Re: Broadcom BCM5709 and BCM57711 driver features

2014-07-25 Thread David Gwynne
On 24 Jul 2014, at 19:37, def d...@fromru.com wrote: Hi! Currently using 5.5-stable and It seems (as per hwfeatures) that driver for BCM 5709 (1GE dual port adapter) doesnt support jumbo frames at all which is critical for activation mpls on bnx. The card supports jumbo itself. Return

Re: pfctl: DIOCADDQUEUE: No such process

2014-07-25 Thread Loïc Blot
Hello after the reboot the problem persists... pfctl: DIOCADDQUEUE: No such process The default ruleset has been loaded: block drop all pass out inet6 proto ipv6-icmp all icmp6-type neighbrsol pass out inet6 proto ipv6-icmp all icmp6-type routersol pass out inet6 proto udp from any port = 546

Re: pfctl: DIOCADDQUEUE: No such process

2014-07-25 Thread Loïc Blot
Erf... i found the error. An admin has configured a queue on a inexisting interface... Maybe the pfctl tell us the interface doesn't exists ? Sorry for the inconvenience -- Best regards, Loïc BLOT, Engineering UNIX Systems, Security and Network Engineer http://www.unix-experience.fr Le

Patch: porters guide chapter 2.2, item no. 23

2014-07-25 Thread Edward
Hi, The original wording doesn't seems to flow too well: Create pkg/PLIST. After the install is complete use the developer's command, make plist which makes the file PLIST in the pkg directory. This file is a candidate packing list. I would like to suggest changing to the followig: Create

Re: carp setup firewall

2014-07-25 Thread Kim Zeitler
Hello Waldemar, On 24.07.2014 17:44, Waldemar Brodkorb wrote: Hi Peter, Peter Hessler wrote, if the addresses on the carp interface are out of sync, then the hashes won't mash, and the firewalls *WILL* conflict with each other. I recommend one IP per carp interface. Far nicer in case you

Patch: porters guide chapter 2.2, item no. 23 (again)

2014-07-25 Thread Edward
Hi, I thought pkg_create(1) is worth mentioning in the porting checklist so that a new porter would know where to find more information on PLIST variables annotations that's useful to the PLIST file. The below patch appended the sentence PLIST variables/annotations can be found in

[Cannot allocate memory][Qemu][x86 i386] limits ? login.conf ?

2014-07-25 Thread Jan Lambertz
Hi, had same Problem.the only (poor) workaround i found is running qemu as root .

LDAPD attribute and ACL'S

2014-07-25 Thread Bambero
Hi Is it possibile to give write access only for userPassword field ? sth like: allow write access to attr=userPassword by self Regards Bambero

Re: LDAPD attribute and ACL'S

2014-07-25 Thread Matthew Weigel
On 07/25/2014 05:48 AM, Bambero wrote: Hi Is it possibile to give write access only for userPassword field ? sth like: allow write access to attr=userPassword by self There are no per-attribute permissions in the base ldapd(8). I think the 'normal' way to accomplish this is to create a

Re: reload isakmpd

2014-07-25 Thread Andy
Try ipsecctl -f /etc/ipsec.conf On Fri 25 Jul 2014 16:17:15 BST, motty cruz wrote: Hello, how to reload configuration without restarting isakmpd? Thanks,

Re: reload isakmpd

2014-07-25 Thread Reyk Floeter
On Fri, Jul 25, 2014 at 08:17:15AM -0700, motty cruz wrote: Hello, how to reload configuration without restarting isakmpd? Thanks, Have a look at THE FIFO USER INTERFACE in isakmpd(8): NOTE: Sending isakmpd a SIGHUP or an R through the FIFO will void any updates

reload isakmpd

2014-07-25 Thread motty cruz
Hello, how to reload configuration without restarting isakmpd? Thanks,

openbsd and chromebooks

2014-07-25 Thread frantisek holop
has anyone tried any of the existing chromebooks? any dmesgs? http://en.wikipedia.org/wiki/Chromebook#Chromebook_models -f -- tap here with hammer for a new monitor.

Re: openbsd and chromebooks

2014-07-25 Thread Stuart McMurray
I tried putting it on an SD card on my acer c270. I don't have a dmesg at the moment. Wireless and the trackpad didn't work, but a cheapy USB wireless device did. The biggest problem was putting it on the SD card made disk IO really, really slow. The lack of 802.11n was also kinda a bummer.

Re: openbsd and chromebooks

2014-07-25 Thread frantisek holop
hmm, on Fri, Jul 25, 2014 at 11:45:32AM -0400, Stuart McMurray said that I tried putting it on an SD card on my acer c270. I don't have a dmesg at the moment. Wireless and the trackpad didn't work, but a cheapy USB wireless device did. The biggest problem was putting it on the SD card made

Re: openbsd and chromebooks

2014-07-25 Thread Stuart McMurray
The other thing that kept me from putting OpenBSD on here is that dual-booting is kinda kooky and has security implications for the ChromeOS side. A better question: Anybody know of any small laptops (not necessarily chromebooks) that run OpenBSD well? J. Stuart McMurray On Fri, Jul 25, 2014

Re: openbsd and chromebooks

2014-07-25 Thread Peter Hessler
the keyboard and trackpad are horrendeous. I hate typing on it. no wifi, which is also really annoying. On 2014 Jul 25 (Fri) at 17:40:24 +0200 (+0200), frantisek holop wrote: :has anyone tried any of the existing chromebooks? :any dmesgs? :

Re: reload isakmpd

2014-07-25 Thread motty cruz
Thank you all, I used this command. ps aux kill 29309 kill 7908 ps aux isakmpd -S sasyncd Thanks, On Fri, Jul 25, 2014 at 8:29 AM, Reyk Floeter r...@openbsd.org wrote: On Fri, Jul 25, 2014 at 08:17:15AM -0700, motty cruz wrote: Hello, how to reload configuration without restarting

Re: reload isakmpd

2014-07-25 Thread Stuart Henderson
On 2014-07-25, Andy a...@brandwatch.com wrote: Try ipsecctl -f /etc/ipsec.conf Sometimes this works ok, but I do have some occasions when I need to shutdown isakmpd, ipsecctl -F and restart. Note that this doesn't clear old config, so you can't use it to tear down sessions that you no longer

Re: reload isakmpd

2014-07-25 Thread James Shupe
Note that this doesn't clear old config, so you can't use it to tear down sessions that you no longer want - you can paste the relevant config lines to ipsecctl -df - to delete them though. As an added note for ipsecctl -df, you can break all your peers into their own files and include

Re: reload isakmpd

2014-07-25 Thread Atanas Vladimirov
On 25.07.2014 19:42, James Shupe wrote: Note that this doesn't clear old config, so you can't use it to tear down sessions that you no longer want - you can paste the relevant config lines to ipsecctl -df - to delete them though. As an added note for ipsecctl -df, you can break all your

Re: [Bulk] Re: openbsd and chromebooks

2014-07-25 Thread Kevin Chadwick
previously on this list Stuart McMurray contributed: The other thing that kept me from putting OpenBSD on here is that dual-booting is kinda kooky and has security implications for the ChromeOS side. A better question: Is that because you have to unlock the bootloader or root it? Anybody

MinnowBoard MAX

2014-07-25 Thread emigrant
new toy for OpenBSD? ;) - http://www.minnowboard.org/meet-minnowboard-max/

Re: openbsd and chromebooks

2014-07-25 Thread Mike Burns
On 2014-07-25 11.59.33 -0400, Stuart McMurray wrote: Anybody know of any small laptops (not necessarily chromebooks) that run OpenBSD well? Thinkpad X1 Carbon. -current works well: wifi, keyboard, mouse, touchscreen, suspend, resume, USB, headphones. See my recent thread zzz + /dev/wsmouse if

Re: Patch: porters guide chapter 2.2, item no. 23

2014-07-25 Thread patrick keshishian
On 7/25/14, Edward edw...@rdtan.net wrote: Hi, The original wording doesn't seems to flow too well: Create pkg/PLIST. After the install is complete use the developer's command, make plist which makes the file PLIST in the pkg directory. This file is a candidate packing list. I would like

Re: carp setup firewall

2014-07-25 Thread Stuart Henderson
On 2014-07-24, Waldemar Brodkorb m...@waldemar-brodkorb.de wrote: Hi OpenBSD hackers, we like to use OpenBSD for our corporate firewall. We have two appliances and want to setup carp and pfsync. In the past I used this for a simple firewall connected to a provider via dsl without a DMZ. This

Re: l2tp / ipsec issue

2014-07-25 Thread mxb
Probably, but you can play with ipsec-config and send your results over here. On 24 jul 2014, at 13:23, Stefan Krueger stadtki...@gmx.de wrote: In mailing.openbsd.misc, you wrote: the public_ip in your ipsec.conf should be the external ip of your router, not the openbsd box. other setup

Re: carp setup firewall

2014-07-25 Thread Stuart Henderson
On 2014-07-24, Peter Hessler phess...@theapt.org wrote: if the addresses on the carp interface are out of sync, then the hashes won't mash, and the firewalls *WILL* conflict with each other. I recommend one IP per carp interface. Far nicer in case you screw that bit up, and much easier to

Re: add a new partition in USB ( clone )

2014-07-25 Thread Tuyosi Takesima
Hi, all . this is a method to make clone USB larger size than original . 1) use linux (because openbsd fdisk is hard to use) by fdisk , make /dev/sdb4 Id:a6 2)then use 'openbsd5.5 install CD disk' for installboot on installing OpenBSD use OpenBSD area - 1) mount point /

Re: Patch: porters guide chapter 2.2, item no. 23

2014-07-25 Thread Edward
On Fri, Jul 25, 2014 at 11:22:44AM -0700, patrick keshishian wrote: On 7/25/14, Edward edw...@rdtan.net wrote: Hi, The original wording doesn't seems to flow too well: Create pkg/PLIST. After the install is complete use the developer's command, make plist which makes the file PLIST in