Re: OFF Topic Might not belong on the list "PF anf VPN to Cisco"

2004-12-30 Thread Dave Mangot
don't know that anyone here can help you with much more unless you actually have some kind of specific question. If you are asking if anyone on the planet has setup an IPSEC VPN to a Cisco device from OpenBSD then I can confidently say, the answer is yes. -Dave

Re: A moment of silence for a fallen comrade...

2004-12-15 Thread Dave Mangot
IX and OpenBSD exploits. Then ask the consultants for a refund;-) Ha ha. As if upper management actually made decisions based on technical merit. Good one. Funny. -Dave -- Dave Mangot [EMAIL PROTECTED] DHAP Digital, Inc. http://www.dhapdigital.com/ San Francisco, CA +1.415.962.4891

Re: pfctl and macro expansion

2004-10-08 Thread Dave Mangot
if I'm working with a list or not. I also never seem to run into the kind of problem you described. ~~Cheers, -Dave - -- Dave Mangot DHAP Digital, Inc. http://www.dhapdigital.com/ San Francisco, CA 415.962.4891 -BEGIN PGP SIGNAT

Re: no new states and high rate of searches

2004-08-26 Thread Dave Mangot
ense to me without a frame of reference. :( I'm feeling like this has to be related to pfsync somehow. It really looks like the firewall has rules that don't show with pfctl -sr but actually just default deny everything that doesn't already have a state. It just makes no se

Re: no new states and high rate of searches

2004-08-26 Thread Dave Mangot
buf memory error 0 send error Do you have a similar number of failed state lookup/inserts? That number looks high to me. Is it normal? -Dave -- Dave Mangot [EMAIL PROTECTED] DHAP Digital, Inc. http://www.dhapdigital.com/ San Francisco,

no new states and high rate of searches

2004-08-25 Thread Dave Mangot
/s memory 00.0/s bad-timestamp 00.0/s The rates are the things that look crazy to me. Otherwise, the machine seems perfectly happy. Lots of memory, zero cpu load. Any ideas of what I can look for/at?

VPN and CARP?

2004-06-18 Thread Dave Mangot
carp0 | | | --- -- | FW B| -- Cheers, -Dave -- Dave Mangot [EMAIL PROTECTED] DHAP Digital, Inc. http://www.dhapdigital.com/ San Francisc