall) recommendation

2012-04-17 Thread Eric Oyen
there is a project that you can install an embedded version of openbsd on. its called the routerboard project. no need for power sapping drives, big screens and all that junk. I don't have the site on hand, but it is out there. -eric On Apr 16, 2012, at 11:58 PM, Marcin wrote: Hello, I am

Re: Hardware (firewall) recommendation

2012-04-17 Thread Henning Brauer
* Marcin mig...@gmail.com [2012-04-17 08:59]: I am looking for a hardware recommendation for a new OpenBSD based firewalls. So far I have been using IBM x336s, but they are slowly approaching end of life. What I am after: * 1U i386/amd64 server, * 2 sockets, what for? unless you run

after downgrade OpenBSD dmesg display wrong information

2012-04-17 Thread f5b
install OpenBSD 5.1 snapshot reinstall OpenBSD 5.0 release in the same machine then #dmesg output OpenBSD 5.1 (GENERIC.MP) #207: Sun Feb 12 09:42:14 MST 2012 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP RTC BIOS diagnostic error 11memory_size real mem = 4157599744

Re: after downgrade OpenBSD dmesg display wrong information

2012-04-17 Thread Otto Moerbeek
On Tue, Apr 17, 2012 at 03:57:02PM +0800, f5b wrote: install OpenBSD 5.1 snapshot reinstall OpenBSD 5.0 release in the same machine then #dmesg output OpenBSD 5.1 (GENERIC.MP) #207: Sun Feb 12 09:42:14 MST 2012 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP RTC

Re: Hardware (firewall) recommendation

2012-04-17 Thread Sebastian Reitenbach
On Tuesday, April 17, 2012 09:35 CEST, Henning Brauer lists-open...@bsws.de wrote: * Marcin mig...@gmail.com [2012-04-17 08:59]: I am looking for a hardware recommendation for a new OpenBSD based firewalls. So far I have been using IBM x336s, but they are slowly approaching end of life.

Re: Hardware (firewall) recommendation

2012-04-17 Thread Henning Brauer
* Sebastian Reitenbach sebas...@l00-bugdead-prods.de [2012-04-17 10:40]: On Tuesday, April 17, 2012 09:35 CEST, Henning Brauer lists-open...@bsws.de wrote: * Marcin mig...@gmail.com [2012-04-17 08:59]: I am looking for a hardware recommendation for a new OpenBSD based firewalls. So

Compiling non-ports application from source

2012-04-17 Thread Laurence Rochfort
Hello, I've moved from Debian to OpenBSD as my main OS a short while ago and have come across my first situation where a piece of software is not available in packages or ports. Specifically, I'm following the book Seven Languages in Seven Weeks:

Re: Compiling non-ports application from source

2012-04-17 Thread Jan Stary
On Apr 17 10:10:27, Laurence Rochfort wrote: Hello, I've moved from Debian to OpenBSD as my main OS a short while ago and have come across my first situation where a piece of software is not available in packages or ports. Specifically, I'm following the book Seven Languages in Seven

Re: Compiling non-ports application from source

2012-04-17 Thread Laurence Rochfort
:D Thanks for the permission to compile, Jan! I was thinking more of allowances I might have to make for compiling software developed with GNU in mind on OpenBSD. Or am I just looking at it the wrong way? I guess I'll just suck it and see. I'll also have a crack at creating a port. Many

Re: Hardware (firewall) recommendation

2012-04-17 Thread Sebastian Reitenbach
On Tuesday, April 17, 2012 10:47 CEST, Henning Brauer lists-open...@bsws.de wrote: * Sebastian Reitenbach sebas...@l00-bugdead-prods.de [2012-04-17 10:40]: On Tuesday, April 17, 2012 09:35 CEST, Henning Brauer lists-open...@bsws.de wrote: * Marcin mig...@gmail.com [2012-04-17

Re: Hardware (firewall) recommendation

2012-04-17 Thread Henning Brauer
* Sebastian Reitenbach sebas...@l00-bugdead-prods.de [2012-04-17 11:45]: On Tuesday, April 17, 2012 10:47 CEST, Henning Brauer lists-open...@bsws.de wrote: * Sebastian Reitenbach sebas...@l00-bugdead-prods.de [2012-04-17 10:40]: On Tuesday, April 17, 2012 09:35 CEST, Henning Brauer

Re: Hardware (firewall) recommendation

2012-04-17 Thread Sebastian Benoit
Henning Brauer(lists-open...@bsws.de) on 2012.04.17 11:52:49 +0200: I thought about being able to power cycle the machine when it freezes that hard, when it may not drop into ddb. Otherwise yes, serial console would suffice, even rebooting from within ddb. I hope it may not happen at

Re: Compiling non-ports application from source

2012-04-17 Thread Marc Espie
On Tue, Apr 17, 2012 at 10:41:52AM +0100, Laurence Rochfort wrote: :D Thanks for the permission to compile, Jan! I was thinking more of allowances I might have to make for compiling software developed with GNU in mind on OpenBSD. Or am I just looking at it the wrong way? I guess I'll

Re: Compiling non-ports application from source

2012-04-17 Thread Marc Espie
On Tue, Apr 17, 2012 at 12:30:18PM +0200, Marc Espie wrote: If you really want to look at things, compiling the port is very easy, though it will usually take longer (sometimes much longer for monsters like libreoffice). It's as stupid as cd /usr/ports/lang/swi-prolog make install Most

Re: Compiling non-ports application from source

2012-04-17 Thread Laurence Rochfort
Thank you everyone for the kind advice. I think I have a correct understanding of packges/ports and shall double check if what I need isn't already there. I'm meant to be working right now, ahem, so I'll investigate further when I get home and try to work this out myself. Is this the correct

Re: Hardware (firewall) recommendation

2012-04-17 Thread Sebastian Reitenbach
On Tuesday, April 17, 2012 12:15 CEST, Sebastian Benoit benoit-li...@fb12.de wrote: Henning Brauer(lists-open...@bsws.de) on 2012.04.17 11:52:49 +0200: I thought about being able to power cycle the machine when it freezes that hard, when it may not drop into ddb. Otherwise yes,

Re: Compiling non-ports application from source

2012-04-17 Thread Sebastian Reitenbach
On Tuesday, April 17, 2012 12:42 CEST, Laurence Rochfort laurence.rochf...@gmail.com wrote: Thank you everyone for the kind advice. I think I have a correct understanding of packges/ports and shall double check if what I need isn't already there. I'm meant to be working right now,

Re: VPN on OpenBSD: OpenSSH or OpenVPN?

2012-04-17 Thread mxb
On 04/16/2012 09:35 PM, Kostas Zorbadelos wrote: Hello all, if this has been discussed in the past, forgive my asking and please point me to the archives. I am interested in building a server VPN solution for a sensitive corporate LAN. The use case is travelling, roaming users who just want a

Re: PPPoE for IPv6

2012-04-17 Thread Kostas Zorbadelos
David Diggles da...@elven.com.au writes: Hello, we provide pilot native dual stack access in Greece. One of our users has contributed the setup described in this link: http://ipv6.ote.gr/?page_id=74lang=en Prefix delegation is being done through DHCPv6 and we provide one /56 per user. Hope

tables behavior with in bracket anchor

2012-04-17 Thread Michel Blais
I'm using 5.0 and I saw a strange behavior with table and in bracket anchor. From my test, in bracket anchor can't have tables inside of them and are using the main ruleset tables but if I create a table only use by rule inside of a in bracket anchors, pf will see no rule using the table and

Re: PPPoE for IPv6

2012-04-17 Thread David Diggles
Thanks Kostas! This is very helpful. I have not yet got it working, but I think I am getting there. I now have an inet6 address on the pppoe0 interface. From my ISPs documentation, it seems I need to install the wide-dhcpv6 package.

Relayd redirect does not work under high packet rate suddenly

2012-04-17 Thread Joerg Streckfuss
Hi list, since an Upgrade to 5.0 of our pf-cluster we encoutered connection problems of one of our webservers under high packet rate. We messured a load of about 6 million and more hits per day. The webserver serves little static content around a few KByte. I'm not really sure if this

Re: tables behavior with in bracket anchor

2012-04-17 Thread Henning Brauer
* Michel Blais mic...@targointernet.com [2012-04-17 16:52]: I'm using 5.0 and I saw a strange behavior with table and in bracket anchor. From my test, in bracket anchor can't have tables inside of them and are using the main ruleset tables but if I create a table only use by rule inside of a

Re: Hardware (firewall) recommendation

2012-04-17 Thread Marcin
On 17 April 2012 09:35, Henning Brauer lists-open...@bsws.de wrote: * Marcin mig...@gmail.com [2012-04-17 08:59]: What I am after: * 2 sockets, what for? unless you run extremely heavy userland proxies, you don't get much (any) benefit, especially given that the one-socket machines are

Re: Hardware (firewall) recommendation

2012-04-17 Thread Henning Brauer
* Marcin mig...@gmail.com [2012-04-17 18:11]: On 17 April 2012 09:35, Henning Brauer lists-open...@bsws.de wrote: * Marcin mig...@gmail.com [2012-04-17 08:59]: What I am after: * 2 sockets, what for? unless you run extremely heavy userland proxies, you don't get much (any) benefit,

Re: Hardware (firewall) recommendation

2012-04-17 Thread Sevan / Venture37
On 17/04/2012 08:35, Henning Brauer wrote: I'm very happy with Supermicro X9SC* based systems, with Xeon E3-1220 and an Intel SSD. Check with your local supplier for exact model options. Superior performance, 35W idle, no trouble whatsoever, fair pricing. +1 Have a pair of X9SCM-F-O with

Re: Hardware (firewall) recommendation

2012-04-17 Thread Claudio Jeker
On Tue, Apr 17, 2012 at 10:39:56AM +0200, Sebastian Reitenbach wrote: On Tuesday, April 17, 2012 09:35 CEST, Henning Brauer lists-open...@bsws.de wrote: * Marcin mig...@gmail.com [2012-04-17 08:59]: I am looking for a hardware recommendation for a new OpenBSD based firewalls. So far

Curso de Administración y Optimización del Tiempo Ultimos Lugares

2012-04-17 Thread Yahel Medina
!Muy Importante! Si no puede visualizar correctamente este correo, le pedimos que lo arrastre a su Bandeja de Entrada Apreciable Ejecutivo: Le Recordamos que el exitoso curso de: Administracisn y Optimizacisn del Tiempo Esta Programado para el dma: 26 de Abril de 2012 en la Ciudad de Mixico

Re: Hardware (firewall) recommendation

2012-04-17 Thread Sebastian Reitenbach
On Tuesday, April 17, 2012 21:04 CEST, Claudio Jeker cje...@diehard.n-r-g.com wrote: On Tue, Apr 17, 2012 at 10:39:56AM +0200, Sebastian Reitenbach wrote: On Tuesday, April 17, 2012 09:35 CEST, Henning Brauer lists-open...@bsws.de wrote: * Marcin mig...@gmail.com [2012-04-17

Re: Compiling non-ports application from source

2012-04-17 Thread Stuart Henderson
On 2012-04-17, Laurence Rochfort laurence.rochf...@gmail.com wrote: I believe Io and Prolog are not in ports: http://www.openbsd.org/cgi-bin/cvsweb/ports/lang/?only_with_tag=OPENBSD_5_0#dirlist Can I just download the source for the above and compile as I would in Linux? Any guidance as to

Re: Hardware (firewall) recommendation

2012-04-17 Thread Stuart Henderson
On 2012-04-17, Marcin mig...@gmail.com wrote: * at least one/preferably two PCI-X slots to add one dual/couple of single fibre network cards usually PCIE on anything modern * IPMI 2.0 with out of band management if rs232 isn't enough, you want one with a dedicated nic on a secure management

Re: Compiling non-ports application from source

2012-04-17 Thread Alan Corey
On Tue, 17 Apr 2012, Jan Stary wrote: On Apr 17 10:10:27, Laurence Rochfort wrote: Hello, I've moved from Debian to OpenBSD as my main OS a short while ago and have come across my first situation where a piece of software is not available in packages or ports. Specifically, I'm following the