isakmpd(8) + gre(4) reproducible crash

2005-10-28 Thread Brian A. Seklecki
per some previous remarks(1), i was able to get two i386 boxes in a lab to crash but not panic and core out, makit it impossible to debug this problem. two i386 machines in the config below would just "reset back to the bios", as if the reset button had been tapped. the problem occurs when tw

Re: isakmpd - Single Phase 1 - Multiple Phase 2 Address

2005-10-27 Thread Brian A. Seklecki
This is confirmed to work? I suppose that would resolve part of my problem with 4314/system ~BAS On Thu, 2005-10-27 at 05:02, Runo Forrisdahl wrote: > On Wed, Oct 26, 2005 at 02:40:52PM -0400, Roy Morris wrote: > | I have been reading through the archives but have not found a reliable > answer

Notes on RAID1 Root Tutorial Adaption

2005-10-26 Thread Brian A. Seklecki
...a while back, i wrote a tutorial for RAIFRame RAID1 as a root FS on NetBSD. I used the "bootstrap" method. Sometime not soon after, NetBSD added RAIDFrame to the INSTALL* kernels and presumably menus to sysinst, mitigating the need for this approach. the boostrap process is: *) do a basi

Re: "keep state" and PF Queues

2005-10-21 Thread Brian A. Seklecki
name exists on the given interface, we do so, otherwise it goes to the default queue. * Brian A. Seklecki <[EMAIL PROTECTED]> [2005-10-21 17:59]: I was just curious if any of the developers (or experts) would care to articulate officially >:} ~BAS On Wed, 19 Oct 2005, William Bloom wrote:

Re: Statefull VPN failover a fork from "Re: iptables vs pf"

2005-10-21 Thread Brian A. Seklecki
More to the point, "how to find this info". 1: Go to http://www.openbsd.org/cgi-bin/man.cgi 2: click "apropos" 3: make sure "current" is selected 4: query "sync" 5: click on "sasynchd(8)" and "sasychd.conf(5)" http://www.openbsd.org/cgi-bin/man.cgi?query=sasyncd&sektion=8&apropos=0&manpath=OpenB

Re: passwd: /sbin/nologin --- not working for me

2005-10-21 Thread Brian A. Seklecki
You said you "entered" into those files. Did you vi(1) them mnaually? Did you rebuild the database afterward? When you finger the user, what does the shell show up as? Use either vipw(8) as root, to do this, or use chfn(1) as the user. ~BAS On Fri, 21 Oct 2005, morla wrote: hello all, i

Re: Carp / VLAN and net.inet.carp.preempt=1

2005-10-21 Thread Brian A. Seklecki
On Fri, 21 Oct 2005, Xavier Beaudouin wrote: Hello there, I have 2 openbsd box (that does as well openbgpd but this is not the aim of this mail). Question is that any problems to do sysctl net.inet.carp.preempt=1 and ifconfig em0 up ifconfig vlan0 vlan 11 vlandev em0 Each machine must hav

Re: "keep state" and PF Queues

2005-10-21 Thread Brian A. Seklecki
t the FAQ contains > an > example much as you describe (as I recall, specifying a queue for -incoming- > traffic will indeed cause that traffic to be processed through the named queue > as it is -outgoing-). > > > Bill > > Brian A. Seklecki wrote: >> Would anyone

Dell PowerEdge SC1420 w/ CERC SATA 2S RAID

2005-10-20 Thread Brian A. Seklecki
For the record, these systems run 3.7/i386 rock solid. Just forget entirely about using the "Software Assist RAID" support on the motherboard and use RAIDFrame instead. In the BIOS, you can toggle it between "RAID" and "NON-RAID" mode, but it makes no difference. The kernel probes it just the

Re: em(4) problems with -current

2005-10-19 Thread Brian A. Seklecki
On Wed, 19 Oct 2005, Theo de Raadt wrote: Someone with one of these problematic cards should put it in the It isn't so much a bug; more so a caveat of Dell's implenentation. Maybe you can order PowerEdge 1850s w/o a hardware IPMI implementation, but I don't think it's an issue that warrants

Re: em(4) problems with -current

2005-10-19 Thread Brian A. Seklecki
I'll double check this today and verify. Will the IPMI on the motherboard only work with the onboard ethernet controllers, or will it get its grubby little hands on any/all controllers it finds? If it only The IPMI configuration screen gives you the option of configuring which Interface to bi

Re: em(4) problems with -current

2005-10-19 Thread Brian A. Seklecki
The Intel IPMI on the motherboard may be to blame. It's always up/on and listening. Also, see my thread in freebsd-questions@ about Dells with Intel em(4) and Dell PowerEdge switches w/ NIC Teaming, 802.3ad, ng_many2_one, etc. For example, traffic sent from the IPMI IP/MAC of the interface i

"keep state" and PF Queues

2005-10-19 Thread Brian A. Seklecki
Would anyone like to elaborate on the impacts of using "keep state" on conjunction with pass rules that assign traffic to queues? One might assume that inverted traffic flows would also be queued, however that would break the "traffic can only be queued egress an interface" rule... There sho

Re: Sun Ultra 5 as a firewall?

2005-10-07 Thread Brian A. Seklecki
On Fri, 7 Oct 2005, Joe S wrote: Is anyone on the list running an Ultra 5 as firewall? I would like to move my firewall from an overpowered P4-3GHz box to a Sun Ultra 5 360MHz. My main concern is wondering if the Ultra 5 is slow enough to become a bottleneck from one interface to another inte

Re: /etc/hostname.if convention

2005-10-07 Thread Brian A. Seklecki
It's a solaris/sunos thing ~BAS On Fri, 2005-10-07 at 04:16, Stephan A. Rickauer wrote: > Hello, > > can anyone tell me, whether the current naming convention of > /etc/hostname.if is because of history of /etc/hostname (which has been > extended) or if there are other reasons. I am just cu

Shared Queues / Queuing on Multiple Interfaces

2005-10-06 Thread Brian A. Seklecki
--- Date: Mon, 3 Oct 2005 11:28:24 -0400 (EDT) From: Brian A. Seklecki <[EMAIL PROTECTED]> To: Henning Brauer <[EMAIL PROTECTED]> Cc: misc@openbsd.org, Tony Sarendal <[EMAIL PROTECTED]>, jared r r spiegel <[EMAIL PROTECTED]>, Seamus Wassman <[EMAIL PROTECTED]>

Queing on Multiple Interfaces Revisited (WAS: Re: matching queues in both directions with stateful rulesets)

2005-10-03 Thread Brian A. Seklecki
with an Interface, i.e., the "ingress/egress" queue for matching traffic switched from interface-to-interface. We keep saying, "you can't queue inbound", which makese sense. But you need a technique for queuing a "shared ingress" ~BAS > > -- > http://2suck.net/hhwl.html - http://www.bsws.de/ > Unix is very simple, but it takes a genius to understand the simplicity. > (Dennis Ritchie) > > -- l8r* -- ~ Brian A. Seklecki "From back in the heady days when 'Help Desk' meant nothing, 'Disk Quota' meant everything, and lives could be bought and sold for a couple of pages of laser printout...and frequently were."

Re: ntop

2005-10-01 Thread Brian A. Seklecki
What platform are you on? Are you compiling it from source? It works just fine in 3.7/i386. Just: bash-3.00# cd /usr/ports/net/ntop && make install clean If you insist on source, try looking at /usr/ports/net/ntop/patches/* Try reading about Ports in the FAQ. ~BAS On Thu, 2005-09-29 at 12

Re: Load Balancing

2005-10-01 Thread Brian A. Seklecki
So have him send the message pre-formatted to the list? HTML? How about just draw the diagram using ports/graphics/dia/* and export to PNG, post the URL? ~BAS On Fri, 2005-09-30 at 10:01, J.C. Roberts wrote: > On Fri, 30 Sep 2005 18:35:16 +0530, Manpreet Singh Nehra > <[EMAIL PROTECTED]> wrote:

Re: CARP/PFSYNC over USB is possible?

2005-09-22 Thread Brian A. Seklecki
On Mon, 29 Aug 2005, Vinicius Pavanelli Vianna wrote: I'm currently using an OpenBSD 3.7 as a firewall for my network, since this machines is a 1U rack I can't add an extra ethernet card to it, so I was looking for an alternative solution to use redundancy, since there are plenty of usb ports fr

Re: IPSec Routing / Multiple Subnets / GRE Revisited

2005-07-25 Thread Brian A. Seklecki
On Sat, 23 Jul 2005, Hans-Joerg Hoexer wrote: Hi, On Fri, Jul 22, 2005 at 06:43:34PM -0400, Brian A. Seklecki wrote: The URL: http://digitalfreaks.org/~lavalamp/openbsd_ipsec_generic.png Outlines the generic cookie-cutter configuration from vpn(8) with addressing changes. A couple of

Re: Raidframe and Raid Level -6-

2005-07-24 Thread Brian A. Seklecki
RAIDFrame hasn't been updated in two years... It's stable with the known supported levels. ~BAS On Sat, 2005-07-23 at 21:31, Mathias Mueller wrote: > Hello, > > I have a short question to the community... > > Does anybody have experience with raid level 6 on a raidframe software > raid? Is i

IPSec Routing / Multiple Subnets / GRE Revisited

2005-07-22 Thread Brian A. Seklecki
The URL: http://digitalfreaks.org/~lavalamp/openbsd_ipsec_generic.png Outlines the generic cookie-cutter configuration from vpn(8) with addressing changes. A couple of comments on that document: *) The output of 'netstat -rn -f encap' should probably be included at the end. *) ...possibl

Re: HP ProLiant DL140 serial consola installation

2005-06-30 Thread Brian A. Seklecki
The same behavior happens on Dell's serial console redirection. It happens when you boot FreeBSD too. As soon as the kernel starts output ANSI characters it goes dead. Dell lets you toggle between VT100/220 mode and ANSI mode, but it's unaffected. The kernel output just kills it. Dell has an o

RAID-1 Root + boot(8) on i386/amd64

2005-06-30 Thread Brian A. Seklecki
Please confirm that the following are applicable: * boot(8), biosboot(8), installboot(8), boot_i386(8) lack any support for booting off RAIDFrame volumes (a 13 line patch 22 months ago fixed this on the bother side of the isleb(r)). * No support is planned *

<    1   2   3