Re: what's wrong with ipsec ?

2010-06-01 Thread Stephan A. Rickauer
On Tue, 1 Jun 2010 17:44:41 +0300 Gregory Edigarov g...@bestnet.kharkov.ua wrote: On Tue, 1 Jun 2010 15:14:58 +0100 Sevan / Venture37 ventur...@gmail.com wrote: from 47.html Two bugs in IPsec/HMAC-SHA2 were fixed, resulting in an incompatibility with the HMAC-SHA-256/384/512 hash

Re: OpenBSD as MX server

2009-09-30 Thread Stephan A. Rickauer
On Wed, 2009-09-30 at 13:30 +0700, sonjaya wrote: it will be helpful if want share tutorial . man smtpd || man sendmail man spamd

HP ProLiant ML350 G5

2009-09-24 Thread Stephan A. Rickauer
If someone happens to run 4.6 or -current on an HP ProLiant ML350 G5, it would be nice to see a dmesg. Thanks.

Re: 4.6 postponed to Nov 1

2009-09-18 Thread Stephan A. Rickauer
On Fri, 2009-09-18 at 11:09 +0200, Alexander Hall wrote: Theo de Raadt wrote: The 4.6 release will be postponed to Nov 1. Heh. I just cannot help being a little amused by this, since we are expecting our second kid with an ETA of Nov 1, and I thought it would have been a fun coincidence to

Re: Defending OpenBSD Performance

2009-09-17 Thread Stephan A. Rickauer
On Wed, 2009-09-16 at 20:59 +0100, Cian Brennan wrote: OpenBSD's a wonderful OS, but it's lack of easy upgradability is a *disadvantage, not something to be proud of. And yes, there are good Our Institute moved away from Linux servers always everwhere, just *because* of updates are unreliable.

Re: Defending OpenBSD Performance

2009-09-15 Thread Stephan A. Rickauer
performance issue. How do others defend OpenBSD in these conversations? I I don't defend. Just let everyone use what they want.

Re: binding services on carp

2009-05-27 Thread Stephan A. Rickauer
On Tue, 2009-05-26 at 16:18 -0400, uday wrote: Hey guys, A quick question, is there a way to bind services to the carp interface ? You see I have an ftp-proxy running and I wanted to use carp since I'm already doing fail-over with PF. FTP client -- Redundant Firewall w/ftp-proxy --

Re: spamd question

2009-05-27 Thread Stephan A. Rickauer
On Fri, 2009-05-22 at 15:53 -0400, Jim Razmus wrote: beck@ created the greyscanner Perl script to address the issues you've highlighted. It does deeper inspection of grey listed senders before they are white listed. It validates the DNS setup of the sending server, the validity of the

Re: Live OpenBSD Bootable i386 CD

2009-04-20 Thread Stephan A. Rickauer
On Sun, 2009-04-19 at 19:04 -0400, Josh Grosse wrote: I'll send you that also. It's a single shell script that converts a disk based system into a bootable ISO. (Almost, one still needs to build the custom kernels in a separate step; it's a separate step because I only build them once and

Re: Live OpenBSD Bootable i386 CD

2009-04-20 Thread Stephan A. Rickauer
On Sun, 2009-04-19 at 13:01 -0500, Marco Peereboom wrote: Do you have an automated process to generate these at any given time? If so can you share that? svn://svn.startek.ch/BSDanywhere build.sh gives you the script that builds an image directly from fresh OpenBSD tgz's. The version we used

sendmail: cannot open /var/spool/mqueue

2009-04-20 Thread Stephan A. Rickauer
Has anyone seen this before in /var/log/maillog? Apr 20 08:37:51 srv1 sm-mta[10664]: n3K6bpjJ010664: SYSERR(root): gatherq: cannot open /var/spool/mqueue: No such file or directory Apr 20 08:38:52 srv1 sm-mta[15383]: filesys_update failed: No such file or directory, fs=., avail=-1, blocksize=3

Re: sendmail: cannot open /var/spool/mqueue

2009-04-20 Thread Stephan A. Rickauer
On Mon, 2009-04-20 at 07:18 -0400, Nick Holland wrote: did you, by any chance, install a new baseXX.tgz file on the system? Right, that was it. Funny, I must have read this a dozen times ... OpenBSD 4.4-stable (GENERIC.MP) #4: Sun Nov 16 14:21:18 CET 2008 I'd be more convinced I was right

Re: spamd handling multiple sending servers

2009-03-23 Thread Stephan A. Rickauer
Hi, On Mon, 2009-03-23 at 18:59 +1100, Mikel Lindsaar wrote: I understand that spamd is tracking messages based on sender, receiver and IP address, and then this can cause the problem. Spamd doesn't 'track messages'. All it does is to store a tupal of sender, recipient and IP address and quits

Re: might be slightly OT: `probability in PF'

2009-03-23 Thread Stephan A. Rickauer
On Sat, 2009-03-21 at 12:14 +0100, Henning Brauer wrote: * jmc j...@cosmicnetworks.net [2009-03-11 15:05]: so anyway, how are _you_ using probability? it's high on my list of useless features in pf I'd rather remove. if anybody is actually using it, I'd like to hear about it. Once in a

PKG_CACHE

2009-03-23 Thread Stephan A. Rickauer
What magic do I miss to cache packages in PKG_CACHE? Must be really obvious, but I can't spot it. # PKG_CACHE=/tmp # echo $PKG_CACHE /tmp # pkg_add -x nano Adding nano-2.0.7 # ls -l /tmp/ (empty) Thanks.

Re: spamd handling multiple sending servers

2009-03-23 Thread Stephan A. Rickauer
;) -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52 Winterthurerstrasse 190 Fax +41 44 635 30 53 CH-8057 Zurich

Re: PKG_CACHE

2009-03-23 Thread Stephan A. Rickauer
export thanks, Paul. On Mon, 2009-03-23 at 16:49 +0100, Stephan A. Rickauer wrote: What magic do I miss to cache packages in PKG_CACHE? Must be really obvious, but I can't spot it. # PKG_CACHE=/tmp # echo $PKG_CACHE /tmp # pkg_add -x nano Adding nano-2.0.7 # ls -l /tmp

Re: OpenVPN server refuses connections

2009-03-04 Thread Stephan A. Rickauer
/etc/openvpn/server.conf: local 192.168.0.1 /etc/openvpn/client.conf remote 66.66.66.66 1194 ? -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41

Re: How do I monitor my PF based firewall?

2009-03-04 Thread Stephan A. Rickauer
- stable and the included snmpd). Can you please give me a hint into the right direction? As far as I remember, including a 'PF-MIB' into opensnmpd is on reyk@'s ever growing todo list already. -- Stephan A. Rickauer --- Institute

Re: How do I monitor my PF based firewall?

2009-03-04 Thread Stephan A. Rickauer
On Wed, 2009-03-04 at 11:33 +0100, Falk Brockerhoff - smartTERRA GmbH wrote: Am 04.03.2009 um 11:23 schrieb Lars Noodin: It's probably simplest to start with pftop. After a first quick look pftop is a great tool for debugging und manually monitoring firewall activity. But it seems that I

Re: Kernel static map entries and kernel options

2009-02-21 Thread Stephan A. Rickauer
On Thu, 2009-02-19 at 15:07 +1100, Linden Varley wrote: Recently on some apache reverse proxy servers we have encountered the dreaded This has occurred on OpenBSD 3.9 i386 and OpenBSD 4.0 amd64. I am unsure If you experience problems that have 'recently' occured on 3.9 and 4.0 your problems'

Re: pfsync vs contrackd

2009-02-19 Thread Stephan A. Rickauer
On Thu, 2009-02-19 at 13:10 +0100, Mikel Jimenez wrote: What are the limitations of contrackd? When I looked into it some moons ago, contrackd would only sync established tcp connections. -- Stephan A. Rickauer --- Institute

set skip ignores interface group

2009-02-17 Thread Stephan A. Rickauer
, -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52 Winterthurerstrasse 190 Fax +41 44 635 30 53 CH-8057 Zurich

Re: Pflow and ifconfig

2008-12-28 Thread Stephan A. Rickauer
current version on openbsd. My question is how do I bring my installation up to the newest stable release? Check out the FAQ: http://www.openbsd.org/faq/faq5.html#Flavors Cheers, -- Stephan A. Rickauer --- Institute

Re: CARP under heavy load

2008-12-23 Thread Stephan A. Rickauer
On Tue, 2008-12-23 at 08:13 +0100, Claudio Jeker wrote: There is some initial code in -current that tries to avoid the system entering livelock for extended times. It needs a lot of testing so maybe you should try it out and report back. sure. Just send me the diffs... -- Stephan

Re: CARP under heavy load

2008-12-23 Thread Stephan A. Rickauer
On Tue, 2008-12-23 at 09:15 +0100, Stephan A. Rickauer wrote: On Tue, 2008-12-23 at 08:13 +0100, Claudio Jeker wrote: There is some initial code in -current that tries to avoid the system entering livelock for extended times. It needs a lot of testing so maybe you should try it out

Re: ipv6/pf/relayd/totd

2008-12-19 Thread Stephan A. Rickauer
if the situation merits. Hope this provides some useful pointers! Well, at least my pf.conf is fixed now! Thanks again. But I still struggle with relayd. I'll try to setup this case at home on my much simpler environment over christmess. Maybe that'll work. Cheers, -- Stephan A. Rickauer

Re: ipv6/pf/relayd/totd

2008-12-19 Thread Stephan A. Rickauer
that. I'm still convinced the pf.conf is the problem, redirect to a global scope IPv6 address and I suspect you'll be much better off. Yes, that fixed it. Thanks again. I owe you a pint, well ... two pints ;) Cheers, -- Stephan A. Rickauer

Re: synproxy issue

2008-12-17 Thread Stephan A. Rickauer
to port http modulate state I have no doubt that disabling synproxy fixes the issue. My question was rather raised to understand *why* it wouldn't work. Nobody has been able to answer it so far. -- Stephan A. Rickauer --- Institute

Re: ipv6/pf/relayd/totd

2008-12-17 Thread Stephan A. Rickauer
behind an ipv4-to ipv6 relay (I know that we could just simply nat more private ipv4 addresses, but that is not an option right now). For sure OpenBSD brings all you need to do it - it's just that I am stuck at the moment and can't see why... but maybe I'll figure it out today! -- Stephan

Re: Going OT Re: ipv6/pf/relayd/totd

2008-12-17 Thread Stephan A. Rickauer
On Wed, 2008-12-17 at 06:54 -0700, Diana Eichert wrote: On Wed, 17 Dec 2008, Jeroen Massar wrote: Stephan A. Rickauer wrote: If you knew something about the political structures of SWITCH and of UZH you wouldn't recommend kicking the network administrator. If you would have read

Re: ipv6/pf/relayd/totd

2008-12-17 Thread Stephan A. Rickauer
On Wed, 2008-12-17 at 11:11 +0100, Jeroen Massar wrote: You are trying to solve the wrong problem with the wrong hammer. I need to go the bus station. Do you know the way? If I were you, I wouldn't start from here. Sorry, but relayd is _exactly_ what can fix this issue, without being a hammer

Re: Soekris equivalent

2008-12-17 Thread Stephan A. Rickauer
On Wed, 2008-12-17 at 20:56 +0100, Marc Balmer wrote: ALIX boards serve me well. See www.pcengines.ch. I can second that. Alix boards have served me as a robust drop-in replacement for Soekris while being cheaper at the same time (maybe not for non-Swiss customers, though).

Re: OpenBSD 4.4 amd64 bsd.mp can't detect 4GB memory

2008-12-17 Thread Stephan A. Rickauer
On Wed, 2008-12-17 at 14:52 -0500, Ted Unangst wrote: On Tue, Dec 16, 2008 at 7:43 AM, C. Soragan Ong sora...@guox.net wrote: so let say put set bigmem=1 into /etc/boot.conf will activate the bigmem? correct me if i am wrong, i am new with openbsd :) the only permanent way to set that is

Re: CARP under heavy load

2008-12-16 Thread Stephan A. Rickauer
forwarding the traffic (~6000/s each). The cpu load was ~70% - 80% (it's a Pentium 4, 2.66GHz). The bandwidth utilized was around 280MBit/s. This all leads to my assumption that rather the machine was overloaded and not the link. -- Stephan A. Rickauer

ipv6/pf/relayd/totd

2008-12-16 Thread Stephan A. Rickauer
shed some light on my dark spots? -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52 Winterthurerstrasse 190 Fax +41 44 635 30

Re: ipv6/pf/relayd/totd

2008-12-16 Thread Stephan A. Rickauer
On Tue, 2008-12-16 at 16:32 +0100, Dirk Mast wrote: Hi, have you already seen this great post on undeadly? Yes, I have. Without it, I wouldn't have come so far ;)

Re: OpenBSD 4.4 amd64 bsd.mp can't detect 4GB memory

2008-12-16 Thread Stephan A. Rickauer
On Mon, 2008-12-15 at 07:39 -0800, Chris Kuethe wrote: no. the config program can do this without a recompile. I also would like to learn how to do that since we have a couple of 'big' amd64 machines I could test on. Cheers, -- Stephan A. Rickauer

CARP under heavy load

2008-12-12 Thread Stephan A. Rickauer
) any comments welcome. ;) -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52 Winterthurerstrasse 190 Fax +41 44 635 30 53

Re: CARP under heavy load

2008-12-12 Thread Stephan A. Rickauer
the other CARP interfaces? We do have a dedicated link for pfsync, though. -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52

Re: CARP under heavy load

2008-12-12 Thread Stephan A. Rickauer
one use the same 'carppeer ded.ica.ted.ip' statement for all carp interfaces altogether (and the other dedicated peer IP on the other)? This would come in handy. -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41

Re: OT: Granting access from DMZ servers to iSCSI network

2008-12-12 Thread Stephan A. Rickauer
and iSCSI servers .. Sounds reasonable. Don't know about the snort part, but you can also use pf on that bridge ... -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich

Re: CARP under heavy load

2008-12-12 Thread Stephan A. Rickauer
On Fri, 2008-12-12 at 17:32 +0100, Felipe Alfaro Solana wrote: What's the point on using CARP to send advertisements over a dedicated link? The dedicated link is typically a cross-over cable (i.e. used for pfsync) and hence, in case of a switch port failure (or cable failure), CARP won't be

Re: OT, .. but eCommerce?

2008-12-12 Thread Stephan A. Rickauer
On Fri, 2008-12-12 at 09:33 -0600, L. V. Lammert wrote: A friend of mine is trying to get a small cCommece site up on one of our 4.4 servers, .. he is trying to get eCommerce Templates running but is having problems with curl it looks like others are ahead. This seems that is something from

Re: XenServer 5 with OpenBSD

2008-12-09 Thread Stephan A. Rickauer
On Mon, 2008-12-08 at 14:27 -0600, Adam Douglas wrote: The biggest question is OpenBSD on XenServer 5 Enterprise consider production ready even if the errors cannot be resolved? OpenBSD is, Xen isn't.

synproxy issue

2008-12-03 Thread Stephan A. Rickauer
in this case isn't a problem, but I'd like to understand why synproxy wouldn't work in this szenario or what triggers it to fail. Thanks, -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH

OpenBSD and XenSource

2008-12-01 Thread Stephan A. Rickauer
Those of you interested in running OpenBSD as a Xen guest in XenEnterprise might want to use this opportunity to raise their voice: http://forums.citrix.com/thread.jspa?threadID=151525 (Please note I have no intention to discus the boon and bane of virtualization...) Cheers, Stephan --

Re: New tcp stack attack

2008-10-01 Thread Stephan A. Rickauer
closer to the ground A little bit less vage info can be found here http://tinyurl.com/3hv3kf -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635

4.4-current on XenServer 5

2008-09-22 Thread Stephan A. Rickauer
In know virtualization is not one of the primary targets of OpenBSD. However, in case someone is interested, here's a dmesg of 4.4-current booting bsd.rd on latest XenServer 5 (Express, with Intel VT). As you can see, there is no harddisk detected. I am ready to help testing if a developer wants

Re: 4.4-current on XenServer 5

2008-09-22 Thread Stephan A. Rickauer
Stupid me, the disk is there and OpenBSD runs just fine on it. Sorry for the noise. On Mon, 2008-09-22 at 12:24 +0200, Stephan A. Rickauer wrote: In know virtualization is not one of the primary targets of OpenBSD. However, in case someone is interested, here's a dmesg of 4.4-current booting

Re: pf visualization

2008-08-29 Thread Stephan A. Rickauer
On Thu, 2008-08-28 at 11:52 -0400, Jason Dixon wrote: Thanks for any ideas beyond pftop, tcpdump, hatched, darkstat and ntop ;) If I ever get off my lazy ass and finish/package it up, maybe this? http://www.netflowdashboard.com/demo/ http://www.netflowdashboard.com/download/ is down

Re: pf visualization

2008-08-29 Thread Stephan A. Rickauer
On Thu, 2008-08-28 at 16:03 +, Stuart Henderson wrote: Thanks for any ideas beyond pftop, tcpdump, hatched, darkstat and ntop ;) the nfdump/nfprofile tools (also in ports) are interesting too, there's a web interface NfSen which is yet to be ported but can be manually installed

pf visualization

2008-08-28 Thread Stephan A. Rickauer
I am curious what tools people here use to visualize pf-generated logs and/or live traffic. What i'm basically looking for is a tool, that provides various stats about a pf firewall usage in a graphical way, but not only 'bytes in/bytes out' (i have that using snmp/cacti) but more detailed stuff

spamdb with '0' as pass

2008-08-14 Thread Stephan A. Rickauer
I have difficulties in understanding why a minority of IP's of a huge set of WHITE entries of our spamdb do not have a 'pass' date set: # spamdb | grep 128.1x8.50.xxx WHITE|128.1x8.50.xxx|||1218625388|0|1221750240|1|1 spamdb(8) says: time the entry passed from being GREY to being WHITE. Since it

Re: Purpose of spamd-setup in greylisting mode?

2008-08-12 Thread Stephan A. Rickauer
that helps, -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52 Winterthurerstrasse 190 Fax +41 44 635 30 53 CH-8057 Zurich

Re: CARP node crashing reproducibly (4.3-stable)

2008-07-23 Thread Stephan A. Rickauer
are right. The leak we've seen is due to a kernel build we must have introduced by using an unclean source tree. Problem solved. However, the patch you've implemented in 1.610 of pf.c does fix the crashes we've seen before. Thanks a lot! -- Stephan A. Rickauer

Re: CARP node crashing reproducibly (4.3-stable)

2008-07-14 Thread Stephan A. Rickauer
On Mon, 2008-07-14 at 14:22 +0200, Henning Brauer wrote: perfect analysis! looks like the only sane thing to do in that case is to bail and not send the icmp. I've compiled a new kernel with the patch. The machine is no longer crashing on pf_send_icmp(). However, I now see memory leaking

CARP node crashing reproducibly (4.3-stable)

2008-07-11 Thread Stephan A. Rickauer
897 1 0 1 1 0 81 plimitpl 152 6600 647 1 0 1 1 0 80 inpcbpl 216 1480120 147993 3 0 3 3 0 81 In use 20068K, total allocated 23264K; utilization 86.3% -- Stephan A. Rickauer

Re: CARP node crashing reproducibly (4.3-stable)

2008-07-11 Thread Stephan A. Rickauer
groups: carp egress inet6 fe80::200:5eff:fe00:103%carp3 prefixlen 64 scopeid 0xc inet 130.60.x.xxx netmask 0xfffc broadcast 130.60.x.xxx I think this it ;) -- Stephan A. Rickauer --- Institute of Neuroinformatics

Re: CARP node crashing reproducibly (4.3-stable)

2008-07-11 Thread Stephan A. Rickauer
On Fri, 2008-07-11 at 21:32 +0200, Henning Brauer wrote: * Stephan A. Rickauer [EMAIL PROTECTED] [2008-07-11 16:59]: Here's all data I was able to get off our crashing machine, the backup node of our CARP cluster, that used to run flawlessly since 3.7. We can reproduce the problem

setting PKG_CACHE stopps pkg_add

2008-06-27 Thread Stephan A. Rickauer
(this is i386, 4.3 release) PKG_PATH contains three locations 0) PKG_CACHE dir 1) first http server (mirror.switch.ch) 2) second http server (mirror.startek.ch) # echo $PKG_PATH /pkg_cache/:http://mirror.switch.ch/ftp/pub/OpenBSD/4.3/packages/i386/:http://mirror.startek.ch/OpenBSD/pkg/i386/e17/

Re: Net-SNMP segfaults under OpenBSD 4.3

2008-06-27 Thread Stephan A. Rickauer
On Wed, 2008-06-25 at 11:17 -0400, (private) HKS wrote: In my quest for real SNMP monitoring of OpenBSD, I installed net-snmp-5.4.1p0 on an OpenBSD 4.3 box via packages. The executable segfaults every time I try to run it. This happens with or without command-line options, with my custom

Qlogic shipped one adapter, finally

2008-06-06 Thread Stephan A. Rickauer
Update: Qlogic finally managed to donate one iSCSI HBA to the OpenBSD project. I'd like to thank everybody who participated in emailing Qlogic - this step applied the required pressure so they finally kept their promise. Stephan. On Mon, 2008-04-21 at 20:52 +0200, Stephan A. Rickauer wrote

saslauthd and rimap

2008-05-07 Thread Stephan A. Rickauer
If someone happens to run saslauthd 2.1.22 on OpenBSD and uses rimap as authmech against a cyrus server, please try to authenticate using a password with double-quotes. I think we've found a bug here and it would be neat to have a confirmation. Thanks, -- Stephan A. Rickauer

QLogic lies: now it's up to you

2008-04-21 Thread Stephan A. Rickauer
media. -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52 Winterthurerstrasse 190 Fax +41 44 635 30 53 CH-8057 Zurich

Re: QLogic lies: now it's up to you

2008-04-21 Thread Stephan A. Rickauer
of this week. Thanks guys. On Mon, 2008-04-21 at 11:59 +0200, Stephan A. Rickauer wrote: In October 2007 I have established contact with QLogic, to investigate whether they could help us in making iSCSI HBAs work in OpenBSD by donating some hardware and by providing free programming

Re: wpa now in current?!

2008-04-17 Thread Stephan A. Rickauer
-in-progress, but the basic functionality is there. -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52 Winterthurerstrasse 190 Fax

Re: Gratuitous ARP

2008-03-25 Thread Stephan A. Rickauer
On Mon, 2008-03-24 at 23:11 +0100, Henning Brauer wrote: MAC=00:11:22:33:44:55 DNET=dnet for IP in `ifconfig $interface | grep 'inet ' | \ sed 's/ *inet \([0-9]*\.[0-9]*\.[0-9]*\.[0-9]*\) netmask.*/\1/'`; do ${DNET} arp op rep sha ${MAC} spa ${IP} tpa ${IP} | \ ${DNET} eth

Gratuitous ARP

2008-03-24 Thread Stephan A. Rickauer
Does anyone happen to know a tool that sends out gratuitous arp from userland on openbsd? P.S. I know there is CARP, but I need to send out o;?gratuitous arp anyway ;) Thanks, Stephan

OpenExpo 2008 Bern

2008-03-08 Thread Stephan A. Rickauer
like last year we'll be present at the OpenExpo event in Bern, Switzerland on March 12/13 2008. It's completely free entrance, but you have to get a ticket online. Feel free to drop by. http://www.openexpo.ch/ Stephan

Re: Cyrus IMAP performance problems [Long]

2007-10-29 Thread Stephan A. Rickauer
On Tue, Oct 16, 2007 at 01:18:07PM -0300, Marcus Andree wrote: Got similar problems with imap once, a long time ago... Had to switch from mailbox format to maildir then, it wasn't Cyrus. -- Stephan A. Rickauer --- Institute

Re: I need a new non-sucky laptop...

2007-10-03 Thread Stephan A. Rickauer
On Tue, Oct 02, 2007 at 04:24:44PM +1000, Tanvir Ahmed wrote: I'm using OpenBSD 4.1 with a modified kernel on Lenovo Thinkpad T60 Out of curiosity, what modifications are necessary in your point of view? -- Stephan A. Rickauer

Re: arc0: unable to query firmware for sensor info

2007-10-03 Thread Stephan A. Rickauer
can't boot. -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52 Winterthurerstrasse 190 Fax +41 44 635 30 53 CH-8057 Zurich

Re: ms exchange replacement

2007-10-03 Thread Stephan A. Rickauer
and devtodo (cause I can). BTW: Does anyone happen to know of a mobile phone than _really_ synchronizes todo's and calendar with OpenBSD? I don't mind using command line tools or write a perl script around some tools ... -- Stephan A. Rickauer

Re: Jumb Frames

2007-10-03 Thread Stephan A. Rickauer
On Wed, Oct 03, 2007 at 01:32:15AM -0700, Jake Conk wrote: I was wondering if setting my ethernet's card mtu to 9000 is all I have to do to enable jumbo frames? (and of course set it on all other devices that the card connects to) works for me. -- Stephan A. Rickauer

Re: arc0: unable to query firmware for sensor info

2007-09-28 Thread Stephan A. Rickauer
On Fri, Sep 28, 2007 at 08:35:10AM +1000, David Gwynne wrote: On 27/09/2007, at 8:06 PM, Stephan A. Rickauer wrote: A new server shippped by a local vendor fails to boot bsd.mp, with and without acpi enabled (amd64, 4.2). Without acpi it will reboot directly after mounting the root device

arc0: unable to query firmware for sensor info

2007-09-27 Thread Stephan A. Rickauer
firmware for sensor info Any help, of course, is greatly appreciated. The server is not productive yet, so I can help providing all data that may be required. SSH login is also possible. Thanks! [1] http://marc.info/?l=openbsd-miscm=118148605315920w=2 -- Stephan A. Rickauer

Intel SRCSAS144E

2007-07-20 Thread Stephan A. Rickauer
Anyone having first hands experience with Intels SRCSAS144E RAID controller? According to mfi(4) it is not only supported but also registers nicely with bio(4). A bioctl output would be highly appreciated, too. Thanks, -- Stephan A. Rickauer

Re: Bioctl ciss controller status

2007-07-20 Thread Stephan A. Rickauer
the issue but I'm not sure what happened to the code. FYI, this issue doesn't seem to happen on the DL380. I do have the same issue with 4.1 on a DL385, though. Only one volume configured, controller firmware 2.08. # bioctl ciss0 bioctl: Can't locate ciss0 device via /dev/bio -- Stephan

Re: Bioctl ciss controller status

2007-07-20 Thread Stephan A. Rickauer
week. However, if there is a developer interested in getting this quick fix more beautiful, I could enable remote login on one of our machines for testing and developing. Please contact me off list. Thanks, -- Stephan A. Rickauer

-stable no longer mentioned in dmesg?

2007-05-04 Thread Stephan A. Rickauer
clean make depend make reboot BTW: What is that #0 for (release has #1435)? Thanks! -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52

Re: -stable no longer mentioned in dmesg?

2007-05-04 Thread Stephan A. Rickauer
On Fri, 4 May 2007 13:30:06 +0200 Reyk Floeter [EMAIL PROTECTED] wrote: On Fri, May 04, 2007 at 01:15:20PM +0200, Stephan A. Rickauer wrote: quick question: My newly build 4.1-stable on i386 says in dmesg: OpenBSD 4.1 (GENERIC) #0: Thu May 3 14:29:53 CEST 2007 [EMAIL PROTECTED

Fw: Security Development Lifecycle (SDL) Banned Function Calls

2007-04-04 Thread Stephan A. Rickauer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenBSD as a reference ... Begin forwarded message: - Date: Wed, 04 Apr 2007 10:25:34 +0200 To: Stephan A. Rickauer [EMAIL PROTECTED] Subject: Security Development Lifecycle (SDL) Banned Function Calls Theo de

Re: Printing using a network printer

2007-04-03 Thread Stephan A. Rickauer
to Debug, restart cupsd and have a look at your log files in /var/log/cups/, most importantly error_log -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41

uvm_mapent_alloc: out of static map entries

2007-03-31 Thread Stephan A. Rickauer
on my not so busy i386 4.0-current web server I get uvm_mapent_alloc: out of static map entries ~ once every two days. The archives bear a wide range of suggestions, from tweaking kernel feature xy to not touching anything, because that's stupid. However, this message bothers me a bit and so I

df reports capacity 100%

2007-03-22 Thread Stephan A. Rickauer
on /projects2.4T 2.0T 418G 84% /projects Not a problem at all, but maybe some developer is interested in understanding this phenomena or knows what one can do to cleanly update the Size information. Thanks. -- Stephan A. Rickauer

Re: df reports capacity 100%

2007-03-22 Thread Stephan A. Rickauer
Otto Moerbeek wrote: This is a known bug and not fixable until we change the statfs structure. http://cvs.openbsd.org/cgi-bin/query-pr-wrapper?full=yesnumbers=5169 Awesome. I wish other software had such a high quality of support. Thanks Otto. -- Stephan A. Rickauer

Re: Following the patch branch

2007-03-07 Thread Stephan A. Rickauer
;) realease(8) is your friend. - -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52 Winterthurerstrasse 190 Fax +41 44 635 30 53

Re: filesystem hackathon: still seeking donations

2007-03-01 Thread Stephan A. Rickauer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Nikolay Sturm wrote: - 8 250G SATA disks I was able to convince Dalco, a Swiss company, to loan those 8 disks to the hackathon. I'll get in touch with you privately so we can sort out the details. Cheers, - -- Stephan A. Rickauer

Re: Free Linux Driver Development!

2007-02-14 Thread Stephan A. Rickauer
Greg KH wrote: On Wed, Feb 14, 2007 at 08:39:36AM +0100, Stephan A. Rickauer wrote: On the subject of http://www.kroah.com/log/linux/free_drivers.html Now these companies have a great excuse to keep specs locked up tight under NDA, while pretending to be open. The OpenBSD project has been

Free Linux Driver Development!

2007-02-13 Thread Stephan A. Rickauer
ensures that Linux gets a working driver, sure, but the internals are indistinguishable from magic. It is a source code version of a blob. It now became clear you also don't give a damn about freedom. Well done, Greg. -- Stephan A. Rickauer

Re: pcn in VMware, 5KB/s

2007-02-12 Thread Stephan A. Rickauer
Srebrenko Sehic wrote: You could always try using vmxnet/vic. Using the Intel 'em' driver is also an option. ethernet0.virtualDev = vmxnet ethernet0.virtualDev = e1000 -- Stephan A. Rickauer --- Institute of Neuroinformatics

qlogic QLA4050C or QLA4052C

2007-02-07 Thread Stephan A. Rickauer
optimistic with qlogic). Please let me know off list. -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52 Winterthurerstrasse 190 Fax

Re: Backing up /var/db/spamdb

2007-01-31 Thread Stephan A. Rickauer
fails and needs to be brought back up quickly. I am content to just let spamd Since it's a mere Berkeley DB, can't you just do a 'db_dump /var/db/spamdb | ssh host db_load /var/db/spamdb' ? -- Stephan A. Rickauer --- Institute

OpenBSD's bind: CVE-2007-0493 and CVE-2007-0494

2007-01-30 Thread Stephan A. Rickauer
bind? I guess not, but maybe some insider could shed some photons on it. -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52

ntpd on -current 8 hours off

2007-01-26 Thread Stephan A. Rickauer
(on other synchronized machines and on my wrist the time is 09:27:33) Thanks, -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52

Re: ntpd on -current 8 hours off

2007-01-26 Thread Stephan A. Rickauer
Claudio Jeker wrote: On Fri, Jan 26, 2007 at 09:30:49AM +0100, Stephan A. Rickauer wrote: on a current snapshot from last week ntpd -s will successfully synchronize the clock at once, but 8 hours off the real time. 4.0-release and older snapshots behave as expected. Is there some new 'feature

Quantis PCI/USB

2007-01-25 Thread Stephan A. Rickauer
will take care of getting Free Programming Documentation and a card, if possible. Please let me know off list. - -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec

Re: bioctl compatible LSIs?

2006-12-01 Thread Stephan A. Rickauer
, read this: http://marc.theaimsgroup.com/?l=openbsd-miscm=116103468316956w=2 Not a big deal though, unless you can't afford to reboot on disk failure. It's on Marco's 'radar' anyway ;) -- Stephan A. Rickauer --- Institut f|r

Re: [ami] Unable to set Hot Spare on MegaRAID SATA 300-8x

2006-10-17 Thread Stephan A. Rickauer
. However, I will only be able to lend it for a couple of weeks since it belongs to a future customer (which expects a rock solid OpenBSD fileserver ;) ). -- Stephan A. Rickauer --- Institut f|r Neuroinformatik Tel: +41 44 635 30 50

  1   2   >