Re: Cannot ssh after reboot

2007-11-15 Thread Alexander Hall
Han Boetes wrote: Jake Conk wrote: I rebooted my server and now I get this error when I try to ssh: -bash: can't load library 'libintl.so.3.0' Connection to 192.168.10.2 closed. Why can't it load libintl? What causes this with a simple reboot? Maybe that it was deleted? Borked? I dunno. Yo

Re: Hardware for PF - more general questions

2007-11-15 Thread David Gwynne
On 14/11/2007, at 8:11 PM, Richard Wilson wrote: I have been pondering for some time getting a new core router, and a recent question on HP Procurves vs Soekris boxes has kicked me into thought. I have some more general questions: I recall hearing tell (on here I think) that amd64 is a better a

Re: Using CBQ with variable upload bandwidth

2007-11-15 Thread Girish Venkatachalam
On 08:00:08 Nov 16, Jonathan Stewart wrote: > I though about doing something like that but the usable upload is so > variable that 60% could completely knock the normal_folk off when it > gets congested. I have 256kbit up right now and get anywhere from as > low as 64kbit to 160kbit+ actual thro

Re: PF/ALTQ/Bridge Question

2007-11-15 Thread Lord Sporkton
May i ask why you are using a bridge between ISP and OpenBSD firewall? why not just implement QoS on the firewall if its OpenBSD anyway? Have you verified ports for your voip? it looks like you are expecting your outbound voip connection to be connection control=5060 and media=1-2, i usual

Re: how best to handle DNS on firewalled home network?

2007-11-15 Thread evo
Jonathan Thornburg wrote: The purpose of this message is to ask for advice on how to handle DNS on the firewall. I can see two basic options: (a) When the firewall boots, after the outside network is configured (via /etc/rc running dhclient) a shell/grep/perl script on the firewall copie

Re: Please send email directly to misc@openBSD.org (no cc please)

2007-11-15 Thread Tonnerre LOMBARD
Salut, On Fri, Nov 16, 2007 at 12:28:09AM -0500, Piet Slaghekke wrote: > I like to filter my openBSD emails and the only way I can do it is if everyone > send their email with misc@openBSD.org in the " To " field. > > Please send email To misc@openBSD.org and do not CC it to this address. What

Please send email directly to misc@openBSD.org (no cc please)

2007-11-15 Thread Piet Slaghekke
I like to filter my openBSD emails and the only way I can do it is if everyone send their email with misc@openBSD.org in the " To " field. Please send email To misc@openBSD.org and do not CC it to this address. Thanks!

Re: Using CBQ with variable upload bandwidth

2007-11-15 Thread Jonathan Stewart
Calomel wrote: > Jonathan, > > HFSC will do what you want. You could setup a queue using the > "realtime" directive to guarantee bandwidth to the big_spenders. Lets > say 60% of the total connection speed. Then assign 20% to the > normal_folk. Both queues can borrow from each other, but will alway

Re: Using CBQ with variable upload bandwidth

2007-11-15 Thread Calomel
Jonathan, HFSC will do what you want. You could setup a queue using the "realtime" directive to guarantee bandwidth to the big_spenders. Lets say 60% of the total connection speed. Then assign 20% to the normal_folk. Both queues can borrow from each other, but will always guarantee the amount of b

Using CBQ with variable upload bandwidth

2007-11-15 Thread Jonathan Stewart
Is it possible to use CBQ as a weighted round robin queue when the upload bandwidth is highly variable? This is on FreeBSD RELENG_7 which I believe uses pf from OpenBSD 4.1 Example queue idea: Root Queue (1Mbps) big_spenders (500Kbps, priority 5, borrow) normal_folk (500Kbps, priority 3,

Re: Does Xenocara requires sets x*42.tgz

2007-11-15 Thread Kevin Stam
You're mistaken about something. "Xenocara" is just the OpenBSD name for the newest version of X.org. The 4.2 X sets include cwm. You're probably thinking about the 4.1 X sets and earlier - they didn't include cwm because they used an older version of X. Again, "Xenocara" IS X. cwm requires X. Ins

Puffy Gigabit Router Recommendations

2007-11-15 Thread Insan Praja SW
On Fri, 16 Nov 2007 06:59:18 +0700, Henning Brauer <[EMAIL PROTECTED]> wrote: * Lord Sporkton <[EMAIL PROTECTED]> [2007-11-15 23:44]: Is it possible to nest a neighbor group inside another neighbor group in bgpd.conf? It gives me an errors on the nested group statement when i try to start bgpd

Re: Does Xenocara requires sets x*42.tgz

2007-11-15 Thread Zoong PHAM
On Friday, 16 November 2007 at 1:19:43 +, Stuart Henderson wrote: > Why? That doesn't make sense. If you want to use X, just install > the sets. The reason is the X sets don't have window manager cwm. I just want to use cwm. How can I use cwm without Xenocara ? Regards, ZP

Does Xenocara requires sets x*42.tgz

2007-11-15 Thread Zoong PHAM
I want to try out the window manager cwm that comes with 4.2 Xenocara. Does it require the sets x*42.tgz? My plan is installing 4.2 without the sets x*42.tgz. Then extract xenocara.tgz to /usr/src/ and follow the instruction in /usr/src/xenocara/README to build xenocara. Are they the correct steps

Re: Does Xenocara requires sets x*42.tgz

2007-11-15 Thread Stuart Henderson
On 2007/11/16 12:09, Zoong PHAM wrote: > My plan is installing 4.2 without the sets x*42.tgz. Why? That doesn't make sense. If you want to use X, just install the sets.

Re: bgpd nested neighbor groups

2007-11-15 Thread Henning Brauer
* Lord Sporkton <[EMAIL PROTECTED]> [2007-11-15 23:44]: > Is it possible to nest a neighbor group inside another neighbor group > in bgpd.conf? > > It gives me an errors on the nested group statement when i try to > start bgpd. is there a way around this or am i missing something i > need to nest?

Re: CARP Advertisement Issue

2007-11-15 Thread Henning Brauer
* Shane Lazarus <[EMAIL PROTECTED]> [2007-11-13 05:22]: > * lladdr filtering by the L2 provider; > All of the CARP advertisements are coming from the shared lladdr of the carp > interface, not from the lladdr of the carpdev's. > (True also on the other carp interfaces.) you filter by target of cou

Re: Fibre card recomendation

2007-11-15 Thread Chris Cappuccio
maybe this is what you are looking for: http://www.small-tree.com/Six_Port_SFP_PCI_e_Gigabit_Ethernet_Server_p/peg6sfp.htm it uses supported intel controller chips. Huncar, Peter [EMAIL PROTECTED] wrote: > Hello > > Could someone possible recommend me a good stable (not too expensive) gigabit

Re: Slow Performance on Encrypted svnd

2007-11-15 Thread Clint Pachl
I experimented with a few more things, but nothing helped. Someone said run a bonnie++ benchmark to verify the performance. bonnie++ basically told me what dd did, that svnd backed by a file is slow and svnd backed by a disk or partition is floppy disk slow. Nonetheless, the bonnie++ results m

Re: Hardware for PF - more general questions

2007-11-15 Thread Stuart Henderson
On 2007/11/15 23:50, Thomas Althoff wrote: > > Depends which routes you take. You probably want 1GB if you receive > > full routes. Given there's no cisco tax on RAM here, this is quite > > viable. :-) > > Here's my view with two providers with full routes also running 4.2. The stats at the end

Re: Hardware for PF - more general questions

2007-11-15 Thread Thomas Althoff
> Depends which routes you take. You probably want 1GB if you receive > full routes. Given there's no cisco tax on RAM here, this is quite > viable. :-) > Here's my view with two providers with full routes also running 4.2. load averages: 0.17, 0.19, 0.11 38 processes: 37 idle, 1 on

bgpd nested neighbor groups

2007-11-15 Thread Lord Sporkton
Is it possible to nest a neighbor group inside another neighbor group in bgpd.conf? It gives me an errors on the nested group statement when i try to start bgpd. is there a way around this or am i missing something i need to nest? on: OpenBSD 4.2 GENERIC.MP#304 i386 -- -Lawrence

hoststated strangeness...

2007-11-15 Thread Aaron Glenn
running i386/4.2-CURRENT from three days ago, I'm seeing a very strange and very reproducible behavior out of hoststated. regardless of what I set the global timeout to, either system in my table will drop to a down status because it's exceeded the timeout by 10ms. case in point: [EMAIL PROTECTED]

Re: Hardware for PF - more general questions

2007-11-15 Thread Chris Cappuccio
> Depends which routes you take. You probably want 1GB if you receive > full routes. Given there's no cisco tax on RAM here, this is quite > viable. :-) > here's my view of full routes w/1GB of RAM and 4.2: 24164 root 20 8344K 8752K sleeppoll 13:00 0.00% bgpd 15092 _bgpd

Re: removing a list of users

2007-11-15 Thread Andreas Andersson
-BEGIN PGP MESSAGE- Charset: ISO-8859-1 Version: GnuPG v2.0.4 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org hQIOA3JHLODoc6ABEAf/QtOL5xonPKEmfNLk5P5Th+BOAceBZJ1VsTcjk2t5BA7y lJic+p5m+/2Ej7BlX8Fwxsa0U+9KxAMf2ifkE3XBPVp2Zi2Ulp8Ja1UAE/ft0+0w Lleyp+2u21EfZ3LR2C6xX5tUL

Strange line in the routing table after carp failover?

2007-11-15 Thread Charles Price
Hi, I have a pair of routers running OpenBSD 4.2 release, each with four ethernet interfaces (fxp0, fxp1, fxp2, fxp3) and carp on all four interfaces. fxp0 and fxp1 are /30 networks over which I run BGP sessions to our upstream providers. Router A is the primary machine with advskew 0 and Rout

Re: removing a list of users

2007-11-15 Thread Paul de Weerd
On Thu, Nov 15, 2007 at 01:57:50PM -0500, Piet Slaghekke wrote: | Ok thanks now it works! | so If I want to remove the user account and all the user files on the system | I use userdel -r | | Can I also use the rmuser command for this? | | How do I write a script to do this and run it from a csh

Re: removing a list of users

2007-11-15 Thread Darrin Chandler
On Thu, Nov 15, 2007 at 09:23:45PM +0100, Andreas Andersson wrote: > -BEGIN PGP MESSAGE- > Charset: ISO-8859-1 > Version: GnuPG v2.0.4 (FreeBSD) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > hQIOA3JHLODoc6ABEAf/QtOL5xonPKEmfNLk5P5Th+BOAceBZJ1VsTcjk2t5BA7y > lJic+p5m+

Re: how best to handle DNS on firewalled home network?

2007-11-15 Thread Darrin Chandler
On Thu, Nov 15, 2007 at 08:00:22PM +0100, knitti wrote: > just use named in caching mode (should work out of the box) and forget > your isp's name servers. it costs next to nothing performance-wise and > works relly well. a soekris 4501 firewall (100MHz/ 64 MB RAM) does handle > a DSL-type connecti

Re: removing a list of users

2007-11-15 Thread William Boshuck
On Thu, Nov 15, 2007 at 01:06:57PM -0500, Piet Slaghekke wrote: > Thanks Serge, > > When I do: while read uid; do userdel $uid; done < userlist.txt > I get: > > while: Expression Syntax. The foregoing command was written in Bourne shell syntax. The error message you report suggests that you are

Re: how best to handle DNS on firewalled home network?

2007-11-15 Thread L. V. Lammert
On Thu, 15 Nov 2007, Daniel Melameth wrote: > On 11/15/07, Jonathan Thornburg <[EMAIL PROTECTED]> wrote: > > (a) When the firewall boots, after the outside network is configured > >(via /etc/rc running dhclient) a shell/grep/perl script on the > >firewall copies the DNS server addresses fr

Re: removing a list of users

2007-11-15 Thread Piet Slaghekke
Ok thanks now it works! so If I want to remove the user account and all the user files on the system I use userdel -r Can I also use the rmuser command for this? How do I write a script to do this and run it from a csh shell, in other words what line do I need in the script to tell the system t

Re: how best to handle DNS on firewalled home network?

2007-11-15 Thread knitti
On 11/15/07, Jonathan Thornburg <[EMAIL PROTECTED]> wrote: > I'm setting up a home firewall, intended to (try to) protect "client" > machines (mostly family members' MS-Windoze laptops) from misc internet > threats. I have a couple of questions about how best to handle DNS > on/through the firewal

Re: Slow Performance on Encrypted svnd

2007-11-15 Thread Die Gestalt
On Nov 15, 2007 3:22 PM, Nick Guenther <[EMAIL PROTECTED]> wrote: > This is really really really weird. You'd think that files, having the > filesystem to go through before getting to the disk, would necessarily > be slower. There must be some kind of weirdness with the thing. I concur. My exper

Re: how best to handle DNS on firewalled home network?

2007-11-15 Thread Daniel Melameth
On 11/15/07, Jonathan Thornburg <[EMAIL PROTECTED]> wrote: > I'm setting up a home firewall, intended to (try to) protect "client" > machines (mostly family members' MS-Windoze laptops) from misc internet > threats. I have a couple of questions about how best to handle DNS > on/through the firewal

how best to handle DNS on firewalled home network?

2007-11-15 Thread Jonathan Thornburg
I'm setting up a home firewall, intended to (try to) protect "client" machines (mostly family members' MS-Windoze laptops) from misc internet threats. I have a couple of questions about how best to handle DNS on/through the firewall: The firewall runs 4.2-stable, and has 2 network interfaces, one

Re: removing a list of users

2007-11-15 Thread Piet Slaghekke
Thanks Serge, When I do: while read uid; do userdel $uid; done < userlist.txt I get: while: Expression Syntax. On Nov 15, 2007 11:59 AM, Serge Basterot <[EMAIL PROTECTED]> wrote: > On Thu, Nov 15, 2007 at 11:47:09AM -0500, Piet Slaghekke wrote: > > Hello everyone, > > Hello, > > > How can I rem

Re: removing a list of users

2007-11-15 Thread Cristiano Deana
On Nov 15, 2007 7:06 PM, Piet Slaghekke <[EMAIL PROTECTED]> wrote: > while: Expression Syntax. are you using ksh shell? if not: # ksh # while read uid; do userdel $uid; done < userlist.txt -- Cris, member of G.U.F.I Italian FreeBSD User Group http://www.gufi.org/

need help with softraid

2007-11-15 Thread Marco Peereboom
I need help with figuring out which architectures have issues with softraid. To do this I need test reports on all architectures. I am still in the process of moving so I basically have no gear available minus some laptops. What I really need are test reports for non i386/amd64 arches. I have t

Re: how best to handle DNS on firewalled home network?

2007-11-15 Thread Stuart Henderson
On 2007/11/15 17:02, Jonathan Thornburg wrote: > (b) The firewall's dhcpd is configured to tell clients that the > firewall itself is a DNS server. I find ISP DNS servers to give enough trouble that I always do this, even if it means not benefitting from their cache. > The firewall also runs

Re: how best to handle DNS on firewalled home network?

2007-11-15 Thread Frank Bax
Jonathan Thornburg wrote: My plan is to have the firewall run its own dhcpd on its inside interface, giving out private client addresses in the 192.168.0.0/16 address range. (This way clients can be kept at the same MS-Windoze "configure everything automagically" DHCP settings they would use else

removing a list of users

2007-11-15 Thread Piet Slaghekke
Hello everyone, I am breaking my head over this one. I have list of users userlist.txt and I want to remove their accounts. OpenBSD does not seem to have the rmuser -f -y function were you can I remove a list of users without having to answer yes multiple times. How can I remove a list of u

Re: removing a list of users

2007-11-15 Thread Serge Basterot
On Thu, Nov 15, 2007 at 11:47:09AM -0500, Piet Slaghekke wrote: > Hello everyone, Hello, > How can I remove a list of users in OpenBSD. Something like that, or with the "-r" option : while read uid; do userdel $uid; done < userlist.txt -- Serge

Re: trunk failover on -current problem

2007-11-15 Thread Markus Bergkvist
I see similar problem with my ral(4), reported in PR 5420 http://cvs.openbsd.org/cgi-bin/query-pr-wrapper?full=yes&numbers=5420 See if the diff at the end of the report do you any good. also, there http://marc.info/?l=openbsd-tech&w=2&r=1&s=patch+if_trunk.h+for+ath+and+em&q=b michael hamerski w

Re: Slow Performance on Encrypted svnd

2007-11-15 Thread Nick Guenther
On 11/14/07, Clint Pachl <[EMAIL PROTECTED]> wrote: > Reading through the archives I have found several people say that > encrypting via an svnd device isn't much slower than writing directly to > a raw unencrypted disk. While I found this to be true for svnd devices > backed by files, svnd devices

max. length of public key

2007-11-15 Thread MohanKumar Shah - TLS , Chennai
Hello all, Is maximum length defined for a public key? If yes, what is the limit. Thanks in advance, Manny DISCLAIMER: The contents of this e-mail and any attachment(s) are confidential and intended for the named recipient(s) only. It shall not attach any liability on the originator or HC

IPsec problem: multiple CAs

2007-11-15 Thread Toni Mueller
Hi, I'm trying to get a VPN running that uses X.509 certificates for authentication. I have such beasts running with one CA with no problem: CA1 -> server cert CA1 -> clients certs works w/o any problems. Now I want to have CA1 -> server cert CA2 -> clients certs with CA1 distinctly differ

Re: glxsb crypto crash

2007-11-15 Thread Mitja Muženič
For the archives, the following two commits have fixed this: -- CVSROOT:/cvs Module name:src Changes by: [EMAIL PROTECTED] 2007/11/14 12:10:44 Modified files: sys/arch/i386/i386: via.c sys/arch/i386/pci: glxsb.c Log message: do not process r

Gigabit Puffy Router Config Recommendation

2007-11-15 Thread Insan Praja SW
Hi Misc, I'm currently building 2/redundant/loadbalance gigabit router on intel S3000AH. Right now, I successfully set it with CARP IP load balancing. This routers will run bgpd. So.. the question is.. (1) Some threads tells me to use i386 Kernel and UP on gigabit routers. (2) CARP doesn't seem re

Re: OT: OpenBSD on Asus eeePC

2007-11-15 Thread Alexey Suslikov
Jacob Winther wrote: > dmesg from latest bsd.rd snapshot: > > OpenBSD 4.2-current (RAMDISK_CD) #532: Tue Nov 13 08:24:10 MST 2007 > [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/RAMDISK_CD > cpu0: Intel(R) Celeron(R) M processor 900MHz ("GenuineIntel" 686- > class) 631 MHz > cpu0: > FPU,V8

Re: Cannot ssh after reboot! Help!!!!

2007-11-15 Thread Jake Conk
I can't run ldd or anything because I can't login via ssh or while directly connected to the machine. I get that error regardless :( On Nov 8, 2007 9:19 PM, Girish Venkatachalam <[EMAIL PROTECTED]> wrote: > > On 19:44:00 Nov 08, Jake Conk wrote: > > I rebooted my server and now I get this error wh

Re: win32-codecs, avi and amd64 question

2007-11-15 Thread Jacob Meuser
On Thu, Nov 15, 2007 at 08:06:02AM +0100, Marc Espie wrote: > On Wed, Nov 14, 2007 at 08:13:42PM +0530, Girish Venkatachalam wrote: > > mplayer cannot understand DVD menus. That is the only problem mplayer > > has IMHO. > > ogle is about the only unix app out there which works reasonably well > wi

Re: Cannot ssh after reboot! Help!!!!

2007-11-15 Thread Greg Thomas
Search the misc archives for all the messages of others who have screwed their shell up. You'll find plenty of suggestions on how to get yourself fixed back up. I think there was a thread just last week. On Nov 15, 2007 12:22 AM, Jake Conk <[EMAIL PROTECTED]> wrote: > I can't run ldd or anything

Fibre card recomendation

2007-11-15 Thread Huncar, Peter
Hello Could someone possible recommend me a good stable (not too expensive) gigabit multimod optical card? I'm planning to switch newtwok backbone cablig from metalic to optic. Router is managing traffic in a student capus local traffic including and is connected to a gigabit Allied Telesyn switch

Re: win32-codecs, avi and amd64 question

2007-11-15 Thread Jacob Meuser
On Thu, Nov 15, 2007 at 12:28:49PM +0530, Girish Venkatachalam wrote: > Anyway let us move on. when you quit talking "through your hat" I will no longer be compelled to call out the bullshit. -- [EMAIL PROTECTED] SDF Public Access UNIX System - http://sdf.lonestar.org

Getting an Apple Pro Keyboard working in i386 4.2

2007-11-15 Thread The King of Norway
Hi, I've installed OpenBSD 4.2 (i386) in VWMare Fusion, and found that the keyboard mapping is a bit off. The tilde key is currently mapped to the number one on my numeric keypad. I'm using a US Apple Pro Keyboard. Anyone know of a keymap I can install, or a way of getting the tilde key to p

Re: win32-codecs, avi and amd64 question

2007-11-15 Thread Marc Espie
On Wed, Nov 14, 2007 at 08:13:42PM +0530, Girish Venkatachalam wrote: > mplayer cannot understand DVD menus. That is the only problem mplayer > has IMHO. ogle is about the only unix app out there which works reasonably well with dvd menus. mplayer has a lot of minor issues. Lots of option combina