OpenBSD, Cisco, and Tacacs+

Contributed by jose on from the centralized-authentication dept.

Steve Rue writes:
" I come from a pretty decent networking background, including a lot of Cisco work. Given that, and the usefulness I've found from OpenBSD at home (apache, bind, pf, etc...), I've been looking for ways to integrate at least one OpenBSD box in my latest job. What I've come up with is sort of a catch all for miscellaneous services I'd like on my network, including: I.T. web server, ntp server, tftp, and last but not least, a tacacs+ server. For those of you who are unfamiliar with tacacs+, it is a centralized authentication database for Cisco products - routers, switches, etc. I was already thinking I wanted an OpenBSD box somewhere on my network, before I even realized there was a tacacs+ port (~/ports/net/tacacs+). My network only has about 15 routers currently, each previously running its own local authentication database. I hate this, btw. Anytime you can have a centralized authentication scheme set up, I say go for it. "
Steve's sent us an entire document, keep reading!

" First, let me start by saying I began with a routine installaltion of OpenBSD 3.2, via ftp - I chose to install everything, including X, well, just because I felt like it. After this, I of course applied all of the latest patches, and recompiled the kernel. Onto the good stuff...

I installed tacacs+ from the ports tree. You can also download tacacs+ from Cisco's ftp site, but installing is much easier from the ports tree.

    cd ~/ports/net/tacacs+
    make install
I know there are other ways to install ports, this is just the method I most often choose. This installs the tac_plus daemon under /usr/local/sbin/tac_plus. It is upto you where you want the configuration file to go.
  mkdir /usr/local/tac
  cd /usr/local/tac
  vi tac.conf
Choose whatever location/filename you're comfortable with. The guide is installed in /usr/local/share/doc/tacacs+/users_guide. This is a really good, and extensive guide, which covers both the router side configuration, as well as the tacacs+ configuration file. I chose to print it out, which came out to just over 40 pages. There is also a man page for tac_plus - 'man tac_plus'. Before you go on, note that you should have a working tacacs+ daemon running BEFORE you configure anything on the router.

I kept the tacacs config file very simple, as right now, only one person needs access to the routers - me.

#/usr/local/tac/tac.conf
user = myname
 {
  global = cleartext password_here
 )

user = $enab15$
{
  login = cleartext enable_passwd_here
}
This was the extent of my config file. Like I said, mine is pretty simple, since it is just me who needs access to the router. There are many more options, with great examples in the users_guide. It also provides for functionality that what is shown here. You can also only give persons access to only certain commands. Anyone needing this kind of functionality, it's here. You can also authenticate off of the /etc/passwd file. Before you start/test the tacacs daemon, add this to your /etc/services file:
tacacs          49/tcp

What follows is the configuration on the routers needed to support tacacs+ authorization.

enable secret local_enable_password
aaa new-model
tacacs-server host XX.XX.XX.XX
aaa authentication login default tacacs+
aaa authentication login default tacacs+ enable
aaa authentication enable default tacacs+
To start the tacacs+ daemon, simply run:
/usr/local/sbin/tac_plus -C /usr/local/tac/tac.conf     
again, there are plenty more options available if you need them.

After doing this, I set up a tftp server on my OpenBSD box also, as most people know who have worked with Cisco products, they love to use tftp servers. Uncomment the following line in /etc/inetd.conf -

#tftp           dgram   udp     wait    root    /usr/libexec/tftpd      tftpd -s -c /tftpboot
Then send a sighup to inetd. I used the '-c' option because it allows files to be copied via tftp, if they aren't already created. Why this isn't the default, I dont know. Make sure the directory '/tftpboot' or whatever you choose has the proper permissions. For laziness sake, I do a chmod 777 /tftpboot. I use my tftp server to keep stored copies of the router configs incase I need them, as well as IOS'es for each router model on my network.

btw, here's the Cisco license on tacacs+:

Copyright (c) 1995-2000 by Cisco systems, Inc.

Permission to use, copy, modify, and distribute modified and unmodified copies of this software for any purpose and without fee is hereby granted, provided that (a) this copyright and permission notice appear on all copies of the software and supporting documentation, (b) the name of Cisco Systems, Inc. not be used in advertising or publicity pertaining to distribution of the program without specific prior permission, and (c) notice be given in supporting documentation that use, modification, copying and distribution is by permission of Cisco Systems, Inc.

Cisco Systems, Inc. makes no representations about the suitability of this software for any purpose. THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. I know this article will probably raise more questions than it answered, but hopefully it gets some of you started in the right direction. For tac_plus questions, refer to the users_guide. For Cisco config questions, refer to the proper IOS help pages.

- Steve"

(Comments are closed)


  1. By Anonymous Coward () on

    > as most people know who have worked with Cisco
    > products, they love to use tftp servers

    No kidding. Not only do they love tftp, they also love telnet.
    Cisco doesn't exactly a legacy of security going for them and their products.

    After far too much experience with Cisco products, I'd much rather use OpenBSD on something like a blade server. Security, performace, flexibility, easy administration, etc.

    1. By miro () on

      snip-- After far too much experience with Cisco products, I'd much rather use OpenBSD on something like a blade server. Security, performace , flexibility, easy administration, etc. --snip

      Does an OBSD blade server have better performance than a Cisco?

      1. By Anonymous Coward () on

        Has anyone tried to run OpenBSD on the new Dell 1665MMC blade servers? That looks like a really cool product.

      2. By Anonymous Coward () on

        yeah i'd like to see some sort of real world performance comparison. I'm a huge openbsd fan of course (why else would i be here), but i find it hard to believe that obsd can beat out a dedicated hardware solution from cisco.

        i'm sure the obsd box is more flexible than a cisco device, but we're talking performance here.

        1. By Anonymous Coward () on

          I find it hard to believe also. You're actually not only talking about performance but *capability*. Cisco routers handle a very large and time tested catalogue of protocols (and thousounds of protocol options) that I don't believe OpenBSD is mature enough to compete with. You could surely measure performance just passing IP, but comparisons with routing protocol compatibility (EIGRP, OSPF, BGP, etc.), or even IPX would probably come up short (in the case of the routing protocols, you'd be depending on third-party software to beat out what a cisco series router can do in it's sleep). This is all pretty much true for any OS platform you'd compare to a cisco product. Regardless, it would be interesting to see.

          1. By RC () on

            There is GNU Zebra, and MRTD to support most of the routing protocols... I don't know why you would expect EIGRP, Cisco's own propritary protocol, to work with OpenBSD.

            OpenBSD does have IPX support, as well as AppleTalk support, you just need to compile a new kernel with them uncommented. OpenBSD doesn't include the IPX RIP software, but FreeBSD does, so that would be a possibility as well.

            So tell me again what OpenBSD is seriously lacking.

            1. By Anonymous Coward () on

              Here's a few:

              - 24 hour top-notch software and hardware support, even 24x7x2-hour hardware replacement if you can afford it
              - Modular, hot-swap components, including network interfaces, power supplies and even processor modules
              - Layer 3 switching (yes, in hardware)
              - Extremely simple-to-configure failover systems for firewalls
              - Integrated routing and bridging that works correctly
              - DECNet and Vines. Yes, people still use them. I'm sure. Somewhere.
              - Frame Relay
              - DLSW/DLSW+
              - iSCSI
              - IPX/DECNet/Vines/etc packet filtering


              Oh, and you can have two different LAN interfaces in the same subnet. Try that with an OpenBSD box sometime.

              I'm all for OpenBSD, it's great, but fer cryin' out loud, choose the right tool for the job!

              1. By RC () on

                Your list isn't impressive.

                > Modular, hot-swap components, including network
                > interfaces, power supplies and even processor modules

                Yeah, I'm sure computers can't do hot-swapping.

                > Layer 3 switching (yes, in hardware)

                Like it or not, even the highest-end router does a good deal of switching in software. If it didn't, you wouldn't be able to set an IP address or routing/ACL rules, it would be hard-coded. The only way to determine the performance difference would be to test them both.

                > Frame Relay

                Well, from a quick google, it appears that FreeBSD supports Frame Relay

                > - DLSW/DLSW+
                > - iSCSI
                > - IPX/DECNet/Vines/etc packet filtering

                I see... Just because a Cisco router can do a good job with traffic that 99% of routers won't ever see, everyone should use Cisco routers for everything. Gee, here's a thought... On the rare occasion that someone needs to work with that traffic... THEN they could use a Cisco router.

                > Oh, and you can have two different LAN
                > interfaces in the same subnet. Try that with an
                > OpenBSD box sometime.

                I'd be willing to bet that I could do that.

                > but fer cryin' out loud, choose the right tool for the job!

                Sounds to me that you've mentally locked yourself into Cisco. Likely because you read something that told you they were better, and you haven't questioned it. No doubt it was Cisco's own material.

                When you have a job where you need to drill billions of holes, and occasionally need to hammer a nail, do you buy the incredibly expensive drill that doubles as a hammer, and is harder to repair/upgrade, or do you just get the better, cheaper drill, and occasionally pick up a hammer when you need it?

                It's not that I like OpenBSD too much, and it's not that I hate Cisco hardware... What I hate is having a crippled, bundled piece of software that I can't extend any way I choose to. Before Cisco embrased SSH, there was no way for you to get SSH onto a Cisco router. Meanwhile, if your Operating system was some normal Unix system, you could put anything on there that you want. That is invaluable, ESPECIALLY from a security standpoint.

                Say you don't like Cisco's ACL software, you don't have any choice. Say you don't like their SSH implimentation, you don't have a choice. Now, on OpenBSD, you would have all the choice in the world.

              2. By Lars Hansson () lars@unet.net.ph on mailto:lars@unet.net.ph

                >- 24 hour top-notch software and hardware >support, even 24x7x2-hour hardware replacement if >you can afford it

                Exactly. The keywords are "can afford it". i'll bet you can get that kind of support from MS too if you cough up enough money.
                This is usually not justifiable though.

                >- Modular, hot-swap components, including network >interfaces, power supplies and even processor >modules

                That must be the reason the Cisco's tech's here always bring our rotuers down when they do something. Ahum. Tnen again, maybe they're just clueless.

                > - DECNet and Vines. Yes, people still use them. > I'm sure. Somewhere.
                Yeah, and some people still use Betamax.

                >- Frame Relay
                Sure, the few times you need.

                >- DLSW/DLSW+
                >- iSCSI
                >- IPX/DECNet/Vines/etc packet filtering

                Since 95% of the routers never see or have anything to do with this kind of traffic I dont think this is a very compelling reason for Cisco.

                >I'm all for OpenBSD, it's great, but fer cryin' >out loud, choose the right tool for the job!

                Yeah, and that means to sometimes go with Cisco but many times something else. Ask Henning what he thinks about Cisco's performance.

      3. By RC () on

        Processor-wise, I have very little doubt that a blade server would be faster. That would make a VERY big difference for things like IPSec and IPv6.

        As for pure network throughput, I'll go out on a limb and say that I believe the price/performance would certainly be better.

        Network throughput depends a great deal on network card being used. It's quite possible that a blade server, with a very fast bus, and with hi-quality NICs COULD out-perform Cisco routers.

        Despite the other comments I read here, a Cisco router is really no more hardware-based than a blade server with OpenBSD would be. Hardware can be made to do most of the processing, but the software still has to do the processing of the ACLs (pf rules), routing decisions, etc.

        1. By Anonymous Coward () on

          "Hardware can be made to do most of the processing, but the software still has to do the processing of the ACLs (pf rules), routing decisions, etc."

          There are ASICs for ACLs, QoS etc.
          Come to think of it, even routing decisions can be said to be done in hardware with CEF.
          The CPU doesn't have much work to do in a Cisco box.

          1. By Srebrenko Sehic () haver@insecure.dk on http://www.insecure.dk

            Correct. My Cisco 6500 switches/routers have each a single 300MHz CPU. However, they can process 32 million packets/sec (using the 256Gbit backplane). I bet no OpenBSD/blade combo can outperform that.

            1. By Anonymous Coward () on

              i don't doubt cisco's superior performance, but have you actually seen that performance level or did you just read it from cisco's marketing people? I would tend to distrust the marketing people when it comes to raw figures like that

    2. By Anonymous Coward () on


      Yes, Cisco does love tftp and telnet but newer versions of Cisco IOS support ssh/scp. If I recall correctly, there was a bug in their implementation of ssh though but may havy have been fixed in later releases.

      OpenBSD on a Dell 1655MC blasde would be cool. Anyone else have experience with OBSD on any blades?

      1. By Anonymous Coward () on

        OpenBSD on a Dell 1655MC blasde would be cool. Anyone else have experience with OBSD on any blades?

        looking through the specs at Dell's site and the supported hardware at openbsd.org , the PERC 4/im isn't supported, and the scsi 320 probably isnt (but i havent found indication of what chipset is used). The gig-e may be supported by bge(4). So, you probably wont have any disk and the networking is unsure. Maybe you can diskless(8) boot these systems into OpenBSD.

      2. By Anonymous Coward () on

        If I recall correctly, there was a bug in their implementation of ssh though but may havy have been fixed in later releases.

        It's a royal pain. It might be fixed in newer IOS that happens to break some functionality other places... the end result is something like pasting 5 lines of config into a cisco via ssh connection tends to end the connection with an error. Makes updating access-lists more exciting!

  2. By Anonymous Coward () on

    Didn't you know that by downloading OpenBSD and not buying CDs you're not supporting the project, and are therefore evil?

    1. By Anonymous Coward () on

      I don't necessarily think that. I download openBSD when it comes out, but eventually buy the cd a week or so later. Only because 1> it takes awhile to get here i cant wait that long :) 2> sometimes like the release of 3.2 which i havent bought yet, has not released a tshirt. I usually wait for that so i can order both at once. Although this time it looks like i will be unable to do this. :( because i have seen no tshirt in site, so i shall be just getting the cd or maybe an older shirt.

      But if someone chooses not to buy the cd's or anything else i wouldnt consider them evil, because anyone using openBSD supports more use of the OS. Maybe we can call them, neutral :)

    2. By RC () on

      Although probably a Troll, I am getting tired of this mindset. OpenBSD is a FREE operating system. If someone chooses not to donate, then that is their option. If the money situation was actually bad, Theo could just as well remove the binaries from the FTP server, and that would be the end of that problem (if it was a problem mind you).

      So, fuck off.

      1. By Anonymous Coward () on

        That's funny, people were saying just the opposite the other day.

        1. By Anonymous Coward () on

          yes its called selective asshole-ness.

          i never bought it - why should i when its free and may i burn in hell for eternity.

        2. By RC () on

          Yes.... People WERE saying the opposite.... If they weren't, I probably wouldn't have gotten tired of hearing it.

  3. By chuckx () chuckx - at - cold-sun.com on http://www.cold-sun.com

    TACACS+ has the ability to use a shared encryption key in order to encrypt the packets sent back and forth between the routers and the daemon.

    To enable this functionality, add the following line to the TACACS+ configuration file:

    key = "sufficientlylongandrandomkey"

    Then add the following configuration line to each of the routers:

    tacacs-server key sufficientlylongandrandomkey

    If you don't enable this, the username and password will be sent in the clear. Unfortunately, the username and password is already being sent in the clear via the telnet session, but every layer of security helps.

    --
    chuckx

  4. By chuckx () chuckx - at - cold-sun.com on http://www.cold-sun.com

    Another note... TACACS+ has the capability to store
    a DES encrypted copy of the password in the
    configuration file instead of a cleartext copy.

    A small program to encrypt the password is included
    in the TACACS+ source tree. The program is
    compiled by the port, but is not installed into
    usr/local/bin by default. Just copy the
    generate_passwd binary from the source tree to
    usr/local/bin.

    Once you have access to the program use it's output
    to create lines like the following in the
    configuration file:

    login = des encryptedPassword

    --
    chuckx

  5. By Skinny Puppy () on

    At my office we use tacacs+ for about 1000 users, needless to say this is a major pain. But we are still using becuase the version of tac_plus we have allows the following syntax.

    user = skin_pup {
    login = des *LK*
    member = privs
    }

    group = privs {
    enable 15
    serive = exec {
    priv-lvl = 1
    }
    }

    This allows the user to login and then use his own password when changing to enable.

    I have searched the internet far and wide for this tac server with this option, but never have I found one. All I have is the binary, it is version F4.0.2alpha. The current version F4.0.4 does not have the same features.




      1. By Skinny Puppy () on

        Thank you so very much, reading though the patches now.

        Ohh did i say thank you. Well maybe once more for good luck :)

        1. By jcs@openbsd.org () on

          sure thing. i'm not sure where i collected those patches from, but that's what we're running on our network-wide tacacs+ server to allow techs their own enable passwords. it's been working great.

  6. By Steve Rue () on

    I just want to thank everyone for the comments, needless to say, I'll be using a few of them on my *new* tac configs :-)

    1. By jose () on http://monkey.org/~jose/

      and i think i speak for everyone here when i say thank you for taking the time to draft this up and share it with the community.

  7. By Zeeshan Ahmed () zeeshan@worldcall.net.pk on mailto:zeeshan@worldcall.net.pk

    I installed the Tacacs server. i want to pur acces on cammands that after a user get authenticated from tacacs server that user should only be able to give those commands that are mentions in tacacs.Now how can i give commands in tacacs conf file for users.

    Regards
    Zeeshan Ahmed
    relply to: zeeshan@worldcall.net.pk

  8. By pioneerseo (119.157.149.81) pioneerseo@yahoo.com on

    We are really grateful for your blog post. You will find a lot of approaches after visiting your post. Great work. investigator

  9. By alikhan_095 (59.103.212.132) alikhan_950@hotmail.com on

    Cool you inscribe, the info is really salubrious further fascinating, I'll give you a connect to my scene. yoga burn system review

  10. By rozirose124 (59.103.208.170) rozirose124@hotmail.com on

    Profit primarily prime quality items -- you can understand them all within: The Bonding Code

  11. By alikhann (59.103.223.165) alikhan@gmail.com on

    You possess lifted an essential offspring..Blesss for using..I would want to study better latest transactions from this blog..preserve posting.. yoga burn system

  12. By rozirose (59.103.223.165) rozirose124@hotmail.com on

    I read this article. I think You put a great deal of exertion to make this article. I like your work. national title insurance

  13. By alikhann (59.103.218.146) alikhan@gmail.com on

    Thanks for writing such a good article, I stumbled onto your blog and read a few post. I like your style of writing... organic total body reboot review

  14. By alikhann (59.103.212.45) alikhan@gmail.com on

    I just thought it may be an idea to post incase anyone else was having problems researching but I am a little unsure if I am allowed to put names and addresses on here. high blood pressure remedies

  15. By alikhann (59.103.215.135) alikhan@gmail.com on

    I invite you to the page where see how much we have in common. patriot power greens reviews

  16. By rozirose (59.103.215.135) rozirose124@hotmail.com on

    Excellent read, Positive site, where did u come up with the information on this posting?I have read a few of the articles on your website now, and I really like your style. Thanks a million and please keep up the effective work. Emotional Hook Formula

  17. By jimmy (182.182.63.174) yqkqrqjr@6paq.com on

    I just thought it may be an idea to post incase anyone else was having problems researching but I am a little unsure if I am allowed to put names and addresses on here. los angeles car service to lax

  18. By Anonymous Coward (103.255.4.48) on

    This article is actually remarkable one it helps many new users that desire to read always the best stuff. fcapackaging

  19. By jimmy (182.182.18.233) yqkqrqjr@6paq.com on

    Really great post, Thank you for sharing This knowledge.Excellently written article, if only all bloggers offered the same level of content as you, the internet would be a much better place. Please keep it up! marina lodge port ghalib

  20. By rozirose (59.103.213.198) rozirose124@hotmail.com on

    Very good topic, similar texts are I do not know if they are as good as your work out. bathroom sink Plantation

  21. By jimmy121 (182.182.72.6) yqkqrqjr@6paq.com on

    As a Newbie, I am permanently exploring online for articles that can be of assistance to me. Thank you artemisinin

  22. By michealjohn (182.182.72.6) yqkqrqjr@6paq.com on

    First You got a great blog .I will be interested in more similar topics. i see you got really very useful topics , i will be always checking your blog thanks. miami data recovery

  23. By Anonymous Coward (103.10.197.218) on

    Hey buddies, such a marvelous blog you have made Iím surprised to read such informative stuff. health coach program training

  24. By jimmy (182.182.113.97) yqkqrqjr@6paq.com on

    I propose merely very good along with reputable data, consequently, visualize it: water pipes

  25. By jimmy121 (182.182.36.113) yqkqrqjr@6paq.com on

    It's superior, however , check out material at the street address. Millionaires Code

  26. By michealjohn (182.182.3.159) yqkqrqjr@6paq.com on

    Hi there, I found your blog via Google while searching for such kinda informative post and your post looks very interesting for me. Neo2 Software

  27. By micheal hatrick (182.182.73.64) michealjohn001111@hotmail.com on

    Great post! I am actually getting ready to across this information, is very helpful my friend. Also great blog here with all of the valuable information you have. Keep up the good work you are doing here. soirťe karaoke

  28. By jimmy121 (182.182.117.193) yqkqrqjr@6paq.com on

    Visit Houston Real Estate website for the best Houston Homes For Sale, presented by Houston Broker Nema Ghalamdanchi with 007 Signature Realty Houston, TX. Search over 70,000 residential Houston Real Estate listings for sale in the greater Houston TX area including, Luxury Homes, Single Family Homes, Condos, & Highrises for sale in Houston, Texas. Houston Real Estate and Relocation - Search for a home in the greater Houston area - information on communities, master planned communities, neighborhoods, subdivisions, luxury homes, active adult communities, golf course communities, homes on the water, school district information Houston Homes for sale

  29. By micheal hatrick (182.182.31.67) zeeshantapra@gmail.com on

    The internet is bogged down with bogus blogs with no real message but the post was fantastic and well worth the read.Thank you for sharing this with me. more on bongs

  30. By rozirose (59.103.213.106) rozirose124@hotmail.com on

    It is fine, nonetheless evaluate the information and facts around this correct. Vintage Rugs

  31. By johnmicheal (182.182.101.23) adasdasds@gmail.com on

    Great post! I am actually getting ready to across this information, is very helpful my friend. Also great blog here with all of the valuable information you have. Keep up the good work you are doing here. jimdo

  32. By Anonymous Coward (119.154.246.127) on

    If they aren't versed in the latest and greatest Internet SEO techniques, you will throw your money away.internet marketing

  33. By tom (37.221.160.107) toms72366@gmail.com on

    I hope you will share such type of impressive contents again with us so that we can utilize it and get more advantage. paydayadvance

  34. By kavin paker (192.241.177.188) alishahrukh606@gmail.com on k

    Used to do practical knowledge verifying articles or blog posts or maybe opinions propagated in this article. There're purely remarkable you will discover a large number of effective expertise. http://www.organicsupplementsreview.com/danielsdiabeticmiracle/

  35. By kavin paker (182.182.122.172) alishahrukh606@gmail.com on

    Whenever i became on your site while having particular attention easily a bit of tiny bit submits. Pleasing technique for long run, I'll be book-marking at the moment have models accomplish springs right up. pos download

  36. By Anonymous Coward (162.246.184.35) on

    A life force that they need for their sustenance as well as to feed the tree of life.Shingeki no Kyojin

  37. By tom (5.254.65.11) toms72366@gmail.com on

    his is surely a very good blog, thanks a lot for sharing such nice information here. Business Coach

  38. By tom (5.254.65.11) toms72366@gmail.com on

    I see the greatest contents on your blog and I extremely love reading them. assignment help service

  39. By Anonymous Coward (5.254.65.142) on

    This written piece gives fastidious understanding yet. gold IRA reviews

  40. By rozirose (59.103.212.249) rozirose124@hotmail.com on

    It is especially decent, though look into the tips during this home address. purple bow tie

  41. By tom (5.254.65.26) toms72366@gmail.com on

    You fully match our expectation and the selection of our data. horizontal designer radiators

  42. By tom (5.254.65.204) toms72366@gmail.com on

    Thatís a nice site you people are carrying out there. VL Health

  43. By rozirose (59.103.220.226) rozirose124@hotmail.com on

    In this case you will begin it is important, it again produces a web site a strong significant internet site: Exotic Shorthair

  44. By Anonymous Coward (119.154.248.59) on

    It also provides for functionality that what is shown here. You can also only give persons access to only certain commands.garage spring replacement

  45. By rozirose (59.103.217.183) rozirose124@hotmail.com on

    Thanks for writing such a good article, I stumbled onto your blog and read a few post. I like your style of writing... Vintage Rugs

  46. By rozirose (59.103.218.15) rozirose124@hotmail.com on

    I would recommend my profile is important to me, I invite you to discuss this topic. Tree†Trimming Queens New York

  47. By Anonymous Coward (119.154.243.49) on

    We sometimes believe that the only place to discover excellent seafood is in a restaurant that focuses primarily on seafood. grand designs the modest home

  48. By rozirose (59.103.210.174) rozirose124@hotmail.com on

    This is important, though it's necessary to help you head over to it weblink: Save The Marriage System

  49. By Anonymous Coward (119.154.226.194) on

    It also provides for functionality that what is shown here. You can also only give persons access to only certain commands.www.strengthstransform.com

  50. By Anonymous Coward (119.154.238.184) on

    This is a really good, and extensive guide, which covers both the router side configuration, as well as the tacacs+ configuration file.cheap electric scooters

  51. By rozirose (59.103.214.154) rozirose124@hotmail.com on

    This content is simply exciting and creative. I have been deciding on a institutional move and this has helped me with one aspect. http://www.robinsonfps.com/procedures/rhinoplasty/

  52. By rozirose (59.103.210.225) rozirose124@hotmail.com on

    Within this webpage, you'll see the page, you need to understand this data. sofas terraza

  53. By jackman10 (103.255.4.28) on

    I discovered your this post while scanning for some related data on online journal search...Its a decent post..keep posting and upgrade the data. brown bow tie

  54. By michealjohn (103.255.4.75) ztyijnmv@tafmail.com on

    I like your post. It is good to see you verbalize from the heart and clarity on this important subject can be easily observed. Binabot Review

  55. By Agustina (182.182.30.179) jamsjimmy@yandex.com on Montandon

    Fantastic submit i need to point out and also thank you for your details. Schooling is surely a sticky subject matter. Nonetheless, remains on the list of major subject areas individuals moment. My partner and i enjoy the submit and also enjoy a lot more. comprar en usa desde colombia

  56. By jhonty (182.182.17.71) jamsjimmy@yandex.com on Rose

    Used to do practical knowledge verifying articles or blog posts or maybe opinions propagated in this article. There're purely remarkable you will discover a large number of effective expertise. Pet GPS Trackers

  57. By PioneerSEO (182.188.241.92) jak_521@hotmail.com on

    A few adolescents are influenced by overabundance fat under the jaw, in the calves, hips, or different zones, and it can be a wellspring of humiliation and scorn among associates. In these cases, liposuction can dispose of this fat and create a more etched, conditioned appearance.Liposuction Surgeon Melbourne

  58. By jams (182.182.26.126) jamsjimmy@yandex.com on jimmy

    Produce additional content for this theme you do have a fantastic notion for you to promote writters. Code Fibo Review

  59. By Agustina (182.182.26.126) jamsjimmy@yandex.com on Montandon

    Decent web log in addition to the wonderful high-quality junk and even Iím for sure this is substantially effective. phen375 where to buy in stores

  60. By jams (182.182.26.126) jamsjimmy@yandex.com on jimmy

    Your blog has grown to become my best one-stop buy for things informative posting. Thank you so much to your terrific job. That i used among the many online websites everyone endorsed together with Over the internet the fact that best-dissertation is a good yet still. Your job is exemplary. comprar en usa

  61. By micheal hatrick (182.182.120.242) ztyijnmv@tafmail.com on

    First, You got a great blog .I will be interested in more similar topics. I see you got really very useful topics , I will be always checking your blog thanks. mens bodybuilding tank tops

  62. By johnmicheal (182.182.33.51) ztyijnmv@tafmail.com on

    I surprised with the analysis you made to make this particular publish incredibly. Wonderful activity! necrophagist shirt

  63. By Anonymous Coward (117.247.105.244) on

    I am a regular viewer of this site. You have shred a very informative blog about the Cisco and Tacas of Open BSD . I understood more about it from this blog. It is good that you explained it with giving the technical details snoring solutions

  64. By Aester (117.247.105.244) on

    I think this site is a very good platform to learn networking. Net working is really a very difficult subject and it needs many references. The article given here explains a lot about Cisco certified networking and it really helps me a lot. web design los angeles

  65. By Rinsi (59.95.74.154) on

    I am a regular viewer of this site. In this blog you have given the details about the open BSD Cisco and Tacas. I understood more about the from this site. It is really very informative blog. Expecting more blogs like this 55 plus communities in texas

  66. By Agustina (182.182.105.18) jamsjimmy@yandex.com on Montandon

    I just now identified applying indicate the item all over again. Advocate whatsoever I need to to make sure anticipation as a result of honest you will keep on being for the purpose of featuring that excellent organize. rent midget strippers in NYC

  67. By pioneerseo (119.157.218.252) pioneerseo@yahoo.com on

    I have express a few of the articles on your website now, and I really like your style of blogging. I added it to my favoriteís blog site list and will be checking back soonÖwedding cakes DC

  68. By Logan (45.116.232.57) stephaniesteph86@gmail.com on Abigail

    That you're allowed to place leaders, however is not one way links, except when they're just authorised together with regarding niche. datorgenier

  69. By Agustina (182.182.59.64) jamsjimmy@yandex.com on Montandon

    This approach is visually really most suitable. Every single one of microscopic highlights are intended by means of a number of heritage skills. I recommend the software quite a lot. bon de reduc

  70. By jams (182.182.43.144) jamsjimmy@yandex.com on jimmy

    Really good write-up, Appreciate it intended for giving That expertise. Excellently published document, but only if many blog writers made available identical higher level of information since you, the online world is a significantly better area. You need to thanks! More Help

  71. By JHON (182.182.44.124) zmjwdxpm@tafmail.com on

    At blogs on-line, I enjoy analyzing your business opportunity quite possibly the most; one provide you with a lot of tips within a small-scale chunk. My group is hunting for and even considering the fact that you now have the core designed for tutorial authoring, As i calculated you may choose to time all of us with the best guidance. On earth do you allow? noleggio auto da cerimonia a Padova

  72. By JHON (182.182.13.197) zasd@gmail.com on

    As i browse your site at working on ratings and even As i at present believe as a result pushed. As i is marketed their employment you need to do an important for one individual authoring small business and even And also evading the application. Reckon at present, considering the opinion one awarded all of us, We can give it a shot. Family hotel in kaohsiung

  73. By JHON (182.182.78.174) zasd@gmail.com on

    Which will feature short-term, still itís not just a effective long-term alternative designed for men of all ages who wish to result in being this particular 1 completely unique lover these consumers canít finish entertaining the idea of. http://www.bestcordlessimpactwrench.xyz

  74. By JHJON (182.182.92.63) zasd@gmail.com on

    Which will feature short-term, still itís not just a effective long-term alternative designed for men of all ages who wish to result in being this particular 1 completely unique lover these consumers canít finish entertaining the idea of. denver web design

  75. By ROCKZEN (182.182.13.60) aswadqureshi06@gmail.com on ROCKZEN

    Thanks for every other informative site. The place else may just I get that kind of information written in such an ideal means? I have a venture that Iím just now operating on, and I have been on the look out for such information. minecrafte gratuit

  76. By JHON (182.182.13.60) zasd@gmail.com on

    Which can do the job short-term, then again itís an excellent helpful long-term option meant for fellas who would like to prove to be in such a 1 distinct lovely women these customers canít prevent pondering. MARYLAND BANKRUPTCY LAW FIRM $525

  77. By rozirose (45.116.233.9) on

    I am interested in such topics so I will address page where it is cool described. งานเสริม

  78. By jhon (182.182.29.0) zasd@gmail.com on

    Impressive web site, Distinguished feedback that I can tackle. Im moving forward and may apply to my current job as a pet sitter, which is very enjoyable, but I need to additional expand. Regards. Driveway cleaning Swansea

  79. By jhon (182.182.29.0) zasd@gmail.com on

    Impressive web site, Distinguished feedback that I can tackle. Im moving forward and may apply to my current job as a pet sitter, which is very enjoyable, but I need to additional expand. Regards. Driveway cleaning Swansea

  80. By JHON (182.182.103.253) zmjwdxpm@tafmail.com on

    Thank you for helping people get the information they need. Great stuff as usual. Keep up the great work!!! soluton for eczema rash

  81. By JHON (182.182.46.245) zmjwdxpm@tafmail.com on

    Which will feature short-term, still itís not just a effective long-term alternative designed for men of all ages who wish to result in being this particular 1 completely unique lover these consumers canít finish entertaining the idea of. เครื่องบันทึกเสียง

  82. By rozirose (45.116.232.26) on

    You bear through a awesome vacancy. I sanity definitely quarry it moreover personally suggest to my buddys. I am self-possessed they determination be benefited from this scene. airport shuttle service in atlanta

  83. By JHON (182.182.5.122) zmjwdxpm@tafmail.com on

    Very good written article. It will be supportive to anyone who utilizes it, including me. Keep doing what you are doing Ė canír wait to read more posts. rudjito glass

  84. By james jack (59.103.214.108) jamesjack647@gmail.com on

    I am looking for and I love to post a comment that "The content of your post is awesome" Great work! laundry service long island

  85. By PioneerSEO (119.156.18.139) jak_521@hotmail.com on

    Very nice. I applaud the absence of color as white with black trim is very haute now! msp airport taxi

  86. By JHON (182.182.79.197) zasd@gmail.com on

    Keep up the good work , I read few posts on this web site and I conceive that your blog is very interesting and has sets of fantastic information. Nairobi

  87. By rozirose (173.245.202.161) on

    You should mainly superior together with well-performing material, which means that see it: Air Compressor

  88. By PioneerSEO (119.156.18.103) jak_521@hotmail.com on

    Airport Car Service Minneapolis know the importance of professional drivers who are very competent in airport transportation services. We provide superb car services in suburban areas of Minneapolis at reasonable prices. Minneapolis Airport Car Service

  89. By JHON (31.3.224.69) zmjwdxpm@tafmail.com on

    Very interesting blog. Alot of blogs I see these days don't really provide anything that I'm interested in, but I'm most definately interested in this one. Just thought that I would post and let you know. lingerie and lovetoys

  90. By pioneerseo (119.159.68.156) pioneerseo@yahoo.com on

    The most of consumers prefer to choose offers that provide additional features after getting insudance policy. That is why Geico is such popular in providing home, life or auto insurancde services for all categories of policy seekers. Geico is huge structure that works precisely like clockwork, providing advantages in price and additional options to policyholders. geico quotes

  91. By Anonymous Coward (182.188.233.20) jamesjack647@gmail.com on

    I am always searching online for articles that can help me. There is obviously a lot to know about this. I think you made some good points in Features also. Keep working, great job†! plumbing services Edmonton

  92. By PioneerSEO (119.156.17.27) jak_521@hotmail.com on

    A very awesome blog post. We are really grateful for your blog post. You will find a lot of approaches after visiting your post. I was exactly searching for. Thanks for such post and please keep it up.voyance gratuite amour

  93. By PioneerSEO (119.156.18.239) pioneerseo@yahoo.com on

    A very awesome blog post. We are really grateful for your blog post. You will find a lot of approaches after visiting your post. I was exactly searching for. Thanks for such post and please keep it up. state farm insurance bill pay

  94. By pioneerseo (119.157.170.106) pioneerseo@yahoo.com on

    This is really a amazing blog. I am very glad to read your great blog. whatever you share information in you blog,this is so interesting for me. I get a such great update from you side.These visitor exercises likewise incorporate desert safari outings in Dubai alongside touring visits. We should get some answers concerning those exercises that make for the ideal Arabian experience. Arabian Desert Safari

  95. By pioneerseo (119.157.192.204) pioneerseo@yahoo.com on

    Great post! I am actually getting ready to across this information, is very helpful my friend. Also great blog here with all of the valuable information you have. Keep up the good work you are doing here.voyance au telephone

  96. By pioneerseo (119.157.174.181) pioneerseo@yahoo.com on

    A very awesome blog post. We are really grateful for your blog post. You will find a lot of approaches after visiting your post. I was exactly searching for. Thanks for such post and please keep it up.IGCSE Past Papers English and History

  97. By download torrent (182.182.95.25) sssasd@gmail.com on

    I have been wanting to make something like this on my site and you have given me a thought. <a href="http://gooddownloadablefreeware.ru">download torrent</a>

  98. By download torrent (182.182.95.25) venny698@outlook.com on

    It is fantastic to have the chance to investigate an overwhelming than commonplace quality article with fulfilling data on centers that wealth are captivated on. download torrent

  99. By read more (182.182.118.208) sssasd@gmail.com on

    I am exceptionally vigorous to look at this article .. a pledge of appreciation is all together to give us experience info.Fantastic ordinary. I respect this post. read more

  100. By mxffiles (218.11.246.179) on

    This is a very good post which I really enjoy reading. It is not every day that I have the possibility to see something like this. Software mxf Software mxf converter free download to convert HD camcorder files. ts converter convert ts video files to avi, mp4, wmv, mov mts to avi mp4 mov mkv iMovie, FCP/FCE with mts converter, so to convert mts files for your PC and mobiles. mod converter and convert tod files just free download mod video converter. m2ts

  101. By http://www.create-a-site-today.com/ (182.182.100.211) sssasd@gmail.com on

    It is not standard that I have the probability to see something like this If you feel that the power is endeavoring to cheat you, don't buy examine paper from it. http://www.create-a-site-today.com/

  102. By Anonymous Coward (182.182.2.241) on

    Great tips and clear. This will be astoundingly significant for me when I get a chance to start my blog. reviews

  103. By tom (103.10.197.10) baronrichard416@gmail.com on

    Thanks friends, for providing such enlightening data.
    <a href="http://inpatientvsoutpatient.net/post_part4.xml">drug addiction centers</a>

  104. By cherokee lab coats (182.182.79.46) sssasd@gmail.com on

    There is an awesome measure of information here that can offer any business some help with beginning with a productive long range agreeable correspondence campaign ! cherokee lab coats

  105. By tom (2001:df0:a6:42:5591:d154:fbef:6068) baronrichard416@gmail.com on

    Well, I have got the best information from here the site is fully stuffed with the knowledgeable information. myob penrith

  106. By Sebastian (binasa) sebastianleo7002@gmail.com on http://use-my-warez-please.net

    It was wondering if I could use this write-up on my other website, I will link it back to your website though.Great Thanks.

  107. By Seth (178.218.203.78) sethsonny9755@gmail.com on http://theblueeverydays.wordpress.com

    Hey what a brilliant post I have come across and believe me I have been searching out for this similar kind of post for past a week and hardly came across this. Thank you very much and will look for more postings from you.

  108. By alexxx (128.199.167.194) zjqgdzti@imgof.com on

    This really is additionally an excellent publish that we truly loved reading through. It's not daily which i possess the likelihood to determine some thing. buy research papers cheap

  109. By Austin (178.218.203.78) austinelliot8196@gmail.com on http://an-troya.ru

    I've proper selected to build a blog, which I hold been deficient to do for a during. Acknowledges for this inform, it's really serviceable!

  110. By alexxx (128.199.214.89) zjqgdzti@imgof.com on

    I adore each strings, That i savored, It's safe to really love a great deal more material utilizing this type of, due to the fact it is actually extremely relaxing., Thankyou just for getting. order cheap essay

  111. By Harry (178.218.202.222) harrydavid3124@gmail.com on http://softwareoptin.net

    I recently came across your blog and have been reading along. I thought I would leave my first comment. I don't know what to say except that I have enjoyed reading. Nice blog. I will keep visiting this blog very often.

  112. By linkerSEO (119.157.67.167) pioneerseo@yahoo.com on

    Leading assembling of cleaning chemicals and clothing cleansers. Turned into a re-merchant, Start Detergent gathering pledges today. Pledge drive thoughts are accessible in various sorts. Laundry Detergent Fundraiser

  113. By Logan (178.218.202.69) loganjake7048@gmail.com on http://ofis23.ru

    This is a great inspiring article.I am pretty much pleased with your good work.You put really very helpful information. Keep it up. Keep blogging. Looking to reading your next post.

  114. By Callum (178.218.202.69) callumfrederick3584@gmail.com on http://downloadfreefilesfast.stream

    Hello, I have browsed most of your posts. This post is probably where I got the most useful information for my research. Thanks for posting, maybe we can see more on this. Are you aware of any other websites on this subject.

  115. By Nathan (178.218.202.69) nathanarthur6803@gmail.com on http://land-toy.ru

    I really enjoyed reading on this article.

  116. By Elliot (178.218.202.69) elliotalexander1116@gmail.com on http://downloadablegreatthings.ru

    The website is looking bit flashy and it catches the visitors eyes. Design is pretty simple and a good user friendly interface.

  117. By Teddy (178.218.202.69) teddyleon5076@gmail.com on http://budurmarket.over-blog.com

    This is my first time i visit here. I found so many interesting stuff in your blog especially its discussion. From the tons of comments on your articles, I guess I am not the only one having all the enjoyment here! keep up the good work.

  118. By Nathan (178.218.202.69) nathanstanley8287@gmail.com on http://downloadfreethingsblog.top

    this is really nice to read..informative post is very good to read..thanks a lot.

  119. By Kai (178.218.202.69) kaioliver9455@gmail.com on http://notbadfiledownloadwebsite.top

    It was wondering if I could use this write-up on my other website, I will link it back to your website though.Great Thanks.

  120. By Alfie (178.218.202.69) alfiegabriel6202@gmail.com on http://downloadfreefilesfromus.com

    I recently came across your blog and have been reading along. I thought I would leave my first comment. I don't know what to say except that I have enjoyed reading. Nice blog. I will keep visiting this blog very often.

  121. By Joshua (178.218.202.69) joshuafrederick7011@gmail.com on http://brand-map.ru

    this is really nice to read..informative post is very good to read..thanks a lot.

  122. By Frederick (178.218.202.69) frederickellis5394@gmail.com on http://justhealthy.ru

    Pretty good post. I just stumbled upon your blog and wanted to say that I have really enjoyed reading your blog posts. Any way I'll be subscribing to your feed and I hope you post again soon. Big thanks for the useful info.

  123. By Connor (178.218.202.69) connorcharlie2547@gmail.com on http://heroes-karelia.ru

    Thanks for sharing this information. I really like your blog post very much. You have really shared a informative and interesting blog post with people.

  124. By james (103.53.45.24) jamesjack647@gmail.com on jack

    Nice information, valuable and excellent design, as share good stuff with good ideas and concepts, lots of great information and inspiration, both of which I need, thanks to offer such a helpful information here. visit my site

  125. By james (43.230.95.76) jamesjack647@gmail.com on jack

    Patent filing and registration in India. Easy, fast and secure patent registration at affordable prices by Expert Patent Agents and Attorneys. Patent filing india or Patent registration

  126. By jordanss123 (67.229.152.138) jordanss123@hotmail.com on

    fake yeezy boost 350 for sale Thank you for your post, I look for such article along time, today i find it finally. this post give me lots of advise it is very useful for me

  127. By Anonymous Coward (45.116.233.29) on

    Your articles and blogs are inspirational. cambridge seo

  128. By Anonymous Coward (45.116.233.29) on

    Remarkable blog! I have no words to praise, it has really allured me. fintech CEO

  129. By Anonymous Coward (45.116.233.17) on

    Miraculous blog site!! I would surely bookmark this site and every day Iíll get more and more latest information. moving help

Credits

Copyright © - Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to as well as images and HTML templates were copied from the fabulous original deadly.org with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]