Re: Lenovo L420 ACPI, kernel panic

2013-12-03 Thread Cyril Andreichuk
From: cyril.andreic...@hotmail.com To: misc@openbsd.org Subject: Lenovo L420 ACPI, kernel panic Date: Tue, 3 Dec 2013 10:09:56 +0300 hi there is always a kernel panic when booting with enabled acpi on my Lenovo ThinkPad L420 (7854RP1). here are pics of it and trace

Re: Lenovo L420 ACPI, kernel panic

2013-12-03 Thread Cyril Andreichuk
From: cyril.andreic...@hotmail.com To: misc@openbsd.org Subject: Lenovo L420 ACPI, kernel panic Date: Tue, 3 Dec 2013 10:09:56 +0300 hi there is always a kernel panic when booting with enabled acpi on my Lenovo ThinkPad L420 (7854RP1). here are pics of it and trace

Re: alix2d3 entry point at 0x200120 after PXE installation

2013-12-03 Thread Aurelien Martin
Hi all, I would like to thanks all to your fast feedback and support I'm moving my flat so I cannot test for these days. On Thursday I'll receive a new USB - DB9 Null modem cable and a flash card reader. So the next days I'll update this feed with my observation, tests and steps to achieve it

creating a VPN tunnel with an iPhone client

2013-12-03 Thread Stanley van Dijk
Hi, I'm looking for a way to connect an iPhone to the local subnet for VOIP usage through VPN. Has anyone succeeded in creating a VPN tunnel from an iPhone to OpenBSD?

Re: creating a VPN tunnel with an iPhone client

2013-12-03 Thread Anders Berggren
I'm looking for a way to connect an iPhone to the local subnet for VOIP usage through VPN. Has anyone succeeded in creating a VPN tunnel from an iPhone to OpenBSD? Yes. npppd's L2TP http://www.openbsd.org/cgi-bin/man.cgi?query=npppd, or OpenVPN is what I have used.

queueing/hfsc question

2013-12-03 Thread Gabor Berczi
Greets dudez, Help. How can one properly share (on the firewall, not at application level) the _downstream_ bandwidth between for example a HTTP download (should get the most bandwidth) and a torrent queue (should be reduced to the bare minimum except when no HTTP transfer is in

Re: queueing/hfsc question

2013-12-03 Thread indiunix
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/03, Gabor Berczi wrote: Greets dudez, Help. How can one properly share (on the firewall, not at application level) the _downstream_ bandwidth between for example a HTTP download (should get the most bandwidth) and a torrent queue

OpenBSD and NetFlow

2013-12-03 Thread Alexis VACHETTE
Hi everyone, I would like to share an issue with one of my OpenBSD Firewall which is present in my company. Everything was working fine until a server crash this last week-end. We have setup the netflow protocol with the pseudo device pflow0. You can find the relevant files for the netflow

Re: queueing/hfsc question

2013-12-03 Thread Gabor Berczi
On Dec 3, 2013, at 4:48 PM, indiunix wrote: I would do it like this. altq on $INTERFACE bandwidth $INMbp/s hfsc queue { http, torrent } queue http bandwidth 70% priority 8 hsfc ( realtime 60% ) queue torrent bandwidth 50% priority 1 hsfc ( upperlimit 95% ) Just apply these rules to

Re: BGP changes to support CARP better

2013-12-03 Thread Andy
Hi, I've got something really interesting to show, which shows this clearly and should help point to the root cause. In short, it seems that the desired nexthop is not applied by the CARP master when it is in state 'nexthop 180.25.32.20 now valid: via 180.25.32.20'. I.e. when it is 'via' even

Re: OpenBSD and NetFlow

2013-12-03 Thread Alexis VACHETTE
Hi Josh, First of all thanks for the welcome to the misc list ! I don't get a failure when I tried to destroy and re-create the pflow interface indeed. You will find the information requested below : - uname -a OpenBSD casa-vpn01.my.domain 4.8 GENERIC.MP#335 amd6 - dmesg output wskbd0 at

Re: OpenBSD and NetFlow

2013-12-03 Thread Peter N. M. Hansteen
Alexis VACHETTE avache...@sisteer.com writes: - uname -a OpenBSD casa-vpn01.my.domain 4.8 GENERIC.MP#335 amd6 It's been a while since 4.8. It's not guaranteed that running outdated software is your problem, but it's easier for everyone trying to help if you're reasonably up to date (which

Re: [OpenBGPd = Cisco] error in OPEN message, unknown subcode 8

2013-12-03 Thread Laurent CARON
On Mon, Nov 25, 2013 at 10:53:24PM +0100, Laurent CARON wrote: I added a new transit to my network (Level3) and this issue is back (runnning OpenBSD 5.4 but tried current also). Nov 25 22:43:55 bgpgw-002 bgpd[24271]: neighbor 2001:450:2001:1001::45 (ev6_gw-002_to_L3): received notification:

Re: queueing/hfsc question

2013-12-03 Thread Andy
On Tue 03 Dec 2013 16:06:39 GMT, Gabor Berczi wrote: On Dec 3, 2013, at 4:48 PM, indiunix wrote: I would do it like this. altq on $INTERFACE bandwidth $INMbp/s hfsc queue { http, torrent } queue http bandwidth 70% priority 8 hsfc ( realtime 60% ) queue torrent bandwidth 50% priority 1

Re: [OpenBGPd = Cisco] error in OPEN message, unknown subcode 8

2013-12-03 Thread Andy
On Tue 03 Dec 2013 18:15:23 GMT, Laurent CARON wrote: On Mon, Nov 25, 2013 at 10:53:24PM +0100, Laurent CARON wrote: I added a new transit to my network (Level3) and this issue is back (runnning OpenBSD 5.4 but tried current also). Nov 25 22:43:55 bgpgw-002 bgpd[24271]: neighbor

Re: [OpenBGPd = Cisco] error in OPEN message, unknown subcode 8

2013-12-03 Thread Laurent CARON
On 03/12/2013 19:20, Andy wrote: Can you provide an example of what you did/fixed in bgpd.conf so when others google for this error they will have a pointer of what to do :) Here it is. ** Note for future readers, don't copy and paste this config snippet as it does *NOT* work as you would

Re: queueing/hfsc question

2013-12-03 Thread Gabor Berczi
On Dec 3, 2013, at 7:15 PM, Andy wrote: queue ack on $extinterface bandwidth 10% priority 6 hfsc ( realtime 10% ) queue ack on $intinterface bandwidth 10% priority 6 hfsc ( realtime 10% ) One queue can't be on two interfaces. queue XYZ already exists on interface pppoe0 Google for

Re: queueing/hfsc question

2013-12-03 Thread josh Grosse
On 2013-12-03 13:46, Gabor Berczi wrote: On Dec 3, 2013, at 7:15 PM, Andy wrote: queue ack on $extinterface bandwidth 10% priority 6 hfsc ( realtime 10% ) queue ack on $intinterface bandwidth 10% priority 6 hfsc ( realtime 10% ) One queue can't be on two interfaces. queue XYZ already

Re: queueing/hfsc question

2013-12-03 Thread Gabor Berczi
On Dec 3, 2013, at 8:03 PM, josh Grosse wrote: On 2013-12-03 13:46, Gabor Berczi wrote: On Dec 3, 2013, at 7:15 PM, Andy wrote: queue ack on $extinterface bandwidth 10% priority 6 hfsc ( realtime 10% ) queue ack on $intinterface bandwidth 10% priority 6 hfsc ( realtime 10% ) One queue

Re: queueing/hfsc question

2013-12-03 Thread Gabor Berczi
On Dec 3, 2013, at 7:15 PM, Andy wrote: Including http://www.openbsd.org/faq/pf/queueing.html This page doesn't even mention neither HFSC nor any new scheduler... -- G

Re: queueing/hfsc question

2013-12-03 Thread Norman Golisz
On Tue Dec 3 2013 20:32, Gabor Berczi wrote: On Dec 3, 2013, at 8:03 PM, josh Grosse wrote: On 2013-12-03 13:46, Gabor Berczi wrote: On Dec 3, 2013, at 7:15 PM, Andy wrote: queue ack on $extinterface bandwidth 10% priority 6 hfsc ( realtime 10% ) queue ack on $intinterface bandwidth

Re: NPPPD and IPSec

2013-12-03 Thread Or Elimelech
Thanks, I fixed it using the same config I wrote The problem is my npppd server is behind NAT and my windows needed registry modification AssumeUDP Thank you again Sent from my iPhone On Dec 3, 2013, at 12:28 AM, Frans Haarman franshaar...@gmail.com wrote: I have used this with windows 7

Re: queueing/hfsc question

2013-12-03 Thread Norman Golisz
On Tue Dec 3 2013 20:40, Gabor Berczi wrote: On Dec 3, 2013, at 7:15 PM, Andy wrote: Including http://www.openbsd.org/faq/pf/queueing.html This page doesn't even mention neither HFSC nor any new scheduler... Please watch the video record of Henning's talk on the new queueing subsystem.

Re: queueing/hfsc question

2013-12-03 Thread josh Grosse
On 2013-12-03 14:40, Gabor Berczi wrote: This page doesn't even mention neither HFSC nor any new scheduler... The new queueing system is HFSC, with a simpler syntax. It became available to -current users in October, per http://www.openbsd.org/faq/current.html#20131012 The new scheduler will

Re: queueing/hfsc question

2013-12-03 Thread Gabor Berczi
On Dec 3, 2013, at 8:57 PM, josh Grosse wrote: The new scheduler will be included in 5.5-release. Users of - current now, or of 5.5 when it is released, who wish to continue using altq syntax and an altq scheduler may do so during a transition period, as described in the link above.

OpenBSD and Compute Engine

2013-12-03 Thread Matthew Dempsky
Compute Engine now supports custom OSes [1], so I've been working on getting OpenBSD working on it. I thought I'd share a status update. [1] http://googlecloudplatform.blogspot.com/2013/12/google-compute-engine-is-now-generally-available.html ** virtio-scsi Compute Engine exposes disks as

Re: queueing/hfsc question

2013-12-03 Thread Ryan Freeman
On Tue, Dec 03, 2013 at 09:10:32PM +0100, Gabor Berczi wrote: On Dec 3, 2013, at 8:57 PM, josh Grosse wrote: The new scheduler will be included in 5.5-release. Users of - current now, or of 5.5 when it is released, who wish to continue using altq syntax and an altq scheduler may do so

Re: queueing/hfsc question

2013-12-03 Thread josh Grosse
On 2013-12-03 15:10, Gabor Berczi wrote: Okay. But what you just described (Child queues are able to use the same name) doesn't work with ALTQ either. Are you certain it does with the new sched? (that would mean that it was impossible to do before) The PF User's guide shows a cbq example

Re: creating a VPN tunnel with an iPhone client

2013-12-03 Thread Giancarlo Razzolini
Em 03-12-2013 11:43, Anders Berggren escreveu: I'm looking for a way to connect an iPhone to the local subnet for VOIP usage through VPN. Has anyone succeeded in creating a VPN tunnel from an iPhone to OpenBSD? Yes. npppd's L2TP http://www.openbsd.org/cgi-bin/man.cgi?query=npppd, or OpenVPN

Re: OpenBSD and Compute Engine

2013-12-03 Thread Jiri B
On Tue, Dec 03, 2013 at 12:12:09PM -0800, Matthew Dempsky wrote: Compute Engine now supports custom OSes [1], so I've been working on getting OpenBSD working on it. I thought I'd share a status update. [1]

Re: OpenBSD and Compute Engine

2013-12-03 Thread Bryan Horstmann-Allen
+-- | On 2013-12-03 16:35:45, Jiri B wrote: | | Have you tried OpenBSD on SmartOS? Some people say it would need | some love (some storage issue). I used OpenBSD on SmartOS a couple years ago. There was a bug in KVM that

Re: OpenBSD and Compute Engine

2013-12-03 Thread Matthew Dempsky
On Tue, Dec 3, 2013 at 1:35 PM, Jiri B ji...@devio.us wrote: Aha, big brother grows up :-) I will try to test virtio-scsi on RHEVM which also exposes this to VMs. Cool, let me know if you run into any issues. I'm sure there's still some bugs in the driver so I wouldn't put it into production

Re: OpenBSD and Compute Engine

2013-12-03 Thread Jiri B
On Tue, Dec 03, 2013 at 04:45:28PM -0500, Bryan Horstmann-Allen wrote: I used OpenBSD on SmartOS a couple years ago. There was a bug in KVM that would kill the host, but that's been fixed for a while... I saw when a VM with virtio devices killed RHEL host too. Funny :) Baf, it was secured

5.4-stable kernel panic with bioctl mfi0 (was: Re: uvm_fault with OpenBSD 5.4)

2013-12-03 Thread Kor son of Rynar
Hi, It happened again with another machine, a R420, also running 5.4-stable. I can reproduce the problem giving a sequence of bioctl mfi0 commands: (Please, do not try this on production servers) # for foo in `jot 1000`; do bioctl mfi0; sleep 1; done The kernel panics with:

Re: queueing/hfsc question

2013-12-03 Thread andy
On Tue, 3 Dec 2013 21:10:32 +0100, Gabor Berczi gabuc...@gabucino.be wrote: On Dec 3, 2013, at 8:57 PM, josh Grosse wrote: The new scheduler will be included in 5.5-release. Users of - current now, or of 5.5 when it is released, who wish to continue using altq syntax and an altq

Re: AnonCVS server data

2013-12-03 Thread Stuart Henderson
On 2013-11-30, Jordan Earls ea...@lastyearswishes.com wrote: I've been looking at trying to convert the CVS repository to a git repository. My goal with this is to allow for more people to easily take a glance at the source code of OpenBSD. This already exists at

Re: queueing/hfsc question

2013-12-03 Thread Stuart Henderson
On 2013-12-03, Ryan Freeman r...@slipgate.org wrote: On Tue, Dec 03, 2013 at 09:10:32PM +0100, Gabor Berczi wrote: On Dec 3, 2013, at 8:57 PM, josh Grosse wrote: The new scheduler will be included in 5.5-release. Users of - current now, or of 5.5 when it is released, who wish to continue

Re: queueing/hfsc question

2013-12-03 Thread Stuart Henderson
On 2013-12-03, Gabor Berczi gabuc...@gabucino.be wrote: On Dec 3, 2013, at 7:15 PM, Andy wrote: Including http://www.openbsd.org/faq/pf/queueing.html This page doesn't even mention neither HFSC nor any new scheduler... The FAQ does not cover -current, it covers the last release. (Feel free

Re: ipsec or iked to deploy under openbsd carp fws

2013-12-03 Thread Stuart Henderson
On 2013-12-02, C. L. Martinez carlopm...@gmail.com wrote: Hi all, I need to deploy IPSec tunnels (lan-to-lan and roadwarriors clients like linux and windows) under two openbsd carp firewalls. .. What option can be best to deploy in these firewalls: ipsec (ipsec.conf and isakmpd) or iked?

Re: 10G with Intel card - GBIC options

2013-12-03 Thread Stuart Henderson
On 2013-12-02, Kapetanakis Giannis bil...@edu.physics.uoc.gr wrote: I would love to go for the SFP+ path but we cannot afford it, flexoptix do a xenpak-sfp+ converter (and lots of other interesting things)

Re: queueing/hfsc question

2013-12-03 Thread Gabor Berczi
On Dec 3, 2013, at 9:43 PM, Ryan Freeman wrote: try: queue extpribandwidth 10% priority 7qlimit 500 hfsc (realtime 5% ecn red) queue intpribandwidth 10% priority 7qlimit 500 hfsc (realtime 5% ecn red) Yes, but as I said, only one of these can be used (can't pass into

ssh and relayd

2013-12-03 Thread Predrag Punosevac
Hi Misc, This is trivial question but I am having a hard time wrapping my head around the possible use of relayd for ssh traffic redirecting. Namely I have a situation where I have multiple hosts behind firewall which I would like to make available for ssh loggin. In the past I was using

Re: queueing/hfsc question

2013-12-03 Thread Gabor Berczi
On Dec 4, 2013, at 12:44 AM, andy wrote: As Josh and the other guys said, you can use the same queue name on different interfaces but they must be children. Nope, they don't have to be, but thanks to your working example I could deduce what's the deciding factor. === Every queue must have