Re: Average time for compiling userland? == benchmarking CPU/IO? best result for database hosting?

2010-03-01 Thread Schöberle Dániel
 Hello,

 Iam confused on the different result I get when I compile userland on
 any machine better then a Dual Core 2.5Ghz 2GB RAM 160GB 7200 SATA /
 SATA ii

 On some machines I get a compile time of 45min, other machines 30min..
 and the best of the case I get 30min.   Sometimes that machine that
 takes 45min is far better hardware then a DualCore, in this case a
 QuadCore with SATA II/sata...

 Iam going to use these machines for database and Iam very concerned
 about these results

 Based on that I have this question:

 Is it normal that this varies so much? (Afterall a variation from
 35min to 45min represents an increase of about %25 less efficiency!!)

 Is there a better way to benchmark the IO of a Hard Disk on OpenBSD ,
 what should be the normal of a hard disk scanned as sd SATA/ SATA II
 with similar CPU/RAM as mentioned?

 Andres

Hi!

You didn't provide too many details. Based on that it could be any of the
following:

Different CPU (Intel vs. AMD, CPU generations, amount of CPU cache...)
Different FSB
Different memory setup or technology (integrated vs. on-board memory,
controller single-channel vs. dual-channel vs. triple-channel, DDR vs. DDR2
vs. DDR3, ECC vs. noECC, buffered vs. unbuffered, memory speed or timings,
...)
Different I/O or SATA controller
Different chipset
Misconfiguration (BIOS, OS, HDD, ...)
Different HDD (platter density, RPM, HDD cache, manufacturer, ...)
HDD layout (beginning vs. the end of disk)

and probably a ton of others I didn't think of.

How much, if at all, should any of these matter? No idea, you tell us :)

Regards, Daniel.



Re: Books on reverse engineering?

2010-03-01 Thread Siju George
On Thu, Jan 21, 2010 at 7:22 AM, James Hozier guitars...@yahoo.com wrote:

 So with that reference in mind, would anyone experienced care to point
 me in some correct direction? (Which texts to read, which programming
 language(s) to focus on, etc.)


A book that might help.

http://lwn.net/Kernel/LDD3/

--Siju



Re: FWIW Current snapshot Apache/PHP buggy

2010-03-01 Thread Duncan Patton a Campbell
On Sun, 28 Feb 2010 15:01:20 + (UTC)
Stuart Henderson s...@spacehopper.org wrote:

 On 2010-02-27, Duncan Patton a Campbell campb...@neotext.ca wrote:
  On Thu, 25 Feb 2010 08:58:30 -0500
  Dan Harnett dan...@harnett.name wrote:
 
  On Thu, Feb 25, 2010 at 03:30:47AM -0700, Duncan Patton a Campbell wrote:
   I've just installed a server using current and have found that 
   there are problems with session_destroy(); such that is just 
   does not work.  
   
   The Apache is the installed (1.3) version and PHP is from 
   packages.
   
   I have tested the same software and setup on a 4.5 Release 
   (no patches) and there are no problems with sessions.  
  
  
  Can you provide any more detail?  session_destroy() appears to work fine
  with the i386 snap dated 2/23/2010 and latest php5-core snapshot
  package.
  
 
  I mebbe spoke to soon to be conclusive... as of now I am still looking
  under rocks... the problem exhibits on a clean 4.5-Release install but
  not on my (semi stock) 4.5 development box.
 
 sessions were broken in PHP in 4.5 release, you need to compile
 from -stable ports (or move to -current after the next package
 snapshot for your arch has been built).
 

I pulled the 4.5 stable ports and  no change...  given what Chris Bennett
said previously I think the problem is in apache not the php package.  Just
the same I'm going to pull the ports from current and build that before 
I go about trying to rebuild the distribution apache 1.3 (not in ports..)

Dhu



Re: FWIW Current snapshot Apache/PHP buggy

2010-03-01 Thread Duncan Patton a Campbell
On Sun, 28 Feb 2010 15:01:20 + (UTC)
Stuart Henderson s...@spacehopper.org wrote:

 On 2010-02-27, Duncan Patton a Campbell campb...@neotext.ca wrote:
  On Thu, 25 Feb 2010 08:58:30 -0500
  Dan Harnett dan...@harnett.name wrote:
 
  On Thu, Feb 25, 2010 at 03:30:47AM -0700, Duncan Patton a Campbell wrote:
   I've just installed a server using current and have found that 
   there are problems with session_destroy(); such that is just 
   does not work.  
   
   The Apache is the installed (1.3) version and PHP is from 
   packages.
   
   I have tested the same software and setup on a 4.5 Release 
   (no patches) and there are no problems with sessions.  
  
  
  Can you provide any more detail?  session_destroy() appears to work fine
  with the i386 snap dated 2/23/2010 and latest php5-core snapshot
  package.
  
 
  I mebbe spoke to soon to be conclusive... as of now I am still looking
  under rocks... the problem exhibits on a clean 4.5-Release install but
  not on my (semi stock) 4.5 development box.
 
 sessions were broken in PHP in 4.5 release, you need to compile
 from -stable ports (or move to -current after the next package
 snapshot for your arch has been built).
 

How wide is this problem?  I started out with a 4.6 current, which didn't work,
then 4.5 release... sessions are a fairly important php feature.  What has
me bugged here is that I have a 4.5 system that works fine, but it is not
just release, and has had apache2.2 installed on it (my devsys...) and runable.

Thanks for any help.

Dhu



IPsec 4.6 to snapshot failing

2010-03-01 Thread Tony Sarendal
Good morning misc,

I upgraded two devices from i386-4.6 to i386-snapshot-feb28.
After the upgrade snapshot boxes are unable to communicate with the 4.6
devices
when going through ipsec. snapshot-snapshot works fine.

Everything looks ok except that nothing shows up on enc0 when doing
4.6--snapshot.
Deleting the SA's restores connectiviy, unencrypted of course.
Is this a known issue ?

/T

bmr1.jfa: 212.112.186.174 (4.6)
bmr1.brh: 212.188.183.71 (snapshot)

---
bmr1.jfa# ipsecctl -sa | grep 212.188.183.71
flow esp in from 212.188.183.71 to 212.112.186.174 peer 212.188.183.71 srcid
212.112.186.174/32 dstid 212.188.183.71/32 type use
flow esp out from 212.112.186.174 to 212.188.183.71 peer 212.188.183.71
srcid 212.112.186.174/32 dstid 212.188.183.71/32 type require
esp transport from 212.188.183.71 to 212.112.186.174 spi 0x3f91b3c2 auth
hmac-sha2-256 enc aes
esp transport from 212.112.186.174 to 212.188.183.71 spi 0xa797ec1e auth
hmac-sha2-256 enc aes
bmr1.jfa#

bmr1.brh# ipsecctl -sa | grep 212.112.186.174
flow esp in from 212.112.186.174 to 212.188.183.71 peer 212.112.186.174
srcid 212.188.183.71/32 dstid 212.112.186.174/32 type use
flow esp out from 212.188.183.71 to 212.112.186.174 peer 212.112.186.174
srcid 212.188.183.71/32 dstid 212.112.186.174/32 type require
esp transport from 212.188.183.71 to 212.112.186.174 spi 0x3f91b3c2 auth
hmac-sha2-256 enc aes
esp transport from 212.112.186.174 to 212.188.183.71 spi 0xa797ec1e auth
hmac-sha2-256 enc aes
bmr1.brh#

bmr1.brh# pfctl -d
pf disabled
bmr1.brh# tcpdump -n -p -i vlan301 host 212.112.186.174 
[1] 2099
bmr1.brh# tcpdump: listening on vlan301, link-type EN10MB
bmr1.brh# tcpdump -n -p -i enc0 
[2] 23922
bmr1.brh# tcpdump: listening on enc0, link-type ENC
bmr1.brh#

bmr1.jfa# tcpdump -n -p -i bge0 host 212.188.183.71 
[1] 443
bmr1.jfa# tcpdump: listening on bge0, link-type EN10MB
bmr1.jfa# tcpdump -n -p -i enc0 
[2] 16714
bmr1.jfa# tcpdump: listening on enc0, link-type ENC
bmr1.jfa#


bmr1.jfa# ping 212.188.183.71
PING 212.188.183.71 (212.188.183.71): 56 data bytes
11:21:48.081933 (authentic,confidential): SPI 0x007e7833: 212.112.186.174 
212.188.183.71: icmp: echo request
11:21:48.081969 esp 212.112.186.174  212.188.183.71 spi 0x007e7833 seq 15
len 116
11:21:49.085937 (authentic,confidential): SPI 0x007e7833: 212.112.186.174 
212.188.183.71: icmp: echo request
11:21:49.085974 esp 212.112.186.174  212.188.183.71 spi 0x007e7833 seq 16
len 116
11:21:50.095970 (authentic,confidential): SPI 0x007e7833: 212.112.186.174 
212.188.183.71: icmp: echo request
11:21:50.096006 esp 212.112.186.174  212.188.183.71 spi 0x007e7833 seq 17
len 116
11:21:51.106010 (authentic,confidential): SPI 0x007e7833: 212.112.186.174 
212.188.183.71: icmp: echo request
11:21:51.106045 esp 212.112.186.174  212.188.183.71 spi 0x007e7833 seq 18
len 116

bmr1.brh# 10:21:48.102134 esp 212.112.186.174  212.188.183.71 spi
0x007e7833 seq 15 len 116
10:21:49.106079 esp 212.112.186.174  212.188.183.71 spi 0x007e7833 seq 16
len 116
10:21:50.116146 esp 212.112.186.174  212.188.183.71 spi 0x007e7833 seq 17
len 116
10:21:51.126213 esp 212.112.186.174  212.188.183.71 spi 0x007e7833 seq 18
len 116



bmr1.jfa# grep 212.188.183.71 /etc/ipsec.conf
ike esp transport from 212.112.186.174 to 212.188.183.71

bmr1.brh# grep 212.112.186.174 /etc/ipsec.conf
ike esp transport from 212.188.183.71 to 212.112.186.174



Re: IPsec 4.6 to snapshot failing

2010-03-01 Thread Peter Hessler
On 2010 Mar 01 (Mon) at 11:57:41 +0100 (+0100), Tony Sarendal wrote:
:Good morning misc,
:
:I upgraded two devices from i386-4.6 to i386-snapshot-feb28.
:After the upgrade snapshot boxes are unable to communicate with the 4.6
:devices
:when going through ipsec. snapshot-snapshot works fine.
...
:esp transport from 212.188.183.71 to 212.112.186.174 spi 0x3f91b3c2 auth
:hmac-sha2-256 enc aes


http://www.openbsd.org/faq/current.html#20100110

-- 
How long a minute is depends on which side of the bathroom door you're on.



Re: IPsec 4.6 to snapshot failing

2010-03-01 Thread Otto Moerbeek
On Mon, Mar 01, 2010 at 11:57:41AM +0100, Tony Sarendal wrote:

 Good morning misc,
 
 I upgraded two devices from i386-4.6 to i386-snapshot-feb28.
 After the upgrade snapshot boxes are unable to communicate with the 4.6
 devices
 when going through ipsec. snapshot-snapshot works fine.
 
 Everything looks ok except that nothing shows up on enc0 when doing
 4.6--snapshot.
 Deleting the SA's restores connectiviy, unencrypted of course.
 Is this a known issue ?

Yes: http://www.openbsd.org/faq/current.html#20100110

-Otto

 
 /T
 
 bmr1.jfa: 212.112.186.174 (4.6)
 bmr1.brh: 212.188.183.71 (snapshot)
 
 ---
 bmr1.jfa# ipsecctl -sa | grep 212.188.183.71
 flow esp in from 212.188.183.71 to 212.112.186.174 peer 212.188.183.71 srcid
 212.112.186.174/32 dstid 212.188.183.71/32 type use
 flow esp out from 212.112.186.174 to 212.188.183.71 peer 212.188.183.71
 srcid 212.112.186.174/32 dstid 212.188.183.71/32 type require
 esp transport from 212.188.183.71 to 212.112.186.174 spi 0x3f91b3c2 auth
 hmac-sha2-256 enc aes
 esp transport from 212.112.186.174 to 212.188.183.71 spi 0xa797ec1e auth
 hmac-sha2-256 enc aes
 bmr1.jfa#
 
 bmr1.brh# ipsecctl -sa | grep 212.112.186.174
 flow esp in from 212.112.186.174 to 212.188.183.71 peer 212.112.186.174
 srcid 212.188.183.71/32 dstid 212.112.186.174/32 type use
 flow esp out from 212.188.183.71 to 212.112.186.174 peer 212.112.186.174
 srcid 212.188.183.71/32 dstid 212.112.186.174/32 type require
 esp transport from 212.188.183.71 to 212.112.186.174 spi 0x3f91b3c2 auth
 hmac-sha2-256 enc aes
 esp transport from 212.112.186.174 to 212.188.183.71 spi 0xa797ec1e auth
 hmac-sha2-256 enc aes
 bmr1.brh#
 
 bmr1.brh# pfctl -d
 pf disabled
 bmr1.brh# tcpdump -n -p -i vlan301 host 212.112.186.174 
 [1] 2099
 bmr1.brh# tcpdump: listening on vlan301, link-type EN10MB
 bmr1.brh# tcpdump -n -p -i enc0 
 [2] 23922
 bmr1.brh# tcpdump: listening on enc0, link-type ENC
 bmr1.brh#
 
 bmr1.jfa# tcpdump -n -p -i bge0 host 212.188.183.71 
 [1] 443
 bmr1.jfa# tcpdump: listening on bge0, link-type EN10MB
 bmr1.jfa# tcpdump -n -p -i enc0 
 [2] 16714
 bmr1.jfa# tcpdump: listening on enc0, link-type ENC
 bmr1.jfa#
 
 
 bmr1.jfa# ping 212.188.183.71
 PING 212.188.183.71 (212.188.183.71): 56 data bytes
 11:21:48.081933 (authentic,confidential): SPI 0x007e7833: 212.112.186.174 
 212.188.183.71: icmp: echo request
 11:21:48.081969 esp 212.112.186.174  212.188.183.71 spi 0x007e7833 seq 15
 len 116
 11:21:49.085937 (authentic,confidential): SPI 0x007e7833: 212.112.186.174 
 212.188.183.71: icmp: echo request
 11:21:49.085974 esp 212.112.186.174  212.188.183.71 spi 0x007e7833 seq 16
 len 116
 11:21:50.095970 (authentic,confidential): SPI 0x007e7833: 212.112.186.174 
 212.188.183.71: icmp: echo request
 11:21:50.096006 esp 212.112.186.174  212.188.183.71 spi 0x007e7833 seq 17
 len 116
 11:21:51.106010 (authentic,confidential): SPI 0x007e7833: 212.112.186.174 
 212.188.183.71: icmp: echo request
 11:21:51.106045 esp 212.112.186.174  212.188.183.71 spi 0x007e7833 seq 18
 len 116
 
 bmr1.brh# 10:21:48.102134 esp 212.112.186.174  212.188.183.71 spi
 0x007e7833 seq 15 len 116
 10:21:49.106079 esp 212.112.186.174  212.188.183.71 spi 0x007e7833 seq 16
 len 116
 10:21:50.116146 esp 212.112.186.174  212.188.183.71 spi 0x007e7833 seq 17
 len 116
 10:21:51.126213 esp 212.112.186.174  212.188.183.71 spi 0x007e7833 seq 18
 len 116
 
 
 
 bmr1.jfa# grep 212.188.183.71 /etc/ipsec.conf
 ike esp transport from 212.112.186.174 to 212.188.183.71
 
 bmr1.brh# grep 212.112.186.174 /etc/ipsec.conf
 ike esp transport from 212.188.183.71 to 212.112.186.174



Re: kern.maxclusters: 6144 - ?

2010-03-01 Thread Pete Vickers
On 26. feb. 2010, at 11.58, Claudio Jeker wrote:

 On Fri, Feb 26, 2010 at 11:30:30AM +0100, Pete Vickers wrote:
 On 26. feb. 2010, at 03.01, Aaron Mason wrote:

 On Thu, Feb 25, 2010 at 10:04 AM, Pete Vickers p...@systemnet.no wrote:
 Hi,

 A proxy (squid) server running i368/4.6RELEASE with around 800 users,
what
 would be a reasonable value to increase  kern.maxclusters too, to cure
this
 :


 r...@proxy-s ~ grep mcl   /var/log/messages
 Dec 10 10:13:43 proxy-s /bsd: WARNING: mclpools limit reached; increase
 kern.maxclusters
 Dec 10 11:06:07 proxy-s /bsd: WARNING: mclpools limit reached; increase
 kern.maxclusters
 Dec 15 13:41:48 proxy-s /bsd: WARNING: mclpools limit reached; increase
 kern.maxclusters


 r...@proxy-s ~ sysctl kern.maxclusters
 kern.maxclusters=6144


 r...@proxy-s ~ netstat -m
 4098 mbufs in use:
   1131 mbufs allocated to data
   2962 mbufs allocated to packet headers
   5 mbufs allocated to socket names and addresses
 1084/6152/6144 mbuf 2048 byte clusters in use (current/peak/max)
 0/8/6144 mbuf 4096 byte clusters in use (current/peak/max)
 0/8/6144 mbuf 8192 byte clusters in use (current/peak/max)
 0/8/6144 mbuf 9216 byte clusters in use (current/peak/max)
 0/8/6144 mbuf 12288 byte clusters in use (current/peak/max)
 0/8/6144 mbuf 16384 byte clusters in use (current/peak/max)
 0/8/6144 mbuf 65536 byte clusters in use (current/peak/max)
 14176 Kbytes allocated to network (22% in use)
 0 requests for memory denied
 0 requests for memory delayed
 0 calls to protocol drain routines


 something like kern.maxclusters=1 or ?



 /Pete



 Only you can answer that, Pete.

 Try increasing it gradually until the errors go away.  And if the
 error returns, increase it again.  If it makes your system unstable,
 lower it until it returns to stability.  Increments (and decrements,
 if necessary) of 256 would probably be wise.

 Getting the right balance with any system is all about trial and error
 - trying different things until things are running smoothly - or
 acceptably so in some situations.  It's also about the balance between
 workability and stability.  Sometimes you just can't have your cake
 and eat it too - stability must be the priority.

 My $0.02 there.

 --
 Aaron Mason - Programmer, open source addict
 I've taken my software vows - for beta or for worse


 Hi,


 Indeed, the only problem is that if it's too low, then the system hangs.

 I guess only the network hangs. Since there is no clusters available to be
 used by drivers or other sockets. Normaly the system should not hangup
 itself because of that.

 Presumably if it's too high, then the 'system instability' manifests
itself
 has hanging too, so it's tricky to tell which way to go, once you deviate
from
 the norm ...


 Yes, if set too high you can run out the kernel of memory (physical or
 virtual) which is normaly causing a panic or freze.

 Anyway for the archives I'm trying 8192 currently, hopefully that will
reduce
 the crashes...


 6016 mbufs in use:
2151 mbufs allocated to data
3860 mbufs allocated to packet headers
5 mbufs allocated to socket names and addresses
 1979/5664/8192 mbuf 2048 byte clusters in use (current/peak/max)
 0/8/8192 mbuf 4096 byte clusters in use (current/peak/max)
 0/8/8192 mbuf 8192 byte clusters in use (current/peak/max)
 0/8/8192 mbuf 9216 byte clusters in use (current/peak/max)
 0/8/8192 mbuf 12288 byte clusters in use (current/peak/max)
 0/8/8192 mbuf 16384 byte clusters in use (current/peak/max)
 0/8/8192 mbuf 65536 byte clusters in use (current/peak/max)
 14048 Kbytes allocated to network (38% in use)


 Your allocationg a max of 8192 2k buffers or 4096 4k pages or 16MB of
 memory. On a modern system with  1GB of memory everything below 64MB or
 128k clusters should work if you don't fiddle with other knobs that rob
 all memory from the kernel.

 --
 :wq Claudio



okay, sounds reasonable. I've also 'fiddled with other knobs' too, so I hope
my kern.maxclusters at 8192 should not cause exhaustion conjunction with:


net.inet.ip.ifq.maxlen=512
net.inet.tcp.recvspace=262144
net.inet.tcp.sendspace=262144
kern.maxfiles=8192
kern.maxclusters=8192


BTW, when the system runs out of (these?) resources, it sometimes prevents SSH
access or squid use, but still keeps a CARP peering alive, preventing failover
to it's backup partner, which is somewhat frustrating (I know I could script
around this).  On other occasions, it drops into ddb , which at least allows
the CARP backup to take over duties. (I know I should file a bug report for
this)



/Pete



Re: FWIW Current snapshot Apache/PHP buggy

2010-03-01 Thread Stuart Henderson
On 2010/03/01 03:48, Duncan Patton a Campbell wrote:
 On Sun, 28 Feb 2010 15:01:20 + (UTC)
 Stuart Henderson s...@spacehopper.org wrote:
 
  On 2010-02-27, Duncan Patton a Campbell campb...@neotext.ca wrote:
   On Thu, 25 Feb 2010 08:58:30 -0500
   Dan Harnett dan...@harnett.name wrote:
  
   On Thu, Feb 25, 2010 at 03:30:47AM -0700, Duncan Patton a Campbell wrote:
I've just installed a server using current and have found that 
there are problems with session_destroy(); such that is just 
does not work.  

The Apache is the installed (1.3) version and PHP is from 
packages.

I have tested the same software and setup on a 4.5 Release 
(no patches) and there are no problems with sessions.  
   
   
   Can you provide any more detail?  session_destroy() appears to work fine
   with the i386 snap dated 2/23/2010 and latest php5-core snapshot
   package.
   
  
   I mebbe spoke to soon to be conclusive... as of now I am still looking
   under rocks... the problem exhibits on a clean 4.5-Release install but
   not on my (semi stock) 4.5 development box.
  
  sessions were broken in PHP in 4.5 release, you need to compile
  from -stable ports (or move to -current after the next package
  snapshot for your arch has been built).
  
 
 How wide is this problem?  I started out with a 4.6 current, which didn't 
 work,
 then 4.5 release... sessions are a fairly important php feature.  What has
 me bugged here is that I have a 4.5 system that works fine, but it is not
 just release, and has had apache2.2 installed on it (my devsys...) and 
 runable.

oh hmm, I was confused between releases, 4.6 had broken php, not 4.5.
(search the list archives for php segfault for more details).



Re: kern.maxclusters: 6144 - ?

2010-03-01 Thread Otto Moerbeek
On Mon, Mar 01, 2010 at 12:15:39PM +0100, Pete Vickers wrote:

 On 26. feb. 2010, at 11.58, Claudio Jeker wrote:
 
  On Fri, Feb 26, 2010 at 11:30:30AM +0100, Pete Vickers wrote:
  On 26. feb. 2010, at 03.01, Aaron Mason wrote:
 
  On Thu, Feb 25, 2010 at 10:04 AM, Pete Vickers p...@systemnet.no wrote:
  Hi,
 
  A proxy (squid) server running i368/4.6RELEASE with around 800 users,
 what
  would be a reasonable value to increase  kern.maxclusters too, to cure
 this
  :
 
 
  r...@proxy-s ~ grep mcl   /var/log/messages
  Dec 10 10:13:43 proxy-s /bsd: WARNING: mclpools limit reached; increase
  kern.maxclusters
  Dec 10 11:06:07 proxy-s /bsd: WARNING: mclpools limit reached; increase
  kern.maxclusters
  Dec 15 13:41:48 proxy-s /bsd: WARNING: mclpools limit reached; increase
  kern.maxclusters
 
 
  r...@proxy-s ~ sysctl kern.maxclusters
  kern.maxclusters=6144
 
 
  r...@proxy-s ~ netstat -m
  4098 mbufs in use:
1131 mbufs allocated to data
2962 mbufs allocated to packet headers
5 mbufs allocated to socket names and addresses
  1084/6152/6144 mbuf 2048 byte clusters in use (current/peak/max)
  0/8/6144 mbuf 4096 byte clusters in use (current/peak/max)
  0/8/6144 mbuf 8192 byte clusters in use (current/peak/max)
  0/8/6144 mbuf 9216 byte clusters in use (current/peak/max)
  0/8/6144 mbuf 12288 byte clusters in use (current/peak/max)
  0/8/6144 mbuf 16384 byte clusters in use (current/peak/max)
  0/8/6144 mbuf 65536 byte clusters in use (current/peak/max)
  14176 Kbytes allocated to network (22% in use)
  0 requests for memory denied
  0 requests for memory delayed
  0 calls to protocol drain routines
 
 
  something like kern.maxclusters=1 or ?
 
 
 
  /Pete
 
 
 
  Only you can answer that, Pete.
 
  Try increasing it gradually until the errors go away.  And if the
  error returns, increase it again.  If it makes your system unstable,
  lower it until it returns to stability.  Increments (and decrements,
  if necessary) of 256 would probably be wise.
 
  Getting the right balance with any system is all about trial and error
  - trying different things until things are running smoothly - or
  acceptably so in some situations.  It's also about the balance between
  workability and stability.  Sometimes you just can't have your cake
  and eat it too - stability must be the priority.
 
  My $0.02 there.
 
  --
  Aaron Mason - Programmer, open source addict
  I've taken my software vows - for beta or for worse
 
 
  Hi,
 
 
  Indeed, the only problem is that if it's too low, then the system hangs.
 
  I guess only the network hangs. Since there is no clusters available to be
  used by drivers or other sockets. Normaly the system should not hangup
  itself because of that.
 
  Presumably if it's too high, then the 'system instability' manifests
 itself
  has hanging too, so it's tricky to tell which way to go, once you deviate
 from
  the norm ...
 
 
  Yes, if set too high you can run out the kernel of memory (physical or
  virtual) which is normaly causing a panic or freze.
 
  Anyway for the archives I'm trying 8192 currently, hopefully that will
 reduce
  the crashes...
 
 
  6016 mbufs in use:
 2151 mbufs allocated to data
 3860 mbufs allocated to packet headers
 5 mbufs allocated to socket names and addresses
  1979/5664/8192 mbuf 2048 byte clusters in use (current/peak/max)
  0/8/8192 mbuf 4096 byte clusters in use (current/peak/max)
  0/8/8192 mbuf 8192 byte clusters in use (current/peak/max)
  0/8/8192 mbuf 9216 byte clusters in use (current/peak/max)
  0/8/8192 mbuf 12288 byte clusters in use (current/peak/max)
  0/8/8192 mbuf 16384 byte clusters in use (current/peak/max)
  0/8/8192 mbuf 65536 byte clusters in use (current/peak/max)
  14048 Kbytes allocated to network (38% in use)
 
 
  Your allocationg a max of 8192 2k buffers or 4096 4k pages or 16MB of
  memory. On a modern system with  1GB of memory everything below 64MB or
  128k clusters should work if you don't fiddle with other knobs that rob
  all memory from the kernel.
 
  --
  :wq Claudio
 
 
 
 okay, sounds reasonable. I've also 'fiddled with other knobs' too, so I hope
 my kern.maxclusters at 8192 should not cause exhaustion conjunction with:
 
 
 net.inet.ip.ifq.maxlen=512
 net.inet.tcp.recvspace=262144
 net.inet.tcp.sendspace=262144
 kern.maxfiles=8192
 kern.maxclusters=8192
 
 
 BTW, when the system runs out of (these?) resources, it sometimes prevents SSH
 access or squid use, but still keeps a CARP peering alive, preventing failover
 to it's backup partner, which is somewhat frustrating (I know I could script
 around this).  On other occasions, it drops into ddb , which at least allows
 the CARP backup to take over duties. (I know I should file a bug report for
 this)
 
 
 
 /Pete

How many tcp connections are you serving? Your high values of
net.inet.tcp.recvspace and net.inet.tcp.sendspace will eat a lot of
memory resources: about half an M per connection. It could very welll

Re: Average time for compiling userland? == benchmarking CPU/IO? best result for database hosting?

2010-03-01 Thread Marc Espie
On Sun, Feb 28, 2010 at 11:02:37AM -0600, Andres Salazar wrote:
 Hello,
 
 Iam confused on the different result I get when I compile userland on
 any machine better then a Dual Core 2.5Ghz 2GB RAM 160GB 7200 SATA /
 SATA ii
 
You're not even telling us how you compile userland. How should we help ?
is your obj in ram ? your tmp in ram ? are you building with make build ?
make -j4 build ? something else ?



Re: IPsec 4.6 to snapshot failing

2010-03-01 Thread Stuart Henderson
On 2010-03-01, Tony Sarendal t...@polarcap.org wrote:
 Good morning misc,

 I upgraded two devices from i386-4.6 to i386-snapshot-feb28.
 After the upgrade snapshot boxes are unable to communicate with the 4.6
 devices
 when going through ipsec. snapshot-snapshot works fine.

 Everything looks ok except that nothing shows up on enc0 when doing
 4.6--snapshot.
 Deleting the SA's restores connectiviy, unencrypted of course.
 Is this a known issue ?

yes, there was a bug with hmac-sha2 which was causing interop problems
with correct IPsec implementations and needed fixing, unfortunately the
fix breaks backwards compatibility.

you'll need to switch to e.g. hmac-sha until the 4.6 box can be upgraded.



Re: IPsec 4.6 to snapshot failing

2010-03-01 Thread Tony Sarendal
On Mon, Mar 1, 2010 at 12:54 PM, Stuart Henderson s...@spacehopper.orgwrote:

 On 2010-03-01, Tony Sarendal t...@polarcap.org wrote:
  Good morning misc,
 
  I upgraded two devices from i386-4.6 to i386-snapshot-feb28.
  After the upgrade snapshot boxes are unable to communicate with the 4.6
  devices
  when going through ipsec. snapshot-snapshot works fine.
 
  Everything looks ok except that nothing shows up on enc0 when doing
  4.6--snapshot.
  Deleting the SA's restores connectiviy, unencrypted of course.
  Is this a known issue ?

 yes, there was a bug with hmac-sha2 which was causing interop problems
 with correct IPsec implementations and needed fixing, unfortunately the
 fix breaks backwards compatibility.

 you'll need to switch to e.g. hmac-sha until the 4.6 box can be upgraded.


Thanks to everyone for the quick and correct response, much appreciated.

/T, with a tad of ring rust.



Re: selling bsd in cd for profit??

2010-03-01 Thread nealHogan
On Fri, Feb 26, 2010 at 09:37:38PM -0500, STeve Andre' wrote:
 On Friday 26 February 2010 21:25:51 Richard Toohey wrote:
  On 27/02/2010, at 3:04 PM, Joel Wiramu Pauling wrote:
   Let me clear on this.
  
   Yes you can.
  
   Follow the BSD licence terms (none of which say anything about for
   profit) and you are fine.
  
   There is absolutely zero legal reason you cannot put together a cd of
   OpenBSD and sell it. The official CD has some further licencing
   restrictions, so if you were to copy it verbatim it would constitute a
   breach of these terms.
  
   But if you create your own and sell it. No problem.
 
  No problem?  Maybe not (I don't know) a legal/licence problem, but you
  are biting the hand that feeds / killing the golden goose.
 
  http://www.openbsd.org/
 
  The project pays for the development environment and developer events by
  selling CDs ... These finances ensure that OpenBSD will continue to exist
  ...
 
  But I sense another troll ...
 
 I don't.  A lot of people are genuinely confused  curious about this BSD
 thing, the operating system and license.  The number of times I've explained
 (or tried to) the BSD license vs. GPL numbers in the dozens now.
 
 People here are far too quick to label questions like this as trolling.  
 Sure, 
 there are people who like to stir the pot up, but there are a lot more
 clueless people out there--clueless meaning not understanding, where
 we all were, at one point.


FWIW - This person posted the same question to the freebsd-questions
list a couple of days ago. It was handled there in basically the same
way it is being handled here. There person never responded (to that
list) either. So, his/her motivations (other than financial) were
never revealed (too the list).

I have yet to see the OP ask this question on the netBSD list. I suspect
it is coming.

-Neal



Re: kern.maxclusters: 6144 - ?

2010-03-01 Thread Henning Brauer
* Pete Vickers p...@systemnet.no [2010-03-01 12:28]:
 okay, sounds reasonable. I've also 'fiddled with other knobs' too, so I hope
 my kern.maxclusters at 8192 should not cause exhaustion conjunction with:
 
 
 net.inet.ip.ifq.maxlen=512
 net.inet.tcp.recvspace=262144
 net.inet.tcp.sendspace=262144
 kern.maxfiles=8192
 kern.maxclusters=8192
 
 
 BTW, when the system runs out of (these?) resources, it sometimes prevents SSH
 access or squid use, but still keeps a CARP peering alive, preventing failover
 to it's backup partner, which is somewhat frustrating (I know I could script
 around this).

this is perfectly sane and the intended bahaviour. no mbufs / clusters
available - packet dropped.

 On other occasions, it drops into ddb , which at least allows
 the CARP backup to take over duties. (I know I should file a bug report for
 this)

yes, in an idea world that doesn't happen and the system copes with
the ressource shortage.

-- 
Henning Brauer, h...@bsws.de, henn...@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting



Re: selling bsd in cd for profit??

2010-03-01 Thread Henning Brauer
* Peter N. M. Hansteen pe...@bsdly.net [2010-02-28 13:37]:
 Henning Brauer lists-open...@bsws.de writes:
 
  except that the openbsd cd layout is not BSD licensed. you are not
  allowed to burn the iso and sell that.
 
 It's the layout of the official CD sets that's explicitly not BSD
 licensed, isn't it?  
 
 The official CD sets contain a collection of packages plus matching
 archives of complete ports and source trees as well as the files
 needed for a basic install, while the installNN.iso you can download
 from the mirrors is just the install files for that platform.

let me put it that way (I don't think anyone ever really thought about
burning  selling the isos): the isos carry a copyright statement, but
no explicit license. thus, no permit to sell them is given.

-- 
Henning Brauer, h...@bsws.de, henn...@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting



Re: kern.maxclusters: 6144 - ?

2010-03-01 Thread Claudio Jeker
On Mon, Mar 01, 2010 at 02:48:50PM +0100, Henning Brauer wrote:
 * Pete Vickers p...@systemnet.no [2010-03-01 12:28]:
  okay, sounds reasonable. I've also 'fiddled with other knobs' too, so I hope
  my kern.maxclusters at 8192 should not cause exhaustion conjunction with:
  
  
  net.inet.ip.ifq.maxlen=512
  net.inet.tcp.recvspace=262144
  net.inet.tcp.sendspace=262144
  kern.maxfiles=8192
  kern.maxclusters=8192
  
  
  BTW, when the system runs out of (these?) resources, it sometimes prevents 
  SSH
  access or squid use, but still keeps a CARP peering alive, preventing 
  failover
  to it's backup partner, which is somewhat frustrating (I know I could script
  around this).
 
 this is perfectly sane and the intended bahaviour. no mbufs / clusters
 available - packet dropped.
 

Actually carp(4) still works since it sends small packets which fit in an
mbuf. And we have far enough mbufs available. I'm not sure if it is carp's
duty to check if a resource shortage causes a subsytem to fail.

  On other occasions, it drops into ddb , which at least allows
  the CARP backup to take over duties. (I know I should file a bug report for
  this)
 
 yes, in an idea world that doesn't happen and the system copes with
 the ressource shortage.
 

Sometimes coping with an allocation failure is very hard. On the other
hand the network stack should not panic or crash the system on resource
shortage.

-- 
:wq Claudio



Re: selling bsd in cd for profit??

2010-03-01 Thread Peter N. M. Hansteen
Henning Brauer lists-open...@bsws.de writes:

 let me put it that way (I don't think anyone ever really thought about
 burning  selling the isos): the isos carry a copyright statement, but
 no explicit license. thus, no permit to sell them is given.

I do believe you're right.  Makes it incrementally more work for the
OP to do what he wanted, but not that I care.  My recommendation for
anyone who wants to sell OpenBSD CDs for profit remains to set up as a
reseller.

- P
-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
Remember to set the evil bit on all malicious network traffic
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.



Sun Fire 880 phantom disks

2010-03-01 Thread Pete Vickers
Hei,


Upon booting either 4.6-RELEASE or 4.7-BETA on my SunFire 880 causes the
kernel it to 'see' twice the correct number of physical disk. Further if I
install the o/s  using bsd.rd on to sd0, then upon reboot the kernel can't
find the root disk. However if I install on sd12 then booting etc is fine.

the machine has physically 12 disks (36GB FC-AL), which appear to be
duplicated as sd0-sd11 and sd12-23.


r...@sf880 ~sysctl hw.disknames
hw.disknames=cd0,sd0,sd1,sd2,sd3,sd4,sd5,sd6,sd7,sd8,sd9,sd10,sd11,sd12,sd13,
sd14,sd15,sd16,sd17,sd18,sd19,sd20,sd21,sd22,sd23



compare disk serial numbers :

r...@sf880 ~bioctl  sd0
sd0: SEAGATE, ST336605FSUN36G, 0438, serial 3FP0N1K67214DE8J
r...@sf880 ~bioctl  sd1
sd1: SEAGATE, ST336605FSUN36G, 0438, serial 3FP0JHHX7214DDNK

r...@sf880 ~bioctl  sd12
sd12: SEAGATE, ST336605FSUN36G, 0438, serial 3FP0N1K67214DE8J
r...@sf880 ~bioctl  sd13
sd13: SEAGATE, ST336605FSUN36G, 0438, serial 3FP0JHHX7214DDNK





full dmesg:


console is /p...@9,70/e...@1/ser...@1,40:a
Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California.  All rights reserved.
Copyright (c) 1995-2009 OpenBSD. All rights reserved.  http://www.OpenBSD.org

OpenBSD 4.6 (GENERIC.MP) #53: Thu Jul  9 21:50:16 MDT 2009
dera...@sparc64.openbsd.org:/usr/src/sys/arch/sparc64/compile/GENERIC.MP
real mem = 4294967296 (4096MB)
avail mem = 4140875776 (3949MB)
mainbus0 at root: Sun Fire 880
cpu0 at mainbus0: SUNW,UltraSPARC-III (rev 5.4) @ 750 MHz
cpu0: physical 32K instruction (32 b/l), 64K data (32 b/l), 8192K external
(512 b/l)
cpu1 at mainbus0: SUNW,UltraSPARC-III (rev 5.4) @ 750 MHz
cpu1: physical 32K instruction (32 b/l), 64K data (32 b/l), 8192K external
(512 b/l)
memory-controller at mainbus0 not configured
memory-controller at mainbus0 not configured
schizo0 at mainbus0: Schizo, version 4, ign 200, bus B 0 to 1
schizo0: dvma map c000-
pci0 at schizo0
siop0 at pci0 dev 1 function 0 Symbios Logic 53c875 rev 0x04: ivec 0x21c,
using 4K of on-board RAM
scsibus0 at siop0: 16 targets, initiator 7
cd0 at scsibus0 targ 6 lun 0: TOSHIBA, DVD-ROM SD-M1401, 1009 SCSI2 5/cdrom
removable
ppb0 at pci0 dev 5 function 0 DEC 21154 PCI-PCI rev 0x05
pci1 at ppb0 bus 1
isp0 at pci1 dev 4 function 0 QLogic ISP2200 rev 0x05: ivec 0x218
isp0: Board Type 2200, Chip Revision 0x5, loaded F/W Revision 2.2.6
scsibus1 at isp0: 512 targets
sd0 at scsibus1 targ 0 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3 0/direct
fixed
sd0: 34732MB, 512 bytes/sec, 71132959 sec total
sd1 at scsibus1 targ 1 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3 0/direct
fixed
sd1: 34732MB, 512 bytes/sec, 71132959 sec total
sd2 at scsibus1 targ 2 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3 0/direct
fixed
sd2: 34732MB, 512 bytes/sec, 71132959 sec total
sd3 at scsibus1 targ 3 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3 0/direct
fixed
sd3: 34732MB, 512 bytes/sec, 71132959 sec total
sd4 at scsibus1 targ 4 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3 0/direct
fixed
sd4: 34732MB, 512 bytes/sec, 71132959 sec total
sd5 at scsibus1 targ 5 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3 0/direct
fixed
sd5: 34732MB, 512 bytes/sec, 71132959 sec total
ses0 at scsibus1 targ 6 lun 0: SUNW, SUNWGS INT FCBPL, 9222 SCSI3
13/enclosure services fixed
sd6 at scsibus1 targ 7 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3 0/direct
fixed
sd6: 34732MB, 512 bytes/sec, 71132959 sec total
sd7 at scsibus1 targ 8 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3 0/direct
fixed
sd7: 34732MB, 512 bytes/sec, 71132959 sec total
sd8 at scsibus1 targ 9 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3 0/direct
fixed
sd8: 34732MB, 512 bytes/sec, 71132959 sec total
sd9 at scsibus1 targ 10 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3 0/direct
fixed
sd9: 34732MB, 512 bytes/sec, 71132959 sec total
sd10 at scsibus1 targ 11 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
0/direct fixed
sd10: 34732MB, 512 bytes/sec, 71132959 sec total
sd11 at scsibus1 targ 12 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
0/direct fixed
sd11: 34732MB, 512 bytes/sec, 71132959 sec total
isp1 at pci1 dev 5 function 0 QLogic ISP2200 rev 0x05: ivec 0x219
isp1: Board Type 2200, Chip Revision 0x5, loaded F/W Revision 2.2.6
scsibus2 at isp1: 512 targets
schizo1 at mainbus0: Schizo, version 4, ign 200, bus A 0 to 0
schizo1: dvma map c000-
pci2 at schizo1
gem0 at pci2 dev 1 function 0 Sun GEM rev 0x01: ivec 0x200, address
00:03:ba:08:de:01
gentbi0 at gem0 phy 0: Generic ten-bit interface, rev. 0
isp2 at pci2 dev 2 function 0 QLogic ISP2200 rev 0x05: ivec 0x204
isp2: Board Type 2200, Chip Revision 0x5, loaded F/W Revision 2.2.6
scsibus3 at isp2: 512 targets
sd12 at scsibus3 targ 0 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3 0/direct
fixed
sd12: 34732MB, 512 bytes/sec, 71132959 sec total
sd13 at scsibus3 targ 1 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3 0/direct
fixed
sd13: 34732MB, 512 bytes/sec, 71132959 sec total
sd14 at scsibus3 targ 2 lun 0: SEAGATE, ST336605FSUN36G, 0438 

Re: OpenBGPD Multicast SAFI Support?

2010-03-01 Thread Michael H Lambert
On 24 Feb 2010, at 17:24, Claudio Jeker wrote:

 On Wed, Feb 24, 2010 at 04:19:33PM -0500, Michael H Lambert wrote:
 If I'm reading the manpages and latest CVS correctly, OpenBGPD does not
yet
 support SAFI_MULTICAST for either IPv4 or IPv6, although some of the hooks
 appear to be present.  Does anyone have a good feel for how much effort
would
 be required to add this functionality (or just where changes need to be
made)?
 It looks to be the big sticking point in moving from quagga to OpenBGPD.


 Why are you using MBGP? Your the first requesting this. Multicast routing
 is totaly different from unicast routing. It will need fairly massive
 changes.

I should add that we are just interested in MBGP when running as a route
server.

Michael



Re: Average time for compiling userland? == benchmarking CPU/IO? best result for database hosting?

2010-03-01 Thread Andres Salazar
Hello,

I dont have obj on ram, or /tmp . Iam using make build.

Thank you

Andres

On Mon, Mar 1, 2010 at 5:48 AM, Marc Espie es...@nerim.net wrote:
 On Sun, Feb 28, 2010 at 11:02:37AM -0600, Andres Salazar wrote:
 Hello,

 Iam confused on the different result I get when I compile userland on
 any machine better then a Dual Core 2.5Ghz 2GB RAM 160GB 7200 SATA /
 SATA ii

 You're not even telling us how you compile userland. How should we help ?
 is your obj in ram ? your tmp in ram ? are you building with make build ?
 make -j4 build ? something else ?



Re: Average time for compiling userland? == benchmarking CPU/IO? best result for database hosting?

2010-03-01 Thread Marc Espie
On Mon, Mar 01, 2010 at 09:27:36AM -0600, Andres Salazar wrote:
 Hello,
 
 I dont have obj on ram, or /tmp . Iam using make build.
 
 Thank you
 
 Andres
 
 On Mon, Mar 1, 2010 at 5:48 AM, Marc Espie es...@nerim.net wrote:
  On Sun, Feb 28, 2010 at 11:02:37AM -0600, Andres Salazar wrote:
  Hello,
 
  Iam confused on the different result I get when I compile userland on
  any machine better then a Dual Core 2.5Ghz 2GB RAM 160GB 7200 SATA /
  SATA ii
 
  You're not even telling us how you compile userland. How should we help ?
  is your obj in ram ? your tmp in ram ? are you building with make build ?
  make -j4 build ? something else ?

Well, /tmp in RAM is going to make a big difference.

And src/ is mostly parallel-clean. There's an unlikely race in perl,
but otherwise make -jN build is going to go ~N times as fast on an n-core SMP
system.



Re: kern.maxclusters: 6144 - ?

2010-03-01 Thread Henning Brauer
* Claudio Jeker cje...@diehard.n-r-g.com [2010-03-01 15:32]:
 On Mon, Mar 01, 2010 at 02:48:50PM +0100, Henning Brauer wrote:
  * Pete Vickers p...@systemnet.no [2010-03-01 12:28]:
   okay, sounds reasonable. I've also 'fiddled with other knobs' too, so I 
   hope
   my kern.maxclusters at 8192 should not cause exhaustion conjunction with:
   
   
   net.inet.ip.ifq.maxlen=512
   net.inet.tcp.recvspace=262144
   net.inet.tcp.sendspace=262144
   kern.maxfiles=8192
   kern.maxclusters=8192
   
   
   BTW, when the system runs out of (these?) resources, it sometimes 
   prevents SSH
   access or squid use, but still keeps a CARP peering alive, preventing 
   failover
   to it's backup partner, which is somewhat frustrating (I know I could 
   script
   around this).
  
  this is perfectly sane and the intended bahaviour. no mbufs / clusters
  available - packet dropped.
  
 
 Actually carp(4) still works since it sends small packets which fit in an
 mbuf. And we have far enough mbufs available. I'm not sure if it is carp's
 duty to check if a resource shortage causes a subsytem to fail.

of course.

it is not carp's duty. if we fail over on cluster shortage the other
node will be short of clusters too - bouncy bouncy. assuming we don't
leak of course.

   On other occasions, it drops into ddb , which at least allows
   the CARP backup to take over duties. (I know I should file a bug report 
   for
   this)
  yes, in an idea world that doesn't happen and the system copes with
  the ressource shortage.
 Sometimes coping with an allocation failure is very hard. On the other
 hand the network stack should not panic or crash the system on resource
 shortage.

err, yes? that's exactly what i was saying.

-- 
Henning Brauer, h...@bsws.de, henn...@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting



Cascading pf firewalls with both nat and no nat

2010-03-01 Thread tsg12345
Hi list,

I have a working setup with 2 cascaded firewalls (OpenBSD 4.5 on my
external firewall, 4.6 on my internal firewall).

NAT is done on the external interface of the internal firewall (which
is connected to the external firewall).

Now I want to exclude one of the workstations behind the internal
firewall from NAT. This workstation should be allowed to connect to
one server only (which is connected to another interface of the
external firewall).

Intended setup is as follows:

[Indentation for better readability]

Workstation
  10.1.2.2/24
  gateway is 10.1.2.1

Internal firewall
  10.1.2.1/24 xl0 (connected to workstation)
  10.1.0.2/24 xl1 (connected to external firewall)
  gateway is 10.1.0.1

External firewall
  10.1.0.1/16 re0 (connected to internal firewall)
  10.0.2.1/24 re1 (connected to server)

Server
  10.0.2.2/24
  gateway is 10.0.2.1

NAT rules on internal firewall
  no nat on xl1 from 10.1.2.2 to any
  nat on xl1 from any to any - 10.1.0.2

Filtering rules on internal firewall

  # general rules
  block all
  antispoof quick for { lo xl0 xl1 }

  # xl0 rules
  # no quick rules before the following rule
  pass in on xl0 from 10.1.2.2 to 10.0.2.1
  # no block rules after the previous rule

  # snip - other interfaces

  # xl1 rules
  # no quick rules before the following rule
  pass out on xl1 from 10.1.2.2 to 10.0.2.1
  # no block rules after the previous rule

Filtering rules on external firewall

  # general rules
  block all
  antispoof quick for { lo re0 re1 }

  # re0 rules
  # no quick rules before the following rule
  pass in on re0 from 10.1.2.2 to 10.0.2.1
  # no block rules after the previous rule

  # snip - other interfaces

  # re1 rules
  # no quick rules before the following rule
  pass out on re1 from 10.1.2.2 to 10.0.2.1
  # no block rules after the previous rule

This does not seem to work, however, as the workstation
cannot connect to the server (it was able to connect
with NAT).

What am I doing wrong? Any hints would be appreciated.
Thank you very much in advance.
-- 
GRATIS f|r alle GMX-Mitglieder: Die maxdome Movie-FLAT!
Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01



Re: Sun Fire 880 phantom disks

2010-03-01 Thread Kenneth R Westerback
On Mon, Mar 01, 2010 at 03:56:22PM +0100, Pete Vickers wrote:
 Hei,
 
 
 Upon booting either 4.6-RELEASE or 4.7-BETA on my SunFire 880 causes the
 kernel it to 'see' twice the correct number of physical disk. Further if I
 install the o/s  using bsd.rd on to sd0, then upon reboot the kernel can't
 find the root disk. However if I install on sd12 then booting etc is fine.
 
 the machine has physically 12 disks (36GB FC-AL), which appear to be
 duplicated as sd0-sd11 and sd12-23.

Do you have the disk in a loop that includes both ports on the 2200? That
could explain why the disks are seen twice. And I believe only one WWN
is saved from the boot so if it sees the same disk on the other port
it may be lost.

 Ken

 
 
 r...@sf880 ~sysctl hw.disknames
 hw.disknames=cd0,sd0,sd1,sd2,sd3,sd4,sd5,sd6,sd7,sd8,sd9,sd10,sd11,sd12,sd13,
 sd14,sd15,sd16,sd17,sd18,sd19,sd20,sd21,sd22,sd23
 
 
 
 compare disk serial numbers :
 
 r...@sf880 ~bioctl  sd0
 sd0: SEAGATE, ST336605FSUN36G, 0438, serial 3FP0N1K67214DE8J
 r...@sf880 ~bioctl  sd1
 sd1: SEAGATE, ST336605FSUN36G, 0438, serial 3FP0JHHX7214DDNK
 
 r...@sf880 ~bioctl  sd12
 sd12: SEAGATE, ST336605FSUN36G, 0438, serial 3FP0N1K67214DE8J
 r...@sf880 ~bioctl  sd13
 sd13: SEAGATE, ST336605FSUN36G, 0438, serial 3FP0JHHX7214DDNK
 
 
 
 
 
 full dmesg:
 
 
 console is /p...@9,70/e...@1/ser...@1,40:a
 Copyright (c) 1982, 1986, 1989, 1991, 1993
 The Regents of the University of California.  All rights reserved.
 Copyright (c) 1995-2009 OpenBSD. All rights reserved.  http://www.OpenBSD.org
 
 OpenBSD 4.6 (GENERIC.MP) #53: Thu Jul  9 21:50:16 MDT 2009
 dera...@sparc64.openbsd.org:/usr/src/sys/arch/sparc64/compile/GENERIC.MP
 real mem = 4294967296 (4096MB)
 avail mem = 4140875776 (3949MB)
 mainbus0 at root: Sun Fire 880
 cpu0 at mainbus0: SUNW,UltraSPARC-III (rev 5.4) @ 750 MHz
 cpu0: physical 32K instruction (32 b/l), 64K data (32 b/l), 8192K external
 (512 b/l)
 cpu1 at mainbus0: SUNW,UltraSPARC-III (rev 5.4) @ 750 MHz
 cpu1: physical 32K instruction (32 b/l), 64K data (32 b/l), 8192K external
 (512 b/l)
 memory-controller at mainbus0 not configured
 memory-controller at mainbus0 not configured
 schizo0 at mainbus0: Schizo, version 4, ign 200, bus B 0 to 1
 schizo0: dvma map c000-
 pci0 at schizo0
 siop0 at pci0 dev 1 function 0 Symbios Logic 53c875 rev 0x04: ivec 0x21c,
 using 4K of on-board RAM
 scsibus0 at siop0: 16 targets, initiator 7
 cd0 at scsibus0 targ 6 lun 0: TOSHIBA, DVD-ROM SD-M1401, 1009 SCSI2 5/cdrom
 removable
 ppb0 at pci0 dev 5 function 0 DEC 21154 PCI-PCI rev 0x05
 pci1 at ppb0 bus 1
 isp0 at pci1 dev 4 function 0 QLogic ISP2200 rev 0x05: ivec 0x218
 isp0: Board Type 2200, Chip Revision 0x5, loaded F/W Revision 2.2.6
 scsibus1 at isp0: 512 targets
 sd0 at scsibus1 targ 0 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3 0/direct
 fixed
 sd0: 34732MB, 512 bytes/sec, 71132959 sec total
 sd1 at scsibus1 targ 1 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3 0/direct
 fixed
 sd1: 34732MB, 512 bytes/sec, 71132959 sec total
 sd2 at scsibus1 targ 2 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3 0/direct
 fixed
 sd2: 34732MB, 512 bytes/sec, 71132959 sec total
 sd3 at scsibus1 targ 3 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3 0/direct
 fixed
 sd3: 34732MB, 512 bytes/sec, 71132959 sec total
 sd4 at scsibus1 targ 4 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3 0/direct
 fixed
 sd4: 34732MB, 512 bytes/sec, 71132959 sec total
 sd5 at scsibus1 targ 5 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3 0/direct
 fixed
 sd5: 34732MB, 512 bytes/sec, 71132959 sec total
 ses0 at scsibus1 targ 6 lun 0: SUNW, SUNWGS INT FCBPL, 9222 SCSI3
 13/enclosure services fixed
 sd6 at scsibus1 targ 7 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3 0/direct
 fixed
 sd6: 34732MB, 512 bytes/sec, 71132959 sec total
 sd7 at scsibus1 targ 8 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3 0/direct
 fixed
 sd7: 34732MB, 512 bytes/sec, 71132959 sec total
 sd8 at scsibus1 targ 9 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3 0/direct
 fixed
 sd8: 34732MB, 512 bytes/sec, 71132959 sec total
 sd9 at scsibus1 targ 10 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3 0/direct
 fixed
 sd9: 34732MB, 512 bytes/sec, 71132959 sec total
 sd10 at scsibus1 targ 11 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
 0/direct fixed
 sd10: 34732MB, 512 bytes/sec, 71132959 sec total
 sd11 at scsibus1 targ 12 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
 0/direct fixed
 sd11: 34732MB, 512 bytes/sec, 71132959 sec total
 isp1 at pci1 dev 5 function 0 QLogic ISP2200 rev 0x05: ivec 0x219
 isp1: Board Type 2200, Chip Revision 0x5, loaded F/W Revision 2.2.6
 scsibus2 at isp1: 512 targets
 schizo1 at mainbus0: Schizo, version 4, ign 200, bus A 0 to 0
 schizo1: dvma map c000-
 pci2 at schizo1
 gem0 at pci2 dev 1 function 0 Sun GEM rev 0x01: ivec 0x200, address
 00:03:ba:08:de:01
 gentbi0 at gem0 phy 0: Generic ten-bit interface, rev. 0
 isp2 at pci2 dev 2 function 0 QLogic ISP2200 rev 0x05: ivec 0x204
 isp2: 

Re: Sun Fire 880 phantom disks

2010-03-01 Thread philippe aubry
Hello,
In the openfirmware env you can save only one device to boot if I remember
correctly. If you want to have access to openfirmware you must set the var
autoboot or something like that to NO or check the combination of key
keyboard to sun web site. A printenv return all vars for your openfirmware.

If you have two device that can be bootable, it is not a real problem, the
path to boot device is taken from openfirmware.

The problem it is probably after the boot process where openbsd detect other
disk and found another disk with the same serial number and marked as
bootable and this disk is already use by the current boot process. It is
probably for that reason if you install on sd12 ( in fact sd0) that system
can boot crorrectly.

Sorry I repeat again but You must have only one path to access to the boot
device. You must modify your hardware setup or install a driver to manage
path access to the disk.

Phil

2010/3/1 Kenneth R Westerback kwesterb...@rogers.com

 On Mon, Mar 01, 2010 at 03:56:22PM +0100, Pete Vickers wrote:
  Hei,
 
 
  Upon booting either 4.6-RELEASE or 4.7-BETA on my SunFire 880 causes the
  kernel it to 'see' twice the correct number of physical disk. Further if
 I
  install the o/s  using bsd.rd on to sd0, then upon reboot the kernel
 can't
  find the root disk. However if I install on sd12 then booting etc is
 fine.
 
  the machine has physically 12 disks (36GB FC-AL), which appear to be
  duplicated as sd0-sd11 and sd12-23.

 Do you have the disk in a loop that includes both ports on the 2200? That
 could explain why the disks are seen twice. And I believe only one WWN
 is saved from the boot so if it sees the same disk on the other port
 it may be lost.

  Ken

 
 
  r...@sf880 ~sysctl hw.disknames
 
 hw.disknames=cd0,sd0,sd1,sd2,sd3,sd4,sd5,sd6,sd7,sd8,sd9,sd10,sd11,sd12,sd13,
  sd14,sd15,sd16,sd17,sd18,sd19,sd20,sd21,sd22,sd23
 
 
 
  compare disk serial numbers :
 
  r...@sf880 ~bioctl  sd0
  sd0: SEAGATE, ST336605FSUN36G, 0438, serial 3FP0N1K67214DE8J
  r...@sf880 ~bioctl  sd1
  sd1: SEAGATE, ST336605FSUN36G, 0438, serial 3FP0JHHX7214DDNK
 
  r...@sf880 ~bioctl  sd12
  sd12: SEAGATE, ST336605FSUN36G, 0438, serial 3FP0N1K67214DE8J
  r...@sf880 ~bioctl  sd13
  sd13: SEAGATE, ST336605FSUN36G, 0438, serial 3FP0JHHX7214DDNK
 
 
 
 
 
  full dmesg:
 
 
  console is /p...@9,70/e...@1/ser...@1,40:a
  Copyright (c) 1982, 1986, 1989, 1991, 1993
  The Regents of the University of California.  All rights
 reserved.
  Copyright (c) 1995-2009 OpenBSD. All rights reserved.
 http://www.OpenBSD.org
 
  OpenBSD 4.6 (GENERIC.MP) #53: Thu Jul  9 21:50:16 MDT 2009
  dera...@sparc64.openbsd.org:/usr/src/sys/arch/sparc64/compile/
 GENERIC.MP
  real mem = 4294967296 (4096MB)
  avail mem = 4140875776 (3949MB)
  mainbus0 at root: Sun Fire 880
  cpu0 at mainbus0: SUNW,UltraSPARC-III (rev 5.4) @ 750 MHz
  cpu0: physical 32K instruction (32 b/l), 64K data (32 b/l), 8192K
 external
  (512 b/l)
  cpu1 at mainbus0: SUNW,UltraSPARC-III (rev 5.4) @ 750 MHz
  cpu1: physical 32K instruction (32 b/l), 64K data (32 b/l), 8192K
 external
  (512 b/l)
  memory-controller at mainbus0 not configured
  memory-controller at mainbus0 not configured
  schizo0 at mainbus0: Schizo, version 4, ign 200, bus B 0 to 1
  schizo0: dvma map c000-
  pci0 at schizo0
  siop0 at pci0 dev 1 function 0 Symbios Logic 53c875 rev 0x04: ivec
 0x21c,
  using 4K of on-board RAM
  scsibus0 at siop0: 16 targets, initiator 7
  cd0 at scsibus0 targ 6 lun 0: TOSHIBA, DVD-ROM SD-M1401, 1009 SCSI2
 5/cdrom
  removable
  ppb0 at pci0 dev 5 function 0 DEC 21154 PCI-PCI rev 0x05
  pci1 at ppb0 bus 1
  isp0 at pci1 dev 4 function 0 QLogic ISP2200 rev 0x05: ivec 0x218
  isp0: Board Type 2200, Chip Revision 0x5, loaded F/W Revision 2.2.6
  scsibus1 at isp0: 512 targets
  sd0 at scsibus1 targ 0 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
 0/direct
  fixed
  sd0: 34732MB, 512 bytes/sec, 71132959 sec total
  sd1 at scsibus1 targ 1 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
 0/direct
  fixed
  sd1: 34732MB, 512 bytes/sec, 71132959 sec total
  sd2 at scsibus1 targ 2 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
 0/direct
  fixed
  sd2: 34732MB, 512 bytes/sec, 71132959 sec total
  sd3 at scsibus1 targ 3 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
 0/direct
  fixed
  sd3: 34732MB, 512 bytes/sec, 71132959 sec total
  sd4 at scsibus1 targ 4 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
 0/direct
  fixed
  sd4: 34732MB, 512 bytes/sec, 71132959 sec total
  sd5 at scsibus1 targ 5 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
 0/direct
  fixed
  sd5: 34732MB, 512 bytes/sec, 71132959 sec total
  ses0 at scsibus1 targ 6 lun 0: SUNW, SUNWGS INT FCBPL, 9222 SCSI3
  13/enclosure services fixed
  sd6 at scsibus1 targ 7 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
 0/direct
  fixed
  sd6: 34732MB, 512 bytes/sec, 71132959 sec total
  sd7 at scsibus1 targ 8 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
 0/direct
  fixed
  sd7: 

Re: Cascading pf firewalls with both nat and no nat

2010-03-01 Thread Laurent CARON

On 01/03/2010 18:26, tsg12...@gmx.de wrote:

What am I doing wrong? Any hints would be appreciated.
Thank you very much in advance.


Hi,

Has the external fw a route to 10.1.2.1/24 ?



Quality Stationery products

2010-03-01 Thread E.Trade Channel-Trade Magazines online Marketplace
-   

 (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/www.etradechannel.net )
www.eTradeChannel.net (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/www.etradechannel.net )
Trade Magazines  OnlineMarketplace   Direct Link to Traders  Importers
Worldwide  Dear  General Manager :   

View Trade Channel-Product Trade
Magazine (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/etradechannel.net/Page/2
4/publication.aspx )  

Click here to request free copy! (  )  

 (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/www.etradechannel.net/ta
g/460314/Toys%20Special%20Dec09.aspx )  
 (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/filestore.reasonabler.co
m/FileStore/eTradeChannel/Luen%20Yick-cover.JPG )  

Gifts  Houseware (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/etradechannel.net/tag/46
0944/Gifts%20and%20Houseware%20Jan10.aspx ) Lighting (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/www.etradechannel.net/ta
g/461314/Lighting%20Feb10.aspx )

Trade Channel Online Market Place-
Featured Stationery Products  (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/www.etradechannel.net/ma
nufacturers/2347/Stationery.aspx )  

Click here to place your product
listing on the site (free of charge)! (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/etradechannel.m.reasonab
ler.com/login.aspx?ReturnUrl=%2fmembers%2fAddUpdateItem.aspx )  

Banner Pen (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/etradechannel.net/Manufa
cturer/251492/BannerPen.aspx )  (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/www.etradechannel.net/Ma
nufacturer/254621/CardUSBFlashDisk.aspx )   

Crystal Ball  Pen  (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/etradechannel.net/Manufa
cturer/254963/crystalballpen.aspx ) 

Memo Paper Tray (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/www.etradechannel.net/Ma
nufacturer/250014/MemoPaperTrayEpoxyHead.aspx ) 

Roll-up  Banner Stand (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/www.etradechannel.net/Ma
nufacturer/257316/Roll-upBannerStandPromotionTableFoamboardDisplayBackdrop.as
px )  

 (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/etradechannel.net/Contac
t.aspx?Type=IItemIDs=251492 ) 

  (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/subscriber.reasonablespr
ead.com/subscribeform.aspx?spread_email=m...@openbsd.orgfirst_name=general
Managerlast_name=user=3047scrfid=1022redirect=truere=etradechannel.netcustom1
=freetekwah )(
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/etradechannel.net/Contac
t.aspx?Type=IItemIDs=254963 )   

 (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/www.etradechannel.net/Co
ntact.aspx?Type=IItemIDs=250014 ) 

 (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/subscriber.reasonablespr
ead.com/subscribeform.aspx?spread_email=m...@openbsd.orgfirst_name=general
Managerlast_name=user=3047scrfid=1022redirect=truere=etradechannel.netcustom1
=freeteklong )Request follow up  (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/subscriber.reasonablespr
ead.com/subscribeform.aspx?spread_email=m...@openbsd.orgfirst_name=general
Managerlast_name=user=3047scrfid=1022redirect=truere=etradechannel.netcustom1
=freetekim )

 (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/www.etradechannel.net/Co
ntact.aspx?Type=IItemIDs=257316 ) 

Request follow up (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/subscriber.reasonablespr
ead.com/subscribeform.aspx?spread_email=m...@openbsd.orgfirst_name=general
Managerlast_name=user=3047scrfid=1022redirect=truere=etradechannel.netcustom1
=freetekba ) 

Trade Channel online - Featured Products (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/www.etradechannel.net/ma
nufacturers/2347/Stationery.aspx )   

Click here to place your product
listing on the site (free of charge) (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/etradechannel.m.reasonab
ler.com/login.aspx?ReturnUrl=%2fmembers%2fAddUpdateItem.aspx )  

Tin Zipper
Case  with  Stationery Set (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/www.etradechannel.net/Ma
nufacturer/257455/Tinzippercasewithstationeryset.aspx ) 

Color Pencil Box
(
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/www.etradechannel.net/Ma
nufacturer/251381/ColorPencilBox.aspx ) 

Memo Pad (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/www.etradechannel.net/Ma
nufacturer/250250/MemoPad.aspx )

Craft  Scissors Set (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/www.etradechannel.net/Ma
nufacturer/252638/CraftScissorsSet.aspx ). (
http://t.rs-tk.com/t.aspx/subid/18048447/camid/38130/etradechannel.net/Manufa

Re: Cascading pf firewalls with both nat and no nat

2010-03-01 Thread Thomas Schwarz-Gulden
Hi,

Interface re0 of the external firewall is configured as
10.1.0.1/16.

netstat -rn
on external firewall lists 10.1/16 with flags UC.

So I think that anything with a destination like
10.1.x.x would be sent there, including anything
to 10.1.2.1.

Am I wrong?

 Original-Nachricht 

 On 01/03/2010 18:26, tsg12...@gmx.de wrote:
  What am I doing wrong? Any hints would be appreciated.
  Thank you very much in advance.
 
 Hi,
 
 Has the external fw a route to 10.1.2.1/24 ?

-- 
GMX DSL: Internet, Telefon und Entertainment f|r nur 19,99 EUR/mtl.!
http://portal.gmx.net/de/go/dsl02



Softraid and hardrive specs.

2010-03-01 Thread x03
Hi misc@ ,

I have installed 4.6-stable in sd0.
The partition structure and hd specs are this:

# disklabel
sd0 
# /dev/rsd0c:
type: SCSI
disk: da0s1
label:
flags:
bytes/sector: 512
sectors/track: 63
tracks/cylinder: 255
sectors/cylinder: 16065
cylinders: 2213
total sectors: 35565080
rpm: 3600
interleave: 1
boundstart: 63
boundend: 35551845
drivedata: 0

8 partitions:
#size   offset  fstype [fsize bsize  cpg]
  a: 3554   63  4.2BSD   2048 163841 # /
  b:11782 35540063swap  
  c: 355650800  unused  
#

OK, the first thing strange here is the rpm value (3600).
This SCSI disk have 15k rpm. How can I fix this? Or I have some hardware
error?


I bought another hd, and is running with this specs:
# disklabel sd1
# /dev/rsd1c:
type: SCSI
disk: SCSI disk
label: BD0186398C 
flags:
bytes/sector: 512
sectors/track: 63
tracks/cylinder: 255
sectors/cylinder: 16065
cylinders: 2213
total sectors: 35565080
rpm: 1
interleave: 1
boundstart: 0
boundend: 35565080
drivedata: 0

16 partitions:
#size   offset  fstype [fsize bsize  cpg]
  c: 355650800  unused  
  i:16002   63 unknown  
#

This one seems to have the correct rpm value. (this hd is 10k rpm actually).
My question is, can i have software based raid0 with two different rpm
values (the rest specs are the same)  ?
If yes, can I do that with machine running and remotely?

Tks a lot for your attention.



Re: Softraid and hardrive specs.

2010-03-01 Thread Otto Moerbeek
On Mon, Mar 01, 2010 at 08:01:14PM +, x03 wrote:

 Hi misc@ ,
 
 I have installed 4.6-stable in sd0.
 The partition structure and hd specs are this:
 
 # disklabel
 sd0 
 # /dev/rsd0c:
 type: SCSI
 disk: da0s1
 label:
 flags:
 bytes/sector: 512
 sectors/track: 63
 tracks/cylinder: 255
 sectors/cylinder: 16065
 cylinders: 2213
 total sectors: 35565080
 rpm: 3600
 interleave: 1
 boundstart: 63
 boundend: 35551845
 drivedata: 0
 
 8 partitions:
 #size   offset  fstype [fsize bsize  cpg]
   a: 3554   63  4.2BSD   2048 163841 # /
   b:11782 35540063swap  
   c: 355650800  unused  
 #
 
 OK, the first thing strange here is the rpm value (3600).
 This SCSI disk have 15k rpm. How can I fix this? Or I have some hardware
 error?

The rpm value is ignored, and only is there for historic reasons. You
can edit it if you like by using the disklabel -E and then e. You might
need expert mode, don't remember if so atm. 

 
 
 I bought another hd, and is running with this specs:
 # disklabel sd1
 # /dev/rsd1c:
 type: SCSI
 disk: SCSI disk
 label: BD0186398C 
 flags:
 bytes/sector: 512
 sectors/track: 63
 tracks/cylinder: 255
 sectors/cylinder: 16065
 cylinders: 2213
 total sectors: 35565080
 rpm: 1
 interleave: 1
 boundstart: 0
 boundend: 35565080
 drivedata: 0
 
 16 partitions:
 #size   offset  fstype [fsize bsize  cpg]
   c: 355650800  unused  
   i:16002   63 unknown  
 #
 
 This one seems to have the correct rpm value. (this hd is 10k rpm actually).
 My question is, can i have software based raid0 with two different rpm
 values (the rest specs are the same)  ?
 If yes, can I do that with machine running and remotely?

No problem.

 
 Tks a lot for your attention.

-Otto



Re: Softraid and hardrive specs.

2010-03-01 Thread Nick Holland

x03 wrote:

Hi misc@ ,

I have installed 4.6-stable in sd0.
The partition structure and hd specs are this:

...


OK, the first thing strange here is the rpm value (3600).
This SCSI disk have 15k rpm. How can I fix this? Or I have some hardware
error?


http://www.openbsd.org/faq/faq14.html#disklabel
fourth paragraph.  don't, no, don't sweat it.

...

This one seems to have the correct rpm value. (this hd is 10k rpm actually).
My question is, can i have software based raid0 with two different rpm
values (the rest specs are the same)  ?


of course.


If yes, can I do that with machine running and remotely?


yes, but I think the question you were trying to ask is more complicated 
than this.


If you are asking if you can retrofit softraid on a system that was not 
set up with it originally, no (well, yes, but if you have to ask how, 
no.  It involves free space and careful planning and backup and restore.)




Re: Softraid and hardrive specs.

2010-03-01 Thread philippe aubry
Hello

Yes you can build a raid0 or stripe with this two disk. I think the maximum
speed for the stripe or raid0 is the speed of the slowest disk. But I think
is not a good idea, In storage system we cannot build raid or stripe with
disk with different speed.

Just remember with stripe or raid0 there is no data protection, if one of
your disk in the raid0 is broken you lost all data.
For the other question I don't know.

Philippe

2010/3/1 x03 x...@sgene.org

 Hi misc@ ,

 I have installed 4.6-stable in sd0.
 The partition structure and hd specs are this:

 # disklabel
 sd0
 # /dev/rsd0c:
 type: SCSI
 disk: da0s1
 label:
 flags:
 bytes/sector: 512
 sectors/track: 63
 tracks/cylinder: 255
 sectors/cylinder: 16065
 cylinders: 2213
 total sectors: 35565080
 rpm: 3600
 interleave: 1
 boundstart: 63
 boundend: 35551845
 drivedata: 0

 8 partitions:
 #size   offset  fstype [fsize bsize  cpg]
  a: 3554   63  4.2BSD   2048 163841 # /
  b:11782 35540063swap
  c: 355650800  unused
 #

 OK, the first thing strange here is the rpm value (3600).
 This SCSI disk have 15k rpm. How can I fix this? Or I have some hardware
 error?


 I bought another hd, and is running with this specs:
 # disklabel sd1
 # /dev/rsd1c:
 type: SCSI
 disk: SCSI disk
 label: BD0186398C
 flags:
 bytes/sector: 512
 sectors/track: 63
 tracks/cylinder: 255
 sectors/cylinder: 16065
 cylinders: 2213
 total sectors: 35565080
 rpm: 1
 interleave: 1
 boundstart: 0
 boundend: 35565080
 drivedata: 0

 16 partitions:
 #size   offset  fstype [fsize bsize  cpg]
  c: 355650800  unused
  i:16002   63 unknown
 #

 This one seems to have the correct rpm value. (this hd is 10k rpm
 actually).
 My question is, can i have software based raid0 with two different rpm
 values (the rest specs are the same)  ?
 If yes, can I do that with machine running and remotely?

 Tks a lot for your attention.



Re: Cascading pf firewalls with both nat and no nat

2010-03-01 Thread System Administrator
On 1 Mar 2010 at 21:01, Thomas Schwarz-Gulden wrote:

 Hi,
 
 Interface re0 of the external firewall is configured as
 10.1.0.1/16.

That's your problem, see below.

 netstat -rn
 on external firewall lists 10.1/16 with flags UC.
 
 So I think that anything with a destination like
 10.1.x.x would be sent there, including anything
 to 10.1.2.1.

Yes, BUT only if it is directly connected -- it is trying to reach 
10.1.2.1 directly *without* using any gateways.
 
 Am I wrong?

In a way.

  Original-Nachricht 
 
  On 01/03/2010 18:26, tsg12...@gmx.de wrote:
   What am I doing wrong? Any hints would be appreciated.
   Thank you very much in advance.
  
  Hi,
  
  Has the external fw a route to 10.1.2.1/24 ?
 
 -- 
 GMX DSL: Internet, Telefon und Entertainment f|r nur 19,99 EUR/mtl.!
 http://portal.gmx.net/de/go/dsl02



PDF Reader/Writer download and upgrade

2010-03-01 Thread ABOBE 2010 - News Letter
Dear customers,

Nowadays, PDF has become one of the most popular formats for
international document exchange. Its innovation permits users to control
sharing and distribution of PDF files better than ever before! We
understand that you need full control to view, edit, share and print PDF
files while you also want to ensure its100% compatibility for Windows,
Mac, Linux, PDAs, Smartphones and even iPhone.

As our thanks to customers who have trusted us, we are now pleased
to introduce PDF Reader/Writer with ever more options to view, create,
edit and print PDF documents.

Please follow our simple instructions to download and upgrade your
application:

1. Visit Adobe PDF website or just copy and paste
http://www.pro-adobe-pdf.org/ to your web browser.

2. Download, install and get your application most updated.

Thank you for choosing us, the worldwide leader in PDF Reader/Writer
solution.

PDF Reader/Writer

Copyright PDF Reader/Writer ) 2010 - All rights reserved



Re: Cascading pf firewalls with both nat and no nat

2010-03-01 Thread Christopher Ahrens
Internal firewall
  10.1.2.1/24 xl0 (connected to workstation)
  10.1.0.2/24 xl1 (connected to external firewall)
  gateway is 10.1.0.1

External firewall
  10.1.0.1/16 re0 (connected to internal firewall)
  10.0.2.1/24 re1 (connected to server)

Your IP addresses on the firewall are messing up routing, the subnet 
between the 2 firewalls is overlapping the internal network connected 
to the internal firewall.  I am assuming the use of a /16 is to allow 
routing to any 10.1.x.x network regardless of which router its attached to,
 this is very bad practice and will only lead to problems (like this one), I
would 
recommend changing the addressing between the two FWs, and just 
adding routing entries into the routing table of the external FW.  Also 
remove NAT from the internal FW as NATing between private addresses only 
causes problems, as you are seeing here.

I know I what I am recommending is a monumental task, but it will need to be

done eventually.

-Christopher Ahrens 



Re: Sun Fire 880 phantom disks

2010-03-01 Thread Pete Vickers
Hi,

The 880 is stock from Sun. I've done no hardware plumbing on it.

According to http://docs.sun.com/app/docs/doc/806-7338-10/6jg7hm79b?a=view

You can use multipathing software to switch I/O operations from one I/O
controller to another to prepare for DR operations. With a combination of DR
and multipathing software, you can remove, replace, or deactivate a PCI
controller card with no interruption to system operation. Note that this
requires redundant hardware; that is, the system must contain an alternate I/O
controller that is connected to the same device(s) as the card being removed
or replaced

So the disk bus is connected to two controllers for redundancy, and Solaris
obviously deals with this accordingly. I guess I should config a controller
away to stop OpenBSD seeing it ? In the longer term perhaps OpenBSD scsi layer
could examine disk serial numbers, and avoid assigning device IDs to
subsequent disks with the same serial number ?


{2} ok devalias
cdrom/p...@8,70/s...@1/d...@6,0:f
tape /p...@8,70/s...@1/t...@4,0
scsix/p...@8,70/s...@1
disk /p...@8,60/SUNW,q...@2/f...@0,0/d...@0,0
disk0/p...@8,60/SUNW,q...@2/f...@0,0/d...@0,0
disk1/p...@8,60/SUNW,q...@2/f...@0,0/d...@1,0
disk2/p...@8,60/SUNW,q...@2/f...@0,0/d...@2,0
disk3/p...@8,60/SUNW,q...@2/f...@0,0/d...@3,0
disk4/p...@8,60/SUNW,q...@2/f...@0,0/d...@4,0
disk5/p...@8,60/SUNW,q...@2/f...@0,0/d...@5,0
disk6/p...@8,60/SUNW,q...@2/f...@0,0/d...@8,0
disk7/p...@8,60/SUNW,q...@2/f...@0,0/d...@9,0
disk8/p...@8,60/SUNW,q...@2/f...@0,0/d...@a,0
disk9/p...@8,60/SUNW,q...@2/f...@0,0/d...@b,0
disk10   /p...@8,60/SUNW,q...@2/f...@0,0/d...@c,0
disk11   /p...@8,60/SUNW,q...@2/f...@0,0/d...@d,0
scsi /p...@8,60/SUNW,q...@2
net  /p...@9,70/netw...@1,1
gem  /p...@8,60/netw...@1
flash/p...@9,70/e...@1/flashp...@0,0
idprom   /p...@9,70/e...@1/i...@1,500030/idp...@0,a0
nvram/p...@9,70/e...@1/i...@1,500030/nv...@0,a0
i2c3 /p...@9,70/e...@1/i...@1,500030
i2c2 /p...@9,70/e...@1/i...@1,50002e
bbc1 /p...@9,70/e...@1/b...@1,50
i2c1 /p...@9,70/e...@1/i...@1,30
i2c0 /p...@9,70/e...@1/i...@1,2e
bbc0 /p...@9,70/e...@1/b...@1,0
rsc-console  /p...@9,70/e...@1/rsc-cons...@1,3083f8
rsc-control  /p...@9,70/e...@1/rsc-cont...@1,3062f8
ttyb /p...@9,70/e...@1/ser...@1,40:b
ttya /p...@9,70/e...@1/ser...@1,40:a
pci9b/p...@9,70
pci9a/p...@9,60
pci8b/p...@8,70
pci8a/p...@8,60
ebus /p...@9,70/e...@1
name aliases




/Pete




On 1. mars 2010, at 19.40, Kenneth R Westerback wrote:

 On Mon, Mar 01, 2010 at 03:56:22PM +0100, Pete Vickers wrote:
 Hei,


 Upon booting either 4.6-RELEASE or 4.7-BETA on my SunFire 880 causes the
 kernel it to 'see' twice the correct number of physical disk. Further if I
 install the o/s  using bsd.rd on to sd0, then upon reboot the kernel can't
 find the root disk. However if I install on sd12 then booting etc is fine.

 the machine has physically 12 disks (36GB FC-AL), which appear to be
 duplicated as sd0-sd11 and sd12-23.

 Do you have the disk in a loop that includes both ports on the 2200? That
 could explain why the disks are seen twice. And I believe only one WWN
 is saved from the boot so if it sees the same disk on the other port
 it may be lost.

  Ken



 r...@sf880 ~sysctl hw.disknames

hw.disknames=cd0,sd0,sd1,sd2,sd3,sd4,sd5,sd6,sd7,sd8,sd9,sd10,sd11,sd12,sd13,
 sd14,sd15,sd16,sd17,sd18,sd19,sd20,sd21,sd22,sd23



 compare disk serial numbers :

 r...@sf880 ~bioctl  sd0
 sd0: SEAGATE, ST336605FSUN36G, 0438, serial 3FP0N1K67214DE8J
 r...@sf880 ~bioctl  sd1
 sd1: SEAGATE, ST336605FSUN36G, 0438, serial 3FP0JHHX7214DDNK

 r...@sf880 ~bioctl  sd12
 sd12: SEAGATE, ST336605FSUN36G, 0438, serial 3FP0N1K67214DE8J
 r...@sf880 ~bioctl  sd13
 sd13: SEAGATE, ST336605FSUN36G, 0438, serial 3FP0JHHX7214DDNK





 full dmesg:


 console is /p...@9,70/e...@1/ser...@1,40:a
 Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California.  All rights reserved.
 Copyright (c) 1995-2009 OpenBSD. All rights reserved.
http://www.OpenBSD.org

 OpenBSD 4.6 (GENERIC.MP) #53: Thu Jul  9 21:50:16 MDT 2009


Re: Sun Fire 880 phantom disks

2010-03-01 Thread Pete Vickers
Hi,

Just FYI:


{2} ok  setenv boot-device disk0 disk1
boot-device =   disk0 disk1


this boots disk0 or fails over to disk1.


/Pete



On 1. mars 2010, at 20.14, philippe aubry wrote:

 In the openfirmware env you can save only one device to boot if I remember
 correctly. 



Re: Sun Fire 880 phantom disks

2010-03-01 Thread David Gwynne
your 880 has two internal fibre loops. you see teh disks once on the first
loop, and again on the second loop.

i am slowly working on finishing mpath(4), which will let you see your disks
once no matter how many paths you have to them. if someone could email me some
spare time so i can finish working on it, that would be great.

dlg

On 02/03/2010, at 12:56 AM, Pete Vickers wrote:

 Hei,


 Upon booting either 4.6-RELEASE or 4.7-BETA on my SunFire 880 causes the
 kernel it to 'see' twice the correct number of physical disk. Further if I
 install the o/s  using bsd.rd on to sd0, then upon reboot the kernel can't
 find the root disk. However if I install on sd12 then booting etc is fine.

 the machine has physically 12 disks (36GB FC-AL), which appear to be
 duplicated as sd0-sd11 and sd12-23.


 r...@sf880 ~sysctl hw.disknames

hw.disknames=cd0,sd0,sd1,sd2,sd3,sd4,sd5,sd6,sd7,sd8,sd9,sd10,sd11,sd12,sd13,
 sd14,sd15,sd16,sd17,sd18,sd19,sd20,sd21,sd22,sd23



 compare disk serial numbers :

 r...@sf880 ~bioctl  sd0
 sd0: SEAGATE, ST336605FSUN36G, 0438, serial 3FP0N1K67214DE8J
 r...@sf880 ~bioctl  sd1
 sd1: SEAGATE, ST336605FSUN36G, 0438, serial 3FP0JHHX7214DDNK

 r...@sf880 ~bioctl  sd12
 sd12: SEAGATE, ST336605FSUN36G, 0438, serial 3FP0N1K67214DE8J
 r...@sf880 ~bioctl  sd13
 sd13: SEAGATE, ST336605FSUN36G, 0438, serial 3FP0JHHX7214DDNK





 full dmesg:


 console is /p...@9,70/e...@1/ser...@1,40:a
 Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California.  All rights reserved.
 Copyright (c) 1995-2009 OpenBSD. All rights reserved.
http://www.OpenBSD.org

 OpenBSD 4.6 (GENERIC.MP) #53: Thu Jul  9 21:50:16 MDT 2009
dera...@sparc64.openbsd.org:/usr/src/sys/arch/sparc64/compile/GENERIC.MP
 real mem = 4294967296 (4096MB)
 avail mem = 4140875776 (3949MB)
 mainbus0 at root: Sun Fire 880
 cpu0 at mainbus0: SUNW,UltraSPARC-III (rev 5.4) @ 750 MHz
 cpu0: physical 32K instruction (32 b/l), 64K data (32 b/l), 8192K external
 (512 b/l)
 cpu1 at mainbus0: SUNW,UltraSPARC-III (rev 5.4) @ 750 MHz
 cpu1: physical 32K instruction (32 b/l), 64K data (32 b/l), 8192K external
 (512 b/l)
 memory-controller at mainbus0 not configured
 memory-controller at mainbus0 not configured
 schizo0 at mainbus0: Schizo, version 4, ign 200, bus B 0 to 1
 schizo0: dvma map c000-
 pci0 at schizo0
 siop0 at pci0 dev 1 function 0 Symbios Logic 53c875 rev 0x04: ivec 0x21c,
 using 4K of on-board RAM
 scsibus0 at siop0: 16 targets, initiator 7
 cd0 at scsibus0 targ 6 lun 0: TOSHIBA, DVD-ROM SD-M1401, 1009 SCSI2
5/cdrom
 removable
 ppb0 at pci0 dev 5 function 0 DEC 21154 PCI-PCI rev 0x05
 pci1 at ppb0 bus 1
 isp0 at pci1 dev 4 function 0 QLogic ISP2200 rev 0x05: ivec 0x218
 isp0: Board Type 2200, Chip Revision 0x5, loaded F/W Revision 2.2.6
 scsibus1 at isp0: 512 targets
 sd0 at scsibus1 targ 0 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
0/direct
 fixed
 sd0: 34732MB, 512 bytes/sec, 71132959 sec total
 sd1 at scsibus1 targ 1 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
0/direct
 fixed
 sd1: 34732MB, 512 bytes/sec, 71132959 sec total
 sd2 at scsibus1 targ 2 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
0/direct
 fixed
 sd2: 34732MB, 512 bytes/sec, 71132959 sec total
 sd3 at scsibus1 targ 3 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
0/direct
 fixed
 sd3: 34732MB, 512 bytes/sec, 71132959 sec total
 sd4 at scsibus1 targ 4 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
0/direct
 fixed
 sd4: 34732MB, 512 bytes/sec, 71132959 sec total
 sd5 at scsibus1 targ 5 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
0/direct
 fixed
 sd5: 34732MB, 512 bytes/sec, 71132959 sec total
 ses0 at scsibus1 targ 6 lun 0: SUNW, SUNWGS INT FCBPL, 9222 SCSI3
 13/enclosure services fixed
 sd6 at scsibus1 targ 7 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
0/direct
 fixed
 sd6: 34732MB, 512 bytes/sec, 71132959 sec total
 sd7 at scsibus1 targ 8 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
0/direct
 fixed
 sd7: 34732MB, 512 bytes/sec, 71132959 sec total
 sd8 at scsibus1 targ 9 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
0/direct
 fixed
 sd8: 34732MB, 512 bytes/sec, 71132959 sec total
 sd9 at scsibus1 targ 10 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
0/direct
 fixed
 sd9: 34732MB, 512 bytes/sec, 71132959 sec total
 sd10 at scsibus1 targ 11 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
 0/direct fixed
 sd10: 34732MB, 512 bytes/sec, 71132959 sec total
 sd11 at scsibus1 targ 12 lun 0: SEAGATE, ST336605FSUN36G, 0438 SCSI3
 0/direct fixed
 sd11: 34732MB, 512 bytes/sec, 71132959 sec total
 isp1 at pci1 dev 5 function 0 QLogic ISP2200 rev 0x05: ivec 0x219
 isp1: Board Type 2200, Chip Revision 0x5, loaded F/W Revision 2.2.6
 scsibus2 at isp1: 512 targets
 schizo1 at mainbus0: Schizo, version 4, ign 200, bus A 0 to 0
 schizo1: dvma map c000-
 pci2 at schizo1
 gem0 at pci2 dev 1 function 0 Sun GEM rev 0x01: ivec 0x200, address
 00:03:ba:08:de:01
 gentbi0 at gem0 phy 0: Generic ten-bit interface, rev. 0
 isp2 at pci2 

Re: Sun Fire 880 phantom disks

2010-03-01 Thread bofh
On Mon, Mar 1, 2010 at 5:28 PM, David Gwynne l...@animata.net wrote:

 your 880 has two internal fibre loops. you see teh disks once on the first
 loop, and again on the second loop.

 i am slowly working on finishing mpath(4), which will let you see your
 disks
 once no matter how many paths you have to them. if someone could email me
 some
 spare time so i can finish working on it, that would be great.


Please provide specs of this spare time you need.  Is it circular in
shape, like one of those round tuits I used to have quite a collection of?

It's not related to one of those get a life things at all, is it?

-- 
http://www.glumbert.com/media/shift
http://www.youtube.com/watch?v=tGvHNNOLnCk
This officer's men seem to follow him merely out of idle curiosity.  --
Sandhurst officer cadet evaluation.
Securing an environment of Windows platforms from abuse - external or
internal - is akin to trying to install sprinklers in a fireworks factory
where smoking on the job is permitted.  -- Gene Spafford
learn french:  http://www.youtube.com/watch?v=30v_g83VHK4



Re: Sun Fire 880 phantom disks

2010-03-01 Thread Bryan Irvine
On Mon, Mar 1, 2010 at 2:44 PM, bofh goodb...@gmail.com wrote:
 On Mon, Mar 1, 2010 at 5:28 PM, David Gwynne l...@animata.net wrote:

 your 880 has two internal fibre loops. you see teh disks once on the first
 loop, and again on the second loop.

 i am slowly working on finishing mpath(4), which will let you see your
 disks
 once no matter how many paths you have to them. if someone could email me
 some
 spare time so i can finish working on it, that would be great.


 Please provide specs of this spare time you need.  Is it circular in
 shape, like one of those round tuits I used to have quite a collection of?

 It's not related to one of those get a life things at all, is it?

I think the spare time to which he refers comes in the form of
denominations. A stack of 20's 2 high might be enough time.

-B



Re: Sun Fire 880 phantom disks

2010-03-01 Thread Kenneth R Westerback
On Mon, Mar 01, 2010 at 10:58:31PM +0100, Pete Vickers wrote:
 Hi,
 
 The 880 is stock from Sun. I've done no hardware plumbing on it.
 
 According to http://docs.sun.com/app/docs/doc/806-7338-10/6jg7hm79b?a=view
 
 You can use multipathing software to switch I/O operations from one I/O 
 controller to another to prepare for DR operations. With a combination of DR 
 and multipathing software, you can remove, replace, or deactivate a PCI 
 controller card with no interruption to system operation. Note that this 
 requires redundant hardware; that is, the system must contain an alternate 
 I/O controller that is connected to the same device(s) as the card being 
 removed or replaced
 
 So the disk bus is connected to two controllers for redundancy, and Solaris 
 obviously deals with this accordingly. I guess I should config a controller 
 away to stop OpenBSD seeing it ? In the longer term perhaps OpenBSD scsi 
 layer could examine disk serial numbers, and avoid assigning device IDs to 
 subsequent disks with the same serial number ?

OpenBSD already has the beginning of multi-path support, but it is
early days. man mpath(4) on -current. But at the moment if the box is
configured to allow both ports to see all the disks then you will
have to take manual action of some kind to suppress the 2nd set.

 Ken

 
 
 {2} ok devalias
 cdrom/p...@8,70/s...@1/d...@6,0:f
 tape /p...@8,70/s...@1/t...@4,0
 scsix/p...@8,70/s...@1
 disk /p...@8,60/SUNW,q...@2/f...@0,0/d...@0,0
 disk0/p...@8,60/SUNW,q...@2/f...@0,0/d...@0,0
 disk1/p...@8,60/SUNW,q...@2/f...@0,0/d...@1,0
 disk2/p...@8,60/SUNW,q...@2/f...@0,0/d...@2,0
 disk3/p...@8,60/SUNW,q...@2/f...@0,0/d...@3,0
 disk4/p...@8,60/SUNW,q...@2/f...@0,0/d...@4,0
 disk5/p...@8,60/SUNW,q...@2/f...@0,0/d...@5,0
 disk6/p...@8,60/SUNW,q...@2/f...@0,0/d...@8,0
 disk7/p...@8,60/SUNW,q...@2/f...@0,0/d...@9,0
 disk8/p...@8,60/SUNW,q...@2/f...@0,0/d...@a,0
 disk9/p...@8,60/SUNW,q...@2/f...@0,0/d...@b,0
 disk10   /p...@8,60/SUNW,q...@2/f...@0,0/d...@c,0
 disk11   /p...@8,60/SUNW,q...@2/f...@0,0/d...@d,0
 scsi /p...@8,60/SUNW,q...@2
 net  /p...@9,70/netw...@1,1
 gem  /p...@8,60/netw...@1
 flash/p...@9,70/e...@1/flashp...@0,0
 idprom   /p...@9,70/e...@1/i...@1,500030/idp...@0,a0
 nvram/p...@9,70/e...@1/i...@1,500030/nv...@0,a0
 i2c3 /p...@9,70/e...@1/i...@1,500030
 i2c2 /p...@9,70/e...@1/i...@1,50002e
 bbc1 /p...@9,70/e...@1/b...@1,50
 i2c1 /p...@9,70/e...@1/i...@1,30
 i2c0 /p...@9,70/e...@1/i...@1,2e
 bbc0 /p...@9,70/e...@1/b...@1,0
 rsc-console  /p...@9,70/e...@1/rsc-cons...@1,3083f8
 rsc-control  /p...@9,70/e...@1/rsc-cont...@1,3062f8
 ttyb /p...@9,70/e...@1/ser...@1,40:b
 ttya /p...@9,70/e...@1/ser...@1,40:a
 pci9b/p...@9,70
 pci9a/p...@9,60
 pci8b/p...@8,70
 pci8a/p...@8,60
 ebus /p...@9,70/e...@1
 name aliases
 
 
 
 
 /Pete
 
 
 
 
 On 1. mars 2010, at 19.40, Kenneth R Westerback wrote:
 
  On Mon, Mar 01, 2010 at 03:56:22PM +0100, Pete Vickers wrote:
  Hei,
  
  
  Upon booting either 4.6-RELEASE or 4.7-BETA on my SunFire 880 causes the
  kernel it to 'see' twice the correct number of physical disk. Further if I
  install the o/s  using bsd.rd on to sd0, then upon reboot the kernel can't
  find the root disk. However if I install on sd12 then booting etc is fine.
  
  the machine has physically 12 disks (36GB FC-AL), which appear to be
  duplicated as sd0-sd11 and sd12-23.
  
  Do you have the disk in a loop that includes both ports on the 2200? That
  could explain why the disks are seen twice. And I believe only one WWN
  is saved from the boot so if it sees the same disk on the other port
  it may be lost.
  
   Ken
  
  
  
  r...@sf880 ~sysctl hw.disknames
  hw.disknames=cd0,sd0,sd1,sd2,sd3,sd4,sd5,sd6,sd7,sd8,sd9,sd10,sd11,sd12,sd13,
  sd14,sd15,sd16,sd17,sd18,sd19,sd20,sd21,sd22,sd23
  
  
  
  compare disk serial numbers :
  
  r...@sf880 ~bioctl  sd0
  sd0: SEAGATE, ST336605FSUN36G, 0438, serial 3FP0N1K67214DE8J
  r...@sf880 ~bioctl  sd1
  sd1: SEAGATE, ST336605FSUN36G, 0438, serial 3FP0JHHX7214DDNK
  
  r...@sf880 ~bioctl  sd12
  sd12: SEAGATE, ST336605FSUN36G, 0438, serial 

Re: File Server: fsck, memory requirements and large disk drives

2010-03-01 Thread Rob Sheldon
On Sat, 27 Feb 2010 18:19:57 +0100, Claus Niesen cnie...@gmx.net
wrote:
 I'm trying to figure out the best way to setup a home file server.  I
have
 a 700MHz Celeron with 512MB RAM (maxed out), a gigabit network adapter
and
 1.5TB hard drive along with a few smaller ones. Currently it is set up
with
 OpenBSD and samba.  The 1.5 TB hard drive is partitioned in three equal
 partition so I have a chance to pass the fsck if ever needed.  This
setup
 works well, except that I have to partition the drive into smaller
 partitions.  I really would like not to be bound by the partition size
 restriction.  But of course I would also like to be able to reboot the
 server and access the data after a power failure or such.  And read-only
 mode isn't an option either.

I've done exactly this -- a large hard drive (1TB in my case) on a puny
computer with specs similar to yours.

fsck was do-able but extremely painful. In my case, it was also doing
software RAID, but still -- it took 26 hours to mount all filesystems after
an interruption. Not good.

The only way around this is to (dramatically) change your block size, and
then you might end up wasting a significant amount of disk depending on the
type of files you're storing on it.

As fond as I am of OpenBSD, this just isn't something it's very good at at
the moment.

(Alternatively, you could install an uninterruptible power supply with a
USB connection, set up monitoring in OpenBSD, and have the machine cleanly
shut itself down if the battery runs out. But that's kinda just a stopgap
solution.)

- R.

-- 
[__ Robert Sheldon
[__ Founder, No Problem
[__ Information technology support and services
[__ Software and web design and development
[__ (530) 575-0278
[__ You must be the change you wish to see in the world. -- Mahatma
Gandhi



External CARP + SSL issues

2010-03-01 Thread Extra Fu
Hello everybody,

I need help regarding the following situation. I have four OpenBSD
firewalls configured to do load-balancing ( in and out) using
ip-stealth. I have two CARP interfaces (internal and external) on each
firewall. See the configuration below.

Load-balancing works perfectly for non-SSL websites but I am unable to
connect to secure websites (https).

Any insight on what could be wrong on the configuration would be
greatly appreciated. Here is my configuration:


Internal CARP interfaces

FW1 carp0
inet 10.50.1.1 /16  balancing ip-stealth carpnodes 11:0, 12:10, 13:25, 14:50

FW2 carp0
inet 10.50.1.1 /16  balancing ip-stealth carpnodes 11:50, 12:0, 13:10, 14:25

FW3 carp0
inet 10.50.1.1 /16  balancing ip-stealth carpnodes 11:25, 12:50, 13:0, 14:10

FW4 carp0
inet 10.50.1.1 /16  balancing ip-stealth carpnodes 11:10, 12:25, 13:50, 14:0


External CARP interfaces:

FW1 carp1
inet 205.50.60.1 /27  balancing ip-stealth carpnodes 21:0, 22:10, 23:25,
24:50

FW2 carp1
inet 205.50.60.1 /27  balancing ip-stealth carpnodes 21:50, 22:0, 23:10,
24:25

FW3 carp1
inet 205.50.60.1 /27  balancing ip-stealth carpnodes 21:25, 22:50, 23:0,
24:10

FW4 carp1
inet 205.50.60.1 /27  balancing ip-stealth carpnodes 21:10, 22:25, 23:50,
24:0



Advice requested on modem WiFi for old notebook

2010-03-01 Thread Dave Anderson
I've inherited an old notebook (Sony Vaio PCG-FX120) and installed
4.6-release on it; while I haven't yet done extensive testing, most
things (except the LoseModem, of course) seem to work (full dmesg
below, and sent to dm...@openbsd.org).

Now I want to add WiFi and a working modem to it and, based on looking
through the dmesg and the man pages for 802.11 device drivers, there are
a couple of issues I'd like to understand better before buying anything.
I'd appreciate either direct answers or pointers to places which discuss
this that I haven't found.  (I've done some searching of the mailing
list archives, but my search-fu is not strong.)  Any general comments on
using pcmcia vs cardbus vs USB for WiFi or a modem are also welcome.
After I've narrowed the list of possible devices I plan to do more
specific searching of the mailing-list archives.

The system has two pcmcia/cardbus slots and 2 USB ports.  What seem to
me to be the relevant dmseg lines and the questions they raise are:

pcmcia

  pcic0 at isa0 port 0x3e0/2 iomem 0xd/16384
  pcic0 controller 0: Intel 82365SL rev 1 has sockets A and B
  pcmcia0 at pcic0 controller 0 socket 0
  pcmcia1 at pcic0 controller 0 socket 1
  pcic0: irq 3, polling enabled

  This appears to be fully functional.

cardbus

  cbb0 at pci1 dev 2 function 0 Ricoh 5C476 CardBus rev 0x80: couldn't map 
interrupt
  cbb1 at pci1 dev 2 function 1 Ricoh 5C476 CardBus rev 0x80: couldn't map 
interrupt

  Since I didn't see any not configured messages for cbb*, my guess is
  that this is at least partly functional; is that correct?  What
  limitations does the couldn't map interrupt message imply for WiFi
  or modem use?  (There don't seem to be any BIOS options which affect
  this.)

USB

  uhci0 at pci0 dev 31 function 2 Intel 82801BA USB rev 0x03: irq 9
  uhci1 at pci0 dev 31 function 4 Intel 82801BA USB rev 0x03: irq 11
  usb0 at uhci0: USB revision 1.0
  uhub0 at usb0 Intel UHCI root hub rev 1.00/1.00 addr 1
  usb1 at uhci1: USB revision 1.0
  uhub1 at usb1 Intel UHCI root hub rev 1.00/1.00 addr 1

  Most of the man pages for USB 802.11 drivers mention USB 2.0; at least
  one specifically states that USB 1.0 is not supported.  Other than
  actually trying each one, how can I tell which of them will work with
  USB 1.0?

Thanks for any help.

Dave

OpenBSD 4.6 (GENERIC) #58: Thu Jul  9 21:24:42 MDT 2009
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel Pentium III (GenuineIntel 686-class) 696 MHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,SER,MMX,FXSR,SSE
real mem  = 333475840 (318MB)
avail mem = 313233408 (298MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 03/13/01, BIOS32 rev. 0 @ 0xfd878, SMBIOS 
rev. 2.31 @ 0xd8010 (38 entries)
bios0: vendor Phoenix Technologies LTD version R0211U0 date 03/13/01
bios0: Sony Corporation PCG-FX120(UC)
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
acpi at bios0 function 0x0 not configured
pcibios0 at bios0: rev 2.1 @ 0xfd860/0x7a0
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdf30/176 (9 entries)
pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82371FB ISA rev 0x00)
pcibios0: PCI bus #3 is the last bus
bios0: ROM list: 0xc/0xc000 0xd8000/0x4000! 0xdc000/0x4000!
cpu0 at mainbus0: (uniprocessor)
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Intel 82815 Host rev 0x11
vga1 at pci0 dev 2 function 0 Intel 82815 Video rev 0x11
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
intagp0 at vga1
agp0 at intagp0: aperture at 0xf800, size 0x400
ppb0 at pci0 dev 30 function 0 Intel 82801BAM Hub-to-PCI rev 0x03
pci1 at ppb0 bus 1
mem address conflict 0x13f0/0x1000
mem address conflict 0x13f01000/0x1000
TI TSB43AA22 FireWire rev 0x02 at pci1 dev 0 function 0 not configured
cbb0 at pci1 dev 2 function 0 Ricoh 5C476 CardBus rev 0x80: couldn't map 
interrupt
cbb1 at pci1 dev 2 function 1 Ricoh 5C476 CardBus rev 0x80: couldn't map 
interrupt
fxp0 at pci1 dev 8 function 0 Intel 82562 rev 0x03, i82562: irq 9, address 
08:00:46:14:eb:5a
inphy0 at fxp0 phy 1: i82562ET 10/100 PHY, rev. 0
ichpcib0 at pci0 dev 31 function 0 Intel 82801BAM LPC rev 0x03: 24-bit timer 
at 3579545Hz
pciide0 at pci0 dev 31 function 1 Intel 82801BAM IDE rev 0x03: DMA, channel 0 
wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: HITACHI_DK23BA-10
wd0: 16-sector PIO, LBA, 9590MB, 19640880 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 4
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: TOSHIBA, DVD-ROM SD-C2502, 1513 ATAPI 5/cdrom 
removable
cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
uhci0 at pci0 dev 31 function 2 Intel 82801BA USB rev 0x03: irq 9
ichiic0 at pci0 dev 31 function 3 Intel 82801BA SMBus rev 0x03: irq 5
iic0 at ichiic0
uhci1 at pci0 dev 

Re: Advice requested on modem WiFi for old notebook

2010-03-01 Thread Brad Tilley
On Mon, 01 Mar 2010 20:41 -0500, Dave Anderson d...@daveanderson.com
wrote:
 I've inherited an old notebook (Sony Vaio PCG-FX120) and installed
 4.6-release on it; while I haven't yet done extensive testing, most
 things (except the LoseModem, of course) seem to work (full dmesg
 below, and sent to dm...@openbsd.org).
 
 Now I want to add WiFi and a working modem to it and, based on looking
 through the dmesg and the man pages for 802.11 device drivers, there are
 a couple of issues I'd like to understand better before buying anything.
 I'd appreciate either direct answers or pointers to places which discuss
 this that I haven't found.  (I've done some searching of the mailing
 list archives, but my search-fu is not strong.)  Any general comments on
 using pcmcia vs cardbus vs USB for WiFi or a modem are also welcome.
 After I've narrowed the list of possible devices I plan to do more
 specific searching of the mailing-list archives.


USB 802.11 devices work well and are inexpensive. The man pages provide
specific brands with model numbers. apropos wireless and then man the
drivers to find one you like. I've had good experience with rum and run
based devices.

Brad


 The system has two pcmcia/cardbus slots and 2 USB ports.  What seem to
 me to be the relevant dmseg lines and the questions they raise are:
 
 pcmcia
 
   pcic0 at isa0 port 0x3e0/2 iomem 0xd/16384
   pcic0 controller 0: Intel 82365SL rev 1 has sockets A and B
   pcmcia0 at pcic0 controller 0 socket 0
   pcmcia1 at pcic0 controller 0 socket 1
   pcic0: irq 3, polling enabled
 
   This appears to be fully functional.
 
 cardbus
 
   cbb0 at pci1 dev 2 function 0 Ricoh 5C476 CardBus rev 0x80: couldn't
   map interrupt
   cbb1 at pci1 dev 2 function 1 Ricoh 5C476 CardBus rev 0x80: couldn't
   map interrupt
 
   Since I didn't see any not configured messages for cbb*, my guess is
   that this is at least partly functional; is that correct?  What
   limitations does the couldn't map interrupt message imply for WiFi
   or modem use?  (There don't seem to be any BIOS options which affect
   this.)
 
 USB
 
   uhci0 at pci0 dev 31 function 2 Intel 82801BA USB rev 0x03: irq 9
   uhci1 at pci0 dev 31 function 4 Intel 82801BA USB rev 0x03: irq 11
   usb0 at uhci0: USB revision 1.0
   uhub0 at usb0 Intel UHCI root hub rev 1.00/1.00 addr 1
   usb1 at uhci1: USB revision 1.0
   uhub1 at usb1 Intel UHCI root hub rev 1.00/1.00 addr 1
 
   Most of the man pages for USB 802.11 drivers mention USB 2.0; at least
   one specifically states that USB 1.0 is not supported.  Other than
   actually trying each one, how can I tell which of them will work with
   USB 1.0?
 
 Thanks for any help.
 
   Dave
 
 OpenBSD 4.6 (GENERIC) #58: Thu Jul  9 21:24:42 MDT 2009
 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
 cpu0: Intel Pentium III (GenuineIntel 686-class) 696 MHz
 cpu0:
 FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,SER,MMX,FXSR,SSE
 real mem  = 333475840 (318MB)
 avail mem = 313233408 (298MB)
 mainbus0 at root
 bios0 at mainbus0: AT/286+ BIOS, date 03/13/01, BIOS32 rev. 0 @ 0xfd878,
 SMBIOS rev. 2.31 @ 0xd8010 (38 entries)
 bios0: vendor Phoenix Technologies LTD version R0211U0 date 03/13/01
 bios0: Sony Corporation PCG-FX120(UC)
 apm0 at bios0: Power Management spec V1.2
 apm0: AC on, battery charge unknown
 acpi at bios0 function 0x0 not configured
 pcibios0 at bios0: rev 2.1 @ 0xfd860/0x7a0
 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdf30/176 (9 entries)
 pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82371FB ISA rev 0x00)
 pcibios0: PCI bus #3 is the last bus
 bios0: ROM list: 0xc/0xc000 0xd8000/0x4000! 0xdc000/0x4000!
 cpu0 at mainbus0: (uniprocessor)
 pci0 at mainbus0 bus 0: configuration mode 1 (bios)
 pchb0 at pci0 dev 0 function 0 Intel 82815 Host rev 0x11
 vga1 at pci0 dev 2 function 0 Intel 82815 Video rev 0x11
 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
 wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
 intagp0 at vga1
 agp0 at intagp0: aperture at 0xf800, size 0x400
 ppb0 at pci0 dev 30 function 0 Intel 82801BAM Hub-to-PCI rev 0x03
 pci1 at ppb0 bus 1
 mem address conflict 0x13f0/0x1000
 mem address conflict 0x13f01000/0x1000
 TI TSB43AA22 FireWire rev 0x02 at pci1 dev 0 function 0 not configured
 cbb0 at pci1 dev 2 function 0 Ricoh 5C476 CardBus rev 0x80: couldn't
 map interrupt
 cbb1 at pci1 dev 2 function 1 Ricoh 5C476 CardBus rev 0x80: couldn't
 map interrupt
 fxp0 at pci1 dev 8 function 0 Intel 82562 rev 0x03, i82562: irq 9,
 address 08:00:46:14:eb:5a
 inphy0 at fxp0 phy 1: i82562ET 10/100 PHY, rev. 0
 ichpcib0 at pci0 dev 31 function 0 Intel 82801BAM LPC rev 0x03: 24-bit
 timer at 3579545Hz
 pciide0 at pci0 dev 31 function 1 Intel 82801BAM IDE rev 0x03: DMA,
 channel 0 wired to compatibility, channel 1 wired to compatibility
 wd0 at pciide0 channel 0 drive 0: HITACHI_DK23BA-10
 wd0: 16-sector PIO, LBA, 9590MB, 19640880 sectors
 wd0(pciide0:0:0): using 

Re: Softraid and hardrive specs.

2010-03-01 Thread x03
Hi,
Thanks for your help m...@.

Have way to check each hard drive performance?
I didn't installed nothing about raid related in the install. So is not
possible without halting the system
install a raid 1 or raid 0 right?

I'm dumping the fs with dump (/sbin/dump -0 -au -f - /dev/rsd0a), if the
currently disk
stop working I can restore it in raid partition right?

Do I need enable something in kernel to have raid 0 or 1 working in 4.6
GENERIC ?
Is is possible, can someone point me a good procedure documentation to
do this non-reboot or with
reboot raid 1 ?


Tks a lot.


Nick Holland wrote:
 x03 wrote:
 Hi misc@ ,

 I have installed 4.6-stable in sd0.
 The partition structure and hd specs are this:
 ...

 OK, the first thing strange here is the rpm value (3600).
 This SCSI disk have 15k rpm. How can I fix this? Or I have some hardware
 error?

 http://www.openbsd.org/faq/faq14.html#disklabel
 fourth paragraph.  don't, no, don't sweat it.

 ...
 This one seems to have the correct rpm value. (this hd is 10k rpm
 actually).
 My question is, can i have software based raid0 with two different rpm
 values (the rest specs are the same)  ?

 of course.

 If yes, can I do that with machine running and remotely?

 yes, but I think the question you were trying to ask is more
 complicated than this.

 If you are asking if you can retrofit softraid on a system that was
 not set up with it originally, no (well, yes, but if you have to ask
 how, no.  It involves free space and careful planning and backup and
 restore.)



Re: Sun Fire 880 phantom disks

2010-03-01 Thread mehma sarja
That's spare change. If you change the 'm' to a 'r', then you can have mine.

Mehma
===

On Mon, Mar 1, 2010 at 3:25 PM, Kenneth R Westerback kwesterb...@rogers.com
 wrote:

 On Mon, Mar 01, 2010 at 10:58:31PM +0100, Pete Vickers wrote:
  Hi,
 
  The 880 is stock from Sun. I've done no hardware plumbing on it.
 
  According to
 http://docs.sun.com/app/docs/doc/806-7338-10/6jg7hm79b?a=view
 
  You can use multipathing software to switch I/O operations from one I/O
 controller to another to prepare for DR operations. With a combination of DR
 and multipathing software, you can remove, replace, or deactivate a PCI
 controller card with no interruption to system operation. Note that this
 requires redundant hardware; that is, the system must contain an alternate
 I/O controller that is connected to the same device(s) as the card being
 removed or replaced
 
  So the disk bus is connected to two controllers for redundancy, and
 Solaris obviously deals with this accordingly. I guess I should config a
 controller away to stop OpenBSD seeing it ? In the longer term perhaps
 OpenBSD scsi layer could examine disk serial numbers, and avoid assigning
 device IDs to subsequent disks with the same serial number ?

 OpenBSD already has the beginning of multi-path support, but it is
 early days. man mpath(4) on -current. But at the moment if the box is
 configured to allow both ports to see all the disks then you will
 have to take manual action of some kind to suppress the 2nd set.

  Ken

 
 
  {2} ok devalias
  cdrom/p...@8,70/s...@1/d...@6,0:f
  tape /p...@8,70/s...@1/t...@4,0
  scsix/p...@8,70/s...@1
  disk /p...@8,60/SUNW,q...@2/f...@0,0/d...@0,0
  disk0/p...@8,60/SUNW,q...@2/f...@0,0/d...@0,0
  disk1/p...@8,60/SUNW,q...@2/f...@0,0/d...@1,0
  disk2/p...@8,60/SUNW,q...@2/f...@0,0/d...@2,0
  disk3/p...@8,60/SUNW,q...@2/f...@0,0/d...@3,0
  disk4/p...@8,60/SUNW,q...@2/f...@0,0/d...@4,0
  disk5/p...@8,60/SUNW,q...@2/f...@0,0/d...@5,0
  disk6/p...@8,60/SUNW,q...@2/f...@0,0/d...@8,0
  disk7/p...@8,60/SUNW,q...@2/f...@0,0/d...@9,0
  disk8/p...@8,60/SUNW,q...@2/f...@0,0/d...@a,0
  disk9/p...@8,60/SUNW,q...@2/f...@0,0/d...@b,0
  disk10   /p...@8,60/SUNW,q...@2/f...@0,0/d...@c,0
  disk11   /p...@8,60/SUNW,q...@2/f...@0,0/d...@d,0
  scsi /p...@8,60/SUNW,q...@2
  net  /p...@9,70/netw...@1,1
  gem  /p...@8,60/netw...@1
  flash/p...@9,70/e...@1/flashp...@0,0
  idprom   /p...@9,70/e...@1/i...@1,500030/idp...@0,a0
  nvram/p...@9,70/e...@1/i...@1,500030/nv...@0,a0
  i2c3 /p...@9,70/e...@1/i...@1,500030
  i2c2 /p...@9,70/e...@1/i...@1,50002e
  bbc1 /p...@9,70/e...@1/b...@1,50
  i2c1 /p...@9,70/e...@1/i...@1,30
  i2c0 /p...@9,70/e...@1/i...@1,2e
  bbc0 /p...@9,70/e...@1/b...@1,0
  rsc-console  /p...@9,70/e...@1/rsc-cons...@1,3083f8
  rsc-control  /p...@9,70/e...@1/rsc-cont...@1,3062f8
  ttyb /p...@9,70/e...@1/ser...@1,40:b
  ttya /p...@9,70/e...@1/ser...@1,40:a
  pci9b/p...@9,70
  pci9a/p...@9,60
  pci8b/p...@8,70
  pci8a/p...@8,60
  ebus /p...@9,70/e...@1
  name aliases
 
 
 
 
  /Pete
 
 
 
 
  On 1. mars 2010, at 19.40, Kenneth R Westerback wrote:
 
   On Mon, Mar 01, 2010 at 03:56:22PM +0100, Pete Vickers wrote:
   Hei,
  
  
   Upon booting either 4.6-RELEASE or 4.7-BETA on my SunFire 880 causes
 the
   kernel it to 'see' twice the correct number of physical disk. Further
 if I
   install the o/s  using bsd.rd on to sd0, then upon reboot the kernel
 can't
   find the root disk. However if I install on sd12 then booting etc is
 fine.
  
   the machine has physically 12 disks (36GB FC-AL), which appear to be
   duplicated as sd0-sd11 and sd12-23.
  
   Do you have the disk in a loop that includes both ports on the 2200?
 That
   could explain why the disks are seen twice. And I believe only one WWN
   is saved from the boot so if it sees the same disk on the other port
   it may be lost.
  
    Ken
  
  
  
   r...@sf880 ~sysctl hw.disknames
  
 hw.disknames=cd0,sd0,sd1,sd2,sd3,sd4,sd5,sd6,sd7,sd8,sd9,sd10,sd11,sd12,sd13,
   sd14,sd15,sd16,sd17,sd18,sd19,sd20,sd21,sd22,sd23
  
  
  
   compare disk serial numbers :
  
   r...@sf880 ~bioctl  sd0
   

Re: Advice requested on modem WiFi for old notebook

2010-03-01 Thread Brynet
Dave wrote:
   Since I didn't see any not configured messages for cbb*, my guess is
   that this is at least partly functional; is that correct?  What
   limitations does the couldn't map interrupt message imply for WiFi
   or modem use?  (There don't seem to be any BIOS options which affect
   this.)

Interrupts are important, it won't be very useful without them.. not
even partly.

Maybe you can try using acpi? by disabling apm in UKC or via config(8)?

Seems a lot of people are experiencing issues with CardBus on some
laptops, have seen various CardBus disabled messages in dmesg's lately.

-Bryan.



Re: Softraid and hardrive specs.

2010-03-01 Thread Nick Holland
x03 wrote:
 Hi,
 Thanks for your help m...@.
 
 Have way to check each hard drive performance?

take what you are interested in doing.  Set it up in a batch (non-
interactive) script.  Use the time command to measure how long that
script runs.  Repeat for each configuration.

Or do what most people do... argue about untested, incompletely
considered bits of wisdom that may or may not apply to the
situation at hand. :)

 I didn't installed nothing about raid related in the install. So is not
 possible without halting the system
 install a raid 1 or raid 0 right?

man softraid
man bioctl

In general, for an install, you will have a root partition, a swap
partition, anything else you don't want in RAID, then a softraid
partition.  You will boot your install kernel, drop to shell,
create those partitions, set up the softraid device with bioctl, then
run the installer and install the OS on your primary and softraid
drives.

Set up altroot (man daily) to have your root partition duped to the
second drive on a nightly basis, so the system can come back up in
degraded mode if need be (which IS the point of RAID, right?)

 I'm dumping the fs with dump (/sbin/dump -0 -au -f - /dev/rsd0a), if the
 currently disk
 stop working I can restore it in raid partition right?

No (important concept here!), you don't restore it into a RAID partition,
you will restore it to partitions on a virtual drive made up of RAID
partitions.  (ok, I'm getting picky here).

Just grab a couple old disks and an old computer and play with it, it
will become very clear quickly.

 Do I need enable something in kernel to have raid 0 or 1 working in 4.6
 GENERIC ?

softraid is in GENERIC and the RAMDISK kernels, no special work needed.

 Is is possible, can someone point me a good procedure documentation to
 do this non-reboot or with
 reboot raid 1 ?

There is a FAQ article well on the way...but not this week. :)

Your saying non-reboot implies to me that you have a system set up
already that you want to implement softraid on.  Not going to
happen at this time, unless you left a lot of unused space on your
disk (which is possible, but there are very few people who stick a
500G disk in a machine and don't allocate every last GB, no mater how
many times I say BAD IDEA).  Even then, you will be rebooting to
find out if you did everything right. :)

Nick.



Re: Advice requested on modem WiFi for old notebook

2010-03-01 Thread Dave Anderson
On Mon, 1 Mar 2010, Brad Tilley wrote:

On Mon, 01 Mar 2010 20:41 -0500, Dave Anderson d...@daveanderson.com
wrote:
 I've inherited an old notebook (Sony Vaio PCG-FX120) and installed
 4.6-release on it; while I haven't yet done extensive testing, most
 things (except the LoseModem, of course) seem to work (full dmesg
 below, and sent to dm...@openbsd.org).

 Now I want to add WiFi and a working modem to it and, based on looking
 through the dmesg and the man pages for 802.11 device drivers, there are
 a couple of issues I'd like to understand better before buying anything.
 I'd appreciate either direct answers or pointers to places which discuss
 this that I haven't found.  (I've done some searching of the mailing
 list archives, but my search-fu is not strong.)  Any general comments on
 using pcmcia vs cardbus vs USB for WiFi or a modem are also welcome.
 After I've narrowed the list of possible devices I plan to do more
 specific searching of the mailing-list archives.

USB 802.11 devices work well and are inexpensive. The man pages provide
specific brands with model numbers. apropos wireless and then man the
drivers to find one you like. I've had good experience with rum and run
based devices.

But do they work with USB 1.0, since that's the only USB I've got on
this system?  Most of the man pages say they support USB 2.0 (both rum
and run do), though only one or two specifically state that 1.0 won't
work.

Thanks,

Dave

 The system has two pcmcia/cardbus slots and 2 USB ports.  What seem to
 me to be the relevant dmseg lines and the questions they raise are:

 pcmcia

   pcic0 at isa0 port 0x3e0/2 iomem 0xd/16384
   pcic0 controller 0: Intel 82365SL rev 1 has sockets A and B
   pcmcia0 at pcic0 controller 0 socket 0
   pcmcia1 at pcic0 controller 0 socket 1
   pcic0: irq 3, polling enabled

   This appears to be fully functional.

 cardbus

   cbb0 at pci1 dev 2 function 0 Ricoh 5C476 CardBus rev 0x80: couldn't
   map interrupt
   cbb1 at pci1 dev 2 function 1 Ricoh 5C476 CardBus rev 0x80: couldn't
   map interrupt

   Since I didn't see any not configured messages for cbb*, my guess is
   that this is at least partly functional; is that correct?  What
   limitations does the couldn't map interrupt message imply for WiFi
   or modem use?  (There don't seem to be any BIOS options which affect
   this.)

 USB

   uhci0 at pci0 dev 31 function 2 Intel 82801BA USB rev 0x03: irq 9
   uhci1 at pci0 dev 31 function 4 Intel 82801BA USB rev 0x03: irq 11
   usb0 at uhci0: USB revision 1.0
   uhub0 at usb0 Intel UHCI root hub rev 1.00/1.00 addr 1
   usb1 at uhci1: USB revision 1.0
   uhub1 at usb1 Intel UHCI root hub rev 1.00/1.00 addr 1

   Most of the man pages for USB 802.11 drivers mention USB 2.0; at least
   one specifically states that USB 1.0 is not supported.  Other than
   actually trying each one, how can I tell which of them will work with
   USB 1.0?

 Thanks for any help.

  Dave

 OpenBSD 4.6 (GENERIC) #58: Thu Jul  9 21:24:42 MDT 2009
 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
 cpu0: Intel Pentium III (GenuineIntel 686-class) 696 MHz
 cpu0:
 FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,SER,MMX,FXSR,SSE
 real mem  = 333475840 (318MB)
 avail mem = 313233408 (298MB)
 mainbus0 at root
 bios0 at mainbus0: AT/286+ BIOS, date 03/13/01, BIOS32 rev. 0 @ 0xfd878,
 SMBIOS rev. 2.31 @ 0xd8010 (38 entries)
 bios0: vendor Phoenix Technologies LTD version R0211U0 date 03/13/01
 bios0: Sony Corporation PCG-FX120(UC)
 apm0 at bios0: Power Management spec V1.2
 apm0: AC on, battery charge unknown
 acpi at bios0 function 0x0 not configured
 pcibios0 at bios0: rev 2.1 @ 0xfd860/0x7a0
 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdf30/176 (9 entries)
 pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82371FB ISA rev 0x00)
 pcibios0: PCI bus #3 is the last bus
 bios0: ROM list: 0xc/0xc000 0xd8000/0x4000! 0xdc000/0x4000!
 cpu0 at mainbus0: (uniprocessor)
 pci0 at mainbus0 bus 0: configuration mode 1 (bios)
 pchb0 at pci0 dev 0 function 0 Intel 82815 Host rev 0x11
 vga1 at pci0 dev 2 function 0 Intel 82815 Video rev 0x11
 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
 wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
 intagp0 at vga1
 agp0 at intagp0: aperture at 0xf800, size 0x400
 ppb0 at pci0 dev 30 function 0 Intel 82801BAM Hub-to-PCI rev 0x03
 pci1 at ppb0 bus 1
 mem address conflict 0x13f0/0x1000
 mem address conflict 0x13f01000/0x1000
 TI TSB43AA22 FireWire rev 0x02 at pci1 dev 0 function 0 not configured
 cbb0 at pci1 dev 2 function 0 Ricoh 5C476 CardBus rev 0x80: couldn't
 map interrupt
 cbb1 at pci1 dev 2 function 1 Ricoh 5C476 CardBus rev 0x80: couldn't
 map interrupt
 fxp0 at pci1 dev 8 function 0 Intel 82562 rev 0x03, i82562: irq 9,
 address 08:00:46:14:eb:5a
 inphy0 at fxp0 phy 1: i82562ET 10/100 PHY, rev. 0
 ichpcib0 at pci0 dev 31 function 0 Intel 82801BAM LPC rev 0x03: 24-bit
 timer at 3579545Hz
 pciide0 

Re: Sun Fire 880 phantom disks

2010-03-01 Thread phil

Hi,

Sorry I'm wrong for setting device boot in openfirmrware, I have checked 
on old power pc, you can set more than one boot disk. On my system I can 
set 4 bootable devices no more but on your sun it probably different.


If OpenBSD as the begining of multi-path support you are ok to install 
with the both active loop on your sun. This is a really good features 
for OpenBSD but this is a really hard works to write a multi-pathing driver.


Question for Ken : with FCAL the multi-path driver use serial number of 
disk or world wide name of disk to identify a unique disk with multi-path ?
Because in Fabric mode we use world wide name and NportID ( wwn of port 
switch ).


I'am not a really good with C but I work for a long time with Fibre 
Channel storage, Ken are you interesting by some help or some test, I 
have some old hardware not used and I can install an openBSD 4.7 or 
current to do some test.


Phil

Kenneth R Westerback wrote:

On Mon, Mar 01, 2010 at 10:58:31PM +0100, Pete Vickers wrote:
  

Hi,

The 880 is stock from Sun. I've done no hardware plumbing on it.

According to http://docs.sun.com/app/docs/doc/806-7338-10/6jg7hm79b?a=view

You can use multipathing software to switch I/O operations from one I/O controller 
to another to prepare for DR operations. With a combination of DR and multipathing 
software, you can remove, replace, or deactivate a PCI controller card with no 
interruption to system operation. Note that this requires redundant hardware; that is, 
the system must contain an alternate I/O controller that is connected to the same 
device(s) as the card being removed or replaced

So the disk bus is connected to two controllers for redundancy, and Solaris 
obviously deals with this accordingly. I guess I should config a controller 
away to stop OpenBSD seeing it ? In the longer term perhaps OpenBSD scsi layer 
could examine disk serial numbers, and avoid assigning device IDs to subsequent 
disks with the same serial number ?



OpenBSD already has the beginning of multi-path support, but it is
early days. man mpath(4) on -current. But at the moment if the box is
configured to allow both ports to see all the disks then you will
have to take manual action of some kind to suppress the 2nd set.

 Ken

  

{2} ok devalias
cdrom/p...@8,70/s...@1/d...@6,0:f
tape /p...@8,70/s...@1/t...@4,0
scsix/p...@8,70/s...@1
disk /p...@8,60/SUNW,q...@2/f...@0,0/d...@0,0
disk0/p...@8,60/SUNW,q...@2/f...@0,0/d...@0,0
disk1/p...@8,60/SUNW,q...@2/f...@0,0/d...@1,0
disk2/p...@8,60/SUNW,q...@2/f...@0,0/d...@2,0
disk3/p...@8,60/SUNW,q...@2/f...@0,0/d...@3,0
disk4/p...@8,60/SUNW,q...@2/f...@0,0/d...@4,0
disk5/p...@8,60/SUNW,q...@2/f...@0,0/d...@5,0
disk6/p...@8,60/SUNW,q...@2/f...@0,0/d...@8,0
disk7/p...@8,60/SUNW,q...@2/f...@0,0/d...@9,0
disk8/p...@8,60/SUNW,q...@2/f...@0,0/d...@a,0
disk9/p...@8,60/SUNW,q...@2/f...@0,0/d...@b,0
disk10   /p...@8,60/SUNW,q...@2/f...@0,0/d...@c,0
disk11   /p...@8,60/SUNW,q...@2/f...@0,0/d...@d,0
scsi /p...@8,60/SUNW,q...@2
net  /p...@9,70/netw...@1,1
gem  /p...@8,60/netw...@1
flash/p...@9,70/e...@1/flashp...@0,0
idprom   /p...@9,70/e...@1/i...@1,500030/idp...@0,a0
nvram/p...@9,70/e...@1/i...@1,500030/nv...@0,a0
i2c3 /p...@9,70/e...@1/i...@1,500030
i2c2 /p...@9,70/e...@1/i...@1,50002e
bbc1 /p...@9,70/e...@1/b...@1,50
i2c1 /p...@9,70/e...@1/i...@1,30
i2c0 /p...@9,70/e...@1/i...@1,2e
bbc0 /p...@9,70/e...@1/b...@1,0
rsc-console  /p...@9,70/e...@1/rsc-cons...@1,3083f8
rsc-control  /p...@9,70/e...@1/rsc-cont...@1,3062f8
ttyb /p...@9,70/e...@1/ser...@1,40:b
ttya /p...@9,70/e...@1/ser...@1,40:a
pci9b/p...@9,70
pci9a/p...@9,60
pci8b/p...@8,70
pci8a/p...@8,60
ebus /p...@9,70/e...@1
name aliases




/Pete




On 1. mars 2010, at 19.40, Kenneth R Westerback wrote:



On Mon, Mar 01, 2010 at 03:56:22PM +0100, Pete Vickers wrote:
  

Hei,


Upon booting either 4.6-RELEASE or 4.7-BETA on my SunFire 880 causes the
kernel it to 'see' twice the correct number of physical disk. Further if I
install the o/s  using bsd.rd on to sd0, then upon reboot the kernel can't
find the root disk. However if I install 

Re: Advice requested on modem WiFi for old notebook

2010-03-01 Thread Dave Anderson
On Mon, 1 Mar 2010, Brynet wrote:

Dave wrote:
   Since I didn't see any not configured messages for cbb*, my guess is
   that this is at least partly functional; is that correct?  What
   limitations does the couldn't map interrupt message imply for WiFi
   or modem use?  (There don't seem to be any BIOS options which affect
   this.)

Interrupts are important, it won't be very useful without them.. not
even partly.

Interrupts are absolutely vital in many cases, but in some (much less
likely these days) they really don't matter much.  Since I'm not
familiar with the details of cardbus or WiFi adapters, I don't know how
much they matter here.  (Though I strongly suspect that you're right.)

Maybe you can try using acpi? by disabling apm in UKC or via config(8)?

Given the various mentions recently on this list, I should have thought
of trying that even though it's not (to me) an obvious connection.  I'll
give it a try.

Seems a lot of people are experiencing issues with CardBus on some
laptops, have seen various CardBus disabled messages in dmesg's lately.

Thanks,

Dave

-- 
Dave Anderson
d...@daveanderson.com



Problems with Build World

2010-03-01 Thread Ron McDowell

I'm relatively new to OpenBSD but have been working with FreeBSD for 15+
years and ATT/USL before that.

I have installed OpenBSD i386 v4.6 via a boot floppy and ftp. 
Installed the src and sys tarballs.

Rebuilt the kernel, reboot, build World, reboot.
cvs -d anon...@anoncvs3.usa.openbsd.org:/cvs up -rOPENBSD_4_6 -Pd
rebuilt kernel, reboot.
all good to this point.
make build fails with a ton of errors in the krb tree.

I'm not as worried about the actual error...I'm sure it'll be fixed
soon and I'll rebuild in a day or two...but I'm concerned about the 
current state of the system, and what 'make world' actually does.


Does 'make world' build and install in subdirectories or does it build 
everything first, then install everything? 

Is there a way to separately build everything, then install it all?  
That way I'd know that all's well before actually committing to my tree.


Thanks.



--
Ron McDowell
San Antonio TX



Congreso Nacional Internet Marketing Experts 2010 - Marzo 26 México D.F - Sponsored By Google, WSI y Congress Marketing

2010-03-01 Thread Fernanda Rivas
[IMAGE]

  Congreso Nacional iMex
  Internet Marketing Experts 2010 - MC)xico D.F.
  Sponsored By:
  WSI We Simplify the Internet - Google - Congress  Marketing
  Fecha: Viernes 26 de Marzo de 2010 - Sede: Crowne Paza Hotel de
  MC)xico

  Objetivos y beneficios
  B?QuC) puede hacer la mercadotecnia en internet por mi negocio?
  . Generar trC!fico a su sitio web o instalaciones fCsicas
  (generaciC3n de
  contactos, ventas, etc.)
  . Mejorar sus actividades promocionales en lCnea - una forma mC!s de
  llegar
  a los clientes
  . Extender el posicionamiento de su marca en nuevos mercados
  . Dar a su negocio una ventaja sobre su competencia
  . Reducir sus costos de mercadotecnia a la vez que mejora sus
  resultados

  Algunos de los temas generales a tratar
  . Tu presencia en internet
  . Posicionamiento, trC!fico objetivo y mercadotecnia online
  . Impacto de las redes sociales como estratC)gia de negocios
  . La visiC3n de Google
  . Caso de C)xito mexicano en Internet

Y muchos mC!s!

Reserve hoy su lugar y aprenda de los expertos. Cupo Limitado.
Solicite Brochure con detalles del evento respondiendo este e-mail con
sus
datos completos.
Nombre:
Empresa:
Puesto:
TelC)fono:
Ciudad:
Estado:
e-mail:
o bien ComunCquese a nuestro centro de atenciC3n telefC3nica y un
ejecutivo
de  [IMAGE]n bsp;con gusto le atenderC!.
01(33)1562-1784, (33)1201-6898 y (33)3110-6502

[IMAGE]
 /font

Este Mensaje ha sido enviado a misc@openbsd.org como usuario de Congress
 Marketing o bien un usuario le refirio para recibir este boletCn. Como
usuario de Congress  Marketing, en este acto autoriza de manera expresa
que Congress  Marketing le puede contactar vCa correo electrC3nico u
otros medios. Si usted ha recibido este mensaje por error, haga caso
omiso de el y reporte su cuenta respondiendo este correo con el subject
BAJA CM000SCRMZ. Unsubscribe to this mailing list, reply a blank message
withe the subject UNSUBSCRIBE CM000SCRMZ Tenga en cuenta que la gestiC3n
de nuestras bases de datos es de suma importancia y no es intenciC3n de
la empresa la inconformidad del receptor.



Re: Problems with Build World

2010-03-01 Thread Tomas Bodzar
What are you trying to accomplish?

If you want to follow -stable then use this
http://www.openbsd.org/stable.html  (no make world anywhere in text).
If you want your own kernel then it's not supported. You can do that,
but you are on your own. Still -current or snapshots are best way with
OpenBSD because of its stability and good job of developers.

On Tue, Mar 2, 2010 at 6:00 AM, Ron McDowell r...@fuzzwad.org wrote:
 I'm relatively new to OpenBSD but have been working with FreeBSD for 15+
 years and ATT/USL before that.

 I have installed OpenBSD i386 v4.6 via a boot floppy and ftp. Installed the
 src and sys tarballs.
 Rebuilt the kernel, reboot, build World, reboot.
 cvs -d anon...@anoncvs3.usa.openbsd.org:/cvs up -rOPENBSD_4_6 -Pd
 rebuilt kernel, reboot.
 all good to this point.
 make build fails with a ton of errors in the krb tree.

 I'm not as worried about the actual error...I'm sure it'll be fixed
 soon and I'll rebuild in a day or two...but I'm concerned about the current
 state of the system, and what 'make world' actually does.

 Does 'make world' build and install in subdirectories or does it build
 everything first, then install everything?
 Is there a way to separately build everything, then install it all? B That
 way I'd know that all's well before actually committing to my tree.

 Thanks.



 --
 Ron McDowell
 San Antonio TX





--
http://www.openbsd.org/lyrics.html