Brian | 2 Feb 2010 02:57
Picon

pfsense?


Hey, how would people guess a Qube2 do as a pfsense box?  For a small  
business static IP, a few lightly traffic domains, plus some moderate  
to heavy local traffic, depending on need.

thanks!

B

Claudio A Leiva | 2 Feb 2010 18:42
Picon

RE: pfsense?

If you build your Qube as a pf box please can you post the directions on how
to build one.

Thanks

Claudio 

-----Mensaje original-----
De: port-cobalt-owner <at> NetBSD.org [mailto:port-cobalt-owner <at> NetBSD.org] En
nombre de Brian
Enviado el: lunes, 01 de febrero de 2010 17:57
Para: list Cobalt NetBSD
Asunto: pfsense?

Hey, how would people guess a Qube2 do as a pfsense box?  For a small
business static IP, a few lightly traffic domains, plus some moderate to
heavy local traffic, depending on need.

thanks!

B

Se certifico que el correo saliente no contiene virus.
Comprobada por AVG - www.avg.es 
Version: 9.0.733 / Base de datos de virus: 271.1.1/2663 - Fecha de la version: 02/01/10 23:35:00
Izumi Tsutsui | 19 Feb 2010 17:17
Picon
Gravatar

NetBSD/cobalt 5.0.2 restorecd

NetBSD 5.0.2 has been released, so I create and put
5.0.2 release based NetBSD/cobalt restorecd script and ISO image:
ftp://ftp.NetBSD.org/pub/NetBSD/arch/cobalt/restore-cd/5.0.2/

The only visible change in restorecd itself from 5.0.1 is
boot.cfg menu messages on i386 host.
See CHANGES file in tar.gz archive for details.

See also 5.0.2 release announcement:
http://www.NetBSD.org/releases/formal-5/NetBSD-5.0.2.html

and "Restore CD Howto" for more details:
http://www.NetBSD.org/ports/cobalt/restorecd-howto.html
---
Izumi Tsutsui

Mike Hebel | 26 Feb 2010 23:26

pf MTU weirdness...

So I just switched to a dedicated DSL and got rid of the POTS line to save
money and in the process I re-did the firewall.

I had a clean NetBSD 4.0 Raq2 available so I used that and built a new
kernel for pf+ALTQ goodness.

Among other things I just ported my pf rules over to the new system from
an older (3.7 Sparc) OpenBSD box.  Everything works properly except that
it doesn't seem to be scrubbing packets where it did fine on the old box.

Relevant pf.conf lines:

scrub in all
scrub out on $ext_if fragment reassemble min-ttl 15 max-mss 1432

For instance I had to change the mtu on the webserver (0) before it would
properly display to the outside world due to the DSL fragmentation issue.
(Needing an mtu of 1432 or so instead of the regular 1500.)

How do I go about testing to confirm it's the firewall and not something
else?  I don't have PPPoE on my connection (thank $diety) so that
shouldn't be an issue.

Any ideas?
--

-- 
Mike
(0) Technically I had to use pf there too because ifconfig buggered me at
changing the MTU setting. (NetBSD 3.0 Sparc64)

If the universe is a giant stage production then it's Sweeney Todd and
(Continue reading)


Gmane