Re: http load balancing with pf (apache access log)

2007-01-30 Thread Marian Hettwer
Hej Bob, Bob Beck schrieb: * Marian Hettwer [EMAIL PROTECTED] [2007-01-29 09:49]: Hi OpenBSD'lers, I'm about to use OpenBSD's pf(4) for load balancing some webservers. So far, everything is looking just perfect. Compared to pound, pf(4) is incredibly fast with few CPU and memory usage. So

Re: http load balancing with pf (apache access log)

2007-01-30 Thread Marian Hettwer
Henning Brauer schrieb: * Marian Hettwer [EMAIL PROTECTED] [2007-01-29 18:46]: Ah... there we go. I can't setup the webservers with their default gateway to my load balancer. The boxes are dedicated servers and I have no possibility to change the network settings. These are rented servers

Re: http load balancing with pf (apache access log)

2007-01-30 Thread Marian Hettwer
Hej Stuart, Stuart Henderson schrieb: On 2007/01/29 16:21, Marian Hettwer wrote: Is there any possible way to get the real ip addresses in my apache access log? Readers who didn't see the earlier posts about setting this up, they're here:

Re: http load balancing with pf (apache access log)

2007-01-30 Thread Paul de Weerd
On Tue, Jan 30, 2007 at 09:09:46AM +0100, Marian Hettwer wrote: | quote | requests go like this: | origin - balancer - destination | | replies like this: | destination - origin This sounds a lot like what certain loadbalancers call DSR or Direct Server Return. Basically, this is layer 2 NAT'ing.

Istanbul - Skopje Flights by MAT Macedonian Airlines / MAT Makedonya Havayollari Üsküp - Istanbul Uçuslarina Basliyor ......

2007-01-30 Thread ZENITH Air Services
[EMAIL PROTECTED] address book`unuza kaydedin, ZENITH E-posta size ulassin. for ENGLISH version click here [IMAGE] [IMAGE] [IMAGE] 1 Subat`tan itibaren her pazartesi, persembe, cumartesi ISTANBUL - \SK\P (Skopje) Makedonya`nin milli havayolu olan MAT Macedonian Airlines filosundaki modern

ADI 1988b Sound Device

2007-01-30 Thread Sam Fourman Jr.
hello Misc@ Would someone know if this sound device that is on several new Asus boards is supported in OpenBSD? unless someone knows otherwise I don't think FreeBSD has support either http://www.analog.com/UploadedFiles/Data_Sheets/AD1988A_1988B.pdf Sam Fourman Jr.

OpenBSD's bind: CVE-2007-0493 and CVE-2007-0494

2007-01-30 Thread Stephan A. Rickauer
CVE-2007-0493: If recursion is enabled, a remote attacker can dereference a freed fetch context causing the daemon to abort / crash. CVE-2007-0494: By sending specific DNS query responses with multiple RRSETS attackers could cause BIND to exit abnormally. Is this of relevance also for OpenBSD's

Re: OpenBSD 3.9 (i386) and mount_udf - big problem

2007-01-30 Thread Andreas Kahari
On 29/01/07, Pedro Martelletto [EMAIL PROTECTED] wrote: Andreas, On Mon, Jan 29, 2007 at 09:45:14AM +, Andreas Kahari wrote: I had the same problem (FSD does not lie within the partition! when trying to mount a UDF DVD disc). I applied the patch below from Pedro to a current i386

Re: OpenBSD 3.9 (i386) and mount_udf - big problem

2007-01-30 Thread Pedro Martelletto
Andreas, On Tue, Jan 30, 2007 at 09:55:28AM +, Andreas Kahari wrote: The patch will make the machine not lock up, but it still doesn't mount the DVD disc. This time, I get no messages from the kernel in /var/log/messages, but I get the error message mount_udf: mount: Invalid argument in

Re: New routing ideas for OpenBSD ;) (Was: Is Theo still hiking ????)

2007-01-30 Thread Brian Candler
On Mon, Jan 29, 2007 at 04:09:41PM +, Jeroen Massar wrote: There is *NO* demand from anyone for giving /48's to customers. It is only a suggestion. Talking again about RIPE policy, section 5.4.1 requires /48, or larger for very large subscribers. Exceptions are made to allow /64

Re: OpenBSD 3.9 (i386) and mount_udf - big problem

2007-01-30 Thread Andreas Kahari
udf_mountfs(): 0, 1 On 30/01/07, Pedro Martelletto [EMAIL PROTECTED] wrote: Andreas, On Tue, Jan 30, 2007 at 09:55:28AM +, Andreas Kahari wrote: The patch will make the machine not lock up, but it still doesn't mount the DVD disc. This time, I get no messages from the kernel in

Re: OpenBSD 3.9 (i386) and mount_udf - big problem

2007-01-30 Thread Pedro Martelletto
On Tue, Jan 30, 2007 at 11:46:31AM +, Andreas Kahari wrote: udf_mountfs(): 0, 1 Okay, I know how to fix this. The problem is, unless you volunteer to test a whole set of diffs, some of which will probably crash your box, I need access to the disc. Another problem is, I don't have any DVD

httpd corrupted after make build?

2007-01-30 Thread Sebastian Rother
Hello everybody, I`ve build oBSD from source after my mashined crashed (HW fault). I did fetched the src again via anoncvs to prevent that the system gets build from corrupt sources. Well I did the usual 'cvs -q get -rOPENBSD_4_0 src' and started the build. After the build was finished I tried

Re: SVND -k and -K ERRATUM

2007-01-30 Thread Don Smith
I looked at the source code. In /src/sys/dev/vnd.c, it has the lines: blf_ecb_encrypt(vnd-sc_keyctx, iv, sizeof(iv)); if (encrypt) blf_cbc_encrypt(vnd-sc_keyctx, iv, addr, bsize); This looks like it encrypts the key using the iv of all zeroes. True, it

Re: http load balancing with pf (apache access log)

2007-01-30 Thread Rui Miguel Silva Seabra
Seg, 2007-01-29 C s 09:54 -0700, Bob Beck escreveu: I'm not using NAT, my load balancer looks like this: web2# more /etc/pf/webmail_servers (...) pf.conf: table webmail_servers persist file /etc/pf/webmail_servers WEBMAIL_IP = {129.128.98.89} rdr pass on $ext_if proto tcp to

Re: http load balancing with pf (apache access log)

2007-01-30 Thread Stuart Henderson
On 2007/01/30 13:06, Rui Miguel Silva Seabra wrote: By the way, what do you use/recommend in order to manage the webserver pool? hoststated.

Re: http load balancing with pf (apache access log)

2007-01-30 Thread Pierre-Yves Ritschard
On Tue, 30 Jan 2007 13:06:00 + Rui Miguel Silva Seabra [EMAIL PROTECTED] wrote: By the way, what do you use/recommend in order to manage the webserver pool? 1 test/min (in cron for instance) is too large a value for many use cases, so what would be best in your opinion? It's likely I'll

Re: Atheros WIFI card can scan, but can't connect.

2007-01-30 Thread Sunnz
Please CC to [EMAIL PROTECTED] too if it works in the future... I had to use FreeBSD on this wireless machine for the time being. 2007/1/31, Ido Admon [EMAIL PROTECTED]: Have already tried that... I try again just for the sake of hoping it works... Any other ideas? From your dmesg:

Re: ACPI tests on a Jetway J7F2 board

2007-01-30 Thread Mark Zimmerman
Not to belabor this thread too much more, but if you peruse the openchrome-users mailing list for a bit, you will see that these boards are developing a reputation for hard lockups under linux, so it is not just me. The developing consesnus over there is that the only way to prevent lockups is to

Re: http load balancing with pf (apache access log)

2007-01-30 Thread Joachim Schipper
On Mon, Jan 29, 2007 at 05:36:12PM +0100, Marian Hettwer wrote: Pierre-Yves Ritschard schrieb: On Mon, 29 Jan 2007 17:20:50 +0100 Marian Hettwer [EMAIL PROTECTED] wrote: Which would mean, I send a SYN to my load balancer, which forwards the SYN to one of my webservers, and the webserver

Re: httpd corrupted after make build?

2007-01-30 Thread Joachim Schipper
On Tue, Jan 30, 2007 at 01:37:49PM +0100, Sebastian Rother wrote: Hello everybody, I`ve build oBSD from source after my mashined crashed (HW fault). I did fetched the src again via anoncvs to prevent that the system gets build from corrupt sources. Well I did the usual 'cvs -q get

Re: OpenBSD's bind: CVE-2007-0493 and CVE-2007-0494

2007-01-30 Thread Dimitry Andric
Stephan A. Rickauer wrote: CVE-2007-0493: If recursion is enabled, a remote attacker can dereference a freed fetch context causing the daemon to abort / crash. CVE-2007-0494: By sending specific DNS query responses with multiple RRSETS attackers could cause BIND to exit abnormally. Is

Re: http load balancing with pf (apache access log)

2007-01-30 Thread Rui Miguel Silva Seabra
Ter, 2007-01-30 C s 14:25 +0100, Pierre-Yves Ritschard escreveu: On Tue, 30 Jan 2007 13:06:00 + Rui Miguel Silva Seabra [EMAIL PROTECTED] wrote: By the way, what do you use/recommend in order to manage the webserver pool? 1 test/min (in cron for instance) is too large a value for many

Re: OpenBSD's bind: CVE-2007-0493 and CVE-2007-0494

2007-01-30 Thread Martin Schröder
2007/1/30, Dimitry Andric [EMAIL PROTECTED]: This was fixed on 2007-01-25: In stable? Best Martin

Mounting FreeBSD partitions on OpenBSD

2007-01-30 Thread roger
I'm trying to mount my FreeBSD partitions in OpenBSD. OpenBSD has no problem finding, reading and writing to the root partition for FreeBSD but doesn't see the other partitions(/home, /usr, /var). I know I have to manually edit the disklabel to add those partitions. My problem is that the

Re: http load balancing with pf (apache access log)

2007-01-30 Thread Pierre-Yves Ritschard
On Tue, 30 Jan 2007 15:20:42 + Rui Miguel Silva Seabra [EMAIL PROTECTED] wrote: Ter, 2007-01-30 `s 14:25 +0100, Pierre-Yves Ritschard escreveu: On Tue, 30 Jan 2007 13:06:00 + Rui Miguel Silva Seabra [EMAIL PROTECTED] wrote: By the way, what do you use/recommend in order to

Re: SDL game crashing

2007-01-30 Thread Edd Barrett
On 1/28/07, Michael [EMAIL PROTECTED] wrote: Hi, I compiled and installed version 0.2.8.2.1 of the armagetronad game client (with default configure). (http://www.armagetronad.net/) When I play it on OpenBSD 4.0 it just works, but the game crashes every single time with 4.0-current when I die.

Re: SDL game crashing

2007-01-30 Thread Michael
Hi, Edd Barrett schrieb: Have you tried building it with debug symbols (-g) and then running it through gdb? Thanks for your answer but the problem was already officially solved by the reverting to an older version of usr/libexec/loader.c The previous changes that were made to

ftp docs directory

2007-01-30 Thread Marti Martinez
I'm guessing there's a simple answer to this, but what happened to the docs directory on the FTP server that holds the single page versions of the FAQ and PF guide -- the links from the online FAQ page aren't working? Marti -- Systems Programmer, Senior Electrical Computer Engineering The

Re: ftp docs directory

2007-01-30 Thread Marti Martinez
And to answer my own question, its back five minutes later. On 1/30/07, Marti Martinez [EMAIL PROTECTED] wrote: I'm guessing there's a simple answer to this, but what happened to the docs directory on the FTP server that holds the single page versions of the FAQ and PF guide -- the links from

Re: OpenBSD's bind: CVE-2007-0493 and CVE-2007-0494

2007-01-30 Thread Travers Buda
* Martin Schr?der [EMAIL PROTECTED] [2007-01-30 16:19:04]: 2007/1/30, Dimitry Andric [EMAIL PROTECTED]: This was fixed on 2007-01-25: In stable? Best Martin No. Release and stable are using 9.3.2-P1. Things of interest include named -v and /usr/src/usr.sbin/bind/version. --

Re: Atheros WIFI card can scan, but can't connect.

2007-01-30 Thread Ido Admon
Have already tried that... I try again just for the sake of hoping it works... Any other ideas? From your dmesg: ath0 at pci1 dev 8 function 0 Atheros AR5212 rev 0x01: apic 2 int 12 (irq 12) ath0: AR5213 7.9 phy 4.5 rf2112a 5.6, FCC2A*, address 00:0f:b5:4f:3f:42 See

Re: http load balancing with pf (apache access log)

2007-01-30 Thread Rui Miguel Silva Seabra
Ter, 2007-01-30 C s 16:44 +0100, Pierre-Yves Ritschard escreveu: On Tue, 30 Jan 2007 15:20:42 + Rui Miguel Silva Seabra [EMAIL PROTECTED] wrote: Promising, it does say that it's now part of the OpenBSD system, but sine when? CURRENT? I can't seem to find it in the 4.0 CD's... Pending

Re: Atheros WIFI card can scan, but can't connect.

2007-01-30 Thread Travers Buda
* Ido Admon [EMAIL PROTECTED] [2007-01-30 15:24:48]: Have already tried that... I try again just for the sake of hoping it works... Any other ideas? From your dmesg: ath0 at pci1 dev 8 function 0 Atheros AR5212 rev 0x01: apic 2 int 12 (irq 12) ath0: AR5213 7.9 phy 4.5 rf2112a

Problem routing 10.x.x.x networks through a firewall

2007-01-30 Thread John Brahy
Hello, I am having a problem routing IP traffic on my network. my firewall has three interfaces. | +-+--+ | P2P - t1 | | router | | 10.1.2.1 | +-+--+ | +-+--+ | 10.1.2.2 | | router | | 10.1.3.1 | +-+--+ | +-+--+

Re: Problem routing 10.x.x.x networks through a firewall

2007-01-30 Thread Cristiano Deana
2007/1/30, John Brahy [EMAIL PROTECTED]: I have net.ip.forwarding=1 and my pf.conf is completely empty right now. From the 10.1.1.100 client, I can't ping the internet from 10.1.11.100, but I can from my firewall. Is there anything special I have to do to route private networks? Here's the ipv4

dmesg and fdisk do not match about usb external disk

2007-01-30 Thread frantisek holop
hi there, please compare the following for my external usb disk: amaaq sudo fdisk sd0 Disk: sd0 geometry: 60801/255/63 [976768065 Sectors] Offset: 0 Signature: 0xAA55 Starting Ending LBA Info: #: idC H S -C H S [ start: size ]

Re: Problem routing 10.x.x.x networks through a firewall

2007-01-30 Thread Will H. Backman
John Brahy wrote: Hello, I am having a problem routing IP traffic on my network. my firewall has three interfaces. | +-+--+ | P2P - t1 | | router | | 10.1.2.1 | +-+--+ | +-+--+ | 10.1.2.2 | | router | | 10.1.3.1 | +-+--+ |

Re: Problem routing 10.x.x.x networks through a firewall

2007-01-30 Thread John Brahy
On 1/30/07, Will H. Backman [EMAIL PROTECTED] wrote: John Brahy wrote: Hello, I am having a problem routing IP traffic on my network. my firewall has three interfaces. | +-+--+ | P2P - t1 | | router | | 10.1.2.1 | +-+--+ | +-+--+ |

Re: Problem routing 10.x.x.x networks through a firewall

2007-01-30 Thread John Brahy
On 1/30/07, John Brahy [EMAIL PROTECTED] wrote: On 1/30/07, Will H. Backman [EMAIL PROTECTED] wrote: John Brahy wrote: Hello, I am having a problem routing IP traffic on my network. my firewall has three interfaces. | +-+--+ | P2P - t1 | | router | |

msk(4) with SK-9S91: Can not set 1000baseSX Single Mode Fiber Media Type

2007-01-30 Thread Rolf Sommerhalder
Hello misc, Two identically configured SUN V210, each equipped with a SK-9S91 PCI NIC (single port, single mode fiber 1 Gbit/s), run -current snapshot dated 20 Jan 07 The kernel detects those fiber NICs, besides the four on-board bge, see dmesg below. After boot, the msk0 come up in autoselect

Re: msk(4) with SK-9S91: Can not set 1000baseSX Single Mode Fiber Media Type

2007-01-30 Thread Siegbert Marschall
Hi, # ifconfig -m msk0 msk0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500 lladdr 00:00:5a:72:fc:58 media: Ethernet autoselect (100baseTX half-duplex) status: no carrier supported media: media none media 10baseT

some basic questions

2007-01-30 Thread ronald jiang
obsd 4.0 i386 without X on an ibm thinkpad t30 a. How to map Alt to Meta? In ksh, Alt really works as meta, but in emcas it doesn't (esc as meta). b. When compile emacs22, it encounters an error, what say: ... don't know how to make faces.elc\n Error code 2 c. adduser within group wheel,

some basic problems

2007-01-30 Thread ronald jiang
obsd 4.0 i386 without X on an ibm thinkpad t30 a. How to map alt to meta? It's already find in ksh, but not in emacs. b. My hard disk really has more then 10 thounds cylinders, but fdisk allows 1024 at most... c. emacs22 compiling encounter an error which says don't know how to make faces.elc

Re: msk(4) with SK-9S91: Can not set 1000baseSX Single Mode Fiber Media Type

2007-01-30 Thread Rolf Sommerhalder
On 1/30/07, Siegbert Marschall [EMAIL PROTECTED] wrote: try media 1000baseT mediaopt full-duplex , 1G fiberlinks should be always fullduplex, rest ist not relevant since it's purely a hardware- question. wonder how the thing got it's head on 100BaseTX... apart from that it's a good idea to

Re: some basic problems

2007-01-30 Thread Nickolay A. Burkov
On Wed, Jan 31, 2007 at 05:52:51AM +0800, ronald jiang wrote: obsd 4.0 i386 without X on an ibm thinkpad t30 a. How to map alt to meta? It's already find in ksh, but not in emacs. b. My hard disk really has more then 10 thounds cylinders, but fdisk allows 1024 at most... c. emacs22

Re: Mounting FreeBSD partitions on OpenBSD

2007-01-30 Thread Ted Unangst
On 1/30/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I'm trying to mount my FreeBSD partitions in OpenBSD. OpenBSD has no problem finding, reading and writing to the root partition for FreeBSD but doesn't see the other partitions(/home, /usr, /var). I know I have to manually edit the disklabel

Re: SVND -k and -K ERRATUM

2007-01-30 Thread Ted Unangst
On 1/30/07, Don Smith [EMAIL PROTECTED] wrote: I looked at the source code. In /src/sys/dev/vnd.c, it has the lines: blf_ecb_encrypt(vnd-sc_keyctx, iv, sizeof(iv)); if (encrypt) blf_cbc_encrypt(vnd-sc_keyctx, iv, addr, bsize); This looks like it encrypts

Re: msk(4) with SK-9S91: Can not set 1000baseSX Single Mode Fiber Media Type

2007-01-30 Thread Henning Brauer
* Rolf Sommerhalder [EMAIL PROTECTED] [2007-01-30 21:48]: Two identically configured SUN V210, each equipped with a SK-9S91 PCI NIC (single port, single mode fiber 1 Gbit/s), run -current snapshot dated 20 Jan 07 The kernel detects those fiber NICs, besides the four on-board bge, see dmesg

Re: msk(4) with SK-9S91: Can not set 1000baseSX Single Mode Fiber Media Type

2007-01-30 Thread Mark Kettenis
Hi Rolf, Most likely something is not quite right with the eephy(4) driver. The 88E1112 PHY apparently supports both copper and fiber, and I think it should automatically switch over to fiber, but apparently it doesn't. Could you test some diffs for me on that machine? Mark

Re: dmesg and fdisk do not match about usb external disk

2007-01-30 Thread Nick Holland
frantisek holop wrote: hi there, please compare the following for my external usb disk: amaaq sudo fdisk sd0 Disk: sd0 geometry: 60801/255/63 [976768065 Sectors] Offset: 0 Signature: 0xAA55 Starting Ending LBA Info: #: idC H S -C H S [

Regarding your submission to the job entitled Information Security Engineer - Sydney

2007-01-30 Thread resume-thanks
We received your application for the job entitled 'Information Security Engineer - Sydney'. However, this job requires that you include an English resume. Please resubmit your application with an English resume. Our thanks, Google Staffing

Re: No HD DMA? (Was: Harddisk slow)

2007-01-30 Thread Jonathan Gray
On Tue, Jan 30, 2007 at 08:50:53AM +0100, Heinrich Rebehn wrote: attaching the drive to a notebook via a IDE/USB converter easily yields 20 MB/s. So the drive *is* faster. While i could live with 8 MB/s i cannot accept the high CPU usage. It seems to make the installed crypto accelerator

PF rules for outgoing FTP from firewall

2007-01-30 Thread Steve Williams
Hi, I have a Sunfire V120, sparc64, OpenBSD 3.9 performing NAT and assorted firewall duties. It is working 100%, including proxying ftp requests from the internal network. Today I went to do an FTP directly from the server (perl CPAN), and it failed. Looking at blocked packets, I see

Re: spamd openbsd 4.0 query

2007-01-30 Thread RW
On Sun, 28 Jan 2007 19:19:09 +, John wrote: The only other thing I'm trying to find out now is whether whitelist.txt can use domains rather than dotted quads No. It doesn't do DNS as it is a fast lightweight single purpose MTA-like daemon. Besides which: Are you expecting to trust the domain

Re: PF rules for outgoing FTP from firewall

2007-01-30 Thread Darren Spruell
On 1/30/07, Steve Williams [EMAIL PROTECTED] wrote: Hi, I have a Sunfire V120, sparc64, OpenBSD 3.9 performing NAT and assorted firewall duties. It is working 100%, including proxying ftp requests from the internal network. Today I went to do an FTP directly from the server (perl CPAN), and

Re: msk(4) with SK-9S91: Can not set 1000baseSX Single Mode Fiber Media Type

2007-01-30 Thread Rolf Sommerhalder
Hi Mark Most likely something is not quite right with the eephy(4) driver. eephy_status() in sys/dev/mii/eephy.c seems to be a candidate for closer examination. It appears to fall through the if() clause and does the else part, although we have a NIC with MIIF_IS_1000X :