Re: making firefox less insecure

2014-11-21 Thread frantisek holop
Jorge Gabriel Lopez Paramount, 16 Nov 2014 15:55: Seems heavy, and probably harder to set up and maintain than (e) and (f). Sure it's harder to set up, but believe me, after setting up the maintenance is almost zero. I restart every week that server as read-write to patch it as if the

Re: *ERROR* radeon_cp: Failed to load firmware radeon-r300_cp

2014-11-21 Thread Steven McDonald
On Fri, 21 Nov 2014 06:30:16 +0100 John Smith hufflep...@bsdmail.com wrote: Is there anyway I can prevent this seemingly harmless error? I don't use X and didn't select the X packages during the installation process. You can probably do it by disabling the drm and/or radeondrm driver with

Re: question about raw disk devices

2014-11-21 Thread Luca Ferrari
On Thu, Nov 20, 2014 at 6:36 PM, Ted Unangst t...@tedunangst.com wrote: The block devices are mostly historic artifact. You usually want the character device; the block device is almost exclusively for mount. It's probably a mistake to try to use both at the same time. Thanks, therefore I can

Re: *ERROR* radeon_cp: Failed to load firmware radeon-r300_cp

2014-11-21 Thread Nick Holland
On 11/21/14 00:29, John Smith wrote: $ dmesg drm: initializing kernel modesetting (RS480 0x1002:0x5954 0x103C:0x2A26). radeondrm0: VRAM: 64M 0x1C00 - 0x1FFF (64M used) radeondrm0: GTT: 512M 0x2000 - 0x3FFF drm: PCIE GART of 512M enabled

Re: ifstated intermittant flapping after 5.1 to 5.5 upgrade

2014-11-21 Thread Alan McKay
We believe we've found it - the internet-facing NIC had a minor configuration change as well, as part of the upgrade. It was no longer explicitly being set in full duplex mode, and as it turns out it was coming up in half-duplex. Now we play the waiting game to see whether we are right :-)

Re: Concurrent L2TP/IPSEC connections for Windows Clients behind a shared NAT

2014-11-21 Thread James McGoodwin
Thanks for your feedback and confirmation Yasuoka. I’m glad you’re able to reproduce the issue, it’s been a difficult one to try to explain to google;) Took me longer than I’d care to admit to finally pin down the specifics so I could even pose this question to the group. I think for the time

Re: question about raw disk devices

2014-11-21 Thread Theo de Raadt
On Thu, Nov 20, 2014 at 6:36 PM, Ted Unangst t...@tedunangst.com wrote: The block devices are mostly historic artifact. You usually want the character device; the block device is almost exclusively for mount. It's probably a mistake to try to use both at the same time. Thanks, therefore I can

Tor doc/TUNING Review

2014-11-21 Thread Libertas
Can anyone do me a favor and let me know whether this short guide, along with the correction described in the comments, is correct? https://trac.torproject.org/projects/tor/ticket/13702

Re: Concurrent L2TP/IPSEC connections for Windows Clients behind a shared NAT

2014-11-21 Thread James McGoodwin
Hey dude. Thanks for replying. The reason we're choosing OpenVPN is because we can configure the server and clients to communicate to the server at 443/TCP which pretty much guarantees that road warriors and NAT'd office employees could all reach through any firewall. (Ok, that's a broad

Re: Tor doc/TUNING Review

2014-11-21 Thread Stefan Sperling
On Fri, Nov 21, 2014 at 11:28:56AM -0500, Libertas wrote: Can anyone do me a favor and let me know whether this short guide, along with the correction described in the comments, is correct? https://trac.torproject.org/projects/tor/ticket/13702 In which configuration does tor need to open

Re: Tor doc/TUNING Review

2014-11-21 Thread lists
On Fri, Nov 21, 2014 at 05:51:52PM +0100, Stefan Sperling wrote: In which configuration does tor need to open many files? I've been running a tor relay on OpenBSD for more than a year without any adjustments to ulimits and didn't notice any problems. I can second this. I've used Tor from

Re: Tor doc/TUNING Review

2014-11-21 Thread Libertas
Hmm, have you been keeping an eye on your logs? I eventually got a warning telling me that Tor had to stop opening connections because it couldn't open any more files. Regardless, Tor frequently opens thousands of files, while the default hard limit for OpenBSD users is 512-1024 files. My Linux

Re: USB worked on 5.5, not on 5.6 on MacbookAir5,1

2014-11-21 Thread Scott Bonds
Excerpts from Martin Pieuchot's message of 2014-11-20 02:30:44 -0800: I don't know how it works in Apple machines but other people reported such weird thing with machine having an xhci(4)/ehci(4) controller. Telling the BIOS to deactivate USB 3 support made their ports work again with

Re: Tor doc/TUNING Review

2014-11-21 Thread lists
On Fri, Nov 21, 2014 at 12:30:57PM -0500, Libertas wrote: Hmm, have you been keeping an eye on your logs? I eventually got a warning telling me that Tor had to stop opening connections because it couldn't open any more files. Regardless, Tor frequently opens thousands of files, while the

Re: Tor doc/TUNING Review

2014-11-21 Thread Stefan Sperling
On Fri, Nov 21, 2014 at 12:30:57PM -0500, Libertas wrote: Hmm, have you been keeping an eye on your logs? I eventually got a warning telling me that Tor had to stop opening connections because it couldn't open any more files. Regardless, Tor frequently opens thousands of files, while the

Re: making firefox less insecure

2014-11-21 Thread Jorge Gabriel Lopez Paramount
Quoting frantisek holop min...@obiit.org: Jorge Gabriel Lopez Paramount, 16 Nov 2014 15:55: Seems heavy, and probably harder to set up and maintain than (e) and (f). Sure it's harder to set up, but believe me, after setting up the maintenance is almost zero. I restart every week that server

Re: Tor doc/TUNING Review

2014-11-21 Thread Libertas
It shouldn't be an issue with clients IIRC, as they only maintain a few circuits. I just ran 'sudo lsof | wc -l' on a Linux guard relay that moves a little less than 1 MB/s (not much traffic), and it returned 12,500. If anyone else reading this has an active Tor relay running OpenBSD with

Re: Tor doc/TUNING Review

2014-11-21 Thread Stefan Sperling
On Fri, Nov 21, 2014 at 02:39:02PM -0500, Libertas wrote: It shouldn't be an issue with clients IIRC, as they only maintain a few circuits. I just ran 'sudo lsof | wc -l' on a Linux guard relay that moves a little less than 1 MB/s (not much traffic), and it returned 12,500. If anyone else

Re: Tor doc/TUNING Review

2014-11-21 Thread Libertas
This is the warning message I saw: https://gitweb.torproject.org/tor.git/blob/42b42605f8d8eac25361be229354f6393967df4f:/src/common/compat.c#l1555 Although I suppose you could also get one of the related ones in the same function. On 11/21/2014 12:40 PM, Stefan Sperling wrote: On Fri, Nov 21,

pkg_add update checker?

2014-11-21 Thread John Merriam
Hello. I am trying to write a script to check for updates to the binary packages by checking the output of pkg_add then sending an e-mail if something is found. My very simple script is this: #!/bin/ksh NEWPKGS=`pkg_add -Iusx | grep -v ^quirks\-` if [ $NEWPKGS != ]; then # send message

Re: pkg_add update checker?

2014-11-21 Thread Comète
21 novembre 2014 23:00 John Merriam j...@johnmerriam.net a écrit: Hello. I am trying to write a script to check for updates to the binary packages by checking the output of pkg_add then sending an e-mail if something is found. My very simple script is this: #!/bin/ksh NEWPKGS=`pkg_add

Re: pkg_add update checker?

2014-11-21 Thread John Merriam
On Fri, 21 Nov 2014, Comète wrote: 21 novembre 2014 23:00 John Merriam j...@johnmerriam.net a écrit: Hello. I am trying to write a script to check for updates to the binary packages by checking the output of pkg_add then sending an e-mail if something is found. ... Maybe you're looking

Re: pkg_add update checker?

2014-11-21 Thread bodie
On 22.11.2014 03:40, John Merriam wrote: On Fri, 21 Nov 2014, Comète wrote: 21 novembre 2014 23:00 John Merriam j...@johnmerriam.net a écrit: Hello. I am trying to write a script to check for updates to the binary packages by checking the output of pkg_add then sending an e-mail if