Re: Problem with CARP interfaces not responding until VHID is changed.

2016-01-21 Thread Alexander Salmin
Hey, Welcome to the OpenBSD community mailing list. I'm also using CARP for lots of HA-setups and yes, I will be gentle. I have never had issues like yours but my setup seems very different. The virtual host id (vhid) and its ip adress becomes a carp-group, so changing the vhid back and forth

Re: openbgpd puts wrong nexthop in FIB

2016-01-21 Thread Tony Sarendal
2016-01-21 11:16 GMT+01:00 Stuart Henderson : > On 2016-01-20, Tony Sarendal wrote: > > network inet connected is broken in 5.6, 5.8 and -current. > > Restarting bgpd is required when making interface changes. > > Ah, so it was fixed in 5.7 and broken again? Now the previous mail > (http://permal

Re: timestamps

2016-01-21 Thread Steve Shockley
On 1/21/2016 5:53 AM, Stuart Henderson wrote: Removing timestamps will kill performance unless it's on a slow line. It gives a good clue though - try this (on the centos box) instead: http://stackoverflow.com/questions/8893888/dropping-of-connections-with-tcp-tw-recycle Better reference. http:

Re: Mismatch between config and documentation for dhcpd?

2016-01-21 Thread Etienne
On 2016-01-21 12:28, Raf Czlonka wrote: I didn't add a prefix, it's been added in the log by the program itself. My config file looked like below: option domain-name-servers 192.168.0.71, 192.168.0.149; option classless-static-routes 192.168.32/24 192.168.0.1;

Re: Mismatch between config and documentation for dhcpd?

2016-01-21 Thread Etienne
On 2016-01-21 12:28, Raf Czlonka wrote: I didn't add a prefix, it's been added in the log by the program itself. My config file looked like below: option domain-name-servers 192.168.0.71, 192.168.0.149; option classless-static-routes 192.168.32/24 1

BUILDINFO file included in system snapshot dirs...

2016-01-21 Thread Adam Jeanguenat
I hadn't seen anything posted to misc@ or tech@ about this yet, but wanted to thank the person responsible for the relatively recent addition (looks like late Oct or early Nov 2015) of the BUILDINFO file included with the kernel/base snapshots. I only noticed it last week and it was a rather nice s

Problem with CARP interfaces not responding until VHID is changed.

2016-01-21 Thread rizz2pro .
Hello, This is my first time posting here so be gentle. It seems that random CARP interfaces on our systems will just die, stop replying to any requests OR only 1 request out of ~50 will make it through, slowly. tcpdump also shows no traffic reach the interface. Only when that 1 request makes i

Missing "boot> machine regs" on amd64

2016-01-21 Thread edward wandasiewicz
The man page on boot(8) for amd64 says we should be able to print the contents of the processor registers if compiled with DEBUG. If we can do so on amd64, it seems we are missing a few debug.* files in the amd64 source tree to do so. % find /usr/src/sys/ -type f | xargs grep -l "DUMP_REGS" /usr/

Re: 5.9-beta upgrade stalled at base59.tgz 98% fetched, 51072 KB on first try, retry succeeds

2016-01-21 Thread mark9
Folks, I also see this, on an i386 system. It's been happening since 2015-12-19, but I hadn't used snapshots since 2015-09-25, where it did not occur. I download snapshots from mirror.ox.ac.uk. Installing base59.tgz stalls at 98%, 48128KB. Dmesg can be found at http://www.hydrus.org.uk/ref/chr

nat-t quirks with iked on openbsd 5.8

2016-01-21 Thread Sascha Biberhofer
Hi misc@, I'm using iked to establish ipsec tunnels on a multi-homed OpenBSD system (classical failover setup). iked is used to initialize key exchanges between various servers (which run strongswan/charon for IKE via ikev2). The iked.conf basically consists of entries like ikev2 active esp from

Re: igmp option 148 (RA)

2016-01-21 Thread Kapetanakis Giannis
On 21/01/16 13:15, Stuart Henderson wrote: See pf.conf(5) "allow-opts". thanx Stuart :) that did the trick G

Re: Mismatch between config and documentation for dhcpd?

2016-01-21 Thread Raf Czlonka
On Thu, Jan 21, 2016 at 11:15:42AM GMT, Etienne wrote: > On 2016-01-21 00:27, Stuart Henderson wrote: > > >>man dhcp-options(5) shows the option classless-static-routes, however, > >>when I use it, dhcpd fails to start and returns: > >> > >>dhcpd: /etc/dhcpd.conf line 49: unknown option > >>dhcp.c

Re: iwm0: could not initiate 2 GHz scan

2016-01-21 Thread Stefan Sperling
On Thu, Jan 14, 2016 at 07:41:59PM -0700, Chris Wojo wrote: > Here is a one liner from the beacons at home: It seems this AP does not support 802.11n and is using WEP. Is this correct? > Here are a few beacons from work: There's nothing unusual in these beacons as far as I can tell. > This wo

Re: igmp option 148 (RA)

2016-01-21 Thread Stuart Henderson
On 2016-01-21, Kapetanakis Giannis wrote: > Hi, > > I'm constantly seeing this on my pf router. > rule 61/(ip-option) pass in on $ext_if: $ext_gw > 224.0.0.1: igmp query > [tos 0xc0] [ttl 1] > > Rule 61 is: > @61 pass quick inet proto igmp from $ext_if:network to 224.0.0.1 keep > state (no-sync)

Re: Mismatch between config and documentation for dhcpd?

2016-01-21 Thread Etienne
On 2016-01-21 00:27, Stuart Henderson wrote: man dhcp-options(5) shows the option classless-static-routes, however, when I use it, dhcpd fails to start and returns: dhcpd: /etc/dhcpd.conf line 49: unknown option dhcp.classless-static-routes It looks like it should just be "classless-static-ro

Re: igmp option 148 (RA)

2016-01-21 Thread Jonathan Gray
On Thu, Jan 21, 2016 at 11:40:41AM +0100, Stefan Sperling wrote: > On Thu, Jan 21, 2016 at 12:27:06PM +0200, Kapetanakis Giannis wrote: > > Hi, > > > > I'm constantly seeing this on my pf router. > > rule 61/(ip-option) pass in on $ext_if: $ext_gw > 224.0.0.1: igmp query [tos > > 0xc0] [ttl 1] > >

Re: igmp option 148 (RA)

2016-01-21 Thread Kapetanakis Giannis
On 21/01/16 12:40, Stefan Sperling wrote: On Thu, Jan 21, 2016 at 12:27:06PM +0200, Kapetanakis Giannis wrote: Hi, I'm constantly seeing this on my pf router. rule 61/(ip-option) pass in on $ext_if: $ext_gw > 224.0.0.1: igmp query [tos 0xc0] [ttl 1] Rule 61 is: @61 pass quick inet proto igmp f

Re: timestamps

2016-01-21 Thread Stuart Henderson
On 2016-01-21, Stuart Henderson wrote: > On 2016-01-21, Steve Shockley wrote: >> A while back [1], I posted a question asking about timeout issues using >> Openup (or any transfers really) to work through a Websense proxy. >> Later, I had problems with Smokeping on OpenBSD showing ~50% packet l

Re: timestamps

2016-01-21 Thread Stuart Henderson
On 2016-01-21, Steve Shockley wrote: > A while back [1], I posted a question asking about timeout issues using > Openup (or any transfers really) to work through a Websense proxy. > Later, I had problems with Smokeping on OpenBSD showing ~50% packet loss > going through the proxy. After far to

igmp option 148 (RA)

2016-01-21 Thread Kapetanakis Giannis
Hi, I'm constantly seeing this on my pf router. rule 61/(ip-option) pass in on $ext_if: $ext_gw > 224.0.0.1: igmp query [tos 0xc0] [ttl 1] Rule 61 is: @61 pass quick inet proto igmp from $ext_if:network to 224.0.0.1 keep state (no-sync) tcpdump on $ext_if shows: $ext_gw > 224.0.0.1: igmp qu

Re: igmp option 148 (RA)

2016-01-21 Thread Stefan Sperling
On Thu, Jan 21, 2016 at 12:27:06PM +0200, Kapetanakis Giannis wrote: > Hi, > > I'm constantly seeing this on my pf router. > rule 61/(ip-option) pass in on $ext_if: $ext_gw > 224.0.0.1: igmp query [tos > 0xc0] [ttl 1] > > Rule 61 is: > @61 pass quick inet proto igmp from $ext_if:network to 224.0.

Re: openbgpd puts wrong nexthop in FIB

2016-01-21 Thread Stuart Henderson
On 2016-01-20, Tony Sarendal wrote: > network inet connected is broken in 5.6, 5.8 and -current. > Restarting bgpd is required when making interface changes. Ah, so it was fixed in 5.7 and broken again? Now the previous mail (http://permalink.gmane.org/gmane.os.openbsd.misc/227597) makes more sen

Re: ??????a problem with pf's NAT...

2016-01-21 Thread Peter N. M. Hansteen
On Thu, Jan 21, 2016 at 10:14:25AM +0100, Marko Cupa?? wrote: > Or even better, start with 'block log', and inspect blocked traffic in > real time with: > # tcpdump -n -e -q -ttt -i pflog0 Very true. Or even add log (all) to all rule if you want all packets. The main point remains, logging is ess

Re: ??????a problem with pf's NAT...

2016-01-21 Thread Marko Cupać
On Thu, 21 Jan 2016 09:19:32 +0100 "Peter N. M. Hansteen" wrote: > I've already told you the basic steps, but as to the PF part, I'd > start with a block, then open the stuff I need, as in Or even better, start with 'block log', and inspect blocked traffic in real time with: # tcpdump -n -e -q

Re: openbgpd puts wrong nexthop in FIB

2016-01-21 Thread Denis Fondras
> network inet connected is broken in 5.6, 5.8 and -current. > Restarting bgpd is required when making interface changes. > Thank you very much Tony.

Re: ??????a problem with pf's NAT...

2016-01-21 Thread Peter N. M. Hansteen
On Thu, Jan 21, 2016 at 12:25:16AM +0800, zje.net.cn wrote: > sorry, i had tried many times with inspecting all settings, but can't make > the NAT well done yet.In this environment, my haproxy is working well, so i > think the base network settings are good As long as you're not providing any f

Re: Building AMI for AWS EC2

2016-01-21 Thread Jonathon Sisson
On Thu, Jan 21, 2016 at 09:30:57AM +0100, Reyk Floeter wrote: > On Wed, Jan 20, 2016 at 08:56:25PM -0800, Jonathon Sisson wrote: > > On Wed, Jan 20, 2016 at 02:51:21PM -0800, Simon McFarlane wrote: > > > Hi all, > > > > > > Now that the Xen guest stuff is getting some love, I think it would be fun

Re: Building AMI for AWS EC2

2016-01-21 Thread Reyk Floeter
On Thu, Jan 21, 2016 at 07:36:01AM +0100, Antoine Jacoutot wrote: > > There are a couple public AMIs available, but I'm curious as to how they are > > built. It'd be pretty cool to be able to build a given snapshot into an AMI, > > rather than be dependent on whomever is creating the public ones. >

Re: 5.9-beta upgrade stalled at base59.tgz 98% fetched, 51072 KB on first try, retry succeeds

2016-01-21 Thread Janne Johansson
2016-01-18 18:39 GMT+01:00 Peter N. M. Hansteen : > For about the last week, I've been seeing this oddity with the amd64 > installer when doing snap to snap upgrades on my laptop. > > My routine for quite a while has been to fetch snapshots off the local > mirror whenever I notice there's a new on

Re: Building AMI for AWS EC2

2016-01-21 Thread Reyk Floeter
On Wed, Jan 20, 2016 at 08:56:25PM -0800, Jonathon Sisson wrote: > On Wed, Jan 20, 2016 at 02:51:21PM -0800, Simon McFarlane wrote: > > Hi all, > > > > Now that the Xen guest stuff is getting some love, I think it would be fun > > to toy around with OpenBSD on EC2 (particularly because of EBS -- o

Re: vmm(4) status?

2016-01-21 Thread Peter N. M. Hansteen
On Wed, Jan 20, 2016 at 06:20:48PM +0100, Reyk Floeter wrote: > It is not enabled in GENERIC, so obviously not ready yet :) > > The CPU usage, time and networking issues are know and should go away > after mlarkin@ finished implementing proper interrupt handling. > > On the userland side, the