Re: DNSSEC validating resolver
On 2011-01-24 20.29, Henning Brauer wrote: * Oliver Peter li...@peter.de.com [2011-01-24 15:13]: On Mon, Jan 24, 2011 at 01:33:53PM +0100, Henning Brauer wrote: * Oliver Peter li...@peter.de.com [2011-01-24 11:56]: The tcp option in resolv.conf might be reasonable for a single workstation but due to the protocol overhead not appropriate for larger networks / many clients. people keep claiming this bullshit. remains bullshit. The more I think about it... The only tcp connection you establish is from the host in question (i.e. workstation) to the resolver. The resolver then decides how to query the authoritative nameserver (udp/tcp), right? Aye? almost. it'll be more than one. that could be circumvented by a small local daemon, but that has other downsides. after all, the cost of establishing a tcp session isn't all that high, especially to the caching resolver which should be near aka low ttl. i even doubt it'd make much of a difference for a caching resolver. tcp sessions to the root servers and the common tld servers should stay established. dito for very commonly used other nameservers. the rest, yes, there is a little higher overhead. does it matter? i doubt it. but i have no numbers either. and thus, when i talk about the matter, i make clear this is an educated guess, no more, no less. Speaking about educated guesses, I personally have doubts about recommending the use of tcp only in the resolver, due to misconfigurations out there in the wild. I've seen cases where TCP access to port 53 have been blocked, both on the resolver and the server side, due no doubt to ignorance. That means, almost everything works almost all of the time, until someone tries a zone transfer, gets a large query result or comes along with a tcp only request. Indeed, the RFC:s have previously stated that implementing TCP is a should, not a must, which the good folks at IETF just recently seem to have put their foot down on: http://datatracker.ietf.org/doc/rfc5966/ So I guess my reservations will eventually end up being obsolete, but for the time being, I'd just stay on the safe side and continue allowing UDP. Regards, /Benny -- internetlabbet.se / work: +46 8 551 124 80 / Words must Benny Lvfgren/ mobile: +46 70 718 11 90 / be weighed, / fax:+46 8 551 124 89/not counted. /email: benny -at- internetlabbet.se
Re: x336 IBM servers reboots
Thanks Daniel, Downgrading pci.c to 1.72 fixed the problem for me. Now i can install OpenBSD on my ten spare x336 servers . Best regards, Marcos LEVAI Daniel wrote: On k, jan 18, 2011 at 12:06:19 -0300, Marcos Laufer wrote: Hello list, I'd like to inform that this problem: http://www.pubbs.net/200910/openbsd/42943-46-reboots-x336-ibm-servers.html keeps happening also with OpenBSD 4.7 and 4.8 . The last version i can install or upgrade on this is 4.5. Didn't try -current yet. I have several of this IBM x336 servers waiting to be running OpenBSD http://cvs.openbsd.org/cgi-bin/query-pr-wrapper?full=yesnumbers=6523
Running ksh -l in terminal window under XFCE
Hi all, I've setup a certain number of aliases and vars both in /etc/profile and in .profile and, whenever I login they always get read. But opening a new terminal window under XFCE does not open a terminal with a login so the two files do not get read. By reading ksh(1) man, one discovers that this problem can be easily circumvented by issuing a ksh -l command. But this is quite annoying to type after every time I open a new terminal and I still haven't found in XFCE terminal the setting to modify this behaviour. Is there some variable to set or am I missing some obvious parameter config? Thanks Paolo
Re: Running ksh -l in terminal window under XFCE
And you did not bother to read on after '-l'? If the ENV parameter is set when an interactive shell starts (or, in the case of login shells, after any profiles are processed), its value is subjected to parameter, command, arithmetic, and tilde (`~') substitution and the resulting file (if any) is read and executed. In order to have an interactive (as opposed to login) shell process a startup file, ENV may be set and exported (see below) in $HOME/.profile - future interactive shell invocations will process any file pointed to by $ENV: export ENV=$HOME/.kshrc $HOME/.kshrc is then free to specify instructions for interactive shells. For example, the global configuration file may be sourced: . /etc/ksh.kshrc The above strategy may be employed to keep setup procedures for login shells in $HOME/.profile and setup procedures for interactive shells in $HOME/.kshrc. Of course, since login shells are also interactive, any commands placed in $HOME/.kshrc will be executed by login shells too. On Tue, 25 Jan 2011 14:19:52 +0100, Paolo Aglialoro paol...@gmail.com wrote: Hi all, I've setup a certain number of aliases and vars both in /etc/profile and in .profile and, whenever I login they always get read. But opening a new terminal window under XFCE does not open a terminal with a login so the two files do not get read. By reading ksh(1) man, one discovers that this problem can be easily circumvented by issuing a ksh -l command. But this is quite annoying to type after every time I open a new terminal and I still haven't found in XFCE terminal the setting to modify this behaviour. Is there some variable to set or am I missing some obvious parameter config? Thanks Paolo
Re: Running ksh -l in terminal window under XFCE
there isn't a click option in Terminal to make it login shell ? :) From: paol...@gmail.com Date: Tue, 25 Jan 2011 14:19:52 +0100 Subject: Running ksh -l in terminal window under XFCE To: misc@openbsd.org Hi all, I've setup a certain number of aliases and vars both in /etc/profile and in .profile and, whenever I login they always get read. But opening a new terminal window under XFCE does not open a terminal with a login so the two files do not get read. By reading ksh(1) man, one discovers that this problem can be easily circumvented by issuing a ksh -l command. But this is quite annoying to type after every time I open a new terminal and I still haven't found in XFCE terminal the setting to modify this behaviour. Is there some variable to set or am I missing some obvious parameter config? Thanks Paolo
Re: netflow and ipv6?
On 24.01.2011 22:43, Patrick Lamaiziere wrote: Hello, Are there some plans to implement netflow v9 in pflow(4) (to be able to trace ipv6 flows)? yes, ipv6 pflow support is on my list, but there is *no* timeline at the moment. Maybe the export format will *not* be netflow v9. Kind regards, Joerg Goltermann
Re: Running ksh -l in terminal window under XFCE
On Tue, Jan 25, 2011 at 2:19 PM, Paolo Aglialoro paol...@gmail.com wrote: Hi all, I've setup a certain number of aliases and vars both in /etc/profile and in .profile and, whenever I login they always get read. But opening a new terminal window under XFCE does not open a terminal with a login so the two files do not get read. By reading ksh(1) man, one discovers that this problem can be easily circumvented by issuing a ksh -l command. But this is quite annoying to type after every time I open a new terminal and I still haven't found in XFCE terminal the setting to modify this behaviour. Is there some variable to set or am I missing some obvious parameter config? preferences - general tab - launch command as login shell Landry
Re: Running ksh -l in terminal window under XFCE
Paolo Aglialoro paol...@gmail.com writes: Is there some variable to set or am I missing some obvious parameter config? I had the same problem and starting my .xsession with #!/bin/ksh -l does the trick as any child process (not just shells) will have the correct environment. -- Manuel Giraud
Qponya.com %90'a varan indirimlerle hizmetinizde..
Maili Gouml;ruuml;ntuuml;leyemiyorsan}z T}klay}n}z.. En gouml;zde mekanlarda % 90'a varan indirimler Qponya'da... F}rsatlar} kaccedil;}rmamak iccedil;in sizde Qponya'ya uuml;cretsiz uuml;ye olun! ^ehrinizi ke~fetmenin en hesapl} yolu! Qponya ~ehrinizde ke~fedilmeyi bekleyen birccedil;ok mekan, eplence, kuuml;ltuuml;r ve sanat etkinlipini sizlere buuml;yuuml;k indirimlerle sunacak yepyeni bir web sitesidir. Qponya, ba~ka yerde bulamayacap}n}z indirimleri i~letmelerden sizin iccedil;in al}r ve sizlere her guuml;n farkl} bir f}rsat sunar. Yeterli say}da insan}n f}rsat} sat}n almas}yla f}rsat aktif hale gelir Uuml;cretsiz uuml;ye olun, f}rsatlar} kaccedil;}rmay}n! Qponya.com sitesinde yay}nlanan f}rsatlardan haberdar olmak iccedil;in uuml;cretsiz uuml;ye olun! En fazla arkada~ getirene PSP kampanyam}z sonuccedil;land}! Qponya.com sitesine uuml;ye olup, 24 Ocak 2011 saat 24: 00' a kadar arkada~lar}n} Qponya'ya davet ederek en ccedil;ok uuml;ye yapan ki~i belli oldu! Ayr}nt}l} bilgi iccedil;in: www.qponya.com Bize ula~}n! Merak ettipiniz konular iccedil;in Qponya sitesi iccedil;indeki bilgilendirmeleri okuyabilirsiniz. F}rsat ouml;nerileri, yorumlar ve duuml;~uuml;nceleriniz iccedil;in bize hemen ula~}n!. Unsubscribe-Listeden ccedil;}k}~
wireless gadgetry
I have two wireless adapters that attach as ugen. One says Linksys WUSB54GSC on the box: ugen0 at uhub0 port 1 Linksysm Compact Wireless-G USB Network Adapter with SpeedBooster rev 2.00/0.01 addr 2 ugen0 detached The other is a Keebox W159NU: ugen0 at uhub0 port 1 Ralink 802.11 n WLAN rev 2.00/1.01 addr 2 ugen0 detached I don't know about the first, but it looks like the second should work with run? Is there a device ID I need to add? I ran usbdevs to find out, but it doesn't work so well: addr 1: I/O error addr 2: I/O error addr 3: I/O error addr 4: I/O error ... That's probably a different issue.
E-mail: Santander Real
http://www.recadosnoorkut.com.br/wp-content/uploads/2010/07/real-santander.jpg Prezado Cliente, I com grande satisfagco que a equipe de seguranga do Internet Banking Real Santander envia este e-mail a vocj cliente. o motivo pelo qual estamos entrando em contato para alertar que seu Cartco Chave de Seguranga Real tabela de senhas foi expirado. Caso nco efetue o seu recadastramento com urgjncia, o acesso via Caixas-Eletronicos e Internet-Banking ficara suspenso e seu Cartco junto com Chaves de Seguranga serco cancelados, impossibilitando acessos e movimentagco. Prazo de ate 5 dias zteis. Recadastramento obrigatsrio: Clique Aqui. Caso o link nco funcione, clique aqui para o recadastramento. Atengco: O Recadastramento e apenas conclumdo apartir do Link fornecido neste e-mail, impossibilitando o recadastramento por outro Link RealSantander. Em caso de duvida, contatar o Disk Real de segunda-feira a sexta-feira das 07:00 as 20:00hs. Real Santander Banco Real Santander (Brasil) S.A.
Espejado Seguridad y REDUCE EL CALOR // Control Solar // Esmerilado
= COLOCACION FILMS PARA VIDRIOSnbsp; Contr= ol Solar bull; Espejado bull; Seguridad y Anivandalismo bull; Esmerilad= os instalamos en: Casas, Locales, Oficinas, Barrios Privados, Depar= tamentos, Obras. Abone con TARJETA DE CREDITO , consulte financiacioacute;n.Presupuestos al inst= ante. Solicite asesoramiento: (011) 3531-1755 / 15-3395-6883 Si UD. Desea ser removido de nu= estra base de datos, por favor envienos un mail con el asunto REMOVER. Gracias y disculpe las molestias.
route flush and sh /etc/netstart not enough?
Hello misc@,
I'm having an issue with my wifi AP after I reconnect to my ISP. That
is, when my internet connection is broken, for whatever reason, and
then reconnected, my wireless machines see that the AP is available,
but fail to connect to it. My hard connection works just fine.
I flush all the routes (ie., # route flush) and then sh /etc/netstart,
but that does not work. At this point, rebooting the AP machine is the
only thing that I've been able to do to rectify the situation. From
the research that I've done, it doesn't look as though I should have
to reboot. Any suggestions?
Thanks!
-Neal
P.S. -- I'm not sure what would be appropriate for you to look at, if
anything. So, I offer a few things below. Let me know if something
else would help.
lambdahogan cat /etc/hostname.ral0
inet 192.168.3.1 255.255.255.0 NONE media autoselect \
mediaopt hostap nwid lambdaserver nwkey xx
lambdahogan cat /etc/dhcpd.conf
# $OpenBSD: dhcpd.conf,v 1.1 1998/08/19 04:25:45 form Exp $
#
# DHCP server options.
# See dhcpd.conf(5) and dhcpd(8) for more information.
#
# Network: 192.168.1.0/255.255.255.0
# Domain name: my.domain
# Name servers: 192.168.1.3 and 192.168.1.5
# Default router: 192.168.1.1
# Addresses:192.168.1.32 - 192.168.1.127
#
shared-network ETHERNET {
option domain-name lambdaserver;
option domain-name-servers 64.233.207.8, 64.233.207.9;
#internal ethernet
subnet 192.168.2.0 netmask 255.255.255.0 {
option routers 192.168.2.1;
range 192.168.2.32 192.168.2.127;
}
}
shared-network WIRELESS {
option domain-name lambdaserver;
option domain-name-servers 64.233.207.8, 64.233.207.9;
#internal wireless
subnet 192.168.3.0 netmask 255.255.255.0 {
option routers 192.168.3.1;
range 192.168.3.32 192.168.3.127;
}
}
İGED AKADEMİ : ETKİLİ İLETİŞİM TEKNİKLERİ (SERTİFİKALI)
This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible.
Licitaciones Públicas para la Ley de PEMEX 2011, 28 de Enero en México D.F.
[IMAGE] !Promociones Especiales para grupos! Capacitacisn Impartida por: Mtro. Alberto Ledesma Gonzalez. Pms Capacitacisn Efectiva de Mixico presenta: Licitaciones Pzblicas para la Ley de PEMEX. Experto Consultor Mtro. Alberto Ledesma Gonzalez Empresa Registrada ante la STPS Reg. COLG640205CP30005 Smguenos en Twitter@pmscapacitacion o bien en Facebook PMS de Mixico Mayores informes responda este correo electrsnico con los siguientes datos. Empresa: Nombre: Telifono: Email: Nzmero de Interesados: Y en breve le haremos llegar la informacisn completa del evento. O bien comunmquense a nuestros telifonos un ejecutivo con gusto le atendera Tels. (33) 8851-2365, (33)8851-2741. Copyright (C) 2010, PMS Capacitacisn Efectiva de Mixico S.C. Derechos Reservados. PMS de Mixico, El logo de PMS de Mixico son marcas registradas. ADVERTENCIA PMS de Mixico no cuenta con alianzas estratigicas de ningzn tipo dentro de la Republica Mexicana. NO SE DEJE ENGAQAR - DIGA NO A LA PIRATERIA. Todos los logotipos, marcas comerciales e imagenes son propiedad de sus respectivas corporaciones y se utilizan con fines informativos solamente. Este Mensaje ha sido enviado a misc@openbsd.org como usuario de Pms de Mixico o bien un usuario le refiris para recibir este boletmn. Como usuario de Pms de Mixico, en este acto autoriza de manera expresa que Pms de Mixico le puede contactar vma correo electrsnico u otros medios. Si usted ha recibido este mensaje por error, haga caso omiso de el y reporte su cuenta respondiendo este correo con el subject BAJAPEMEX Unsubscribe to this mailing list, reply a blank message with the subject UNSUBSCRIBE BAJAPEMEX Tenga en cuenta que la gestisn de nuestras bases de datos es de suma importancia y no es intencisn de la empresa la inconformidad del receptor. [demime 1.01d removed an attachment of type image/jpeg which had a name of pemexpromo.jpg]
Re: route flush and sh /etc/netstart not enough?
On Tue, Jan 25, 2011 at 9:01 PM, Neal Hogan nealho...@gmail.com wrote: Hello misc@, I'm having an issue with my wifi AP after I reconnect to my ISP. That is, when my internet connection is broken, for whatever reason, and then reconnected, my wireless machines see that the AP is available, but fail to connect to it. My hard connection works just fine. Do you still have a dynamic IP? If so, is it set to something different when you reconnect? If so, the nat in your pf is probably causing the problem. I flush all the routes (ie., # route flush) and then sh /etc/netstart, but that does not work. Have you also tried restarting pf at this point? At this point, rebooting the AP machine is the only thing that I've been able to do to rectify the situation. From the research that I've done, it doesn't look as though I should have to reboot. Any suggestions? Thanks! -Neal
Re: route flush and sh /etc/netstart not enough?
On Tue, Jan 25, 2011 at 9:51 PM, Ryan Flannery ryan.flann...@gmail.com wrote: On Tue, Jan 25, 2011 at 9:01 PM, Neal Hogan nealho...@gmail.com wrote: Hello misc@, I'm having an issue with my wifi AP after I reconnect to my ISP. That is, when my internet connection is broken, for whatever reason, and then reconnected, my wireless machines see that the AP is available, but fail to connect to it. My hard connection works just fine. Do you still have a dynamic IP? If so, is it set to something different when you reconnect? If so, the nat in your pf is probably causing the problem. I was thinking the same and when I finally got the internet connection back the IP looked the same. I flush all the routes (ie., # route flush) and then sh /etc/netstart, but that does not work. Have you also tried restarting pf at this point? I did not not do that this most recent time, but I seem to remember doing it last time without it helping. When I get time, I will try to recreate the situation by unplugging my modem and restarting pf. At this point, rebooting the AP machine is the only thing that I've been able to do to rectify the situation. From the research that I've done, it doesn't look as though I should have to reboot. Any suggestions? Thanks! -Neal
question regarding bgpd
Dear Sirs, we are running our AS in many locations (say AS65000) (location 1, AS65000, network n1.n1.n1.n1) Internet --- (location 2, same AS65000, network n2.n2.n2.n2) when we were running quagga, allowas-in made the work. otherwise there was no route except default between two locations. now we are replacing quagga with OpenBGPD, what is openbgpd's equivalent of allowas-in ? Cheers, Ilya Shipitsin P.S. just to make sure - I already read manuals and somehow I didn't find relevant information there. So, if all you can say is RTFM, please also say where exactly relevant information is located.
Alege o locuinta pentru tine
Daca aveti probleme cu vizionarea acestui email dati [click aici] pentru a vizualiza varianta online! [IMAGE] [IMAGE] Newsletter 25.01.2011 [IMAGE] CaseFaraIntermediari.roUrmariti-ne pe Facebook!Urmariti-ne pe Twitter!Urmariti-ne pe Blogger! [IMAGE] Ultimele anunturi adaugate Vezi toate anunturile [IMAGE] [IMAGE] Garsoniera - Berceni, Bucuresti Garsoniera - Berceni, Bucuresti 19.000 EUR VANZARE DETALII ; [IMAGE] [IMAGE] [IMAGE] [IMAGE] Teren - Vatra Dornei, Suceava Teren - Vatra Dornei, Suceava negociabil VANZARE DETALII ; [IMAGE] [IMAGE] [IMAGE] [IMAGE] Apartament 2 camere - 13 Septembrie, Bucuresti Apartament 2 camere - 13 Septembrie, Bucuresti 80.000 EUR VANZARE DETALII ; [IMAGE] [IMAGE] [IMAGE] [IMAGE] Garsoniera - Nerva Traian, Bucuresti Garsoniera - Nerva Traian, Bucuresti 48.000 EUR VANZARE DETALII ; [IMAGE] [IMAGE] [IMAGE] [IMAGE] Apartament 4 camere - Berceni, Bucuresti Apartament 4 camere - Berceni, Bucuresti 100.000 EUR VANZARE DETALII ; [IMAGE] [IMAGE] Publica si tu un anunt! [IMAGE] Stiri Imobiliare Vezi toate stirile [IMAGE] [IMAGE] Pretul caselor din SUA a inregistrat in noiembrie cea mai mare scadere din 2010 Pretul caselor din SUA a inregistrat in noiembrie cea mai mare scadere din 2010 Preturile de pe segmentul rezidential din Statele Unite au inregistrat in luna noiembrie cea mai mare scadere de anul trecut, potrivit economistilor chestionati de Bloomberg, semn ca piata de real-estate mai are de asteptat pana sa ! isi revina din criza. Astfel, pretul ar fi scazut in noiembrie ...[CITESTE TOT] [IMAGE] [IMAGE] [IMAGE] [IMAGE] Ce contine Hotararea de Guvern care aproba Prima casa 3 Ce contine Hotararea de Guvern care aproba Prima casa 3 Prima casa 3 a intrat in vigoare, fiind publicata Hotararea de Guvern nr. 40/2011 pentru modificarea si completarea normelor de implementare a programului. In acest an, cetatenii rombni care vor sa cumpere sau sa construiasca locuinte prin programul Prima casa trebuie sa aiba in vedere ...[CITESTE TOT] [IMAGE] [IMAGE] [IMAGE] [IMAGE] 2011 va fi anul executarilor silite 2011 va fi anul executarilor silite ProprietDE#ile celor care nu-E i mai pot plDti ratele la bancD sunt o mizD importantD pentru companiile din real estate care vor sD-E i mDreascD portofoliile. Anul acesta se anunE#D unul nn care numDrul imobilelor executate silit va fi mult mai mare. Ritmul executDrilor va fi ...[CITESTE TOT] [IMAGE] [IMAGE] Oferte turistice Vezi toate ofertele [IMAGE] [IMAGE] Pensiunea Coca - Predeal, Brasov Pensiunea Coca - Predeal, Brasov negociabil INCHIRIERE DETALII ; [IMAGE] [IMAGE] [IMAGE] [IMAGE] Pensiunea Pensiunea Vila Sorina Marina -Bran negociabil INCHIRIERE DETALII ; [IMAGE] [IMAGE] [IMAGE] [IMAGE] Pensiunea Codrut din Moieciu Pensiunea Codrut din Moieciu negociabil INCHIRIERE DETALII ; [IMAGE] [IMAGE] [IMAGE] [IMAGE] Pensiunea Pensiunea Vila Pivoda - Bran negociabil INCHIRIERE DETALII ; [IMAGE] [IMAGE] [IMAGE] [IMAGE] Hotel Ioana - Sinaia, Prahova Hotel Ioana - Sinaia, Prahova negociabil INCHIRIERE DETALII ; [IMAGE] [IMAGE] Publica si tu un anunt! Stiri economice Vezi toate stirile [IMAGE] [IMAGE] Parcul auto din Romania a crescut anul trecut cu 100.000 de unitati, atingand un nou maxim istoric Parcul auto din Romania a crescut anul trecut cu 100.000 de unitati, atingand un nou maxim istoric Datele Directiei Regim Permise de Conducere si Inmatriculare a Vehiculelor (DRPCIV) arata ca numarul total al vehiculelor din tara a crescut in 2010 cu 100.000 de unitati (+! 1,8%), parcul auto atingand un nou maxim istoric, de 5,418 milioane vehicule. Din totalul vehiculelor, circa 60% au motorizare ...[CITESTE TOT] [IMAGE] [IMAGE] [IMAGE] [IMAGE] Economia Marii Britanii a scazut cu 0,5% in trimestrul patru din 2010 Economia Marii Britanii a scazut cu 0,5% in trimestrul patru din 2010 Marea Britanie a inregistrat in ultimul trimestru din 2010 o scadere economica neasteptata de 0,5 procente, pe fondul reducerii activitatii din constructii, retail si servicii, informeaza Mediafax.ro. Economia s-a mentinut insa pe plus la nivel anual cu 1,7%. Analistii estimau in ultimul ...[CITESTE TOT] [IMAGE] [IMAGE] [IMAGE] [IMAGE] Pensionarii speciali consuma 10% din bugetul total de pensii Pensionarii speciali consuma 10% din bugetul total de pensii Pensionarii speciali, care nu reprezinta mai mult de 150.000 de oameni (adica mai putin de 3% din numarul total de pensionari de circa 6 milioane) costa statul anual un miliard de euro, adica 10% din bugetul total de pensii, scrie Mediafax. Cu toate acestea, Guvernul a dat vineri un comunicat de ...[CITESTE TOT] [IMAGE] [IMAGE] Scoala romaneasca Vezi toate scolile [IMAGE] [IMAGE] Scoala Nr. 195 Scoala Nr. 195 Lunca Bradului Nr. 2 DETALII ; [IMAGE] [IMAGE] [IMAGE] [IMAGE] Scoala Nr, 205 Scoala Nr, 205 Aleea Compozitorilor DETALII ; [IMAGE]
I have a question about Little Guy Network
Hello, I was searching online to find more info about Little Guy Network and I came across your information. Can you tell me, are you still involved with Little Guy Network? If you are, how are things going for you? Please let me know. Sincerely, Mel
