Re: Bidirectional translation for DNS and WWW servers

2007-06-06 Thread Greg Thomas
On 6/5/07, Bray Mailloux [EMAIL PROTECTED] wrote: Misc Users; I'm having NAT problems; could someone examine my pf file and make some recommendations? This is really incomplete. What are you trying to accomplish? What works and what doesn't? What are the interfaces for your internal, dmz,

Re: php5 missing the money_format() function

2007-06-06 Thread Gordon Stratton
On 6/5/07, Daniel [EMAIL PROTECTED] wrote: I understand that The function money_format() is only defined if the system has strfmon capabilities. Even though you're not using Windows, the documentation says that the function is only defined if the system has strfmon capabilities. Looks like the

Re: Quad ethernet card

2007-06-06 Thread Marc Balmer
* Stuart Henderson wrote: On 2007/06/05 18:10, L. V. Lammert wrote: On Tue, 5 Jun 2007, Robert Franklin wrote: Why not a qfe card from Sun? I've used a quad port Sun PCI card for at least a few years in both me Sun AXI servers, and currently I have one installed in a dell 1550 that

Re: openbsd 4.1 install cd hangs at Realtek 8139

2007-06-06 Thread Gordon Ross
On 05 June 2007 at 15:26, in message [EMAIL PROTECTED], studio-v [EMAIL PROTECTED] wrote: I'm trying to install openbsd 4.1 on a firewall server. I'm using the cd41.iso. The problem is that when the computer boots from cd (in order to install), it hangs about halfway through. This is the last

Re: Quad ethernet card

2007-06-06 Thread Henning Brauer
* Fredrik Carlsson [EMAIL PROTECTED] [2007-06-05 21:04]: Jason Dixon wrote: On Tue, 05 Jun 2007 18:26:19 +0200, Fredrik Carlsson [EMAIL PROTECTED] wrote: Hi, I'm planing to set up a new firewall and have a few questions about what quad ethernet cards people recommend? The server will

Re: Quad ethernet card

2007-06-06 Thread Henning Brauer
* nate [EMAIL PROTECTED] [2007-06-05 21:44]: I built 3 OpenBSD 3.6(?) servers in mid 2005 with these cards, and was able to get a peak throughput of about 520Mbps in bridged mode (pf disabled) measured using iperf. the single-stream tcp test iperf uses is pretty meaningless (unless.. well,

Re: pfctl -s labels vs netstat -I interface -b

2007-06-06 Thread Henning Brauer
* Ben Calvert [EMAIL PROTECTED] [2007-06-06 02:04]: On Jun 5, 2007, at 8:30 AM, Stefan Castille wrote: Dear list, I am trying to setup some bandwidth monitoring based on firewall rules (consolidate traffic per project in stead of per ip or interface). However I am unable to get

Re: The tree is broken -- /sbin/ifconfig

2007-06-06 Thread Henning Brauer
* Stephan Andre' [EMAIL PROTECTED] [2007-06-05 23:08]: I think today's changes to libc broke ifconfig, which still knows about ipx stuff... missed to commit the ifconfig part from my tree, sorry folks -- Henning Brauer, [EMAIL PROTECTED], [EMAIL PROTECTED] BS Web Services, http://bsws.de

NAT / FTP - specific server

2007-06-06 Thread Brendan Grossman
Hi all I'm having a problem getting through NAT using ftp-proxy to a certain server using active FTP. After analysing packets between this server and others that work, this server tries to establish a connection on the data port before giving the 200 OK to the PORT command. I'm thinking that

Re: NAT / FTP - specific server

2007-06-06 Thread Peter N. M. Hansteen
Brendan Grossman [EMAIL PROTECTED] writes: After analysing packets between this server and others that work, this server tries to establish a connection on the data port before giving the 200 OK to the PORT command. It would be interesting to know which, if any, ftp-proxy flags you are

cvsync borked -- how to fix?

2007-06-06 Thread Martin Schröder
Hi, my cvsync mirror is broken. How can I fix this? I don't want to nuke the whole mirror and let it fetch it again... TIA Martin Remove ports/cad/Makefile,v Remove ports/cad/distinfo,v Remove ports/cad/DESCR,v Remove ports/cad/PFRAG.shared,v Remove ports/cad/PLIST,v Remove

Re: Quad ethernet card

2007-06-06 Thread Ronnie Garcia
Henning Brauer a icrit : * nate [EMAIL PROTECTED] [2007-06-05 21:44]: I built 3 OpenBSD 3.6(?) servers in mid 2005 with these cards, and was able to get a peak throughput of about 520Mbps in bridged mode (pf disabled) measured using iperf. the single-stream tcp test iperf uses is pretty

Re: Quad ethernet card

2007-06-06 Thread Henning Brauer
* Ronnie Garcia [EMAIL PROTECTED] [2007-06-06 13:04]: Henning Brauer a icrit : * nate [EMAIL PROTECTED] [2007-06-05 21:44]: I built 3 OpenBSD 3.6(?) servers in mid 2005 with these cards, and was able to get a peak throughput of about 520Mbps in bridged mode (pf disabled) measured using iperf.

Re: NAT / FTP - specific server

2007-06-06 Thread Stuart Henderson
On 2007/06/06 18:21, Brendan Grossman wrote: I'm having a problem getting through NAT using ftp-proxy to a certain server using active FTP. After analysing packets between this server and others that work, this server tries to establish a connection on the data port before giving the 200

Re: Quad ethernet card

2007-06-06 Thread Dave Harrison
Henning Brauer wrote: * Ronnie Garcia [EMAIL PROTECTED] [2007-06-06 13:04]: Henning Brauer a icrit : * nate [EMAIL PROTECTED] [2007-06-05 21:44]: I built 3 OpenBSD 3.6(?) servers in mid 2005 with these cards, and was able to get a peak throughput of about 520Mbps in bridged mode (pf

Re: Quad ethernet card

2007-06-06 Thread Matt Rowley
best simulation is recording your real-world traffic using tcpdump and then use tcpreplay. but that is tricky too. Henning has something in saying that most of the tools aren't great, in the end all benchmarks are artificial in some measure. Replaying traffic is equally artificial as

Re: cvsync borked -- how to fix?

2007-06-06 Thread Martin Reindl
On Wed, Jun 06, 2007 at 11:27:24AM +0200, Martin Schr?der wrote: Hi, my cvsync mirror is broken. How can I fix this? I don't want to nuke the whole mirror and let it fetch it again... try the -L option in cvsync

Re: Quad ethernet card

2007-06-06 Thread Dave Harrison
Matt Rowley wrote: best simulation is recording your real-world traffic using tcpdump and then use tcpreplay. but that is tricky too. Henning has something in saying that most of the tools aren't great, in the end all benchmarks are artificial in some measure. Replaying traffic is equally

package compile options (courier-imap)

2007-06-06 Thread Juan Miscaro
I have courier-imap installed on OpenBSD 4.0 as a package and I would like to have the unicode character set included since I serve out non ASCII characters (French). I see that 4.1 has some docs in the package contents [1] referring to this such as

hoststated: fatal: relay_dispatch_pfe: desynchronized,

2007-06-06 Thread Jörg Streckfuß
Hi list, First a tribut for the good work to the authors of hoststated. In the future i plan to use hoststated in production environments to check for the availability of our webservices. But before I set it up on my production machine I would make some testing. I took two tiny Soekrises with

Re: cvsync borked -- how to fix?

2007-06-06 Thread Martin Schröder
2007/6/6, Martin Reindl [EMAIL PROTECTED]: On Wed, Jun 06, 2007 at 11:27:24AM +0200, Martin Schr?der wrote: Hi, my cvsync mirror is broken. How can I fix this? I don't want to nuke the whole mirror and let it fetch it again... try the -L option in cvsync Thanks, but that doesn't really

Il vostro conto � stato sospeso

2007-06-06 Thread Poste.it
Caro cliente di Poste.it , Per i motivi di sicurezza abbiamo sospeso il vostro conto di operazioni bancarie in linea a BancoPostaOnline. Dovete confermare che non siete una vittima del furto di identit` per ristabilire il vostro conto. Dovete scattare il collegamento qui sotto e riempire la

Re: hoststated: fatal: relay_dispatch_pfe: desynchronized,

2007-06-06 Thread Pierre-Yves Ritschard
On Wed, 6 Jun 2007 14:09:19 +0200 Jvrg Streckfu_ [EMAIL PROTECTED] wrote: Hi list, First a tribut for the good work to the authors of hoststated. In the future i plan to use hoststated in production environments to check for the availability of our webservices. But before I set it up on my

Re: Quad ethernet card

2007-06-06 Thread Henning Brauer
* Dave Harrison [EMAIL PROTECTED] [2007-06-06 13:52]: If you're just looking for a big number, open a single TCP session and send alot of traffic through it so you don't have to continually start new sessions (sessions are comparatively expensive). single tcp session benches are completely

Re: Quad ethernet card

2007-06-06 Thread Jacob Yocom-Piatt
Henning Brauer wrote: single tcp session benches are completely meaningless and will not max out any device faster than a moose fart was unaware that moose farts were slow. you learn something new every day :)

Re: hoststated: fatal: relay_dispatch_pfe: desynchronized,

2007-06-06 Thread Diana Eichert
On Wed, 6 Jun 2007, Pierre-Yves Ritschard wrote: On Wed, 6 Jun 2007 14:09:19 +0200 Jvrg Streckfu_ [EMAIL PROTECTED] wrote: testing. I took two tiny Soekrises with OpenBSD 4.1 stable installed, Hi, can you give the output of uname -a please, I'd like to know what versions of current you are

Re: Quad ethernet card

2007-06-06 Thread Diana Eichert
On Wed, 6 Jun 2007, Jacob Yocom-Piatt wrote: was unaware that moose farts were slow. you learn something new every day :) i believe the speed of moose farts varies in relationship to the moose, meese?, distance from Calgary.

Re: hoststated: fatal: relay_dispatch_pfe: desynchronized,

2007-06-06 Thread Jörg Streckfuß
Am Wed, 6 Jun 2007 15:53:03 +0200 schrieb Pierre-Yves Ritschard [EMAIL PROTECTED]: On Wed, 6 Jun 2007 14:09:19 +0200 Jvrg Streckfu_ [EMAIL PROTECTED] wrote: Hi list, First a tribut for the good work to the authors of hoststated. In the future i plan to use hoststated in production

Job Opening: IT Manager

2007-06-06 Thread Jacob Yocom-Piatt
I am looking for a replacement for my position at Specialty Printing Company in Niles, IL, northwest of Chicago. Here is the job description: Position Available: IT Manager Commercial printer seeking an IT Manager with experience maintaining and expanding a network of 10-100 workstations

Re: OpenBSD router playing up

2007-06-06 Thread Brian A. Seklecki
pfctl -x loud when the SHTF pfctl -s and netstat -s Net-SNMP + MRTG on your interfaces? Any errors on netstat -i ? ~BAS On Tue, 5 Jun 2007, Open Phugu wrote: On 6/5/07, Karl Kopp [EMAIL PROTECTED] wrote: Hi All, I have a strange issue. We are using a OpenBSD 3.9 box running on an AMD64

Re: Quad ethernet card

2007-06-06 Thread nate
Henning Brauer wrote: * nate [EMAIL PROTECTED] [2007-06-05 21:44]: I built 3 OpenBSD 3.6(?) servers in mid 2005 with these cards, and was able to get a peak throughput of about 520Mbps in bridged mode (pf disabled) measured using iperf. the single-stream tcp test iperf uses is pretty

Re: Quad ethernet card

2007-06-06 Thread Ted Bullock
Dave Harrison wrote: However I'm not aware of any tools that handle that kind of distributed benchmark.. anyone ? httperf can be run in an array of clients (--client option), although there is currently no way to automatically aggregate the results. -- Theodore Bullock, [EMAIL PROTECTED],

Re: Quad ethernet card

2007-06-06 Thread Henning Brauer
* nate [EMAIL PROTECTED] [2007-06-06 17:52]: Henning Brauer wrote: * nate [EMAIL PROTECTED] [2007-06-05 21:44]: I built 3 OpenBSD 3.6(?) servers in mid 2005 with these cards, and was able to get a peak throughput of about 520Mbps in bridged mode (pf disabled) measured using iperf. the

Re: /usr/obj partition AWOL

2007-06-06 Thread Markus Lude
On Tue, Jun 05, 2007 at 07:51:48AM +0200, Otto Moerbeek wrote: On Tue, 5 Jun 2007, Markus Lude wrote: On Mon, Jun 04, 2007 at 06:02:59PM -0500, Emilio Perea wrote: I follow -current on an i386 at work and an amd64 at home, and rarely run into any problem which is not self-inflicted.

Problem with Intel Pro/1000 PT

2007-06-06 Thread Robert Warning
Hello everybody, I've been getting some strange errors with this dual port nic. My system is a dual core AMD64 system running 4.1-stable with multiprocessor support enabled. The chipset of the card is 82571EB. This problem also occurs when I boot into a kernel without MP support. em0

Re: Problem with Intel Pro/1000 PT

2007-06-06 Thread Daniel Polak
Original message from Robert Warning at 6-6-2007 19:16 Hello everybody, I've been getting some strange errors with this dual port nic. My system is a dual core AMD64 system running 4.1-stable with multiprocessor support enabled. The chipset of the card is 82571EB. This problem also

Kernel MINIROOTSIZE 8192 = No Boot

2007-06-06 Thread Brian A. Seklecki
The 1st stage loader just resets the prom before the kernel load. Can anyone else confirm this? You don't even need to elfrdsetroot(8) to test. Just compile bsd.rd with MINIROOTSIZE=16384. I've been using 32768 on my 4.0 systems for the bsd-appliance project. I've tested it on an AMD

Re: Kernel MINIROOTSIZE 8192 = No Boot

2007-06-06 Thread Theo de Raadt
It can't be that big. And in our tree, it isn't that big. You're doing things on your own, hitting constraints that exist in the code. You get to fix those things, since you've gone outside OpenBSD parameters. Not everything can work, you know. The 1st stage loader just resets the prom

Re: Kernel MINIROOTSIZE 8192 = No Boot

2007-06-06 Thread Brian A. Seklecki
I'm hoping to actually go smaller once FreeBSD has a funtional pivot_root() in the VFS layer (we can steal it from them) Then I can do a 512k RD/MD image (init, tar, gzip, mount_mfs(8), sh, etc.), then transition to a 64 to 96 meg MFS root. I'm talking to a consultant tomorrow about some

Re: Quad ethernet card

2007-06-06 Thread Theo de Raadt
Henning has something in saying that most of the tools aren't great, in the end all benchmarks are artificial in some measure. Replaying traffic is equally artificial as it's only indicative of the traffic you recorded - which is likely to be biased towards whatever was happening at the time

Re: Quad ethernet card

2007-06-06 Thread Darren Spruell
On 6/6/07, Ronnie Garcia [EMAIL PROTECTED] wrote: Henning Brauer a icrit : * nate [EMAIL PROTECTED] [2007-06-05 21:44]: I built 3 OpenBSD 3.6(?) servers in mid 2005 with these cards, and was able to get a peak throughput of about 520Mbps in bridged mode (pf disabled) measured using iperf.

Re: hoststated: fatal: relay_dispatch_pfe: desynchronized,

2007-06-06 Thread Paulius Bulotas
Hi, On 07 06 06, J?rg Streckfu? wrote: First a tribut for the good work to the authors of hoststated. In the future i plan to use hoststated in production environments to check for the availability of our webservices. But before I set it up on my production machine I would make some

Re: Problem with Intel Pro/1000 PT

2007-06-06 Thread Stuart Henderson
On 2007/06/06 13:16, Robert Warning wrote: I've been getting some strange errors with this dual port nic. My system is a dual core AMD64 system running 4.1-stable with multiprocessor support enabled. The chipset of the card is 82571EB. This problem also occurs when I boot into a

Re: /usr/obj partition AWOL

2007-06-06 Thread Otto Moerbeek
On Wed, 6 Jun 2007, Markus Lude wrote: On Tue, Jun 05, 2007 at 07:51:48AM +0200, Otto Moerbeek wrote: On Tue, 5 Jun 2007, Markus Lude wrote: On Mon, Jun 04, 2007 at 06:02:59PM -0500, Emilio Perea wrote: I follow -current on an i386 at work and an amd64 at home, and rarely run

Re: revenge of stupid vlan questions

2007-06-06 Thread Chris Cappuccio
Jon [EMAIL PROTECTED] wrote: Incidentally, it was the vlan(4) man page that gave me the idea to set the mtu to 1518: Some Ethernet chips will either discard or truncate Ethernet frames that are larger than 1514 bytes. This causes a problem as 802.1Q tagged frames can be up to 1518 bytes.

semi transparent spamd-bridge

2007-06-06 Thread Christoph Schneeberger
Hello, I have found the article http://undeadly.org/cgi?action=articlesid=20061108134508 and tried to setup such a bridge with OpenBSD 4.1. Now before I go to deep into my setup, I have just one very basic question which still confuses me, and for me basically explains why my setup doesn't

postfix timeout

2007-06-06 Thread bdz
Hi list, I have some problem with my postfix on 4.1 stable. If I do a telnet localhost 25, then HELO is OK but after the MAIL FROM: command there is no answer. In the maillog there is only a note about the connection (connect from localhost[127.0.0.1]), but not any error messages. Got any

Re: semi transparent spamd-bridge

2007-06-06 Thread Darrin Chandler
On Wed, Jun 06, 2007 at 09:44:30PM +0200, Christoph Schneeberger wrote: I have found the article http://undeadly.org/cgi?action=articlesid=20061108134508 and tried to setup such a bridge with OpenBSD 4.1. I also used that article to do this setup, and it worked fine... case 1: src host is

Bidirectional translation for DNS and WWW servers

2007-06-06 Thread BradenM - Sonoma Computer
# ifconfig lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 33224 groups: lo inet 127.0.0.1 netmask 0xff00 inet6 ::1 prefixlen 128 inet6 fe80::1%lo0 prefixlen 64 scopeid 0x6 rl0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 lladdr

Re: Bidirectional translation for DNS and WWW servers

2007-06-06 Thread Matt Rowley
rl0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 lladdr 00:50:bf:3a:2e:66 groups: egress media: Ethernet autoselect (100baseTX full-duplex) status: active inet 64.142.102.8 netmask 0xff00 broadcast 64.142.102.255 inet6

Re: semi transparent spamd-bridge

2007-06-06 Thread Christoph Schneeberger
Darrin Chandler wrote: On Wed, Jun 06, 2007 at 09:44:30PM +0200, Christoph Schneeberger wrote: I have found the article http://undeadly.org/cgi?action=articlesid=20061108134508 and tried to setup such a bridge with OpenBSD 4.1. I also used that article to do this setup, and it worked

Re: Bidirectional translation for DNS and WWW servers

2007-06-06 Thread Bray Mailloux
Matt Rowley wrote: rl0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 lladdr 00:50:bf:3a:2e:66 groups: egress media: Ethernet autoselect (100baseTX full-duplex) status: active inet 64.142.102.8 netmask 0xff00 broadcast 64.142.102.255

Re: Bidirectional translation for DNS and WWW servers

2007-06-06 Thread Stuart Henderson
On 2007/06/06 14:32, BradenM - Sonoma Computer wrote: ...pretty useful info... Also useful for any suspected PF problems: # pfctl -sa (to check that the ruleset did indeed get loaded, and that PF is enabled - if you can also have some pings running we'll see how state tables look too). # sysctl

Re: semi transparent spamd-bridge

2007-06-06 Thread Mark Pecaut
On 6/6/07, Christoph Schneeberger [EMAIL PROTECTED] wrote: case 1: src host is whitelisted, connection is allowed to 1.1.1.35, everything works fine. case 2: src host is grey-/blacklisted and therefor redirected to 127.0.0.1, in this case i get just a timeout when i try to telnet to port 25

Re: mysql4

2007-06-06 Thread Marcos Laufer
I'm not sure that the reason mysql4 isn't in the packages is due to lack of time or resources.. There must be some other reason, i think this because everytime there are more and more packages, so removing one that so many people use is kind of weird. I was thinking about upgrading (by making a

Re: mysql4

2007-06-06 Thread Daniel Ouellet
Marcos Laufer wrote: I'm not sure that the reason mysql4 isn't in the packages is due to lack of time or resources.. There must be some other reason, i think this because everytime there are more and more packages, so removing one that so many people use is kind of weird.

Re: How to run and manage a DNS server.

2007-06-06 Thread Open Phugu
On 6/6/07, Bray Mailloux [EMAIL PROTECTED] wrote: Hello; This is my first time managing anything larger than a simple dhcp or pf box and I'm wondering if there is anyone available on this list who can answer a few questions I have concerning the creation and management of DNS servers. Give us

Re: How to run and manage a DNS server.

2007-06-06 Thread Sam Fourman Jr.
well here is a question, I was wondering if there would be anyway to make OpenBSD based DNS servers have a PostgreSQL backend. (I know there will be a performance hit) and does anyone know of a gtk front end for DNS management? or maybe a web based solution that is just DNS not like a full

Re: How to run and manage a DNS server.

2007-06-06 Thread Karl R Balsmeier
Basically since this is openbsd, my last obsd box came with chrooted 'named' already present on the machine. I edited the config files named.conf, dropped in a 'zone file' for mydomain.com, with the proper syntax, serial number (today's date with a 01 as: 2007060601), and restarted

Re: How to run and manage a DNS server.

2007-06-06 Thread Daniel Ouellet
Sam Fourman Jr. wrote: well here is a question, I was wondering if there would be anyway to make OpenBSD based DNS servers have a PostgreSQL backend. (I know there will be a performance hit) and does anyone know of a gtk front end for DNS management? or maybe a web based solution that is just

Re: How to run and manage a DNS server.

2007-06-06 Thread Daniel Ouellet
More for you. Go here: http://openbsdsupport.org/ 4th one from the top called OpenBSD as a domain name server Also you can read to get understanding of DNS usage here: http://cr.yp.to/djbdns.html ( that's not bind, but provide good detials on how things work as well) Same here:

Re: How to run and manage a DNS server.

2007-06-06 Thread Chris Kuethe
On 6/6/07, Karl R Balsmeier [EMAIL PROTECTED] wrote: ... and restarted named/bind. -important because named/bind only parses the new changes in the config after a restart -maybe i'm wrong here but it's a good practice to get in the habit of [assuring daemons re-read config files after

Re: How to run and manage a DNS server.

2007-06-06 Thread Open Phugu
On 6/6/07, Sam Fourman Jr. [EMAIL PROTECTED] wrote: well here is a question, I was wondering if there would be anyway to make OpenBSD based DNS servers have a PostgreSQL backend. (I know there will be a performance hit) This (http://home.tiscali.cz:8080/~cz210552/sqldns.html) might do what

need a machine for an itanium port

2007-06-06 Thread David Gwynne
im getting to the point where there's no challenge left in writing device drivers, i want to move onto something new. so after i finish making the pile of controllers on my desk work, the thing i'd like to do the most is port openbsd to a new architecture, specifically itanium. to do that work

Re: How to run and manage a DNS server.

2007-06-06 Thread Tom Van Looy
http://lifewithdjbdns.org (henning@ wrote this ;-) It's not about bind but it has stuff about mysql and ISP-Environments. So it may be of your interest. Sam Fourman Jr. wrote: well here is a question, I was wondering if there would be anyway to make OpenBSD based DNS servers have a