Re: Multi-domain DKIM signature with OpenSMTPd

2020-03-18 Thread Graeme Lee
On 19/03/2020 8:45 am, Martijn van Duren wrote: On 3/18/20 8:41 PM, Matthieu wrote: Le 18/03/2020 à 19:39, Hiltjo Posthuma a écrit : On Wed, Mar 18, 2020 at 06:23:30PM +0100, Matthieu wrote: Hi everybody I'm looking to use OpenDKIM with OpenSMTPd. Has anyone ever done it before ? My first

Re: opensmtpd forwarding sent mail and extras-pgsql

2019-06-05 Thread Graeme Lee
On 6/06/2019 6:50 am, Gilles Chehade wrote: On Mon, Jun 03, 2019 at 05:44:41PM +, Benny wrote: Hi, Hi, I am planning a mail server of opensmtpd and dovecot. I'd be glad to know if there is any way to save a copy of mail to dovecot's "Sent" mail box before relaying them out. sorry,

Re: IPSEC with Juniper SRX220

2015-09-30 Thread Graeme Lee
On 27-Sep 14:42, Alexandre Westfahl wrote: Hi, I have trouble configuring ipsec with my sokeris 6501 (OBSD 5.7) with a carrier router (Juniper). SA seems to work well, I see packets going out on em0 and also see them on enc0. However, the other side said nothing come but they also see SA

Re: Does OpenBGPd suffer collateral damage with this?

2014-08-17 Thread Graeme Lee
The cause is Cisco routers with a max 512k entries in their FIB on some older units. http://www.bgpmon.net/what-caused-todays-internet-hiccup/ Graeme On 18-Aug 10:27, Rod Whitworth wrote: http://www.smh.com.au/technology/technology-news/how-flakey-is-the-inter net-20140816-104t8p.html I

Re: USB mouse

2011-10-26 Thread Graeme Lee
On 27/10/2011 10:22 AM, Zantgo wrote: WTF? I use OpenBSD and hate the other operating systems Zantgo It's like this: Ask a stupid question, get a stupid answer. El 26-10-2011, a las 20:11, Bryan Irvinesparcta...@gmail.com escribiC3: On Wed, Oct 26, 2011 at 3:52 PM, Zantgozan...@gmail.com

Re: Howto set an IPv6 route?

2011-04-20 Thread Graeme Lee
route add -inet6 2a00:1ff8:101:: -prefixlen 48 2a00:1ff8:102:ac01::1 Have a look at /etc/netstart for some guidance On 21/04/2011 9:57 AM, Roger Schreiter wrote: Hello, I tried: route add -inet6 2a00:1ff8:101::/48 2a00:1ff8:102:ac01::1 and got: route: 2a00:1ff8:101::/48: bad value I do

Re: Easy money with OpenBSD OpenBGPd?

2010-03-13 Thread Graeme Lee
FreeBSD and Linux The routing is done on FreeBSD. UI on Linux It's hardly rocket science either. It could easily be done on OpenBSD, but we would need to add a strip private or similar to make it implementable. On 14/03/2010 2:24 AM, Sevan / Venture37 wrote: Hi guys, I was reading the

Re: VLANs, OpenBSD, Cisco HP

2010-01-14 Thread Graeme Lee
On 14/01/2010 5:33 PM, James Peltier wrote: --- On Thu, 1/14/10, James Peltierjames_a_pelt...@yahoo.ca wrote: /etc/hostname.vlan301 -- inet 1.2.3.4 255.255.255.0 NONE vlandev em0 description Uplink Please note that I've typed this wrong and it actually has inet

Re: VLANs, OpenBSD, Cisco HP

2010-01-14 Thread Graeme Lee
On 15/01/2010 3:13 AM, James Peltier wrote: --- On Thu, 1/14/10, Graeme Leegra...@omni.net.au wrote: From: Graeme Leegra...@omni.net.au Subject: Re: VLANs, OpenBSD, Cisco HP To: misc@openbsd.org Received: Thursday, January 14, 2010, 3:27 AM inet 1.2.3.4 255.255.255.0 NONE vlan

Re: VLANs, OpenBSD, Cisco HP

2010-01-14 Thread Graeme Lee
On 15/01/2010 1:25 PM, Stuart Henderson wrote: On 2010-01-15, Graeme Leegra...@omni.net.au wrote: Either syntax works. However, had a re-read of your initial email, and you were missing the vlan 301 in your configuration line. It's no longer necessary, it defaults to the number

Re: bgpd fails to install ipv6 routes in kernel routing table

2009-02-09 Thread Graeme Lee
Claudio Jeker wrote: On Mon, Feb 09, 2009 at 04:51:12PM +1100, Graeme Lee wrote: Graeme Lee wrote: Graeme Lee wrote: tico wrote: Graeme Lee wrote: tico wrote: Graeme Lee wrote: snip Ok forget bgp configs

Re: bgpd fails to install ipv6 routes in kernel routing table

2009-02-09 Thread Graeme Lee
Claudio Jeker wrote: On Mon, Feb 09, 2009 at 11:43:10AM +0100, Claudio Jeker wrote: On Mon, Feb 09, 2009 at 02:22:08AM -0800, patrick keshishian wrote: On Mon, Feb 9, 2009 at 12:53 AM, Claudio Jeker cje...@diehard.n-r-g.com wrote: On a hunch, I tried a 64bit and a 32 bit

Re: bgpd fails to install ipv6 routes in kernel routing table

2009-02-08 Thread Graeme Lee
Rogier Krieger wrote: On Sun, Feb 8, 2009 at 02:09, Graeme Lee gra...@omni.net.au wrote: The bgpd log shows this: bgpd: send_rtmsg: action 1, prefix 2001:dc8:c000::/36: Network is unreachable bgpd: send_rtmsg: action 1, prefix 2a01:a8::/32: Network is unreachable for every network received

Re: bgpd fails to install ipv6 routes in kernel routing table

2009-02-08 Thread Graeme Lee
tico wrote: Graeme Lee wrote: snip Network layout is somewhat complicated. 1 x ebgp and 1 x ibgp session receive ipv4 world tables. Gif tunnel to a hurricane router in Hong Kong. I'm receiving ipv6 world bgp tables from this peer. Connectivity to the peer is fine. Just can't get past

Re: bgpd fails to install ipv6 routes in kernel routing table

2009-02-08 Thread Graeme Lee
tico wrote: Graeme Lee wrote: tico wrote: Graeme Lee wrote: snip Network layout is somewhat complicated. 1 x ebgp and 1 x ibgp session receive ipv4 world tables. Gif tunnel to a hurricane router in Hong Kong. I'm receiving ipv6 world bgp tables from this peer. Connectivity

Re: bgpd fails to install ipv6 routes in kernel routing table

2009-02-08 Thread Graeme Lee
Graeme Lee wrote: tico wrote: Graeme Lee wrote: tico wrote: Graeme Lee wrote: snip Network layout is somewhat complicated. 1 x ebgp and 1 x ibgp session receive ipv4 world tables. Gif tunnel to a hurricane router in Hong Kong. I'm receiving ipv6 world bgp tables from this peer

Re: bgpd fails to install ipv6 routes in kernel routing table

2009-02-08 Thread Graeme Lee
Graeme Lee wrote: Graeme Lee wrote: tico wrote: Graeme Lee wrote: tico wrote: Graeme Lee wrote: snip Network layout is somewhat complicated. 1 x ebgp and 1 x ibgp session receive ipv4 world tables. Gif tunnel to a hurricane router in Hong Kong. I'm receiving ipv6 world bgp tables

bgpd fails to install ipv6 routes in kernel routing table

2009-02-07 Thread Graeme Lee
Hi all. I'm having problems with ipv6 on openbgpd, in that it isn't installing received ipv6 routes into the kernel's routing table. It receives them. I can advertise my own prefix just fine. But netstat -rnf inet6 shows only the basic static table. The bgpd log shows this: bgpd:

Re: OpenBGPD Flaps, 32bit ASn in the wild.

2008-12-11 Thread Graeme Lee
tico wrote: Claudio Jeker wrote: On Wed, Dec 10, 2008 at 04:47:31PM -0500, Ted Unangst wrote: On Wed, Dec 10, 2008 at 4:38 PM, Claudio Jeker cje...@diehard.n-r-g.com wrote: I looked at the porblem and I'm currently unsure what the best way is to handle such bad AS4_* attributes. The

Re: bgpd extension handling capabilities

2008-09-04 Thread Graeme Lee
I have applied the patch supplied by Henning, and now get the following in my bgpctl show neighbor Neighbor capabilities: Multiprotocol extensions: IPv4 Unicast (previously was unknown (128)) yes, with my patch, we simply ignore the annoucement and show the default. Can this

Re: bgpd extension handling capabilities

2008-08-25 Thread Graeme Lee
Henning Brauer wrote: * Claudio Jeker [EMAIL PROTECTED] [2008-08-25 17:27]: On Mon, Aug 25, 2008 at 03:54:27PM +0200, Henning Brauer wrote: * Graeme Lee [EMAIL PROTECTED] [2008-08-25 03:28]: Yes but the safi's are handled during capability negotiation (in function

Re: bgpd extension handling capabilities

2008-08-24 Thread Graeme Lee
Henning Brauer wrote: * Graeme Lee [EMAIL PROTECTED] [2008-08-21 03:31]: Henning Brauer wrote: * Graeme Lee [EMAIL PROTECTED] [2008-08-21 01:51]: I've had to connect to a new upstream peer which is advertising an IPv4 safi of 128 (MPLS-labelled VPN address) see http

bgpd extension handling capabilities

2008-08-20 Thread Graeme Lee
I've had to connect to a new upstream peer which is advertising an IPv4 safi of 128 (MPLS-labelled VPN address) see http://www.iana.org/assignments/safi-namespace I've modified the source to temporarily ignore this (actually anything over 127) as it currently only accepts 1 thru 3. Once the

Re: bgpd extension handling capabilities

2008-08-20 Thread Graeme Lee
Henning Brauer wrote: * Graeme Lee [EMAIL PROTECTED] [2008-08-21 01:51]: I've had to connect to a new upstream peer which is advertising an IPv4 safi of 128 (MPLS-labelled VPN address) see http://www.iana.org/assignments/safi-namespace I've modified the source to temporarily ignore

Re: rc.local command for postgres

2006-10-20 Thread Graeme Lee
David B. wrote: trying to get postgres to start up at boot. found this at postgresql's site On OpenBSD, add the following lines to the file /etc/rc.local: if [ -x /usr/local/pgsql/bin/pg_ctl -a -x /usr/local/pgsql/bin/postmaster ]; then su - -c '/usr/local/pgsql/bin/pg_ctl start -l

Re: t-shirts

2006-03-14 Thread Graeme Lee
frantisek holop wrote: hi there, it is not my intention to pick a fight again about t-shirts, size, color, etc. but i was just wondering... the other day i went out in my puffy wireframe t-shirt and people who never heard of openbsd noticed it and expressed how nice and catchy it was. My

Re: Squid not starting on boot with ADSL

2006-02-28 Thread Graeme Lee
Luke Fogarty wrote: Hi Since moving from Cable to DSL, squid no longer starts on boot. I have the following entry in /etc/rc.local #start squid if [ -f /usr/local/squid/sbin/squid ]; then echo -n ' Squid' /usr/local/sbin/squid I've also tried just having

Re: Binat and if-bound

2005-12-18 Thread Graeme Lee
Jason Dixon wrote: I'm working with a fairly sizable ruleset with a lot of inter-VLAN routing, so I've chosen to implement if-bound stateful tracking with anchors and tagging. For some reason, PF is failing to route the binat traffic to the internal host. In a typical case, the firewall

Re: radius on openbsd

2005-11-10 Thread Graeme Lee
man Chan wrote: Hello, I would like t know where can I get the authentication users using LDAP via Radius as it seems unavailable at the openbsd journel. Any pointers ? Thanks. Not sure about the ones in the ports tree, but freeradius works well http://www.freeradius.org/

Re: Shared memory / SQL

2005-08-20 Thread Graeme Lee
Fine. If the pg team want to call their shared memory space a disk buffer, let them. And you can too. Anything committed to disk still has to traverse the os disk cache. So in reality, it depends upon how you balance parameters such as your os disk cache and your sql disk cache etc etc. I

Re: Shared memory / SQL

2005-08-19 Thread Graeme Lee
Adam wrote: On Fri, 19 Aug 2005 15:01:12 +1000 Graeme Lee [EMAIL PROTECTED] wrote: I think I was talking about the disk buffer, not the shared buffer. You said it uses the os disk buffer and doesn't maintain its own. its own disk buffer Everything that reads data from

Re: Shared memory / SQL

2005-08-19 Thread Graeme Lee
Adam wrote: On Fri, 19 Aug 2005 17:08:36 +1000 Graeme Lee [EMAIL PROTECTED] wrote: This is very much off topic, but you seem to be misunderstanding me. The shared buffer is used by all the postmaster processes as a shared memory pool for selects/inserts/updates on the table space

Re: Shared memory / SQL

2005-08-18 Thread Graeme Lee
David Hill wrote: Hello - I need to build a server that will run PostgreSQL 8, handling up to 150 connections. The current database size is roughly 2GB now with 2.8 million rows in it's biggest table. This is expected to continue to grow steadily over time. The hardware I have to work with

Re: Shared memory / SQL

2005-08-18 Thread Graeme Lee
Adam wrote: On Fri, 19 Aug 2005 12:28:20 +1000 Graeme Lee [EMAIL PROTECTED] wrote: Postgresql uses the os disk buffer. It does not maintain its own. Yes it does. Postgresql uses a shared buffer cache, and increasing the number of shared buffers in your postgresql.conf can make

Re: 2 internet links

2005-08-14 Thread Graeme Lee
Roberto Pereyra wrote: Hi Look http://www.openbsd.org/faq/pf/es/pools.html Or you could potentially use the route-to option eg pass in on $link1_if reply-to ($link1_if $link1_defroute) proto icmp keep state pass in on $link2_if reply-to ($link2_if $link2_defroute) proto icmp keep state

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Graeme Lee
Rod.. Whitworth wrote: Somebody sent me a query asking for a justification for my proposal to supply a firewall/router using OpenBSD when there was thsi device: http://www.dlink.com/products/?pid=327 , with all its claimed bells and whistles. Well, I we connected a new client with straight

Re: ADSL connection (PPPoE)

2005-06-14 Thread Graeme Lee
Clint Pachl wrote: Is there any issues I should consider before buying this modem? Will it work with Open3.7? I know it works fine with Linux. I highly doubt there will be any issues. The communication between the switch (built-in to the modem) and your OpenBSD box uses the TCP/IP