Re: pf scrub error on upgrade to snapshot-1

2009-06-03 Thread James Records
the new "match" keyword is what your looking for:

http://www.openbsd.org/faq/current.html#20090406

J

On Wed, Jun 3, 2009 at 10:36 PM, Duncan Patton a Campbell <
campb...@neotext.ca> wrote:

> Howdy List?
>
> I just upgraded to the snapshot-1 because the current, June 3, goes into
> an error on encountering a scsi raid.  So I dropped back to the May 31
> and now pf doesn't like the scrub syntax..
>
> pfctl -f pf.conf
> pf.conf:63: syntax error
> pfctl: Syntax error in config file: pf rules not loaded
>
> on
>
> scrub in all
> or
> scrub in on ext_if_vr0 all
>
> as line 63.  If commented out, everything seems (so far) to work as before.
>
> Following is the dmesg for this machine.
>
> Thanks,
>
> Dhu
>
>
> OpenBSD 4.5-current (GENERIC.MP) #18: Sun May 31 10:35:36 MDT 2009
>dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
> cpu0: Intel(R) Pentium(R) 4 CPU 3.00GHz ("GenuineIntel" 686-class) 3.04 GHz
> cpu0:
> FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,CNXT-ID,CX16,xTPR
> real mem  = 2146988032 (2047MB)
> avail mem = 2067677184 (1971MB)
> mainbus0 at root
> bios0 at mainbus0: AT/286+ BIOS, date 01/04/06, BIOS32 rev. 0 @ 0xfb180,
> SMBIOS rev. 2.3 @ 0xf0100 (39 entries)
> bios0: vendor Award Software International, Inc. version "F10" date
> 01/04/2006
> bios0: Gigabyte Technology Co., Ltd. 8I945P-G
> acpi0 at bios0: rev 0
> acpi0: tables DSDT FACP MCFG APIC
> acpi0: wakeup devices PEX0(S5) PEX1(S5) PEX2(S5) PEX3(S5) PEX4(S5) PEX5(S5)
> HUB0(S5) USB0(S1) USB1(S1) USB2(S1) USB3(S1) USBE(S1) AC97(S5) MC97(S5)
> AZAL(S5) PCI0(S5)
> acpitimer0 at acpi0: 3579545 Hz, 24 bits
> acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
> cpu0 at mainbus0: apid 0 (boot processor)
> cpu0: apic clock running at 200MHz
> cpu1 at mainbus0: apid 1 (application processor)
> cpu1: Intel(R) Pentium(R) 4 CPU 3.00GHz ("GenuineIntel" 686-class) 3.02 GHz
> cpu1:
> FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,CNXT-ID,CX16,xTPR
> ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
> ioapic0: misconfigured as apic 0, remapped to apid 2
> acpiprt0 at acpi0: bus 0 (PCI0)
> acpiprt1 at acpi0: bus 1 (PEX0)
> acpiprt2 at acpi0: bus -1 (PEX1)
> acpiprt3 at acpi0: bus 3 (PEX2)
> acpiprt4 at acpi0: bus -1 (PEX3)
> acpiprt5 at acpi0: bus -1 (PEX4)
> acpiprt6 at acpi0: bus -1 (PEX5)
> acpiprt7 at acpi0: bus 4 (HUB0)
> acpicpu0 at acpi0
> acpicpu1 at acpi0
> acpibtn0 at acpi0: PWRB
> bios0: ROM list: 0xc/0xd000 0xd/0x5800
> cpu0: Enhanced SpeedStep disabled by BIOS
> pci0 at mainbus0 bus 0: configuration mode 1 (bios)
> pchb0 at pci0 dev 0 function 0 "Intel 82945G Host" rev 0x81
> azalia0 at pci0 dev 27 function 0 "Intel 82801GB HD Audio" rev 0x01: apic 2
> int 16 (irq 7)
> azalia0: RIRB time out
> azalia0: codecs: Realtek ALC882
> audio0 at azalia0
> ppb0 at pci0 dev 28 function 0 "Intel 82801GB PCIE" rev 0x01: apic 2 int 16
> (irq 7)
> pci1 at ppb0 bus 1
> ppb1 at pci1 dev 0 function 0 vendor "PLX", unknown product 0x8111 rev 0x21
> pci2 at ppb1 bus 2
> ohci0 at pci2 dev 0 function 0 "NEC USB" rev 0x43: apic 2 int 16 (irq 7),
> version 1.0
> ohci1 at pci2 dev 0 function 1 "NEC USB" rev 0x43: apic 2 int 17 (irq 4),
> version 1.0
> ehci0 at pci2 dev 0 function 2 "NEC USB" rev 0x04: apic 2 int 18 (irq 5)
> usb0 at ehci0: USB revision 2.0
> uhub0 at usb0 "NEC EHCI root hub" rev 2.00/1.00 addr 1
> usb1 at ohci0: USB revision 1.0
> uhub1 at usb1 "NEC OHCI root hub" rev 1.00/1.00 addr 1
> usb2 at ohci1: USB revision 1.0
> uhub2 at usb2 "NEC OHCI root hub" rev 1.00/1.00 addr 1
> ppb2 at pci0 dev 28 function 2 "Intel 82801GB PCIE" rev 0x01: apic 2 int 18
> (irq 5)
> pci3 at ppb2 bus 3
> bge0 at pci3 dev 0 function 0 "Broadcom BCM5789" rev 0x11, BCM5750 B1
> (0x4101): apic 2 int 18 (irq 5), address 00:14:85:15:50:b5
> brgphy0 at bge0 phy 1: BCM5750 10/100/1000baseT PHY, rev. 0
> uhci0 at pci0 dev 29 function 0 "Intel 82801GB USB" rev 0x01: apic 2 int 23
> (irq 3)
> uhci1 at pci0 dev 29 function 1 "Intel 82801GB USB" rev 0x01: apic 2 int 19
> (irq 10)
> uhci2 at pci0 dev 29 function 2 "Intel 82801GB USB" rev 0x01: apic 2 int 18
> (irq 5)
> uhci3 at pci0 dev 29 function 3 "Intel 82801GB USB" rev 0x01: apic 2 int 16
> (irq 7)
> ehci1 at pci0 dev 29 function 7 "Intel 82801GB USB" rev 0x01: apic 2 int 23
> (irq 3)
> usb3 at ehci1: USB revision 2.0
> uhub3 at usb3 "Intel EHCI root hub" rev 2.00/1.00 addr 1
> ppb3 at pci0 dev 30 function 0 "Intel 82801BA Hub-to-PCI" rev 0xe1
> pci4 at ppb3 bus 4
> ahc0 at pci4 dev 0 function 0 "Adaptec AHA-2940U2 U2" rev 0x00: apic 2 int
> 20 (irq 11)
> scsibus0 at ahc0: 16 targets, initiator 7
> sd0 at scsibus0 targ 0 lun 0:  SCSI3 0/direct
> fixed
> sd0: 17522MB, 512 bytes/sec, 35885448 sec total
> vr0 at pci4 dev 1 function 0 "VIA VT6105 RhineIII" rev 0x86: apic 2 int 19
> (irq 10), address 00:15:e9:8

pf scrub error on upgrade to snapshot-1

2009-06-03 Thread Duncan Patton a Campbell
Howdy List?

I just upgraded to the snapshot-1 because the current, June 3, goes into
an error on encountering a scsi raid.  So I dropped back to the May 31
and now pf doesn't like the scrub syntax..

pfctl -f pf.conf 
pf.conf:63: syntax error
pfctl: Syntax error in config file: pf rules not loaded

on

scrub in all
or
scrub in on ext_if_vr0 all

as line 63.  If commented out, everything seems (so far) to work as before.

Following is the dmesg for this machine.  

Thanks,

Dhu


OpenBSD 4.5-current (GENERIC.MP) #18: Sun May 31 10:35:36 MDT 2009
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) Pentium(R) 4 CPU 3.00GHz ("GenuineIntel" 686-class) 3.04 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,CNXT-ID,CX16,xTPR
real mem  = 2146988032 (2047MB)
avail mem = 2067677184 (1971MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 01/04/06, BIOS32 rev. 0 @ 0xfb180, SMBIOS 
rev. 2.3 @ 0xf0100 (39 entries)
bios0: vendor Award Software International, Inc. version "F10" date 01/04/2006
bios0: Gigabyte Technology Co., Ltd. 8I945P-G
acpi0 at bios0: rev 0
acpi0: tables DSDT FACP MCFG APIC
acpi0: wakeup devices PEX0(S5) PEX1(S5) PEX2(S5) PEX3(S5) PEX4(S5) PEX5(S5) 
HUB0(S5) USB0(S1) USB1(S1) USB2(S1) USB3(S1) USBE(S1) AC97(S5) MC97(S5) 
AZAL(S5) PCI0(S5)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 200MHz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Pentium(R) 4 CPU 3.00GHz ("GenuineIntel" 686-class) 3.02 GHz
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,CNXT-ID,CX16,xTPR
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
ioapic0: misconfigured as apic 0, remapped to apid 2
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (PEX0)
acpiprt2 at acpi0: bus -1 (PEX1)
acpiprt3 at acpi0: bus 3 (PEX2)
acpiprt4 at acpi0: bus -1 (PEX3)
acpiprt5 at acpi0: bus -1 (PEX4)
acpiprt6 at acpi0: bus -1 (PEX5)
acpiprt7 at acpi0: bus 4 (HUB0)
acpicpu0 at acpi0
acpicpu1 at acpi0
acpibtn0 at acpi0: PWRB
bios0: ROM list: 0xc/0xd000 0xd/0x5800
cpu0: Enhanced SpeedStep disabled by BIOS
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 "Intel 82945G Host" rev 0x81
azalia0 at pci0 dev 27 function 0 "Intel 82801GB HD Audio" rev 0x01: apic 2 int 
16 (irq 7)
azalia0: RIRB time out
azalia0: codecs: Realtek ALC882
audio0 at azalia0
ppb0 at pci0 dev 28 function 0 "Intel 82801GB PCIE" rev 0x01: apic 2 int 16 
(irq 7)
pci1 at ppb0 bus 1
ppb1 at pci1 dev 0 function 0 vendor "PLX", unknown product 0x8111 rev 0x21
pci2 at ppb1 bus 2
ohci0 at pci2 dev 0 function 0 "NEC USB" rev 0x43: apic 2 int 16 (irq 7), 
version 1.0
ohci1 at pci2 dev 0 function 1 "NEC USB" rev 0x43: apic 2 int 17 (irq 4), 
version 1.0
ehci0 at pci2 dev 0 function 2 "NEC USB" rev 0x04: apic 2 int 18 (irq 5)
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "NEC EHCI root hub" rev 2.00/1.00 addr 1
usb1 at ohci0: USB revision 1.0
uhub1 at usb1 "NEC OHCI root hub" rev 1.00/1.00 addr 1
usb2 at ohci1: USB revision 1.0
uhub2 at usb2 "NEC OHCI root hub" rev 1.00/1.00 addr 1
ppb2 at pci0 dev 28 function 2 "Intel 82801GB PCIE" rev 0x01: apic 2 int 18 
(irq 5)
pci3 at ppb2 bus 3
bge0 at pci3 dev 0 function 0 "Broadcom BCM5789" rev 0x11, BCM5750 B1 (0x4101): 
apic 2 int 18 (irq 5), address 00:14:85:15:50:b5
brgphy0 at bge0 phy 1: BCM5750 10/100/1000baseT PHY, rev. 0
uhci0 at pci0 dev 29 function 0 "Intel 82801GB USB" rev 0x01: apic 2 int 23 
(irq 3)
uhci1 at pci0 dev 29 function 1 "Intel 82801GB USB" rev 0x01: apic 2 int 19 
(irq 10)
uhci2 at pci0 dev 29 function 2 "Intel 82801GB USB" rev 0x01: apic 2 int 18 
(irq 5)
uhci3 at pci0 dev 29 function 3 "Intel 82801GB USB" rev 0x01: apic 2 int 16 
(irq 7)
ehci1 at pci0 dev 29 function 7 "Intel 82801GB USB" rev 0x01: apic 2 int 23 
(irq 3)
usb3 at ehci1: USB revision 2.0
uhub3 at usb3 "Intel EHCI root hub" rev 2.00/1.00 addr 1
ppb3 at pci0 dev 30 function 0 "Intel 82801BA Hub-to-PCI" rev 0xe1
pci4 at ppb3 bus 4
ahc0 at pci4 dev 0 function 0 "Adaptec AHA-2940U2 U2" rev 0x00: apic 2 int 20 
(irq 11)
scsibus0 at ahc0: 16 targets, initiator 7
sd0 at scsibus0 targ 0 lun 0:  SCSI3 0/direct fixed
sd0: 17522MB, 512 bytes/sec, 35885448 sec total
vr0 at pci4 dev 1 function 0 "VIA VT6105 RhineIII" rev 0x86: apic 2 int 19 (irq 
10), address 00:15:e9:87:4a:38
ukphy0 at vr0 phy 1: Generic IEEE 802.3u media interface, rev. 4: OUI 0x004063, 
model 0x0034
vga1 at pci4 dev 2 function 0 "ATI Radeon 9200 PRO" rev 0x01
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
radeondrm0 at vga1: apic 2 int 18 (irq 5)
drm0 at radeondrm0
"ATI Radeon 9200 PRO Sec" rev 0x01 at pci4 dev 2 function 

Re: PF performance problem

2009-06-03 Thread patrick keshishian
On Wed, Jun 3, 2009 at 3:50 AM, Richard Toohey
 wrote:
> On 3/06/2009, at 10:02 PM, BARDOU Pierre wrote:
>
>> Hello,
>>
>> I have performance issues on a OpenBSD 4.4 firewall.
>> CPU load is OK (always below 50%), but system load is always between 1 and
>> 1.5, it may go up to 2 sometimes.
>>
> [cut]
>
> And what is the actual *problem*?
>
> What is pf failing to do?
>
> Or are you just worried about the numbers? B Search the archives for "high
> load" ...

just for the record, i have seen a server where its typical load
floats around 0.10 or so, but then something will happen and the
plateau will get bumped to 1.10 and remain there. this was an 4.5
system.

I have not identified what "event" caused this. I've seen similar
issue with a couple of linux boxes at work where the load avg plateau
will keep rising: it'll hover around ~3, then say ~6 then ~13. i don't
think the issues are related, but could be caused by similar bugs in
kernel.

All systems continue to be responsive and it only seems that the
reported load avg value is just bumped by a base value. It is
definitely odd.

--patrick


> http://marc.info/?l=openbsd-misc&m=122607853731136&w=3



DHCP proxy or packet rewriting

2009-06-03 Thread Rob Campbell
Hello,

I am somewhat new to OpenBSD, but have been using various *nix systems
for many years.  I recently wanted to use OpenBSD for a DHCP server with
static IP assignments based on a MAC address.  The problem is the MAC I
want to use for the static assignment is in the ethernet headers, not
the MAC which is sent as part of the DHCP protocol.  This is because an
end-user device is sending it's MAC address in the DHCP packet, but I
want the assignment to use the MAC from my equipment which forwards the
packet.  The best option would be if my equipment supported something
like DHCP option 82, or another way to modify the packet, but that is
not available.

I can think of two possible solutions:
1. Modify dhcpd to allow this ability
2. Create a pf rule to rewrite the packet
3. Create a DHCP proxy similar to tftp-proxy

With option 1, I would have to make changes to dhcpd.  That could cause
problems with maintaining a fork or when upgrading.  I have not found a
way to do option 2 from reading about pf.  I believe it would be
possible with iptables in Linux through the mangle rules, but I have
not looked into that yet.  Option 3 seems like the cleanest way, but I
don't know if the proxy would have access to the ethernet headers.

It is also possible that there is another way to do this, which I have
overlooked.  If that is the case, please let me know.  Otherwise, any
input or insights into these options would be greatly appreciated.

-- 
Rob Campbell



Re: List of old forked or frozen code like apache that needs cleanup?

2009-06-03 Thread Matthew Dempsky
On Wed, Jun 3, 2009 at 4:45 PM, Paul M  wrote:
> Gosh, when was vi obsoleted.

Fri Feb 25 19:08:45 2000 UTC, according to
http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/mg/Makefile

:)



Re: List of old forked or frozen code like apache that needs cleanup?

2009-06-03 Thread Paul M

Gosh, when was vi obsoleted.
I must have missed that.


paulm


On 4/06/2009, at 4:33 AM, Mic J wrote:


Discussed many times. :) check archives for many interesting repsonses.

But some of the developers has some work wishlist of what the want to 
do

have done.
Or some used to have.

Otherwise their is lots of ports, that could be interesting, if it
doesnt have to
be base system work (wine might include both).

Also i would like wireshark ;) but thats a contreversial subject.

If its base systems check the netbsd wishlist,
http://www.netbsd.org/contrib/projects.html
And see if some of it applies to OpenBSD.

Personally i'm working on a editor that could supplant the obsolete 
vi/vim/nvi.

editor, I'm modelling it after this notepad thing...


Mic




Re: List of old forked or frozen code like apache that needs cleanup?

2009-06-03 Thread Henning Brauer
* Chris Bennett  [2009-06-04 00:23]:
> I'm very motivated to help out.

make a udp mode in tcpbench
make the tcpbench server side non-forking non-blocking and report
useful summary stats
make tcpbench able to send to a bunch of IPs in a round-robin fashion
(like it does now for multiple connections to one server), and the
server to listen on a bunch of IPs

it is all reasonably simple. I have asked for it before, and now, a
year later, it has not been done. I bet it won't change in a year. But
that pessimism is just lack of information, so prove me wrong.

-- 
Henning Brauer, h...@bsws.de, henn...@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting - Hamburg & Amsterdam



Re: List of old forked or frozen code like apache that needs cleanup?

2009-06-03 Thread Chris Bennett

Couldn't agree more, but for the first steps this does not apply.
It's far easier to start in a project when you have someone telling you what
needs to be done,
the first step is the hardest, if we could ease it, the rest would come
naturally.

I strongly believe the bug tracking should be that list.

Would be great if the devs would open more bugs, even things that aren't
critical, it could be
very small things that they lack the time to do it, at the same time it
would work as an entry
point for that part of the project. Could be things like:
"Clean code at foo.c" : "Take a look at foo.c and remove/clean all the
redundant code"
"Port driver y from xbsd" : "We need support for cards blablablabla"

It's hard to know what you wan't to do when you barely know what needs to be
done and
what could be done.

--
Christiano Farina Haesbaert


  
I'm very motivated to help out. I'm very eager to do something useful 
when I have free time, which comes in big bunches together. I don't need 
something glamorous or sexy.
I know very well that I am like the little kid among the grown-ups, as 
it were!
So it would be very helpful for people like me who aren't programming 
gods to have someone take us by the hand and tell us what we should do 
to help!


I see lots of stuff digging around that I don't understand and I don't 
even know if it's good stuff or just leftover legacy stuff that I should 
ignore.


Chris Bennett

--
A human being should be able to change a diaper, plan an invasion,
butcher a hog, conn a ship, design a building, write a sonnet, balance
accounts, build a wall, set a bone, comfort the dying, take orders,
give orders, cooperate, act alone, solve equations, analyze a new
problem, pitch manure, program a computer, cook a tasty meal, fight
efficiently, die gallantly. Specialization is for insects.
  -- Robert Heinlein



Re: OpenBSD as a storage SAN

2009-06-03 Thread Anathae Townsend
> -Original Message-
> From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf
> Of Friedrich Locke
> Sent: Wednesday, June 03, 2009 6:11 AM
> To: misc@openbsd.org
> Subject: OpenBSD as a storage SAN
> 
> Dear gentleman/madam,
> 
> i would like to use openbsd in order to build a SAN solution, i.e.,
> one that provides block access to the box's disks.
> I want to build a SAN, not a NAS. Is it possible?
> 
> Thank in advance.

Currently, there are no iSCSI implimentations in ports, AFAIK.  Marco is 
working on softraid (which, personally I like to call softscsi) and 
has some initial work done on iSCSI and AoE (ATA over Ethernet), but
neither is very ready for primetime.

Anathae



Re: OpenBSD as a storage SAN

2009-06-03 Thread Lars Nooden
Chris Kuethe wrote:
> the arla afs *client* is,

That's the part I have most contact with.

 http://www.openbsd.org/cgi-bin/man.cgi?query=afsd
 http://www.openbsd.org/cgi-bin/man.cgi?query=afsd.conf

> ... but the afs server (milko) isn't. openafs is in ports.

Thanks.  I stand half-corrected. ;)

http://www.openbsd.org/4.5_packages/i386/openafs-1.4.7p5.tgz-long.html

Regards,
-Lars



Re: arp table timeout / how to update automatically if foreign MAC changes?

2009-06-03 Thread Toni Mueller
Hi,

On Tue, 11.03.2008 at 15:59:24 +0100, smartTERRA NOC  wrote:
> I have found a workaround: heartbeat. Heartbeat uses (like carp on  
> OpenBSD) a virtual MAC address, so there is no problem with the arp  
> cache on the OpenBSD firewall.

how do I do this if the remote machines run OpenBSD, but can't run
CARP?

I tried to ping from the new machine to "distribute" the new MAC/IP
association, but to no avail. The OpenBSD gateway just ignored the
change and only learned the new address when I manually deleted the arp
entry.

TIA!


Kind regards,
--Toni++



Re: OpenBSD as a storage SAN

2009-06-03 Thread Janne Johansson

Lars Nooden wrote:

OpenAFS is part of the base distro.


No.
The base includes arla, an AFS client.



Re: Flapping VPN under load on Soekris

2009-06-03 Thread Stuart Henderson
On 2009-06-03, Lordsporkton  wrote:
> I have a p2 at 400mhz with 128ram that can push 5+ megs of aes256 traffic 
> and I don't notice any problems, and I have no offload card
> I know this isnt embedded but its overall system specs are similar to a 
> soakris

400MHz P2 is a whole different kettle of fish.



Re: OpenBSD as a storage SAN

2009-06-03 Thread Noah Pugsley

iscsi support does not exist yet. Maybe try FreeBSD or OpenSolaris.

Friedrich Locke wrote:

I am planing this:

With iSCSI i would like to implement on OpenBSD server (target) and
various boxes linux, win and openbsd too, i.e., they (the clients)
would be the initiators.

That simple like that.

So, the question is: Does OBSD support iSCSI (both target and initiator)?

I am really in need of that, may some one help me?

Thanks in advance.

On Wed, Jun 3, 2009 at 3:18 PM, ropers  wrote:

2009/6/3 Friedrich Locke :

Dear gentleman/madam,

i would like to use openbsd in order to build a SAN solution, i.e.,
one that provides block access to the box's disks.
I want to build a SAN, not a NAS. Is it possible?

Thank in advance.

I'm no expert, and I've never worked with SANs, but since the defining
characteristic of a SAN is that it makes remote storage devices appear
locally attached to the OS, let me ask:

Do you want remote storage devices appear locally attached to other
OpenBSD servers, or to what kind of server?

Granted, depending on the protocol used/design of your SAN it may not
matter much, as things like SCSI, ATA over Ethernet, etc. ought to be
OS-agnostic, but still I'm curious, and sort of trying to understand
where you're going with this.

Also --and I apologize if this is too trivial-- if I were asked to
implement a SAN, I would first of all try to be specific and see what
protocol would be required, or, if I were able/expected to build a new
SAN from scratch and choose a protocol/decide how to implement it
myself, then I'd try to figure out what makes the short list, and in
this case, if any of those programs/drivers are available for, or can
be ported to OpenBSD. I'd e.g. look at this list:
http://en.wikipedia.org/wiki/Storage_area_network#Network_types
and google for those technologies in the misc archives (haven't done
this, but I'm not the one gunning for a SAN).
So precisely what SAN technologies/software/hardware are you trying to
use with OpenBSD?

For what it's worth, the opposite --accessing an existing SAN from
OpenBSD-- seems to have been discussed in the past:
http://marc.info/?t=12351424634&r=1&w=2

regards,
--ropers




Re: OpenBSD as a storage SAN

2009-06-03 Thread Theo de Raadt
> On Wed, Jun 3, 2009 at 2:02 PM, Lars Nooden  wrote:
> > OpenAFS is part of the base distro.
> 
> no it isn't.
> 
> the arla afs *client* is, but the afs server (milko) isn't. openafs is in 
> ports.

arla != openafs

openafs doesn't stand a chance of getting into the base because it is fake-free.



Re: OpenBSD as a storage SAN

2009-06-03 Thread Artur Grabowski
Lars Nooden  writes:

> OpenAFS is part of the base distro.

Where?

//art



Re: OpenBSD as a storage SAN

2009-06-03 Thread Chris Kuethe
On Wed, Jun 3, 2009 at 2:02 PM, Lars Nooden  wrote:
> OpenAFS is part of the base distro.

no it isn't.

the arla afs *client* is, but the afs server (milko) isn't. openafs is in ports.


-- 
GDB has a 'break' feature; why doesn't it have 'fix' too?



Re: OpenBSD as a storage SAN

2009-06-03 Thread Lars Nooden
OpenAFS is part of the base distro.

Regards
-Lars



Re: OpenBSD as a storage SAN

2009-06-03 Thread Friedrich Locke
I am planing this:

With iSCSI i would like to implement on OpenBSD server (target) and
various boxes linux, win and openbsd too, i.e., they (the clients)
would be the initiators.

That simple like that.

So, the question is: Does OBSD support iSCSI (both target and initiator)?

I am really in need of that, may some one help me?

Thanks in advance.

On Wed, Jun 3, 2009 at 3:18 PM, ropers  wrote:
> 2009/6/3 Friedrich Locke :
>> Dear gentleman/madam,
>>
>> i would like to use openbsd in order to build a SAN solution, i.e.,
>> one that provides block access to the box's disks.
>> I want to build a SAN, not a NAS. Is it possible?
>>
>> Thank in advance.
>
> I'm no expert, and I've never worked with SANs, but since the defining
> characteristic of a SAN is that it makes remote storage devices appear
> locally attached to the OS, let me ask:
>
> Do you want remote storage devices appear locally attached to other
> OpenBSD servers, or to what kind of server?
>
> Granted, depending on the protocol used/design of your SAN it may not
> matter much, as things like SCSI, ATA over Ethernet, etc. ought to be
> OS-agnostic, but still I'm curious, and sort of trying to understand
> where you're going with this.
>
> Also --and I apologize if this is too trivial-- if I were asked to
> implement a SAN, I would first of all try to be specific and see what
> protocol would be required, or, if I were able/expected to build a new
> SAN from scratch and choose a protocol/decide how to implement it
> myself, then I'd try to figure out what makes the short list, and in
> this case, if any of those programs/drivers are available for, or can
> be ported to OpenBSD. I'd e.g. look at this list:
> http://en.wikipedia.org/wiki/Storage_area_network#Network_types
> and google for those technologies in the misc archives (haven't done
> this, but I'm not the one gunning for a SAN).
> So precisely what SAN technologies/software/hardware are you trying to
> use with OpenBSD?
>
> For what it's worth, the opposite --accessing an existing SAN from
> OpenBSD-- seems to have been discussed in the past:
> http://marc.info/?t=12351424634&r=1&w=2
>
> regards,
> --ropers



Re: Agere ET1310 not working

2009-06-03 Thread Stuart Henderson
On 2009-06-03, Renaud Allard  wrote:
> I have just bought a Fabia FX5621 board which has amongst others, two
> Agere ET1310 interfaces. I configured one interface and it negotiated
> correctly with my switch at 1000mbps full duplex. However, I am not able
> to ping the interface from anywhere else and I am not able to ping from
> the interface either. The ARP table seems always empty. I used tcpdump
> to sniff the traffic while pinging and doing some broadcasts and saw
> nothing in the tcpdump output.
> Has someone else noticed this kind of behavior with this chipset?

watch "systat vmstat" then ping -f it from another machine.
what irq is triggering? is it associated with the et(4)?
is it the same for both et? 

> rl0 at pci0 dev 9 function 0 "Realtek 8139" rev 0x10: apic 1 int 16 (irq
> 11), address 00:04:a7:08:9a:c6
> rlphy0 at rl0 phy 0: RTL internal PHY

wow, pretty unusual to see rl(4) on a PCIE board... do those all work ok?



On 2009-06-03, Renaud Allard  wrote:
> Hello,
>
> I have just bought a Fabia FX5621 board which has amongst others, two
> Agere ET1310 interfaces. I configured one interface and it negotiated
> correctly with my switch at 1000mbps full duplex. However, I am not able
> to ping the interface from anywhere else and I am not able to ping from
> the interface either. The ARP table seems always empty. I used tcpdump
> to sniff the traffic while pinging and doing some broadcasts and saw
> nothing in the tcpdump output.
> Has someone else noticed this kind of behavior with this chipset?
>
> here is my dmesg:
> OpenBSD 4.5 (GENERIC) #1749: Sat Feb 28 14:51:18 MST 2009
> dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
> cpu0: VIA Eden Processor 1000MHz ("CentaurHauls" 686-class) 1 GHz
> cpu0:
> FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,CMOV,PAT,CFLUSH,ACPI,MMX,FXSR,SSE,SSE2,TM,SBF,SSE3,EST,TM2,xTPR
> real mem  = 1039757312 (991MB)
> avail mem = 997048320 (950MB)
> mainbus0 at root
> bios0 at mainbus0: AT/286+ BIOS, date 01/16/09, BIOS32 rev. 0 @ 0xf0010,
> SMBIOS rev. 2.5 @ 0xfc390 (47 entries)
> bios0: vendor American Megatrends Inc. version "080014" date 01/16/2009
> acpi at bios0 function 0x0 not configured
> mpbios0 at bios0: Intel MP Specification 1.4
> cpu0 at mainbus0: apid 0 (boot processor)
> cpu0: RNG AES AES-CTR SHA1 SHA256 RSA
> cpu0: apic clock running at 99MHz
> mpbios0: bus 0 is type PCI
> mpbios0: bus 1 is type PCI
> mpbios0: bus 128 is type PCI
> mpbios0: bus 129 is type PCI
> mpbios0: bus 130 is type PCI
> mpbios0: bus 131 is type ISA
> ioapic0 at mainbus0: apid 1 pa 0xfec0, version 3, 24 pins
> pcibios0 at bios0: rev 3.0 @ 0xf/0x1
> pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf5780/336 (19 entries)
> pcibios0: no compatible PCI ICU found: ICU vendor 0x1106 product 0x3287
> pcibios0: Warning, unable to fix up PCI interrupt routing
> pcibios0: PCI bus #130 is the last bus
> bios0: ROM list: 0xc/0xfe00
> cpu0: unknown Enhanced SpeedStep CPU, msr 0x04090a0904000a09
> cpu0: using only highest and lowest power states
> cpu0: Enhanced SpeedStep 1333 MHz (844 mV): speeds: 1333, 533 MHz
> pci0 at mainbus0 bus 0: configuration mode 1 (bios)
> pchb0 at pci0 dev 0 function 0 "VIA CN700 Host" rev 0x00
> viaagp0 at pchb0: v3
> agp0 at viaagp0: aperture at 0xe000, size 0x1000
> pchb1 at pci0 dev 0 function 1 "VIA CN700 Host" rev 0x00
> pchb2 at pci0 dev 0 function 2 "VIA CN700 Host" rev 0x00
> pchb3 at pci0 dev 0 function 3 "VIA PT890 Host" rev 0x00
> pchb4 at pci0 dev 0 function 4 "VIA CN700 Host" rev 0x00
> pchb5 at pci0 dev 0 function 7 "VIA CN700 Host" rev 0x00
> ppb0 at pci0 dev 1 function 0 "VIA VT8377 AGP" rev 0x00
> pci1 at ppb0 bus 1
> vga1 at pci1 dev 0 function 0 "VIA S3 Unichrome PRO IGP" rev 0x01
> wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
> wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
> ral0 at pci0 dev 8 function 0 "Ralink RT2561S" rev 0x00: apic 1 int 16
> (irq 11), address 00:12:0e:61:49:24
> ral0: MAC/BBP RT2561C, RF RT5225
> rl0 at pci0 dev 9 function 0 "Realtek 8139" rev 0x10: apic 1 int 16 (irq
> 11), address 00:04:a7:08:9a:c6
> rlphy0 at rl0 phy 0: RTL internal PHY
> rl1 at pci0 dev 10 function 0 "Realtek 8139" rev 0x10: apic 1 int 17
> (irq 10), address 00:04:a7:08:9a:c5
> rlphy1 at rl1 phy 0: RTL internal PHY
> rl2 at pci0 dev 11 function 0 "Realtek 8139" rev 0x10: apic 1 int 18
> (irq 5), address 00:04:a7:08:9a:c4
> rlphy2 at rl2 phy 0: RTL internal PHY
> rl3 at pci0 dev 12 function 0 "Realtek 8139" rev 0x10: apic 1 int 19
> (irq 3), address 00:04:a7:08:9a:c3
> rlphy3 at rl3 phy 0: RTL internal PHY
> ahci0 at pci0 dev 15 function 0 vendor "VIA", unknown product 0x6287 rev
> 0x20: apic 1 int 21 (irq 10), AHCI 1.0
> scsibus0 at ahci0: 32 targets
> sd0 at scsibus0 targ 0 lun 0:  SCSI3 0/direct fixed
> sd0: 476940MB, 512 bytes/sec, 976773168 sec total
> pciide0 at pci0 dev 15 function 1 "VIA VT82C571 IDE" rev 0x07: DMA,
> channel 0 configured to compatibility, channel 1 configured 

Re: OpenBSD as a storage SAN

2009-06-03 Thread ropers
2009/6/3 Friedrich Locke :
> Dear gentleman/madam,
>
> i would like to use openbsd in order to build a SAN solution, i.e.,
> one that provides block access to the box's disks.
> I want to build a SAN, not a NAS. Is it possible?
>
> Thank in advance.

I'm no expert, and I've never worked with SANs, but since the defining
characteristic of a SAN is that it makes remote storage devices appear
locally attached to the OS, let me ask:

Do you want remote storage devices appear locally attached to other
OpenBSD servers, or to what kind of server?

Granted, depending on the protocol used/design of your SAN it may not
matter much, as things like SCSI, ATA over Ethernet, etc. ought to be
OS-agnostic, but still I'm curious, and sort of trying to understand
where you're going with this.

Also --and I apologize if this is too trivial-- if I were asked to
implement a SAN, I would first of all try to be specific and see what
protocol would be required, or, if I were able/expected to build a new
SAN from scratch and choose a protocol/decide how to implement it
myself, then I'd try to figure out what makes the short list, and in
this case, if any of those programs/drivers are available for, or can
be ported to OpenBSD. I'd e.g. look at this list:
http://en.wikipedia.org/wiki/Storage_area_network#Network_types
and google for those technologies in the misc archives (haven't done
this, but I'm not the one gunning for a SAN).
So precisely what SAN technologies/software/hardware are you trying to
use with OpenBSD?

For what it's worth, the opposite --accessing an existing SAN from
OpenBSD-- seems to have been discussed in the past:
http://marc.info/?t=12351424634&r=1&w=2

regards,
--ropers



Re: OpenBGPD and MRT format dumps read by bgpdump

2009-06-03 Thread Claudio Jeker
On Sat, May 30, 2009 at 11:34:45PM +0200, Claudio Jeker wrote:
> On Tue, May 26, 2009 at 11:24:29AM -0400, Brian Mengel wrote:
> > Greetings,
> > 
> > I've just put together a simple server with the goal of using OpenBGPD
> > to collect MRT format BGP table dumps.  I'm using:
> > 
> > OpenBGPD 4.4
> > OpenBSD 4.5
> > libbgpdump-1.4.99.8 (on a separate Linux server)
> > 
> > bgpdump parses the dumped table from OpenBGPD, and displays individual
> > routes, but the AS path for each route is reported as an error and
> > various unknown attributes are also reported.  The server is peering
> > with a Cisco 7600 series router.  I have tried configuring the server
> > as an IBGP peer, an IBGP peer to a route reflector and as an EBGP peer
> > with the same general results.
> > 
> 
> Your acctually the first mentioning this problem on the list. MRT dumps
> are broken since some time because we dump the aspath in 4-byte format
> instead of 2-byte one. I started fixing this but it is not the most
> important thing on my list (only the 3rd on my bgpd todo list).
> 

Doh. I already fixed it in -current. -current will dump in 2-byte but adds
a ATTR_AS4_PATH for 4-byte pathes. The part that is still open is to
support the new mrt formats.

-- 
:wq Claudio



Re: Flapping VPN under load on Soekris

2009-06-03 Thread Lordsporkton

--
From: "Mikolaj Kucharski" 
Sent: Tuesday, June 02, 2009 5:56 PM
To: 
Cc: 
Subject: Re: Flapping VPN under load on Soekris


Can anyone give me example of embedded system (Soekris-like) which is
known to handle PF traffic + VPN traffic at MBit/s throughput, and
packets per second level, generated by home users browsing web,
skyping, playing games on-line (low latency), at the same time.
*Fanless* and which can run OpenBSD of course.

I hope I'm not too demanding, is there anything like that?

On Tue, Jun 02, 2009 at 11:10:14PM +, Stuart Henderson wrote:

you're probably overloading the CPU. try -current, sis(4) has
MCLGETI now which should mitigate things a bit. still, that's a
lot of load you're putting on a little 486 which will almost
certainly be restricting your throughput.


Thanks Stuart.

--
best regards
q#




How many megs of throughput are you trying to push? and what encryption are 
you using?
I have a p2 at 400mhz with 128ram that can push 5+ megs of aes256 traffic 
and I don't notice any problems, and I have no offload card
I know this isnt embedded but its overall system specs are similar to a 
soakris


If you are purely looking for another system, you might check out alix 
boards

http://www.pcengines.ch/alix.htm

Lawrence



Re: List of old forked or frozen code like apache that needs cleanup?

2009-06-03 Thread Christiano Farina Haesbaert
2009/6/2 Ted Unangst 

> This comes up from time to time and the more I think about it, the
> more I believe that if you don't know what you want to do but somebody
> tells you, you won't be very good at it.  Partially because you lack
> motivation, but also because if the problem you're solving has never
> affected you, then you probably won't understand it.
>
> Anyway, if you still feel like doing something, practically everyday
> someday requests some feature on the mailing list.
>
>
Couldn't agree more, but for the first steps this does not apply.
It's far easier to start in a project when you have someone telling you what
needs to be done,
the first step is the hardest, if we could ease it, the rest would come
naturally.

I strongly believe the bug tracking should be that list.

Would be great if the devs would open more bugs, even things that aren't
critical, it could be
very small things that they lack the time to do it, at the same time it
would work as an entry
point for that part of the project. Could be things like:
"Clean code at foo.c" : "Take a look at foo.c and remove/clean all the
redundant code"
"Port driver y from xbsd" : "We need support for cards blablablabla"

It's hard to know what you wan't to do when you barely know what needs to be
done and
what could be done.

--
Christiano Farina Haesbaert



Re: List of old forked or frozen code like apache that needs cleanup?

2009-06-03 Thread Mic J
Discussed many times. :) check archives for many interesting repsonses.

But some of the developers has some work wishlist of what the want to do
have done.
Or some used to have.

Otherwise their is lots of ports, that could be interesting, if it
doesnt have to
be base system work (wine might include both).

Also i would like wireshark ;) but thats a contreversial subject.

If its base systems check the netbsd wishlist,
http://www.netbsd.org/contrib/projects.html
And see if some of it applies to OpenBSD.

Personally i'm working on a editor that could supplant the obsolete vi/vim/nvi.
editor, I'm modelling it after this notepad thing...


Mic



Re: PF dropping packets that match state

2009-06-03 Thread (private) HKS
On Wed, Jun 3, 2009 at 11:18 AM, (private) HKS wrote:
> Yet another bizarre state problem that will probably turn out to be
> being somehow braindead.
>
> office -> gw1 -> (INTERNET) -> gw2 -> datacenter
>
> My office and datacenter routers talk via IPSEC encrypted gif tunnels.
> Most everything works.
>
> From any host on the office network, I can SSH to the internal
> interfaces on gw2. I cannot, however, SSH to the external interfaces
> (carp or physical). The traffic is routed properly, neatly traverses
> the gif tunnel and is accepted by gw2. The reply takes the same path
> but is blocked by gw1's default block policy.
>
> The state is created on gw1 as CLOSED:SYN_SENT:
> # pfctl -vvss | grep -A 2  | grep -A 2 
> all tcp :8022 <- :50831   CLOSED:SYN_SENT
>   [0 + 1]  [1095549348 + 2]
>   age 00:00:02, expires in 00:01:58, 1:0 pkts, 60:0 bytes, rule 24
>
> But the replies are rejected:
> # tcpdump -eeni pflog0 'host '
> tcpdump: listening on pflog0, link-type PFLOG
> 10:05:30.836901 rule 0/(match) block in on gif0: .8022 >
> .50831: R 0:0(0) ack 1095549349 win 0 (DF)
> 10:05:34.042631 rule 0/(match) block in on gif0: .8022 >
> .50831: R 0:0(0) ack 1 win 0 (DF)
> 10:05:37.243616 rule 0/(match) block in on gif0: .8022 >
> .50831: R 0:0(0) ack 1 win 0 (DF)
> 10:05:43.452693 rule 0/(match) block in on gif0: .8022 >
> .50831: R 0:0(0) ack 1 win 0 (DF)
>
> To address any pf issues, I inserted a "pass quick from  to
> " at the top of my ruleset. Nothing. It works just fine to SSH
> from gw1 to gw2's external interface.
>
> What am I overlooking here?
>
> dmesg of 4.5 machine follows.
>
> -HKS
>
> OpenBSD 4.5 (GENERIC) #1749: Sat Feb 28 14:51:18 MST 2009
>dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
> cpu0: Intel(R) Xeon(TM) CPU 2.80GHz ("GenuineIntel" 686-class) 2.80 GHz
> cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR
> real mem  = 2146795520 (2047MB)
> avail mem = 2067582976 (1971MB)
> mainbus0 at root
> bios0 at mainbus0: AT/286+ BIOS, date 04/25/08, BIOS32 rev. 0 @
> 0xffe90, SMBIOS rev. 2.3 @ 0xf9920 (87 entries)
> bios0: vendor Dell Computer Corporation version "A07" date 04/25/2008
> bios0: Dell Computer Corporation PowerEdge 2850
> acpi0 at bios0: rev 0
> acpi0: tables DSDT FACP APIC SPCR HPET MCFG
> acpi0: wakeup devices PCI0(S5) PALO(S5) PBLO(S5) VPR0(S5) PBHI(S5)
> VPR1(S5) PICH(S5)
> acpitimer0 at acpi0: 3579545 Hz, 24 bits
> acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
> cpu0 at mainbus0: apid 0 (boot processor)
> cpu0: apic clock running at 199MHz
> cpu at mainbus0: not configured
> ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
> ioapic0: misconfigured as apic 0, remapped to apid 2
> ioapic1 at mainbus0: apid 3 pa 0xfec8, version 20, 24 pins
> ioapic1: misconfigured as apic 0, remapped to apid 3
> ioapic2 at mainbus0: apid 4 pa 0xfec83000, version 20, 24 pins
> ioapic2: misconfigured as apic 0, remapped to apid 4
> ioapic3 at mainbus0: apid 5 pa 0xfec84000, version 20, 24 pins
> ioapic3: misconfigured as apic 0, remapped to apid 5
> acpihpet0 at acpi0: 14318179 Hz
> acpiprt0 at acpi0: bus 0 (PCI0)
> acpiprt1 at acpi0: bus 1 (PALO)
> acpiprt2 at acpi0: bus 2 (DOBA)
> acpiprt3 at acpi0: bus 3 (DOBB)
> acpiprt4 at acpi0: bus 4 (PBLO)
> acpiprt5 at acpi0: bus 5 (PBHI)
> acpiprt6 at acpi0: bus 6 (PXB1)
> acpiprt7 at acpi0: bus 7 (PXB2)
> acpiprt8 at acpi0: bus 8 (VPR1)
> acpiprt9 at acpi0: bus 9 (PXC1)
> acpiprt10 at acpi0: bus 10 (PXC2)
> acpiprt11 at acpi0: bus 11 (PICH)
> acpicpu0 at acpi0
> bios0: ROM list: 0xc/0xb000! 0xcb000/0x1000 0xcc000/0x1000
> 0xcd000/0x2200 0xec000/0x4000!
> ipmi at mainbus0 not configured
> pci0 at mainbus0 bus 0: configuration mode 1 (bios)
> pchb0 at pci0 dev 0 function 0 "Intel E7520 Host" rev 0x09
> ppb0 at pci0 dev 2 function 0 "Intel E7520 PCIE" rev 0x09
> pci1 at ppb0 bus 1
> ppb1 at pci1 dev 0 function 0 "Intel IOP332 PCIE-PCIX" rev 0x06
> pci2 at ppb1 bus 2
> ami0 at pci2 dev 14 function 0 "Dell PERC 4e/Di" rev 0x06: apic 3 int 14
(irq 7)
> ami0: Dell 16d, 32b, FW 513O, BIOS vH418, 256MB RAM
> ami0: 2 channels, 0 FC loops, 1 logical drives
> scsibus0 at ami0: 40 targets
> sd0 at scsibus0 targ 0 lun 0:  SCSI2 0/direct fixed
> sd0: 139900MB, 512 bytes/sec, 286515200 sec total
> scsibus1 at ami0: 16 targets
> safte0 at scsibus1 targ 6 lun 0:  SCSI2
> 3/processor fixed
> scsibus2 at ami0: 16 targets
> ppb2 at pci1 dev 0 function 2 "Intel IOP332 PCIE-PCIX" rev 0x06
> pci3 at ppb2 bus 3
> ppb3 at pci0 dev 4 function 0 "Intel E7520 PCIE" rev 0x09
> pci4 at ppb3 bus 4
> ppb4 at pci0 dev 5 function 0 "Intel E7520 PCIE" rev 0x09
> pci5 at ppb4 bus 5
> ppb5 at pci5 dev 0 function 0 "Intel PCIE-PCIE" rev 0x09
> pci6 at ppb5 bus 6
> em0 at pci6 dev 7 function 0 "Intel PRO/1000MT (82541GI)" rev 0x05:
> apic 4 int 0 (irq 11), address 00:11:43:d9:17:36
> ppb6 at pci5 dev 0 function 2 "Intel PCIE-PCIE" rev 0x09

PF dropping packets that match state

2009-06-03 Thread (private) HKS
Yet another bizarre state problem that will probably turn out to be
being somehow braindead.

office -> gw1 -> (INTERNET) -> gw2 -> datacenter

My office and datacenter routers talk via IPSEC encrypted gif tunnels.
Most everything works.

>From any host on the office network, I can SSH to the internal
interfaces on gw2. I cannot, however, SSH to the external interfaces
(carp or physical). The traffic is routed properly, neatly traverses
the gif tunnel and is accepted by gw2. The reply takes the same path
but is blocked by gw1's default block policy.

The state is created on gw1 as CLOSED:SYN_SENT:
# pfctl -vvss | grep -A 2  | grep -A 2 
all tcp :8022 <- :50831   CLOSED:SYN_SENT
   [0 + 1]  [1095549348 + 2]
   age 00:00:02, expires in 00:01:58, 1:0 pkts, 60:0 bytes, rule 24

But the replies are rejected:
# tcpdump -eeni pflog0 'host '
tcpdump: listening on pflog0, link-type PFLOG
10:05:30.836901 rule 0/(match) block in on gif0: .8022 >
.50831: R 0:0(0) ack 1095549349 win 0 (DF)
10:05:34.042631 rule 0/(match) block in on gif0: .8022 >
.50831: R 0:0(0) ack 1 win 0 (DF)
10:05:37.243616 rule 0/(match) block in on gif0: .8022 >
.50831: R 0:0(0) ack 1 win 0 (DF)
10:05:43.452693 rule 0/(match) block in on gif0: .8022 >
.50831: R 0:0(0) ack 1 win 0 (DF)

To address any pf issues, I inserted a "pass quick from  to
" at the top of my ruleset. Nothing. It works just fine to SSH
from gw1 to gw2's external interface.

What am I overlooking here?

dmesg of 4.5 machine follows.

-HKS

OpenBSD 4.5 (GENERIC) #1749: Sat Feb 28 14:51:18 MST 2009
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Xeon(TM) CPU 2.80GHz ("GenuineIntel" 686-class) 2.80 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR
real mem  = 2146795520 (2047MB)
avail mem = 2067582976 (1971MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 04/25/08, BIOS32 rev. 0 @
0xffe90, SMBIOS rev. 2.3 @ 0xf9920 (87 entries)
bios0: vendor Dell Computer Corporation version "A07" date 04/25/2008
bios0: Dell Computer Corporation PowerEdge 2850
acpi0 at bios0: rev 0
acpi0: tables DSDT FACP APIC SPCR HPET MCFG
acpi0: wakeup devices PCI0(S5) PALO(S5) PBLO(S5) VPR0(S5) PBHI(S5)
VPR1(S5) PICH(S5)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 199MHz
cpu at mainbus0: not configured
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
ioapic0: misconfigured as apic 0, remapped to apid 2
ioapic1 at mainbus0: apid 3 pa 0xfec8, version 20, 24 pins
ioapic1: misconfigured as apic 0, remapped to apid 3
ioapic2 at mainbus0: apid 4 pa 0xfec83000, version 20, 24 pins
ioapic2: misconfigured as apic 0, remapped to apid 4
ioapic3 at mainbus0: apid 5 pa 0xfec84000, version 20, 24 pins
ioapic3: misconfigured as apic 0, remapped to apid 5
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (PALO)
acpiprt2 at acpi0: bus 2 (DOBA)
acpiprt3 at acpi0: bus 3 (DOBB)
acpiprt4 at acpi0: bus 4 (PBLO)
acpiprt5 at acpi0: bus 5 (PBHI)
acpiprt6 at acpi0: bus 6 (PXB1)
acpiprt7 at acpi0: bus 7 (PXB2)
acpiprt8 at acpi0: bus 8 (VPR1)
acpiprt9 at acpi0: bus 9 (PXC1)
acpiprt10 at acpi0: bus 10 (PXC2)
acpiprt11 at acpi0: bus 11 (PICH)
acpicpu0 at acpi0
bios0: ROM list: 0xc/0xb000! 0xcb000/0x1000 0xcc000/0x1000
0xcd000/0x2200 0xec000/0x4000!
ipmi at mainbus0 not configured
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 "Intel E7520 Host" rev 0x09
ppb0 at pci0 dev 2 function 0 "Intel E7520 PCIE" rev 0x09
pci1 at ppb0 bus 1
ppb1 at pci1 dev 0 function 0 "Intel IOP332 PCIE-PCIX" rev 0x06
pci2 at ppb1 bus 2
ami0 at pci2 dev 14 function 0 "Dell PERC 4e/Di" rev 0x06: apic 3 int 14 (irq 7)
ami0: Dell 16d, 32b, FW 513O, BIOS vH418, 256MB RAM
ami0: 2 channels, 0 FC loops, 1 logical drives
scsibus0 at ami0: 40 targets
sd0 at scsibus0 targ 0 lun 0:  SCSI2 0/direct fixed
sd0: 139900MB, 512 bytes/sec, 286515200 sec total
scsibus1 at ami0: 16 targets
safte0 at scsibus1 targ 6 lun 0:  SCSI2
3/processor fixed
scsibus2 at ami0: 16 targets
ppb2 at pci1 dev 0 function 2 "Intel IOP332 PCIE-PCIX" rev 0x06
pci3 at ppb2 bus 3
ppb3 at pci0 dev 4 function 0 "Intel E7520 PCIE" rev 0x09
pci4 at ppb3 bus 4
ppb4 at pci0 dev 5 function 0 "Intel E7520 PCIE" rev 0x09
pci5 at ppb4 bus 5
ppb5 at pci5 dev 0 function 0 "Intel PCIE-PCIE" rev 0x09
pci6 at ppb5 bus 6
em0 at pci6 dev 7 function 0 "Intel PRO/1000MT (82541GI)" rev 0x05:
apic 4 int 0 (irq 11), address 00:11:43:d9:17:36
ppb6 at pci5 dev 0 function 2 "Intel PCIE-PCIE" rev 0x09
pci7 at ppb6 bus 7
em1 at pci7 dev 8 function 0 "Intel PRO/1000MT (82541GI)" rev 0x05:
apic 4 int 1 (irq 3), address 00:11:43:d9:17:37
ppb7 at pci0 dev 6 function 0 "Intel E7520 PCIE" rev 0x09
pci8 at ppb7 bus 8
ppb8 at pci8 dev 0 function 0 "Intel PCIE-PCIE" rev 0x0

Agere ET1310 not working

2009-06-03 Thread Renaud Allard
Hello,

I have just bought a Fabia FX5621 board which has amongst others, two
Agere ET1310 interfaces. I configured one interface and it negotiated
correctly with my switch at 1000mbps full duplex. However, I am not able
to ping the interface from anywhere else and I am not able to ping from
the interface either. The ARP table seems always empty. I used tcpdump
to sniff the traffic while pinging and doing some broadcasts and saw
nothing in the tcpdump output.
Has someone else noticed this kind of behavior with this chipset?

here is my dmesg:
OpenBSD 4.5 (GENERIC) #1749: Sat Feb 28 14:51:18 MST 2009
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: VIA Eden Processor 1000MHz ("CentaurHauls" 686-class) 1 GHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,CMOV,PAT,CFLUSH,ACPI,MMX,FXSR,SSE,SSE2,TM,SBF,SSE3,EST,TM2,xTPR
real mem  = 1039757312 (991MB)
avail mem = 997048320 (950MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 01/16/09, BIOS32 rev. 0 @ 0xf0010,
SMBIOS rev. 2.5 @ 0xfc390 (47 entries)
bios0: vendor American Megatrends Inc. version "080014" date 01/16/2009
acpi at bios0 function 0x0 not configured
mpbios0 at bios0: Intel MP Specification 1.4
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: RNG AES AES-CTR SHA1 SHA256 RSA
cpu0: apic clock running at 99MHz
mpbios0: bus 0 is type PCI
mpbios0: bus 1 is type PCI
mpbios0: bus 128 is type PCI
mpbios0: bus 129 is type PCI
mpbios0: bus 130 is type PCI
mpbios0: bus 131 is type ISA
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 3, 24 pins
pcibios0 at bios0: rev 3.0 @ 0xf/0x1
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf5780/336 (19 entries)
pcibios0: no compatible PCI ICU found: ICU vendor 0x1106 product 0x3287
pcibios0: Warning, unable to fix up PCI interrupt routing
pcibios0: PCI bus #130 is the last bus
bios0: ROM list: 0xc/0xfe00
cpu0: unknown Enhanced SpeedStep CPU, msr 0x04090a0904000a09
cpu0: using only highest and lowest power states
cpu0: Enhanced SpeedStep 1333 MHz (844 mV): speeds: 1333, 533 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 "VIA CN700 Host" rev 0x00
viaagp0 at pchb0: v3
agp0 at viaagp0: aperture at 0xe000, size 0x1000
pchb1 at pci0 dev 0 function 1 "VIA CN700 Host" rev 0x00
pchb2 at pci0 dev 0 function 2 "VIA CN700 Host" rev 0x00
pchb3 at pci0 dev 0 function 3 "VIA PT890 Host" rev 0x00
pchb4 at pci0 dev 0 function 4 "VIA CN700 Host" rev 0x00
pchb5 at pci0 dev 0 function 7 "VIA CN700 Host" rev 0x00
ppb0 at pci0 dev 1 function 0 "VIA VT8377 AGP" rev 0x00
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 "VIA S3 Unichrome PRO IGP" rev 0x01
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
ral0 at pci0 dev 8 function 0 "Ralink RT2561S" rev 0x00: apic 1 int 16
(irq 11), address 00:12:0e:61:49:24
ral0: MAC/BBP RT2561C, RF RT5225
rl0 at pci0 dev 9 function 0 "Realtek 8139" rev 0x10: apic 1 int 16 (irq
11), address 00:04:a7:08:9a:c6
rlphy0 at rl0 phy 0: RTL internal PHY
rl1 at pci0 dev 10 function 0 "Realtek 8139" rev 0x10: apic 1 int 17
(irq 10), address 00:04:a7:08:9a:c5
rlphy1 at rl1 phy 0: RTL internal PHY
rl2 at pci0 dev 11 function 0 "Realtek 8139" rev 0x10: apic 1 int 18
(irq 5), address 00:04:a7:08:9a:c4
rlphy2 at rl2 phy 0: RTL internal PHY
rl3 at pci0 dev 12 function 0 "Realtek 8139" rev 0x10: apic 1 int 19
(irq 3), address 00:04:a7:08:9a:c3
rlphy3 at rl3 phy 0: RTL internal PHY
ahci0 at pci0 dev 15 function 0 vendor "VIA", unknown product 0x6287 rev
0x20: apic 1 int 21 (irq 10), AHCI 1.0
scsibus0 at ahci0: 32 targets
sd0 at scsibus0 targ 0 lun 0:  SCSI3 0/direct fixed
sd0: 476940MB, 512 bytes/sec, 976773168 sec total
pciide0 at pci0 dev 15 function 1 "VIA VT82C571 IDE" rev 0x07: DMA,
channel 0 configured to compatibility, channel 1 configured to compatibility
pciide0: channel 0 disabled (no drives)
wd0 at pciide0 channel 1 drive 0: 
wd0: 1-sector PIO, LBA, 15391MB, 31522176 sectors
wd0(pciide0:1:0): using PIO mode 4, DMA mode 2
uhci0 at pci0 dev 16 function 0 "VIA VT83C572 USB" rev 0x91: apic 1 int
20 (irq 11)
ehci0 at pci0 dev 16 function 4 "VIA VT6202 USB" rev 0x90: apic 1 int 22
(irq 5)
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "VIA EHCI root hub" rev 2.00/1.00 addr 1
viapm0 at pci0 dev 17 function 0 "VIA VT8251 ISA" rev 0x00
iic0 at viapm0
spdmem0 at iic0 addr 0x50: 1GB DDR2 SDRAM non-parity PC2-6400CL5
pchb6 at pci0 dev 17 function 7 "VIA VT8251 VLINK" rev 0x00
ppb1 at pci0 dev 19 function 0 "VIA VT8251 PCIE" rev 0x00
pci2 at ppb1 bus 128
ppb2 at pci2 dev 0 function 0 "VIA VT8251 PCIE" rev 0x00
pci3 at ppb2 bus 130
et0 at pci3 dev 0 function 0 "AT&T/Lucent ET1310" rev 0x01: apic 1 int
17 (irq 11), address 00:04:a7:04:e6:a4
etphy0 at et0 phy 0: ET1011 10/100/1000baseT PHY, rev. 2
ppb3 at pci2 dev 0 function 1 "VIA VT8251 PCIE" rev 0x00
pci4 at ppb3 bus 129
et1 at pci4 dev 0 function 0 "AT&T/Lucent ET1310" rev 0x03: apic 1 int
16 (irq 11), address 00:04:a7:0

Re: IPSEC'd states fail after upgrade to 4.5

2009-06-03 Thread (private) HKS
On Sun, May 31, 2009 at 2:16 PM, (private) HKS wrote:
> On Sun, May 31, 2009 at 1:58 PM, (private) HKS 
wrote:
>> I have two networks: an office and a datacenter. The office has a
>> single router (dmesg below) that I upgraded to 4.5 today. The
>> datacenter has two routers running 4.4. The datacenter routers share a
>> CARP address. The locations communicate over a gif tunnel protected by
>> IPsec.
>>
>> After upgrading to 4.5 today, connections made across this tunnel are
>> dropped after about 30 seconds.
>>
>> For instance, I ssh into a my datacenter backup server from my
>> workstation. A state is created, traffic passes normally - until about
>> 30 seconds later when the state is terminated. This does not happen
>> for traffic passed out to the net outside this tunnel.
>>
>> The only weirdness I've been able to quantify is the state that is
created:
>>
>> # pfctl -vvs state | grep -A 2  | grep -A 2 
>> all tcp :22 <- :2733   ESTABLISHED:ESTABLISHED
>>   [1948621377 + 65119]  [2814490494 + 17520]
>>   age 00:00:27, expires in 23:59:43, 76:93 pkts, 5756:11189 bytes, rule 25
>> all tcp :2733 -> :22   SYN_SENT:CLOSED
>>   [2814490494 + 4294964697]  [0 + 65535]
>>   age 00:00:27, expires in 00:00:03, 76:0 pkts, 5756:0 bytes, rule 203
>>
>> Once that SYN_SENT:CLOSED state's expiration counter reaches zero, my
>> newly upgraded firewall starts blocking traffic from my workstation to
>> the server.
>>
>> When pf debugging is set to misc, I get the following sort of message
>> in my syslog (these were pulled from two different examples - the
>> ports do match when it happens):
>>
>> May 31 12:05:47  /bsd: pf: loose state match: TCP out wire:
>> :22 :2105 stack: - [lo=1243591892 high=1243591894
>> win=65535 modulator=0] [lo=0 high=65535 win=1 modulator=0] 2:0 PA
>> seq=1243591893 (1243591893) ack=0 len=28 ackskew=0 pkts=2:0
>> dir=out,fwd
>>
>> I'm at a loss. My pf.conf is pretty huge, so I inserted a "pass quick
>> from  to " at the top above my "block log"
>> policy. Same thing.
>>
>> I'm not sure what else is even needed to troubleshoot this. Can anyone
>> give me some ideas?
>>
>> -HKS
>>
>>
>> OpenBSD 4.5 (GENERIC) #1749: Sat Feb 28 14:51:18 MST 2009
>>dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
>> cpu0: Intel(R) Xeon(TM) CPU 2.80GHz ("GenuineIntel" 686-class) 2.80 GHz
>> cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR
>> real mem  = 2146795520 (2047MB)
>> avail mem = 2067582976 (1971MB)
>> mainbus0 at root
>> bios0 at mainbus0: AT/286+ BIOS, date 04/25/08, BIOS32 rev. 0 @
>> 0xffe90, SMBIOS rev. 2.3 @ 0xf9920 (87 entries)
>> bios0: vendor Dell Computer Corporation version "A07" date 04/25/2008
>> bios0: Dell Computer Corporation PowerEdge 2850
>> acpi0 at bios0: rev 0
>> acpi0: tables DSDT FACP APIC SPCR HPET MCFG
>> acpi0: wakeup devices PCI0(S5) PALO(S5) PBLO(S5) VPR0(S5) PBHI(S5)
>> VPR1(S5) PICH(S5)
>> acpitimer0 at acpi0: 3579545 Hz, 24 bits
>> acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
>> cpu0 at mainbus0: apid 0 (boot processor)
>> cpu0: apic clock running at 199MHz
>> cpu at mainbus0: not configured
>> ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
>> ioapic0: misconfigured as apic 0, remapped to apid 2
>> ioapic1 at mainbus0: apid 3 pa 0xfec8, version 20, 24 pins
>> ioapic1: misconfigured as apic 0, remapped to apid 3
>> ioapic2 at mainbus0: apid 4 pa 0xfec83000, version 20, 24 pins
>> ioapic2: misconfigured as apic 0, remapped to apid 4
>> ioapic3 at mainbus0: apid 5 pa 0xfec84000, version 20, 24 pins
>> ioapic3: misconfigured as apic 0, remapped to apid 5
>> acpihpet0 at acpi0: 14318179 Hz
>> acpiprt0 at acpi0: bus 0 (PCI0)
>> acpiprt1 at acpi0: bus 1 (PALO)
>> acpiprt2 at acpi0: bus 2 (DOBA)
>> acpiprt3 at acpi0: bus 3 (DOBB)
>> acpiprt4 at acpi0: bus 4 (PBLO)
>> acpiprt5 at acpi0: bus 5 (PBHI)
>> acpiprt6 at acpi0: bus 6 (PXB1)
>> acpiprt7 at acpi0: bus 7 (PXB2)
>> acpiprt8 at acpi0: bus 8 (VPR1)
>> acpiprt9 at acpi0: bus 9 (PXC1)
>> acpiprt10 at acpi0: bus 10 (PXC2)
>> acpiprt11 at acpi0: bus 11 (PICH)
>> acpicpu0 at acpi0
>> bios0: ROM list: 0xc/0xb000! 0xcb000/0x1000 0xcc000/0x1000
>> 0xcd000/0x2200 0xec000/0x4000!
>> ipmi at mainbus0 not configured
>> pci0 at mainbus0 bus 0: configuration mode 1 (bios)
>> pchb0 at pci0 dev 0 function 0 "Intel E7520 Host" rev 0x09
>> ppb0 at pci0 dev 2 function 0 "Intel E7520 PCIE" rev 0x09
>> pci1 at ppb0 bus 1
>> ppb1 at pci1 dev 0 function 0 "Intel IOP332 PCIE-PCIX" rev 0x06
>> pci2 at ppb1 bus 2
>> ami0 at pci2 dev 14 function 0 "Dell PERC 4e/Di" rev 0x06: apic 3 int 14
(irq 7)
>> ami0: Dell 16d, 32b, FW 513O, BIOS vH418, 256MB RAM
>> ami0: 2 channels, 0 FC loops, 1 logical drives
>> scsibus0 at ami0: 40 targets
>> sd0 at scsibus0 targ 0 lun 0:  SCSI2 0/direct fixed
>> sd0: 139900MB, 512 bytes/sec, 286515200 sec total
>> scsibus1 at ami0: 16 targets
>> safte0 at scsibus1 targ 6 

tpb startup

2009-06-03 Thread Jeremy Chase
Hello,

tpb works just fine on my IBM t42p, but I am having difficulty getting
it to start automatically. I am using xdm and xfce and have tried
starting it from .xsession and rc.local. When putting it in rc.local,
but tpb just exits if there is no X session it can attach to.

If I try this with .xsession; tpb will run as a daemon, but the
buttons don't work.

$ cat .xsession
/usr/local/bin/tpb -d --thinkpad=/usr/sbin/zzz
exec startxfce4

Thanks for your thoughts,
Jeremy



Re: PF performance problem

2009-06-03 Thread BARDOU Pierre
Thanks everybody for the help.
I will stop worrying about the system load and wait a noticeable
performance problem before asking for help :)

I set pfctl -x urgent, and now I'm waiting for something in
/var/log/messages...

--
Cordialement,
Pierre BARDOU



OpenBSD as a storage SAN

2009-06-03 Thread Friedrich Locke
Dear gentleman/madam,

i would like to use openbsd in order to build a SAN solution, i.e.,
one that provides block access to the box's disks.
I want to build a SAN, not a NAS. Is it possible?

Thank in advance.



Re: syntax error in xenocara stable code

2009-06-03 Thread Siju George
Hi,

Ichecked out fresh CVS source an it compiles fine. Thanks

Siju


On Tue, Jun 2, 2009 at 2:09 PM, Siju George  wrote:
> Hi,
>
> I was updating my OpenBSD 4.5 release to 4.5 stable.
>
> While building xenocara I got this error.
>
>
> /usr/X11R6/include/pixman-1/pixman.h:102: error: syntax error before
"pixman_fix
> ed_32_32_t"
> /usr/X11R6/include/pixman-1/pixman.h:102: warning: type defaults to `int' in
dec
> laration of `pixman_fixed_32_32_t'
> /usr/X11R6/include/pixman-1/pixman.h:102: warning: data definition has no
type o
> r storage class
> /usr/X11R6/include/pixman-1/pixman.h:103: error: syntax error before
"pixman_fix
> ed_48_16_t"
> /usr/X11R6/include/pixman-1/pixman.h:103: warning: type defaults to `int' in
dec
> laration of `pixman_fixed_48_16_t'
> /usr/X11R6/include/pixman-1/pixman.h:103: warning: data definition has no
type o
> r storage class
> /usr/X11R6/include/pixman-1/pixman.h:104: error: syntax error before
"pixman_fix
> ed_1_31_t"
> /usr/X11R6/include/pixman-1/pixman.h:104: warning: type defaults to `int' in
dec
> laration of `pixman_fixed_1_31_t'
> /usr/X11R6/include/pixman-1/pixman.h:104: warning: data definition has no
type o
> r storage class
> /usr/X11R6/include/pixman-1/pixman.h:105: error: syntax error before
"pixman_fix
> ed_1_16_t"
> /usr/X11R6/include/pixman-1/pixman.h:105: warning: type defaults to `int' in
dec
> laration of `pixman_fixed_1_16_t'
> /usr/X11R6/include/pixman-1/pixman.h:105: warning: data definition has no
type o
> r storage class
> /usr/X11R6/include/pixman-1/pixman.h:106: error: syntax error before
"pixman_fix
> ed_16_16_t"
> /usr/X11R6/include/pixman-1/pixman.h:106: warning: type defaults to `int' in
dec
> laration of `pixman_fixed_16_16_t'
> /usr/X11R6/include/pixman-1/pixman.h:106: warning: data definition has no
type o
> r storage class
> /usr/X11R6/include/pixman-1/pixman.h:107: error: syntax error before
"pixman_fix
> ed_t"
> /usr/X11R6/include/pixman-1/pixman.h:107: warning: type defaults to `int' in
dec
> laration of `pixman_fixed_t'
> /usr/X11R6/include/pixman-1/pixman.h:107: warning: data definition has no
type o
> r storage class
> /usr/X11R6/include/pixman-1/pixman.h:135: error: syntax error before
"uint16_t"
> /usr/X11R6/include/pixman-1/pixman.h:143: error: syntax error before
"pixman_fix
> ed_t"
> /usr/X11R6/include/pixman-1/pixman.h:154: error: syntax error before
"pixman_fix
> ed_t"
> /usr/X11R6/include/pixman-1/pixman.h:159: error: syntax error before
"pixman_fix
> ed_t"
> /usr/X11R6/include/pixman-1/pixman.h:243: error: syntax error before
"int16_t"
> /usr/X11R6/include/pixman-1/pixman.h:249: error: syntax error before
"int16_t"
> /usr/X11R6/include/pixman-1/pixman.h:345: error: syntax error before
"int32_t"
> /usr/X11R6/include/pixman-1/pixman.h:351: error: syntax error before
"int32_t"
> /usr/X11R6/include/pixman-1/pixman.h:418: error: syntax error before '*'
token
> /usr/X11R6/include/pixman-1/pixman.h:429: warning: function declaration
isn't a
> prototype
> /usr/X11R6/include/pixman-1/pixman.h:430: error: syntax error before '*'
token
> /usr/X11R6/include/pixman-1/pixman.h:437: warning: function declaration
isn't a
> prototype
> /usr/X11R6/include/pixman-1/pixman.h:452: error: syntax error before '*'
token
> /usr/X11R6/include/pixman-1/pixman.h:453: error: syntax error before
"uint32_t"
> /usr/X11R6/include/pixman-1/pixman.h:453: warning: function declaration
isn't a
> prototype
> /usr/X11R6/include/pixman-1/pixman.h:456: error: syntax error before
"pixman_fix
> ed_t"
> /usr/X11R6/include/pixman-1/pixman.h:463: error: syntax error before
"pixman_ind
> ex_type"
> /usr/X11R6/include/pixman-1/pixman.h:463: warning: type defaults to `int' in
dec
> laration of `pixman_index_type'
> /usr/X11R6/include/pixman-1/pixman.h:463: warning: data definition has no
type o
> r storage class
> /usr/X11R6/include/pixman-1/pixman.h:469: error: syntax error before
"uint32_t"
> /usr/X11R6/include/pixman-1/pixman.h:582: error: syntax error before
"pixman_fix
> ed_t"
> /usr/X11R6/include/pixman-1/pixman.h:585: warning: function declaration
isn't a
> prototype
> /usr/X11R6/include/pixman-1/pixman.h:587: error: syntax error before
"pixman_fix
> ed_t"
> /usr/X11R6/include/pixman-1/pixman.h:589: warning: function declaration
isn't a
> prototype
> /usr/X11R6/include/pixman-1/pixman.h:593: error: syntax error before
"uint32_t"
> /usr/X11R6/include/pixman-1/pixman.h:594: warning: function declaration
isn't a
> prototype
> /usr/X11R6/include/pixman-1/pixman.h:614: error: syntax error before '*'
token
> /usr/X11R6/include/pixman-1/pixman.h:615: warning: type defaults to `int' in
dec
> laration of `pixman_image_set_filter'
> /usr/X11R6/include/pixman-1/pixman.h:615: warning: function declaration
isn't a
> prototype
> /usr/X11R6/include/pixman-1/pixman.h:620: error: syntax error before
"int16_t"
> /usr/X11R6/include/pixman-1/pixman.h:621: warning: function declaration
isn't a
> prototype
> /usr/X11R6/include/pixman-1/pixman.h:625: error: syntax error before
"pixman_re

Re: PF performance problem

2009-06-03 Thread Jordi Espasa Clofent

BARDOU Pierre escribis:

The only problem I noticed is an abnormally long ping (usually 0.3ms,
sometimes -3 or 4 times a day says nagios- up to 30ms).


M... maybe it's not a PD-related issue. Check your network.
Despite of that, check the ICMP rules; use tcpdumo(1) also to debug it.


I am worried about the numbers since this firewall is higly critical.
Since it protects Citrix hosted applications, I will get instantly killed if
delays are too long...


I use PF in front of networks segments of web-hosting company. An I 
sleep very well...


--
Thanks,
Jordi Espasa Clofent



Re: PF performance problem

2009-06-03 Thread BARDOU Pierre
The only problem I noticed is an abnormally long ping (usually 0.3ms,
sometimes -3 or 4 times a day says nagios- up to 30ms).

I am worried about the numbers since this firewall is higly critical.
Since it protects Citrix hosted applications, I will get instantly killed if
delays are too long...

--
Cordialement,
Pierre BARDOU

-Message d'origine-
De : Richard Toohey [mailto:richardtoo...@paradise.net.nz]
Envoyi : mercredi 3 juin 2009 12:50
@ : BARDOU Pierre
Cc : misc@openbsd.org
Objet : Re: PF performance problem

On 3/06/2009, at 10:02 PM, BARDOU Pierre wrote:

> Hello,
>
> I have performance issues on a OpenBSD 4.4 firewall.
> CPU load is OK (always below 50%), but system load is always
> between 1 and
> 1.5, it may go up to 2 sometimes.
>
[cut]

And what is the actual *problem*?

What is pf failing to do?

Or are you just worried about the numbers?  Search the archives for
"high load" ...

http://marc.info/?l=openbsd-misc&m=122607853731136&w=3

HTH.



Re: Wireless help, please

2009-06-03 Thread Stuart Henderson
On 2009-06-02, Ben Goren  wrote:
> On 2009 Jun 2, at 10:00 AM, Stuart Henderson wrote:
>
>> On 2009-06-02, K K  wrote:
>>> On Tue, Jun 2, 2009 at 7:32 AM, Ben Goren   
>>> wrote:
 Anybody else have any suggestions? Nick?
>>>
>>> I have similar problems with a 'rum' USB stick in AP mode using WPA.
>>>
>>> See the man page for specific know issues with using this chipset in
>>> Host AP mode.
>>>
>>> Can anybody suggest a readily available USB2 Wireless-G adapter which
>>> works well as an AP?
>>>
>>
>> USB wireless adapters do not work well as APs.
>>
>> The only ones where we support this at all are ural and rum, and
>> though they can be useful in a sticky situation where it's all you
>> have available, they don't make good access points.
>
> With that in mind...are any of these ``wireless bridge'' devices worth  
> considering? I have a spare PC Ethernet card for this laptop.
>
> This is one of Amazon's top hits for the sort of thing I'm thinking  
> of. If anybody has any suggestions on the matter, I'd appreciate it
>
> http://www.amazon.com/Linksys-WET610N-Wireless-N-Ethernet-Dual-Band/dp/B001QVQ7JU/ref=sr_1_2?ie=UTF8&s=electronics&qid=1243962805&sr=1-2
>
> or: http://tinyurl.com/oe3nsg

heh, that one looks like it should make toast too.

You can use any old access point. Wireless bridges are for client-mode
i.e. connecting a machine that has wired ethernet only, to another AP.



Re: proper test for 64bitness of platform?

2009-06-03 Thread Stuart Henderson
On 2009-06-01, Ted Walther  wrote:
> On Mon, Jun 01, 2009 at 12:51:31PM +, Stuart Henderson wrote:
>>On 2009-06-01, Ted Walther  wrote:
>>> I'm preparing a port of newLISP.  Is there a simple test I can run to
>>> find out if the host platform is 64bit?  A #define has to be set in the
>>> code according to whether the platform is 64bit or not.
>>
>>We set _LP64 and __LP64__ variables on 64-bit arch.
>>
>>$ cpp -dM /dev/null | grep LP64
>>#define _LP64 1
>>#define __LP64__ 1
>
> Thank you Stuart.  It looks like all platforms with gcc support these
> two defines.  Is there any reason to prefer one or another?  Google
> found a netbsd post where someone said to prefer _LP64, then another
> person said that is only for kernel use, use __arch64__ in userland.

I'm not sure which is preferred, but __LP64__ seems slightly more 
common in the wild.



Re: PF performance problem

2009-06-03 Thread Richard Toohey

On 3/06/2009, at 10:02 PM, BARDOU Pierre wrote:


Hello,

I have performance issues on a OpenBSD 4.4 firewall.
CPU load is OK (always below 50%), but system load is always  
between 1 and

1.5, it may go up to 2 sometimes.


[cut]

And what is the actual *problem*?

What is pf failing to do?

Or are you just worried about the numbers?  Search the archives for  
"high load" ...


http://marc.info/?l=openbsd-misc&m=122607853731136&w=3

HTH.



Re: PF performance problem

2009-06-03 Thread Michiel van Baak
On 12:02, Wed 03 Jun 09, BARDOU Pierre wrote:
> Hello,
> 
> I have performance issues on a OpenBSD 4.4 firewall.
> CPU load is OK (always below 50%), but system load is always between 1 and
> 1.5, it may go up to 2 sometimes.

Is the system really slow ? Or are you basing this 'performance issue'
on the loadavg number ?

On some setups we have loadavg of around 10 and dont notice any
performance impact.

> 
> I suspected an I/O problem on the HDD because of pflogd, so I shut it down and
> the system load is always as high.
> 
> Could you tell me what should I upgrade to solve this ?
> And what "Debug: Urgent" means ?
> 
> Thank you
> 
> 
> Stats of PF :
> # pfctl -si
> Status: Enabled for 29 days 15:27:29  Debug: Urgent
> 
> State Table  Total Rate
>   current entries16592
>   searches 3611345993314099.9/s
>   inserts286242425  111.8/s
>   removals   286225833  111.8/s
> Counters
>   match  794705461  310.3/s
>   bad-offset 00.0/s
>   fragment   60.0/s
>   short  00.0/s
>   normalize2720.0/s
>   memory 00.0/s
>   bad-timestamp  00.0/s
>   congestion  64940.0/s
>   ip-option 120.0/s
>   proto-cksum10.0/s
>   state-mismatch1075430.0/s
>   state-insert   109660.0/s
>   state-limit   180.0/s
>   src-limit  00.0/s
>   synproxy   00.0/s
> 
> 
> dmesg :
> # cat /var/run/dmesg.boot
> OpenBSD 4.4 (GENERIC) #1021: Tue Aug 12 17:16:55 MDT 2008
> dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
> cpu0: Intel(R) Xeon(TM) CPU 2.80GHz ("GenuineIntel" 686-class) 2.80 GHz
> cpu0:
> FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
> H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR
> real mem  = 1073053696 (1023MB)
> avail mem = 1029165056 (981MB)
> mainbus0 at root
> bios0 at mainbus0: AT/286+ BIOS, date 09/22/05, BIOS32 rev. 0 @ 0xffe90,
> SMBIOS rev. 2.3 @ 0xf9920 (87 entries)
> bios0: vendor Dell Computer Corporation version "A04" date 09/22/2005
> bios0: Dell Computer Corporation PowerEdge 1850
> acpi0 at bios0: rev 0
> acpi0: tables DSDT FACP APIC SPCR HPET MCFG
> acpi0: wakeup devices PCI0(S5) PALO(S5) PBLO(S5) VPR0(S5) PBHI(S5) VPR1(S5)
> PICH(S5)
> acpitimer0 at acpi0: 3579545 Hz, 24 bits
> acpihpet0 at acpi0: 14318179 Hz
> acpiprt0 at acpi0: bus 0 (PCI0)
> acpiprt1 at acpi0: bus 1 (PALO)
> acpiprt2 at acpi0: bus 2 (DOBA)
> acpiprt3 at acpi0: bus 3 (DOBB)
> acpiprt4 at acpi0: bus 4 (PBLO)
> acpiprt5 at acpi0: bus 8 (VPR0)
> acpiprt6 at acpi0: bus 5 (PBHI)
> acpiprt7 at acpi0: bus 6 (PXB1)
> acpiprt8 at acpi0: bus 7 (PXB2)
> acpiprt9 at acpi0: bus 9 (PICH)
> acpicpu0 at acpi0
> bios0: ROM list: 0xc/0xb000! 0xcb000/0x1000 0xcc000/0x800 0xcc800/0x1000
> 0xcd800/0x2600 0xd/0x1800 0xec000/0x4000!
> ipmi at mainbus0 not configured
> cpu0 at mainbus0
> pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
> pchb0 at pci0 dev 0 function 0 "Intel E7520 Host" rev 0x09
> ppb0 at pci0 dev 2 function 0 "Intel E7520 PCIE" rev 0x09
> pci1 at ppb0 bus 1
> ppb1 at pci1 dev 0 function 0 "Intel IOP332 PCIE-PCIX" rev 0x06
> pci2 at ppb1 bus 2
> mpi0 at pci2 dev 5 function 0 "Symbios Logic 53c1030" rev 0x08: irq 7
> scsibus0 at mpi0: 16 targets, initiator 7
> em0 at pci2 dev 12 function 0 "Intel PRO/1000MT (82546EB)" rev 0x01: irq 10,
> address 00:11:0a:64:32:74
> em1 at pci2 dev 12 function 1 "Intel PRO/1000MT (82546EB)" rev 0x01: irq 11,
> address 00:11:0a:64:32:75
> ppb2 at pci1 dev 0 function 2 "Intel IOP332 PCIE-PCIX" rev 0x06
> pci3 at ppb2 bus 3
> ami0 at pci3 dev 11 function 0 "Symbios Logic MegaRAID" rev 0x01: irq 3
> ami0: Dell 520, 64b/lhc, FW 351S, BIOS v1.10, 64MB RAM
> ami0: 1 channels, 0 FC loops, 1 logical drives
> scsibus1 at ami0: 40 targets, initiator 40
> sd0 at scsibus1 targ 0 lun 0:  SCSI2 0/direct fixed
> sd0: 34680MB, 4421 cyl, 255 head, 63 sec, 512 bytes/sec, 71024640 sec total
> scsibus2 at ami0: 16 targets, initiator 16
> safte0 at scsibus2 targ 6 lun 0:  SCSI2 3/processor
> fixed
> ppb3 at pci0 dev 4 function 0 "Intel E7520 PCIE" rev 0x09
> pci4 at ppb3 bus 4
> ppb4 at pci0 dev 5 function 0 "Intel E7520 PCIE" rev 0x09
> pci5 at ppb4 bus 5
> ppb5 at pci5 dev 0 function 0 "Intel PCIE-PCIE" rev 0x09
> pci6 at ppb5 bus 6
> em2 at pci6 dev 7 function 0 "Intel PRO/1000MT (82541GI)" rev 0x05: irq 11,
> address 00:14:22:21

Re: PF performance problem

2009-06-03 Thread Jordi Espasa Clofent

PF works like a charm. Without doubt.
Despite of that, PF don't require the HD and the main bottlenecks are de 
CPU and memory (and NIC and the driver, of course).


I suspect an error in your PF logging system.

PD. 'Urgent' means the same words says: urgent. If you see some message 
related to PF in your /var/log/messages you should considerate it 
important (it's urgent!). See at pfctl man pages, -x flag.


--
Thanks,
Jordi Espasa Clofent



PF performance problem

2009-06-03 Thread BARDOU Pierre
Hello,

I have performance issues on a OpenBSD 4.4 firewall.
CPU load is OK (always below 50%), but system load is always between 1 and
1.5, it may go up to 2 sometimes.

I suspected an I/O problem on the HDD because of pflogd, so I shut it down and
the system load is always as high.

Could you tell me what should I upgrade to solve this ?
And what "Debug: Urgent" means ?

Thank you


Stats of PF :
# pfctl -si
Status: Enabled for 29 days 15:27:29  Debug: Urgent

State Table  Total Rate
  current entries16592
  searches 3611345993314099.9/s
  inserts286242425  111.8/s
  removals   286225833  111.8/s
Counters
  match  794705461  310.3/s
  bad-offset 00.0/s
  fragment   60.0/s
  short  00.0/s
  normalize2720.0/s
  memory 00.0/s
  bad-timestamp  00.0/s
  congestion  64940.0/s
  ip-option 120.0/s
  proto-cksum10.0/s
  state-mismatch1075430.0/s
  state-insert   109660.0/s
  state-limit   180.0/s
  src-limit  00.0/s
  synproxy   00.0/s


dmesg :
# cat /var/run/dmesg.boot
OpenBSD 4.4 (GENERIC) #1021: Tue Aug 12 17:16:55 MDT 2008
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Xeon(TM) CPU 2.80GHz ("GenuineIntel" 686-class) 2.80 GHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR
real mem  = 1073053696 (1023MB)
avail mem = 1029165056 (981MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 09/22/05, BIOS32 rev. 0 @ 0xffe90,
SMBIOS rev. 2.3 @ 0xf9920 (87 entries)
bios0: vendor Dell Computer Corporation version "A04" date 09/22/2005
bios0: Dell Computer Corporation PowerEdge 1850
acpi0 at bios0: rev 0
acpi0: tables DSDT FACP APIC SPCR HPET MCFG
acpi0: wakeup devices PCI0(S5) PALO(S5) PBLO(S5) VPR0(S5) PBHI(S5) VPR1(S5)
PICH(S5)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (PALO)
acpiprt2 at acpi0: bus 2 (DOBA)
acpiprt3 at acpi0: bus 3 (DOBB)
acpiprt4 at acpi0: bus 4 (PBLO)
acpiprt5 at acpi0: bus 8 (VPR0)
acpiprt6 at acpi0: bus 5 (PBHI)
acpiprt7 at acpi0: bus 6 (PXB1)
acpiprt8 at acpi0: bus 7 (PXB2)
acpiprt9 at acpi0: bus 9 (PICH)
acpicpu0 at acpi0
bios0: ROM list: 0xc/0xb000! 0xcb000/0x1000 0xcc000/0x800 0xcc800/0x1000
0xcd800/0x2600 0xd/0x1800 0xec000/0x4000!
ipmi at mainbus0 not configured
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel E7520 Host" rev 0x09
ppb0 at pci0 dev 2 function 0 "Intel E7520 PCIE" rev 0x09
pci1 at ppb0 bus 1
ppb1 at pci1 dev 0 function 0 "Intel IOP332 PCIE-PCIX" rev 0x06
pci2 at ppb1 bus 2
mpi0 at pci2 dev 5 function 0 "Symbios Logic 53c1030" rev 0x08: irq 7
scsibus0 at mpi0: 16 targets, initiator 7
em0 at pci2 dev 12 function 0 "Intel PRO/1000MT (82546EB)" rev 0x01: irq 10,
address 00:11:0a:64:32:74
em1 at pci2 dev 12 function 1 "Intel PRO/1000MT (82546EB)" rev 0x01: irq 11,
address 00:11:0a:64:32:75
ppb2 at pci1 dev 0 function 2 "Intel IOP332 PCIE-PCIX" rev 0x06
pci3 at ppb2 bus 3
ami0 at pci3 dev 11 function 0 "Symbios Logic MegaRAID" rev 0x01: irq 3
ami0: Dell 520, 64b/lhc, FW 351S, BIOS v1.10, 64MB RAM
ami0: 1 channels, 0 FC loops, 1 logical drives
scsibus1 at ami0: 40 targets, initiator 40
sd0 at scsibus1 targ 0 lun 0:  SCSI2 0/direct fixed
sd0: 34680MB, 4421 cyl, 255 head, 63 sec, 512 bytes/sec, 71024640 sec total
scsibus2 at ami0: 16 targets, initiator 16
safte0 at scsibus2 targ 6 lun 0:  SCSI2 3/processor
fixed
ppb3 at pci0 dev 4 function 0 "Intel E7520 PCIE" rev 0x09
pci4 at ppb3 bus 4
ppb4 at pci0 dev 5 function 0 "Intel E7520 PCIE" rev 0x09
pci5 at ppb4 bus 5
ppb5 at pci5 dev 0 function 0 "Intel PCIE-PCIE" rev 0x09
pci6 at ppb5 bus 6
em2 at pci6 dev 7 function 0 "Intel PRO/1000MT (82541GI)" rev 0x05: irq 11,
address 00:14:22:21:61:6d
ppb6 at pci5 dev 0 function 2 "Intel PCIE-PCIE" rev 0x09
pci7 at ppb6 bus 7
em3 at pci7 dev 8 function 0 "Intel PRO/1000MT (82541GI)" rev 0x05: irq 3,
address 00:14:22:21:61:6e
ppb7 at pci0 dev 6 function 0 "Intel E7520 PCIE" rev 0x09
pci8 at ppb7 bus 8
uhci0 at pci0 dev 29 function 0 "Intel 82801EB/ER USB" rev 0x02: irq 11
uhci1 at pci0 dev 29 function 1 "Intel 82801EB/ER USB" rev 0x02: irq 10
uhci2 at pci0 dev 29 function 2 "Intel 82

Re: Install math/cfitsio Port

2009-06-03 Thread Stuart Henderson
reply-to set to po...@.

In gmane.os.openbsd.misc, MANI wrote:
> Hi misc,
>
> I am trying to make KDE4 from Ports on my OpenBSD 4.5 release box, but
> I encountered Checksum mismatch error in /usr/ports/math/cfitsio:

the cfitsio port could use an update (upstream ftp has only newer versions
now) but in the meantime I've added a mirror.

>>> Fetch ftp://ftp.openbsd.org/pub/OpenBSD/distfiles//cfitsio3006.tar.gz
>>> (SHA256) cfitsio3006.tar.gz: FAILED
>>> Checksum mismatch for cfitsio3006.tar.gz. (sha256)

ugh.

bob? please would you replace this with
http://spacehopper.org/mirrors/cfitsio3006.tar.gz. thank you.



Re: Flapping VPN under load on Soekris

2009-06-03 Thread Stuart Henderson
On 2009-06-03, Mikolaj Kucharski  wrote:
> Can anyone give me example of embedded system (Soekris-like) which is
> known to handle PF traffic + VPN traffic at MBit/s throughput, and
> packets per second level, generated by home users browsing web,
> skyping, playing games on-line (low latency), at the same time.
> *Fanless* and which can run OpenBSD of course.
>
> I hope I'm not too demanding, is there anything like that?

pcengines alix and soekris 5501 are quite a lot faster than the
soekris 45xx. if you're doing a lot of VPN traffic then something
with one of the VIA processors that has hardware AES will cope
better, but they're quite a lot more expensive than an alix
and I don't have personal experience to recommend a particular
box.

packets-per-second affects things a lot more than bandwidth use.
I don't know what skype uses in terms of PPS, and I guess on-line
games could vary by quite a lot.

running tcpbench with this layout: server -> alix (routed) -> laptop,
and varying MTU ("route add laptop -mtu 128" on the host running the
tcpbench sender), then measuring CPU on the alix while this happens:

MTU 1500; 25% idle, throughput 70Mb/s
MTU 1024;  5% idle, throughput 60Mb/s
MTU 512;   0% idle, throughput 33Mb/s
MTU 128;   0% idle, throughput 10Mb/s

(without vpn). you might be able to run a comparison on your
hardware and see how it compares, see whether you think it'll be
enough of an improvement, or if you'll need something faster.


> On Tue, Jun 02, 2009 at 11:10:14PM +, Stuart Henderson wrote:
>> you're probably overloading the CPU. try -current, sis(4) has
>> MCLGETI now which should mitigate things a bit. still, that's a
>> lot of load you're putting on a little 486 which will almost
>> certainly be restricting your throughput.
>
> Thanks Stuart.



Re: Can't get tls on smtpd to work right, just can't connect to server using tls.

2009-06-03 Thread Gilles Chehade

Daniel Ouellet a icrit :

Gilles Chehade wrote:

Daniel Ouellet a icrit :

Hi,

I am having problem testing this and my be I am missing something 
simple, so any pointers would be appreciates.


To test this I created the cert as describe in man 8 starttls as 
follow and below are all the steps I did without success so far:



[...]

Yes, for some reason you will not succeed having ssl/tls work by 
following the starttls
man page. Current workaround until I spot what's wrong, is to follow 
the same procedure
than for generating certificates for web servers in ssl(8), this will 
work.


I'm currently doing some ssl related work in smtpd so it's likely 
I'll have news soon.


Many thanks for the advise!

I will try that and see.

Great work by the way, I really love it so far!

I got use to update it every few days and more in the last week. (;>

Best

Daniel

For the record, people testing smtpd need to be aware that some of the 
changes we work
on are likely to change the format of the messages we store in queue in 
a way that can
break compatibility with a previous revision. Remember, it is not 
production ready.


I would recommend that testers:

1- read smtpd related commit logs before they update their smtpd
2- always flush the entire mail queue before an update and make sure 
there is no mails

  remaining in queue. this is done using "smtpctl show queue" and
  "smtpctl schedule XXX" with XXX being the message id.

Gilles



Re: Can't get tls on smtpd to work right, just can't connect to server using tls.

2009-06-03 Thread Daniel Ouellet

Gilles Chehade wrote:

Daniel Ouellet a icrit :

Hi,

I am having problem testing this and my be I am missing something 
simple, so any pointers would be appreciates.


To test this I created the cert as describe in man 8 starttls as 
follow and below are all the steps I did without success so far:



[...]

Yes, for some reason you will not succeed having ssl/tls work by 
following the starttls
man page. Current workaround until I spot what's wrong, is to follow the 
same procedure

than for generating certificates for web servers in ssl(8), this will work.

I'm currently doing some ssl related work in smtpd so it's likely I'll 
have news soon.


Many thanks for the advise!

I will try that and see.

Great work by the way, I really love it so far!

I got use to update it every few days and more in the last week. (;>

Best

Daniel



Re: Can't get tls on smtpd to work right, just can't connect to server using tls.

2009-06-03 Thread Gilles Chehade

Daniel Ouellet a icrit :

Hi,

I am having problem testing this and my be I am missing something 
simple, so any pointers would be appreciates.


To test this I created the cert as describe in man 8 starttls as 
follow and below are all the steps I did without success so far:



[...]

Yes, for some reason you will not succeed having ssl/tls work by 
following the starttls
man page. Current workaround until I spot what's wrong, is to follow the 
same procedure

than for generating certificates for web servers in ssl(8), this will work.

I'm currently doing some ssl related work in smtpd so it's likely I'll 
have news soon.


Gilles



Install math/cfitsio Port

2009-06-03 Thread MANI
Hi misc,

I am trying to make KDE4 from Ports on my OpenBSD 4.5 release box, but
I encountered Checksum mismatch error in /usr/ports/math/cfitsio:

# make install
===>  Checking files for cfitsio-3.006p0
>> Fetch ftp://heasarc.gsfc.nasa.gov/software/fitsio/c/cfitsio3006.tar.gz
cfitsio3006.tar.gz: No such file or directory.
>> Fetch ftp://ftp.openbsd.org/pub/OpenBSD/distfiles//cfitsio3006.tar.gz
>> (SHA256) cfitsio3006.tar.gz: FAILED
>> Checksum mismatch for cfitsio3006.tar.gz. (sha256)
Make sure the Makefile and checksum file (/usr/ports/math/cfitsio/distinfo)
are up to date.  If you want to fetch a good copy of this
file from the OpenBSD main archive, type
"make REFETCH=true [other args]".
*** Error code 1

Stop in /usr/ports/math/cfitsio (line 1853 of
/usr/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /usr/ports/math/cfitsio (line 2006 of
/usr/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /usr/ports/math/cfitsio (line 1432 of
/usr/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /usr/ports/math/cfitsio (line 1972 of
/usr/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /usr/ports/math/cfitsio (line 1462 of
/usr/ports/infrastructure/mk/bsd.port.mk).


*

$ dmesg

attached ...
OpenBSD 4.5 (GENERIC.MP) #108: Sat Feb 28 14:58:58 MST 2009
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) Core(TM) Duo CPU T2450 @ 2.00GHz ("GenuineIntel" 686-class) 2 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,EST,TM2,xTPR
real mem  = 1063415808 (1014MB)
avail mem = 1019949056 (972MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 02/08/07, BIOS32 rev. 0 @ 0xfd5f0, SMBIOS 
rev. 2.4 @ 0xdc010 (17 entries)
bios0: vendor Phoenix Technologies LTD version "R0100J4" date 02/08/2007
bios0: Sony Corporation VGN-N370E
acpi0 at bios0: rev 0
acpi0: tables DSDT FACP APIC HPET MCFG SLIC APIC BOOT SSDT SSDT SSDT SSDT
acpi0: wakeup devices PWRB(S4) PXS1(S3) PXS2(S3) PXS3(S3) PXS4(S3) USB1(S3) 
USB2(S3) USB3(S3) USB4(S3) USB7(S3) LANC(S3)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 132MHz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Core(TM) Duo CPU T2450 @ 2.00GHz ("GenuineIntel" 686-class) 2 GHz
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,EST,TM2,xTPR
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 24 pins
ioapic0: misconfigured as apic 2, remapped to apid 1
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (PEGP)
acpiprt2 at acpi0: bus 2 (RP01)
acpiprt3 at acpi0: bus 4 (RP02)
acpiprt4 at acpi0: bus 6 (RP03)
acpiprt5 at acpi0: bus -1 (RP04)
acpiprt6 at acpi0: bus 8 (PCIB)
acpiec0 at acpi0
acpicpu0 at acpi0: C3, C2
acpicpu1 at acpi0: C3, C2
acpitz0 at acpi0: critical temperature 90 degC
acpitz0: TZ00: failed to read _AC0
acpitz1 at acpi0: critical temperature 90 degC
acpitz1: TZ01: failed to read _AC0
acpiac0 at acpi0: AC unit online
acpibat0 at acpi0: BAT0 type LiOn oem "Sony Corp."
acpibtn0 at acpi0: LID0
acpibtn1 at acpi0: PWRB
acpivideo at acpi0 not configured
bios0: ROM list: 0xc/0x1! 0xdc000/0x4000! 0xe/0x1800!
cpu0: unknown Enhanced SpeedStep CPU, msr 0x06130f2c06000f2c
cpu0: using only highest and lowest power states
cpu0: Enhanced SpeedStep 2000 MHz (1404 mV): speeds: 2000, 800 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 "Intel 82945GM Host" rev 0x03
vga1 at pci0 dev 2 function 0 "Intel 82945GM Video" rev 0x03
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
intagp0 at vga1
agp0 at intagp0: aperture at 0xc000, size 0x1000
inteldrm0 at vga1: apic 1 int 16 (irq 7)
drm0 at inteldrm0
"Intel 82945GM Video" rev 0x03 at pci0 dev 2 function 1 not configured
azalia0 at pci0 dev 27 function 0 "Intel 82801GB HD Audio" rev 0x02: apic 1 int 
22 (irq 4)
azalia0: codecs: Realtek ALC262, Conexant/0x2c06, using Realtek ALC262
audio0 at azalia0
ppb0 at pci0 dev 28 function 0 "Intel 82801GB PCIE" rev 0x02: apic 1 int 17 
(irq 3)
pci1 at ppb0 bus 2
mskc0 at pci1 dev 0 function 0 "Marvell Yukon 88E8036" rev 0x16, Yukon-2 FE 
(0x1): apic 1 int 16 (irq 7)
msk0 at mskc0 port A: address 00:13:a9:c6:c4:6c
eephy0 at msk0 phy 0: 88E3082 10/100 PHY, rev. 3
ppb1 at pci0 dev 28 function 1 "Intel 82801GB PCIE" rev 0x02: apic 1 int 16 
(irq 7)
pci2 at ppb1 bus 4
ppb2 at pci0 dev 28 function 2 "Intel 82801GB PCIE" rev 0x02: apic 1 int 18 
(irq 11)
pci3 at ppb2 bus 6
wpi0 at pci3 dev 0 function 0 "Intel PRO/Wireless 3945ABG" rev 0x02: apic 1 int 
18 (irq 11), MoW1, address 00:19:d2:96:64:28
uhci0 at pci0