Re: Replace PF rule + inetd Proxy with 2 PF rules

2020-02-14 Thread Nick Gustas
On 2/14/2020 11:21 AM, Fabio Martins wrote: I am trying now only with the redirect to www.openbsd.org, if it works, I am sure it can be adapted to my case. Unfortunately still no success. # pf.conf: ext_if="xnf0" match in log on $ext_if proto tcp from any to ($ext_if) port 8099 tag RDR \

Re: Replace PF rule + inetd Proxy with 2 PF rules

2020-02-14 Thread Nick Gustas
On 2/14/2020 6:30 AM, Fabio Martins wrote: Hi Nick, Thanks. I applied both rules below, unfortunately I am still only hitting rule number #1 (rdr-to). nat-to is never reached (added "log" on each to test). I tried inverting the order, too, but no luck. #1 match in on $ext_if proto tcp from

Re: Replace PF rule + inetd Proxy with 2 PF rules

2020-02-13 Thread Nick Gustas
Hi Fabio, I believe this will do what you want, seemed to work in quick testing here, adjust to suit your environment. match in on $ext_if proto tcp from to ($ext_if) port 25 rdr-to 200.200.200.200 port match out on $ext_if proto tcp to 200.200.200.200 port received-on $ext_if

Re: OpenBSD 4.6 + carp + pf + pfsync lockup

2010-09-09 Thread Nick Gustas
Joe Warren-Meeks wrote: Hey guys, I'm running two HPDL360 G5 servers with OpenBSD 4.6+carp+pf+pfsync as an active/passive firewall pair. Both are running: (full dmesg at bottom, along with edited pf.conf, in case it's relevant) j...@f2:/home/joe uname -a OpenBSD f2 4.6 GENERIC.MP#81 amd64

Re: DHCP failing to find interface after 20 Interfaces

2008-09-30 Thread Nick Gustas
Carl Horne wrote: Hi, Sorry but I run into another block. This time it's dhcpd that is having the issue. I hope Stuart can find an answer as fast as he did last time. This is the issue. If I have 20 or less interfaces configured then dhcpd starts up as expected. Dhcpd listens to the carp

Re: Can't start Apache... MaxCPUPerChild is invalid??

2008-09-02 Thread Nick Gustas
Sunnz wrote: Ok I am totally lost... googling MaxCPEPerChild gives no result, while MaxCPUPerChild gives lots of OpenBSD httpd.conf file with the exact same conf I have, http://kerneltrap.org/mailarchive/openbsd-misc/2008/6/16/2138454 where MaxCPUPerChild 0... You've had at least one bit

Re: vm.loadavg high (by one) on idle Sun systems

2008-08-12 Thread Nick Gustas
Daniel Ouellet wrote: Hi, Any idea on how it might be possible to boot the system step by step to get an idea of where this bug might be isolated? I strip the boot process as much as possible and this is a very old issue, but may be there is a way to find more in it. Looking at it more, I

Re: bundling the speed of two ADSL lines with OpenBSD

2008-07-04 Thread Nick Gustas
Sebastian Reitenbach wrote: Hi, Vinicius Vianna [EMAIL PROTECTED] wrote: Hi, It's possible using multipath, take a look at http://www.openbsd.org/faq/faq6.html#Multipath please. But I needed to use some pf route-to rules to re-route the packets between the multiple gateways. It takes

Re: man dhcpd.interfaces ?

2008-02-25 Thread Nick Gustas
Kasper Revsbech wrote: I have attached to windows xp clients by crossed cable one to each if (vr and vr2) The fun begins here, when i turn on and off the windows machines a couple of times one of the can't obtain a IP. It actually brings down the whole interface. I can't attach another

Re: low-MHz server

2008-01-30 Thread Nick Gustas
Douglas A. Tutty wrote: So, back to the issue at hand. Anybody have fond memories of great 486 or Pentium-based servers (or other arch equivs)? Doug. Back in 1999, I picked up several used HP Vectra Pentium 100 desktops for use as backup backup dial in administration machines at our

Re: SSH Brute Force Attacks Abound - and thanks!

2008-01-11 Thread Nick Gustas
Lars NoodC)n wrote: I suppose another option is to use pf to filter out all incoming traffic to the servers originating from Windows computers maybe except to relevant services like http port or https. If we could see a blanket ban on connecting Windows machines to the net, things would

Re: pf + wii

2007-12-24 Thread Nick Gustas
johan beisser wrote: On Dec 24, 2007, at 12:34 AM, Lord Sporkton wrote: i could be wrong but here is my 2 cents: ive seen something like this related to upnp, i would venture to guess your 2 friends have routers which support upnp and so far as i know openbsd does not support upnp. I would