two strange problems with ntpd (OpenBSD 5.1)

2012-06-22 Thread Bahador NazariFard
#echo servers pool.ntp.org > /etc/ntpd.conf # ntpd this command never change local system time #ntpd -s change local system time but I have very strange problem in php #echo echo ''|php-5.3 above command never exit.

ifstated problem

2012-06-22 Thread Bahador NazariFard
#cat /etc/ifstated.conf net1 = '"ping -q -c1 -w1 172.16.200.11 >/dev/null" every 3' net2 = '"ping -q -c1 -w1 172.16.200.1 >/dev/null" every 3' init-state one state one { init { run "route delete default" run "route add default 172.16.200.11" } if ! $net1 { if $ne

authpf bug and solution

2012-06-26 Thread Bahador NazariFard
hi all unfortunately authpf does not delete nat state when user disconnected. I saw this problem and I couldnot find any good solution . It looks there is a bug in authpf . I wrote ksh script that can solve this problem in clean way. I think this can be very useful temporary solution until OpenBSD

Re: "Virtualizing" firewalling scenarios in one physical OpenBSD host

2012-07-04 Thread Bahador NazariFard
search about rdomain or VRF in openbsd these can solve your problem but you should do some work by hand (or brain) if you can design good plan you can solve your problem. route -exec, pfctl, rdomain, rtable may help you On Wed, Jul 4, 2012 at 11:59 AM, C. L. Martinez wrote: > Hi all, > > I wond

Re: authpf bug and solution

2012-07-07 Thread Bahador NazariFard
Hi Dear Friendhs Im sorry I looked for about this problem and its solution. but i couldn't find any solution. If you commited the fix how can I access fixed authpf. Im using OpenBSD 5.1. On Sat, Jul 7, 2012 at 7:51 PM, Henning Brauer wrote: > * Bahador NazariFard [2012-06-

Does OpenBSD have any plan to support Netmap framework?

2012-07-12 Thread Bahador NazariFard
Hi y'all. I have a question about netmap - a novel framework for fast packet I/O. Does OpenBSD have any plan to support Netmap framework? I also have a technical question about netmap and firewall relation. As I read and understand we can work with nic interface almost directly form user land by ne

Re: Broken pfctl ..... ? I not understand my

2012-07-26 Thread Bahador NazariFard
"block in quick on msk0 proto tcp *to* port ssh" whats this? "instead of above wrong statement, you can use "block in quick on msk0 proto tcp from any to any port ssh" On Tue, Jul 24, 2012 at 2:27 AM, Peter N. M. Hansteen wrote: > "hvom .org" writes: > > > I'm problem with pfctl and the syntax

Re: OT: Disadvantages of using virtual firewalls like OpenBSd

2010-11-23 Thread Bahador NazariFard
OK You are right. But you know in this case your security level is not higher than virtual machine. Because your security level in complex chained system is not higher than weakest point.In fact you are accepting the risk of using virtual machine. I think in this case if your virtual machine system

Re: OT: Disadvantages of using virtual firewalls like OpenBSd

2010-11-23 Thread Bahador NazariFard
At logical level who is responsible against layer two threats (vm or fw)? You are using virtual machine and its network drivers aren't you? I think it is so clear that in this solution health of VM is vital for your network. It seems you are concentrating and focus only about network layer vulne

OpenBSD 4.8 crash unexpectedly

2010-11-24 Thread Bahador NazariFard
Hi I am using of OpenBSD 4.8 as a firewall box but it is started to annoy me :(( My problem is OpenBSD crashes unexpectedly (specially when im not at my desk) How can I find the source of this problem. Also I have installed these packages: pkg_info -m clamav-0.96.1p0 virus scanner dansguard

Re: OpenBSD 4.8 crash unexpectedly

2010-11-24 Thread Bahador NazariFard
On Wed, Nov 24, 2010 at 6:35 PM, roberth wrote: > On Wed, 24 Nov 2010 18:21:14 +0330 > Bahador NazariFard wrote: > > > please help me :(( > > start by sending a full dmesg to the list. > sorry ! you are right! I forgot to include this important data. this is outp

Re: Advice on learning C as first language

2010-11-24 Thread Bahador NazariFard
I agree with Marco Peereboom He told "Learning C is easy; learning to using C right is the hard part. Read more code to learn from the experts." I think if you are sharp u can learn C during one week. But using C is not so easy. You should be able to think as a programmer. I think all parts of a

Re: ipsec vpn unexpected flow

2010-11-25 Thread Bahador NazariFard
On Fri, Nov 26, 2010 at 8:50 AM, Andrea Parazzini < a.parazz...@sirtisistemi.net> wrote: > Hi, > "from 10.1.0.0/16" is the network id that I would negotiate with the > remote > peer. > "(0.0.0.0/0)" is our real network, we have a lot of networks behind this > box. > We perform NAT on traffic leavi

OpenBSD 4.8 crash unexpectedly

2010-11-27 Thread Bahador NazariFard
Hi I am using of OpenBSD 4.8 as a firewall box but it is started to annoy me :(( My problem is OpenBSD crashes unexpectedly (specially when im not at my desk) How can I find the source of this problem. Also I have installed these packages: pkg_info -m clamav-0.96.1p0 virus scanner dansguard

Re: OpenBSD 4.8 crash unexpectedly

2010-11-27 Thread Bahador NazariFard
the problem. > > On Sat, Nov 27, 2010 at 12:39:40PM +0330, Bahador NazariFard wrote: > > Hi > > > > I am using of OpenBSD 4.8 as a firewall box but it is started to annoy > me > > :(( > > My problem is OpenBSD crashes unexpectedly (specially when im n

OpenBSD 4.8 crash unexpectedly (panic: trap type 6, code=0, pc=d056c5dd)

2010-11-29 Thread Bahador NazariFard
Hi , all dear friends My OpenBSD crashed and rebooted agian after panic: trap type 6, code=0, pc=d056c5dd. I am trying to find where is the origination of this problem but I could not find anything. I used from gdb and I run "file /var/crash/bsd.0" and " target kvm /var/crash/bsd.0.core" commands.

Re: PF subdomain filtering

2010-12-16 Thread Bahador NazariFard
Hi. I think squid is better solution in this case. you can taste it ! On Fri, Dec 17, 2010 at 2:51 AM, Rafal Brodewicz wrote: > Hi. > > How can I pass with PF traffic from all subdomains, for example > *.microsoft.com ? > > Thanks. > -- > Rafal Brodewicz > > -- Gula_Gula =;=; BNF

Re: route show

2010-12-20 Thread Bahador NazariFard
On Mon, Dec 20, 2010 at 11:52 AM, Cristiano Deana wrote: > 2010/12/20 lilit-aibolit : > > > I have a little problem with "route show" command. > > netstat -nr > > > after I type this command and press Enter on first machine - all is done: > > > But if I do it on second machine, output in console

Re: dd command on a compact flash

2011-04-20 Thread Bahador NazariFard
Hi I think dd is not a good solution for you. I suggest you visiting this link. http://www.nmedia.net/flashdist/flashdist-20090216.tar.gz flashdist.sh and growimg.sh in this package are very very usefull for you. you can write your new script ;) You should read and save partition table Then