Re: dnscrypt-proxy

2013-12-31 Thread nixlists
-2013 05:34, nixlists escreveu: Hello, OpenBSD has this package. Is it trustworthy? Anyone uses here? I believe this works with OpenDNS, and a few other providers of secure recursive caches that support dnscurve through this package. DNS is probably never going to be secure against attacks

Re: dnscrypt-proxy

2013-12-31 Thread nixlists
On Tue, Dec 31, 2013 at 2:17 PM, Nicolai nicolai-om...@chocolatine.org wrote: On Tue, Dec 31, 2013 at 02:34:10AM -0500, nixlists wrote: Hello, OpenBSD has this package. Is it trustworthy? Yes, it is. Fine, I'll believe you :D Have to trust someone at some point, and you don't sound like

dnscrypt-proxy

2013-12-30 Thread nixlists
Hello, OpenBSD has this package. Is it trustworthy? Anyone uses here? I believe this works with OpenDNS, and a few other providers of secure recursive caches that support dnscurve through this package. DNS is probably never going to be secure against attacks in our lifetimes (but, hey, maybe

Device busy

2010-08-03 Thread nixlists
Hi. After an upgrade from an older snapshot of -current to the yesterday's snapshot any attempt to write to /dev/ulpt0 results in Device Busy. For example echo test /dev/ulpt0 returns Device busy. Older (several months old -current) kernel didn't have this problem. Thanks. OpenBSD 4.8-beta

Usb printer problem after upgrade

2010-08-02 Thread nixlists
Hi. I upgraded from a few months old -current snapshot to the August 1 i386 snapshot, and now any attempt to write to /dev/ulpt0 (my usb printer) results in Device busy. Booting with the old kernel - no problem, I can print. Is this a bug in the new snapshot? Is anyone else having issues with

Re: Shutdown fails intermittently with OpenBSD running off SD MMC card

2010-03-14 Thread nixlists
FWIW if I connect (boot with) my RAID enclosure to my eSATA card, the problem goes away at shutdown time. Any ideas? On 3/14/10, Anders Langworthy lagrang...@gmail.com wrote: On Fri, Mar 5, 2010 at 7:44 PM, J.C. Roberts list-...@designtools.org wrote: Now getting back to the link/problem

Shutdown fails intermittently with OpenBSD running off SD MMC card

2010-03-05 Thread nixlists
Hi. I installed a recent -current on an SD MMC card. Boots just fine with an old SanDisk reader, but most times at the time of shutdown (shutdown -h now) the kernel hangs at Syncing disks., and I have to power down manually. When it comes back it has to fsck of course. Shut down works fine on a

Re: Shutdown fails intermittently with OpenBSD running off SD MMC card

2010-03-05 Thread nixlists
On 3/5/10, Christiano F. Haesbaert haesba...@haesbaert.org wrote: 2010/3/5 nixlists nixmli...@gmail.com: Also unrelated, but I am using FireFox in this install to write this message and it is painfully slow. This is on an Athlon 64 X2 4200+. I am using .mp kernel. Is it supposed

Re: -current or -stable [was: Not another Browser Question]

2010-03-05 Thread nixlists
On 3/5/10, Marc Espie es...@nerim.net wrote: Well, sometimes we fuck up -current. Not on purpose, but it happens. If you run into a broken snapshot, you may have to wait a few days until a new snapshot hits the mirrors, usually with everything fixed. ... and so, your system may be

Re: -current or -stable [was: Not another Browser Question]

2010-03-05 Thread nixlists
On Fri, Mar 5, 2010 at 2:08 PM, Bret S. Lambert bret.lamb...@gmail.com wrote: The other problem, that gets mentioned is some people are forced to run -current because some packages will only work with -current, and backporting sucks for many reasons. Unless you're running one of those, it

Re: Shutdown fails intermittently with OpenBSD running off SD MMC card

2010-03-05 Thread nixlists
On 3/5/10, J.C. Roberts list-...@designtools.org wrote: look for the `-p` flag. Know all about it. The problem is the kernel won't even get to that point - it hangs on syncing disks... stage.

Re: pf: blocklists

2010-03-04 Thread nixlists
spamd is great, but I need to filter other traffic. I still wonder how people manage to download and convert blocklists for loading into pf in an automated way as a cron job. Has anyone attempted to do this? Often there are syntax errors in the lists, sometimes transfers fail. IOW it's unreliable,

Re: Best Mail Archive

2010-03-04 Thread nixlists
Every time someone tells me to go search an archive, I want to use profanity. They never think of just how painful mail archive searching is, but I guess we all have to bite the bullet and use search systems that are bad at searching.

Re: Best Mail Archive

2010-03-04 Thread nixlists
mailing.openbsd.tech is on Google groups, I don't see mailing.openbsd.misc. Searching on Google groups works quite well, would be nice to see this list there.

Re: pf: blocklists

2010-03-04 Thread nixlists
2010/3/4 Iqigo Ortiz de Urbina tarom...@gmail.com: What are you trying to accomplish? I would be interested on helping you but first I would like to understand it better. I really think all those task can be easily automated via scripts and pfctl to load the netblocks on tables. Have a nice

Re: Best Mail Archive

2010-03-04 Thread nixlists
Odd. I search/browse a few months back into archive at least, and not because someone tells me to do it, and I still don't find answers sometimes (and searching still sucks, but ignore my whining).

Re: Best Mail Archive

2010-03-04 Thread nixlists
Having contributed to MARC I think it's a pretty good site. Hank has also added lists, as in the PCC lists, when I requested. I didn't say MARC is a bad site.

Re: -current or -stable [was: Not another Browser Question]

2010-03-04 Thread nixlists
On Thu, Mar 4, 2010 at 10:44 AM, Chris Bennett ch...@bennettconstruction.biz wrote: -current is typically safer by default since all those errata in release versions are already fixed in -current snapshots. No patches, no builds. just update to latest snapshots, other than time to update

Re: Best Mail Archive

2010-03-04 Thread nixlists
But has a point. Mail archives are dead as an interface. Google knows all. We should be asking 'Did you ask Google?' rather than 'Did you search the mail archives.' I'm sure many people have to go Google 'mail archives' to figure out what they are anyway. :-). Ken I like it as much as

Re: -current or -stable [was: Not another Browser Question]

2010-03-04 Thread nixlists
On Thu, Mar 4, 2010 at 11:35 AM, Chris Bennett ch...@bennettconstruction.biz wrote: You are talking about two separate issues. Stability is not related to security directly. The two are intricately combined but not the same. But both are related to downtime and data loss. I understand

Re: -current or -stable [was: Not another Browser Question]

2010-03-04 Thread nixlists
On Thu, Mar 4, 2010 at 11:58 AM, and...@msu.edu wrote: But both are related to downtime and data loss. I understand stability bugs are likely to pop-up more often with current, and this has been my experience. Weird freezes without panic that I did not have with release/stabe, and some

Re: -current or -stable [was: Not another Browser Question]

2010-03-04 Thread nixlists
On Thu, Mar 4, 2010 at 12:28 PM, and...@msu.edu wrote: If you don't have a good understanding of things, I'd say you should By good understanding do you mean ability to read and write system code, and intimate familiarity with *nix internals? ... not follow -current on machines that are

pf: blocklists

2010-03-03 Thread nixlists
Does anyone use blocklists of addresses for blocking spam and other unwanted traffic, such as those from okean and other places? How do you manage download and conversion/loading of blocklists? Automatically through scripts or manually? . Thanks.

Re: Average time for compiling userland? == benchmarking CPU/IO? best result for database hosting?

2010-03-02 Thread nixlists
On Sun, Feb 28, 2010 at 4:56 PM, Aaron Mason simplersolut...@gmail.com wrote: On Mon, Mar 1, 2010 at 4:17 AM, Andres Salazar ndrsslz...@gmail.com wrote: On Sun, Feb 28, 2010 at 11:10 AM, Bret S. Lambert bret.lamb...@gmail.com wrote: ... Setting the controller to AHCI would give OpenBSD access

route output

2010-03-02 Thread nixlists
Could someone throw a clue stick? I've read the man pages for netstat and route, and I am still not clear what the output of netstat -r means exactly in OpenBSD. What does Link refer to exactly? It seems that many, if not most man pages do not describe utility output much.

Re: fsck segfault on a big partition, 4.6

2010-01-28 Thread nixlists
On Thu, Jan 28, 2010 at 1:24 AM, Robert info...@die-optimisten.net wrote: nixlists wrote: The idea is to limit memory such that running out of RAM+swap is not possible, or unlikely. You can set the limit on the allowed number of processes as well. I do use ulimit / login.conf for some

Re: rename(2) man page (was: Re: OpenSMTPd actual development and integration)

2010-01-26 Thread nixlists
On Tue, Jan 26, 2010 at 8:27 AM, Kenneth R Westerback kwesterb...@rogers.com wrote: Exchange, Groupwise, Lotus, various Unix setups. You name it. Day to day, no errors, no hardware going flakey, then anything will work. In 'most' cases you will be suffering huge performance loses for

Re: rename(2) man page (was: Re: OpenSMTPd actual development and integration)

2010-01-26 Thread nixlists
On Tue, Jan 26, 2010 at 11:50 PM, J.C. Roberts list-...@designtools.org wrote: My anonymous friend, you need to accept *PEOPLE* write software. Those little things like experience, skills, and even personality are present in the output of programmers. Of course, but this was about his

Re: rename(2) man page (was: Re: OpenSMTPd actual development and integration)

2010-01-25 Thread nixlists
Just to remind: rename() causes the link named from to be renamed as to. If to exists, it is first removed. Both from and to must be of the same type (that is, both directories or both non-directories), and must reside on the same file system. rename() guarantees that if

Re: rename(2) man page (was: Re: OpenSMTPd actual development and integration)

2010-01-25 Thread nixlists
What are you running? Exchange?? Redundancy is nice, but email back-ups are futile. Backups might save from most, but not all lost messages after a crash. Anyway, before we divert to a some other topic, someone please answer the question for the simplest case - we've already decided that every

Re: rename(2) man page (was: Re: OpenSMTPd actual development and integration)

2010-01-25 Thread nixlists
On Mon, Jan 25, 2010 at 4:12 PM, Marco Peereboom sl...@peereboom.us wrote: You are positively ignorant. No need to regurgitate this all over again. Take your toy mail implementation and enjoy your hair. You are still refusing to give a direct answer to a direct question. How's that not

Re: rename(2) man page (was: Re: OpenSMTPd actual development and integration)

2010-01-25 Thread nixlists
On Mon, Jan 25, 2010 at 5:09 PM, Bret S. Lambert bret.lamb...@gmail.com wrote: On Mon, Jan 25, 2010 at 04:35:48PM -0500, nixlists wrote: On Mon, Jan 25, 2010 at 4:12 PM, Marco Peereboom sl...@peereboom.us wrote: You are positively ignorant. No need to regurgitate this all over again. Take

Re: rename(2) man page (was: Re: OpenSMTPd actual development and integration)

2010-01-25 Thread nixlists
On Mon, Jan 25, 2010 at 8:26 PM, Marco Peereboom sl...@peereboom.us wrote: I gave you the answer several times but I'll humor you and do it one more time. No, you didn't, see below. This thread started here: http://marc.info/?l=openbsd-miscm=126435421227560w=2 After I replied to that message

Re: rename(2) man page (was: Re: OpenSMTPd actual development and integration)

2010-01-25 Thread nixlists
On Mon, Jan 25, 2010 at 9:11 PM, J.C. Roberts list-...@designtools.org wrote: DJB does great work and thinks about his code. Like every great programmer, DJB wants his code to be as correct as possible within the very well known bounding limitations (hardware, compilers, operating systems, file

Re: way to help: laptops and weekly

2010-01-24 Thread nixlists
On Sun, Jan 24, 2010 at 3:15 PM, Ted Unangst ted.unan...@gmail.com wrote: On Sun, Jan 24, 2010 at 3:00 PM, Antoine Jacoutot ajacou...@bsdfrog.org wrote: On Sun, 24 Jan 2010, Ted Unangst wrote: sysutils/anacron Right, but I think this is something base should handle more gracefully. The

Re: rename(2) man page (was: Re: OpenSMTPd actual development and integration)

2010-01-24 Thread nixlists
On Sun, Jan 24, 2010 at 12:22 PM, Jonathan Thornburg jth...@astro.indiana.edu wrote: In message http://marc.info/?l=openbsd-miscm=126356588306613w=1, Marco Peereboom slash () peereboom ! us wrote You can do everything right all day long in software but hardware does what it does and claiming

Re: rename(2) man page (was: Re: OpenSMTPd actual development and integration)

2010-01-24 Thread nixlists
When configured as documented - no controller write-back cache (maybe with a battery back-up, but batteries fail too), no drive write-back cache, no async mounts, no known buggy stuff. Which hardware??? Could someone at least point out one example of such hardware? I, and, I am sure many

Re: rename(2) man page (was: Re: OpenSMTPd actual development and integration)

2010-01-24 Thread nixlists
On Sun, Jan 24, 2010 at 7:48 PM, Marco Peereboom sl...@peereboom.us wrote: On Sun, Jan 24, 2010 at 07:22:08PM -0500, nixlists wrote: On Sun, Jan 24, 2010 at 12:22 PM, Jonathan Thornburg jth...@astro.indiana.edu wrote: In message http://marc.info/?l=openbsd-miscm=126356588306613w=1, Marco

Re: rename(2) man page (was: Re: OpenSMTPd actual development and integration)

2010-01-24 Thread nixlists
On Sun, Jan 24, 2010 at 9:18 PM, Marco Peereboom sl...@peereboom.us wrote: I specifically wrote above When configured as documented. No admin will run a mail server with write-back cache enabled on either controller or drives (well, maybe with a battery back-up, but I'll say again that

Re: rename(2) man page (was: Re: OpenSMTPd actual development and integration)

2010-01-24 Thread nixlists
On Sun, Jan 24, 2010 at 10:50 PM, Nick Holland n...@holland-consulting.net wrote: nixlists wrote: On Sun, Jan 24, 2010 at 9:18 PM, Marco Peereboom sl...@peereboom.us wrote: I specifically wrote above When configured as documented. No admin will run a mail server with write-back cache enabled

Re: Books on reverse engineering?

2010-01-22 Thread nixlists
On Fri, Jan 22, 2010 at 2:55 PM, James Hozier guitars...@yahoo.com wrote: I don't understand what a solution can be. If they're never going to release supporting documentation anyway, does it really make a difference for them? I don't know if I am buying into a troll or a flamebait, but what

/usr/bin/ftp bug?

2010-01-19 Thread nixlists
Hi. File doesn't exist locally, getting it: ftp -C -o somefile http://someserver/somefile -blah blah and progress bar- Got it, retrieve it again: ftp -C -o somefile http://someserver/somefile -blah blah and progress bar- ftp: File is already fully retrieved. Now over proxy: export

Re: OpenSMTPd actual development and integration

2010-01-15 Thread nixlists
On Fri, Jan 15, 2010 at 2:30 AM, Tomas Bodzar tomas.bod...@gmail.com wrote: qmail tries to be very careful that a message is on the disk. Does OpenSMTPD do this? The answer could be yes or no. How is that nonsensical? Thanks! Only very big fool can write e-mail SW which don't try to

Re: OpenSMTPd actual development and integration

2010-01-15 Thread nixlists
On Fri, Jan 15, 2010 at 3:36 AM, Philip Guenther guent...@gmail.com wrote: On Thu, Jan 14, 2010 at 9:05 PM, nixlists nixmli...@gmail.com wrote: On Thu, Jan 14, 2010 at 07:55:37PM -0500, nixlists wrote: ... More like does OpenBSD have a similar reliability feature that qmail does - pertaining

Re: OpenSMTPd actual development and integration

2010-01-15 Thread nixlists
On Fri, Jan 15, 2010 at 3:55 AM, Gilles Chehade gil...@openbsd.org wrote: qmail's queue, except for bounce message contents, is crashproof on the BSD FFS and most of its variants. smtp ensures reliability by working on a temporary queue during writes, then commiting messages (all of them,

Re: OpenSMTPd actual development and integration

2010-01-15 Thread nixlists
On Fri, Jan 15, 2010 at 9:22 AM, Marco Peereboom sl...@peereboom.us wrote: smtp ensures reliability by working on a temporary queue during writes, then commiting messages (all of them, including bounces) to the real queue using an atomic rename. after a successful rename, smtpd tells the

Re: pf tables: memory

2010-01-15 Thread nixlists
2010/1/15 Vadim Zhukov persg...@gmail.com: On 14 January 2010 G. 00:44:06 nixlists wrote: Hi. How do I know how much memory I need to have on a machine to load a table from a file (I don't have much RAM)? Look at the /usr/src/sys/net/pfvar.h, you'll see definitions of all structures used

Re: Yerevan, Aremenia and OpenBSD Users

2010-01-14 Thread nixlists
On Thu, Jan 14, 2010 at 7:36 AM, Inna Kholodova inna.kholod...@gmail.com wrote: Hi, Mark! I'm from Armenia :) And we are using OpenBSD on our production servers for a very long time. Are you working for the FSB?

Re: OpenSMTPd actual development and integration

2010-01-14 Thread nixlists
Does it have the same reliability features as qmail on an FS without softupdates? What about with softupdates? http://cr.yp.to/qmail/faq/reliability.html

Re: OpenSMTPd actual development and integration

2010-01-14 Thread nixlists
On Thu, Jan 14, 2010 at 4:26 PM, Denis Doroshenko denis.doroshe...@gmail.com wrote: On 1/14/10, nixlists nixmli...@gmail.com wrote: Does it have the same reliability features as qmail on an FS without softupdates? What about with softupdates? http://cr.yp.to/qmail/faq/reliability.html

Re: OpenSMTPd actual development and integration

2010-01-14 Thread nixlists
On Thu, Jan 14, 2010 at 6:24 PM, Ben Calvert b...@flyingwalrus.net wrote: On Jan 14, 2010, at 3:11 PM, Marco Peereboom wrote: On Thu, Jan 14, 2010 at 05:09:03PM -0500, nixlists wrote: Sorry, forget I mentioned softupdates. Does it do what qmail does? Reliaibility-wise? qmail's queue

Re: OpenSMTPd actual development and integration

2010-01-14 Thread nixlists
On Thu, Jan 14, 2010 at 5:34 PM, Ted Unangst ted.unan...@gmail.com wrote: On Thu, Jan 14, 2010 at 5:09 PM, nixlists nixmli...@gmail.com wrote: Sorry, forget I mentioned softupdates. Does it do what qmail does? Reliaibility-wise? qmail's queue, except for bounce message contents, is crashproof

Re: OpenSMTPd actual development and integration

2010-01-14 Thread nixlists
On Thu, Jan 14, 2010 at 9:16 PM, Marco Peereboom sl...@peereboom.us wrote: On Thu, Jan 14, 2010 at 07:55:37PM -0500, nixlists wrote: On Thu, Jan 14, 2010 at 5:34 PM, Ted Unangst ted.unan...@gmail.com wrote: On Thu, Jan 14, 2010 at 5:09 PM, nixlists nixmli...@gmail.com wrote: Sorry, forget I

Re: Yerevan, Aremenia and OpenBSD Users

2010-01-13 Thread nixlists
On Tue, Jan 12, 2010 at 11:14 AM, Mark Lumsden m...@cyodesigns.com wrote: Hi, Are there any OpenBSD users in Yerevan, Armenia? For work reasons, I'm moving there in a few days for probably the best part of six months. I know absolutely no-one there so it would be good to go for a beer with

pf tables: memory

2010-01-13 Thread nixlists
Hi. How do I know how much memory I need to have on a machine to load a table from a file (I don't have much RAM)? How much memory does a single ip address take in the table? Do simple 'block quick' rule anchors use more or less memory than tables (I presume more)? I couldn't find this in the

pf: reassemble tcp

2010-01-13 Thread nixlists
Hi. I have match in all scrub (tcp reassemble no-df random-id max-mss 1440) in my pf.conf (-current) Unless I remove 'tcp reassemble', one of the web sites (it's a Windows/IIS) site cannot communicate with me - it hangs loading a page. Any ideas?

Re: Maximizing File/Network I/O

2010-01-13 Thread nixlists
On Tue, Jan 5, 2010 at 2:32 PM, Henning Brauer lists-open...@bsws.de wrote: I really like the 275 - 420MBit/s change for 4.6 - current with pf. Update: both machines run -current again this time. I think my initial tcpbench results were poor because of running cbq queuing on 4.6. The server has

Re: Maximizing File/Network I/O

2010-01-13 Thread nixlists
On Wed, Jan 13, 2010 at 8:39 PM, Henning Brauer lists-open...@bsws.de wrote: pf enabled on just the tcpbench server: with cbq queuing enabled on the internal interface as follows (for tcpbench only, not for real network use) - no other queues defined on $int_if: altq on $int_if cbq

Re: Maximizing File/Network I/O

2010-01-13 Thread nixlists
On Wed, Jan 13, 2010 at 11:43 PM, Henning Brauer lists-open...@bsws.de wrote: * nixlists nixmli...@gmail.com [2010-01-14 03:21]: test results on old P4 are unfortunately pretty much pointless. Why? cpu0: Intel(R) Pentium(R) 4 CPU 2.53GHz (GenuineIntel 686-class) 2.52 GHz Isn't 2.52GHz

Re: Maximizing File/Network I/O

2010-01-10 Thread nixlists
On Fri, Jan 8, 2010 at 10:13 PM, Henning Brauer lists-open...@bsws.de wrote: * nixlists nixmli...@gmail.com [2010-01-06 09:33]: On Wed, Jan 6, 2010 at 2:31 PM, Henning Brauer lists-open...@bsws.de wrote: I really like the 275 - 420MBit/s change for 4.6 - current with pf. Disabling pf gives

Re: Which laptops do the developers use?

2010-01-10 Thread nixlists
On Sat, Jan 9, 2010 at 7:40 PM, James Hozier guitars...@yahoo.com wrote: My MacBook Pro's wireless doesn't work, which is a big thing for me...I couldn't get X to work, either. Does MacBook Pro have one of those mini-ePCI cards that can be replaced, or is it soldered on-board?

Re: Which laptops do the developers use?

2010-01-10 Thread nixlists
On Sun, Jan 10, 2010 at 6:12 PM, James Hozier guitars...@yahoo.com wrote: Either way, I'd either have to spend money on a replacement mini-PCI card or a USB wireless card. I'd rather just buy a new laptop; I don't like the hardware scheme anyway (with the EFI partition and all that instead of

Re: Which laptops do the developers use?

2010-01-10 Thread nixlists
On Sun, Jan 10, 2010 at 8:28 PM, Henning Brauer lists-open...@bsws.de wrote: * nixlists nixmli...@gmail.com [2010-01-11 02:20]: If I'd want to buy a laptop, I'd want nothing else than the recent MacBook or MacBook Pro stockholm syndrome Hostages don't shop around for captors. Nice try

Re: CUPS alternative

2010-01-07 Thread nixlists
On Thu, Jan 7, 2010 at 7:23 AM, open...@pckswarms.ch wrote: Windows XP, vista, and 7 happily will print to a lpd printer. In the windows world this is called a port, and, lpd is one of the options. It's 12 pages of idiot blather, but, you can see the XP setup (or maybe 2000 setup) here:

Re: Which laptops do the developers use?

2010-01-07 Thread nixlists
On Thu, Jan 7, 2010 at 12:57 PM, Marco Peereboom sl...@peereboom.us wrote: It was removed because it was out of date and didn't contain anything really useful. Laptops basically work just fine with OpenBSD minus some moody ones. MacBook? MacBook Air? PowerBook? Supported at all?

Re: Which laptops do the developers use?

2010-01-07 Thread nixlists
On Thu, Jan 7, 2010 at 4:42 PM, Matthias Kilian k...@outback.escape.de wrote: MacBook? MacBook Air? PowerBook? Supported at all? PowerBook? Sure. But I don't see how this is related to i386-laptop.html. Oops. Meant MacBook Pro. Sorry.

Re: Maximizing File/Network I/O

2010-01-06 Thread nixlists
On Wed, Jan 6, 2010 at 2:31 PM, Henning Brauer lists-open...@bsws.de wrote: I really like the 275 - 420MBit/s change for 4.6 - current with pf. Disabling pf gives a couple of MB/s more.

Re: Maximizing File/Network I/O

2010-01-05 Thread nixlists
On Tue, Jan 5, 2010 at 1:45 AM, Bret S. Lambert blamb...@openbsd.org wrote: Start with mount_nfs options, specifically -r and -w; I assume that you would have mentioned tweaking those if you had already done so. Setting -r and -w to 16384, and jumbo frames to 9000 yields just a couple of MB/s

pf: match vs. pass - nat and rdr

2010-01-05 Thread nixlists
Hi. I think I mentioned that I upgraded one of the machines running pf from 4.6 to -current. Noticed that pf rule order behavior has changed, so I had to move rules around and I of course had to change nat and rdr rules since the syntax is new. I've read the man page, but not clear on

Re: pf: match vs. pass - nat and rdr

2010-01-05 Thread nixlists
On Tue, Jan 5, 2010 at 8:34 PM, Robert rob...@openbsd.pap.st wrote: nat and rdr are now declared with match rules. But 'pass' still works: pass out on em0 inet from 192.168.1.0/24 to any flags S/SA keep state nat-to (em0) round-robin An issue today was the box totally froze after I

sili port multiplier support

2010-01-04 Thread nixlists
Hi. I have: sili0 at pci4 dev 0 function 0 CMD Technology SiI3132 SATA rev 0x01: apic 3 int 8 (irq 11) scsibus0 at sili0: 2 targets The manual page does not mention it, but I guess the driver does not support port multipliers? It only detects one drive in my eSATA enclosure. There are two

softraid rebuild

2010-01-04 Thread nixlists
Hi. My softraid mirror went into degraded mode (on -current). How to rebuild? I am trying to follow the bioctl manual page, but I don't seem to understand the command to throw at it - syntax errors. Is it supported yet? Thanks.

Maximizing File/Network I/O

2010-01-04 Thread nixlists
Hi. I have two machines one running 4.6, the other running a recent snapshot of current. tcpbench reports maximum throughput of 275 Mbit - that's around 34 MB/s between them over a gig-E link. What should one expect with an el-cheapo gig-e switch and 'em' Intel NIC and a msk NIC? Is that

CUPS alternative

2010-01-04 Thread nixlists
Hi. I need to print from Windows machines to an OpenBSD box using IPP. Is CUPS the only software that will let me do this? CUPS is huge, buggy and full of security holes. Wants to only run as root as well. Thanks.

pf: state reuse

2010-01-04 Thread nixlists
Hi. I am logging 'misc' messages from pf, and seeing a lot of state reuses. What does it mean, and do I need to fix anything? Many, many messages like pf: state reuse TCP out wire: (0) 2ipaddress:port_goes_here ip_address:port_goes_here stack: (0) ip_address:port_goes_here

newfs for large files

2010-01-04 Thread nixlists
Hi. What are the recommended newfs tweaks for an FS that will store mostly large or very large files? Are defaults sufficient for optimum performance, or are they mostly a general case for typical OS small program/text files? Also my guess tweaking with tunefs is useless, since it's a very old

Re: Maximizing File/Network I/O

2010-01-04 Thread nixlists
On Tue, Jan 5, 2010 at 12:40 AM, Aaron Mason simplersolut...@gmail.com wrote: It would be best put this way - if you go for the lowest bidder, in most cases you get what you pay for. Your results aren't too bad considering what's in use. Thanks. Where could I find more info on tuning jumbo

Re: newfs for large files

2010-01-04 Thread nixlists
On Tue, Jan 5, 2010 at 1:14 AM, Otto Moerbeek o...@drijf.net wrote: On Mon, Jan 04, 2010 at 10:28:28PM -0500, nixlists wrote: Hi. What are the recommended newfs tweaks for an FS that will store mostly large or very large files? Are defaults sufficient for optimum performance

Re: ntp log rotation

2010-01-03 Thread nixlists
It takes either a masochist to run original NTPD, or you are being tortured.

Re: Openssl patch breaks Tor

2010-01-02 Thread nixlists
If I upgrade to -current, don't I risk stability and security issues; or are the chances of that are very low as far as this OS goes? Long time ago I did try development versions of NetBSD and FreeBSD because I needed support for hardware that -stable didn't have, and they were quite shaky. Or do

Re: Openssl patch breaks Tor

2009-12-31 Thread nixlists
On 12/31/09, J.C. Roberts list-...@designtools.org wrote: On Wed, 30 Dec 2009 17:56:03 -0500 nixlists nixmli...@gmail.com wrote: On 12/30/09, Tasmanian Devil tasm.de...@googlemail.com wrote: Changes in version 0.2.1.21 - 2009-12-21 Downloaded, installed - same exact problem. Tried -alpha

Recommended mini-PCI wireless cards

2009-12-30 Thread nixlists
Hi. What's recommended as far as recent mini PCI wireless cards go - compatibility and performance-wise? I'd like to upgrade my laptop from a /g to an /n card. Which n cards do you use and find fast/having good reception? Thanks.

Re: Openssl patch breaks Tor

2009-12-30 Thread nixlists
On 12/30/09, Tasmanian Devil tasm.de...@googlemail.com wrote: Changes in version 0.2.1.21 - 2009-12-21 Downloaded, installed - same exact problem. Tried -alpha as well. Same problem. I assumed alpha worked... You're right! It seems I did give you bad advice. I'm sorry about that! I tried

Openssl patch breaks Tor

2009-12-29 Thread nixlists
Hi. The OpenBSD 4.6 errata OpenSSL TLS renegotiation patch ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.6/common/004_openssl.patch breaks stable release of Tor as described here (exactly the same issue on FreeBSD): http://archives.seul.org/tor/relays/Dec-2009/msg00014.html Tor is not vulnerable

Re: Openssl patch breaks Tor

2009-12-29 Thread nixlists
On 12/29/09, Tasmanian Devil tasm.de...@googlemail.com wrote: It is fixed in Tor's stable release already: http://archives.seul.org/tor/announce/Dec-2009/msg0.html Changes in version 0.2.1.21 - 2009-12-21 Downloaded, installed - same exact problem. Tried -alpha as well. Same problem. I

Re: Web Browsers

2009-12-23 Thread nixlists
On 12/20/09, Robert Bronsdon reash...@gmail.com wrote: Google are clearly clever enough to know that upsetting the 'tin-foiled' geeks, by 'spying' on them would be enough to disrupt its browser. Especially given its lowly market share, just a little bad press would stop this thing ever taking

Web Browsers

2009-12-18 Thread nixlists
Hi. People on this list are security-conscious. I wonder what browsers they use? What browsers do you consider more secure than others? Granted, they're all full of all kinds of holes, but what do you do to tighten their security? Thanks.

Re: Web Browsers

2009-12-18 Thread nixlists
On Fri, Dec 18, 2009 at 9:07 PM, Marco Peereboom sl...@peereboom.us wrote: firefox + adsuck What is your opnion on Chrome, OpenBSD gurus? Okay we all know about it's privacy and identity leakage concerns. It's designed by Google with this built-in - they want to know everything about you and

Re: softraid not building on boot

2009-12-10 Thread nixlists
On Thu, Dec 10, 2009 at 10:12 AM, Marco Peereboom sl...@peereboom.us wrote: So softraid can't detect if the data is written differently to the drives? In what sort of cases would one expect the mirror to become corrupt? Kernel crash? Hardware crash? Does softraid detect this? What failures

Re: SMP

2009-12-10 Thread nixlists
On Wed, Dec 9, 2009 at 12:03 PM, Daniel Gracia Garallar danie...@electronicagracia.com wrote: It is true, and AFAIK, todays it's a topper nice task... almost 20. Regards, Dani Donald Allen escribis: IMHO I hope OpenBSD doesn't use locks at all in the future taking FreeBSD's lesson, but

Re: softraid not building on boot

2009-12-10 Thread nixlists
On Thu, Dec 10, 2009 at 3:37 PM, Marco Peereboom sl...@peereboom.us wrote: So in what cases does softraid degrade the mirror then, other than pulling the disk out? When an I/O fails. How is hardware mirror raid different? It isn't. Thanks. Does this mean there's little advantage of

Re: softraid not building on boot

2009-12-10 Thread nixlists
On Thu, Dec 10, 2009 at 6:00 PM, Marco Peereboom sl...@peereboom.us wrote: Does this mean there's little advantage of hardware mirror raid over software? So software mirror raid increases chances of data corruption while decreasing the chances of downtime. True for hardware as well? There are

Re: softraid not building on boot

2009-12-10 Thread nixlists
On Thu, Dec 10, 2009 at 6:41 PM, Marco Peereboom sl...@peereboom.us wrote: probably a crappy card or disks. 3ware Escalade 8006-2LP :(. I know - not well supported because 3ware are the M$ of RAID.

Re: Used of dd for mirroring of quick disk replacement across servers, and second question for bigger drives?

2009-12-10 Thread nixlists
On Thu, Dec 10, 2009 at 7:54 PM, Daniel Ouellet dan...@presscom.net wrote: Hi, I am pretty sure this is not possible at all, but again, may be something else is available that I haven't found/think yet. Two questions I have. 1. use of dd across servers.

softraid not building on boot

2009-12-09 Thread nixlists nixlists
Hi. My 'softraid' mirror is not being detected and assembled at the boot time. I must run 'bioctl' to assemble it after a reboot. This started happening after I removed another softraid mirror from the box (physically - the card and the drives). Do I have to rebuild from scratch to make it detect

Re: softraid not building on boot

2009-12-09 Thread nixlists
is to have all pieces in good shape. A dmesg might help because a disk that wasn't auto assembled will complain (unless it was deleted). On Wed, Dec 09, 2009 at 01:14:53AM -0800, nixlists nixlists wrote: Hi. My 'softraid' mirror is not being detected and assembled at the boot time. I must run

Re: softraid not building on boot

2009-12-09 Thread nixlists
On Wed, Dec 9, 2009 at 4:30 PM, Marco Peereboom sl...@peereboom.us wrote: jsing is working on a add auto assemble flag back button. For now you are stuck with bioctl -c until that is done. 'softraid0 at root' dmesg shows that softraid is not complaining at all, just the standard 'softraid0

Re: softraid not building on boot

2009-12-09 Thread nixlists
Also if I am paranoid about mirror data being exactly the same on the two halves (yes, I understand softraid should guarantee it, but still...), how can I verify it? Or this functionality currently nonexistent? Or am I asking a stupid question because softraid is guaranteed to notice these things

Re: SMP

2009-12-09 Thread nixlists
On Wed, Dec 9, 2009 at 6:19 PM, Brad Tilley b...@16systems.com wrote: On Wed, Dec 9, 2009 at 4:56 PM, Daniel Ouellet dan...@presscom.net wrote: So, what's heavy for you may be just simple routine for others and no, I do not miss the fine lock either yet anyway. Would be nice, but really, I

Re: SMP

2009-12-09 Thread nixlists
On Wed, Dec 9, 2009 at 6:46 PM, Theo de Raadt dera...@cvs.openbsd.org wrote: Soo... Your performance requirements may met by OpenBSD despite it's current poor SMP support - other OSes will scale on SMP. Trade-offs, trade-offs... It's a psychological issue. We have all this multicore hardware

  1   2   >