ESXi virtual switch and vic driver, asynchronous speeds

2013-06-09 Thread Fil DiNoto
I am seeking advice in regards to OpenBSD and the vic driver on ESXi server. I currently lease a physical ESXi server. One of the VMs is an OpenBSD 5.0 system which is configured as a router and serves as a gateway for all the other VMs. This configuration has many advantages for me because it giv

Re: Shell for PF

2013-02-16 Thread Fil DiNoto
am not but I understand the value of an open platform. I suppose that alone is enough to make the shoes vs 737 comparison, but I'm asking along the lines of things you can do simply through configuration. On Sat, Feb 16, 2013 at 9:20 AM, Matthew Weigel wrote: > On Feb 16, 2013, at 5:

Re: Shell for PF

2013-02-15 Thread Fil DiNoto
p there! > > So, I don't think you are really understanding what you are asking I think. > > > On 2/15/13 11:05 PM, Fil DiNoto wrote: >> I was drawing from situations where we implemented hardware from a >> less well known vendor that has a completely different conf

Re: Shell for PF

2013-02-15 Thread Fil DiNoto
I was drawing from situations where we implemented hardware from a less well known vendor that has a completely different configuration style than what most people are used to. We end up having more outages caused by human error to the point where the equipment gets a bad reputation. Unfortunately

Re: Shell for PF

2013-02-15 Thread Fil DiNoto
Thanks for the reply Theo, big fan of OpenBSD Someone referred me to NSH which is exactly what I was thinking of. It even incorporates ifconfig so you can do all the layer 2 stuff which is more than I was hoping for. Can't wait to play with it. I know exactly what you mean about the hardware diffe

Shell for PF

2013-02-15 Thread Fil DiNoto
I was wondering why nobody has ever created a shell for pf so that you could manipulate it in a way similar to JunOS instead of editing pf.conf. Also show / monitor commands. Hierarchical edit mode, stuff like that.

Speeding up scp over 10GigE, suggestions?

2012-07-19 Thread Fil DiNoto
I noticed a huge difference in SCP speeds by changing the client. For example the client WinSCP is much slower than FileZilla. I am uncertain if there is any significant difference between SCP and SFTP protocols (I think SCP2 is SFTP). I know both are handled by the SSH server. On Thu, Jul 19, 2

Re: "simple" PF rule? redirect port without touching address

2012-07-19 Thread Fil DiNoto
;> On 2012-07-09 10:17, Stuart Henderson wrote: >>> On 2012-07-09, Fil DiNoto wrote: >>>> But i was wondering if I could achieve something that would work for >>>> ALL the addresses behind the router as well without creating >>>> individual rules fo

"simple" PF rule? redirect port without touching address

2012-07-08 Thread Fil DiNoto
I am trying to achieve something I thought would be simple, but haven't had any luck. I have an OpenBSD 5.0 router/firewall with public IP X.X.X.A Behind it are a mix of OpenBSD and Linux systems, all with public IP. NO NAT. I run ssh on an alternate port, XXX22. However, from a certain locatio