Re: carp + pfsync + sqlnet (Oracle)

2004-06-21 Thread przemolicc
On Fri, Jun 18, 2004 at 11:55:37AM +0200, Marin Vidakovic wrote: [EMAIL PROTECTED] wrote: Does anybody protect any oracle rdbms (sqlnet protocol) using obsd 3.5 + carp + pfsync ? Does it work ? Is it problematic ? Can you be more specific? Are you talking about 2 oracle rdbms + 2

Re: quest for ifstated

2004-06-21 Thread Lars Hansson
Jeff Wilson wrote: As I see it, my options are: 1.) invite the wrath of Frankenstein by attempting to use ifstated within 3.5 -stable You dont have to create a frankenstein tree for this. Just get the ifstated files from current cvs and build on stable, it builds just fine. --- Lars

Re: carp + pfsync + sqlnet (Oracle)

2004-06-21 Thread James Cammarata
At 06:00 AM 6/16/2004, [EMAIL PROTECTED] wrote: Does anybody protect any oracle rdbms (sqlnet protocol) using obsd 3.5 + carp + pfsync ? Does it work ? Is it problematic ? I assume you want to do a redundant DB correct? Databases are not suited to this kind of failover, due to the lack of

Re: carp + pfsync + sqlnet (Oracle)

2004-06-21 Thread przemolicc
On Mon, Jun 21, 2004 at 02:28:26AM -0500, James Cammarata wrote: At 06:00 AM 6/16/2004, [EMAIL PROTECTED] wrote: Does anybody protect any oracle rdbms (sqlnet protocol) using obsd 3.5 + carp + pfsync ? Does it work ? Is it problematic ? I assume you want to do a redundant DB correct?

Re: quest for ifstated

2004-06-21 Thread Jeff Wilson
On Mon, 21 Jun 2004, Lars Hansson wrote: You dont have to create a frankenstein tree for this. Just get the ifstated files from current cvs and build on stable, it builds just fine. So let me see if I follow: $ mkdir ~/ifstated cd ~/ifstated $ CVSROOT=favorite_mirror cvs checkout

pf trouble with NAT and ppp (long)

2004-06-21 Thread Jonathan Thornburg
I'm trying to use pf with NAT for a home firewall, with a dialup ppp connection to my ISP (and thence to the internet). Everything is fine (apart from the insecurity) when I use a test NAT + pass-all-traffic pf ruleset, but when I enable a proper NAT+filtering ruleset, all traffic on the ppp link

Re: VPN and CARP?

2004-06-21 Thread Sean
I've been thinking about this as well. Perhaps one way to deal with the master returning online is with ifstated: the backup could run a script after a CARP change, tearing down the existing tunnel and allowing the master firewall to establish a new IPSec tunnel. Sean Dave Mangot wrote: We are

Re: pf trouble with NAT and ppp (long)

2004-06-21 Thread j knight
Jonathan Thornburg wrote: [ massive snip ] pf with a filtering ruleset === Now for the problem: For real use I've defined a pf ruleset which does NAT and some filtering (and once I get things working I'll add additional filtering rules for the Windows subnet): # macros

Re: carp + pfsync + sqlnet (Oracle)

2004-06-21 Thread Per-Olov Sjöholm
[EMAIL PROTECTED] said: On Mon, Jun 21, 2004 at 02:28:26AM -0500, James Cammarata wrote: At 06:00 AM 6/16/2004, [EMAIL PROTECTED] wrote: Does anybody protect any oracle rdbms (sqlnet protocol) using obsd 3.5 + carp + pfsync ? Does it work ? Is it problematic ? I assume you want to do a