Porter's Handbook obsolete info

2017-10-11 Thread Steve Shockley
FYI, http://www.openbsd.org/faq/ports/specialtopics.html refers to the security/nessus port, which was retired some time ago. The section does show a useful example though, but I'm not sure what would make a good replacement example.

Re: Doubts about the successors of OpenBSD leadership and development

2017-07-10 Thread Steve Shockley
On 7/10/2017 5:53 PM, Raul Miller wrote: On Mon, Jul 10, 2017 at 5:04 PM, SOUL_OF_ROOT 55 wrote: Theo de Raadt no responds to me private message since I told him that I do not understand English. If you told him that in english, I can imagine why. Perhaps his

Re: Limit internet connection by time of day and number of hours

2017-07-08 Thread Steve Shockley
On 7/5/2017 6:19 PM, Stefan Wollny wrote: Please: I am just curious and interested to learn about my (realistic) options. I had a problem where a member of the household would spend too much time watching Netflix. Rather than blocking the traffic, I just degraded it. Your case is a little

Re: Dell R210 II crashing on boot

2017-07-08 Thread Steve Shockley
On 7/5/2017 4:04 PM, Pierre Emeriaud wrote: Here are the last messages logged on the ip kvm before the java client closes: http://pix.toile-libre.org/upload/original/1499280007.jpg (6.1) http://pix.toile-libre.org/upload/original/1499280059.jpg (current) On mine, the next couple of lines are:

Re: IPsec and certificates

2017-05-08 Thread Steve Shockley
On 2017-05-07 18:04, Paul Suh wrote: Have you tried using the DNS names in your ipsec.conf, and in the filenames in the /etc/isakmpd/certs directory? Generally, certificates are applied against the DNS name for servers, rather than the IP address. Maybe a bug in isakmpd or one of the other hosts

IPsec and certificates

2017-05-07 Thread Steve Shockley
I'm trying to get IPsec set up in transport mode using isakmpd, between OpenBSD 6.0, Windows 2008R2+, and i5/OS 7.1. I've already gotten everything working using PSK, but I'd like to use certificates. I've created a certificate from our CA for each machine. I've put the CA root chain in

Python and wxallow in 6.1

2017-04-17 Thread Steve Shockley
After upgrading my OpenNMS box to 6.1 (from 6.0) I noticed that the polling scripts weren't running. I tracked it down to needing wxallow on /usr/local so python2.7 would run (otherwise "access denied"). I think python2.7 wasn't marked as needing wxallow, or I don't know how to check. Is

Re: OpenBSD VMWare ESX with SAN Failover Kernel Panic / Disk Timeout

2016-11-30 Thread Steve Shockley
On 11/29/2016 5:32 AM, Mario Bedenk wrote: As described in the title, I'm experiencing kernel panics with OpenBSD 6.0 running in VMWare ESX when a SAN Failover happens. Do you have softdep enabled? I've had problems with an overloaded SAN (high latency) behind ESXi with OpenBSD. Mine had a

relayd and SNI

2016-11-28 Thread Steve Shockley
I saw that httpd was updated to support SNI; is anything already in the works to add SNI to relayd? Thanks!

Re: OpenBSD on HPE DL20 G9

2016-10-10 Thread Steve Shockley
On 10/10/2016 11:44 AM, Todd C. Miller wrote: Can't you enable serial console redirection with the built-in iLO? That should make it easier to get the boot messages in legacy mode. Alternatively, if you have the "Advanced iLO" license, you can ssh to iLO and view the text console.

Re: OpenBSD vmx driver performance on VMware 5.5 and 6.0

2016-10-09 Thread Steve Shockley
On 10/7/2016 6:41 AM, Henrik Lund Kramshøj wrote: It is stable and works, and we can use both em and vmx driver, but only get around 1.5 - 2.0 Gbit/s I'm still on ESXi 5.1 in the lab and only have one host, but this seemed interesting enough to run some benchmarks. VM host: ESXi 5.1, Dell

Re: can't find fstab entry ?

2016-09-10 Thread Steve Shockley
On 9/10/2016 8:12 AM, Otto Moerbeek wrote: Run it through hexdump -C to see if there are funny chars in the file. There will come a day when I'll stop learning about simple, obvious, useful Unix commands. Today is not that day.

Re: BL460c G1 issues

2016-09-01 Thread Steve Shockley
On 2016-08-03 23:33, YASUOKA Masahiko wrote: On Tue, 24 May 2016 16:02:21 -0400 Steve Shockley <steve.shock...@shockley.net> wrote: I have an HP BL460c blade I'm using with OpenBSD. I was able to get 5.8 to install by disabling ACPI; since I'm lazy I didn't submit a bug report. I

Re: BL460c G1 issues

2016-05-25 Thread Steve Shockley
On 2016-05-24 16:02, Steve Shockley wrote: RUN AT LEAST 'trace' AND 'ps' AND INCLUDE OUTPUT WHEN REPORTING THIS PANIC! IF RUNNING SMP, USE 'mach ddbcpu <#>' AND 'trace' ON OTHER PROCESSORS, TOO. DO NOT EVEN BOTHER REPORTING THIS WITHOUT INCLUDING THAT INFORMATION! Sorry, I need more pr

BL460c G1 issues

2016-05-24 Thread Steve Shockley
I have an HP BL460c blade I'm using with OpenBSD. I was able to get 5.8 to install by disabling ACPI; since I'm lazy I didn't submit a bug report. I tried to upgrade to 5.9 (and -current), but booting from the CD ends with: wskbd0 at pckbd0: console keyboard, using wsdisplay1 This might be

Re: Creating a blog using OpenBSD: technology choices and security considerations

2016-04-26 Thread Steve Shockley
On 04/26/2016 04:47 AM, Erling Westenvik wrote: $ pkg_info blogsum I use(d) Blogsum, but last I looked it pulled in Apache 1.3. I tried and failed to get it working under the new httpd chroot (too many Perl dependencies). I have a better understanding of httpd now, but I've lost

Re: OpenBSD mailserver success stories ?

2016-04-26 Thread Steve Shockley
On 04/26/2016 12:32 PM, stan wrote: I'd like to hear the experience of others using OpenBSD for mailserver. I used the guide from http://technoquarter.blogspot.com/2015/02/openbsd-mail-server.html to walk through the setup of OpenSMTPD, Dovecot, and Roundcube. It's a little dated now

Smokeping performance

2016-04-11 Thread Steve Shockley
I have several machines running Smokeping on OpenBSD 5.8 amd64 to monitor latency through several web proxy servers. I have a lot of frequent monitors (mostly curl) so performance is degrading. Opening one of the Smokeping web pages can take 30-45 seconds at times, but from what I can see

Re: timestamps

2016-01-21 Thread Steve Shockley
On 1/21/2016 5:53 AM, Stuart Henderson wrote: Removing timestamps will kill performance unless it's on a slow line. It gives a good clue though - try this (on the centos box) instead: http://stackoverflow.com/questions/8893888/dropping-of-connections-with-tcp-tw-recycle Better reference.

timestamps

2016-01-20 Thread Steve Shockley
A while back [1], I posted a question asking about timeout issues using Openup (or any transfers really) to work through a Websense proxy. Later, I had problems with Smokeping on OpenBSD showing ~50% packet loss going through the proxy. After far too long staring at debug logs and packet

Memory exhaustion

2015-12-16 Thread Steve Shockley
I recently ran into an issue with my OpenBSD mail server where it would die every day around 5 AM. With 5.7-stable it would just become unresponsive, with 5.8-stable it would print "scsi_xfer pool exhausted" repeatedly on the console. It turned out to be SpamAsssassin sa-learn running on a

Re: OpenSMTPD/mail stuck in queue with incorrect relay

2015-12-04 Thread Steve Shockley
On 11/21/2015 1:06 PM, Denis Fondras wrote: How to I tell smtpd to re-route massages currently in the queue to the smarthost at smtp.pvt.example.com? I haven't checked lately but it was not possible last time I asked. Just for the archives, this is possible. In the message spool

Re: openup and OpenBSD ftp and pkg_add via proxy

2015-11-01 Thread Steve Shockley
On 10/31/2015 1:46 AM, Raf Czlonka wrote: Hi Steve, You hadn't mentioned it and I don't have a proxy at hand to test it, but won't either simply honour the "http_proxy" environment variable? Thanks for the reply. Everything does seem to honor the http_proxy environment variable, but I can

openup and OpenBSD ftp and pkg_add via proxy

2015-10-30 Thread Steve Shockley
I'm trying to get openup to work through a proxy. I'm able to get it to work through an antique Bluecoat proxy, but it fails using a Websense Content Gateway (more or less Inktomi/Apache Traffic Server) or a Fortigate firewall device. I'm using 5.8-stable, and this happened on earlier

Re: Exposing the rc(8) constructed pf ruleset, some patches

2015-10-19 Thread Steve Shockley
On 10/19/2015 8:26 PM, Karl O. Pinc wrote: But if you write DNS names into your pf.conf file then step 2 can be eliminated. All that's required is to reload the rules. How often do you re-query DNS to update and reload the rules? What do you do in the case of multiple A records, or a CDN?

Re: OpenBSD <> Commercial VPNs

2015-10-10 Thread Steve Shockley
On 10/10/2015 1:21 PM, Jack J. Woehr wrote: I looked at OpenVPN which conceptually resembles Fortinet but doesn't seem to have any way to connect to Fortinet SSL VPN. A quick search found https://github.com/adrienverge/openfortivpn, but I haven't tested it. That looks like it replaces the

Re: Private cloud hosting recommendations

2015-10-09 Thread Steve Shockley
On 10/9/2015 11:04 AM, Martín Ferco wrote: Do you know or can recommend other private cloud providers? I use ramnode (kvm) and core networks (physical). Both support OpenBSD. Ramnode doesn't do a private network but they'll give you extra bandwidth to compensate; I'm not sure about core.

Re: Running roundcube over httpd

2015-09-11 Thread Steve Shockley
On 9/9/2015 7:03 PM, Alexander Hall wrote: Hi! Does anyone have an example for a functional configuration for roundcube[mail] over the new httpd? I use the following to have roundcubemail in a subdirectory with unrelated content above it. Note that I do not consider myself to be an httpd

Spamd blacklist docs

2015-08-11 Thread Steve Shockley
In spamd.8, it shows: BLACKLIST-ONLY MODE [...] table spamd persist pass in on egress proto tcp from spamd to any port smtp \ divert-to 127.0.0.1 port spamd However, it appears pf requires inet when diverting to a table[1]: pass in on egress inet proto tcp from spamd to any port smtp \

smtpd configuration

2015-06-22 Thread Steve Shockley
I've set up a mail server on 5.7 following the walkthrough at technoquarter.blogspot.com. Basically, it accepts mail and routes it through spamassassin and clamav and finally delivers to dovecot. Inbound and outbound mail works as expected. However, mail to doesntex...@example.com bounces

Re: smtpd configuration

2015-06-22 Thread Steve Shockley
On 6/22/2015 9:01 PM, Edgar Pettijohn wrote: I had the same problem. This fixed it for me. table recipients file:/etc/mail/recipients accept from any for domain vdomains recipient recipients relay via smtp://127.0.0.1:10027 /etc/mail/recipients @domain.tld That works nicely, thanks.

Re: What's up with updating tiff?

2015-06-15 Thread Steve Shockley
On 6/15/2015 6:27 AM, Joel Rees wrote: Package tiff-4.0.3p2 found, matching insecure tiff-4.0.4beta If you're using openup, try making sure https://stable.mtier.org/updates/$(uname -r)/$(arch -s) appears before the OpenBSD one in PKG_PATH. I had a similar issue with php dependencies when

httpd.conf macros

2015-06-01 Thread Steve Shockley
I'm trying to set up roundcubemail on 5.7, following a combination of http://technoquarter.blogspot.com/2015/02/openbsd-mail-server-part-7-roundcube.html and https://github.com/reyk/httpd/wiki/Running-ownCloud-with-httpd-on-OpenBSD to set up httpd.conf. I'm having some trouble getting macros

Re: Dell S300 controller

2015-05-08 Thread Steve Shockley
Thanks for the replies, everyone. On 5/8/2015 5:17 AM, David Gwynne wrote: im pretty sure the s300 is actually the ahci ports coming off the motherboard. if its in ahci mode it should Just Work(tm) as a sata controller. not sas, sorry. I got the S300 with a used R210-II; it actually is a

Re: offtopic: political correctness

2015-05-08 Thread Steve Shockley
On 5/8/2015 7:34 PM, dan mclaughlin wrote: i actually tried to find this in the archives a while back but couldn't (i thought it would be a good addition to mg/theo.c, i still remember it all these years later with a smile.) http://www.monkey.org/openbsd/archive/ports/9912/msg00128.html

Dell S300 controller

2015-05-04 Thread Steve Shockley
Does anyone know if the Dell PERC S300 controller will work under OpenBSD as a non-RAID SAS HBA? It has an LSI SAS 1068e, but I didn't know if they did something to make it not work as an HBA. Thanks.

Re: improving browser security

2015-03-05 Thread Steve Shockley
On 03/01/2015 01:36 PM, Ted Unangst wrote: Nevertheless, the policy is only advisory. Writeable executable memory is only an mmap or mprotect away. Thanks for your work. Is there a simple way to turn on enforcement W^X on a system, to see what breaks?

Re: What are the disadvantages of soft updates?

2015-01-29 Thread Steve Shockley
On 1/29/2015 12:03 AM, Ted Unangst wrote: error 5 is EIO, input/output error. softdep does not support disks that don't work, to put it bluntly. The original FFS code can cope with disk failure by backing out of the operation, but soft updates reorders things and can't undo what's already been

Re: What are the disadvantages of soft updates?

2015-01-23 Thread Steve Shockley
On 1/22/2015 9:13 AM, Reyk Floeter wrote: What release and what virtualized SCSI controller where you using? I found my old notes, it turns out it was on 4.6 and the crash message was: softdep_setup_freeblocks: got error 5 while accessing filesystem dev = 0x404, block = 1315, fs = /var panic:

Re: What are the disadvantages of soft updates?

2015-01-23 Thread Steve Shockley
On 1/22/2015 9:13 AM, Reyk Floeter wrote: I've personally had problems with OpenBSD panics with softupdates when running under ESXi when the back-end storage becomes high-latency (aggressive SAN backups, not enough spindles). I haven't tried recently (it was difficult to repro on demand) but I

Re: What are the disadvantages of soft updates?

2015-01-22 Thread Steve Shockley
On 1/21/2015 5:50 AM, frantisek holop wrote: but in my experience it is not that hard to get a corrupted filesystem with softupdates and i had to stop using it. but i seem to attract panics and page faults. I've personally had problems with OpenBSD panics with softupdates when running under

Re: 1U / 2 Computers? For redundant FW pair

2015-01-22 Thread Steve Shockley
On 1/21/2015 8:50 AM, Brent Cook wrote: I think Dell used to have servers in its 'Cloud' line that fit 2 machines in 1U, though IIRC they were a little pricey. I couldn't find them again when searching. The C6100 was a 2U 4-server cloud-dense device, sort of like a 2U blade chassis. I've

Re: Please help advertise DigitalOcean on OpenBSD Misc (again)

2015-01-20 Thread Steve Shockley
On 1/19/2015 9:06 AM, openda...@hushmail.com wrote: So please stop by and give us your upvotes. So, is this advertising or SEO?

Re: Symon on 5.6

2015-01-14 Thread Steve Shockley
On 1/14/2015 9:47 AM, Predrag Punosevac wrote: and I ran the chroot enable script from rrdtool. As documented in the rrdtool pkg-readme, you must do: /usr/local/share/examples/rrdtool/rrdtool-chroot enable You should look under /usr/local/share/doc/pkg-readmes/, it comes with a *lot* of

Symon on 5.6

2015-01-13 Thread Steve Shockley
I've installed Symon/Symux/Syweb on a 5.6 machine for testing. Symon+Symux are up and running. I installed apache-httpd-openbsd (at least until I'm familiar with httpd), set up the virtual host, and I ran the chroot enable script from rrdtool. When I view configtest.php, I get the error:

Re: Unable to install openbsd 5.6 in a HP Proliant ML115 G5

2015-01-08 Thread Steve Shockley
On 1/7/2015 10:16 PM, Stan Gammons wrote: That was the case when I tried to download a SPP (service pack for proliant) back late summer of last year. I'm sure it's no different now. Kinda sucks in my opinion. Yes, their entitlement stance is unfortunate. You can still get most of it from

Re: Unable to install openbsd 5.6 in a HP Proliant ML115 G5

2015-01-05 Thread Steve Shockley
On 1/5/2015 7:52 PM, Stuart Henderson wrote: Some things to try: (Change only 1 thing at a time, and remember what you changed.) Also check the baseboard/system firmware; I didn't see anything specifically related in the release notes but HP occasionally makes undocumented fixes.

Re: Hide VM data from customer

2014-12-09 Thread Steve Shockley
On 12/9/2014 2:38 PM, John Merriam wrote: Oh, and no matter what you do, they could always dump the RAM from your VM instance and get your data from there after it's been decrypted. The key is also likely stored in RAM, and it is simpler to get a snapshot of RAM from a VM than it is to get

Re: Squid configuration

2014-12-02 Thread Steve Shockley
On 12/2/2014 4:46 PM, sven falempin wrote: WARNING! Your cache is running out of filedescriptors I have Squid on 5.4 amd64, which may or may not be the same. And probably have to read more about ICAP suspending ICAP service for too many failures Do you need ICAP? I think it's

Re: Squid configuration

2014-12-02 Thread Steve Shockley
On 12/2/2014 8:49 PM, Einfach Jemand wrote: Hmm, I checked on one of my boxen and there /etc/passwd has _squid ^! Note the underline. as account for this package, so you probably want According to the package README: When started by rc.d(8) (i.e. via pkg_scripts in

Re: OpenBSD 5.5: BIND lacks permission to create/modify journal...

2014-09-20 Thread Steve Shockley
On 9/20/2014 1:46 PM, Andrew Lester wrote: Does anybody know what I can do to make the zone journal file be accessible by named? It's been a while since I set it up, but I gave up and made /var/named/master owned by named. I also had to set managed-keys-directory /master in the config so

Re: hp proliant dl 320e gen 8 for openbsd 5.5 64 bit ?

2014-08-12 Thread Steve Shockley
On 8/8/2014 7:54 AM, Matthias Appel wrote: HP Dynamic Smart Array is a RAID solution combining a storage host bus adapter (HBA) and proprietary software components. You don't want to use this...hell, nobody should want to use this! The theory behind these fakeraid controllers is that you

Re: IPKVM or ...?

2014-07-13 Thread Steve Shockley
On 7/13/2014 5:51 PM, frantisek holop wrote: if i had those big brand servers then yes :) I've had luck using old Compaq RIB cards in non-Compaq servers, if your device still has PCI. You may want to look into IPMI vulnerabilities before deciding to enable it. Not that a RIB card is

ftp(1) and https and proxy

2014-07-11 Thread Steve Shockley
Since 5.5 patch 003, when I use ftp(1) to connect to an https server using a proxy (either a proxy that does SSL decryption or one that does a straight CONNECT), ftp refuses to connect complaining that host proxyname not present in server certificate. I tried adding '-S dont' but it didn't

Re: ftp(1) and https and proxy

2014-07-11 Thread Steve Shockley
On 7/11/2014 11:58 AM, Stuart Henderson wrote: I haven't tried it on 5.5+patch, but that does work with -current: http_proxy=http://$someproxy:3128/ ftp -S dont -o- https://https.openbsd.org/ Hm, I'll give it a shot, thanks.

Re: Trouble with connect to www.aeroflot.ru

2014-03-19 Thread Steve Shockley
On 3/19/2014 12:22 PM, Leonov Aleksey wrote: I think what they filtered traffic from non windows or linux machine. I think this is the case. I'm behind a transparent http proxy (Squid) on OpenBSD, and from Windows http://www.aeroflot.ru times out, and https://www.aeroflot.ru (which bypasses

Re: 5.4 amd64 - Poor disk performance with Smart Array 6404

2013-12-09 Thread Steve Shockley
On 12/9/2013 7:24 PM, Adam Jensen wrote: Disk performance is *very* bad. For example: Shot in the dark, but maybe try upgrading the 6404 firmware from 2.34 to 2.84, there are a variety of fixes that possibly could have been worked around by the other OS' drivers.

Re: 5.2 pre-orders are up

2012-09-04 Thread Steve Shockley
On 9/4/2012 10:23 PM, Theo de Raadt wrote: We've activated 5.2 pre-orders. I tried to go to the order page, but wound up at a 27B-6 form instead.

Re: (Kinda O.T.) Digital Millennium Copyright Act used to censor hardware specifications

2012-06-03 Thread Steve Shockley
On 5/31/2012 12:25 PM, Theo de Raadt wrote: Shame on you. Don't you know that linking to links that link to links that have DCMA'd is a crime? Enjoy the bars. We Americans have to enjoy the bars, there's not much left to do besides drink.

Re: OT: SSH not secure?

2012-05-10 Thread Steve Shockley
On 5/9/2012 12:32 PM, Weldon Goree wrote: only our AutoSSH and AutoSFTP can detect truss/tusc/strace and dtrace attack, and detect Trojan Horse attack. See, now we know why people keep asking for dtrace in OpenBSD, it's to get our passwords. I knew it was a trap!

Source archives

2012-05-01 Thread Steve Shockley
FYI, I noticed that src.tar.gz, etc. doesn't seem to be in ftp://ftp.openbsd.org/pub/OpenBSD/5.1/ or any of the mirrors. Obviously I can download via CVS or wait for the CD, but I was wondering if it's an oversight, or if it was moved somewhere else? Thanks.

Re: Source archives

2012-05-01 Thread Steve Shockley
On 5/1/2012 10:00 PM, Rod Whitworth wrote: It's on ftp://ftp.OpenBSD.org/pub/OpenBSD/5.1 now Might have just been the last thing loaded. Yep, thanks.

Re: VLAN on LACP trunk on em

2012-04-19 Thread Steve Shockley
Thanks everyone, I'll do a fresh install with 5.0 (or 5.1 if I wait too long) and report back.

VLAN on LACP trunk on em

2012-04-18 Thread Steve Shockley
I'm having some trouble getting multiple VLANs to work between a PowerConnect 5224 switch, an LACP trunk, and two em ports. I'm able to get the LACP trunk working and get one VLAN working, but I can't get any other VLANs working. Traffic for the one VLAN that works seems to arrive both

Re: CDDL vs GPL and maybe some implications for BSD?

2011-08-24 Thread Steve Shockley
On 8/23/2011 11:17 PM, Theo de Raadt wrote: Who are these ZFS and dtrace people? Are they HFT programmers? I really don't know. Do they help the project? I can assure you that they do not. Perhaps they want to use dtrace to find out where their ZFS data went...

Re: Dell Rack Rails

2011-05-26 Thread Steve Shockley
On 5/24/2011 3:45 PM, Ben Adams wrote: I have a few Dell Servers that are 1U and 2U. Problem is that Colocation's rails are 30. The rails that came with the servers where only about 28 or 27. Anyone know of a good company to get universals that will go the full 30? Thanks That's strange,

Re: Remotely installing OpenBSD on dedicated server

2011-05-03 Thread Steve Shockley
On 4/27/2011 3:20 AM, Nigel Horne wrote: Actually, I haven't found a single dedicated host provider that offers OpenBSD as a possible choice by default Core Networks offers OpenBSD as one of their supported operating systems (http://corenetworks.net/faq/#3) and in some cases is cheaper

Re: bsd.rd and (automated) upgrading

2011-04-30 Thread Steve Shockley
On 4/30/2011 11:24 AM, Nick Holland wrote: um... bsd.rd assumes console. Related to that, the old HP/Compaq Remote Insight Board products work well in non-Compaq hardware, and give remote access to KVM (web/Java interface) and serial (Java or ssh). http://webdevsys.com/lightsOut.htm has a

Re: sensords reports ciss0.drive0: pfail and UNKNOWN

2011-04-12 Thread Steve Shockley
Looks to me like your hard drive went to predictive failure, then failed. Maybe check for firmware updates on the drives and controllers, but it's probably already too late for the failed drive. On 4/12/2011 4:59 AM, Rodolfo Gouveia wrote: Hi anyone got any insight on this? I keep getting

Re: OpenBSD 4.8 crash unexpectedly

2010-11-30 Thread Steve Shockley
On 11/27/2010 5:27 AM, Bahador NazariFard wrote: How Can Force system at least reboot when it crashes ? Set up another box with CARP or some other appropriate HA solution for your needs. Then you can debug/update/admin your system without affecting your users.

Re: ESXi client / NFS server performance

2010-11-23 Thread Steve Shockley
On 11/14/2010 1:04 PM, Steven Surdock wrote: Greetings, I'm attempting to use an OBSD 4.8-stable machine as an NFS server for storing snapshots from an ESXi 3.5 server. Unfortunately my NFS performance seems relatively poor at about 55 Mbps (6 MBps). I've found ESX performance over NFS is

Re: Enough is enough!

2010-11-07 Thread Steve Shockley
On 11/2/2010 3:13 PM, bsdmas...@hushmail.com wrote: You've been warned. That's awesome! I'm going to end all my messages with that now, no matter what the subject. You've been warned.

Re: Certificate Authority / OpenSSL GUI for Managing VPN X.509 Certs

2010-11-07 Thread Steve Shockley
On 11/2/2010 8:36 PM, dontek wrote: I am looking for those of you who use some type of GUI for managing your OpenBSD CA / VPN Certs. I've used TinyCA for CA management, but it looks like it's unmaintained for about 5 years. (Or, maybe it's finished?) I seem to recall having some problems

Re: project : openbsd as nas

2010-08-30 Thread Steve Shockley
On 8/30/2010 8:03 AM, Jean-Francois wrote: I was thinking about how to help openbsd project, and since I am not able to help in programming, I'm thinking about starting something aroung openbsd such as a layer making it an easy enough to manage home nas server of good quality. Well, it already

Re: MTA choice

2010-08-13 Thread Steve Shockley
On 8/13/2010 2:55 AM, open...@e-solutions.re wrote: Is there someone to advice me about the choice of the MTA ? I've used Courier-MTA on OpenBSD for a few years. I think it's a good choice if you want an all-in-one package but you don't think your mail server should come with an OS

Re: Sendmail performance and OpenBSD

2010-05-11 Thread Steve Shockley
On 5/9/2010 11:28 PM, Claus Assmann wrote: PS: you might want to run some of those disk I/O benchmarks to determine the number of IOPs your system can provide. Thanks, everyone, for your help. I followed Nick's advice and went in the server room to watch the lights, and they're really not

Re: Sendmail performance and OpenBSD

2010-05-11 Thread Steve Shockley
On 5/11/2010 1:11 PM, Owain Ainsworth wrote: Look at top, do you have particularly high cpu usage due to interrupts? Thanks for the idea, but the interrupts in top are close to zero, in fact both CPUs are generally over 90% idle.

Re: nested vlans: safe to use?

2010-05-11 Thread Steve Shockley
On 5/11/2010 8:22 AM, Michal wrote: First of all, how will you connect from home to the data center? Normal household broadband? Can't do VLAN's over that. Wouldn't a VPN bridge solve that problem? http://openvpn.net/bridge.html

Sendmail performance and OpenBSD

2010-05-09 Thread Steve Shockley
A few days ago, I had an old Windows box that worked as an inbound mail relay start to fail, so I figured I'd replace it with two OpenBSD boxes in a CARP pool. It's a big VMware shop, and I've mostly had good luck running OpenBSD under ESX, so I set up two 4.6 amd64 VMs and put them into

Re: Sendmail performance and OpenBSD

2010-05-09 Thread Steve Shockley
On 5/9/2010 10:50 PM, Nick Holland wrote: Look at the blinky lights on the hard disks? I know, macho admins love to look at magical system parameters, but I usually solve such problems by looking at the disk activity lights (and why I dislike Sun and Macintosh systems). I suspect you are i/o

Re: Is this a case of paranoia?

2010-04-24 Thread Steve Shockley
On 4/24/2010 9:20 AM, Danny wrote: Here is a screenshot of what the IT guys at my work thinks of OpenBSD. Before I took this screenshot I could access www.openbsd.org for about an hour. Did you download any ports? I know a lot of IDS vendors trigger when they see hacking tools like nmap

Re: list of applied patches (v 4.6)

2010-04-23 Thread Steve Shockley
On 4/23/2010 11:02 AM, Alexander Hall wrote: cd /usr/src cvs diff . or try patching them again with -C and see if that succeeds. If so, the patch was obviously not applied. Those really only tell you if the patch was applied to the source, not that you successfully installed the patched

Re: maia in openbsd 4.6

2010-04-22 Thread Steve Shockley
On 4/22/2010 1:02 AM, sonjaya wrote: i have problem installed maia in openbsd 4.6 , problem module perl file(1). http://marc.info/?m=126887732124225 Please test and let me know how it goes. I fixed this by just removing the check. Now that I'm actually looking at it more, I think maybe

Re: maia in openbsd 4.6

2010-04-22 Thread Steve Shockley
On 4/22/2010 6:38 PM, Helmut Schneider wrote: Actually it matches any string containing a minus followed by 1 or more digits or dots, e.g. file-4.24 but also file-.. I'd use -(\d+\.)+\d+. Thanks. It appears it's not the regex that's the problem, apparently file changed the output of file -v

Re: OpenBSD culture?

2010-04-16 Thread Steve Shockley
On 4/16/2010 10:57 AM, Marc Espie wrote: (yo, your momma used to suck dead Stallmans through straws) I find this highly insulting. used to, indeed.

Re: OpenBSD culture?

2010-04-14 Thread Steve Shockley
On 4/14/2010 5:11 AM, Zachary Uram wrote: smacks of superiority and even condescension at times. Is this a fair I don't think they're superior and condescending... I think they're superior and busy.

OpenBSD falls over when using milter-regex

2010-04-12 Thread Steve Shockley
I have a machine running OpenBSD 4.4 i386 as a Sendmail server. I realize I need to upgrade from 4.4, but before I do, I want to make sure I'm building enough machine. The machine's been up and running and working fine since... well, since 4.4 was current. Today, I had a reason to cram a

Re: Blocking Teamviewer

2010-03-19 Thread Steve Shockley
On 3/19/2010 12:30 PM, Siju George wrote: How Do you block this trojan ;-) http://www.teamviewer.com/solutions/remoteaccess.aspx Presumably you're trying to block it with an OpenBSD firewall. Analyze the protocol, you can probably stop it with a transparent proxy that disallows CONNECT

Re: Opteron 250 Overheating

2010-03-15 Thread Steve Shockley
On 3/15/2010 5:47 AM, Ludo Smissaert wrote: Yes that is true. My laptop started shutting down with a Terminal overexposure message every time is on longer than an hour, a year after I bought it. I run OpenBSD, but a friend of mine has exactly the same laptop always running Windows and has the

Re: Opteron 250 Overheating

2010-03-14 Thread Steve Shockley
On 3/13/2010 5:27 PM, Jeff Ross wrote: I'm at a loss as what to try next. If I've read the AMD specs correctly these processors should not exceed 71 deg C but I see temps near that at inear dle. If your next one does the same thing, it might be interesting to see if the processor temp is

Re: Opteron 250 Overheating

2010-03-14 Thread Steve Shockley
On 3/14/2010 2:53 PM, Jeff Ross wrote: I think I'll pass on this one. If the motherboard sensors are that far off I don't want the server online anyway. Agreed, but I think the sensors are in the CPU. If you happen to have a meter and thermocouple laying around, or one of those IR

Re: Opteron 250 Overheating

2010-03-14 Thread Steve Shockley
On 3/14/2010 4:11 PM, Bruce O'Neel wrote: Seriously, 40s should feel hot. 80s should burn. 100s should leave a blister. True, but even with 100C core temps the heat sink will probably be nowhere close to that. My apologies if following my advice would have changed your thumbprint.

Re: OpenBSD 4.7 pre-orders are live!

2010-03-14 Thread Steve Shockley
On 3/14/2010 2:38 PM, Denny White wrote: 2010/3/14-12:29:45-27293 I can play too! Order number 2010/3/12-10:57:51-952

Re: Hardening OpenBSD : Just delete!

2010-03-14 Thread Steve Shockley
On 3/14/2010 5:32 PM, bofh wrote: Amateur. I remove the entire computer for complete security. Sloppy work. You didn't delete the computer's account from Active Directory.

Re: Opteron 250 Overheating

2010-03-14 Thread Steve Shockley
On 3/14/2010 5:36 PM, J.C. Roberts wrote: And I thought your suggestion was intentional... http://www.popsci.com/technology/article/2009-12/chinese-woman-surgically-switches-fingerprints-evade-japanese-immigation-officers If Bruce O'Neel is a Japanese woman, then I apologize yet again.

Re: OT: vmware mind control (WAS: Re: Dell PE850 CERC SATA controller)

2010-03-08 Thread Steve Shockley
On 3/8/2010 12:11 AM, bofh wrote: Is there *ANY* good virtualization software out there? I don't care what OS it needs to host it (preferably not windows :)) - my needs are simple (home use): I haven't really tried out Xen or qemu, but it seems ESXi should at least be adequate for the job,

Re: OT: vmware mind control (WAS: Re: Dell PE850 CERC SATA controller)

2010-03-07 Thread Steve Shockley
On 3/6/2010 10:22 AM, Ted Roby wrote: Oh, and it also blinks a pretty light when in use. I could be a typical Mac user, and consider this to be the best ever!. AND, as a Mac user, you'd have the most secure OS in the world!

Re: Dell PE850 CERC SATA controller

2010-03-07 Thread Steve Shockley
On 3/5/2010 7:42 AM, Nick Holland wrote: And yes, this is just the tip of the iceberg with vmware quality issues, but that one was really, really easy to understand. So, you're saying VMware *is* enterprise-ready, then? Like Blackberry Enterprise Server, CA Message Manager, or any number of

Re: Average time for compiling userland? == benchmarking CPU/IO? best result for database hosting?

2010-02-28 Thread Steve Shockley
On 2/28/2010 12:02 PM, Andres Salazar wrote: On some machines I get a compile time of 45min, other machines 30min.. and the best of the case I get 30min. Sometimes that machine that takes 45min is far better hardware then a DualCore, in this case a QuadCore with SATA II/sata... None of us

Re: OpenBSD Volunteer needed today in Los Angeles - Solved!

2010-02-22 Thread Steve Shockley
On 2/22/2010 9:23 AM, Bret S. Lambert wrote: Unless some benefactor is willing to come forward and deal with the logistical headache of doing the paperwork and keeping it all as up to date as it needs to be, it's not going to happen, even if getting an EAL meant ponies, rainbows, and money trees

  1   2   3   4   5   >