Re: slim and capable hardware for firewalls use

2009-06-15 Thread Steve B
Casetronic makes a 1U rackmount chassis that will hold two mini-ITX BOARDS. Take a look at their website - http://www.casetronic.com/product_d.php?id=16. I believe you can buy these from either logicsupply.com or mini-box.com. You could put a pair of boards in there powered by a pair of Pic

Re: OT: Free, online backup service provider compatible with BSD

2009-02-11 Thread Steve B
Thanks to all for the ideas. Amazon looks like it might be the best for me. They should be around for a while, and at $0.17 that's almost free. While I agree with some that DR and free are not synonymous this is for my home server so it's not as critical as work. Steve

OT: Free, online backup service provider compatible with BSD

2009-02-10 Thread Steve B
Can anyone recommend one of the free, online backup service providers? I would like to tar up all of my config files, custom scripts, etc any time they change and then upload them to some place offsite. I do not need a lot of space1GB would be more than sufficient. It would need to be a service

Tftp-proxy

2008-11-07 Thread Steve B
I am having a little trouble writing the necessary PF rule to pass and redirect tftp from a Cisco DSL router over to m

Tftp-proxy

2008-10-19 Thread Steve B
I'm in need of a little help (and probably a lot of sleep). I have been tweaking my PF due to a need for some added functionality. My last task was to add tftp-proxy so I can backup my Cisco DSL router to my TFTP server. I read the man page and inserted the necessary rules, but alas she's not worki

Intel Atom and D945GCLF2

2008-09-26 Thread Steve B
Is anyone running OpenBSD on one of these boards? The supported platform page does not list either the chipset or the CPU so I'm guesing it is not supported at this time. Steve

PPTP stopped working, need a little help

2008-09-21 Thread Steve B
I spent the evening reworking my pf.conf file in order to get AltQ working. I successfully have that working, but somewhere along the line I broke PPTP and can no longer connect back to the office. I have compared by old and new pf.conf files but have not quite found the problem. I also ran a tcpdu

Re: OpenBSD at Defcon 16

2008-08-15 Thread Steve B
This was posted up on Wired.com a few days ago. Both posts are interesting, but it might have been far more interesting to show something of the network diagram along with the pf.conf file. What could we learn from it? On Fri, Aug 15, 2008 at 9:58 PM, World of Open Source < [EMAIL PROTECTED]> wrot

How can I hire a PF developer or guru?

2008-08-06 Thread Steve B
Who would I contact, or how would I go about hiring a PF developer or guru to help me debug/improve my pf.conf rules? Steve

Re: AltQ only catching in one queue

2008-05-17 Thread Steve B
Sat down today and re-read documentation along with a tutorial over at http://calomel.org. Since I've not really touched my PF rules in a while I appear to have needed a major overhaul. I rebuilt the ruleset with what I hope is a better flow. However, pfctl is telling me I still am only passing tra

Re: Old EmBSD docs

2008-05-17 Thread Steve B
While researching a different problem I stumbled across something for later reading on this topic: http://www.kernel-panic.it/openbsd/embedded/ On Tue, May 13, 2008 at 2:09 AM, Michael Dexter <[EMAIL PROTECTED]> wrote: > >> Nonsense. Many "new" embedded boards have limited flash memory soldered >

AltQ only catching in one queue

2008-05-14 Thread Steve B
My employer has allowed me to work from home one day per week. As part of the agreement I had to take home a VoIP phone that connects me to work. This seemed like a good excuse to setup AltQ on my OBSD box. I read the man page, the FAQ and Jacek Artymiak's book. I built the queues and loaded the ne

Old EmBSD docs

2008-05-11 Thread Steve B
Sometime ago I had run EmBSD on a little P100 and it served me nicely. Since its disappearance from the landscape I've been using a stock OpenBSD install on my home machine. However, I recently acquired a nice little Jetway board with a PicoPSU and the idea of running EmBSD came to mind again. Woul

Re: WPA hardware workaround, for what it's worth

2008-03-17 Thread Steve B
FWIW - my employer uses a lot of Mikrotik stuff for various needs. I bought one of their 532 boards along with an SR5 wireless card and just made a simple wireless bridge to my OBSD box at home. Simple, effective, not cheap but better quality than some of the residential grade crap on the market. A

Re: Remote syslog

2008-02-21 Thread Steve B
Terrific! Thanks to all who responded.

Remote syslog

2008-02-19 Thread Steve B
My employer has given me some free colo space and I thought I would take advantage of it to do remote system logging. Those of you here who are doing it, could you comment on whether you are using Syslog-NG or something else, and whether you are doing it over SSH or IPSEC? I have looked at various

Re: [OT] beefy steel cases

2008-02-11 Thread Steve B
I have one of these, http://calpc.com/catalog/mid_tower.html, and its quite beefy.

OT: Where to buy an appliance style case?

2007-12-24 Thread Steve B
Has anyone seen a manufacturer that sells an appliance style chassis? I'd like to slim down my current 4U/OBSD box to a 1U form factor using a VIA C7 board. Ideally I'd like to have a chassis that has the Ethernet ports on the front, along with a serial port. Something like an old Symantec Firewall

Mini PCI card for hostap mode

2007-09-17 Thread Steve B
I'd like to add a PCI card to by OBSD box in order to gain wireless support (translation - lazy me wants to work from the couch). The local non-profit for which I volunteer has tons of PC stuff donated but none of the PCI wireless that have come in are capable of hostap mode. Recently someone donat

Re: ipsec vpn?

2007-08-20 Thread Steve B
rowse sites from Internet cafes and such. On 8/18/07, Steve B <[EMAIL PROTECTED]> wrote: > > I finally have some SUCCESS to report! I changed the ipsec.con file > back to the one that I got to work on Phase 1, but appeared to be hanging on > Phase 2, ran ipsecctl -f /etc

Re: ipsec vpn?

2007-08-18 Thread Steve B
I finally have some SUCCESS to report! I changed the ipsec.con file back to the one that I got to work on Phase 1, but appeared to be hanging on Phase 2, ran ipsecctl -f /etc/ipsec.conf and started isakmpd without the "-K". Greenbow now reports both Phases worked and I had a tunnel. When I test

Re: ipsec vpn?

2007-08-18 Thread Steve B
Following the advice from Hans-Joerg and Markus I changed the ipsec.con file back to the default transforms sent by Greenbow, ran ipsecctl -f /eetc/ipsec.conf, changed the permissions on the policy file and started isakmpd without the "-K". Greenbow logging shows I did not even get past the Phase 1

Re: ipsec vpn?

2007-08-16 Thread Steve B
I made a few changes and did some more testing this evening. 1. I changed the /etc/ipsec.conf to bring it in line with the Greenbow default transforms that Hans-Joerg recommened. # cat /etc/ipsec.conf ike dynamic esp tunnel from any to 192.168.1.0/24 \ main auth hmac-sha1 enc 3des group modp1024

Re: ipsec vpn?

2007-08-13 Thread Steve B
If I am interpreting the logs correctly then I have partial success using ike dynamic esp tunnel from any to 192.168.1.0/24 \ main auth hmac-sha1 enc 3des group modp1024 \ quick auth hmac-sha2-256 enc 3des \ psk abc123 I am confident that the first two lines are correct. The dynamic variable sho

Looking for some help with an IPSEC config for road warriors

2007-08-08 Thread Steve B
I do some volunteer work for a local non-profit and we have a need to put a VPN in place for those who travel. I've been looking at PPTP, OpenVPN and IPSEC and decided to try IPSEC. After reading the various man pages and Google I came across www.allard.nu and decided to try his Greenbow method. So

Re: SSH brute force attacks no longer being caught by PF rule

2007-07-02 Thread Steve B
On 6/28/07, Martin Schrvder <[EMAIL PROTECTED]> wrote: > > 2007/6/28, J.D. Bronson <[EMAIL PROTECTED]>: > > so if it wont write to a file...I presume it blocks > > whats listed in /etc/tables/scanners permanently and then only > > blocks NEW offenders via kernel memory? > > (can someone clarify my

SSH brute force attacks no longer being caught by PF rule

2007-06-27 Thread Steve B
The rule I've had in my pf.conf file to catch and block forceful SSH attempts no longer appears to be working. I see the entries in my authlog, but the IPs are no longer getting added to my table. I suspect I screwed something up, but so far I am at a loss to see where. Could someone pass another

Looking for other ideas to encrypt a wifi connection

2007-06-14 Thread Steve B
Recently I acquired an old Belkin wireless nic that has an RTL8180D chipset on it. It supports Host AP and is working nicely. Thanks to all those who helped breath life into that card/chipset! Dmesg reports it as: rtw0 at pci0 dev 10 function 0 "Belkin F5D6001" rev 0x20: irq 7 rtw0: ver RTL8180D,

APCUPSD on 4.0

2007-01-15 Thread Steve B
I recently acquired an old APC Smart1400 with a real serial port from a defunct ISP. I've run APCUPSD before with a simple BackUPS but would now like to take advantage of the ncurses powerflute tool and the cgi components for the web tools. Has anyone compiled these options successfully on 4.0? My

Re: How do I convert a man page to PS or PDF?

2006-10-20 Thread Steve B
Thanks for all the great info folks. I'll try one of them before I leave this evening.

How do I convert a man page to PS or PDF?

2006-10-20 Thread Steve B
I'm leaving on vacation and wanted to have something to read on the plane and at the beach. How can I convert a couple of man pages into either PS or PDF so that I can print them? Steve

How do I redirect the daily log messages to another address?

2006-09-21 Thread Steve B
I'd like to redirect the daily log messages that go to root to an external email address. I have searched Google for information but I am just not supplying the right keywords to find a good match. I did find references telling me that this is a bad idea, and I accept the risk that it poses. Could

Re: OT hardware IDE RAID cards

2006-08-16 Thread Steve B
Greg - Thanks for that link! Ingo - We are leaning toward ATA since the unit is used for tertiary storage. Primary backup is to tape, stored off-site, and secondary backup is to a SCSI based system in a different bldg. So yes, its a budgetary issue. Though I do not understand why we need triple co

Re: OT hardware IDE RAID cards

2006-08-16 Thread Steve B
We are not stuck on SATA. The whole data directory has ~ 80GB of data so PATA would work just as well. I did not see any docs on the LSI site for the 150-2. A Google search on it had produced a couple of listings that indicated it was not hardware RAID. I'll try and dig around some more on the LSI

OT hardware IDE RAID cards

2006-08-15 Thread Steve B
Our company has a small OpenBSD box colocated with a local ISP that we use for tertiary stoage of some data. I'd like to setup RAID-1 to provide some basic redundancy of that data. I'm looking at either an Arco Duplidisk DD3 or 3Ware 7006-2 card. I've ruled out an Adaptec 2400A based on Theo's con

Re: VoIP

2006-07-13 Thread Steve B
I have 1.2.9.1 installed from ports on 3.9 with a Cisco 7940 hardware based phone. Hardware is an Epox board, 1Ghz AMD, 64MB RAM. Certainly not the best rig, but I've been using it reliably for about a month. The load on the box is low enough that Asterisk has not taxed it yet. On 7/13/06, Gustavo

Re: OT: large, wireframe Puffy stickers

2006-07-04 Thread Steve B
Thanks everyone, that is exactly what I was looking for!!!

OT: large, wireframe Puffy stickers

2006-06-30 Thread Steve B
While browsing through some pictures of one of the OpenBSD events (can't find the link again right this moment) there were a couple of attendees who had large wireframe Puffy stickers on the lid of their laptops. There was also a very large one on the top of a 1U chassis. These were larger, much la

Re: Frickin PPTP proxy with PF

2006-06-26 Thread Steve B
I used this article as a guide, maybe it will help. http://techrepublic.com.com/5100-1035_11-6031577.html On 6/25/06, Albert Jongkit Wong <[EMAIL PROTECTED]> wrote: > > Anyone get this to work? I've got it compiled, running, and proxying > tcp 1723 traffic correctly. However, I can't seem to fig

Via EPIA boards

2006-04-16 Thread Steve B
The memory controller on my P2B appears to have gone bad, so I'm looking to replace it. I've seen a number of posts on various OBSD related sites about these Via EPIA boards and their various benefits - low power, hardware crypto, etc. They look like a nice replacement for my old board so I've been

Via EPIA board/box

2006-04-15 Thread Steve B
The memory controller on my P2B appears to have gone bad, so I'm looking to replace it. I've seen a number of posts on various OBSD related sites about these Via EPIA boards and their various benefits - low power, hardware crypto, etc. They look like a nice replacement for my old board so I've been

Re: Motherboard brands

2005-11-20 Thread Steve B
I used an Asus XP55T2P4 for many years with no troubles. My current board is an Asus P2B which has been running smoothly since I bought it used a month ago. Only reason I upgraded was because the seller threw in a nice 4U rackmount server case for free! The XP55T2P ran OBSD from v2.7 through v3.7.

Re: FTPd and MFS

2005-11-15 Thread Steve B
Yeah, that's what I'm looking for. For some reason I was thinking that since /home is mounted on /dev/wd0h I could not mount another directory by the same name using MFS. Guess its time to mirror the drive and try it. Worst that can happen is I break the box and have to restore from the mirror. Tha

Re: FTPd and MFS

2005-11-14 Thread Steve B
FTP was included in the project design scope as an alternative as well as a secondary means of measurement.

FTPd and MFS

2005-11-14 Thread Steve B
I'm seeking a little advice on a small in-house project. We are installing a machine in house that will run FTP and iPerf as a means for doing some simple bandwidth testing between a couple of different endpoints. The box itself is a 1G AMD with 1GB of DDR RAM and an ATA/66 hard drive. Due to the c

Crypto card question

2005-11-01 Thread Steve B
I'm setting up an OpenBSD 3.7 box as a VPN/SSH server. It will have a Broadcom 5805 installed to help offload some of the crypto processing. Our employees have laptops with XP loaded and Intel Pro 100/S cards installed. Will the crypto functionality on these cards work in conjunction with the Broad

Re: Cards/chips supporting hostap mode

2005-10-19 Thread Steve B
I'm not having any luck finding something locally. Can anyone recommend an online dealer that has a PCI based wireless card supprting hostap mode? Steve

Re: Cards/chips supporting hostap mode

2005-10-11 Thread Steve B
Thanks everyone!

Cards/chips supporting hostap mode

2005-10-11 Thread Steve B
I'm trying to find what wireless PCI cards or chipsets support hostap mode. The Prism 2/2.5/3 is referenced everywhere. Is that that the only one or do any of the others such as Atheros support hostap mode?

DNS

2005-09-17 Thread Steve B
I'm a little confused on the topic of running Bind on OBSD. I've read the Secure Architectures book, some material at http://www.aei.ca/~pmatulis/pub/obsd_pf.html and a few other places. My goal is to provide DNS to my local LANs and probably act as a caching/forwarding DNS. What confuses me is 1)