I have been trying to get my snmp v3 users set up and to a certain degree I'm having luck, but unfortunately only with DES privacy. I have been following the SNMP documentation and not sure if i'm doing something wrong or if the openbsd version of snmp doesn't do aes. Here is my command for creating a user: net-snmp-config --create-snmpv3-user -ro -A mypassword -X myotherpassword -x DES -a SHA newnewuser which comes back with no errors and the resultant message: adding the following ...

--Apple-Mail-4--766701014 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Hi, I have a Soekris 4801-60 with a standard OpenBSD 4.1 install (generic kernel). I'm using it as a firewall/router with some nat. The problem is I'm not able to get more then 2mbit throughput. Also on the soekris itself with wget for example. I've tried to disable qos, disable pf, reboot etc. nothing of the solved the problem. And I'm wondering ...

is there a tool out there that saves records off pfsync for later analysis? (my particular case is to figure out who was spamming behind nat, but i'm sure there are many other uses for something like this)

Hi When turning on a computer I once get several errors like the following: ichiic0: exec: op 1, addr 0x49, cmdlen 1, len 0, flags 0x08: timeout, status 0x41<BUSY,INUSE> This is a box running OpenBSD 4.1 with multi-processors enabled. According to my dmesg below, I believe the device that is causing this timeout is the PCI_PRODUCT_INTEL_82801GB_SMB. The person who started up the computer does not remember, but he may have plugged in a usb keyboard during the boot. Is it reasonable that ...

Hi, I run my OpenBSD firewallsystem on a System which is way oversized for my needs. I want this system to consume as little power as possible so I need your advices. I started the apmd with the option - C but the apm output is the following: Battery state: unknown, 0% remaining, unknown life estimate A/C adapter state: not known Performance adjustment mode: cool running (2009 MHz) So the CPU is still running at full speed! Here is my dmesg output for the cpu: cpu0 at mainbus0: ...

My personal suggestion? Ask your users why, other than the fact that Outlook does it, do you need one application to handle both calendaring and email? If you can get your users to break out of that (rather idiotic, IMO) paradigm, an entire world of easier-to-support possibilities opens up for you. Just so you don't think I'm being a cocky ass, I asked that question, and was rewarded with "because I'm the president and I say so." I'm now in the process of rolling out Scalix.

maybe look at: http://www.mozilla.org/projects/calendar/sunbird/ http://www.mozilla.org/projects/calendar/lightning/ Along with dovecot/courier & sendmail/postfix whatever.....

You might want to check out http://www.horde.org/groupware/. -- James Turner BSD Group Consulting http://www.bsdgroup.org

That is possible, but he might also want his log messages to end up on the server in a guaranteed way, or somesuch. (This, of course, is hugely problematic.) Joachim -- PotD: x11/flwm - fast-light window manager

sysutils/syslog-ng can use SSL/TLS. Btw: Anybody working on updating the syslog-ng port to v2.x? Best Martin

Hello, I have two machines running OpenBSD 4.2-beta (GENERIC) #338, but this happened with 4.1-stable as well. The machines have 8 gigabit interfaces and are only doing routing/nat with pfsync and carp. It seems that after about 15 days, all memory is consumed and no resources are available. The machine does not drop into ddb, but it doesn't do any routing anymore and one cannot log in. Worse is that it doesn't switch to slave config as carp still works. The running processes are: USER ...

It may be trivial but I wonder where in the line you highlighted is the clue that gave you the answer.

Hi Claudio, thank you very much for the explanation. This is then an "implementation weakness", and it seems to preclude the (intended) use for the following scenario: * router A announcing a route via router B (which is not an OSPF speaker) I'm not quite sure if your statement also goes for "connected" networks. I'd like to be able to announce networks dynamically if they "go up", like this: network N1 --- C ---------+------s1-----A----+---------- network N2 ...

All redistributed networks are originated with a nexthop of the ospf router. That is how it works for the moment and changing that is not simple as you need to know if the nexthop you intend to use is reachable by the other ospf routers. Make sure you only announce static routes that are behind the router that redistributes them.