I used the example firewall from the openbsd faq:
lan_net = "192.168.1.0/24"
int_if = "em0"
ext_if1 = "fxp0"
ext_if2 = "fxp1"
ext_gw1 = "192.168.10.1"
ext_gw2 = "192.168.20.2"
# nat outgoing connections on each internet interface
nat on $ext_if1 from $lan_net to any -> ($ext_if1)
nat on $ext_if2 from $lan_net to any -> ($ext_if2)
# default deny
block in from any to any
Hello,
I have a problem during patch of openSSL on OPenBSD 4.4.
This is the patch i applied:
ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.4/common/012_openssl.patch
When i run make after libssl patch i get this error:
cd ../../sbin
make obj
make depend
make
/usr/src/sbin/bioctl/bioctl.c:745: error: dereferencing pointer to incomplete type
I am trying to activate ipsec vpn in openbsd 4.1 which is installed as a virtual machine on VMWare server on Linux as host.
I have made the necessary changes to the configurations in ipsec.conf, pf.conf, rc.conf files as needed by ipsec vpn.
The vpn connection os between 2 openbsds (both virtual machines) on the same box (linux as host as mentioned earlier)
I am running OBSD amd64 rel 4.4.
I downloaded sys.tar.gz for the 4.4 release and recompiled and installed the GENERIC.MP kernel w/o making any changes to the GENERIC or GENERIC.MP file. The compile went fine, but now I get the uhub1: device problem, disabling port 2 and my USB mouse and keyboard don't work.
The server is a Sun Fire X2200 M2 with 8 cores and 8 Gigs of memory.
OpenBSD 4.4.
Laptop Acer Aspire 3682. WiFi the card was defined still at
To installation, and here ethernet Marvell Yukon - is not present. After installation dmesg
Gives out the following:
mskc0 at pci1 dev 0 function 0 "Marvell Yukon 88E8038" rev 0x14:
CANNOT map mem space
That with it to do, I not in a course. I know, that is the driver sky2 for these
Hey all!
I have a serious problem here and I dont have more ideas how to fix this, last week we changed our firewall, now we're using PF instead of iptables, but after that when someone had to access another network through ssh all connections are drop after 1min or less.
There's any special rule or configuration ?
Hello,
I have problem with pf+bridge+vlan (multicast traffic) and I googled a lot, read the manuals and so on - no help.
Maybe here in forum somebody can give some hints or something which helps a little bit.
Following setup is made for multicast traffic separation from one lan to multiple vlans.
Setup:
Two physical interfaces
bnx0
bnx1
interfaces bnx0 and bnx1 has vlans:
Hi Guys,
I have researching and investigating on doing squid transparent proxying with the use of pf in bridge mode. But I could not still find a way to make it work.
I have read heaps of stuff across the net but nothing seems to work to me.
our pound with zeo isn't working for Plone...
we get this error message:
pound: received signal 15 - exiting...
help us -- please!
Hello,
I currently have four full-time positions for my direct client in Los Angeles, California. Salary ranges are from $85 – $125k, depending on the position and experience. These jobs are open NOW. My client has had challenges finding the right skillset and will move quickly for the right individual(s).
I´m using sasyncd to failover my eight vpn tunnels in Openbsd 4.3 system. Everything worked fine since 4.1, but now I need to use two different routes to balance my tunnels between two different links.
Some of my tunnels will use ext_if1, (and consequently carp1) and other four tunnels must use ext_if2 (with carp2 interface).
Now I don't know if im having a brainfreeze but as of late I cannot find access points with my wpi0 device
ifconfig -M wpi0
gives me the finger with no networks found:
And /var/log/messages moans about some arkane fireware:
Aug 4 12:38:20 user /bsd: wpi0: error, 2, could not read firmware wpi-3945abg
Aug 4 12:38:20 user /bsd: wpi0: could not load firmware
We are using a Firewall with OpenBSD 3.9.
The installation and configuration is complete and operating without a hitch. We have the login and password to the server.
The original installer cannot be located and is somewhere in Europe.
We need some expert to set up report generation i.e daily traffic logs, port activity, etc.
i had atheros ar5006eg wireless card
[bsd] # ifconfig ath0
ath0: flags=8822 mtu 1500
lladdr xx:xx:xx:xx:xx:xx
groups: wlan
media: IEEE802.11 autoselect
status: no network
ieee80211: nwid ""
and dmesg
[bsd] # dmesg |grep ath0
ath0 at pci2 dev 0 function 0 "Atheros AR5424" rev 0x01: irq 10
Hi Guru's
As part of Cisco's Software Operations team, we are looking to build our Open source software Engineer team with experience in (GPL, LGPL, BSD) open source licences.
This is a highly critical position as whoever comes in will be evaluating Cisco's software code with Open Source licences and making sure code meets the license and does not violate.