Re: USB drive as a tape device

2007-08-15 Thread Otto Moerbeek
On Wed, 15 Aug 2007, Edwards, David (JTS) wrote: Hi, Tape drives with a very large capacity are very expensive so I thought I'd use external USB drives instead. While modifying the backup script, I thought I'd try using the drive as a tape device instead of going to the trouble of

Re: OT: reliable 4-port switches

2007-08-15 Thread Johan M:son Lindman
On Wednesday 15 August 2007 03:30:48 Jacob Yocom-Piatt wrote: i'm carping a couple machines with public IPs and would appreciate recommendations for reliable 4-port switches for the task. there is a single ethernet cable uplink to the ISP that i will feed into the switch, then to the

Re: Packet Filter: traceroute/udp problem on pf.conf

2007-08-15 Thread kintaro oe
Hi Peter, Thanks a lot on the advice. Looks like its working now. cool! Peter N. M. Hansteen [EMAIL PROTECTED] wrote: kintaro oe writes: # no restriction on lan pass quick on $int_if # allow icmp incoming/outgoing to wan pass quick on $ext_if inet proto icmp all Unix traceroutes by

Does auto mounter support nfsv3?

2007-08-15 Thread Edd Barrett
Hi, I have setup amd to work like /net on a solaris box: # cat /etc/amd/master /net amd.net #cat /etc/amd.net /defaults type:=host;fs:=${autodir}/${rhost};rhost:=${key} * opts:=ro,soft,intr,vers=3,proto=udp I would like to use version 3 NFS if at all possible. I got vers=v3

Re: OT: reliable 4-port switches

2007-08-15 Thread David Given
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jacob Yocom-Piatt wrote: [...] i ask this because i've bought cheapo 4-port switches in the past and had them seize-up on occasion. seize-ups are totally unacceptable to me for this application so suggestions on which brand or model would be

Re: Does auto mounter support nfsv3?

2007-08-15 Thread Edd Barrett
Hi, On 15/08/07, Stuart Henderson [EMAIL PROTECTED] wrote: On 2007/08/15 11:49, Edd Barrett wrote: amd:3653 on /net type nfs (v2, udp, intr, timeo=100, retrans=100) that's the mount to the local amd instance, which is also done by nfs, it's not the mount to the remote host. Yes, sorry I

Re: Does auto mounter support nfsv3?

2007-08-15 Thread Edd Barrett
Hi, Thanks for you suggestions. On 15/08/07, Nicholas Marriott [EMAIL PROTECTED] wrote: Try: opts:=ro,soft,intr,nfsv3,udp Here is my config file now # cat amd.net /defaults type:=host;fs:=${autodir}/${rhost};rhost:=${key} * opts:=ro,soft,intr,nfsv3,udp Here is proof the

Re: Does auto mounter support nfsv3?

2007-08-15 Thread Nicholas Marriott
Here is my config file now # cat amd.net /defaults type:=host;fs:=${autodir}/${rhost};rhost:=${key} * opts:=ro,soft,intr,nfsv3,udp Hrm, I thought this was working for me but I think I was confused. It doesn't look like OpenBSD's amd supports it, none of the obvious

Re: MS Exchange to MBOX

2007-08-15 Thread Chris
On Thu, 9 Aug 2007 12:58:13 -0600 Joshua Gimer [EMAIL PROTECTED] wrote: We are planning on moving a large amount of Exchange mailboxes to UNIX mbox format. My question is, does anyone know of any projects out there or of any tools that can assist in this conversion? Thanks Josh

Re: OT: reliable 4-port switches

2007-08-15 Thread Jacob Yocom-Piatt
Johan M:son Lindman wrote: On Wednesday 15 August 2007 03:30:48 Jacob Yocom-Piatt wrote: i ask this because i've bought cheapo 4-port switches in the past and had them seize-up on occasion. seize-ups are totally unacceptable to me for this application so suggestions on which brand or model

Beginner NAT / route / pfctl question

2007-08-15 Thread Lars Noodén
I'm building a firewall / gateway on OpenBSD and seem to have the pieces working separately, but need a clue as to how to get them to fit together. Basically, I can connect to and from each interface but not across them. I can connect from A to B (and from B to A) via SSH, ping, HTTP I can

Re: Beginner NAT / route / pfctl question

2007-08-15 Thread Maurice Janssen
On Wednesday, August 15, 2007 at 15:59:34 +0300, Lars Noodin wrote: I'm building a firewall / gateway on OpenBSD and seem to have the pieces working separately, but need a clue as to how to get them to fit together. Basically, I can connect to and from each interface but not across them. I can

Re: Does auto mounter support nfsv3?

2007-08-15 Thread Edd Barrett
Hi, On 15/08/07, Christian Weisgerber [EMAIL PROTECTED] wrote: IIRC, OpenBSD's amd only supports v2. Any idea if it hard to make v3 compatible? -- Best Regards Edd --- http://students.dec.bournemouth.ac.uk/ebarrett

Re: OT: reliable 4-port switches

2007-08-15 Thread Brian Candler
On Wed, Aug 15, 2007 at 12:03:37PM +0100, David Given wrote: Jacob Yocom-Piatt wrote: [...] i ask this because i've bought cheapo 4-port switches in the past and had them seize-up on occasion. seize-ups are totally unacceptable to me for this application so suggestions on which brand or

Re: Beginner NAT / route / pfctl question

2007-08-15 Thread Lars Noodén
Maurice Janssen wrote: The two most obvious things to look at: - enable IP-forwarding on the fw/router That was mentioned in one of the first steps of the guides or howtos as being taken care of in /etc/sysctl.conf. Here's an except from mine: # grep forw /etc/sysctl.conf

USB2 disk running at USB1 speed

2007-08-15 Thread aretes27884
I have a USB2/Firewire external drive with a removable tray I use for backup. When the disk is connected in the following sequence: 1. connect USB cable 2. insert disk on removable tray into enclosure 3. turn on power switch to drive 4. turn on key to power disk The backup runs at USB1 speeds. If

Re: Beginner NAT / route / pfctl question

2007-08-15 Thread Maurice Janssen
On Wednesday, August 15, 2007 at 18:50:26 +0300, Lars Noodin wrote: Maurice Janssen wrote: The two most obvious things to look at: - enable IP-forwarding on the fw/router That was mentioned in one of the first steps of the guides or howtos as being taken care of in /etc/sysctl.conf. Here's an

Re: Beginner NAT / route / pfctl question

2007-08-15 Thread Lars Noodén
Maurice Janssen wrote: Looks OK to me. You could try tcpdump on the internal and external interface to try to find out where the packets get lost. Thanks. I was doing that and could see that they were getting to the one interface but not the other. After giving up, coming back, and messing

scp batch mode?

2007-08-15 Thread James Hartley
The manpage for scp(1) mentions the -B option for running scp in batch mode, but no further details. How can scp be run without prompting for a password? Thanks.

Re: scp batch mode?

2007-08-15 Thread Daniel A. Ramaley
On Wednesday 15 August 2007 13:50, you wrote: How can scp be run without prompting for a password? Set up ssh shared keys. Dan RamaleyDial Center 118, Drake University Network Programmer/Analyst

Re: scp batch mode?

2007-08-15 Thread Jeremy C. Reed
On Wed, 15 Aug 2007, James Hartley wrote: The manpage for scp(1) mentions the -B option for running scp in batch mode, but no further details. How can scp be run without prompting for a password? It sets Batchmode yes. So read the ssh_config manpage about BatchMode. You must still setup

Re: VPN Connection from 4.1 to WatchGuard

2007-08-15 Thread Hans-Joerg Hoexer
On Thu, Aug 09, 2007 at 02:22:31AM +0200, James Lepthien wrote: Hi, I have set up a vpn from my OpenBSD Box (4.1-current) to our company WatchGuard X700. My problem is that the re-keying isn't always working and my tunnel does not come up if I send traffic to the destination network. I

Re: scp batch mode?

2007-08-15 Thread Dag Richards
James Hartley wrote: The manpage for scp(1) mentions the -B option for running scp in batch mode, but no further details. How can scp be run without prompting for a password? Thanks. passwordless rsa key?

Re: ipsec vpn?

2007-08-15 Thread Hans-Joerg Hoexer
On Mon, Aug 13, 2007 at 01:30:11AM +0300, Sergey Prysiazhnyi wrote: ike dynamic from any to any \ main auth hmac-sha1 enc aes group modp1024 \ quick auth hmac-sha1 enc aes psk secret ; ike passive, ike passive esp, ike esp, etc - no results. On the openbsd gateway you need

Re: PF rdr based on hostname

2007-08-15 Thread Stuart Henderson
On 2007/08/15 16:01, Sam Fourman Jr. wrote: I am PRETTY sure there is no way to do a pf rdr command based on a hostname and I am just trying to confirm this confirmed. Maybe I could somehow use hostated? What I want to do is have 4 seprate Windows XP Professional workstations with

Re: resolv.conf.save

2007-08-15 Thread Stuart Henderson
On 2007/08/15 18:08, John Nietzsche wrote: Does anybody know what is this file about? see /sbin/dhclient-script Why is it there? saved resolv.conf from before dhcp May i remove it ? if you don't need it.

Re: VPN Connection from 4.1 to WatchGuard

2007-08-15 Thread James Lepthien
Hi there, Am 15.08.2007 um 22:24 schrieb Hans-Joerg Hoexer: On Thu, Aug 09, 2007 at 02:22:31AM +0200, James Lepthien wrote: Hi, I have set up a vpn from my OpenBSD Box (4.1-current) to our company WatchGuard X700. My problem is that the re-keying isn't always working and my tunnel does not

resolv.conf.save

2007-08-15 Thread John Nietzsche
Does anybody know what is this file about? Why is it there? May i remove it ? Thanks in advance.

PF rdr based on hostname

2007-08-15 Thread Sam Fourman Jr.
hello misc@ I am PRETTY sure there is no way to do a pf rdr command based on a hostname and I am just trying to confirm this Maybe I could somehow use hostated? What I want to do is have 4 seprate Windows XP Professional workstations with 192.168.x.x address behind a pf firewall and be able to

Re: ipsec vpn?

2007-08-15 Thread Hans Hoexer
And I should mention, that in the any to any case you can not use -K and you have to specify an isakmpd.policy file. On Wed, Aug 15, 2007 at 10:37:59PM +0200, Hans-Joerg Hoexer wrote: On Mon, Aug 13, 2007 at 01:30:11AM +0300, Sergey Prysiazhnyi wrote: ike dynamic from any to any \

Re: PF rdr based on hostname (RDP port solution)

2007-08-15 Thread Bryan
change port RDP listens on: http://support.microsoft.com/kb/306759 configure the Remote Desktop client to connect to a specific port: http://support.microsoft.com/kb/304304/ I looked those up a while ago to get access using the Rdesktop package OBSD has. Truly excellent package... HTH, Bryan

Re: PF rdr based on hostname

2007-08-15 Thread Matiss Miglans
I think you can do that with squid, but better change port numbers of rdp servers and clients. Sam Fourman Jr. wrote: hello misc@ I am PRETTY sure there is no way to do a pf rdr command based on a hostname and I am just trying to confirm this Maybe I could somehow use hostated? What I want

Re: PF rdr based on hostname

2007-08-15 Thread Bryan
dang it... once more, for feeling... change port RDP listens on: http://support.microsoft.com/kb/306759 configure the Remote Desktop client to connect to a specific port: http://support.microsoft.com/kb/304304/ I looked those up a while ago to get access using the Rdesktop package OBSD has.

Re: USB drive as a tape device

2007-08-15 Thread Edwards, David (JTS)
-Original Message- From: Otto Moerbeek [mailto:[EMAIL PROTECTED] On Wed, 15 Aug 2007, Edwards, David (JTS) wrote: Hi, Tape drives with a very large capacity are very expensive so I thought I'd use external USB drives instead. [snip] I'd say it's not safe, because a /dev/sdXc

Re: ipsec vpn?

2007-08-15 Thread Sergey Prysiazhnyi
On Wed, Aug 15, 2007 at 10:37:59PM +0200, Hans-Joerg Hoexer wrote: On Mon, Aug 13, 2007 at 01:30:11AM +0300, Sergey Prysiazhnyi wrote: ike dynamic from any to any \ main auth hmac-sha1 enc aes group modp1024 \ quick auth hmac-sha1 enc aes psk secret ; ike passive, ike

Re: PF rdr based on hostname

2007-08-15 Thread Nick Holland
Sam Fourman Jr. wrote: hello misc@ I am PRETTY sure there is no way to do a pf rdr command based on a hostname and I am just trying to confirm this Maybe I could somehow use hostated? What I want to do is have 4 seprate Windows XP Professional workstations with 192.168.x.x address behind

Re: PF rdr based on hostname

2007-08-15 Thread Steve Shockley
Nick Holland wrote: as stated, you can't do what you want to do the way you propose doing it. To be specific, if you want to have multiple sites behind one IP address and one port, you need an application proxy. With http, you can do this with host headers and a reverse http proxy. You