CompraNet 5.0,Sea un Experto en la Plataforma! 655165

2012-10-22 Thread Ing. Maria Alderete
655165

[IMAGE]
Taller de Subastas Electrónicas y Manejo de Plataforma CompraNet 5.0
29 de Octubre, Cd. de México.
Un taller totalmente práctico y especializado guiado por un experto,
desde los procedimientos más básicos de CompraNet 5.0 hasta los más
avanzados
Usted Aprenderá:
- Que es lo que no debemos perder de vista sobre el Sistema
- Alta y registro en CompraNet 5.0
- La Seguridad de las Propuestas electrónicas
- Qué es la FIEL, requisito indispensable y cómo obtenerla.
- Cómo filtrar licitaciones y contratos usando diferentes parámetros
Optimice sus procesos y ahorre dinero con esta práctica herramienta!
¡Reciba la información completa, Inscríbase y Capacítese!
Por favor responda este e-mail con los datos siguientes.
Empresa, Nombre, Teléfono, Email, Número de Interesados
En breve recibirá temario, reseña de expositor y tarifas.
Si lo prefiere comuníquese a los teléfonos donde con gusto uno de
nuestros ejecutivos le atenderá.
Teléfonos: (0133) 8851-2365, (0133) 8851-2741 con más de 10 líneas.
Pms Capacitación Efectiva de México es una empresa Registrada ante la
STPS
Trabajamos con expertos en la materia para poder brindar herramientas
tácticas, vanguardistas y de fácil aplicación.
Síguenos en Twitter@pmscapacitacion o bien en Facebook PMS de México
Tip del día! Planea: Evita los problemas de “vivir al momento” y crear
estrategias de último momento. Planea tus objetivos, elige un rumbo y
mantente. Anticipa posibles causales de emergencia y diseña planes de
contingencia previos que permitan conocer rutas a seguir. Esto ayudará a
crear metas en su compañía, compartirlas con su equipo y anticipar
obstáculos.
Copyright (C) 2011, PMS Capacitación Efectiva de México S.C. Derechos
Reservados.
E-Mail MARKETING SERVICE POWERED BY MEDIAMKTOOLS.
Este Mensaje ha sido enviado a misc@openbsd.org como usuario de Pms de
México o bien un usuario le refirió para recibir este boletín.
Como usuario de Pms de México, en este acto autoriza de manera expresa
que Pms de México le puede contactar vía correo electrónico u otros
medios.
ALTO, si en esta ocasión la información recibida no fue de su interés
pero desea recibir información personalizada en relación a otros temas
favor de indicarlo.
Si usted ha recibido este mensaje por error, haga caso omiso de el y de
antemano una sincera disculpa por la molestia, reporte su cuenta
respondiendo este correo con el subject BAJACOMPRANET
Unsubscribe to this mailing list, reply a blank message with the subject
UNSUBSCRIBE BAJACOMPRANET
Tenga en cuenta que la gestión de nuestras bases de datos es de suma
importancia para nosotros y no es intención de la empresa la
inconformidad del receptor, nuestra intención es promover herramientas de
utilidad para el

[demime 1.01d removed an attachment of type image/jpeg which had a name of 
image001.jpg]



Re: First order for KVM SWITCH -- Esunlink

2012-10-22 Thread athena
 Dear Purchasing  Manager,

 Good day!



 Esunlink is professional Manufacturer which specialize in KVM Switch 
Accessories  with high quality and reasonable price,OEM/ODM Services 

 also  can be offered upon your special request . We get a lot of high 
praise  from our Long-term cooperation customers--- Lenovo, ZTE ,Huawei, etc.



  Some products as below for your reference:

  

  For more information, please log on: www.esunlink.com.

  Always here to support you!



  Best regards,   


[demime 1.01d removed an attachment of type image/jpeg which had a name of 
Catch(09-26-15-2(10-22-13-51-24).jpg]

[demime 1.01d removed an attachment of type image/jpeg which had a name of 
=?gb2312?B?NDY1MDNfw/vGrCgwOS0yNS0xKDEwLTIyLTEzLTUxLTI0KS5qcGc=?=]



Re: First order for KVM SWITCH -- Esunlink

2012-10-22 Thread athena
 Dear Purchasing  Manager,

 Good day!



 Esunlink is professional Manufacturer which specialize in KVM Switch 
Accessories  with high quality and reasonable price,OEM/ODM Services 

 also  can be offered upon your special request . We get a lot of high 
praise  from our Long-term cooperation customers--- Lenovo, ZTE ,Huawei, etc.



  Some products as below for your reference:

  

  For more information, please log on: www.esunlink.com.

  Always here to support you!



  Best regards,   


[demime 1.01d removed an attachment of type image/jpeg which had a name of 
Catch(09-26-15-2(10-22-14-43-17).jpg]

[demime 1.01d removed an attachment of type image/jpeg which had a name of 
=?gb2312?B?NDY1MDNfw/vGrCgwOS0yNS0xKDEwLTIyLTE0LTQzLTE4KS5qcGc=?=]



Du har ett viktigt budskap *

2012-10-22 Thread SEB
Bäste Skandinaviska Enskilda Banken Kund

Vänligen uppdatera information

För att bekräfta Verified by Visa eller MasterCard SecureCode måste du
registrera dig på Oct 24, 2012.

För att uppdatera dina uppgifter går du vidare till vår säkra
webbformulär med klicka här.

Om du har några frågor, vi tillgängliga 24 timmar om dygnet, 7 dagar i
veckan.

Vänligen svara inte på detta automatiserade e-post

© 2012 SEB (publ)



Re: Slow VPN Performance

2012-10-22 Thread Michael Sideris
I ran a few more tests on a local setup:

* 2 x OpenBSD 5.1 (i386) w/ Gbit NICs connected on the same switch
* `cat /etc/ipsec.conf`: ike esp from 10.0.0.1 to 10.0.0.2 (and vice versa)
* pf is disabled

Running `isakmpd -K ; ipsecctl -f /etc/ipsec.conf` caps tcpbench at
~50Mbit speeds, same as our production tunnel. Without isakmpd the
speed ramps up to ~800Mbit or so, which is reasonable. Right now, I
have no idea what else I can try. Any suggestions are appreciated.

On Wed, Oct 17, 2012 at 10:05 AM, Michael Sideris urg...@gmail.com wrote:
 `ping -c10`

 (L-VPN -- G-VPN)

 PING G.G.G.G (G.G.G.G): 56 data bytes
 64 bytes from G.G.G.G: icmp_seq=0 ttl=255 time=17.073 ms
 64 bytes from G.G.G.G: icmp_seq=1 ttl=255 time=3.604 ms
 64 bytes from G.G.G.G: icmp_seq=2 ttl=255 time=3.666 ms
 64 bytes from G.G.G.G: icmp_seq=3 ttl=255 time=3.716 ms
 64 bytes from G.G.G.G: icmp_seq=4 ttl=255 time=3.639 ms
 64 bytes from G.G.G.G: icmp_seq=5 ttl=255 time=3.685 ms
 64 bytes from G.G.G.G: icmp_seq=6 ttl=255 time=3.734 ms
 64 bytes from G.G.G.G: icmp_seq=7 ttl=255 time=3.658 ms
 64 bytes from G.G.G.G: icmp_seq=8 ttl=255 time=3.707 ms
 64 bytes from G.G.G.G: icmp_seq=9 ttl=255 time=3.755 ms
 --- G.G.G.G ping statistics ---
 10 packets transmitted, 10 packets received, 0.0% packet loss
 round-trip min/avg/max/std-dev = 3.604/5.023/17.073/4.017 ms


 (G-VPN -- L-VPN)

 PING L.L.L.L (L.L.L.L): 56 data bytes
 64 bytes from L.L.L.L: icmp_seq=0 ttl=255 time=3.707 ms
 64 bytes from L.L.L.L: icmp_seq=1 ttl=255 time=3.746 ms
 64 bytes from L.L.L.L: icmp_seq=2 ttl=255 time=3.677 ms
 64 bytes from L.L.L.L: icmp_seq=3 ttl=255 time=3.717 ms
 64 bytes from L.L.L.L: icmp_seq=4 ttl=255 time=3.754 ms
 64 bytes from L.L.L.L: icmp_seq=5 ttl=255 time=3.670 ms
 64 bytes from L.L.L.L: icmp_seq=6 ttl=255 time=3.703 ms
 64 bytes from L.L.L.L: icmp_seq=7 ttl=255 time=3.742 ms
 64 bytes from L.L.L.L: icmp_seq=8 ttl=255 time=3.654 ms
 64 bytes from L.L.L.L: icmp_seq=9 ttl=255 time=3.693 ms
 --- L.L.L.L ping statistics ---
 10 packets transmitted, 10 packets received, 0.0% packet loss
 round-trip min/avg/max/std-dev = 3.654/3.706/3.754/0.057 ms


 It is also worth mentioning that if I send anything from one endpoint
 to the other, the speed is ~7.5MB/s. Better than a transfer between 2
 nodes from each site but still a bit slow for a 150Mbit/s -- 1Gbit/s
 link.

 On Wed, Oct 17, 2012 at 1:36 AM, Kent Fritz fritz.k...@gmail.com wrote:
 I didn't see anyone reply to this yet, so let me ask a really dumb question:
 what's the round-trip-time between G.G.G.G and L.L.L.L?  Are you running
 into the TCP limits due to this?


 On Tue, Oct 16, 2012 at 2:43 AM, Michael Sideris urg...@gmail.com wrote:

 Hey @misc,

 --- ENDPOINT INFO ---

 `dmesg`

 (G-VPN)
 OpenBSD 5.1 (GENERIC.MP) #207: Sun Feb 12 09:42:14 MST 2012
 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
 real mem = 2146172928 (2046MB)
 avail mem = 2074935296 (1978MB)
 mainbus0 at root
 bios0 at mainbus0: SMBIOS rev. 2.3 @ 0xfa850 (75 entries)
 bios0: vendor Dell Computer Corporation version A03 date 01/04/2006
 bios0: Dell Computer Corporation PowerEdge SC1425
 acpi0 at bios0: rev 0
 acpi0: sleep states S0 S4 S5
 acpi0: tables DSDT FACP APIC SPCR HPET MCFG
 acpi0: wakeup devices PCI0(S5) PALO(S5) PXH_(S5) PXHB(S5) PXHA(S5)
 PICH(S5)
 acpitimer0 at acpi0: 3579545 Hz, 24 bits
 acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
 cpu0 at mainbus0: apid 0 (boot processor)
 cpu0: Intel(R) Xeon(TM) CPU 2.80GHz, 2800.48 MHz
 cpu0:
 FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR,NXE,LONG
 cpu0: 1MB 64b/line 8-way L2 cache
 cpu0: apic clock running at 200MHz
 cpu1 at mainbus0: apid 1 (application processor)
 cpu1: Intel(R) Xeon(TM) CPU 2.80GHz, 2800.11 MHz
 cpu1:
 FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR,NXE,LONG
 cpu1: 1MB 64b/line 8-way L2 cache
 ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
 ioapic0: misconfigured as apic 0, remapped to apid 2
 ioapic1 at mainbus0: apid 3 pa 0xfec8, version 20, 24 pins
 ioapic1: misconfigured as apic 0, remapped to apid 3
 ioapic2 at mainbus0: apid 4 pa 0xfec80800, version 20, 24 pins
 ioapic2: misconfigured as apic 0, remapped to apid 4
 acpihpet0 at acpi0: 14318179 Hz
 acpimcfg0 at acpi0 addr 0xe000, bus 0-255
 acpiprt0 at acpi0: bus 0 (PCI0)
 acpiprt1 at acpi0: bus 1 (PALO)
 acpiprt2 at acpi0: bus 3 (PXHB)
 acpiprt3 at acpi0: bus 2 (PXHA)
 acpiprt4 at acpi0: bus 4 (PICH)
 acpicpu0 at acpi0
 acpicpu1 at acpi0
 ipmi at mainbus0 not configured
 pci0 at mainbus0 bus 0
 pchb0 at pci0 dev 0 function 0 Intel E7520 Host rev 0x09
 ppb0 at pci0 dev 2 function 0 Intel E7520 PCIE rev 0x09
 pci1 at ppb0 bus 1
 ppb1 at pci1 dev 0 function 0 Intel 6700PXH PCIE-PCIX rev 0x09
 pci2 at ppb1 bus 2
 em0 at 

Boleto Cliente

2012-10-22 Thread Moura Advogados Associados
- Message -
From: mo...@advogadosassociados.com.br
Sent: qua 11/07/12 14:00

Prezado Cliente,
Primeiramente agradecemos o seu contato.
Conforme acordo firmado junto a empresa credora,
estamos enviando o boleto de pagamento conforme o combinado:

Caso tenha problemas para visualizar o boleto, clique aqui

Instrucoes obrigatorias para impressao do boleto:

Configure sua impressora para papel A4 e impressao em 1 unica pagina.



Re: Slow VPN Performance

2012-10-22 Thread Michael Sideris
It seems that changing to hmac-md5 boosted network throughput from
~50Mbit/s to ~100Mbit/s which is decent and reasonable. I am going to
experiment a bit further with `scrub` options in pf.conf to see if I
can squeeze more performance out of the link. The question now
ishow much is security affected by using hmac-md5 vs the default
hmac-sha2-256? Should I consider using better CPUs on the servers in
order to gain better performance through a stronger algorithm?

On Mon, Oct 22, 2012 at 2:58 PM, Mike Belopuhov m...@belopuhov.com wrote:
 On Tue, Oct 16, 2012 at 11:43 AM, Michael Sideris urg...@gmail.com wrote:
 Both endpoints run stock OpenBSD 5.1 (amd64). We use the VPN link to
 manage our platform remotely and perform daily backups. G-VPN runs on
 a 150Mbit/s link while L-VPN on a 1Gbit/s link. On one hand, our VPN
 setup runs really nicely. The connections are routed properly, pf is
 godsent and authpf works wonders. On the other hand, network
 throughput over the VPN tunnel never exceeds 3.4MB/s (ftp, scp, rsync,
 etc...)

 I welcome any suggestions. Keep in mind that this is our production
 VPN tunnel, so I cannot shut it down at will. Thanks in advance.

 ---
 Mike


 Hi,

 I suggest a couple of changes:

  1) use cheaper hash function (md5 or at least sha1)
  2) use mss fixup so that your packets don't get fragmented

 The first point relates to your ike rules in ipsec.conf:

 ike esp from $local_net to $remote_net peer $remote_ip \
 quick auth hmac-md5 enc aes

 The second point relates to pf rules in pf.conf:

 match in scrub (max-mss 1440)

 You can experiment with the values in the 1400-1480 range.

 Also, please make sure that you don't run tcpbench or any
 other benchmarking on the vpn gates themselves as it offsets
 the measurements.



Problem with server upgrade, upgrade or hardware failure?

2012-10-22 Thread chris
I did an update to my remote server using the ssh method, since I did
not have Java built
But it failed to reboot
From an IP KVM on someone elses computer with Java.
Boots into ddb right after boot
(with message below)

However, after I type boot -s to get into single user mode, I get ddb
with a message similar to:

kernal protection fault trap
Stopped at calibrate_cyclecounter, etc

If I type boot boot bsd.rd,
the server immediately shuts down and reboots
I am building Java right now.

Does this sound like a hardware failure or bad upgrade??
I am going to try upgrade with IP KVM after Java finishes building
Java built but I cannot get firefox35 to work.
I am on latest snapshot for i386
[Exception... Component returned failure code: 0x80570016
(NS_ERROR_XPC_GS_RETURNED_FAILURE) [nsIJSCID.getService]  nsresult:
0x80570016 (NS_ERROR_XPC_GS_RETURNED_FAILURE)  location: JS frame ::
chrome://browser/content/utilityOverlay.js :: getShellService :: line
312  data: no]

Chris Bennett



Re: Slow VPN Performance

2012-10-22 Thread Mike Belopuhov
On Mon, Oct 22, 2012 at 4:10 PM, Michael Sideris urg...@gmail.com wrote:
 It seems that changing to hmac-md5 boosted network throughput from
 ~50Mbit/s to ~100Mbit/s which is decent and reasonable. I am going to
 experiment a bit further with `scrub` options in pf.conf to see if I
 can squeeze more performance out of the link. The question now
 ishow much is security affected by using hmac-md5 vs the default
 hmac-sha2-256?

It's more a question of how often do you rekey? You also should not
disable Perfect Forward Secrecy that recomputes DH values every
time you renew your phase 2 key. And while there are no known
serious attacks on HMAC-MD5 it all depends on how important the
data that you're protecting is and if you have to be compliant with
any regulations that might mandate use of SHA2.

  Should I consider using better CPUs on the servers in
 order to gain better performance through a stronger algorithm?


You can get 600-750Mbps (depending on the CPU speed) in the
AES-NI enabled setup (using AES-GCM that is).

 On Mon, Oct 22, 2012 at 2:58 PM, Mike Belopuhov m...@belopuhov.com wrote:
 On Tue, Oct 16, 2012 at 11:43 AM, Michael Sideris urg...@gmail.com wrote:
 Both endpoints run stock OpenBSD 5.1 (amd64). We use the VPN link to
 manage our platform remotely and perform daily backups. G-VPN runs on
 a 150Mbit/s link while L-VPN on a 1Gbit/s link. On one hand, our VPN
 setup runs really nicely. The connections are routed properly, pf is
 godsent and authpf works wonders. On the other hand, network
 throughput over the VPN tunnel never exceeds 3.4MB/s (ftp, scp, rsync,
 etc...)

 I welcome any suggestions. Keep in mind that this is our production
 VPN tunnel, so I cannot shut it down at will. Thanks in advance.

 ---
 Mike


 Hi,

 I suggest a couple of changes:

  1) use cheaper hash function (md5 or at least sha1)
  2) use mss fixup so that your packets don't get fragmented

 The first point relates to your ike rules in ipsec.conf:

 ike esp from $local_net to $remote_net peer $remote_ip \
 quick auth hmac-md5 enc aes

 The second point relates to pf rules in pf.conf:

 match in scrub (max-mss 1440)

 You can experiment with the values in the 1400-1480 range.

 Also, please make sure that you don't run tcpbench or any
 other benchmarking on the vpn gates themselves as it offsets
 the measurements.



UPDATE: net/openfire

2012-10-22 Thread Marc Peters
Hi List,

trivial diff to update Openfire to 3.7.1 (attached as file because
thunderbird wraps the lines and breaks it).

Tested on i386.

ok?

marc

[demime 1.01d removed an attachment of type text/x-patch which had a name of 
openfire-3.7.1.patch]



Re: UPDATE: net/openfire

2012-10-22 Thread Marc Peters
On 10/22/2012 06:45 PM, Marc Peters wrote:
 Hi List,
 
 trivial diff to update Openfire to 3.7.1 (attached as file because
 thunderbird wraps the lines and breaks it).
 
 Tested on i386.
 
 ok?
 
 marc
 
 [demime 1.01d removed an attachment of type text/x-patch which had a name of 
 openfire-3.7.1.patch]
 
sorry, choosed the wrong list :(



Re: Problem with server upgrade, upgrade or hardware failure?

2012-10-22 Thread chris
  Original Message 
 Subject: Problem with server upgrade, upgrade or hardware failure?
 From: ch...@bennettconstruction.us
 Date: Mon, October 22, 2012 10:02 am
 To: misc@openbsd.org
 
 
 I did an update to my remote server using the ssh method, since I did
 not have Java built
 But it failed to reboot
 From an IP KVM on someone elses computer with Java.
 Boots into ddb right after boot
 (with message below)
 
 However, after I type boot -s to get into single user mode, I get ddb
 with a message similar to:
 
 kernal protection fault trap
 Stopped at calibrate_cyclecounter, etc
 
 If I type boot boot bsd.rd,
 the server immediately shuts down and reboots
 I am building Java right now.
 
 Does this sound like a hardware failure or bad upgrade??
 I am going to try upgrade with IP KVM after Java finishes building
 Java built but I cannot get firefox35 to work.
 I am on latest snapshot for i386
 [Exception... Component returned failure code: 0x80570016
 (NS_ERROR_XPC_GS_RETURNED_FAILURE) [nsIJSCID.getService]  nsresult:
 0x80570016 (NS_ERROR_XPC_GS_RETURNED_FAILURE)  location: JS frame ::
 chrome://browser/content/utilityOverlay.js :: getShellService :: line
 312  data: no]
 
 Chris Bennett

I couldn't find anything on Google except diff's for this. Unhelpful.

The server has been running since early 2007, so it seems reasonable
 that a reboot, including several hard reboots might bring up a hardware
 failure.

These are unmanaged servers, so unless I decide that the hardware is
broken, I
have to solve the problem myself.
Since I can't get F'ing firefox35 to work, I'm a little pissed!
Chris Bennett



Contacto con Dto Comercial y Ventas

2012-10-22 Thread Contacto I-A
Si tienes una Empresa, Comercio, Institución. Etc. Deberías mirar esto

Ver con audio

http://www.youtube.com/watch?v=jowa1ZCy_pQ /p



Re: Recommended new laptop under US$800 for OpenBSD

2012-10-22 Thread Why 42? The lists account.
But returning, if possible, to the original question ...

On Thu Oct  4 19:23:41 2012, Tito Mari Francis Escaño wrote:
 I'd like to seek your advise what new laptop brand and model should I buy
 that is fully functional (video, LAN, Wifi, sound) with OpenBSD 5.x.
 ...

I have also been considering exactly this issue. Currently I'm using
an elderly Thinkpad R61 with Fedora (Nvidia hardware) and XFCE. Frankly
I'm starting to get a bit cheesed of with the seemingly ever increasing
complexity or cruft of Linux and have been wondering what to do next.
Also that R61 seems to be getting heavier and heavier :-)

Well I don't fancy Windows. And while Macbook hardware looks both light
and attractive, I'm not convinced that I'd really be any better off ...

Can it be that there is really no good current solution using OpenBSD?

Some Internet searching indicated that there are people using OpenBSD on
laptops (including Apple laptop hardware?) but I also see a lot of issues
mentioned e.g. in the areas of suspend/resume, wireless networking and
power management. At least some of this info. maybe dated or simply
cargo.

I know I talked to Theo once at EuroBSDcon (2011? - Karlsruhe anyway) and
I got the impression that a lot of work was going on then to improve acpi
support. Does that continue to be the case? I guess I'm really asking if
laptop platform support is a goal for OpenBSD?

Would it be possible/feasible to sponsor the development of the necessary
features/fixes in some way?

My day to day requirements are quite basic: a lightweight, fast system,
offering the standard Unix toolset and providing solid networking support
(wired + wireless) together with good battery life (e.g. 4 or 5 hours).
On top I typically use mutt, curl, ssh, screen/tmux, firefox, evince,
libreoffice, etc. A windowing system  desktop is necessary, but XFCE is
fine for me - GNOME has gone a step too far (imho).

Actually what might be ideal would be the new Google/Samsung Chromebook
but with the ChromeOS replaced by OpenBSD - cheap too at ~200 UK Pounds.

Comments?

Yours,
Robb.

I keep six honest serving-men
(They taught me all I knew);
Their names are What and Why and When
And How and Where and Who.

Rudyard Kipling in his Just So Stories 



Re: http/https timeouts with OpenBSD based firewall

2012-10-22 Thread James Shupe
On 10/22/12 15:16, Marcin wrote:
 Hi,

 I recently upgraded to 5.1, but I was able to reproduce the issue
 described below with 4.8, 5.0 and 5.2 snapshot.

 After the upgrade I discovered that workstations behind the OpenBSD
 firewall experience occasional timeouts
 while trying to access web servers running IIS 6.0 on Windows 2003
 Server. The firewall itself is not affected.
 The problem is rather intermittent and happens with 30%-50%
 requests.The workstations are running Windows 7,
 Windows XP and Linux.

 I was also able to reproduce the issue by installing Windows 2003 R2
 server in default configuration,
 setting up extremely basic PF rules to redirect port 80 and accessing
 the server from the Internet. I was unable to expose
 this issue in LAN, which suggests it might happen only on links slower
 than 100Mbit. However, it seems to
 be hardware independent (although all tests were run on i386 arch) as
 I achieve the same results on three
 different machines in three different geographic locations connected
 via independent ISPs.

 This is how the problem can be exposed with curl:

 #curl -vI http://www.startvbdotnet.com/
 * About to connect() to www.startvbdotnet.com port 80 (#0)
 *   Trying 64.79.160.13... connected
 HEAD / HTTP/1.1
 User-Agent: curl/7.22.0 (i686-pc-linux-gnu) libcurl/7.22.0 OpenSSL/1.0.1
zlib/1.2.3.4 libidn/1.23 librtmp/2.3
 Host: www.startvbdotnet.com
 Accept: */*

 * Recv failure: Connection reset by peer
 * Closing connection #0
 curl: (56) Recv failure: Connection reset by peer

 I uploaded the tcpdump from machine running curl here:
 http://pastebin.com/AkqCeQwW

 As far as I can tell, the Win 2008 and Win 2012 are not affected.
 Also, the 4.5 seemed to be free from this problem.

 Thanks in advance for any suggestions / workarounds!

 --
 Regards,
 Marcin




Please post the following things:

- output of `pfctl -si`
- your pf ruleset
- output of `vmstat -m`

--
James Shupe

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]



Re: Problem with server upgrade, upgrade or hardware failure?

2012-10-22 Thread chris
  Original Message 
 Subject: Re: Problem with server upgrade, upgrade or hardware failure?
 From: Jan Stary h...@stare.cz
 Date: Mon, October 22, 2012 3:20 pm
 To: ch...@bennettconstruction.us
 
 
 On Oct 22 09:31:24, ch...@bennettconstruction.us wrote:
  
  
    Original Message 
   Subject: Re: Problem with server upgrade, upgrade or hardware failure?
   From: Jan Stary h...@stare.cz
   Date: Mon, October 22, 2012 11:10 am
   To: ch...@bennettconstruction.us
   
   
   On Oct 22 08:02:04, ch...@bennettconstruction.us wrote:
I did an update to my remote server using the ssh method, since I did
not have Java built
   
   Have you properly aligned the quanizicants before?
   
  
  Ha Ha,
  
  I couldn't find anything on Google except diff's for this. Unhelpful.
 
 diffs for what?
 
 Srsly, what are you trying to do? What is the ssh method?
 Why are you upgrading in the first place?  To have java installed?
 You don't need to upgrade for that.
 
  The server has been running since early 2007, so it seems reasonable
   that a reboot, including several hard reboots might bring up a hardware
   failure.
 
 Why?
 
  These are unmanaged servers, so unless I decide that the hardware is
  broken, I have to solve the problem myself. Since I can't get F'ing
  firefox35 to work, I'm a little pissed!
 
 So, you are running firefox35 on unmanaged servers?
 
 Seriously, you message doesn't give a hint
 what you are trying to do in the first place and why.
 
 What are you doing?
 Why are you doing it?
 What problems are you having with that?



I guess that is why no one has replied.

I have a remote server for my websites and PostgreSQL databases for my
business.
I used the http://www.openbsd.org/faq/upgrade51.html#upgrade:
Upgrading without install kernel (modified to -current files)
This is NOT the recommended process. Use the install kernel method if at
all possible!

I have successfully used this method (for -current, never release)
several times

I hadn't built Java addon for firefox35 recently because I always run
-current or close to it.

I built Java, but I cannot get any (including a slightly older version)
firefox35 to work.

I cannot achieve anything without IP access with Java.

If this is a hardware failure, I will ask for a replacement of whatever
it is that is broken.
If this is my fault, I can re-install or re-upgrade remotely, but I do
not have access to the interface I need until Wed.

Chris Bennett



Re: Problem with server upgrade, upgrade or hardware failure?

2012-10-22 Thread chris
  Original Message 
 Subject: Re: Problem with server upgrade, upgrade or hardware failure?
 From: Jan Stary h...@stare.cz
 Date: Mon, October 22, 2012 4:54 pm
 To: ch...@bennettconstruction.us
 
 
 On Oct 22 14:10:52, ch...@bennettconstruction.us wrote:
  
  
    Original Message 
   Subject: Re: Problem with server upgrade, upgrade or hardware failure?
   From: Jan Stary h...@stare.cz
   Date: Mon, October 22, 2012 3:20 pm
   To: ch...@bennettconstruction.us
   
   
   On Oct 22 09:31:24, ch...@bennettconstruction.us wrote:


  Original Message 
 Subject: Re: Problem with server upgrade, upgrade or hardware failure?
 From: Jan Stary h...@stare.cz
 Date: Mon, October 22, 2012 11:10 am
 To: ch...@bennettconstruction.us
 
 
 On Oct 22 08:02:04, ch...@bennettconstruction.us wrote:
  I did an update to my remote server using the ssh method, since I 
  did
  not have Java built
 
 Have you properly aligned the quanizicants before?
 

Ha Ha,

I couldn't find anything on Google except diff's for this. Unhelpful.
   
   diffs for what?
   
   Srsly, what are you trying to do? What is the ssh method?
   Why are you upgrading in the first place?  To have java installed?
   You don't need to upgrade for that.
   
The server has been running since early 2007, so it seems reasonable
 that a reboot, including several hard reboots might bring up a hardware
 failure.
   
   Why?
   
These are unmanaged servers, so unless I decide that the hardware is
broken, I have to solve the problem myself. Since I can't get F'ing
firefox35 to work, I'm a little pissed!
   
   So, you are running firefox35 on unmanaged servers?
   
   Seriously, you message doesn't give a hint
   what you are trying to do in the first place and why.
   
   What are you doing?
   Why are you doing it?
   What problems are you having with that?
  
  
  
  I guess that is why no one has replied.
  
  I have a remote server for my websites and PostgreSQL databases for my
  business.
  I used the http://www.openbsd.org/faq/upgrade51.html#upgrade:
  Upgrading without install kernel (modified to -current files)
  This is NOT the recommended process. Use the install kernel method if at
  all possible!
  
  I have successfully used this method (for -current, never release)
  several times
  
  I hadn't built Java addon for firefox35 recently because I always run
  -current or close to it.
 
 This where you are losing me.
 You said it was a reopte server running webistes and PostgreSQL.
 What does firefox35 and a java addon have to do with that?
 
 
  I built Java,
 
 On a PostgreSQL server? Why?
 
  but I cannot get any (including a slightly older version)
  firefox35 to work.
 
 On a PostgreSQL server?
 
  I cannot achieve anything without IP access with Java.
 
 What does that sentence even mean?
 What exactly are you trying to do and what exactly happens?
 
 
  If this is a hardware failure,
 
 What is? A nonworking java plugin for firefox?
 Why would that be a hw failure? How do you even
 run firefox _on_your_remote_server_ ?


I am in Austin Texas, with my cute little crappy laptop in a truck stop
with lousy Wifi.
I have had a remote server in Lansing Michigan since 2007.
They offer a remote IP based Keyboard, video and mouse attachment that
they connect to my server.
I must have a web browser with Java in order to use it, from this or any
other location in the world.
I do not own the server, I rent it.



account update

2012-10-22 Thread St.George Bank
Please note that we have made new and important changes to your St.George
Bank account.

Login to view new updates.