Re: Starting PF

2006-11-29 Thread Melameth, Daniel D.
Robert C Wittig wrote: > > verify that your /etc/rc.conf contains: > > local_rcconf="/etc/rc.conf.local" > > [ -f ${local_rcconf} ] && . ${local_rcconf} # Do not edit this line > > Yes, I checked and these lines were in rc.conf, and I also noticed > that rc.conf had a line: > > pf=NO > > ...so

Re: Starting PF

2006-11-29 Thread Melameth, Daniel D.
Do the last few lines of /etc/rc.conf look like the following? local_rcconf="/etc/rc.conf.local" [ -f ${local_rcconf} ] && . ${local_rcconf} # Do not edit this line Robert C Wittig wrote: > I am running OBSD 3.9, and I finally got around to setting up PF. > > Following the instructions at: >

Re: laptop mini-pci wifi card replacement rec.

2006-11-17 Thread Melameth, Daniel D.
[EMAIL PROTECTED] wrote: > My laptop bit the dust so am looking at replacements. > The one I'm thinking of getting has an unsupported > broadcom wireless device. It appears that I am able > to add a mini-pci card to replace what is already in > the laptop (correct me if i'm wrong its been a while

Re: PPTP over PF

2006-11-13 Thread Melameth, Daniel D.
Steve wrote: > I am having problems with Windows PPTP client over PF NAT. The > windows error generally indicates a GRE problem. > > There are mixed reports on google as to whether this should work. > Does anyone have this working ? If so are there any tricks ? So long as no more than one conne

Re: 4.0 Lockup [Was: 3.9 Lockup]

2006-11-09 Thread Melameth, Daniel D.
STeve Andre' wrote: > On Tuesday 07 November 2006 22:20, Melameth, Daniel D. wrote: > > STeve Andre' wrote: > > > On Monday 06 November 2006 22:10, Melameth, Daniel D. wrote: > > > > I'm having the same issue with 4.0 -stable--well, a bastardized &

Re: 4.0 Lockup [Was: 3.9 Lockup]

2006-11-07 Thread Melameth, Daniel D.
STeve Andre' wrote: > On Monday 06 November 2006 22:10, Melameth, Daniel D. wrote: > > I'm having the same issue with 4.0 -stable--well, a bastardized copy > > of -stable that also contains ral, cardbus and related changes from > > -current. I've used more th

Re: Expected 802.11g speeds?

2006-11-06 Thread Melameth, Daniel D.
Maybe a TcpWindowSize issue on Windows XP? By default, this is higher for a 100Mb/s interface than the wireless interface. FWIW, I get the full speed of my Internet connection over a ral AP, 6Mb/s, and, when using it normally, with WEP I still can get about ~20Mb/s. Have you tried shutting off t

4.0 Lockup [Was: 3.9 Lockup]

2006-11-06 Thread Melameth, Daniel D.
yds0 opl0 at yds0: model OPL3 midi1 at opl0: mpu at yds0 not configured mpu at yds0 not configured mpu at yds0 not configured mpu at yds0 not configured Melameth, Daniel D. wrote: > I recently upgraded (via clean install) a machine that was previously > running 3.8 and wi in hostap, without inc

Re: "Hardening" OpenBSD

2006-11-04 Thread Melameth, Daniel D.
Nick Guenther wrote: > Just came across this article: > http://geodsoft.com/howto/harden/OpenBSD/services.htm > > This list has made me skeptical of claims about hardening, especially > when done independantly. In particular, the article says > "The most interesting configuration choice in the def

Re: Uptime and pf stats difference.

2006-10-26 Thread Melameth, Daniel D.
RCF wrote: > The server had been in testing for almost a month with rdate > configured to run every 6 hours before I rebooted. So I don't really > think the clock was off. I don't have this issue, but if you're running rdate every six hours, you might want to 'man ntpd' instead.

Happy Birthday OpenBSD!

2006-10-18 Thread Melameth, Daniel D.
Oct 18 OpenBSD born, Wednesday 08:37:01 GMT, 1995 "OpenBSD turns not older with years, but newer every day." -Derived from an Emily Dickenson quote

Re: Soekris network problems - 48 hour deadline - SOLVED!!

2006-10-14 Thread Melameth, Daniel D.
Richard P. Koett wrote: > I guess it was a stupid autonegotiation problem after all. I didn't > know that could affect traffic in only 1 direction. Live and learn :) FWIW, if you're not autonegotiating, you should make certain both sides (NIC and switch) are hard coded/not set to negotiate.

Re: PCMCIA Wireless recommendation

2006-09-03 Thread Melameth, Daniel D.
Harpalus a Como wrote: > I just purchased an Acer 3624WXCi laptop, and I discovered that > OpenBSD does not recognize the built-in wireless adapter. I want to > purchase a well-supported, quality wireless card, but I have been > unable to find enough information on this. Does anybody have any > rec

Re: Experience with isakmpd/ipsec in production?

2006-08-21 Thread Melameth, Daniel D.
Sven Ingebrigt Ulland wrote: > We are about to deploy some fairly critical VPN functionality in our > network, and for that purpose we're considering using OpenBSD with > isakmp/ipsec. We've had a test setup running for some time now with > no problems, but I'm interested in hearing about your long

Re: Active Directory authentication

2006-08-15 Thread Melameth, Daniel D.
Prabhu Gurumurthy wrote: > Steve Shockley wrote: > > I'm researching setting up a wireless gateway using OpenBSD and > > authpf. We've got an existing Active Directory (2003) domain with > > about 5000 user accounts that I'd like to authenticate against. > > > > LDAP seemed like the obvious choic

Re: problem sis timeout openbsd 3.9

2006-08-04 Thread Melameth, Daniel D.
Melameth, Daniel D. wrote: > Theo de Raadt wrote: > > This is due to a problem in the ral driver. I have mailed damien, > > and hopefully a fix will be written soon. (the same mistake is in > > some of the other drivers drivers he has written too) > > Please post/ha

Re: Easy for a newbie to manage an OpenBSD server?

2006-08-01 Thread Melameth, Daniel D.
Titan wrote: > I have quite a predicament. I have been tasked with setting up an > FTP server for the research group I'm involved with. The problem is > once I'm gone someone with no *NIX experience will be maintaining the > server. I've been considering using OpenBSD because it looks like it >

Re: What do you use for MIME email?

2006-07-26 Thread Melameth, Daniel D.
J Moore wrote: > Lyndon is right... and in recognition of that I understand that the > project lead is negotiating with Microsoft (through Warren Buffet) to > port Outlook to OpenBSD. Theo will provide more details... (Can't... help... it... Must... reply...) That's great news! I look forward t

Re: tunnels with no encryption

2006-07-25 Thread Melameth, Daniel D.
Gustavo Rios wrote: > May some one point me a reference information on implementation > tunnels with pf without security. While I've never tried it, my first thought would be 'man gre'--and this really has little to do with pf. Perhaps someone has a better opinion...

Re: PRIQ not working as I expect

2006-07-22 Thread Melameth, Daniel D.
If your web server is serving up pages, it's likely the pass in rule that's being hit first and creating state--and since you're not assigning a queue to that rule, it's being dumped to bulk. Chris Zakelj wrote: > Trying to figure out what's going wrong here, and at this point, I'm > stumped. I'm

Re: Which WLAN mini PCI card to use?

2006-07-17 Thread Melameth, Daniel D.
Heinrich Rebehn wrote: > I want to build a WLAN router using a WRAP board running OpenBSD. > I am still unsure which wlan interface to use. I considered the CM9 > (ath(4)). > > My question: are there still problems with the 802.11g (54 Mbit) mode? > http://archives.neohapsis.com/archives/openbsd/2

Re: interupt mapping

2006-06-30 Thread Melameth, Daniel D.
D. E. Evans wrote: > On a Toshiba Satellite a35-s1593, without a PC-card currently plugged > in, I get a mapping error for the CardBus (cbb). I intend to purchase > a wireless PC-Card (I haven't decided on model yet), and wish to > ensure it will work with the cardbus before doing so. Try changin

Re: problem sis timeout openbsd 3.9

2006-06-22 Thread Melameth, Daniel D.
Theo de Raadt wrote: > This is due to a problem in the ral driver. I have mailed damien, and > hopefully a fix will be written soon. (the same mistake is in some of > the other drivers drivers he has written too) Please post/have someone post a follow-up when this is done. I have, what I believe,

Re: b/g wifi card on wi list?

2006-06-10 Thread Melameth, Daniel D.
Rod.. Whitworth wrote: > On Sat, 10 Jun 2006 13:03:40 +0100, Stuart Henderson wrote: > > Dragging things back slightly more on-topic, wi(4) has proved > > very reliable; there has been some recent mention on soekris-tech > > (http://marc.theaimsgroup.com/?l=soekris-tech&m=114982978006733) > > about

Re: Help troubleshooting a wi(4) problem

2006-05-23 Thread Melameth, Daniel D.
Jason Murray wrote: > $ cat /var/run/dmesg.boot | grep wi0 > wi0 at pci0 dev 20 function 0 "Intersil PRISM2.5" rev 0x01: irq 11 > wi0: PRISM2.5 ISL3874A(Mini-PCI) (0x8013), Firmware 1.0.7 (primary), > 1.3.6 (station), address 00:09:5b:11:cc:4e > > I'm going to try a firmware upgrade ASAP. I found

Re: Help troubleshooting a wi(4) problem

2006-05-23 Thread Melameth, Daniel D.
Melameth, Daniel D. wrote: > Jason Murray wrote: > > Hello. I've been having a problem for the last year or so. This > > problem has occurred in 3.6 - 3.9. > > > > Let me try to explain it. > > > > I have a server with a wireless (802.11b) card in i

Re: Help troubleshooting a wi(4) problem

2006-05-23 Thread Melameth, Daniel D.
Jason Murray wrote: > Hello. I've been having a problem for the last year or so. This > problem has occurred in 3.6 - 3.9. > > Let me try to explain it. > > I have a server with a wireless (802.11b) card in it and I have a > laptop that is using that server as its gateway. Whenever the traffic >

Re: pf and nat question for $ext_if with 2 ip addresses

2006-05-23 Thread Melameth, Daniel D.
Tor Houghton wrote: > I have two IP addresses assigned to the external interface. I also > have two "internal" interfaces. Is it possible to NAT each internal > interface to a specific external IP address (without specifying the > external address, but the interface "description")? > > I am using

Re: ALTQ priq: bandwidth or no?

2006-05-14 Thread Melameth, Daniel D.
Damian Gerow wrote: > Thus spake Melameth, Daniel D. ([EMAIL PROTECTED]) [13/05/06 > 20:06]: > > It would seem altq wants a bandwidth declaration. However, from > > man 5 pf.conf: > > > > If bandwidth is not specified, the interface bandwidth is used. >

Re: ALTQ priq: bandwidth or no?

2006-05-13 Thread Melameth, Daniel D.
Damian Gerow wrote: > Thus spake Jeff Quast ([EMAIL PROTECTED]) [11/05/06 09:22]: > > On 5/11/06, Damian Gerow <[EMAIL PROTECTED]> wrote: > > > I'm not interested in bandwidth limitations, so it looks like > > > priq is likely my best bet. > > > > > Then I create a queue with a bandwidth limit of 7

3.9 Lockup

2006-05-10 Thread Melameth, Daniel D.
I recently upgraded (via clean install) a machine that was previously running 3.8 and wi in hostap, without incident for the last six months or so, to 3.9 running ral in hostap. While all other hardware on the system has remained unchanged, the box has locked up five times in the last five days at

Re: Hostap and 802.11g

2006-05-07 Thread Melameth, Daniel D.
Melameth, Daniel D. wrote: > Is ANYONE doing hostap with 802.11g? If so, is it working well? And > doing WEP? If not, any thoughts on doing this with -current? > > Thoughts appreciated--I'd love a make, model and relevant dmesg of > anyone doing hostap with 802.11g. Rep

Re: ral ural dhcpd problem

2006-05-05 Thread Melameth, Daniel D.
Johan wrote: > Hansen Cahyono skrev: > > Johan linner.biz> writes: > > > Ok, I have narrowed the problem down. > > > If I don't use a wep key (ifconfig ral0 -nwkey) then dhcpd works > > > and the client gets the ip. So it seems like some kind of problem > > > with hostap/ral/nwkey together with dh

Re: 3.9 on sony vaio pcg-v505bx: wi0 is missing

2006-05-02 Thread Melameth, Daniel D.
Anton Karpov wrote: > I'm trying to boot OpenBSD 3.9 on my sony vaio, in order to play with > it onto my laptop (which is currently powered by freebsd). > Everything seems to be fine, except wireless card: > > wi0 at pci2 dev 2 function 0 "Intersil PRISM2.5" rev > 0x01pci_intr_map: no mapping for

FW: OU812

2006-04-28 Thread Melameth, Daniel D.
> > > > > > > > > > Thought I'd have I little fun with my 3.9 CD set > > > > > > > > > > before I have some fun with my 3.9 CD set... > > > > > > > > > > > > > > > > > > > > http://208.139.201.73/39cdpolo.jpg > > > > > > > > > > > > > > > > > > > > And for all you "pansies" that find it necessary

OU812

2006-04-28 Thread Melameth, Daniel D.
Thought I'd have I little fun with my 3.9 CD set before I have some fun with my 3.9 CD set... http://208.139.201.73/39cdpolo.jpg And for all you "pansies" that find it necessary to publicly whine about broken tabs, mine are fine ;) .

Re: advantages/disadvantages of kernel pppoe(4) vs userland pppoe(8)?

2006-04-21 Thread Melameth, Daniel D.
Jonathan Thornburg wrote: > The firewall/router/nat box is (will be when I get this setup) > an old 486 laptop with 2 pcmcia ethernet cards, running 3.9-stable. > (Yes, I've ordered a CD; until it arrives I'm using 3.8-stable.) > > I already have the (external) DSL modem, and from talking to other

Re: GoDaddy.com Donates $10K to Open Source Development Project

2006-04-19 Thread Melameth, Daniel D.
Nick Guenther wrote: > On 4/19/06, Melameth, Daniel D. <[EMAIL PROTECTED]> wrote: > > Congratulations to the team... > > > > http://www.thehostingnews.com/article2217.html > > Hmm? Hopefully it seems that Mozilla's donation has kicked off a > scrambling

GoDaddy.com Donates $10K to Open Source Development Project

2006-04-19 Thread Melameth, Daniel D.
Congratulations to the team... 'Bob Parsons, GoDaddy.com Founder and CEO commented, ''OpenSSH and the work of the OpenBSD project volunteers are integral to online security. Go Daddy is pleased to be able to help them continue their great contributions to the Internet community. At Go Daddy, we u

Re: PF and MS RDP trouble (help!)

2006-04-09 Thread Melameth, Daniel D.
You're using keep state in other places. Why is it missing from "pass in on $ext_if proto tcp from any to any port 3389?" Leonardo Rodrigues wrote: > I'm having a bit of trouble trying to access a Windows 2003 server > that is behind an OpenBSD 3.9 -current firewall. > > From the LAN, I can remo

Re: Support the project by buying from store or make donations

2006-03-26 Thread Melameth, Daniel D.
Stuart Henderson wrote: > There's always the polo shirt, or since you're in Europe, some of the > gear on https://kd85.com/notforsale.html perhaps. I've got the polo (I'm in the US)--as it's the only OpenBSD attire I can get away with in the office. Though I, and I'm certain MANY others, especia

Re: OpenBSD and PostgreSQL performance

2006-03-22 Thread Melameth, Daniel D.
Jim Razmus wrote: > * Steve Shockley <[EMAIL PROTECTED]> [060322 21:35]: > > I've currently got a server running syslog-ng (1.6.9) with > > PostgreSQL (8.1.1) on a 3.9 snapshot from March 1. The setup has > > been working well for a while, but I've recently been told to have > > it accept syslog f

Re: OpenBSD <-> Cisco IPSEC

2006-03-10 Thread Melameth, Daniel D.
Paolo Supino wrote: > I need to setup an IPSEC VPN between 2 locations. 1 location runs > Cisco gear (out of my control) and the other runs OpenBSD (my > decision). I've never setup a VPN between Cisco and OpenBSD before (I > did between Cisco to Cisco and OpenBSD to OpenBSD) and I was > wonderin

Re: pf.conf to log specific but block all

2006-02-25 Thread Melameth, Daniel D.
Harry Putnam wrote: > "Melameth, Daniel D." <[EMAIL PROTECTED]> writes: > Thanks for the nifty summary. I want to pester you just a little more > then I'll get to work on this and see if I get really stuck > somewhere. Sounds good ;-) . > > # Address trans

Re: pf.conf to log specific but block all

2006-02-24 Thread Melameth, Daniel D.
Harry Putnam wrote: > "Melameth, Daniel D." <[EMAIL PROTECTED]> writes: > > > There is a facility on the NETGEAR to send all traffic to an > > > inside machine for whatever reason. Its called a DMZ Server > > > although I don't think that is

Re: pf.conf to log specific but block all

2006-02-24 Thread Melameth, Daniel D.
Harry Putnam wrote: > I want to use pf.conf in what may be an unusual place. > > Not the usual sheild between private net and internet. > It would be more as a logging service but will need some config to > allow two private net machines to access it. > > A network picture: > >

Hostap and 802.11g

2006-02-21 Thread Melameth, Daniel D.
Is ANYONE doing hostap with 802.11g? If so, is it working well? And doing WEP? If not, any thoughts on doing this with -current? Thoughts appreciated--I'd love a make, model and relevant dmesg of anyone doing hostap with 802.11g. Thanks, Danny

Re: slow downloads to gateway

2006-02-18 Thread Melameth, Daniel D.
was little confusing with my > earlier bandwidth limitation. > /bkw > > On 18/02/06, Bachman Kharazmi <[EMAIL PROTECTED]> wrote: > > bw_test_512MB:ETA: 1:08 101.21/512.00 MB > > 6.03 MB/s > > > > I increased the value to

Re: slow downloads to gateway

2006-02-17 Thread Melameth, Daniel D.
Bachman Kharazmi wrote: > I'm running obsd 3.8 release on my gateway. Two xl nics are installed. > The GW does NAT which works very well, > All downloads from internet=>hosts behind the gw with local IPs goes > really fast. > But from internet to the GW's harddisk is ~20% of what the LAN hosts > sp

Re: nmap Issue on 3.8-release?

2006-02-06 Thread Melameth, Daniel D.
FWIW, it appears the issue only happens in relation to the pppoe interface--meaning, nmap scans over wi and fxp work as expected. Melameth, Daniel D. wrote: > Okan Demirmen wrote: > > On Mon 2006.02.06 at 20:31 +0100, Joachim Schipper wrote: > > > On Sun, Feb 05, 2006 a

Re: nmap Issue on 3.8-release?

2006-02-06 Thread Melameth, Daniel D.
Okan Demirmen wrote: > On Mon 2006.02.06 at 20:31 +0100, Joachim Schipper wrote: > > On Sun, Feb 05, 2006 at 10:03:57PM -0500, Melameth, Daniel D. wrote: > > > Joachim Schipper wrote: > > > > On Fri, Feb 03, 2006 at 10:02:32PM -0500, Melameth, Daniel D. > > >

Re: nmap Issue on 3.8-release?

2006-02-05 Thread Melameth, Daniel D.
Joachim Schipper wrote: > On Fri, Feb 03, 2006 at 10:02:32PM -0500, Melameth, Daniel D. wrote: > > I don't get it--it appears nmap is broken. Perhaps I'm overlooking > > something obvious, but any thoughts appreciated... > > > > > > An nmap scan give

Re: pf and aliases

2006-02-04 Thread Melameth, Daniel D.
man pf.conf xl1 represents all the IPs on x1 so either use the IP specifically or use xl1:0 David Newman wrote: > Looking for guidance on pf and aliases. I have an OBSD 3.8 box running > pf in front of two SMTP servers. > > Here's my setup: > > > Net -> 1.2.3.4-> pf box -> box1 9.8.7.6

Re: nmap Issue on 3.8-release?

2006-02-04 Thread Melameth, Daniel D.
Sorry if I wasn't clear--I agree. The issue here is not the behavior of nmap, but the fact that nmap does not see the icmp and http responses from the target and assumes the host is offline. Tobias Ulmer wrote: > On Fri, Feb 03, 2006 at 10:02:32PM -0500, Melameth, Daniel D. wrote: >

Re: nmap Issue on 3.8-release?

2006-02-03 Thread Melameth, Daniel D.
Nick Guenther wrote: > On 2/3/06, Melameth, Daniel D. <[EMAIL PROTECTED]> wrote: > > I don't get it--it appears nmap is broken. Perhaps I'm overlooking > > something obvious, but any thoughts appreciated... > > > > > > An nmap sca

nmap Issue on 3.8-release?

2006-02-03 Thread Melameth, Daniel D.
I don't get it--it appears nmap is broken. Perhaps I'm overlooking something obvious, but any thoughts appreciated... An nmap scan gives me this: $ sudo nmap 208.139.x.x Starting nmap 3.81 ( http://www.insecure.org/nmap/ ) at 2006-02-03 19:45 MST Note: Host seems down. If it is really up, but

Re: OpenBSD hardware router

2006-02-02 Thread Melameth, Daniel D.
Jasper Lievisse Adriaanse wrote: > On Thu, 02 Feb 2006 16:07:51 -0500 > "Will H. Backman" <[EMAIL PROTECTED]> wrote: > > If you are trying not to spend a lot of money, you could find an > > almost free laptop (200 - 300 mhz) and use that. Cost will go up if > > you don't already have some PCMCIA o

Re: Strange Reboots

2006-01-28 Thread Melameth, Daniel D.
The bottom of your dmesg appears to indicate your HD is dying--act fast. Simon Morgan wrote: > This morning my server started rebooting itself constantly for about > 15 > minutes. Although the last log seems to indicate that at least 1 crash > occured, no core dumps are to be found in /var/crash

Re: Routing problem?

2006-01-22 Thread Melameth, Daniel D.
Jonas Lindskog wrote: > We are running Open BSD 3.8 as a firewall router. The router has two > internal networks to handle; a DMZ with "real" > ip adresses and a NAT network to which our workstations are connected. > The problem I have is that its not possible to > connect to the server on the DMZ

Re: Generating ICMP Redirects

2006-01-19 Thread Melameth, Daniel D.
Steven S wrote: > I'm using a pair of 3.8-stable (1/5/06) servers as the firewall and > default gw (10.10.0.1/16) for a LAN . VPN users (10.4.0.0/16) come > into the LAN from a PIX (10.10.0.254/16) (changing soon to OpenVPN), > and when the VPN users hit a server return packets are sent to the > d

Re: PF config for exchange

2006-01-16 Thread Melameth, Daniel D.
James Mackinnon wrote: > This is a second issue that I had today with my final BSD firewall > rollout in my main center. > > This issue was with exchange > > All branches have VPN tunnels back to central location and the > firewall rules have a pass quick over the VPN tunnels > > On the main loc

Re: Issue with TS NLB and PF config

2006-01-16 Thread Melameth, Daniel D.
James Mackinnon wrote: > As part of my rollout today to Openbsd in my datacenter, I had a > little problem, well not entirely little > > Here is the layout > > 8 TS boxes > > ip config > 192.168.0.20 > 192.168.0.21 > 192.168.0.22 > 192.168.0.23 > 192.168.0.24 > 192.168.0.25 > 192.168.0.26 > 192

Re: Different

2006-01-06 Thread Melameth, Daniel D.
Rickard Dahlstrand wrote: > Stuart Henderson wrote: > > On 2006/01/06 17:36, Rickard Dahlstrand wrote: > > > When I install using the floppy38.fs image I get le1 as my > > > ethernet-interface and install using ftp. Then I reboot using the > > > standard bsd-kernel I get pcn0 as my ethernet-interfa

Re: Slower http/s access with Pf enabled

2005-11-14 Thread Melameth, Daniel D.
I don't have any similar issue, but how about trying keep state on the incoming traffic (which is faster than traversing the whole rule set every time)? Joe Barnett wrote: > To be more specific, with blocking on and selective allowing of > packets the http/s performance is slowed on the machine in

Re: ssh brute force attacks

2005-11-12 Thread Melameth, Daniel D.
Joachim Schipper wrote: > > See pf.conf(5) about max-src-conn, and compare it with > > max-src-states. > > That's true. Sorry, should have RTFMP. > > Regardless, while this makes the attack more difficult, the added > difficulty doesn't amount to much. Hubs will allow sniffing easily, > and swit

Re: Weirdness with ARP on an IBM HS20 blade

2005-11-08 Thread Melameth, Daniel D.
Sean Dogar wrote: > I ran tcpdump on both hosts while attempting to secure shell from the > Linux box. > > From the OpenBSD box, I ran: > > tcpdump -n host not 10.10.1.130 > bge1.dump > > and got nothing back in bge1.dump at all. tcpdump reported: > > tcpdump: listening on bge1, link-type EN1

Re: [ Re: Weirdness with ARP on an IBM HS20 blade]

2005-11-08 Thread Melameth, Daniel D.
Sean Dogar wrote: > > How about an ifconfig -a from both systems, clearing the arp cache > > of both hosts and capturing tcpdumps on both ends during an entire > > connection attempt? > OK. > > Here's the ifconfig -a from the OpenBSD box (IP address 172.16.1.22) > > lo0: flags=8049 mtu 33224 >

Re: Weirdness with ARP on an IBM HS20 blade

2005-11-08 Thread Melameth, Daniel D.
Sean Dogar wrote: > I've installed OpenBSD 3.8 on an IBM HS20 blade (model 8678). > Everything generally works OK (even multiprocessor support!), except > for some weirdness with the network interface, which is the onboard > Broadcom BCM57xx (bge) interface. The kernel does correctly > enumerate a

Re: Using PF, route-to with prejudice ;-)

2005-10-05 Thread Melameth, Daniel D.
Dave Harrison wrote: > I have two links, a rather costly one, and a cheap high bandwidth one. > I prefer to use the cheap one whenever possible, but if it goes down I > want to fail over onto the expensive one. > > This rule (from the PF FAQ) will let me round-robin my outgoing > connections : >

Re: linksys WMP11 oversized packet received issue

2005-10-05 Thread Melameth, Daniel D.
edgar mortiz wrote: > im planning to build a AP using Openbsd i currently have a Linksys > WMP11 Card, i was able to manage setting it up but i get a lot of the > following message, that eventually kills wifi connection and so does > the rest of the wired network. (please see below) > > wi0: overs

Re: nat vpn pptp issues

2005-10-04 Thread Melameth, Daniel D.
Chris Smith wrote: > On Tuesday 04 October 2005 03:38 pm, Peter Hessler wrote: > > True, this is a limitation of the PPTP spec. Go slap the IT Staff, > > and tell them to revert back to IPSec. > > While I agree on what should be done to their IT staff, and that IPSec > (from what little I know) i

Re: 802.11g 200mW Cardbus Card for hostap

2005-09-17 Thread Melameth, Daniel D.
pedro la peu wrote: > > 200mW Cardbus card that can do 802.11g with hostap? > > Why do you need 200mW? I don't know that I "need" it, but it generally provides for greater range without the need for an external antenna...

802.11g 200mW Cardbus Card for hostap

2005-09-17 Thread Melameth, Daniel D.
So, with 3.8 around the corner, any recommendations on a solid 200mW Cardbus card that can do 802.11g with hostap? I noticed a few high-power cards at http://www.senao.com/english/product/product_wireless01_outdoor.asp?pgtl =Wireless&tp1id=02&tp2id=07, even though it appears power output drops at

Re: strange download speed

2005-09-16 Thread Melameth, Daniel D.
Huzeyfe Onal wrote: > i bought a 50Mbit/s "metro ethernet" internet connection and test it > with two operating system. > first windows XP SP2 with gigabit ethernet. I see 5MB/s > download speed . > > second is an OpenBSD 3.7 with fxp0: and > saw 2.2MB/s download speed. > > Do i need a kernel o

Re: Kernel PPPoE is dieing...

2005-08-23 Thread Melameth, Daniel D.
Matt Garman wrote: > I took the smarts of your script, and also wrote a simple logging > tool. It's just a wrapper for the syslog(3) function call (that > allows you to log to syslog via the shell). > > In root's crontab, I have this entry: > > * * * * * /usr/local/

Re: Kernel PPPoE is dieing...

2005-08-16 Thread Melameth, Daniel D.
Felipe Mesquita wrote: > Hi List, >I4m using OpenBBSD 3.7 as a (basicly) web, mail and gateway > server. I have 2 network devices, one for DSL connection and other to >my localnet. Ok.. When i turn my server on, it get all up and > running automaticly, including the ADSL connection. It conn

Re: Ammunition needed to defend OpenBSD/pf

2005-08-03 Thread Melameth, Daniel D.
Rod.. Whitworth wrote: > Somebody sent me a query asking for a justification for my proposal to > supply a firewall/router using OpenBSD when there was thsi device: > http://www.dlink.com/products/?pid=327 , with all its claimed bells > and whistles. > > Anybody know what, if anything, it does tha

Re: nmap Over pppoe

2005-07-28 Thread Melameth, Daniel D.
I never received any responses on this so I thought I'd rephrase the question before I spend more time on this... Does nmap work for anyone when scanning hosts on the Internet using 3.7's kernel pppoe? Thanks, Danny Melameth, Daniel D. wrote: > Anyone else experiencing issues wh

nmap Over pppoe

2005-07-15 Thread Melameth, Daniel D.
Anyone else experiencing issues when scanning a host on the Internet and using pppoe? It's as if nmap never sees the packets, but tcpdump clearly shows packets being received. I'm running 3.7 -release and nmap works fine when scanning on all the other interfaces. This issue is reproducible with

Re: get bittorrent to work via pf

2005-07-15 Thread Melameth, Daniel D.
I played with BitTorrent for the first time a few weeks ago and I imagine you'll need to redirect these inbound requests to the specific host that is running the software. While I modify the base rule set with anchors when this is in use, the premise is the same regardless. meth is the host runni

High pppoe0 Oerrs

2005-06-22 Thread Melameth, Daniel D.
During high utilization, the number of output errors on the pppoe interface rises rapidly (several per second). I put the interface in debug mode and examined /var/logs/messages, but could not find anything of apparent interest. The following is relevant output of netstat -in: NameMtu Netw

Re: altq priq Anomaly?

2005-06-20 Thread Melameth, Daniel D.
I sent this email back in February when I was running 3.5 and didn't look into this further because this was an older release--but now I'm running 3.7 and I have the same issue. Any ideas? Melameth, Daniel D. wrote: > I implemented altq's priq a while back in the hope o

Re: PPPoE Download Performance Woes (Resolved)

2005-06-18 Thread Melameth, Daniel D.
effect on this DSL connection, but, in this case, it clearly does. Another day, another lesson learned and another one for the archives... Danny Melameth, Daniel D. wrote: > I think I'm going to leave this as an unresolved case--shame though. > > I also performed the following: >

Re: PPPoE Download Performance Woes

2005-06-17 Thread Melameth, Daniel D.
rat 0 poll 0 prec 0 [tos 0x10] 1119059987.190145 200.144.121.33.123 > 216.x.x.x.2853: v4 server strat 2 poll 0 prec I don't get it. I'm not sure what else to try or look at. Regards, D Melameth, Daniel D. wrote: > Kevin wrote: > > On 6/7/05, Can Erkin Acar <[EM

Re: ADSL connection (PPPoE)

2005-06-15 Thread Melameth, Daniel D.
Clint Pachl wrote: > (I know I should start a new thread with this, but here we go) Can't > an OpenBSD box handle a PPPoE/PPPoA connection directly? I recently > setup a VPN between two networks with DSL connections where the modems > make a PPPoA connection. An OpenBSD box resides behind each mode

Re: Some Sites Don't Load Behind pf NAT

2005-06-12 Thread Melameth, Daniel D.
Serban Giuroiu wrote: > I have an OpenBSD 3.7 box set up as a router and > server for my home network. It connects to the > Internet through the kernel PPPoE driver. Naturally, I > use pf on that box. Everything runs smoothly, but > there are certain websites that do not load properly > from machin

Re: Tuning gigabit bridging firewall for better performance

2005-06-09 Thread Melameth, Daniel D.
I don't know if this will help, but you might also want to look into piloting -current's idle loop fix.

Re: PPPoE Download Performance Woes

2005-06-07 Thread Melameth, Daniel D.
Kevin wrote: > On 6/7/05, Can Erkin Acar <[EMAIL PROTECTED]> wrote: > > Melameth, Daniel D. wrote: > > > Prior to migrating to DSL, this same card was used for a cable > > > connection and doing more than 1.5Mb/s. > > > > This really does not mean muc

Re: PPPoE Download Performance Woes

2005-06-07 Thread Melameth, Daniel D.
Rod.. Whitworth wrote: > On Tue, 7 Jun 2005 12:50:40 -0500, Kevin wrote: > > On 5/26/05, Rod.. Whitworth <[EMAIL PROTECTED]> wrote: > > > When you have a modem that will do all the connection stuff I am > > > amazed that anyone feels the need to do PPPoE. > > > > I prefer to have control over (and

Re: PPPoE Download Performance Woes

2005-06-07 Thread Melameth, Daniel D.
the idle loop problem? > > > > > -Original Message- > > > From: Melameth, Daniel D. [mailto:[EMAIL PROTECTED] Sent: 07 > > > June 2005 02:10 PM To: OpenBSD Misc > > > Subject: Re: PPPoE Download Performance Woes > > > > > > I'

Re: PPPoE Download Performance Woes

2005-06-07 Thread Melameth, Daniel D.
@ > commits the errata. > > Melameth, Daniel D. wrote: > > > I've looked into this further and still cannot determine where > > > the issue lies. Based on some advice, I unplugged the OpenBSD > > > machine and setup a Windows XP machine instead. The Windo

Re: PPPoE Download Performance Woes

2005-06-07 Thread Melameth, Daniel D.
Can Erkin Acar wrote: > Melameth, Daniel D. wrote: > > I've looked into this further and still cannot determine where the > > issue lies. Based on some advice, I unplugged the OpenBSD machine > > and setup a Windows XP machine instead. The Windows native PPPoE > >

Re: PPPoE Download Performance Woes

2005-06-06 Thread Melameth, Daniel D.
http://208.139.201.8/openbsd.tcpdump and http://208.139.201.8/windows.tcpdump. I'm kind of at my "wits end" here and am not certain how to troubleshoot further--any and all help/comments appreciated. Thanks, Danny Melameth, Daniel D. wrote: > Just moved from cable to DSL connectivity

Re: Slow Downloads with Userpace PPPoE and High Speed ADSL link

2005-06-06 Thread Melameth, Daniel D.
Mick wrote: > On Tue, 2005-05-31 at 08:33 -0400, Melameth, Daniel D. wrote: > > Mick wrote: > > > I seem to be seeing somewhat odd behaviour with regards to the > > > userpace PPPoE program and my high speed ADSL link. By "high > > > speed" I mean

Re: PPPoE Download Performance Woes

2005-05-31 Thread Melameth, Daniel D.
Juha Saarinen wrote: > On 5/27/05, Melameth, Daniel D. <[EMAIL PROTECTED]> wrote: > > For what it's worth, I have been doing this for over a year with my > > OpenBSD box. Turning on or off the "priqing of ACKs" here has no > > affect on the performanc

Re: PPPoE Download Performance Woes

2005-05-26 Thread Melameth, Daniel D.
Rogier Krieger wrote: > On 5/26/05, Melameth, Daniel D. <[EMAIL PROTECTED]> wrote: > > Adam Gleave wrote: > > > One possibility is that your modem prioritized ACK's... > > > > Thanks, but this is not the case. When having the modem handle both > &g

Re: PPPoE Download Performance Woes

2005-05-26 Thread Melameth, Daniel D.
Adam Gleave wrote: > One possibility is that your modem prioritized ACK's... > > See http://www.benzedrine.cx/ackpri.html Thanks, but this is not the case. When having the modem handle both the routing and PPPoE, and disconnecting the OpenBSD box, the connection works at it should.

PPPoE Download Performance Woes

2005-05-26 Thread Melameth, Daniel D.
Just moved from cable to DSL connectivity at home and decided to give 3.7's new kernelized pppoe as shot. My DSL connection trains at 7Mb/s down and 896Kb/s up and testing with Internet speed tests, I generally get 5.5Mb/s down and 715Kb/s up. These tests were done with the DSL router provided by

Re: Viewing socket owner

2005-05-01 Thread Melameth, Daniel D.
Arnaud Bergeron wrote: > I have been playing around with netstat and found lots of strange > (read uknown ports) udp connections. I wanted to know what processes > where doing these connections. After reading the netstat man page I > concluded that it can't do it. Google provided no useful infor