Re: Anyone know of an smtp-proxy (or other mechanism) for routing mail to different IMAP servers depending recipient address?

2011-07-07 Thread tico
On 7/7/2011 12:42 PM, IT Guy wrote: Hi all, I'm in the process of migrating our company from a certain proprietary mail system to a new OpenBSD mailserver (IMAP + Postfix). I'd like to be able to migrate our users one at a time rather than do the whole company in one fell swoop. Does anyone

Re: [Now, other problem] Re: high load cpu with trunk+vlan+carp

2009-10-12 Thread tico
Luiz Gustavo wrote: Luiz Gustavo S. Costa wrote: exists other maillist for the discussion about this ? dev ? pf ? please, anybody help-me :) 2009/9/28 Luiz Gustavo S. Costa : has anyone with the same problem? developers? what could this be? 2009/9/26 Luiz Gustavo S. Costa :

Re: /31 subnets (RFC 3021)

2009-09-21 Thread tico
Aaron Mason wrote: Hi all, Does OpenBSD comply with RFC 3021, allowing /31 subnets for point-to-point links? I'd resigned to the fact that you couldn't since each subnet needs a network and broadcast address, though in the grand scheme of things it makes sense. TIA ::yawn:: $ sudo ifconf

Re: Defending OpenBSD Performance

2009-09-14 Thread tico
SD *itself* needs is code and donations, not more devotees unless I'm severely mistaken. If someone wants to use inferior tools to for a given project's requirements I'm more than happy to let them do so (unless they're paying me for consulting). Cheers, Tico

Re: Recommended Switches for Trunking?

2009-09-02 Thread tico
Toni Mueller wrote: Hi, I'm looking into getting switches to be used in port-extender style, and found a thread from last year recommending Cisco switches. I need about 20-50 ports atm, and would like to avoid Cisco. My current preference is using Procurve (2810 or 29xx). Do they work? What do

Re: New Project - MICO

2009-07-22 Thread tico
ripts you want, but I was curious why you wanted to start over? What problem with nsh are you trying to fix? !Saludos! Tico [A] http://www.nmedia.net/nsh/

Re: PF performance problem

2009-07-18 Thread tico
increase in CPU use (but still gives an idea on how long you have to wait). - In other words, ditto. I've always noticed (and then ignored) a difference between BSD/Solaris load average running the same processes vs Linux on the same hw. systat is much more useful, IMNSHO. -

Re: BGP and NATting to multiple ISPs

2009-06-18 Thread tico
t more experience than I do which is why I'm writing and listening. Is the two router approach really a bodge or a legitimate hack? This should work fine if configured sanely. If your head is really on a chopping block, it might be wise to either undertake massive testing of your config

Re: BGP and NATting to multiple ISPs

2009-06-18 Thread tico
I'm glad I checked my inbox again before responding -- that's exactly what I was going to say. +1. I'm in *no* way convinced that running out of a resource (IPv4 addresses) would be a good thing. It's been my experience that most network engineers agree with me. -tico

Re: BGP and NATting to multiple ISPs

2009-06-18 Thread tico
he flaming starts, remember that I said "most." Cheers, Tico Karl Free Software: "You don't pay back, you pay forward." -- Robert A. Heinlein

Re: slim and capable hardware for firewalls use

2009-06-15 Thread tico
Stuart Henderson wrote: On 2009-06-15, tico wrote: Also, if you want to cram two boxes in 1U and still have a decent number of NICs, check out ABMX: http://www.abmx.com/1u-twin-server those are supermicro machines. Correct. I should have specified that. they also have short-depth

Re: slim and capable hardware for firewalls use

2009-06-15 Thread tico
on a shelf mounted in reverse in the back of your cabinet behind a switch ... sort of like these guys: http://www.fubra.com/blog/2007/10/mac-mini-bgp-routers-part-2.html Cheers, Tico

Re: Hardware recommendations for gigabit throughput ipsec

2009-04-28 Thread tico
John Arnold wrote: They all did 60+ MB/s, meaning I got at least 60% out of the gig links, without resorting to jumbo frames, creative recv/sendspace sysctls or anything, and also I did generate and sink the traffic on the end nodes, so that also "adds" to the load for them. Given that they c

Re: BSD User Group in Spain | Grupo de Usuarios de BSD en Espanya.

2009-04-20 Thread tico
I'm not in Spain, but have an interest in Spanish-language BUGs. Also, I can provide hosting. -Tico Mike Erdely wrote: If you can't get a mailing list set up, I can host a list for you on metabug.org. You can also send meeting information (and other posts) to i...@metabug.org and

Re: STM-1 connectivity (OT?)

2009-02-20 Thread tico
g a different router for that leg of your network. Imagestream (proprietary+linux based) works for a good+cheap solution that can talk iBGP to your other ethernet-only routers. Or just get a used Juniper/Crisco/whatever. See also Sangoma's Wanpipe offerings (FreeBSD/linux). -Tico

Re: Problem of recognizing sangoma A102 2006 in openbsd 4.4

2009-02-09 Thread tico
ds: http://marc.info/?l=openbsd-misc&m=118245939832197&w=2 http://marc.info/?l=openbsd-misc&m=119403349716792&w=2 -Tico

Re: bgpd fails to install ipv6 routes in kernel routing table

2009-02-08 Thread tico
Graeme Lee wrote: tico wrote: Graeme Lee wrote: <> Network layout is somewhat complicated. 1 x ebgp and 1 x ibgp session receive ipv4 world tables. Gif tunnel to a hurricane router in Hong Kong. I'm receiving ipv6 world bgp tables from this peer. Connectivity to the p

Re: bgpd fails to install ipv6 routes in kernel routing table

2009-02-08 Thread tico
n: i = IGP, e = EGP, ? = Incomplete flags destination gateway lpref med aspath origin *>2400:6800::/32 2001:470:1:53::1100 0 6939 10105 i $ uname -mr 4.4 i386 What does your "bgpctl sho nex" give you? -tico

Re: Bug OpenBGPD, IPv6 peer gets cleared, never gets up again

2009-01-29 Thread tico
t seen that behavior occur again after I upgraded to 4.4, but YMMV. Cheers, Tico

Re: 10G NIC - Netxen

2009-01-13 Thread tico
://www.openbsd.org/cgi-bin/man.cgi?query=nx&apropos=0&sektion=0&manpath=OpenBSD+Current&arch=i386&format=html And CVS shows that nx is no longer in the tree: http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/Attic/if_nx.c As for the hardware itself, I have no experience with it. -Tico

Re: OpenBGPd on OpenBSD (Failover + Load balancing)

2009-01-10 Thread tico
e an OpenBSD-based network infrastructure to support your company's needs there are a number of folks that can provide commercial support, many of which either lurk on this list or are listed here: http://www.openbsd.org/support.html Best regards -Tico

Re: OpenBGPD Flaps, 32bit ASn in the wild.

2009-01-10 Thread tico
. Sound good for me. Is there any patch I can download and compile bgpd on my own? Regards, Falk Falk, Read the rest of the thread to which you've just responded: http://marc.info/?l=openbsd-misc&m=122894875212174&w=2 http://www.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/bgpd/rde.c -Tico

Re: Testing in a virtual environment

2009-01-06 Thread tico
meout -- resetting em0: watchdog timeout -- resetting em0: watchdog timeout -- resetting messages on the console when using the e1000 NIC emulation, but it doesn't seem to be too severe right now, and is only occurring when I'm serving a decent bit of data (55-68mbps SSH/rsync data).

Re: OpenLDAP w/o bdb okay?

2009-01-05 Thread tico
Damn, forgot to send my response to list: Message-ID: <49624a88.3020...@raapid.net> Date: Mon, 05 Jan 2009 11:59:36 -0600 From: tico User-Agent: Thunderbird 2.0.0.18 (Macintosh/20081105) MIME-Version: 1.0 To: "P.Pruett" Subject: Re: OpenLDAP w/o bdb okay? References

Re: OpenBGPD Flaps, 32bit ASn in the wild.

2008-12-11 Thread tico
r a valid AS4_PATH before announcing it onwards to cause problems for OpenBGPd users, if not others. I'd rather be missing a route than missing an entire feed and/or propagating attributes that will kill others' BGP sessions. -tico

Re: OpenBGPD Flaps, 32bit ASn in the wild.

2008-12-10 Thread tico
So either of you should contact the ukranian ISP who is at that prefix; that is the problem, right? Yes we've been in contact with said ISP. They have called out their on call engineer and their upstreams are applying pressure. This time it was unintentional. A rouge isp DoSing all OpenBGP

Re: OpenBGPD Flaps, 32bit ASn in the wild.

2008-12-10 Thread tico
tico wrote: Ditto. This has just caused me the same problems. Alex at Hurricane Electric found this for me, and my ipv4 BGP sessions have *only* stabilized after filtering out this prefix (4.4-RELEASE on i386). I'll post up MRT dumps if anyone's interested. -Tico Peter Bristow

Re: OpenBGPD Flaps, 32bit ASn in the wild.

2008-12-10 Thread tico
Ditto. This has just caused me the same problems. Alex at Hurricane Electric found this for me, and my ipv4 BGP sessions have *only* stabilized after filtering out this prefix (4.4-RELEASE on i386). I'll post up MRT dumps if anyone's interested. -Tico Peter Bristow wrote: Hi Al

Re: BGPLG mostly working

2008-12-07 Thread tico
ee weeks ago) missed including any relevant troubleshooting info. -Tico

Re: OpenBSD and XenSource

2008-12-01 Thread tico
. If you manage to make any progress in your efforts (or any one else's) to run OpenBSD under Xen with any amount of usefulness, I'd be interested to hear about it. Feel free to contact me off-list. Cheers! -Tico

Re: 4.4 & Samba write performance

2008-11-20 Thread tico
Whyzzi wrote: Answers to your questions are inline /w the question 2008/11/18 tico <[EMAIL PROTECTED]>: 1. Why is this sent to the "ports@" mailing list ? I've lurked the list for a long time - since around 2.8. I've asked the odd question here and/or there

Re: openbgpd bgplg ping and traceroute do not work

2008-11-14 Thread tico
/avg/max/std-dev = 0.340/0.340/0.340/0.000 ms $ mount | grep var /dev/wd0e on /var type ffs (local, nodev) /dev/wd0h on /var/spool/imap type ffs (local, noatime, nodev, nosuid, softdep) Read: http://www.openbsd.org/faq/faq10.html afterboot(8), httpd(8), bgplg(8), mount(8) -tico

Re: filters in bgpd.conf when running IPv6 feeds on a 4.3 box

2008-09-24 Thread tico
ed address families. Thanks for the quick fix! If anyone is interested, I've got a looking glass up at http://208.86.95.250/cgi-bin/bgplg and the IPv6 address (not running the v6-enabled Apache at the moment) is 2607:f618:1::1 Cheers! Tico

Re: filters in bgpd.conf when running IPv6 feeds on a 4.3 box

2008-09-24 Thread tico
On 2008-09-24, tico <[EMAIL PROTECTED]> wrote: > Reading the FILTERS section of bgpd.conf lead me to believe that > simply adding "allow from any inet6 prefixlen 12 - 48" would allow > the IPv6 prefixes that my neighbor was announcing to me be added > from the RIB in

filters in bgpd.conf when running IPv6 feeds on a 4.3 box

2008-09-24 Thread tico
URRENT, so forgive me if this is old news -- the only IPv6-related brokenness that I could find that seemed to even remotely be similar is http://marc.info/?l=openbsd-misc&m=121036759606446&w=2 et voila! $ ping6 -S 2607:f618:1::1 ipv6.google.com PING6(56=40+8+8 bytes) 2607:f618:1::1 --> 2001:4860:0:2001::68 16 bytes from 2001:4860:0:2001::68, icmp_seq=0 hlim=59 time=76.009 ms Anyhow, cheers! -Tico