Re: HP Proliant DL385 with Squid at a Gigabit-switch - bad network performance

2009-02-28 Thread Pereresus ne Vlezaet Buggy
On 28 February 2009 G. 01:58:29 Stuart Henderson wrote: On 2009-02-27, Pete Vickers p...@systemnet.no wrote: The bge driver sucks for these cards - just chuck in an em(4) NIC and you should see instant improvement. 'netstat -I bge0' will confirm the packet errors this was fixed a year

Re: System security question

2009-02-28 Thread Felipe Alfaro Solana
On Thu, Feb 26, 2009 at 11:13 PM, Ingo Schwarze schwa...@usta.de wrote: Hi Jean-Francois, Jean-Francois wrote on Wed, Feb 25, 2009 at 10:08:22PM +0100: I actually built the following system : - OpenBSD running on a standard AMD platform - This box is actually used as firewall - This

Re: Postscript versions of MAN files.

2009-02-28 Thread Jason McIntyre
On Sat, Feb 28, 2009 at 01:49:31AM -0700, Anathae Townsend wrote: From the looks of the /usr/share/man directory, there are provisions in OpenBSD for postscript versions of the various manual pages for OpenBSD. I have looked, but not exhaustively, in the make files under /usr/src/share/man

3COM PC Card problem

2009-02-28 Thread M Kubik
Hello, I have problems with 3COM 3CXFE575CT PMCIA Ethernet Card. It does not work for me in OpenBSD, I was trying it in 4.4 Stable and 4.5 latest snapshot with same result. (the card should be supported as stated in http://www.openbsd.org/i386.html ) xl0 at cardbus0 dev 0 function 0 3Com

Re: HP Proliant DL385 with Squid at a Gigabit-switch - bad network performance

2009-02-28 Thread Stuart Henderson
On 2009/02/28 12:10, Pereresus ne Vlezaet Buggy wrote: On 28 February 2009 ?. 01:58:29 Stuart Henderson wrote: On 2009-02-27, Pete Vickers p...@systemnet.no wrote: The bge driver sucks for these cards - just chuck in an em(4) NIC and you should see instant improvement. 'netstat -I

Re: HP Proliant DL385 with Squid at a Gigabit-switch - bad network performance

2009-02-28 Thread Laurent CARON
Pete Vickers wrote: The bge driver sucks for these cards - just chuck in an em(4) NIC and you should see instant improvement. Those cards have always been unreliable for me under Linux and OpenBSD.

Re: System security question

2009-02-28 Thread Ingo Schwarze
Hi Felipe, Felipe Alfaro Solana wrote on Sat, Feb 28, 2009 at 10:53:50AM +0100: On Thu, Feb 26, 2009 at 11:13 PM, Ingo Schwarze schwa...@usta.de wrote: Jean-Francois wrote on Wed, Feb 25, 2009 at 10:08:22PM +0100: I actually built the following system : - OpenBSD running on a standard AMD

Re: Postscript versions of MAN files.

2009-02-28 Thread Ingo Schwarze
Hi Anathea, Anathae Townsend wrote on Sat, Feb 28, 2009 at 01:49:31AM -0700: From the looks of the /usr/share/man directory, there are provisions in OpenBSD for postscript versions of the various manual pages for OpenBSD. I have looked, but not exhaustively, in the make files under

tcpdump and IPv6 on OpenBSD 4.4 possible bug

2009-02-28 Thread new_guy
While doing some testing of a commercial IDS device, we were attempting to verify the vendor's claim that the device is IPv6 capable and would detect any IPv6 attack. So, we tested both an IPv4 attack and an IPv6 attack. OpenBSD 4.4 i386 running nmap was the source of the attacks. Debian Linux was

Re: SOCKS proxy vs. HTTP proxy!

2009-02-28 Thread ropers
2009/2/16 Tony Berth tonybe...@googlemail.com: Dear List, what is the functional difference between a SOCKS implemented proxy and a HTTP one? Thanks Tony http://en.wikipedia.org/wiki/SOCKS#Comparison_between_SOCKS_and_HTTP_proxies regards, --ropers

Re: route: network is unreachable

2009-02-28 Thread Sergey Khentov
It is dhclient, definitely. I've configured rl1 to use static IP, removed new task from root's crontab, and, at least for this time (about 3 hours) the route stays on his place. Thanks everyone for your help! PS Vadim, I'll be glad to test new dhclient-script. 2009/2/28 Sergey Khentov

Re: System security question

2009-02-28 Thread Felipe Alfaro Solana
On Sat, Feb 28, 2009 at 1:51 PM, Ingo Schwarze schwa...@usta.de wrote: Hi Felipe, Felipe Alfaro Solana wrote on Sat, Feb 28, 2009 at 10:53:50AM +0100: On Thu, Feb 26, 2009 at 11:13 PM, Ingo Schwarze schwa...@usta.de wrote: Jean-Francois wrote on Wed, Feb 25, 2009 at 10:08:22PM +0100: I

Re: System security question

2009-02-28 Thread Bret S. Lambert
On Sat, Feb 28, 2009 at 05:49:22PM +0100, Felipe Alfaro Solana wrote: [snip] Of course if the attacker can gain remote access to the machine, IPSec is not very useful since the attacker can probably retrieve the encryption keys from the kernel :) And the same is true of NFSv4. And if your

Re: HP Proliant DL385 with Squid at a Gigabit-switch - bad network performance

2009-02-28 Thread Steve Shockley
On 2/27/2009 8:43 AM, Laurent CARON wrote: - Forcing speed on switch - Forcing speed on nic Why? This practice made sense when 10baseT gear from different vendors wasn't compatible, but not for the last 15-20 years. http://www.ethermanage.com/ethernet/pdf/dell-auto-neg.pdf Moreover,

Re: System security question

2009-02-28 Thread Jean-Francois
Hi, And I totally agree with you, Mixing firewall services with services like Web or file/print services is a recipe for disaster. True since hacking the web server is entering the firewall itself. But the web server, httpd, is chrooted ... so why would there be a problem here ? Le samedi 28

relayd vs. pf

2009-02-28 Thread mailinglist
Hey There! For single port redirection is there any difference between relayd or pf?

Re: relayd vs. pf

2009-02-28 Thread Brian McCann
On Sat, Feb 28, 2009 at 3:01 PM, mailingl...@modernbiztonsag.org wrote: Hey There! For single port redirection is there any difference between relayd or pf? relayd has an advantage if you have multiple hosts you want to balance between (like a pool of web servers), since it checks status of

Re: relayd vs. pf

2009-02-28 Thread Mate Gabri
On Sat, Feb 28, 2009 at 3:01 PM, mailingl...@modernbiztonsag.org wrote: Hey There! For single port redirection is there any difference between relayd or pf? relayd has an advantage if you have multiple hosts you want to balance between (like a pool of web servers), since it checks

Re: System security question

2009-02-28 Thread Brynet
Ingo Schwarze wrote: That doesn't help the original poster because NFSv4 is not available on OpenBSD. Technically there is an NFSv4 client server available for OpenBSD, although.. it might need some manual tweaks for 4.4 or 4.5. http://snowhite.cis.uoguelph.ca/nfsv4/ +

Re: HP Proliant DL385 with Squid at a Gigabit-switch - bad network performance

2009-02-28 Thread Laurent CARON
Steve Shockley wrote: On 2/27/2009 8:43 AM, Laurent CARON wrote: - Forcing speed on switch - Forcing speed on nic Why? This practice made sense when 10baseT gear from different vendors wasn't compatible, but not for the last 15-20 years. This practice still makes sense, at least with

Re: System security question

2009-02-28 Thread Felipe Alfaro Solana
On Sat, Feb 28, 2009 at 6:40 PM, Jean-Francois jfsimon1...@gmail.comwrote: Hi, And I totally agree with you, Mixing firewall services with services like Web or file/print services is a recipe for disaster. True since hacking the web server is entering the firewall itself. But the web

Re: HP Proliant DL385 with Squid at a Gigabit-switch - bad network performance

2009-02-28 Thread Brian Keefer
On Feb 28, 2009, at 12:28 PM, Laurent CARON wrote: Steve Shockley wrote: On 2/27/2009 8:43 AM, Laurent CARON wrote: - Forcing speed on switch - Forcing speed on nic Why? This practice made sense when 10baseT gear from different vendors wasn't compatible, but not for the last 15-20 years.

nroff -mandoc alternative

2009-02-28 Thread Kristaps Džonsons
Hello, if anybody's interested in an alternative to groff for viewing BSD mdoc manual pages, I'm actively looking for patches and problem reports for mdocml. From the site http://mdocml.bsd.lv: mdocml is a suite of tools compiling `mdoc', the roff macro package for BSD manual pages. The

Re: nroff -mandoc alternative

2009-02-28 Thread Kristaps Džonsons
Matthew Szudzik wrote: Hello, if anybody's interested in an alternative to groff for viewing BSD mdoc manual pages, I'm actively looking for patches and problem reports for mdocml. From the site http://mdocml.bsd.lv: Excellent! Was this project started in response to the discussion about

Re: nroff -mandoc alternative

2009-02-28 Thread Matthew Szudzik
On Sat, Feb 28, 2009 at 11:01:49PM +0100, Kristaps D??onsons wrote: Hello, if anybody's interested in an alternative to groff for viewing BSD mdoc manual pages, I'm actively looking for patches and problem reports for mdocml. From the site http://mdocml.bsd.lv: Excellent! Was this project

Re: HP Proliant DL385 with Squid at a Gigabit-switch - bad network performance

2009-02-28 Thread Steve Shockley
On 2/28/2009 4:45 PM, Brian Keefer wrote: I've had problems with bge(4)s in IBM xSeries machines that required forcing speed/duplex, else they would negotiate to 100/half. Probably your switch was forced to 100/full... autonegotiation needs to be enabled on both ends of the connection.

nv driver and 4.5 beta

2009-02-28 Thread j
After getting almost there (thanks JC Roberts) on Intel 845G, I tried the other computer, an old nforce2-based machine. It works on 4.3-stable, and on 4.5beta Xorg -configure says No devices to configure. Configuration failed. although nv is in the driver list. So this is a regression; used

various devices in /dev

2009-02-28 Thread Marcel Dan
What is the best way to see what the device files are assigned to in /dev especially when plugging in usb devices. I typically use; # tail -f /var/log/messages to see the device assignment. However, I am plugging in a Garmin etrex gps unit with a usb to serial port adapter and I have to

Re: various devices in /dev

2009-02-28 Thread Duncan Patton a Campbell
On Sat, 28 Feb 2009 18:52:38 -0800 Marcel Dan marcel...@nwvd.net wrote: What is the best way to see what the device files are assigned to in /dev especially when plugging in usb devices. I use dmesg | tail to find out what the latest is with (USB) devs. Dhu I typically use; # tail -f

Re: System security question

2009-02-28 Thread Tomáš Bodžár
There is a very good alternative for NFS.The name is scp.A small How-To is described in book Mastering FreeBSD and OpenBSD security. In my point of view firewall must be separate machine in all cases. www and file server on one machine is acceptible solution in case of use of chroot,jail, zones