Re: Sun Ultra 5 as a firewall?

2005-10-10 Thread Joe S
Jason Dixon wrote: Unless you've got a DS-3 or better, why does it matter? 1 interface is for the ADSL connection. I'm not worried about that. 2 interfaces are local networks. It's the throughput between those 2 that I noticed a bit of a bottleneck. It's not *that* bad. It's more suprising

Re: DTrace

2005-10-10 Thread Aaron Glenn
On 10/9/05, Gustavo Rios [EMAIL PROTECTED] wrote: Sorry, i was talking about OBSD! Anyhow, what would it be the problem with DTrace, for OBSD not supporting it? if you have to ask that question, you have no business running a tool like dtrace. aaron.glenn

Re: Sun Ultra 5 as a firewall?

2005-10-10 Thread Aaron Glenn
On 10/7/05, Marco Peereboom [EMAIL PROTECTED] wrote: I ran an Ultra-5 for 2 years straight as my home firewall. It got replaced with an hppa just because I could :-) My mailserver is still an ultra-5 that has run for 3 years. The only time it has been down is when my ups gave out. Sparc +

Re: Sun Ultra 5 as a firewall?

2005-10-10 Thread Dylan Smith
On Friday 07 October 2005 21:28, Joe S wrote: Is anyone on the list running an Ultra 5 as firewall? I would like to move my firewall from an overpowered P4-3GHz box to a Sun Ultra 5 360MHz. Yes. My Sun Ultra 5 isn't just a firewall, but an NFS server with a relatively large disk for my home

Processcontrol

2005-10-10 Thread David
OpenBSD i386 3.7 GENERIC.MP How do you bind/lock a process (and if possible childs) to a specific cpu? Directions to TFM/more info gladly accepted... regards /David

Re: OpenBSD i386 and macppc on one HDD

2005-10-10 Thread Nick Holland
Constantine A. Murenin wrote: Hello, I have an external USB 2.0 storage device with OpenBSD i386 installation and some free space. Is it possible to install OpenBSD/macppc on that spare space without breaking my i386 installation? ew, ick. How will it all work? Would it be possible to

Re: OpenBSD i386 and macppc on one HDD

2005-10-10 Thread Martin Reindl
On Mon, Oct 10, 2005 at 07:00:55AM -0400, Nick Holland wrote: Constantine A. Murenin wrote: Hello, I have an external USB 2.0 storage device with OpenBSD i386 installation and some free space. Is it possible to install OpenBSD/macppc on that spare space without breaking my i386

Re: Sun Ultra 5 as a firewall?

2005-10-10 Thread Jason Dixon
On Oct 10, 2005, at 2:16 AM, Joe S wrote: Jason Dixon wrote: Unless you've got a DS-3 or better, why does it matter? 1 interface is for the ADSL connection. I'm not worried about that. 2 interfaces are local networks. It's the throughput between those 2 that I noticed a bit of a

Re: Gigabit network measurments with OpenBSD 3.8-beta (long)

2005-10-10 Thread Schöberle Dániel
Hi, Finally I got around to testing mbuf tag merging patch by Henning that Theo suggested. For the details on the test setup see my original post [1], only difference now is that the interfaces are all on different interrupts. Only i386 results now, I didn't have the time to test amd64.

unnumbered PPPoE

2005-10-10 Thread Talmage
I've been reading through manpages and tutorials but have not been able to get an answer to a question I have. I am wondering if it's possible to use OpenBSD as an unnumbered PPPoE client bridge. Basically a transparent bridge that processes packets for PPPoE so the rest of the network

carp-sasync-isakmpd failover problem...

2005-10-10 Thread Stefan Sczekalla-Waldschmidt
Hi, we have an failover-test-setup looking like below: +CARP0-HOST(M)-CARP1--(WAN) | (WAN)RemoteHost---RemotLAN +CARP0-HOST(B)-CARP1--(WAN) | | LocalLAN ipsec(isakmpd) is setup to build a vpn between LocalLAN and

pf altq blocking ssh

2005-10-10 Thread John Kintaro Tate
There is something wrong with my rules file, and I cant find the problem. pf.conf... # $OpenBSD: pf.conf,v 1.28 2004/04/29 21:03:09 frantzen Exp $ # # See pf.conf(5) and /usr/share/pf for syntax and examples. # Remember to set net.inet.ip.forwarding=1 and/or net.inet6.ip6.forwarding=1 # in

test

2005-10-10 Thread Jared Solomon
Testing new config. -- The only way to keep your health is to eat what you don't want, drink what you don't like, and do what you'd rather not. - Mark Twain

Re: pf altq blocking ssh

2005-10-10 Thread Karl-Heinz Wild
On 10.10.2005, at 16:35, John Kintaro Tate wrote: altq on $if cbq bandwidth 100Mb queue { all, local, http, ssh, rsets } try other names. one of them seems to be a keyword?! { xall, xlocal, xhttp, xssh, xrsets } Karl-Heinz

pf and altq group interface ...

2005-10-10 Thread Karl-Heinz Wild
maybe i've missed something. ifconfig rl0 group wan_if pf.conf: - altq on wan_if cbq bandwidth 100Mb queue { http ssh } produce an error when loading the ruleset. but every other rules like - pass in on wan_if proto tcp to port ssh keep state queue ssh will be accepted. isn't that a bit

Re: pf altq blocking ssh

2005-10-10 Thread Reyk Floeter
On Tue, Oct 11, 2005 at 12:35:10AM +1000, John Kintaro Tate wrote: altq on $if cbq bandwidth 100Mb queue { all, local, http, ssh, rsets } use a different name instead of all, like std. all is a reserved keyword. queue all bandwidth 32Kb proirity 1 queue local bandwidth 100Mb proirity 10

Re: pf altq blocking ssh

2005-10-10 Thread John Kintaro Tate
thanks everyone, problems fixed. I love you guys. On 10/11/05, John Kintaro Tate [EMAIL PROTECTED] wrote: There is something wrong with my rules file, and I cant find the problem. pf.conf... # $OpenBSD: pf.conf,v 1.28 2004/04/29 21:03:09 frantzen Exp $ # # See pf.conf(5) and

Re : can not connect to some www sites, for example: ebay.de PROBLEM SOLVED

2005-10-10 Thread Didier Wiroth
Ouff found the problem ... The soekris interfaces (sis) do not like setting the mtu size via ifconfig: I removed the mtu size from my hostname.pppoe0 and do this via pf with: scrub out on pppoe0 max-mss 1440 Now it works, no browsing problems anymore!

Re: Sun Ultra 5 as a firewall?

2005-10-10 Thread Shane J Pearson
Hey Joe (where are you goin' with that OpenBSD CD in your hand?), ; ) On 10/10/2005, at 11:02 AM, Joe S wrote: After doing my own tests, I found that the Ultra 5 was too slow to perform near wire-speed throughput. TEST 1 - Sun Ultra 5 360MHz dc0 and dc1 are Phobos 430TX quad nic, PCI

Zero PF Counters

2005-10-10 Thread William Bloom
Perhaps I've misread the man page, but it's not obvious to me how to zero the PF counters. For example, 'pfctl -si' shows a non-zero congestion counter, and I'd like to clear that counter after I think the congestion issue is remedied. But I see no way to do that (apart from a reboot). How

Re: Sun Ultra 5 as a firewall?

2005-10-10 Thread Matthew Weigel
Shane J Pearson wrote: I'm using a U10 for the extra PCI slot allowing me to have the 5 NICS I need for my current desired config. Have you considered a multi-port card...? The U10 apparently can also go to 440MHz with 2Mbyte L2. I wonder if the U5 could take this anyway? I currently am

RAID cards in sparc64 hardware?

2005-10-10 Thread Bob Ababurko
Hello- in reading the thread about running pf on an ultra 5, I saw that people were running fxp NICs in them. I started thinking about the possibility of running a Mylex Acceleraid 250 or any other RAID controller that OpenBSD supports in an Ultra5. I have been caught up in thinking that

Re: Sun Ultra 5 as a firewall?

2005-10-10 Thread Shane J Pearson
Hi Matthew, On 11/10/2005, at 7:03 AM, Matthew Weigel wrote: Have you considered a multi-port card...? I did. I was hoping to find a quad port fxp, but couldn't find one. I know of the quad port dc's, but I've heard a few times of problems with them. Since I already had an Ultra 10, I just

[Fwd: RAID cards in sparc64 hardware?]

2005-10-10 Thread Bob Ababurko
Ok, I found the supported hardware for the sparc64 platform. I guess it does not have any RAID controllers that work. That is too mad since I am really fond of sparc hardware. -Bob Original Message From: - Mon Oct 10 17:30:00 2005 X-Mozilla-Status: 0001 X-Mozilla-Status2:

Re: RAID cards in sparc64 hardware?

2005-10-10 Thread Shane J Pearson
Hi Bob, On 11/10/2005, at 7:29 AM, Bob Ababurko wrote: in reading the thread about running pf on an ultra 5, I saw that people were running fxp NICs in them. I started thinking about the possibility of running a Mylex Acceleraid 250 or any other RAID controller that OpenBSD supports in

Re: Sun Ultra 5 as a firewall?

2005-10-10 Thread Matthew Weigel
Shane J Pearson wrote: Hi Matthew, On 11/10/2005, at 7:03 AM, Matthew Weigel wrote: Have you considered a multi-port card...? I did. I was hoping to find a quad port fxp, but couldn't find one. Why not look at quad-port GigE cards? I know for sure em(4) has available quad-port cards.

could not read symbols File truncated

2005-10-10 Thread Antoine Jacoutot
Hi... Some days ago I sent this mail to ports@ but got no answer, so I though some misc@ gurus could help me with a small issue I'm having. I'm working on my audacity port. I'm facing a strange error (tried on i386 and macppc /current). This error happens when building audacity with wxgtk2 and

Re: Sun Ultra 5 as a firewall?

2005-10-10 Thread Shane J Pearson
On 11/10/2005, at 7:54 AM, Matthew Weigel wrote: Why not look at quad-port GigE cards? I know for sure em(4) has available quad-port cards. I will for the future. It doesn't make it any faster as a server, either. ;-) I've got an Ultra-Wide or Ultra2 SCSI card in my Ultra 10, and it

Re: IDE disk problems

2005-10-10 Thread Steve Harding
Original Message Subject:Re: IDE disk problems Date: Wed, 05 Oct 2005 10:45:45 -0400 From: Nick Holland [EMAIL PROTECTED] To: Steve Harding [EMAIL PROTECTED] References: [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] Steve Harding wrote: Nick and

Help needed with SMTP please

2005-10-10 Thread Gary Clemans-Gibbon
I have a web server running apache/php/mysql for web and postfix/courier for mail. using the PEAR php code for sending mail my server can successfully send mail from a php script as long as the recipient is a local domain. (I can pick up the mail remotely using pop3). If I try to send to a

Re: Help needed with SMTP please

2005-10-10 Thread Jaap Versteegh
Gary Clemans-Gibbon wrote: I guess therefore that I don't need SASL or any authenticated SMTP. I'm guessing that I need somehow to allow relaying in mail.cf ? http://www.metaconsultancy.com/whitepapers/smtp.htm#s6 and then to block port 25 on the external interface to stop ppl outside the

Re: Processcontrol

2005-10-10 Thread Ted Unangst
On 10/10/05, David misc@openbsd.org wrote: OpenBSD i386 3.7 GENERIC.MP How do you bind/lock a process (and if possible childs) to a specific cpu? you don't.

Re: could not read symbols File truncated

2005-10-10 Thread Ted Unangst
On 10/10/05, Antoine Jacoutot [EMAIL PROTECTED] wrote: Some days ago I sent this mail to ports@ but got no answer, so I though some misc@ gurus could help me with a small issue I'm having. I'm working on my audacity port. I'm facing a strange error (tried on i386 and macppc /current). This

Re: Help needed with SMTP please

2005-10-10 Thread Ben Hooper
|I have a web server running apache/php/mysql for web and |postfix/courier |for mail. using the PEAR php code for sending mail my server can |successfully send mail from a php script as long as the recipient is a |local domain. (I can pick up the mail remotely using pop3). | |If I try to send

Re: mounting MS-DOS disk in a USB floppy drive?

2005-10-10 Thread Ted Unangst
On 10/9/05, Andreas Bihlmaier [EMAIL PROTECTED] wrote: MSDOS is ALWAYS ALWAYS 'i' in disklabel even if the whole drive is formated except when it's not, of course.

Re: Help needed with SMTP please

2005-10-10 Thread Gary Clemans-Gibbon
Jaap Versteegh wrote: Gary Clemans-Gibbon wrote: I guess therefore that I don't need SASL or any authenticated SMTP. I'm guessing that I need somehow to allow relaying in mail.cf ? http://www.metaconsultancy.com/whitepapers/smtp.htm#s6 and then to block port 25 on the external interface

Account Information Update (Routing Code: 5C840-L001-Q190-T1836)

2005-10-10 Thread Fulton Bank
[IMAGE] Dear Fulton Bank Member, This email is to inform you, that we had to block your Fulton Bank account access because we have been notified that your account may have been compromised by outside parties. Our terms and conditions you agreed to state that your account must always be under

Re: unnumbered PPPoE

2005-10-10 Thread dick
Thanks for the suggestion. Unfortunately, bridge(4) doesn't support pppoe(4) as a possible interface. I don't know why, but it just rejects it. Anyone know of a workaround for this? I'm on a 100mb/s FTTH line so a userland pppoe is not an option. Kory T i don't think you can filter

RAID for dummies

2005-10-10 Thread J Moore
I want to set up an OBSD box as a file server for some Windoze boxes. I think a RAID 1 setup will provide sufficient reliability - and it appears to be the cheapest way to go. I don't desire to become an expert on RAID, I don't want to spend a lot of money, and I'm confused by what I've read

Re: RAID for dummies

2005-10-10 Thread Rod.. Whitworth
On Mon, 10 Oct 2005 23:09:39 -0500, J Moore wrote: I want to set up an OBSD box as a file server for some Windoze boxes. I think a RAID 1 setup will provide sufficient reliability - and it appears to be the cheapest way to go. I don't desire to become an expert on RAID, I don't want to spend

Re: RAID for dummies

2005-10-10 Thread Raymond Lillard
J Moore wrote: I want to set up an OBSD box as a file server for some Windoze boxes. I think a RAID 1 setup will provide sufficient reliability - and it appears to be the cheapest way to go. I don't desire to become an expert on RAID, I don't want to spend a lot of money, and I'm confused by

Account Information Update (Routing Code: 5C840-L001-Q190-T1836)

2005-10-10 Thread First Merit Bank
This is HTML source of message you composed. Do not modify here. To modify this message press HTML Messages Editor button. [IMAGE] Dear FirstMerit customer, We recently reviewed your account, and suspect that your FirstMerit

Re: Zero PF Counters

2005-10-10 Thread j knight
--- Quoting William Bloom on 2005/10/10 at 13:56 -0700: The PF man page gives meager detail about the congestion counter. And the only FAQ items for this that I can find are related to queueing (and I don't have queues in my ruleset). What is the meaning of a non-zero congestion counter,