Default pf-ruleset not using /etc/services

2015-01-22 Thread bsv
Hello, I recently lost access to a co-located server, because I used a non-standard port for ssh access. The default pf-ruleset (in /etc/rc) had kicked in. Would it be more correct to have the rulset in /etc/rc use /etc/services instead of hardcoding port 22 into the rule? Something like

Re: bce(4) - descriptor error

2015-01-22 Thread Stefan Sperling
On Thu, Jan 22, 2015 at 11:34:47AM -0500, John Merriam wrote: So, what could be the problem then? Theoretically it did work as of the 1.35 if_bce.c revision which seems to have shipped in OpenBSD 5.0. This message: http://marc.info/?l=openbsd-techm=130217668909255 seems to verify that

Re: bce(4) - descriptor error

2015-01-22 Thread Mark Kettenis
Date: Thu, 22 Jan 2015 18:04:44 +0100 From: Stefan Sperling s...@stsp.name On Thu, Jan 22, 2015 at 11:34:47AM -0500, John Merriam wrote: So, what could be the problem then? Theoretically it did work as of the 1.35 if_bce.c revision which seems to have shipped in OpenBSD 5.0. This

Re: bce(4) - descriptor error

2015-01-22 Thread John Merriam
On Thu, 22 Jan 2015, Stefan Sperling wrote: On Thu, Jan 22, 2015 at 12:47:28PM -0500, John Merriam wrote: The machine currently has the 1GB DIMM in it. I tested the patch and it seems to work with = 1GB RAM. ping -f test returned similar results so performance likely isn't affected.

Re: bce(4) - descriptor error

2015-01-22 Thread John Merriam
On 2015-01-21 18:36, John Merriam wrote: On 1/21/2015 1:43 PM, Stefan Sperling wrote: There is supposed to be a bounce buffer in bce to cope with systems with more than 1GB but perhaps it is broken. I installed the old 1GB DIMM that came with the machine when I acquired it, and you are

Re: Default pf-ruleset not using /etc/services

2015-01-22 Thread Stuart Henderson
On 2015/01/22 09:12, Kenneth Westerback wrote: The default value for 'ssh' in /etc/services would be 22. So you're going to have to remember to change either /etc/pf.conf or /etc/services to avoid the problem. You don't describe enough of your situation to make clear why editing

Re: bce(4) - descriptor error

2015-01-22 Thread John Merriam
On 1/22/2015 3:40 PM, Mark Kettenis wrote: Date: Thu, 22 Jan 2015 19:38:42 +0100 (CET) From: Mark Kettenis mark.kette...@xs4all.nl Date: Thu, 22 Jan 2015 18:04:44 +0100 From: Stefan Sperling s...@stsp.name It looks as if some ring descriptor data is still being allocated with

Re: bce(4) - descriptor error

2015-01-22 Thread John Merriam
On 1/22/2015 12:04 PM, Stefan Sperling wrote: It looks as if some ring descriptor data is still being allocated with bus_dmamem_alloc(). That function probably doesn't respect the mapping constraints bce(4) hardware requires. This diff makes bce use the same memory allocation APIs as bwi(4) is

Re: bce(4) - descriptor error

2015-01-22 Thread Stuart Henderson
On 2015/01/22 11:34, John Merriam wrote: On 2015-01-21 18:36, John Merriam wrote: On 1/21/2015 1:43 PM, Stefan Sperling wrote: There is supposed to be a bounce buffer in bce to cope with systems with more than 1GB but perhaps it is broken. I installed the old 1GB DIMM that came with the

Re: bce(4) - descriptor error

2015-01-22 Thread Stuart Henderson
On 2015/01/22 17:05, Stuart Henderson wrote: Would presumably be a change in uvm somewhere. (paddr_t)(0x4000 - 1) is passed as 'high' to uvm_km_kmemalloc_pla - uvm_pglistalloc and is meant to constrain the addresses. Identifying when (at least which release) it broke might be a good

Re: Default pf-ruleset not using /etc/services

2015-01-22 Thread Brian S. Vangsgaard
My bad, forgot to add bugs@openbsd.org in my reply to Ken, here it is for the record. The default value for 'ssh' in /etc/services would be 22. So you're going to have to remember to change either /etc/pf.conf or /etc/services to avoid the problem. You don't describe enough of your

Re: bce(4) - descriptor error

2015-01-22 Thread Stefan Sperling
On Thu, Jan 22, 2015 at 12:47:28PM -0500, John Merriam wrote: The machine currently has the 1GB DIMM in it. I tested the patch and it seems to work with = 1GB RAM. ping -f test returned similar results so performance likely isn't affected. You sure? This would be the first time I wrote a

Re: bce(4) - descriptor error

2015-01-22 Thread Mark Kettenis
Date: Thu, 22 Jan 2015 19:38:42 +0100 (CET) From: Mark Kettenis mark.kette...@xs4all.nl Date: Thu, 22 Jan 2015 18:04:44 +0100 From: Stefan Sperling s...@stsp.name On Thu, Jan 22, 2015 at 11:34:47AM -0500, John Merriam wrote: So, what could be the problem then? Theoretically it did

Re: bce(4) - descriptor error

2015-01-22 Thread John Merriam
On 2015-01-22 12:04, Stefan Sperling wrote: On Thu, Jan 22, 2015 at 11:34:47AM -0500, John Merriam wrote: So, what could be the problem then? Theoretically it did work as of the 1.35 if_bce.c revision which seems to have shipped in OpenBSD 5.0. This message:

Re: Default pf-ruleset not using /etc/services

2015-01-22 Thread Kenneth Westerback
On 22 January 2015 at 07:59, b...@avalanic.dk wrote: Hello, I recently lost access to a co-located server, because I used a non-standard port for ssh access. The default pf-ruleset (in /etc/rc) had kicked in. Would it be more correct to have the rulset in /etc/rc use /etc/services

Re: bce(4) - descriptor error

2015-01-22 Thread John Merriam
On 2015-01-22 15:40, Mark Kettenis wrote: Date: Thu, 22 Jan 2015 19:38:42 +0100 (CET) From: Mark Kettenis mark.kette...@xs4all.nl Date: Thu, 22 Jan 2015 18:04:44 +0100 From: Stefan Sperling s...@stsp.name On Thu, Jan 22, 2015 at 11:34:47AM -0500, John Merriam wrote: So, what could be the