Experience with isakmpd/ipsec in production?

We are about to deploy some fairly critical VPN functionality in our network, and for that purpose we're considering using OpenBSD with isakmp/ipsec. We've had a test setup running for some time now with no problems, but I'm interested in hearing about your long-term experiences with running openbs

Re: ARP Poisoning

On Sun, Aug 07, 2005 at 12:48:46AM +0200, Miroslav Kubik wrote: > Thanks but this information did not help me. We have problem since afternoon > and I need to solve this trouble as fast as possible so I can't afford to > wait for the book. You already have the proper keywords to search for on th

Re: man 5 passwd fix

On Tue, Aug 02, 2005 at 01:05:41PM -0400, Will H. Backman wrote: > > > I'm not sure how to fix it, but... > > > Looking at "man 5 passwd", each field is bold in the narrative > > > description except for the paragraph that explains the home_dir. > > > > which bit exactly do you think should be mar

Re: Bandwidth Limiting on OBSD 3.7 - altq?

On Fri, Jul 29, 2005 at 12:43:35AM -0500, Teren Sapp wrote: > I was doing some research and google that wasn't very conclusive. Basically > I have a roommate that's taking all of the bandwidth at home and everybody > else in the house is sick of it, so I'd like to limit his bandwidth to like > 384k

Re: tcpdump | more doesn't produce output

On Thu, Jul 28, 2005 at 03:26:23PM -0700, Michael Favinsky wrote: > Has anyone tried a tcpdump | more ? Or a tcpdump | grep? > > When I try to pipe tcpdump output to either more or grep I don't get any > network data output. Anyone have any explanation for this behavior? tcpdump -l. see the man p

Saving pf statistics over reboots to facilitate IP accounting.

I'd like to be able to save the state of the internal pf counters to disk, and then insert them upon the next boot. Unfortunately, there seems to be no ioctl call for this, according to pf(4). Would it be a good idea to implement an ioctl command for arbitrarily setting the pf counters, effective