OpenSMTPD memory leak...

2012-01-11 Thread Ivan Nudzik
Hi, I'm running OpenBSD5 (all from binaries) as a spam filter installed in SPARC LDOM (T1000). I've changed sendmail for OpenSMTPD and after few weeks a see that OpenSMTPD ate almost all memory: root@homer $ ps aux | grep smtpd root 5866 0.0 0.1 1296 2544 ?? Is

TRESOR - Runs Encryption Securely Outside RAM

2011-05-31 Thread Ivan Nudzik
Hi, Just idea: http://www1.informatik.uni-erlangen.de/tresor/ Should be interesting for OpenBSD kernel too. Of course if not already there in some form. I.

Re: Force Internet traffic out IPSec VPN

2011-04-08 Thread Ivan Nudzik
It is not demand of PF... It's about IPSec behavior. IPSec tunnels could be established between exact 2 IPs, or exact 2 IP networks. You can't have IP net on one side of tunnel and rest of Internet on other side, which is case you wrote about. Solutions: 1. Build IP-IP IPSec and then build GRE

Re: OpenVPN client on OpenBSD

2011-02-03 Thread Ivan Nudzik
Hi, Remove folloving line from OpenVPN config: redirect-gateway def1 It redirects your default gateway to tunnel you have just opened. Btw you have copied /etc/hostname.tun0 from install suggestion, but this is not the only right way to start it. I found that it is better to setup tunnel device,

Re: C++ CGI script

2010-12-15 Thread Ivan Nudzik
Save your time with http://www.webtoolkit.eu/wt when you are in mindset to write CGIs in C++... ;-) On Mon, 2010-12-13 at 22:18 +0100, Jean-Francois wrote: Hello, Sorry for posting basic question here, would you please let me know why such script does'nt work (error with Premature end of

Re: Slow disk IO HP DL120 G5 with LSI1068E

2010-08-31 Thread Ivan Nudzik
Download Smart Start CD from HP site. Boot this CD and configure SCSI adapter an RAID settings. There is far more options to configure, than from SCSI adapter BIOS. Btw if you have battery backed cache, you can switch on write cache. You should also download and boot Firmware CD... I. On Tue,

Re: customize CFLAG with /etc/mk.conf

2010-03-27 Thread Ivan Nudzik
Aaron, I built 3.7 base + OpenVPN for VPN gateway with custom CFLAGS/LDFLAGS and it worked well for years, even with such aggressive flags as CFLAGS=-O3 -march=c3 -mmmx -m3dnow -fomit-frame-pointer and LDFLAGS=-Wl,-z,combreloc -Wl,-O2 -Wl,--sort-common -Wl,--enable-new-dtags. But build