Re: Using ospfd to establish default routes with two outgoing connections

2009-05-08 Thread Marco Fretz
hi, MTU on ethernet vlan interfaces are also 1500. the vlan tag overhead is handled by the switch and NIC. you do not have to care about that. run tcpdump on all interfaces and look for the ospf hello packets... and can you please post the logs... ? you'r not getting any neighbors with ospfctl

Re: azalia

2009-05-08 Thread LEVAI Daniel
On Thursday 07 May 2009 21.45.00 Jacob Meuser wrote: On Thu, May 07, 2009 at 11:14:17AM +0200, LEVAI Daniel wrote: I put a lot of work into azalia(4) in the last release cycel, and I'd like to be able to say, when 4.6 release comes, that azalia is completed. by completed I mean it

Re: Improving kernel crypto performance

2009-05-08 Thread Matthew Dempsky
On Thu, Apr 30, 2009 at 11:29 AM, Matthew Dempsky matt...@dempsky.org wrote: - benchmark aes-ctr performance with current code vs. optimized assembly code (e.g., just hacking sys/crypto/rijndael.c to use optimized code); if no significant improvement, abort I didn't have the time to devote to

Re: Improving kernel crypto performance

2009-05-08 Thread Matthew Dempsky
On Fri, May 8, 2009 at 12:37 AM, Matthew Dempsky matt...@dempsky.org wrote: The eBACS project[1] times a bunch of different algorithms and implementations on a bunch of different CPUs. [1] http://bench.cr.yp.to

Re: Using ospfd to establish default routes with two outgoing connections (SOLVED)

2009-05-08 Thread carlopmart
Stuart Henderson wrote: On 2009-05-07, carlopmart carlopm...@gmail.com wrote: Matthew Dempsky wrote: On Thu, May 7, 2009 at 1:47 PM, carlopmart carlopm...@gmail.com wrote: Which is that sysctl param Stuart?? net.inet.ip.multipath See http://www.openbsd.org/faq/faq6.html#Multipath I have

Re: Calomel.org

2009-05-08 Thread Peter N. M. Hansteen
Darrin Chandler dwchand...@stilyagin.com writes: This is true of any sites with OpenBSD help. Sometimes I've found some info on these sites that's saved me much time, but I'd never take the info without thinking it through myself, check against the man pages, FAQ, etc. One common problem is

Re: Problem with setting up dial-up server with getty and ppp

2009-05-08 Thread Alexander Shikoff
On Thu, May 07, 2009 at 02:27:51PM -0400, Brynet wrote: Hi Alexander, Hello, before we continue I'd like to tell that I'm a kind of newbie in OpenBSD. I was using FreeBSD for last 5 years, many things in OpenBSD are almost the same as in FreeBSD (and vice versa) but also there are many

Re: Problem with setting up dial-up server with getty and ppp

2009-05-08 Thread Stuart Henderson
On 2009-05-08, Alexander Shikoff minot...@crete.org.ua wrote: I only have two serial ports on motherboard, I see them in dmesg: com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo But if I understand correctly they are named as

pf bug

2009-05-08 Thread Cristiano Deana
Hi, i think this is a pf's bug: short description: internal interface with two different ip's in two different lans: 192.168.20.254/24 192.168.21.254/24 They're used as gateway from the two lans. nat rules: every 10 ip's use a different public ip. everithing works fine for the first lan, with

No OS safe??

2009-05-08 Thread Chris Harries
This is more of a grammar/wording question, but it does go on to the security of OS's in general. Was having a read of this; http://www.cbc.ca/technology/story/2009/04/15/ibotnet-trojan.html And the last comment made me think about OpenBSD. The article closes by saying this shows that no

Re: svnd is incredible slow... somebody else notice that?

2009-05-08 Thread Thorsten Glaser
Sebastian Rother sebastian.rother at jpberlin.de writes: vnconfig -cK 52527 -S saltfile /dev/sd0k /dev/svnd1c I think that does synchronous writes, even if you mount the svnd device async or softdep, which is why it is so slow. After losing a hard disc image _file_ to fsck on the filesy- stem

Re: Problem with setting up dial-up server with getty and ppp

2009-05-08 Thread Alexander Shikoff
Hi Stuart, On Fri, May 08, 2009 at 10:35:35AM +, Stuart Henderson wrote: On 2009-05-08, Alexander Shikoff minot...@crete.org.ua wrote: I only have two serial ports on motherboard, I see them in dmesg: com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo com1 at isa0 port 0x2f8/8 irq

Re: pf bug

2009-05-08 Thread Karl-Heinz Wild
This seems to me not valid. You can check with l = {1.1.1.1,1.1.1.2} block from $l with pfctl -n -v -f file it produce l = {1.1.1.1,1.1.1.2} block drop inet from 1.1.1.1 to any block drop inet from 1.1.1.2 to any Try next your example. Karl-Heinz On 08.05.2009, at 12:37, Cristiano Deana

Re: Disk enryption or storing data in safe

2009-05-08 Thread Cem Kayali
Thanks for reply... Well, i checked that before, but also heard that 'when a system with a mounted, encrypted virtual filesystem is shutdown uncleanly, the encrypted virtual filesystem's structures get damaged and, since OpenBSD's fsck command will not currently acknowledge vnd filesystems,

Re: Problem with setting up dial-up server with getty and ppp

2009-05-08 Thread Henning Brauer
* Alexander Shikoff minot...@crete.org.ua [2009-05-08 13:39]: Well, I have no any cy-like card. Why I'm getting cuac# devices in /dev ? they are always there There are no tty04..tty10 devices in /dev cd /dev; sh MAKEDEV tty04 etc for the others -- Henning Brauer, h...@bsws.de,

Problems with cas interfaces on sun v440

2009-05-08 Thread Salvatore Sciacco
Hi folks, I have some problems with 4.5 on a sun v440 used as firewall. As soon as the traffic goes up i got a lot of status problems and the connections became unstable (packet loss) i.e.: May 8 10:00:04 sunv440 /bsd: cas0: status=11389096TXEMPTY,TXDONE,RXDONE,RX_COMP_FULL,RXMAC May 8

Re: azalia

2009-05-08 Thread Jacob Meuser
On Fri, May 08, 2009 at 09:14:00AM +0200, LEVAI Daniel wrote: On Thursday 07 May 2009 21.45.00 Jacob Meuser wrote: On Thu, May 07, 2009 at 11:14:17AM +0200, LEVAI Daniel wrote: I put a lot of work into azalia(4) in the last release cycel, and I'd like to be able to say, when 4.6 release

Re: Disk enryption or storing data in safe

2009-05-08 Thread Jacob Yocom-Piatt
Cem Kayali wrote: Thanks for reply... Well, i checked that before, but also heard that 'when a system with a mounted, encrypted virtual filesystem is shutdown uncleanly, the encrypted virtual filesystem's structures get damaged and, since OpenBSD's fsck command will not currently acknowledge

Re: No OS safe??

2009-05-08 Thread Felipe Alfaro Solana
On Fri, May 8, 2009 at 12:34 PM, Chris Harries ch...@sharescope.co.uk wrote: This is more of a grammar/wording question, but it does go on to the security of OS's in general. Was having a read of this; http://www.cbc.ca/technology/story/2009/04/15/ibotnet-trojan.html And the last

Re: Problem with setting up dial-up server with getty and ppp

2009-05-08 Thread Stuart Henderson
On 2009/05/08 14:20, Alexander Shikoff wrote: Hi Stuart, On Fri, May 08, 2009 at 10:35:35AM +, Stuart Henderson wrote: On 2009-05-08, Alexander Shikoff minot...@crete.org.ua wrote: I only have two serial ports on motherboard, I see them in dmesg: com0 at isa0 port 0x3f8/8 irq 4:

Re: New snapshots - new installer

2009-05-08 Thread Amarendra Godbole
On Fri, May 8, 2009 at 1:31 PM, Antoine Jacoutot ajacou...@bsdfrog.org wrote: On Thu, 7 May 2009, Theo de Raadt wrote: useradd really does that? A new group for every user? I think that is stupid behaviour. But I will think about if we should this in the script. I agree, it is stupid

Re: Disk enryption or storing data in safe

2009-05-08 Thread Christian Ruesch
Hello, take a look at: mount_vnd(8). Kind regards Christian On Fri, May 08, 2009 at 02:10:13PM +0300, Cem Kayali wrote: Hello! I've just registered to the list and i hope this is the right list to ask a question about OpenBSD. I would like to ask whether OpenBSD has stable

Re: No OS safe??

2009-05-08 Thread Ian Turner
On Fri, May 8, 2009 at 8:17 AM, Felipe Alfaro Solana felipe.alf...@gmail.com wrote: We could debate why OpenBSD is inherently more secure than Windows (in fact we could debate why almost any operating system is inherently more secure than Windows). The point here is OpenBSD is inherently more

Re: pf bug

2009-05-08 Thread Cristiano Deana
On 5/8/09 1:24 PM, Karl-Heinz Wild wrote: Hi, This seems to me not valid. from pf.conf(5) : Ranges of addresses are specified by using the `-' operator. For instance: ``10.1.1.10 - 10.1.1.12'' means all addresses from 10.1.1.10 to 10.1.1.12, hence addresses 10.1.1.10, 10.1.1.11, and

Re: No OS safe??

2009-05-08 Thread Michal
But, that's also up for debate depending on if you interpret secure to be synonymous with secure enough or with completely secure. I think you hit the nail on the head there :) -Original Message- From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of Ian Turner Sent:

Re: No OS safe??

2009-05-08 Thread Felipe Alfaro Solana
On Fri, May 8, 2009 at 2:48 PM, Ian Turner iturner.c...@gtalumni.org wrote: On Fri, May 8, 2009 at 8:17 AM, Felipe Alfaro Solana felipe.alf...@gmail.com wrote: We could debate why OpenBSD is inherently more secure than Windows (in fact we could debate why almost any operating system is

Re: Problem with setting up dial-up server with getty and ppp

2009-05-08 Thread Alexander Shikoff
On Fri, May 08, 2009 at 01:33:28PM +0100, Stuart Henderson wrote: On 2009/05/08 14:20, Alexander Shikoff wrote: Hi Stuart, cuaU# for USB serial ports, cua## for ns16x50-like devices. think those are the only choices for serial ports at the moment. for your puc(4) look at

OpenBGPD Failover using CARP

2009-05-08 Thread Tom Martin
Hi allWe are now busy implementing a redundancy environment using openBSD4.5 with OpenBGPD. In this setting we use a CARP interface to realize a failover between the primary and the secondary route-server. With the virtual IP-address we have to admit, the failover works perfect! But it only works

Re: OT: 10GbE Physical Network Taps

2009-05-08 Thread chefren
On 05/06/09 13:33, J.C. Roberts wrote: I need to collect raw throughput statistics without increasing latency or reducing bandwidth on 10GbE fiber links, .. As far as my understanding allows, I believe the best way to do this is with a physical network tap connected to monitoring equipment.

Re: azalia

2009-05-08 Thread 23号
I checkout the newest for azalia, now anything is okay, my dmesg is: OpenBSD 4.5 (GENERIC.MP) #1: Fri May 8 21:57:45 GMT 2009 r...@obsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP cpu0: Intel(R) Core(TM)2 Duo CPU T5250 @ 1.50GHz (GenuineIntel 686-class) 1.50 GHz cpu0:

Re: Problems with cas interfaces on sun v440

2009-05-08 Thread Michael
Hi, Salvatore Sciacco schrieb: I've also modified some sysctl params but without success: net.inet.tcp.recvspace=262144 net.inet.tcp.sendspace=262144 net.inet.udp.recvspace=262144 net.inet.udp.sendspace=262144 Anyone have some suggestion? I've got the same issue, but by increasing those

Re: Problems with cas interfaces on sun v440

2009-05-08 Thread Salvatore Sciacco
Hi Michael, On Fri, May 8, 2009 at 4:21 PM, Michael bele...@bsdmail.de wrote: Salvatore Sciacco schrieb: I've also modified some sysctl params but without success: net.inet.tcp.recvspace=262144 net.inet.tcp.sendspace=262144 net.inet.udp.recvspace=262144 net.inet.udp.sendspace=262144

Re: No OS safe??

2009-05-08 Thread Darrin Chandler
On Fri, May 08, 2009 at 11:34:44AM +0100, Chris Harries wrote: This here problem of downloading a dodgy copy of Photoshop which opens you up for a BotNet is something that can effect all OS's.but is that completely true? Can the same thing happen to an OpenBSD machine and is there no way

Re: No OS safe??

2009-05-08 Thread Bob Beck
http://www.cbc.ca/technology/story/2009/04/15/ibotnet-trojan.html It's a *botnet* guys, installed by *trojan* i.e. by tricking the stupid idiot at the keyboard into doing something retarded. The OS can be the most secure thing on the planet and if the person at the keyboard is stupid you'll

Re: rtable and pf

2009-05-08 Thread Linus
Henning Brauer wrote: * Uwe Werler u...@o3si.de [2009-05-07 16:43]: Hello list, I have an OpenBSD box with 4.5 connected to two carriers, to one per dhcp and to the other static configured. Now I tried to change my rule set from route-to/reply-to syntax to rtable usage. Up to now I added my

Re: No OS safe??

2009-05-08 Thread (private) HKS
On Fri, May 8, 2009 at 11:33 AM, Bob Beck b...@openbsd.org wrote: http://www.cbc.ca/technology/story/2009/04/15/ibotnet-trojan.html It's a *botnet* guys, installed by *trojan* i.e. by tricking the stupid idiot at the keyboard into doing something retarded. The OS can be the most secure

Re: No OS safe??

2009-05-08 Thread bofh
Well, that's because you didn't get the pro version which comes with locks and cables. On 5/8/09, (private) HKS hks.priv...@gmail.com wrote: On Fri, May 8, 2009 at 11:33 AM, Bob Beck b...@openbsd.org wrote: http://www.cbc.ca/technology/story/2009/04/15/ibotnet-trojan.html It's a *botnet*

Re: Recommendation for Beowulf/Apache Setup

2009-05-08 Thread Vivek Ayer
Thanks for the tip. I was looking at the all the options and FreeBSD/Xen looks like the best bet as far as resource throttling goes. Install ROCKS on the nodes, install Xen on ROCKS, install FreeBSD as domU and give it domU a lot of priority. I'll give it a shot and publish my findings in the

Re: logging smtp connections

2009-05-08 Thread Brian A. Seklecki
On Sat, 2009-05-02 at 05:06 -0500, Robson Caetano wrote: Hi I would like to log From:, To: and Subject: fields of every SMTP connection to my internal SMTP server that is passed by the openbsd firewall. You're better off doing that within your MTA. Courier has a Big Brother feature:

Re: No OS safe??

2009-05-08 Thread Daniel Melameth
On Fri, May 8, 2009 at 12:17 PM, (private) HKS hks.priv...@gmail.com wrote: Wait, so you're saying OpenBSD can't even protect me from myself? Also I left my laptop running OpenBSD on a table at Starbucks while I went to the bathroom and when I came back it was gone! So much for secure by

Re: No OS safe??

2009-05-08 Thread Noah Pugsley
+1 for friday laughs. (private) HKS wrote: On Fri, May 8, 2009 at 11:33 AM, Bob Beck b...@openbsd.org wrote: http://www.cbc.ca/technology/story/2009/04/15/ibotnet-trojan.html It's a *botnet* guys, installed by *trojan* i.e. by tricking the stupid idiot at the keyboard

kernel panic, how to debug? (generic mp i386)

2009-05-08 Thread Dan
Today after I executed a stop on apache the machine crashed and generated a /var/crash with: 2.0Kbounds 6.5Mbsd.0 2.0Kbsd.0.core 2.0Kminfree I have been searching and have not found a site in regards to debug this on OpenBSD. Could somebody shed some light? Thank you. Daniel

Re: Recommendation for Beowulf/Apache Setup

2009-05-08 Thread Peter N. M. Hansteen
Vivek Ayer vivek.a...@gmail.com writes: But of course, to keep it relevant, OpenBSD will run on the router and will use hoststated http://home.nuug.no/~peter/riga2008/relayd.html. I guess it's been renamed. I haven't paid attention. The book of PF uses hoststated, so I guess it's already kind

Re: kernel panic, how to debug? (generic mp i386)

2009-05-08 Thread Theo de Raadt
Today after I executed a stop on apache the machine crashed and generated a /var/crash with: 2.0Kbounds 6.5Mbsd.0 2.0Kbsd.0.core 2.0Kminfree man savecore

Re: kernel panic, how to debug? (generic mp i386)

2009-05-08 Thread Robert
On Fri, 08 May 2009 17:41:08 -0400 Dan un...@iseoi.com wrote: Today after I executed a stop on apache the machine crashed and generated a /var/crash with: 2.0Kbounds 6.5Mbsd.0 2.0Kbsd.0.core 2.0Kminfree I have been searching and have not found a site in regards to debug

Re: Disk enryption or storing data in safe

2009-05-08 Thread Cem Kayali
Hi, Thanks for hints, it was helpfull and i have just created an encrypted raid volume succesfully. Well, could you please advise me how i can automate to run bioctl *before* fstab entires mounted? --- so that i can push ie; /var, /usr and swap partitions into encrypted volume? Thanks in

Re: how to configure Grub 0.97 for booting my OpenBSD 4.5

2009-05-08 Thread 飞飞
Hi, Nick, Thanks for you advices, I clear Grub from my MBR, and flag the OpenBSD partition bootable , but I also got a ERR M error code. Yes, I read man biosboot, but I don't know how to resolve it. I try to reinstall OpenBSD 4.5 again , but it is the same error :(. 2009/5/7 Nick Holland

Re: how to configure Grub 0.97 for booting my OpenBSD 4.5

2009-05-08 Thread Steve Williams
Feifei (??) wrote: Hi, Nick, Thanks for you advices, I clear Grub from my MBR, and flag the OpenBSD partition bootable , but I also got a ERR M error code. Yes, I read man biosboot, but I don't know how to resolve it. I try to reinstall OpenBSD 4.5 again , but it is the same error :(. 2009/5/7