Re: [4.2 Upgrade] Apache: bad username nobody

2007-11-06 Thread Daniel Ouellet
Chris wrote: However, typing newaliases still gives the mailwrapper.core segmentation fault core dumped error. I have had postfix installed which I removed (pkg_delete) after the upgrade. Could this be the cause of this problem? I manually deleted the _postfix user/group after I restored the

Re: Clamav

2007-11-06 Thread Daniel Ouellet
Juan Miscaro wrote: You recommend a production server to be running -current? Poll: who here is doing that? I do. Actually started about a year and half ago or so. Not every servers, but most and I see no reason not to if you fell OK with OpenBSD at large. The real reason is I find it

Re: OpenBSD kernel janitors

2007-11-03 Thread Daniel Ouellet
Karel Kulhavy wrote: You cannot, of course. But janitor being a rookie doesn't imply he doesn't know what he's doing. He could be doing a job that doesn't require any special knowledge - like rewriting documentation into a different format, fixing HTML correctness, fixing typos and unclear

Re: OpenBSD kernel janitors

2007-11-03 Thread Daniel Ouellet
Karel Kulhavy wrote: Maybe the outsiders just cannot find the PR database. I put openbsd pr database into google and looked into all links on the first page. The pr database is always mentioned, but never linked. Where is it? This only again proof the point of waisting time try to help. How

Re: OpenBSD kernel janitors

2007-11-03 Thread Daniel Ouellet
Hannah Schroeter wrote: On Sat, Nov 03, 2007 at 05:16:06PM -0400, Daniel Ouellet wrote: So, start by sending diff's then. Almost every diff's I saw sent in, got reply one way or an other. My recent experiences differ, for my last 2 submissions (an issue with swig, sent to ports@ after

Re: OpenBSD kernel janitors

2007-11-03 Thread Daniel Ouellet
This include example and full diff's below as well. May be this is a waist of time, but will see. Some say they needs some details, then here is an example, and this took me only about 30 minutes or so from start to finish, including getting the source tree. Doesn't mean it will be pick up,

Re: What is the nice process state?

2007-11-03 Thread Daniel Ouellet
bofh wrote: I just read man top. So, just to confirm, for those without ability to read the source, or understand it, the nice cpu processor state is the percentage of time spent on niced processes. Someone mentioned he was not sure if it was 1-20, or includes -1 to -20. From the way the man

Re: OpenBSD kernel janitors

2007-11-01 Thread Daniel Ouellet
n0g0013 [EMAIL PROTECTED] writes: Development is not the same process as writing a whiny mail. that is a shame. i can probably better understand the relectance to re-visit this if it has failed before. perhaps, others are right, perhaps linux can tolerate it because it's not as good as

Re: OpenBSD kernel janitors

2007-10-31 Thread Daniel Ouellet
Men, This is a long list of emails. I read them all for fun. You want to know where to start, then you can simply do very simple things if you want as simple as taking the code and check for very simple style(9) stuff as simple as. spacespacespacetab for example. style(9) is very specific

Re: About Xen: maybe a reiterative question but ..

2007-10-25 Thread Daniel Ouellet
L. V. Lammert wrote: Certainly! That is not the point, however. The point is that users of OTHER 'application domains' have better security with a VM (or one of the other approaches discussed) because THEIR environment has no ability to interact with the OTHER environments. The digression into

Re: About Xen: maybe a reiterative question but ..

2007-10-24 Thread Daniel Ouellet
Theo de Raadt wrote: The security benefits are at the ability to buy a steak for dinner level. I vote to add it to theo.c. Thanks Daniel Index: src/usr.bin/mg/theo.c === RCS file: /cvs/src/usr.bin/mg/theo.c,v retrieving

Re: Expat in OpenBSD -current

2007-10-16 Thread Daniel Ouellet
Sam Fourman Jr. wrote: how do I install xbase without reformatting and reinstalling the whole OS? http://openbsd.org/faq/faq4.html#AddFileSet

Re: spdmem: what does PC25100 mean?

2007-10-13 Thread Daniel Ouellet
ropers wrote: On 08/10/2007, Daniel Ouellet [EMAIL PROTECTED] wrote: Alexey Suslikov wrote: CL5 is CAS latency I think, but what does PC25100 mean here? :) PC2-5100 Hm, Wikipedia currently only knows PC2-5300. http://en.wikipedia.org/wiki/DDR2_SDRAM Of course Wikipedia is infallible... ;-P

Re: Get developers some big machines to support more RAM

2007-10-08 Thread Daniel Ouellet
OK guys, Instead of fighting about using, or not using it, or i386 being obsolete, PAE not being good, or slow, etc. I for one would be very happy if we can support more then 4GB of memory on it and I would be more then happy to test it as I now have machine that actually have more then 4GB

Re: spdmem: what does PC25100 mean?

2007-10-08 Thread Daniel Ouellet
Alexey Suslikov wrote: CL5 is CAS latency I think, but what does PC25100 mean here? :) PC2-5100

Re: Speed Problems

2007-10-03 Thread Daniel Ouellet
Claudio Jeker wrote: Could you add the dmesg of the test box to the website? Do you have any other network cards you could test? (I'm mostly interested in bnx but sk, msk, bge and nfe could be interesting as well). This box if the M2 version also come with nfe cards as well, but there is

Re: Speed Problems

2007-10-03 Thread Daniel Ouellet
Tony Sarendal wrote: On 10/3/07, *Daniel Ouellet* [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: Claudio Jeker wrote: Could you add the dmesg of the test box to the website? Do you have any other network cards you could test? (I'm mostly interested in bnx but sk

Re: SMTP flood + spamdb

2007-09-23 Thread Daniel Ouellet
patrick keshishian wrote: They seemed pretty random to me, but I did a quick check after reading your response and I see 468 unique fake email address @my-domain, only one was duplicated twice. Put greyscanner from Bob in there and sit back and enjoy the look! (; Make sure you pick the

Re: SMP Support?

2007-09-21 Thread Daniel Ouellet
Boris Goldberg wrote: Hello Daniel, Just want to make sure that we are on the same page: I'm talking about i386. It seems from below that your concern is more about amd64, but I didn't really try it, because my CPU isn't even a Xeon. You are 100% right. An oversight on my part here.

Re: isakmp phase 2 negotiation failed

2007-09-20 Thread Daniel Ouellet
n0g0013 wrote: having a nightmare getting two openbsd (one 3.8, one 4.0) boxes to setup a tunnel. finally got the phase 1 negotiation going (or so i believe from reviewing the logs) but it appears that the phase two starts and is just abandoned. This may not be the best advise, but there have

Re: Define hosts lookup for pf.conf

2007-09-19 Thread Daniel Ouellet
pichi wrote: Sorry if I ran into the Big Boys forum crying. I will be more cautious about what I ask next time. Is there a forum for people who are starting out with OpenBSD? The thing is I am new to it and I am in a situation where reading pages and pages of Google is taking a lot of time away

Re: Microsoft gets the Most Secure Operating Systems award

2007-09-19 Thread Daniel Ouellet
Henning Brauer wrote: * The One [EMAIL PROTECTED] [2007-09-19 11:17]: What I meant to say was that Leopard's release will solve every current problem prevailant in OS X Tiger and people's opinions about the Macintosh platform, although their current, so-called opinions have no evidence behind

Re: SMP Support?

2007-09-19 Thread Daniel Ouellet
Boris Goldberg wrote: I have pretty much the same picture with HP ProLiant 320 G5 (Dual Core Pentium-D 925). The server is new and passes all tests from the HP maintenance CD. I couldn't make what BIOS version you were actually running there, but you did check to make sure you

Re: another spamd-setup question

2007-09-19 Thread Daniel Ouellet
Juan Miscaro wrote: I tried it but whenever I include the larger 'uatraps' I get: Look at set limit table-entries. man pf

Re: SMP Support?

2007-09-19 Thread Daniel Ouellet
Stuart Henderson wrote: On 2007/09/19 19:00, Daniel Ouellet wrote: Le me know how it goes with current, I am curious as so far all feedback I got is no one yet can get an AMD64.mp stable at this time this must be hardware-dependent, my main desktop is amd64 MP (opteron 175 i.e. dual-core

ifconfig output for nfe

2007-09-19 Thread Daniel Ouellet
Hi, Looking on the man page, the ifconfig is suppose to show the stage of the network cards, and it can't show the proper configuration on the nfe cards, even if I force the configuration to fix value, I always get the same results: nfe0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu

Re: ifconfig output for nfe

2007-09-19 Thread Daniel Ouellet
Here is more. May be I do not understand the reading, I understand it to mean for example: media: Ethernet 10baseT (1000baseSX half-duplex) Would be hard configuration to be 10mb half-duplex and then the (xx) would show what is actually in use. Isn't this correct? I may be confuse, but

Re: ifconfig output for nfe

2007-09-19 Thread Daniel Ouellet
SX looks plain wrong anyway. Can you provide a dmesg? This is perhaps related to the phy that attaches to nfe rather than nfe itself. Sure, here is one of them. OpenBSD 4.2 (GENERIC.MP) #1378: Tue Aug 28 10:48:58 MDT 2007 [EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC.MP real

Crash on X4100 M2 with more details

2007-09-19 Thread Daniel Ouellet
OK, To follow on this and to try to isolate more problem, I did the following tests. - Setup two boxes, both Sun X4100 M2. - The source box is using i386.mp version 4.2 - The destination box is using amd64.mp version 4.2 (same with current) - Configure public IP's on the em0 interface of

Re: ifconfig output for nfe

2007-09-19 Thread Daniel Ouellet
Jonathan Gray wrote: SX looks plain wrong anyway. Can you provide a dmesg? This is perhaps related to the phy that attaches to nfe rather than nfe itself. A bit more. Looking in logs, etc. I found this: nfe0: tx v2 error 0x6004 Searching on google didn't bring much other then a problem

Re: ifconfig output for nfe

2007-09-19 Thread Daniel Ouellet
Daniel Ouellet wrote: Jonathan Gray wrote: SX looks plain wrong anyway. Can you provide a dmesg? This is perhaps related to the phy that attaches to nfe rather than nfe itself. A bit more. Looking in logs, etc. I found this: nfe0: tx v2 error 0x6004 Searching on google didn't bring much

Re: SMP Support?

2007-09-17 Thread Daniel Ouellet
Paul Taulborg wrote: Booya! Updated my BIOS to the latest version (44), and applied the patch that was kindly provided to me here: http://marc.info/?l=openbsd-techm=118975639013313w=2 I also enabled acpi0 in the kernel by default (required to see the other processors), and tada! I had to

Re: SMP Support?

2007-09-17 Thread Daniel Ouellet
Also Paul, Now that is working do me a favor and try to compile the userland and kernel with that bsd.mp acpi enable kernel. Also, try if possible to make transfer of huge files between two boxes well connected to try to at a minimum get close to 100Mb/sec of transfer, or more if you have

Re: SMP Support?

2007-09-16 Thread Daniel Ouellet
Paul Taulborg wrote: I appologize for not including this, here is the dmesg of a successful boot of the amd 4.2 DEFAULT kernel: Paul, Not sure all the tests you did, but first do not run AMD64 on Intel processor. I would do this first thing if you haven't done already. - Go into BIOS and

Re: SMP Support?

2007-09-16 Thread Daniel Ouellet
Paul Taulborg wrote: Kind of bummer, as I will be losing 64 bit support by use i386. This is an Intel Xeon, which should be compatible with the amd64 branch. I am not expert to say yes or no here. May be someone else will confirm or deny. For now I would assume wrongly may be, but I wouldn't

Re: SMP Support?

2007-09-16 Thread Daniel Ouellet
Paul Taulborg wrote: Update: I ran boot -c with verbose on, and here are the last entries: various probing failed messages (doesn't look like any problems), then: ioapic0: conflicting map entries for pin 0 pctr: 686-class user-level performance counters enabled mtrr: Pentium Pro MTRR Support

Re: SMP Support?

2007-09-16 Thread Daniel Ouellet
Paul Taulborg wrote: Kind of bummer, as I will be losing 64 bit support by use i386. This is an Intel Xeon, which should be compatible with the amd64 branch. To answer your question, I guess it depend on the version of your processor. http://marc.info/?l=openbsd-miscm=117112049507303w=2 I

Re: SMP Support?

2007-09-16 Thread Daniel Ouellet
Paul, If you want to try the AMD64 mp kernel with the patch I point out to you on tech of a few days ago and see if that help you or not, I can make the kernel I built that night for you to download and try if you trust it. I would say to built your own, but if you want to do a quick test

Re: SMP Support?

2007-09-16 Thread Daniel Ouellet
Paul Taulborg wrote: I went through every option in the BIOS, and there is nothing at all related to ACPI. :( Your BIOS is version 35, and there is a very long list of BIOS upgrades from Intel. The latest one for this board, if I am not mistaken is 44 and you have 35. bios0: vendor Intel

Re: unstable and multiple reboot for 4.2 on Sun X4100 M2 with ACPI enable on AMD64 bsd.mp with SAS RAID 1 setup.

2007-09-15 Thread Daniel Ouellet
Rolf Sommerhalder wrote: The latest snapshot (13. Sept). of amd64 bsd.mp with ACPI enabled runs stable on two X4100 M2 which are identically configured (single SAS disk only, no RAID-1 yet, with current BIOS/SP/SAS Firmware from Sun). Be caution and with reserved! Not stable if you do not add

Re: The Atheros story in much fewer words

2007-09-14 Thread Daniel Ouellet
Rui Miguel Silva Seabra wrote: I'd love to see how an user who gets a modified binary version has the freedom to modify it. Go ahead. Prove me that it doesn't allow some users to loose freedom... You make the point of using BLOB so well, Thank you! Looking forward to see you fight for

Re: The Atheros story in much fewer words

2007-09-13 Thread Daniel Ouellet
I have been very quiet on this for weeks now, but this really start to piss me off at the highest level! The bottom line is original work was stolen and copyrights are not respected period! Dance as much as you want around it, hide behind lawyers, word definition twisted, false pretend,

Re: OpenBSD Install Goal

2007-09-13 Thread Daniel Ouellet
On Thu, 13 Sep 2007 20:35:35 -0400, Stephan Andre' wrote: I hope one day soon OpenBSD will adopt a nice ncurses setup similar to something like FreeBSD with ease to it. Honestly, I don't see why. How does making the installer more complicated is going to help anything. I recently sat a

Re: serial port usage

2007-09-13 Thread Daniel Ouellet
As we are on the subject and I do not want to deviate from the original question, I would however appreciate suggestions as to how I can have a one server witch can actually have up to 32 serial console to control LOM on Sun server. I may need up to 48 in one case, but instead of using a bunch

Re: unstable and multiple reboot for 4.2 on Sun X4100 M2 with ACPI enable on AMD64 bsd.mp with SAS RAID 1 setup.

2007-09-12 Thread Daniel Ouellet
Rolf Sommerhalder wrote: I did observe similar behaviour on four X4100 M2 as well (two with one socket dual-core, two with two sockets dual-core Opterons) using amd64 bsd.mp snapshots from 23 and 28 Aug.. Currently, amd64 bsd.mp snapshot 28. Aug is running stable on those four servers, although

Re: unstable and multiple reboot for 4.2 on Sun X4100 M2 with ACPI enable on AMD64 bsd.mp with SAS RAID 1 setup.

2007-09-12 Thread Daniel Ouellet
Here is the new dmesg for current. So far the boot process is much faster and do not hang anymore. I am doing install on three more boxes now and will do a bunch of reboot cycles to see the end results. Still some acpi not configure in the dmesg, but so far does look better. Also, note this

Re: unstable and multiple reboot for 4.2 on Sun X4100 M2 with ACPI enable on AMD64 bsd.mp with SAS RAID 1 setup.

2007-09-12 Thread Daniel Ouellet
Tobias Weingartner wrote: In article [EMAIL PROTECTED], Daniel Ouellet wrote: So, I am not sure what testing you did, unless you built your own. new Snapshots was just release now, witch I will be happy to test tonight and see the results and report back. If you guys could test out my

Re: Show your appreciation and get your 4.2 DVD

2007-09-11 Thread Daniel Ouellet
On Tue, 11 Sep 2007, Siju George wrote: Can't find a DVD in [snip] As stated in the beginning of this thread, DVD discs are not available, just CDs in DVD case. Yes guys. It was my mistake in my Divine Vast Drewling extase of the event instead of the Complete Domination release of 4.2. I

Re: OT: Sun X4100 M2 management interface out of wack suggestions?

2007-09-10 Thread Daniel Ouellet
Hi, Quick updates on this one. My problem is now solved and I got very nice help from some gentlemen working at Sun that step in off list to help me out and all is now finally work. Nice to see some good guys following misc@ and be interested to make sure Sun hardware (some of them anyway)

Re: Options for 1U server with watchdog?

2007-09-07 Thread Daniel Ouellet
K K wrote: happens on the same approximate schedule. I suspect a power glitch. It this is power glitch to the point of affecting your server, wouldn't the LOM also show that to you? Then you would know the answer. lomloghistory Eventlog: +0h35m1s host power on +0h37m51s host power

Re: bioctl on X4100 M2

2007-09-07 Thread Daniel Ouellet
Henning Brauer wrote: bio is not implemented for mpi (yet). bioctl in 4.2 onwards shows some inquiry data (vendor model fw serial) for non-bio-capable disks. i. e. it falls back from bioctl -i to bioctl -q if teh disk doesn't support bio. Thanks Henning!

Re: bioctl on X4100 M2

2007-09-07 Thread Daniel Ouellet
Jonathan Gray wrote: mpi(4) currently has no bioctl support. The 2 port LSI SAS RAID (mfi(4)) supports bioctl, however sun don't sell any machines with this interestingly enough. Thanks! That's what I figure, but wanted to check in case I wasn't looking at the right place. Oh well. May be

Re: dmesg amd64-current on Sun Fire X4600 M2

2007-08-28 Thread Daniel Ouellet
Rolf Sommerhalder wrote: Please find below the dmesg of amd64.mp-current (snapshot 23-Aug-2007) on a Sun Fire X4600 M2 which is equipped with four dual-core Opteron 8220 CPU, 32 GB of RAM and four built-in NICs. Sadly, the only problem is that you will not be able to use that much memory

Re: VPN site to site with ipsec

2007-07-23 Thread Daniel Ouellet
sonjaya wrote: http://www.openbsdsupport.org/vpn-ipsec.html This is almost 3 years old and there is so many changes, please don't follow this on 4.1! I most likely will remove it if we can get an updated version. Consider this: http://www.serverwatch.com/tutorials/article.php/3659686 or

Re: VPN site to site with ipsec

2007-07-23 Thread Daniel Ouellet
sonjaya wrote: http://www.openbsdsupport.org/vpn-ipsec.html May be you could also have a look at this nice presentation that show many changes done on OpenBSD. You can start here to see some OpenBSD suggestions, but you can look it all as well as it's nice. (;

Re: Allocate more memory than 512 MB with squid

2007-07-18 Thread Daniel Ouellet
Patrick Hemmen wrote: Squid runs under the user _squid and this user is in the login class daemon in which the data size is set to infinity. Or do I have to set a another capability? How do you start your squid is the key. man 5 login.conf man 8 rc explain it. Just putting the class there

Re: mysql problem

2007-07-16 Thread Daniel Ouellet
Marcos Laufer wrote: When i post a message on the OpenBSD misc list it is because one of two reasons: Mostly one looks like. 1) I want to report an error i found while testing OpenBSD, and by reporting it i might be helping the project, somebody might be able to fix it and the OS grows. 2)

Re: support for Sun Fire

2007-07-16 Thread Daniel Ouellet
Toni Mueller wrote: Hi Mark, On Tue, 29.05.2007 at 14:13:06 +0100, mark reardon [EMAIL PROTECTED] wrote: I just got a x2100 M2 from Sun yesterday on a 60 day trial and am having trouble setting the MTU on one of the bge NICs. Just some initial findings. Not a big problem for me really. did

Re: support for Sun Fire

2007-07-16 Thread Daniel Ouellet
Dag Richards wrote: I would recommend you take a look at the HP DL360, one U hardware raid and have nice little management interface you can ssh to which allows pretty complete console access, go into bios, watch boot messages, power set the system. The Sun 4100 is a pretty good one as well.

Re: mysql problem

2007-07-15 Thread Daniel Ouellet
Marcos Laufer wrote: Ok , i had followed the instructions at http://openbsdsupport.org/mysql.htm Go back and read again many times over until you get it. You didn't read it and you didn't pay attention to statement in bold either. I could tell you what to do to fix it, but then you wouldn't

Re: mysql problem

2007-07-15 Thread Daniel Ouellet
Marcos Laufer wrote: Ok , i had followed the instructions at http://openbsdsupport.org/mysql.htm I also forgot to add this as well in my previous reply, also in the text of the document you have been pointed to. So, be wise and change what you need to change for your setup! But only what

Re: mysql problem

2007-07-13 Thread Daniel Ouellet
Marcos Laufer wrote: Now what? http://openbsdsupport.org/mysql.htm

Re: Setting up a virtual hosting machine w. SSH/SFTP accounts - pitfalls/experiences?

2007-06-29 Thread Daniel Ouellet
3) Mail setups I can find lots of setups with virtual mailusers. I have been succesfully using a Courier-imap/Postfix/MySQL setup for several years now, connected to a webbased mailmanagement tool. If I was to drop all that in favor of a more 'core' OpenBSD setup - what would be a nice

Re: Setting up a virtual hosting machine w. SSH/SFTP accounts - pitfalls/experiences?

2007-06-29 Thread Daniel Ouellet
Almir Karic wrote: if you have trully big setups you might wanna look at ldap, from what i've heard/read it should perform well under heavy read intensive operations. I always see a lots of LDAP talks and some documents on it for many things including managing multiples users on multiples

Re: SSH brute force attacks no longer being caught by PF rule

2007-06-28 Thread Daniel Ouellet
J.D. Bronson wrote: At 08:56 AM 06/28/2007, Stuart Henderson wrote: On 2007/06/28 08:46, J.D. Bronson wrote: Will NEW offenders be added to /etc/tables/scanners as they are discovered and therefore not just remain in kernel? No, pf does not write to files. How about cron(8) and pfctl(8)

Re: SSH brute force attacks no longer being caught by PF rule

2007-06-28 Thread Daniel Ouellet
J.D. Bronson wrote: Guys...I was not the one that started this thread.. I just chimed in and asked for a tweak on the setup. Sorry for my mistake then. I should refrain from replying on lack of sleep. (; I have what I need for now :) Glad it help you never the less.

Re: clamav on 3.9

2007-06-28 Thread Daniel Ouellet
I'm trying to install the newest clamav (0.90.3) on OpenBSD 3.9 . I updated The clamav package for 3.9 is clamav-0.88.tgz For 4.1 it is: clamav-0.90.tgz Don't mix versions. http://openbsd.org/faq/faq15.html#Latest

Re: Spamd sync observations and differences and setup question.

2007-06-27 Thread Daniel Ouellet
Reyk Floeter wrote: you have to enable ip multicast on the systems. Shouldn't it be included in the man page then? May be I miss it, but I read them many times over to try to figure it out. I sure will test tonight when the servers are a bit less use. by default, openbsd rejects any ip

Re: 4.0 sparc64 booting problems

2007-06-27 Thread Daniel Ouellet
openbsd neophyte wrote: Fast Data Access MMU Miss ok -- i'm kinda at a loss here. I do not have the Sun 5, but on some other Sun, when I get the Fast Data Access MMU Miss and other error like that. I do the steps like you did, but one more that correct it. Not sure that apply

Re: Spamd sync observations and differences and setup question.

2007-06-27 Thread Daniel Ouellet
Claudio Jeker wrote: The reject route only triggers for UDP traffic. So carp (which runs inside the kernel) and ospfd (uses a raw socket) are not affected. On the other hand ripd/routed and other tools using multicast over UDP hit that route and when sending all packets are discrded. Thanks

Re: pkg_add on macppc stall at end of ftp

2007-06-27 Thread Daniel Ouellet
The FTP problem has been fixed (worked around) in -current AFAIK. See the archives for ports@ Thank you!

Re: Spamd sync observations and differences and setup question.

2007-06-27 Thread Daniel Ouellet
Jason McIntyre wrote: On Wed, Jun 27, 2007 at 04:05:06PM -0400, Daniel Ouellet wrote: Thanks for the clarification Claudio! May be a suggestion, a quick addition to man 8 spamd in regards to enable ip multicast on the systems might be welcome. I sure overlook that for sure and looking

Re: SSH brute force attacks no longer being caught by PF rule

2007-06-27 Thread Daniel Ouellet
Steve B wrote: The rule I've had in my pf.conf file to catch and block forceful SSH attempts no longer appears to be working. I see the entries in my authlog, but the IPs are no longer getting added to my table. I suspect I screwed something up, but so far I am at a loss to see where. Could

Spamd sync observations and differences and setup question.

2007-06-26 Thread Daniel Ouellet
Hi, I setup the spamd sync feature between two servers running 4.1 and I observe the following issues with the setup itself. Some setup based on the man page do not work for me anyway and some are not always reliable and some always work. See below. Example Interface facing the Internet:

Re: r/w on NTFS system

2007-06-24 Thread Daniel Ouellet
Alex Kwan wrote: Hello, Can I read and write on NTFS system under OpenBSD? Alex man 8 mount_ntfs

OT: SIP termination alternative

2007-06-24 Thread Daniel Ouellet
Hi, Anyone can recommend a good SIP termination provider, specially for International calls. Domestic US is also needed, but not as badly. I am using Level(3) already and the connection speed is definitely not great all the time and Masergy works well, however to many failed connection is

Re: recommended hardware for Gigabit firewall?

2007-06-13 Thread Daniel Ouellet
Florin Andrei wrote: I'm building several firewalls that need to be able to sustain 1000 Mbit throughput. We're using AMD64 processors a lot, so that's the kind of architecture I'm looking at right now. I will use OpenBSD 4.1 64 bit version. The set of rules on the firewalls will be relatively

pkg_add on macppc stall at end of ftp

2007-06-12 Thread Daniel Ouellet
Hi, Not sure if this is a new problem, or specific to 4.1 on powerpc, or all architecture. But I setup a few times an old iMac for my sun that really wanted to try OpenBSD desktop setup and so far loved it! (; In the process of installing packages on it, I always have the same issue

Re: About BSD Certification

2007-06-10 Thread Daniel Ouellet
Adam wrote: Daniel Ouellet [EMAIL PROTECTED] wrote: Time have show my over and over that candidate that need to justify what they know by papers are not the one that get the job done when you are in crisis and as such, that become my quick filter before the interview as to who not to invite

Re: About BSD Certification

2007-06-09 Thread Daniel Ouellet
dreamwvr wrote: Just my 2 cents. Personally there is nothing wrong with making money. What I find sad is when that becomes the only way to enter the fray. For example the CISSP certification cost quite a bit and is used as a secret handshake by quite a few corps. It is the tip of the iceberg

Re: How much time to 'master' OpenBSD

2007-06-08 Thread Daniel Ouellet
Pieter Verberne wrote: Hi there OpenBSD users, I wonder how much time it took for the average person to 'master' OpenBSD or a similar OS. With 'master' I mean you have all skills to configure and use the system. You know reguar expressions, thorough cli skills like pipes/vi/mg/scripts etc.

Re: mysql4

2007-06-06 Thread Daniel Ouellet
Marcos Laufer wrote: I'm not sure that the reason mysql4 isn't in the packages is due to lack of time or resources.. There must be some other reason, i think this because everytime there are more and more packages, so removing one that so many people use is kind of weird.

Re: How to run and manage a DNS server.

2007-06-06 Thread Daniel Ouellet
Sam Fourman Jr. wrote: well here is a question, I was wondering if there would be anyway to make OpenBSD based DNS servers have a PostgreSQL backend. (I know there will be a performance hit) and does anyone know of a gtk front end for DNS management? or maybe a web based solution that is just

Re: How to run and manage a DNS server.

2007-06-06 Thread Daniel Ouellet
More for you. Go here: http://openbsdsupport.org/ 4th one from the top called OpenBSD as a domain name server Also you can read to get understanding of DNS usage here: http://cr.yp.to/djbdns.html ( that's not bind, but provide good detials on how things work as well) Same here:

Re: mysql4

2007-06-05 Thread Daniel Ouellet
Marcos Laufer wrote: Hello there, I don't know if this has been asked or discussed before,.. here's no mysql4 packages in OpenBSD 4.1 . Why? mysql-server-5.0.33.tgz Is available. They do not have the resources to have every possible version as packages, nor do they have the equipment to

Re: The British

2007-06-01 Thread Daniel Ouellet
Rafael Almeida wrote: what's happening with [EMAIL PROTECTED] What, you didn't notice? It's been sold and now it's [EMAIL PROTECTED] Sorry, I really thought you knew that.

Re: Instant Messenger client

2007-05-31 Thread Daniel Ouellet
Rafael Almeida wrote: PS: it's not very polite of you calling your intern stupid. That is sure true, but see, if the radio show can get by with what they call STUPID intern that are use to interface with listeners, may be that also tell you about the show itself and/or it's listeners may be.

Weird dmesg on X4100 M2

2007-05-24 Thread Daniel Ouellet
Hi, Here is some weird dmesg on a new install on a Sun X4100 X2 brand new out of the box. Hopefully it is helpful to clear some errors and may be as well to know if I should do anything special. I am just starting to test these to put them in productions soon, but I may hold back a bit

4GB limits per system, or processor

2007-05-24 Thread Daniel Ouellet
I guess as well that the 4GB limit is per system, not per processor right? I assume wrong when I added memory in that box looks like. I get this from top. Obviously, I am loosing 5GB out of this. hmmm. OpenBSD 4.1 load averages: 0.09, 0.09, 0.07

Re: 4GB limits per system, or processor

2007-05-24 Thread Daniel Ouellet
mickey wrote: currently memory above 4G is not supported there either. and yes same note about bios mapping it funky applies for amd64 machines too. Thanks! Last question. so, removing 4 and leaving 4GB then, even if the system may use less, it's not going to make it crash is it? Meaning, it

dmesg of X4100 with acpi enable for both bsd and bsd.mp

2007-05-24 Thread Daniel Ouellet
Here both dmesg with acpi enable if anyone is interested or if that any use for anyone. Any interest on current? Thanks Daniel OpenBSD 4.1 (GENERIC) #874: Sat Mar 10 19:09:51 MST 2007 [EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC real mem = 3757625344

Peek active process

2007-05-23 Thread Daniel Ouellet
I am trying to find out how many peek active process a server run in a given time period, like in one day, and may be a week. I try to see how servers handle heavy peak at time. I thought that systat vmstat, or others could provide me that. Unless I don't read the right man page, looks like

Re: Peek active process

2007-05-23 Thread Daniel Ouellet
Damien Miller wrote: systat doesn't support display of maxima. It would probably be trivial to add it though. Oh well, will do without then. Thanks for the reply, really appreciated. Daniel

Re: smtp auth + greylisting

2007-05-22 Thread Daniel Ouellet
Stephen Schaff wrote: That's a really good point. However we have about 200 users we'd have to get to switch their mail settings - 99% of don't know what mail settings are of course. Changing ports could prove very painful. I will definitely consider it though, given how painful email is

Re: Sun Netra X1 Firewall Throughput?

2007-05-18 Thread Daniel Ouellet
Bryan Vyhmeister wrote: One thing I was wondering about the X1. Does it support hard drives larger than 137 GB or whatever that old limit was? I don't know if Sun systems are affected by those same kind of issues as older PC stuff but I don't want to get bitten by that one if they are. No it

Re: Sun Netra X1 Firewall Throughput?

2007-05-18 Thread Daniel Ouellet
On 18/05/07, Bryan Vyhmeister [EMAIL PROTECTED] wrote: Can anyone give any information about the Sun Netra X1 being used as a pf firewall. I am specifically looking for throughput information. I am considering using a pair for a theoretical maximum throughput of about 45 Mbps. Can the Netra X1

Re: Bottleneck in httpd. I need help to address capacity issues on max parallel and rate connections

2007-05-10 Thread Daniel Ouellet
Ted Unangst wrote: On 5/9/07, Daniel Ouellet [EMAIL PROTECTED] wrote: I try to stay safe in my choices and comments are welcome, but I have to point out as well that ALL the values below needs to be changes to that new value to get working well. If even only one of them is not at the level

net.inet.tcp.keepinittime

2007-05-10 Thread Daniel Ouellet
Quick question. In FAQ 6.6.1 we have reference for: net.inet.tcp.keepinittime http://www.openbsd.org/faq/faq6.html#Tuning But in man(3) sysclt we have: tcp.keepinittime Unused. I assume the man page is right, is it so? Value sure cna be preset via sysctl: # sysctl

Re: net.inet.tcp.keepinittime

2007-05-10 Thread Daniel Ouellet
Claudio Jeker wrote: keepinittime is used by the syncache to timeout SYN request. So the manpage seems to be wrong. Thanks for the clarification. Daniel

Re: Bottleneck in httpd. I need help to address capacity issues on max parallel and rate connections

2007-05-10 Thread Daniel Ouellet
As requested a few times in private to make the results available, here you go with what works for me. Hope this help some anyway. Use what make sense to you based on your setup, hardware and traffic. Final value in use after testing are now set as follow for me assuming a good amount of

<    2   3   4   5   6   7   8   9   10   11   >