On Sat, 22 Aug 2015 22:28:48 +0100
Fred wrote:
>Although the truly paranoid can check the signify key printed on
>their disks with the one on the OpenBSD website.
...unless of course they've poisoned your dns and are sending you to
an alternate site for just such an event... Maybe you should jus
point the finger at SW2 being the culprit (perhaps
>> not routing packets to the appropriate NIC port), even though power
>> cycling SW2 isn't sufficient to fix the problem?
>>
>> Any other thoughts?
>>
>> Devin
>
if logistically possible, and it might not be, temporarily remove sw2
from the equation, and plug ISP2 and FW-B into SW1. both ISPs will come
into the same unprotected switch, and both firewalls will transmit
through that switch.
still gags? it might be the CPE of ISP2, or might be some other subtle
config issue on the firewalls.
no gag? starting to look like it might be sw2
additionally, it might be informative to reverse it to try all traffic
through sw2 to see if that works as expected.
to me, it kinda smells like STP might be involved here somewhere.
--
Regards,
Christopher Barry
Random geeky fortune:
"I never let my schooling get in the way of my education."
-- Mark Twain
stay connected.
>>
>> --
>> Jack Woehr # "There's too much emphasis on things
>> Box 51, Golden CO 80402 # like pawn structure in modern chess.
>> http://www.softwoehr.com # Checkmate ends the game." - N. Shor
>
AFAICT, only the BI-
;uhid2 at uhidev1 reportid 3: input=0, output=0, feature=3
>uhid3 at uhidev1 reportid 5: input=0, output=0, feature=8
>uhid4 at uhidev1 reportid 6: input=0, output=0, feature=8
>ums1 at uhidev1 reportid 12: 1 button, tip
>wsmouse3 at ums1 mux 0
>uhid5 at uhidev1 reportid 13: input=13,
ouse2 at ums0 mux 0
>uhid0 at uhidev0 reportid 17: input=7, output=0, feature=3
>uhidev1 at uhub3 port 5 configuration 1 interface 1 "Tablet ISD-V4"
>rev 1.10 /1.39 addr 3
>uhidev1: iclass 3/0, 16 report ids
>uhid1 at uhidev1 reportid 2: input=0, output=0, feature=1
&
scapees in the New World? I mean, you guys did buy
Budweiser, just sayin...
Cheers
--
Regards,
Christopher Barry
Random geeky fortune:
The most disagreeable thing that your worst enemy says to your face does
not approach what your best friends say behind your back.
-- Alfred De Musset
oblem, but at least
>for my system I know for sure it's a firmware bug.
>
I have no clue here, but I'm interested about this. Is it possible the
BIOS is trying to identify the filesystem type, so it's save bios to
harddrive, or restore from harddrive, or other functionality that may
require disk access can work? they likely never tested on *bsd, so
the borken error path never got taken before? just throwing that out
there as it came to mind as a possibility. assumptions happen(TM)
--
Regards,
Christopher Barry
Random geeky fortune:
Protect from light.
On Thu, 29 Jan 2015 07:53:13 -0500
Nick Holland wrote:
>rsyncd_flags=""
>slowcgi_flags=
>unbound_flags=""
am I understanding correctly that in the snippet above, slowcgi will not
be started, while the other two (will|may) start with default flags?
On Fri, 30 Jan 2015 17:18:07 -0500
"Leclerc, Sebastien" wrote:
>> Rebooted fw2 at 3h02, fw1 kept master state, but had downtime until
>> 3h12 Rebooted fw1 at 3h15, got downtime until 4h10, fw1 got master
>> state at 3h16, fw2 got backup state at the same time
>>
>
>Inspecting further my logs, I
On Thu, 29 Jan 2015 20:56:50 +0100
fRANz wrote:
>Hello guys,
>I implemented this config:
>
>http://home.nuug.no/~peter/pf/newest/log2syslog.html
>
>in order to stream pf logs to a remote machine.
>If I add the command:
>
>sudo nohup tcpdump -n -v -l -q -n -e -ttt -i pflog0 action block |
>logger
On Tue, 27 Jan 2015 12:01:37 -0500
"Leclerc, Sebastien" wrote:
>Hi,
>
>I have two firewalls in a carp failover setup, but the failover does
>not work as expected... The problem happens when I reboot the backup
>firewall (while in backup state). Just after the reboot, I have these
>entries in dmes
Greetings,
Looking for recommendations for a good small device with the following:
* 4GbE interfaces
* external USB
* external serial port
* can run obsd well
I've checked out the Soekris stuff, but wondering what else people use
and like.
--
Regards,
-C
On Fri, 2 Jan 2015 18:36:38 +
skin...@britvault.co.uk (Craig Skinner) wrote:
>On 2015-01-02 Fri 13:06 PM |, Christopher Barry wrote:
>> #!/bin/bash
>>
>
>OpenBSD has much better ksh(1)
>
>A simple rdist(1) cronjob might do it.
>
>e.g: http://www.benedikt-s
ions. You'll write
a more complete and robust one of course, but you can see the idea here.
You may want to consider automounting everyone's $HOME from a network
location as well, so everyone's stuff is available everywhere. Doing
that securely is a matter for additional debate tho
On Mon, 29 Dec 2014 20:19:12 -0800
Rusty wrote:
>On 12/29/14 08:17, Christopher Barry wrote:
>> Greetings All,
>>
>> I've used OpenBSD in the past to build redundant routers and
>> firewalls and it was fantastic, but it's been quite a few years
>> sinc
On Mon, 29 Dec 2014 20:57:15 +
Fred wrote:
>On 12/29/14 17:45, Christopher Barry wrote:
>> On Mon, 29 Dec 2014 09:29:15 -0800
>> Ryan Freeman wrote:
>>
>>> On Mon, Dec 29, 2014 at 11:17:55AM -0500, Christopher Barry wrote:
>>>> Greetings All,
>&g
On Mon, 29 Dec 2014 09:29:15 -0800
Ryan Freeman wrote:
>On Mon, Dec 29, 2014 at 11:17:55AM -0500, Christopher Barry wrote:
>> Greetings All,
>>
>> I've used OpenBSD in the past to build redundant routers and
>> firewalls and it was fantastic, but it's been q
Greetings All,
I've used OpenBSD in the past to build redundant routers and firewalls
and it was fantastic, but it's been quite a few years since I've played
with it. I've also never used it as my default workstation. Yet.
I've always used Debian GNU/Linux on my workstations in the past,
but with
18 matches
Mail list logo
