Re: relayd and pf states

se it at your own risk. Tautvydas > I have relayd in production with textbook (or manpage) examples > of doing redirects to backend webservers. > relayd seems to notice host state changes properly and makes > the necessary pf table adjustments. The problem is that the pf > st

Bug in ipsec or UDP packets handling (4.2-stable)?

er come back. Now, sometimes if I query external interface from the dns server, I get a reply like this: * Response from unexpected source ([VPN_ENDPOINT_IP].61003* host -t www.example.com works always (because it's using TCP?) Any ideas? Tautvydas

Hostated not clearing pf states?

y active hosts, each time client tries to connect to webhost2 it starts new state and effectively resets timeout counter. Tautvydas

Re: OT: Getting a premade box or doing it yourself (was "OT:")

There ARE a number of vendors selling OBSD solutions, actually. One I remember running across is LOK Technologies. I'll look for them. Thanks. Drivers should NOT be an issue - you're building an appliance, it should be pretty simple to picl compatible s/w. For sure. -- Hi, I'm a .signature

Re: OT: Getting a premade box or doing it yourself (was "OT:")

know what to tell for my CEO. If he can't understand that - I don't want to work there any more :) Regards, Tautvydas -- Hi, I'm a .signature virus! Copy me to your .signature file and help me propagate, thanks!

Re: OT:

lue in terms of cost-savings in other areas is something else to consider--would a commercial product block more malware, have less false-positives, be able to comply with government regulations, etc? I think that depends from setup to setup. And you can get many false positives with barracuda too.

Re: OT: Getting a premade box or doing it yourself (was "OT:")

It is not bad at all: a) You mention stupid people, thus give them something simple. As they won't know how to use OpenBSD nor maintain it. Thus unless you want them to need you for all the upcoming years, and thus pay you the money for maintaining the box, get them that barracuda box with a supp

OT:

think the best would be to use openbsd+pf+spamd (with carp if necessary). But - I have quite stupid CEO and I need many arguments, why blackbox for many $$$ is bad (from corporate view). Please, help me with these arguments. Thanks. Regards, Tautvydas -- Hi, I'm a .signature virus! Copy

Re: raid and separate partitions

On 1/7/07, Tautvydas <[EMAIL PROTECTED]> wrote: Hi, Marc, > An /etc/fstab on one of my machines... > > # devicemount point type optionsbackup fsck pass > /dev/wd0a / ffsrw 1 1 > /dev/wd0d /varf

Re: raid and separate partitions

Hi, Marc, An /etc/fstab on one of my machines... # devicemount point type optionsbackup fsck pass /dev/wd0a / ffsrw 1 1 /dev/wd0d /varffsrw,nodev,nosuid 1 2 /dev/wd0h /var/wwwffsrw,nodev,nosui

raid and separate partitions

Hey list, I have stupid question - I have one raid device, so I want to make separate /var/www partition, only for web server. At first it looks ok: # df -h Filesystem SizeUsed Avail Capacity Mounted on /dev/raid0a4.9G 37.4M4.6G 1%/ /dev/raid0b9.8G1.2G8.1G

Re: webmail

Hi On 11/23/06, Jasper Bal <[EMAIL PROTECTED]> wrote: Anyone using webmail on OpenBSD? What's good, what's not? Jasper roundcube webmail is quite nice. but I use not the latest beta. Latest beta has some problems, I haven't got enough time for debugging :( -- Hi, I'm a .signature virus! Cop

smtp-vilter

Hello List, I have one problem - I'm trying to run smtp-vilter (amd64 3.9 stable and i386 snapshot). When I try to run: $sudo /usr/local/sbin/smtp-vilter -v I've got these errors: smtp-vilter: start unprivileged child process smtp-vilter[32264]: dropped privileges, running as 538:538 smtp-vilter

iwi firmware

Hello List, I've strange problem. My laptop has Intel(r) PRO/Wireless 2200BG network adapter, so I need firmware to work with iwi driver. I've upgraded my obsd system to snapshtop (Intel(r) PRO/Wireless 2200BG) and downloaded latest firmware: http://damien.bergamini.free.fr/ipw/download.html But

Re: Web mail

It is pretty new still, but I replaced SquirrelMail with it because SquirrelMail is terrible. People seemed to like the change. Very simple to configure, and it's pretty. but it's pretty good too :) -- Hi, I'm a .signature virus! Copy me to your .signature file and help me propagate, thanks!

Re: Anyone using a Asus K8N-VM or A8V-VM?

I have one too. Everything is working well. Oh I should mention, that I'm using it as a server, so I have no idea about sound and video. On 6/23/06, Frederick C. Druseikis <[EMAIL PROTECTED]> wrote: Jasper Lievisse Adriaanse wrote: > just a quick question, anyone running OpenBSD/amd64 on an A

Re: NAT and problem (maybe)

he whole. For now, there are no more rules :) -- Tautvydas Nenervinkite manes! As jau neturiu kur slepti lavonus!

Re: NAT and problem (maybe)

ub out on vr0 all fragment reassemble T> scrub out on vr1 all fragment reassemble T> pass in log all T> pass out log all -- Best regards, Alexandermailto:[EMAIL PROTECTED] -- Tautvydas Nenervinkite manes! As jau neturiu kur slepti lavonus!

NAT and problem (maybe)

) network cards. But if understand correctly - I don't need to route or bridge these interfaces if I use NAT? Please, give any advice or link. Thanks for any comments. Regards, Tautvydas