[patch] src/usr.bin/calendar/calendars/calendar.music: JJ Cale 1938-2013

2013-09-30 Thread Matthew Clarke
Index: calendar.music
===
RCS file: /cvs/src/usr.bin/calendar/calendars/calendar.music,v
retrieving revision 1.27
diff -u -r1.27 calendar.music
--- calendar.music  7 Jul 2011 13:52:55 -   1.27
+++ calendar.music  30 Sep 2013 05:38:51 -
@@ -304,6 +304,7 @@
 07/25  Bob Dylan goes electric at the Newport Folk Festival, 1965
 07/25  Crosby, Stills, Nash  Young debut at the Fillmore East, 1969
 07/26  Mick Jagger is born in Kent, England, 1943
+07/26  JJ Cale (John Weldon Cale) dies in La Jolla, California, 2013
 07/27  Enrique Granados is born in Lleida, Catalonia, Spain, 1867
 07/28  Johann Sebastian Bach dies in Leipzig, Germany, 1750
 07/28  The Watkins Glen Summer Jam opens, 1973
@@ -485,6 +486,7 @@
 12/04  Frank Zappa dies in his Laurel Canyon home shortly before 18:00, 1993
 12/04  Lord Benjamin Britten dies, 1976
 12/05  Wolfgang Amadeus Mozart dies in Vienna, Austria, 1791
+12/05  JJ Cale (John Weldon Cale) is born in Oklahoma City, Oklahoma, 1938
 12/06  First sound recording made by Thomas Edison, 1877
 12/06  The Rolling Stones play Altamont Speedway near San Francisco, 1969
 12/07  Harry Chapin is born in New York City, 1942

-- 
Thank goodness modern convenience is a thing of the remote future.
-- Pogo, by Walt Kelly



SSH as root with specific IP

2013-09-30 Thread John Tate
I want to be able to log in as root by SSH with a specific IP address.
This is so rsync can log in to the server easily and backup many files
owned by many different users and groups. Rather than a script on the
server logging into the server with the backups with many files and
many different users.

Can it be done?

-- 
www.johntate.org



Re: SSH as root with specific IP

2013-09-30 Thread Jay Patel
ssh -lroot youriphere -p1157

-l ==login
-p == port number


On Mon, Sep 30, 2013 at 11:59 AM, John Tate j...@johntate.org wrote:

 I want to be able to log in as root by SSH with a specific IP address.
 This is so rsync can log in to the server easily and backup many files
 owned by many different users and groups. Rather than a script on the
 server logging into the server with the backups with many files and
 many different users.

 Can it be done?

 --
 www.johntate.org



Re: [patch] src/usr.bin/calendar/calendars/calendar.music: JJ Cale 1938-2013

2013-09-30 Thread Jason McIntyre
On Sun, Sep 29, 2013 at 10:45:28PM -0700, Matthew Clarke wrote:
 Index: calendar.music
 ===
 RCS file: /cvs/src/usr.bin/calendar/calendars/calendar.music,v
 retrieving revision 1.27
 diff -u -r1.27 calendar.music
 --- calendar.music7 Jul 2011 13:52:55 -   1.27
 +++ calendar.music30 Sep 2013 05:38:51 -
 @@ -304,6 +304,7 @@
  07/25Bob Dylan goes electric at the Newport Folk Festival, 1965
  07/25Crosby, Stills, Nash  Young debut at the Fillmore East, 1969
  07/26Mick Jagger is born in Kent, England, 1943
 +07/26JJ Cale (John Weldon Cale) dies in La Jolla, California, 2013
  07/27Enrique Granados is born in Lleida, Catalonia, Spain, 1867
  07/28Johann Sebastian Bach dies in Leipzig, Germany, 1750
  07/28The Watkins Glen Summer Jam opens, 1973
 @@ -485,6 +486,7 @@
  12/04Frank Zappa dies in his Laurel Canyon home shortly before 
 18:00, 1993
  12/04Lord Benjamin Britten dies, 1976
  12/05Wolfgang Amadeus Mozart dies in Vienna, Austria, 1791
 +12/05JJ Cale (John Weldon Cale) is born in Oklahoma City, Oklahoma, 
 1938
  12/06First sound recording made by Thomas Edison, 1877
  12/06The Rolling Stones play Altamont Speedway near San Francisco, 
 1969
  12/07Harry Chapin is born in New York City, 1942
 
 -- 
 Thank goodness modern convenience is a thing of the remote future.
   -- Pogo, by Walt Kelly
 

committed, thanks!
jmc



Re: SSH as root with specific IP

2013-09-30 Thread David Coppa
On Mon, Sep 30, 2013 at 8:29 AM, John Tate j...@johntate.org wrote:
 I want to be able to log in as root by SSH with a specific IP address.
 This is so rsync can log in to the server easily and backup many files
 owned by many different users and groups. Rather than a script on the
 server logging into the server with the backups with many files and
 many different users.

 Can it be done?

man sshd_config

And look for  Match blocks.



Re: SSH as root with specific IP

2013-09-30 Thread Eric Johnson
On Mon, 30 Sep 2013, John Tate wrote:

 I want to be able to log in as root by SSH with a specific IP address.
 This is so rsync can log in to the server easily and backup many files
 owned by many different users and groups. Rather than a script on the
 server logging into the server with the backups with many files and
 many different users.
 
 Can it be done?

I assume you mean that you want the source to be from a specific IP 
address.  That is, you have more than one address on the computer and you 
want the request to be from an alias.  Is that right?  If so, try this:

ssh -b 192.168.1.201 root@192.168.1.76 

If you are connecting to a specific IP address, that is rather trivial.  
Unless, of course, you do not permit logins to 
root.

Are you using RSA or DSA keys to do it?  If so, you can set 

PermitRootLogin without-password

in your /etc/ssh/sshd_config file.

To make the connection automagically, you can either leave the pasword 
blank when running ssh-keygen or use the keychain program so that you only 
have to enter the password when you bring up the machine.

There is a method whereby you can create a certificate signed with a key 
issued by a certificate authority that can restrict a connection to the 
server from one particular host.   That way, if someone else manages to 
get a copy of your host key, they will not be able to use it to connect to 
the server from their machine if their machine is not on the address list.

Disclaimer:  I've never tried using ssh certificates so you might want 
something from someone who knows more about them.

Eric Johnson



Re: SSH as root with specific IP

2013-09-30 Thread Gilles Cafedjian
Le 2013-09-30 08:29, John Tate a écrit : 

 I want to be able to log in as root by SSH with a specific IP address.
 This is so rsync can log in to the server easily and backup many files
 owned by many different users and groups. Rather than a script on the
 server logging into the server with the backups with many files and
 many different users.
 
 Can it be done?

You can use Match statement in your sshd_config to allow root
connections only on a particular IP. 

Also, if you use RSA, DSA or ECDSA key, you should add it to the file
authorized_keys on the server and restrict this key to a single command
with command=...
Do not turn on PermitRootLogin without Match statement. 

see sshd(8) for the keywords you can add in your authorized_keys to
limit the root access. 



OpenBSD not forwarding to specific sites

2013-09-30 Thread John Tate
I am having trouble with IP forwarding to specific sites on a very
typical configuration. The router itself can access these sites but
clients can not. I have looked in obvious places on the clients, but I
cannot find a cause. I reinstalled OpenBSD on the router after getting
SSL errors where SSL servers could not be reached from clients, and I
bought a cheap Netgear router to use which works fine ruling out that
my ISP is causing problems.

I really need to find out what is causing these issues with my
Internet it is something bizarre. My server I've literally only
changed the following files...

/etc/hostname.fxp0
/etc/hostname.athn0
/etc/hostname.pppoe0
/etc/hostname.xl0
/var/named/etc/named.conf
/etc/rndc.conf
/etc/resolv.conf
/etc/pf.conf
/etc/dhcpd.conf

These are all pretty straight forward so I don't understand what the
problem is. The existing SSL problem just came out of nowhere with no
changes.

# cat /etc/hostname.athn0
inet 192.168.1.1 255.255.255.0 192.168.1.255
up media autoselect mode 11g mediaopt hostap nwid KintaroAP chan 11 \
wpa wpakey FallInLove2013 wpaprotos wpa2
# cat /etc/hostname.pppoe0
inet 0.0.0.0 255.255.255.255 NONE \
pppoedev xl0 authproto pap \
authname 'x...@eftel.net.au' authkey '' up
dest 0.0.0.1
!/sbin/route add default -ifp pppoe0 0.0.0.1
# cat /etc/hostname.xl0
up

# cat /var/named/etc/named.conf
// $OpenBSD: named-simple.conf,v 1.10 2009/11/02 21:12:56 jakob Exp $
//
// Example file for a simple named configuration, processing both
// recursive and authoritative queries using one cache.


// Update this list to include only the networks for which you want
// to execute recursive queries. The default setting allows all hosts
// on any IPv4 networks for which the system has an interface, and
// the IPv6 localhost address.
//
acl clients {
localnets;
::1;
};

options {
version ; // remove this to allow version queries

listen-on{ 192.168.0.1; 192.168.1.1; 127.0.0.1; };
listen-on-v6 { any; };

forwarders   { 8.8.8.8; 8.8.4.4; };

empty-zones-enable yes;

allow-recursion { clients; };
};

logging {
category lame-servers { null; };
};

// Standard zones
//
#zone . {
#   type hint;
#   file db.cache;
#};

zone localhost {
type master;
file standard/localhost;
allow-transfer { localhost; };
};

zone 127.in-addr.arpa {
type master;
file standard/loopback;
allow-transfer { localhost; };
};

zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa
{
type master;
file standard/loopback6.arpa;
allow-transfer { localhost; };
};

#zone kab.loc {
#   type master;
#   file master/kab.loc;
#};

#zone 0.168.192.in-addr.arpa {
#   type master;
#   file master/db.0.168.192;
#};

#zone 1.168.192.in-addr-arpa {
#   type master;
#   file master/db.1.168.192;
#};

// Master zones
//
//zone myzone.net {
//  type master;
//  file master/myzone.net;
//};

// Slave zones
//
//zone otherzone.net {
//  type slave;
//  file slave/otherzone.net;
//  masters { 192.0.2.1; [...;] };
//};

key rndc-key {
algorithm hmac-md5;
secret XXX;
};

controls {
  inet 127.0.0.1 port 953
  allow { 127.0.0.1; } keys { rndc-key; };
};

# cat /etc/pf.conf
#Firewall ruleset for KintaroABODE router.

int_if=fxp0
wifi_if = athn0

tcp_services={ 22, 113 }
icmp_types=echoreq

fekete=192.168.0.3
fekete_tcp={ 17001, 8333 }
fekete_udp={ 8333 }
mises=192.168.0.4
mises_tcp={ 25565 }

#options

set block-policy drop
set loginterface egress
set skip on lo

anchor ftp-proxy/*
pass in on $int_if inet proto tcp to any port ftp \
divert-to 127.0.0.1 port 8021

table sshguard persist

#match rules
match out on egress inet from !(egress:network) to any nat-to (egress:0)

#filter rules
block in log
pass out quick

antispoof quick for { lo $int_if $wifi_if }

pass in on egress inet proto tcp from any to (egress) \
port $tcp_services

block in quick on egress proto tcp from sshguard \
to any port ssh label ssh bruteforce

pass in on egress inet proto tcp from any to (egress) port $fekete_tcp
rdr-to $fekete
pass in on egress inet proto tcp from any to (egress) port $fekete_udp
rdr-to $fekete
pass in on egress inet proto tcp from any to (egress) port $mises_tcp
rdr-to $mises

pass in inet proto icmp all icmp-type $icmp_types
pass in on $int_if
pass in on $wifi_if

There is nothing related in the messages or daemon log.


# cat /var/log/daemon
Sep 30 22:23:08 menger savecore: no core dump
Sep 30 22:24:12 menger dhclient[31387]: DHCPREQUEST on fxp0 to
255.255.255.255 port 67
Sep 30 22:24:19 menger last message repeated 3 times
Sep 30 22:24:26 menger dhclient[31387]: DHCPDISCOVER on fxp0 to
255.255.255.255 port 67 interval 1
Sep 30 22:24:27 menger dhclient[31387]: DHCPDISCOVER on fxp0 to
255.255.255.255 port 67 interval 2
Sep 30 22:24:29 menger 

Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread Darren Tucker
On Mon, Sep 30, 2013 at 11:18:55PM +1000, John Tate wrote:
 I am having trouble with IP forwarding to specific sites on a very
 typical configuration. The router itself can access these sites but
 clients can not. I have looked in obvious places on the clients, but I
 cannot find a cause. I reinstalled OpenBSD on the router after getting
 SSL errors where SSL servers could not be reached from clients, and I
 bought a cheap Netgear router to use which works fine ruling out that
 my ISP is causing problems.
 
 I really need to find out what is causing these issues with my
 Internet it is something bizarre. My server I've literally only
 changed the following files...
 
 /etc/hostname.fxp0
 /etc/hostname.athn0
 /etc/hostname.pppoe0
 /etc/hostname.xl0
 /var/named/etc/named.conf
 /etc/rndc.conf
 /etc/resolv.conf
 /etc/pf.conf
 /etc/dhcpd.conf

Is IP forwarding (net.inet.ip.forwarding=1) on?  It's in sysctl.conf
(not in that list) and it's off by default.

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.



Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread Vijay Sankar

Quoting John Tate j...@johntate.org:


I am having trouble with IP forwarding to specific sites on a very
typical configuration. The router itself can access these sites but
clients can not. I have looked in obvious places on the clients, but I
cannot find a cause. I reinstalled OpenBSD on the router after getting
SSL errors where SSL servers could not be reached from clients, and I
bought a cheap Netgear router to use which works fine ruling out that
my ISP is causing problems.

I really need to find out what is causing these issues with my
Internet it is something bizarre. My server I've literally only
changed the following files...

/etc/hostname.fxp0
/etc/hostname.athn0
/etc/hostname.pppoe0
/etc/hostname.xl0
/var/named/etc/named.conf
/etc/rndc.conf
/etc/resolv.conf
/etc/pf.conf
/etc/dhcpd.conf

These are all pretty straight forward so I don't understand what the
problem is. The existing SSL problem just came out of nowhere with no
changes.

# cat /etc/hostname.athn0
inet 192.168.1.1 255.255.255.0 192.168.1.255
up media autoselect mode 11g mediaopt hostap nwid KintaroAP chan 11 \
wpa wpakey FallInLove2013 wpaprotos wpa2
# cat /etc/hostname.pppoe0
inet 0.0.0.0 255.255.255.255 NONE \
pppoedev xl0 authproto pap \
authname 'x...@eftel.net.au' authkey '' up
dest 0.0.0.1
!/sbin/route add default -ifp pppoe0 0.0.0.1
# cat /etc/hostname.xl0
up

# cat /var/named/etc/named.conf
// $OpenBSD: named-simple.conf,v 1.10 2009/11/02 21:12:56 jakob Exp $
//
// Example file for a simple named configuration, processing both
// recursive and authoritative queries using one cache.


// Update this list to include only the networks for which you want
// to execute recursive queries. The default setting allows all hosts
// on any IPv4 networks for which the system has an interface, and
// the IPv6 localhost address.
//
acl clients {
localnets;
::1;
};

options {
version ; // remove this to allow version queries

listen-on{ 192.168.0.1; 192.168.1.1; 127.0.0.1; };
listen-on-v6 { any; };

forwarders   { 8.8.8.8; 8.8.4.4; };

empty-zones-enable yes;

allow-recursion { clients; };
};

logging {
category lame-servers { null; };
};

// Standard zones
//
#zone . {
#   type hint;
#   file db.cache;
#};

zone localhost {
type master;
file standard/localhost;
allow-transfer { localhost; };
};

zone 127.in-addr.arpa {
type master;
file standard/loopback;
allow-transfer { localhost; };
};

zone  
1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa

{
type master;
file standard/loopback6.arpa;
allow-transfer { localhost; };
};

#zone kab.loc {
#   type master;
#   file master/kab.loc;
#};

#zone 0.168.192.in-addr.arpa {
#   type master;
#   file master/db.0.168.192;
#};

#zone 1.168.192.in-addr-arpa {
#   type master;
#   file master/db.1.168.192;
#};

// Master zones
//
//zone myzone.net {
//  type master;
//  file master/myzone.net;
//};

// Slave zones
//
//zone otherzone.net {
//  type slave;
//  file slave/otherzone.net;
//  masters { 192.0.2.1; [...;] };
//};

key rndc-key {
algorithm hmac-md5;
secret XXX;
};

controls {
  inet 127.0.0.1 port 953
  allow { 127.0.0.1; } keys { rndc-key; };
};

# cat /etc/pf.conf
#Firewall ruleset for KintaroABODE router.

int_if=fxp0
wifi_if = athn0

tcp_services={ 22, 113 }
icmp_types=echoreq

fekete=192.168.0.3
fekete_tcp={ 17001, 8333 }
fekete_udp={ 8333 }
mises=192.168.0.4
mises_tcp={ 25565 }

#options

set block-policy drop
set loginterface egress
set skip on lo

anchor ftp-proxy/*
pass in on $int_if inet proto tcp to any port ftp \
divert-to 127.0.0.1 port 8021

table sshguard persist

#match rules
match out on egress inet from !(egress:network) to any nat-to (egress:0)

#filter rules
block in log
pass out quick

antispoof quick for { lo $int_if $wifi_if }

pass in on egress inet proto tcp from any to (egress) \
port $tcp_services

block in quick on egress proto tcp from sshguard \
to any port ssh label ssh bruteforce

pass in on egress inet proto tcp from any to (egress) port $fekete_tcp
rdr-to $fekete
pass in on egress inet proto tcp from any to (egress) port $fekete_udp
rdr-to $fekete
pass in on egress inet proto tcp from any to (egress) port $mises_tcp
rdr-to $mises

pass in inet proto icmp all icmp-type $icmp_types
pass in on $int_if
pass in on $wifi_if

There is nothing related in the messages or daemon log.


# cat /var/log/daemon
Sep 30 22:23:08 menger savecore: no core dump
Sep 30 22:24:12 menger dhclient[31387]: DHCPREQUEST on fxp0 to
255.255.255.255 port 67
Sep 30 22:24:19 menger last message repeated 3 times
Sep 30 22:24:26 menger dhclient[31387]: DHCPDISCOVER on fxp0 to
255.255.255.255 port 67 interval 1
Sep 30 22:24:27 menger dhclient[31387]: DHCPDISCOVER on fxp0 to
255.255.255.255 port 67 

Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread Denis Fondras
Hi,

Le 30/09/2013 15:41, Vijay Sankar a écrit :
 Quoting John Tate j...@johntate.org:
 I can ping www.google.com.au and load the page in lynx from the router
 but not from other machines. Whereas I can use gmail like I am at the
 moment fine. This is a very, very strange bug I am experiencing.



I would have thought of a MTU problem at first but being able to use
Gmail might prove me wrong.

Denis



Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread James Shupe

On 2013-09-30 08:18, John Tate wrote:

I am having trouble with IP forwarding to specific sites on a very
typical configuration. The router itself can access these sites but
clients can not. I have looked in obvious places on the clients, but I
cannot find a cause. I reinstalled OpenBSD on the router after getting
SSL errors where SSL servers could not be reached from clients, and I
bought a cheap Netgear router to use which works fine ruling out that
my ISP is causing problems.



Have you tried setting your max-mss to something like 1440 or 1400?

Usually that's necessary with DSL... or else you end up with very 
selective browsing.




[OT] quotes speedup sed

2013-09-30 Thread Denis Fondras
Hello all,

This afternoon I stumbled upon a weirdness I can't explain. I hope some
misc-guru can give a clue.

I was parsing a 45kB html document on my OpenBSD 5.3 with the help of
sed to extract a value and it was awfully slow. Quoting the input string
gave it a real boost :

$ time echo $webpage | sed -n -r
's/(.*)\token\:\([a-zA-Z0-9]+)\(.*)/\2/p'
0m0.19s real 0m0.00s user 0m0.00s system

$ time echo $webpage | sed -n -r
's/(.*)\token\:\([a-zA-Z0-9]+)\(.*)/\2/p'
2m14.39s real 2m12.95s user 0m0.00s system


What could be the explanation ?
Doing the same with GNU sed is instantaneous in both case (quoted/unquoted).

Thank you in advance,
Denis



Re: SSH as root with specific IP

2013-09-30 Thread Nick Holland

oops.  meant to send to list...
(this time with cheesy ASCII graphics which will probably get mauled by 
most mail clients)


On 09/30/2013 02:29 AM, John Tate wrote:

I want to be able to log in as root by SSH with a specific IP address.
This is so rsync can log in to the server easily and backup many files
owned by many different users and groups. Rather than a script on the
server logging into the server with the backups with many files and
many different users.

Can it be done?



been there, doing that...

ANOTHER way of doing this, you can modify your root ssh authorized_key
file so it only accepts connections from designated sites for a 
particular key:


from=1.2.3.4 ssh-rsa SZJlGKh8nrcSAG/hBi root@backup
\__new part__/ \usual part of key__/

(there are lots of other nifty options here -- see man sshd)

combine that with no password logins and your goal is accomplished.

Nick.



Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread John Tate
It would help if you told me how to do this...

# ifconfig pppoe max-mms 1400
ifconfig: max-mms: bad value
# ifconfig pppoe0 max-mms 1440
ifconfig: max-mms: bad value

On Mon, Sep 30, 2013 at 11:53 PM, James Shupe jsh...@hermetek.com wrote:
 On 2013-09-30 08:18, John Tate wrote:

 I am having trouble with IP forwarding to specific sites on a very
 typical configuration. The router itself can access these sites but
 clients can not. I have looked in obvious places on the clients, but I
 cannot find a cause. I reinstalled OpenBSD on the router after getting
 SSL errors where SSL servers could not be reached from clients, and I
 bought a cheap Netgear router to use which works fine ruling out that
 my ISP is causing problems.


 Have you tried setting your max-mss to something like 1440 or 1400?

 Usually that's necessary with DSL... or else you end up with very selective
 browsing.




-- 
www.johntate.org



Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread John Tate
Found it:
While pppoe(8) has an internal option, ``mssfixup'', which is enabled by
default and takes care of this, pppoe users have to rely on other
methods.  Using a packet filter, the maximum segment size (MSS) can be
set (clamped) to the required value.  The following rule in pf.conf(5)
would set the MSS to 1440:

match on pppoe0 scrub (max-mss 1440)

On Mon, Sep 30, 2013 at 11:53 PM, James Shupe jsh...@hermetek.com wrote:
 On 2013-09-30 08:18, John Tate wrote:

 I am having trouble with IP forwarding to specific sites on a very
 typical configuration. The router itself can access these sites but
 clients can not. I have looked in obvious places on the clients, but I
 cannot find a cause. I reinstalled OpenBSD on the router after getting
 SSL errors where SSL servers could not be reached from clients, and I
 bought a cheap Netgear router to use which works fine ruling out that
 my ISP is causing problems.


 Have you tried setting your max-mss to something like 1440 or 1400?

 Usually that's necessary with DSL... or else you end up with very selective
 browsing.




-- 
www.johntate.org



Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread John Tate
This part of the manual is out of date and the syntax does not work
with pf in OpenBSD 5.3:

While pppoe(8) has an internal option, ``mssfixup'', which is enabled by
default and takes care of this, pppoe users have to rely on other
methods.  Using a packet filter, the maximum segment size (MSS) can be
set (clamped) to the required value.  The following rule in pf.conf(5)
would set the MSS to 1440:

match on pppoe0 scrub (max-mss 1440)

The documentation on pf.conf suggests doing much the same in it's
example and it doesn't work.

On Tue, Oct 1, 2013 at 2:07 AM, John Tate j...@johntate.org wrote:
 Found it:
 While pppoe(8) has an internal option, ``mssfixup'', which is enabled by
 default and takes care of this, pppoe users have to rely on other
 methods.  Using a packet filter, the maximum segment size (MSS) can be
 set (clamped) to the required value.  The following rule in pf.conf(5)
 would set the MSS to 1440:

 match on pppoe0 scrub (max-mss 1440)

 On Mon, Sep 30, 2013 at 11:53 PM, James Shupe jsh...@hermetek.com wrote:
 On 2013-09-30 08:18, John Tate wrote:

 I am having trouble with IP forwarding to specific sites on a very
 typical configuration. The router itself can access these sites but
 clients can not. I have looked in obvious places on the clients, but I
 cannot find a cause. I reinstalled OpenBSD on the router after getting
 SSL errors where SSL servers could not be reached from clients, and I
 bought a cheap Netgear router to use which works fine ruling out that
 my ISP is causing problems.


 Have you tried setting your max-mss to something like 1440 or 1400?

 Usually that's necessary with DSL... or else you end up with very selective
 browsing.




 --
 www.johntate.org



-- 
www.johntate.org



Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread James Shupe

On 2013-09-30 11:12, John Tate wrote:

This part of the manual is out of date and the syntax does not work
with pf in OpenBSD 5.3:

While pppoe(8) has an internal option, ``mssfixup'', which is enabled 
by

default and takes care of this, pppoe users have to rely on other
methods.  Using a packet filter, the maximum segment size (MSS) can be
set (clamped) to the required value.  The following rule in pf.conf(5)
would set the MSS to 1440:

match on pppoe0 scrub (max-mss 1440)



It works fine for me on several boxes with 5.3.

$ uname -smr
OpenBSD 5.3 amd64
$ sudo pfctl -sr | grep 'max-mss 1440'
match on pppoe0 all scrub (max-mss 1440)

--
James Shupe



Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread John Tate
Well max-mss doesn't seem to help I can still only access gmail and
not google.com.au. Also it has become suddenly selective after months
with no problem so I wonder if this is the default these days. Still
problems.

On Tue, Oct 1, 2013 at 2:02 AM, James Shupe jsh...@hermetek.com wrote:
 On 2013-09-30 10:58, John Tate wrote:

 It would help if you told me how to do this...

 # ifconfig pppoe max-mms 1400
 ifconfig: max-mms: bad value
 # ifconfig pppoe0 max-mms 1440
 ifconfig: max-mms: bad value


 match on $ext scrub (max-mss 1400)

 in /etc/pf.conf

 Also, don't top post.

 --
 James Shupe





-- 
www.johntate.org



Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread John Tate
On Tue, Oct 1, 2013 at 2:29 AM, Luis Coronado lcoron...@ticoit.com wrote:
 set reassemble yes no-df

 I tried using match and scrub rules without luck, but the 'reassemble yes
 no-df' solved my problems with the GRE tunnels we use among networks.

 Just make sure you dont have set skip on pppoe0

 -luis
Just trying this, something got through for a second but once again
queries to google and other sites don't work. It is still unreliable.



 On Mon, Sep 30, 2013 at 10:26 AM, John Tate j...@johntate.org wrote:

 Well max-mss doesn't seem to help I can still only access gmail and
 not google.com.au. Also it has become suddenly selective after months
 with no problem so I wonder if this is the default these days. Still
 problems.

 On Tue, Oct 1, 2013 at 2:02 AM, James Shupe jsh...@hermetek.com wrote:
  On 2013-09-30 10:58, John Tate wrote:
 
  It would help if you told me how to do this...
 
  # ifconfig pppoe max-mms 1400
  ifconfig: max-mms: bad value
  # ifconfig pppoe0 max-mms 1440
  ifconfig: max-mms: bad value
 
 
  match on $ext scrub (max-mss 1400)
 
  in /etc/pf.conf
 
  Also, don't top post.
 
  --
  James Shupe
 
 



 --
 www.johntate.org





-- 
www.johntate.org



Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread John Tate
Things are working fine from another one of my computers, it must be
something to do with the computer I'm using. Sorry about that
everyone.

On Tue, Oct 1, 2013 at 2:48 AM, John Tate j...@johntate.org wrote:
 Yeah I am using my lan not the wlan. I've not got to even seeing if
 the wlan even works yet, though it used to with that configuration.
 The worst thing is the hosts occasionally manage to work for a split
 second, and stop again. I'm certain there is nothing wrong with my ISP
 unless they have trouble with this particular setup. It worked for
 months with no problems, and then they started happening.

 On Tue, Oct 1, 2013 at 2:44 AM, Luis Coronado lcoron...@ticoit.com wrote:
 Im afraid I only read the last post of the email thread about
 match/scrub/mtu. That is why I suggested the set option in my previous
 email.

 The fact that your router can contact the destination hosts without issues
 but not the internal hosts forces me to believe that there isnt, at least at
 this stage a mtu related problem.

 I see that you serve your LAN over athn0. You can find out if there are
 issues with your wireless setup by running ifconfig athn0 debug and watching
 /var/log/messages. athn0 power savings fix was submitted almost a year ago
 but how knows you could be the happy owner of a particular card that doesnt
 work as expected.

 Have you tried running your lan from the ethernet card instead?

 -luis



 On Mon, Sep 30, 2013 at 10:32 AM, John Tate j...@johntate.org wrote:

 On Tue, Oct 1, 2013 at 2:29 AM, Luis Coronado lcoron...@ticoit.com
 wrote:
  set reassemble yes no-df
 
  I tried using match and scrub rules without luck, but the 'reassemble
  yes
  no-df' solved my problems with the GRE tunnels we use among networks.
 
  Just make sure you dont have set skip on pppoe0
 
  -luis
 Just trying this, something got through for a second but once again
 queries to google and other sites don't work. It is still unreliable.
 
 
 
  On Mon, Sep 30, 2013 at 10:26 AM, John Tate j...@johntate.org wrote:
 
  Well max-mss doesn't seem to help I can still only access gmail and
  not google.com.au. Also it has become suddenly selective after months
  with no problem so I wonder if this is the default these days. Still
  problems.
 
  On Tue, Oct 1, 2013 at 2:02 AM, James Shupe jsh...@hermetek.com
  wrote:
   On 2013-09-30 10:58, John Tate wrote:
  
   It would help if you told me how to do this...
  
   # ifconfig pppoe max-mms 1400
   ifconfig: max-mms: bad value
   # ifconfig pppoe0 max-mms 1440
   ifconfig: max-mms: bad value
  
  
   match on $ext scrub (max-mss 1400)
  
   in /etc/pf.conf
  
   Also, don't top post.
  
   --
   James Shupe
  
  
 
 
 
  --
  www.johntate.org
 
 



 --
 www.johntate.org





 --
 www.johntate.org



-- 
www.johntate.org



Re: Interrupts cause uaudio stuttering with mpd

2013-09-30 Thread Alexandre Ratchov
On Sun, Sep 29, 2013 at 11:28:26AM +0200, Alex Holst wrote:
 I'm looking for input on solving a long-standing issue with uaudio
 playback on my desktop system. (http://mongers.org/openbsd/dmesg.fit)
 
 When playing local FLAC files or streaming ogg/mp3 through mpd (or
 cvlc), I experience stuttering when system interrupts spike above 15% --
 the most reliable way I can reproduce this is by forcing a bit of disk
 i/o.

do you know what causes these interrupts? is this the uaudio
device? (ex try systat -s1 vmstat)

 Back in April I tried Alexandre's patch related to audio/midi interrupts
 on mp kernels.

This diff is now in, but something else is still causing interrupts
to be missed on MP systems. Furthermore uaudio uses the usb
sub-system which always grabs the kernel_lock and consequently will
miss interrupts.

 I also tried sndiod -r44100 -z2940 but neither made any
 difference. 
 
 Is the stuttering likely related to my hardware, is it a known problem
 or is there something else I can try?

uaudio driver is known to not work very well (lack of time to
clean-up the driver). But I don't know if that's causing the
stuttering you observe. There may be multiple causes :(

You could try find the cause:

 - switch into using the GENERIC kernel and see if
   stuttering is affected

 - use trivial tools to play audio (eg. aucat -i foo.wav) during
   the tests.

 - does the -mplay option affect stuttering? if so the
   cause may be the uaudio driver.

thanks

-- Alexandre



Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread John Tate
It worked for a while but since rebooting my router now none of my
computers work to access google.com, gmail.com works. Many other sites
are not working, it is very frustrating.

Clients on the wireless also don't work, it is the same problem. I can
ping all the sites I can't access the problem appears to be with HTTP.

Since starting the thread I have changed my pf.conf on advice of other
users to have these lines...
set reassemble yes no-df
match in  on pppoe0 scrub (max-mss 1440 no-df reassemble tcp)

Any more ideas?

On Tue, Oct 1, 2013 at 2:51 AM, John Tate j...@johntate.org wrote:
 Things are working fine from another one of my computers, it must be
 something to do with the computer I'm using. Sorry about that
 everyone.

 On Tue, Oct 1, 2013 at 2:48 AM, John Tate j...@johntate.org wrote:
 Yeah I am using my lan not the wlan. I've not got to even seeing if
 the wlan even works yet, though it used to with that configuration.
 The worst thing is the hosts occasionally manage to work for a split
 second, and stop again. I'm certain there is nothing wrong with my ISP
 unless they have trouble with this particular setup. It worked for
 months with no problems, and then they started happening.

 On Tue, Oct 1, 2013 at 2:44 AM, Luis Coronado lcoron...@ticoit.com wrote:
 Im afraid I only read the last post of the email thread about
 match/scrub/mtu. That is why I suggested the set option in my previous
 email.

 The fact that your router can contact the destination hosts without issues
 but not the internal hosts forces me to believe that there isnt, at least at
 this stage a mtu related problem.

 I see that you serve your LAN over athn0. You can find out if there are
 issues with your wireless setup by running ifconfig athn0 debug and watching
 /var/log/messages. athn0 power savings fix was submitted almost a year ago
 but how knows you could be the happy owner of a particular card that doesnt
 work as expected.

 Have you tried running your lan from the ethernet card instead?

 -luis



 On Mon, Sep 30, 2013 at 10:32 AM, John Tate j...@johntate.org wrote:

 On Tue, Oct 1, 2013 at 2:29 AM, Luis Coronado lcoron...@ticoit.com
 wrote:
  set reassemble yes no-df
 
  I tried using match and scrub rules without luck, but the 'reassemble
  yes
  no-df' solved my problems with the GRE tunnels we use among networks.
 
  Just make sure you dont have set skip on pppoe0
 
  -luis
 Just trying this, something got through for a second but once again
 queries to google and other sites don't work. It is still unreliable.
 
 
 
  On Mon, Sep 30, 2013 at 10:26 AM, John Tate j...@johntate.org wrote:
 
  Well max-mss doesn't seem to help I can still only access gmail and
  not google.com.au. Also it has become suddenly selective after months
  with no problem so I wonder if this is the default these days. Still
  problems.
 
  On Tue, Oct 1, 2013 at 2:02 AM, James Shupe jsh...@hermetek.com
  wrote:
   On 2013-09-30 10:58, John Tate wrote:
  
   It would help if you told me how to do this...
  
   # ifconfig pppoe max-mms 1400
   ifconfig: max-mms: bad value
   # ifconfig pppoe0 max-mms 1440
   ifconfig: max-mms: bad value
  
  
   match on $ext scrub (max-mss 1400)
  
   in /etc/pf.conf
  
   Also, don't top post.
  
   --
   James Shupe
  
  
 
 
 
  --
  www.johntate.org
 
 



 --
 www.johntate.org





 --
 www.johntate.org



 --
 www.johntate.org



-- 
www.johntate.org



Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread Vijay Sankar

Quoting John Tate j...@johntate.org:


It worked for a while but since rebooting my router now none of my
computers work to access google.com, gmail.com works. Many other sites
are not working, it is very frustrating.

Clients on the wireless also don't work, it is the same problem. I can
ping all the sites I can't access the problem appears to be with HTTP.

Since starting the thread I have changed my pf.conf on advice of other
users to have these lines...
set reassemble yes no-df
match in  on pppoe0 scrub (max-mss 1440 no-df reassemble tcp)

Any more ideas?

On Tue, Oct 1, 2013 at 2:51 AM, John Tate j...@johntate.org wrote:

Things are working fine from another one of my computers, it must be
something to do with the computer I'm using. Sorry about that
everyone.

On Tue, Oct 1, 2013 at 2:48 AM, John Tate j...@johntate.org wrote:

Yeah I am using my lan not the wlan. I've not got to even seeing if
the wlan even works yet, though it used to with that configuration.
The worst thing is the hosts occasionally manage to work for a split
second, and stop again. I'm certain there is nothing wrong with my ISP
unless they have trouble with this particular setup. It worked for
months with no problems, and then they started happening.

On Tue, Oct 1, 2013 at 2:44 AM, Luis Coronado lcoron...@ticoit.com wrote:

Im afraid I only read the last post of the email thread about
match/scrub/mtu. That is why I suggested the set option in my previous
email.

The fact that your router can contact the destination hosts without issues
but not the internal hosts forces me to believe that there isnt,  
at least at

this stage a mtu related problem.

I see that you serve your LAN over athn0. You can find out if there are
issues with your wireless setup by running ifconfig athn0 debug  
and watching

/var/log/messages. athn0 power savings fix was submitted almost a year ago
but how knows you could be the happy owner of a particular card  
that doesnt

work as expected.

Have you tried running your lan from the ethernet card instead?

-luis



On Mon, Sep 30, 2013 at 10:32 AM, John Tate j...@johntate.org wrote:


On Tue, Oct 1, 2013 at 2:29 AM, Luis Coronado lcoron...@ticoit.com
wrote:
 set reassemble yes no-df

 I tried using match and scrub rules without luck, but the 'reassemble
 yes
 no-df' solved my problems with the GRE tunnels we use among networks.

 Just make sure you dont have set skip on pppoe0

 -luis
Just trying this, something got through for a second but once again
queries to google and other sites don't work. It is still unreliable.



 On Mon, Sep 30, 2013 at 10:26 AM, John Tate j...@johntate.org wrote:

 Well max-mss doesn't seem to help I can still only access gmail and
 not google.com.au. Also it has become suddenly selective after months
 with no problem so I wonder if this is the default these days. Still
 problems.

 On Tue, Oct 1, 2013 at 2:02 AM, James Shupe jsh...@hermetek.com
 wrote:
  On 2013-09-30 10:58, John Tate wrote:
 
  It would help if you told me how to do this...
 
  # ifconfig pppoe max-mms 1400
  ifconfig: max-mms: bad value
  # ifconfig pppoe0 max-mms 1440
  ifconfig: max-mms: bad value
 
 
  match on $ext scrub (max-mss 1400)
 
  in /etc/pf.conf
 
  Also, don't top post.
 
  --
  James Shupe
 
 



 --
 www.johntate.org



Are you using dhcp on fxp0? I thought I noticed log entries where fxp0  
did not get the IP address it was requesting for.




Vijay Sankar, M.Eng., P.Eng.
ForeTell Technologies Limited
vsan...@foretell.ca

-
This message was sent using ForeTell-POST 4.9



Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread James Shupe

set reassemble yes no-df
match in  on pppoe0 scrub (max-mss 1440 no-df reassemble tcp)


match in on? You need to match both directions.

Also, stop top posting.

--
James Shupe



Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread Roberto E. Vargas Caballero
 Since starting the thread I have changed my pf.conf on advice of other
 users to have these lines...
 set reassemble yes no-df
 match in  on pppoe0 scrub (max-mss 1440 no-df reassemble tcp)
 
 Any more ideas?

I have a similar problem here, and I still doesn't found the solution,
but maybe your problem can be related to [1], in the section
pf and window scaling) (you can found some information about it
in [2]).

Good luck,

[1] http://fatsquirrel.org/veghead/wot/openbsd.php
[2] http://wheel.troxo.com/2008/06/05/tcp-window-scaling-conundrum
-- 
Roberto E. Vargas Caballero

k...@shike2.com
http://www.shike2.com



Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread John Tate
I've done this, now Google works, but Facebook is still not working
and probably some other sites.

On Tue, Oct 1, 2013 at 3:34 AM, Luis Coronado lcoron...@ticoit.com wrote:
 if you keep set reassemble yes no-df you can (must?) remove the match in on
 pppoe0 scrut (max-mss 1440 no-df reassemble tcp)

 -luis



 On Mon, Sep 30, 2013 at 11:30 AM, John Tate j...@johntate.org wrote:

 It worked for a while but since rebooting my router now none of my
 computers work to access google.com, gmail.com works. Many other sites
 are not working, it is very frustrating.

 Clients on the wireless also don't work, it is the same problem. I can
 ping all the sites I can't access the problem appears to be with HTTP.

 Since starting the thread I have changed my pf.conf on advice of other
 users to have these lines...
 set reassemble yes no-df
 match in  on pppoe0 scrub (max-mss 1440 no-df reassemble tcp)

 Any more ideas?

 On Tue, Oct 1, 2013 at 2:51 AM, John Tate j...@johntate.org wrote:
  Things are working fine from another one of my computers, it must be
  something to do with the computer I'm using. Sorry about that
  everyone.
 
  On Tue, Oct 1, 2013 at 2:48 AM, John Tate j...@johntate.org wrote:
  Yeah I am using my lan not the wlan. I've not got to even seeing if
  the wlan even works yet, though it used to with that configuration.
  The worst thing is the hosts occasionally manage to work for a split
  second, and stop again. I'm certain there is nothing wrong with my ISP
  unless they have trouble with this particular setup. It worked for
  months with no problems, and then they started happening.
 
  On Tue, Oct 1, 2013 at 2:44 AM, Luis Coronado lcoron...@ticoit.com
  wrote:
  Im afraid I only read the last post of the email thread about
  match/scrub/mtu. That is why I suggested the set option in my previous
  email.
 
  The fact that your router can contact the destination hosts without
  issues
  but not the internal hosts forces me to believe that there isnt, at
  least at
  this stage a mtu related problem.
 
  I see that you serve your LAN over athn0. You can find out if there
  are
  issues with your wireless setup by running ifconfig athn0 debug and
  watching
  /var/log/messages. athn0 power savings fix was submitted almost a year
  ago
  but how knows you could be the happy owner of a particular card that
  doesnt
  work as expected.
 
  Have you tried running your lan from the ethernet card instead?
 
  -luis
 
 
 
  On Mon, Sep 30, 2013 at 10:32 AM, John Tate j...@johntate.org wrote:
 
  On Tue, Oct 1, 2013 at 2:29 AM, Luis Coronado lcoron...@ticoit.com
  wrote:
   set reassemble yes no-df
  
   I tried using match and scrub rules without luck, but the
   'reassemble
   yes
   no-df' solved my problems with the GRE tunnels we use among
   networks.
  
   Just make sure you dont have set skip on pppoe0
  
   -luis
  Just trying this, something got through for a second but once again
  queries to google and other sites don't work. It is still unreliable.
  
  
  
   On Mon, Sep 30, 2013 at 10:26 AM, John Tate j...@johntate.org
   wrote:
  
   Well max-mss doesn't seem to help I can still only access gmail
   and
   not google.com.au. Also it has become suddenly selective after
   months
   with no problem so I wonder if this is the default these days.
   Still
   problems.
  
   On Tue, Oct 1, 2013 at 2:02 AM, James Shupe jsh...@hermetek.com
   wrote:
On 2013-09-30 10:58, John Tate wrote:
   
It would help if you told me how to do this...
   
# ifconfig pppoe max-mms 1400
ifconfig: max-mms: bad value
# ifconfig pppoe0 max-mms 1440
ifconfig: max-mms: bad value
   
   
match on $ext scrub (max-mss 1400)
   
in /etc/pf.conf
   
Also, don't top post.
   
--
James Shupe
   
   
  
  
  
   --
   www.johntate.org
  
  
 
 
 
  --
  www.johntate.org
 
 
 
 
 
  --
  www.johntate.org
 
 
 
  --
  www.johntate.org



 --
 www.johntate.org





-- 
www.johntate.org



Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread John Tate
Looks like I just had to remove the match line and just use set
reassemble yes no-df and restart my interfaces on clients. Everything
appears to work now.

Still amazes me this wasn't a problem for months.

On Tue, Oct 1, 2013 at 4:34 AM, John Tate j...@johntate.org wrote:
 I've done this, now Google works, but Facebook is still not working
 and probably some other sites.

 On Tue, Oct 1, 2013 at 3:34 AM, Luis Coronado lcoron...@ticoit.com wrote:
 if you keep set reassemble yes no-df you can (must?) remove the match in on
 pppoe0 scrut (max-mss 1440 no-df reassemble tcp)

 -luis



 On Mon, Sep 30, 2013 at 11:30 AM, John Tate j...@johntate.org wrote:

 It worked for a while but since rebooting my router now none of my
 computers work to access google.com, gmail.com works. Many other sites
 are not working, it is very frustrating.

 Clients on the wireless also don't work, it is the same problem. I can
 ping all the sites I can't access the problem appears to be with HTTP.

 Since starting the thread I have changed my pf.conf on advice of other
 users to have these lines...
 set reassemble yes no-df
 match in  on pppoe0 scrub (max-mss 1440 no-df reassemble tcp)

 Any more ideas?

 On Tue, Oct 1, 2013 at 2:51 AM, John Tate j...@johntate.org wrote:
  Things are working fine from another one of my computers, it must be
  something to do with the computer I'm using. Sorry about that
  everyone.
 
  On Tue, Oct 1, 2013 at 2:48 AM, John Tate j...@johntate.org wrote:
  Yeah I am using my lan not the wlan. I've not got to even seeing if
  the wlan even works yet, though it used to with that configuration.
  The worst thing is the hosts occasionally manage to work for a split
  second, and stop again. I'm certain there is nothing wrong with my ISP
  unless they have trouble with this particular setup. It worked for
  months with no problems, and then they started happening.
 
  On Tue, Oct 1, 2013 at 2:44 AM, Luis Coronado lcoron...@ticoit.com
  wrote:
  Im afraid I only read the last post of the email thread about
  match/scrub/mtu. That is why I suggested the set option in my previous
  email.
 
  The fact that your router can contact the destination hosts without
  issues
  but not the internal hosts forces me to believe that there isnt, at
  least at
  this stage a mtu related problem.
 
  I see that you serve your LAN over athn0. You can find out if there
  are
  issues with your wireless setup by running ifconfig athn0 debug and
  watching
  /var/log/messages. athn0 power savings fix was submitted almost a year
  ago
  but how knows you could be the happy owner of a particular card that
  doesnt
  work as expected.
 
  Have you tried running your lan from the ethernet card instead?
 
  -luis
 
 
 
  On Mon, Sep 30, 2013 at 10:32 AM, John Tate j...@johntate.org wrote:
 
  On Tue, Oct 1, 2013 at 2:29 AM, Luis Coronado lcoron...@ticoit.com
  wrote:
   set reassemble yes no-df
  
   I tried using match and scrub rules without luck, but the
   'reassemble
   yes
   no-df' solved my problems with the GRE tunnels we use among
   networks.
  
   Just make sure you dont have set skip on pppoe0
  
   -luis
  Just trying this, something got through for a second but once again
  queries to google and other sites don't work. It is still unreliable.
  
  
  
   On Mon, Sep 30, 2013 at 10:26 AM, John Tate j...@johntate.org
   wrote:
  
   Well max-mss doesn't seem to help I can still only access gmail
   and
   not google.com.au. Also it has become suddenly selective after
   months
   with no problem so I wonder if this is the default these days.
   Still
   problems.
  
   On Tue, Oct 1, 2013 at 2:02 AM, James Shupe jsh...@hermetek.com
   wrote:
On 2013-09-30 10:58, John Tate wrote:
   
It would help if you told me how to do this...
   
# ifconfig pppoe max-mms 1400
ifconfig: max-mms: bad value
# ifconfig pppoe0 max-mms 1440
ifconfig: max-mms: bad value
   
   
match on $ext scrub (max-mss 1400)
   
in /etc/pf.conf
   
Also, don't top post.
   
--
James Shupe
   
   
  
  
  
   --
   www.johntate.org
  
  
 
 
 
  --
  www.johntate.org
 
 
 
 
 
  --
  www.johntate.org
 
 
 
  --
  www.johntate.org



 --
 www.johntate.org





 --
 www.johntate.org



-- 
www.johntate.org



Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread John Tate
Alright at the moment things are mostly working but I've found I can't
access Google Plus and Facebook never finishes loading, though at
least now it loads a bit. Connections like ssh generally seem to be
staying open. Is there something unusual about Facebook that anyone
knows about?


-- 
www.johntate.org



Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread James Shupe
Try just match on pppoe0 scrub (max-mss 1400 no-df) and remove the 
reassemble line.



--
James Shupe



Re: Interrupts cause uaudio stuttering with mpd

2013-09-30 Thread Alex Holst
Quoting Alexandre Ratchov (a...@caoua.org):
 do you know what causes these interrupts? is this the uaudio
 device? (ex try systat -s1 vmstat)

It's never the uaudio device, in fact it's not even one of the devices
listed in that view.  I have uhci2 which hovers around 62.

re0 hovers around 300 but briefly spikes during heavy network usage. ipi
hovers around 4-600, then spikes to 15000.

ipi seems to be an MP thing; it's not present in GENERIC.

  Is the stuttering likely related to my hardware, is it a known problem
  or is there something else I can try?
 
  - switch into using the GENERIC kernel and see if
stuttering is affected
 
  - use trivial tools to play audio (eg. aucat -i foo.wav) during
the tests.
 
  - does the -mplay option affect stuttering? if so the
cause may be the uaudio driver.

Adding -mplay to sndiod_flags and restarting sndiod didn't help.
Then I rebooted into GENERIC and there seemed to be longer between
stuttering (suggesting it didn't get triggered quite as easily).

I wasn't kidding when I said this is my desktop system but I don't run X
because this chipset is shit. I am in console most of the time. I
discovered *any* output to console, even if I haven't switched to that
tty could cause a small glitch in the audio. It's sporadic but more
output is definately worse. Scrolling quickly through man pages is
annoying and running 'make clean' made the audio unbearable.

Logging out of the console and ssh'ing from another system has made the
stuttering much more infrequent (once every 20-30mins instead of every 2
minutes) and it doesn't seem related to scrolling in man nor to what
make is up to. Does that make any sense at all?

I'll look into playing wav files with aucat and let you know.

-- 
I prefer the dark of the night, after midnight and before four-thirty,
when it's more bare, more hollow.http://a.mongers.org 



Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread Stuart Henderson
On 2013-09-30, Denis Fondras open...@ledeuns.net wrote:
 I would have thought of a MTU problem at first but being able to use
 Gmail might prove me wrong.

no, google tend to limit MSS anyway.



Re: Interrupts cause uaudio stuttering with mpd

2013-09-30 Thread Alexandre Ratchov
On Mon, Sep 30, 2013 at 10:19:09PM +0200, Alex Holst wrote:
 
 I wasn't kidding when I said this is my desktop system but I don't run X
 because this chipset is shit. I am in console most of the time. I
 discovered *any* output to console, even if I haven't switched to that
 tty could cause a small glitch in the audio. It's sporadic but more
 output is definately worse. Scrolling quickly through man pages is
 annoying and running 'make clean' made the audio unbearable.

Is this the graphic-mode console or bare 80x25 text-mode console?
The dmesg doesn't show any drm devices.

FWIW, the graphic console runs in kernel mode, so it somewhat
breaks audio. That's something being worked on, but still doesn't
work yet.

 Logging out of the console and ssh'ing from another system has made the
 stuttering much more infrequent (once every 20-30mins instead of every 2
 minutes) and it doesn't seem related to scrolling in man nor to what
 make is up to. Does that make any sense at all?

Yes it does.

-- Alexandre



Re: Interrupts cause uaudio stuttering with mpd

2013-09-30 Thread opendaddy
Is this the Akai MPD18 or 24?

O.D.



Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread John Tate
Less worked last night using that than when using set reassemble yes no-df

Now it isn't working again and what you suggest doesn't seem to work
either. Though gmail still works.

There must be something else wrong.



On Tue, Oct 1, 2013 at 6:15 AM, James Shupe jsh...@hermetek.com wrote:
 Try just match on pppoe0 scrub (max-mss 1400 no-df) and remove the
 reassemble line.


 --
 James Shupe




-- 
www.johntate.org



Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread John Tate
Actually match on pppoe0 scrub (max-mss 1400 no-df) seems to also
work I had 1440 entered in. Though Facebook doesn't finish loading
still, and sometimes things don't work. So as I said, something else
must be wrong.

On Tue, Oct 1, 2013 at 10:13 AM, John Tate j...@johntate.org wrote:
 Less worked last night using that than when using set reassemble yes no-df

 Now it isn't working again and what you suggest doesn't seem to work
 either. Though gmail still works.

 There must be something else wrong.



 On Tue, Oct 1, 2013 at 6:15 AM, James Shupe jsh...@hermetek.com wrote:
 Try just match on pppoe0 scrub (max-mss 1400 no-df) and remove the
 reassemble line.


 --
 James Shupe




 --
 www.johntate.org



-- 
www.johntate.org



Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread John Tate
Did some reading, my ISP seems to require a specific not default mtu
of 1454. Facebook actually finishes loading now, things might be okay.



On Tue, Oct 1, 2013 at 10:29 AM, John Tate j...@johntate.org wrote:
 Actually match on pppoe0 scrub (max-mss 1400 no-df) seems to also
 work I had 1440 entered in. Though Facebook doesn't finish loading
 still, and sometimes things don't work. So as I said, something else
 must be wrong.

 On Tue, Oct 1, 2013 at 10:13 AM, John Tate j...@johntate.org wrote:
 Less worked last night using that than when using set reassemble yes no-df

 Now it isn't working again and what you suggest doesn't seem to work
 either. Though gmail still works.

 There must be something else wrong.



 On Tue, Oct 1, 2013 at 6:15 AM, James Shupe jsh...@hermetek.com wrote:
 Try just match on pppoe0 scrub (max-mss 1400 no-df) and remove the
 reassemble line.


 --
 James Shupe




 --
 www.johntate.org



 --
 www.johntate.org



-- 
www.johntate.org



Delete key inconsistency

2013-09-30 Thread Joe Gidi
I notice that with the default vt220 console (on an amd64 system) and the
default ksh, the Delete key produces the character ^[[3~, which doesn't
have a key binding by default. It's easy enough to bind it to
delete-char-forward, which makes the key work as I'd expect, but is there
a reason why this isn't done by default?

Also, in the base xterm, Delete produces ^? (the same as Backspace)
instead of ^[[3~. This can be fixed by setting XTerm*deleteIsDEL:false in
.Xdefaults, but again, I'm wondering if there's a reason why it's not set
that way out of the box. For all I know, it fixes things from my point
of view but breaks them from someone else's perspective...

Thanks,

-- 
Joe Gidi
j...@entropicblur.com

You cannot buy skill. -- Ross Seyfried



Re: OpenBSD not forwarding to specific sites

2013-09-30 Thread Chris Cappuccio
John Tate [j...@johntate.org] wrote:
 It would help if you told me how to do this...

Fuck your whining.