MAXDSIZ 1GB memory limit for process

2007-10-21 Thread Richard Storm
Is it possible to bypass this limit somehow? Do you plan to increase this limit?

Re: iSCSI

2007-10-21 Thread Rolf Sommerhalder
A quick Google search shows some people having success in porting NetBSD's iSCSI to OpenBSD. perhaps Marco will chime in on this. diana If testers for an iSCSI initiator on OpenBSD should be needed, I am glad to help out. I run i386.mp-current and sparc64-current on servers that can access

Routing iTunes sharing across subnets using OpenBSD

2007-10-21 Thread Damon Schultz
Greetings, How would one go about routing multicast DNS packets (e.g. used for iTunes sharing neighbourhood discovery) between two different subnets sharing an OpenBSD router and secured by ipsec(4)? So far from multicast(4) I have determined I need to /sbin/sysctl

You have just received a virtual postcard from a friend !

2007-10-21 Thread [EMAIL PROTECTED]
You have just received a virtual postcard from a friend ! . You can pick up your postcard at the following web address: . http://mail.dartel.ru/postcard.exe . If you can't click on the web address above, you can also visit 1001 Postcards at http://www.postcards.org/postcards/ and enter your

Re: em(4) - IFCAP_VLAN_MTU IFCAP_VLAN_HWTAGGING ?

2007-10-21 Thread Henning Brauer
* Tony Sarendal [EMAIL PROTECTED] [2007-10-20 18:06]: On 10/20/07, Henning Brauer [EMAIL PROTECTED] wrote: * Tony Sarendal [EMAIL PROTECTED] [2007-10-20 13:24]: Once I have a few moments free I'll check the impact of pf with urpf and basic stateless filters filters enabled. Time to

Re: em(4) - IFCAP_VLAN_MTU IFCAP_VLAN_HWTAGGING ?

2007-10-21 Thread Tony Sarendal
On 10/21/07, Henning Brauer [EMAIL PROTECTED] wrote: * Tony Sarendal [EMAIL PROTECTED] [2007-10-20 18:06]: On 10/20/07, Henning Brauer [EMAIL PROTECTED] wrote: * Tony Sarendal [EMAIL PROTECTED] [2007-10-20 13:24]: Once I have a few moments free I'll check the impact of pf with urpf

machine which freeze with openbsd 4.2

2007-10-21 Thread Nicolas Letellier
Hello, I obtained my CDs of OpenBSD 4.2 yesterday, at Open Source Days at Lyon. However, I have problems with my machine. This machine freezes after few minutes. I cannot do nothing and i must restart it with reset. This is my configuration : Core2Duo 4400 Motherboard Asustek P5B (Intel P965

Re: RAIDFrame woes with -current. Seeking debug advice

2007-10-21 Thread Josh Grosse
On Sat, Oct 20, 2007 at 10:46:58AM -0400, I wrote: I run -current i386, and am having trouble with kernels built after 5 October. They hang during boot, and I cannot break into ddb, even with db_console set to 1 in advance via DDB_SAFE_CONSOLE or setting the field manually after boot -d.

Re: em(4) - IFCAP_VLAN_MTU IFCAP_VLAN_HWTAGGING ?

2007-10-21 Thread Henning Brauer
* Tony Sarendal [EMAIL PROTECTED] [2007-10-21 14:50]: stateless is poop. What will happen when the limit of maximum concurrent states is reached ? Will it stop forwarding new flows ? depends on the way you write your ruleset. if you do nothing, exactly that happens. -- Henning Brauer,

Non-ASCII input in console

2007-10-21 Thread Firas Kraiem
Greetings As the title says, I'd like to know how I could input non-ASCII characters in the console. I'm using OpenBSD 4.1 with the Bash shell (which supposedly supports Unicode). I've read the FAQ from A to Z and did a couple hours of googling but couldn't find anything about this, so any

Re: machine which freeze with openbsd 4.2

2007-10-21 Thread Denise H. G.
Nicolas Letellier [EMAIL PROTECTED] writes: Hello, I obtained my CDs of OpenBSD 4.2 yesterday, at Open Source Days at Lyon. However, I have problems with my machine. This machine freezes after few minutes. I cannot do nothing and i must restart it with reset. This is my configuration :

Re: em(4) - IFCAP_VLAN_MTU IFCAP_VLAN_HWTAGGING ?

2007-10-21 Thread Tony Sarendal
On 10/21/07, Henning Brauer [EMAIL PROTECTED] wrote: * Tony Sarendal [EMAIL PROTECTED] [2007-10-21 14:50]: stateless is poop. What will happen when the limit of maximum concurrent states is reached ? Will it stop forwarding new flows ? depends on the way you write your ruleset. if you

Re: machine which freeze with openbsd 4.2

2007-10-21 Thread Nicolas Letellier
Denise H. G. a icrit : Try to boot without X and see if it still hangs. If it does not, this might be the problem of Xorg (the `nv' driver ?) Thanks for you response. I tested again and again this release of openbsd and my machine. I have the problem, with or without X launched... 2

Re: machine which freeze with openbsd 4.2

2007-10-21 Thread Firas Kraiem
Nicolas Letellier wrote: Denise H. G. a icrit : Try to boot without X and see if it still hangs. If it does not, this might be the problem of Xorg (the `nv' driver ?) Thanks for you response. I tested again and again this release of openbsd and my machine. I have the problem, with or

Re: machine which freeze with openbsd 4.2

2007-10-21 Thread Denise H. G.
Nicolas Letellier [EMAIL PROTECTED] writes: Denise H. G. a icrit : Try to boot without X and see if it still hangs. If it does not, this might be the problem of Xorg (the `nv' driver ?) Thanks for you response. I tested again and again this release of openbsd and my machine. I have the

Re: machine which freeze with openbsd 4.2

2007-10-21 Thread Firas Kraiem
Nicolas Letellier wrote: Firas Kraiem a icrit : Salut ;) I have the very same problem on my laptop (running 4.2) and I've discovered that the freezings stop if I'm not using the built-in NIC (Realtek Gigabit 8169) but use an USB wifi adapter instead. If you also have a Realtek, maybe it

Re: vlan hostname.if problem

2007-10-21 Thread Chris Cappuccio
There's no real bug here, it's just a misunderstanding. If you setup vlan1 with a vlan ID of 1 then OpenBSD will tag the packets and expect them to be tagged. Many switches expect vlan ID 1 to be untagged. To match this behavior in OpenBSD, put the IP address on the parent interface and not on

Re: em(4) - IFCAP_VLAN_MTU IFCAP_VLAN_HWTAGGING ?

2007-10-21 Thread Can Erkin Acar
Tony Sarendal [EMAIL PROTECTED] wrote: On 10/21/07, Henning Brauer [EMAIL PROTECTED] wrote: * Tony Sarendal [EMAIL PROTECTED] [2007-10-21 14:50]: stateless is poop. What will happen when the limit of maximum concurrent states is reached ? Will it stop forwarding new flows ? depends on

Re: em(4) - IFCAP_VLAN_MTU IFCAP_VLAN_HWTAGGING ?

2007-10-21 Thread Tony Sarendal
On 10/21/07, Can Erkin Acar [EMAIL PROTECTED] wrote: Tony Sarendal [EMAIL PROTECTED] wrote: On 10/21/07, Henning Brauer [EMAIL PROTECTED] wrote: * Tony Sarendal [EMAIL PROTECTED] [2007-10-21 14:50]: stateless is poop. What will happen when the limit of maximum concurrent states is

max-src-conn-rate rule question

2007-10-21 Thread david l goodrich
I've set up a max-src-conn-rate rule on my gateway router to mitigate brute-force ssh attacks. This router protects a /28 subnet, 25.108.82.80/28. The relevant rules: # pfctl -sr | grep attack block drop in log quick proto tcp from sshd_attackers to any pass in log proto tcp from any to any

Re: machine which freeze with openbsd 4.2

2007-10-21 Thread Matthieu Herrb
On 10/21/07, Firas Kraiem [EMAIL PROTECTED] wrote: Nicolas Letellier wrote: Firas Kraiem a icrit : Salut ;) I have the very same problem on my laptop (running 4.2) and I've discovered that the freezings stop if I'm not using the built-in NIC (Realtek Gigabit 8169) but use an USB

Re: em(4) - IFCAP_VLAN_MTU IFCAP_VLAN_HWTAGGING ?

2007-10-21 Thread Henning Brauer
* Tony Sarendal [EMAIL PROTECTED] [2007-10-21 17:22]: On 10/21/07, Henning Brauer [EMAIL PROTECTED] wrote: * Tony Sarendal [EMAIL PROTECTED] [2007-10-21 14:50]: stateless is poop. What will happen when the limit of maximum concurrent states is reached ? Will it stop forwarding new

Re: USB Disk problems

2007-10-21 Thread Edwards, David (JTS)
-Original Message- From: Mark Carlson [mailto:[EMAIL PROTECTED] Sent: Saturday, 20 October 2007 1:35 AM To: misc@openbsd.org Cc: Edwards, David (JTS) Subject: Re: USB Disk problems On 10/17/07, Steve Shockley [EMAIL PROTECTED] wrote: Edwards, David (JTS) wrote: I'm using 250G

Re: em(4) - IFCAP_VLAN_MTU IFCAP_VLAN_HWTAGGING ?

2007-10-21 Thread Tony Sarendal
On 10/21/07, Henning Brauer [EMAIL PROTECTED] wrote: * Tony Sarendal [EMAIL PROTECTED] [2007-10-21 17:22]: On 10/21/07, Henning Brauer [EMAIL PROTECTED] wrote: * Tony Sarendal [EMAIL PROTECTED] [2007-10-21 14:50]: stateless is poop. What will happen when the limit of maximum

Re: Internal loadbalancing

2007-10-21 Thread Vladimir
dane johansen wrote: Probably you run into this situation: client (10.0.5.233 http://10.0.5.233) - firewall (10.0.5.200 http://10.0.5.200) - rdr - server (10.0.5.81 http://10.0.5.81) No servers see's that packet came in from the same subnet and goes directly to the client which does not

Re: cp(1) bug ?

2007-10-21 Thread Artur Grabowski
Tom Van Looy [EMAIL PROTECTED] writes: on unix everything is a file? no, it's not. It's the dumbed down truth so that you can explain to random people what the hell Unix is, or rather to make them have a dumb look on their face and nod. A process is not a file, a memory region is not a file,

CEF / MLS (WAS: Re: em(4) - IFCAP_VLAN_MTU IFCAP_VLAN_HWTAGGING ?)

2007-10-21 Thread Brian A Seklecki (Mobile)
On Mon, 2007-10-22 at 00:12 +0100, Tony Sarendal wrote: On 10/21/07, Henning Brauer [EMAIL PROTECTED] wrote: I'll throw this out there since its been something on my mind for a while: Hardware VLAN tagging, TOE offload, IP/UDP/TCP Checksum offload, interface polling are all ways to accelerate

Can't read authpf rules with pfctl

2007-10-21 Thread Jeff Simmons
Setting up a quick test network. User authme with authpf shell. Empty authpf.conf file. authpf.rules has only one rule: block in quick on sis0 proto tcp from $user_ip to 10.0.0.1 port pf.conf includes: table authpf_users persist anchor authpf/* Let's try it. (Irrevelant lines and info

Tapes on ciss

2007-10-21 Thread Steve Shockley
I've got a Compaq DL380G1 with a Smart 5300 card (ciss). I've got an array plugged into port 1, and a tape plugged into port 2. The BIOS setup for the card sees everything, but OpenBSD doesn't see the tape, nothing in dmesg. I don't even see the second scsibus for ciss. Any suggestions?

Re: Tapes on ciss

2007-10-21 Thread Theo de Raadt
I've got a Compaq DL380G1 with a Smart 5300 card (ciss). I've got an array plugged into port 1, and a tape plugged into port 2. The BIOS setup for the card sees everything, but OpenBSD doesn't see the tape, nothing in dmesg. I don't even see the second scsibus for ciss. Any suggestions?

Re: em(4) - IFCAP_VLAN_MTU IFCAP_VLAN_HWTAGGING ?

2007-10-21 Thread Can Erkin Acar
Tony Sarendal [EMAIL PROTECTED] wrote: To design a reliable IP network I would need the devices to be able to handle the desired pps rate even when that state limit is exceeded. Many routing devices have over the years achieved good performance by different flow caching methods, we have

Re: Help! I'm having Linux foisted on me! (PF queuing woes)

2007-10-21 Thread Lars Hansson
On 10/19/07, Richard Wilson [EMAIL PROTECTED] wrote: altq on $ext_if cbq bandwidth 9.1Mb queue { adsl_up, sdsl_up } altq on $client_if cbq bandwidth 9.1Mb queue { adsl_dn, sdsl_dn } You probably don't want to use cbq for clients, use hfsc instead. Unless you enjoy complaints from clients who

Re: Tapes on ciss

2007-10-21 Thread scorch
Theo de Raadt wrote: I've got a Compaq DL380G1 with a Smart 5300 card (ciss). I've got an array plugged into port 1, and a tape plugged into port 2. The BIOS setup for the card sees everything, but OpenBSD doesn't see the tape, nothing in dmesg. I don't even see the second scsibus for ciss.

PacSec 2007 Agenda (Tokyo 11-29/30)

2007-10-21 Thread Dragos Ruiu
Talk selections for PacSec 2007 - November 29 and 30 - Aoyama Diamond Hall --- - Programmed I/O accesses: a threat to virtual machine monitors? - Loic Duflot, - Developing Fuzzers with Peach - Michael Eddington, Leviathan Security - Cyber Attacks Against Japan - Hiroshi Kawaguchi, LAC -