NAT64 troubleshooting

2013-12-09 Thread dikshie
Hi, I just built an openbsd box for NAT64 gateway I can't figure out how the af-to works. here the configuration of the openbsd nat64 gateway: -- # ifconfig lo0: flags=8049 mtu 33144 priority: 0 groups: lo inet6 ::1 prefixlen 128 inet6 fe80::1%lo

Re: NPPPD

2013-12-09 Thread YASUOKA Masahiko
On Mon, 9 Dec 2013 09:38:50 +0200 (IST) Or Elimelech wrote: > I've configured nppd server and clients for Linux, Android, iOS, OSX > and Windows. This works on all platforms when routing all traffic > through VPN except for Windows clients. Usually npppd can work with Windows client without prob

Re: spamd in blacklist only modexd

2013-12-09 Thread Jason McIntyre
On Mon, Dec 09, 2013 at 10:35:36PM +0100, Maurice Janssen wrote: > On 12/09/13 08:41, Jason McIntyre wrote: > >On Sun, Dec 08, 2013 at 07:59:48PM +0100, Maurice Janssen wrote: > >>Hi, > >> > >>If I understand the man pages correctly, you should start both spamd and > >>spamd-setup with the -b optio

Re: 5.4 amd64 - Poor disk performance with Smart Array 6404

2013-12-09 Thread Steve Shockley
On 12/9/2013 7:24 PM, Adam Jensen wrote: Disk performance is *very* bad. For example: Shot in the dark, but maybe try upgrading the 6404 firmware from 2.34 to 2.84, there are a variety of fixes that possibly could have been worked around by the other OS' drivers.

5.4 amd64 - Poor disk performance with Smart Array 6404

2013-12-09 Thread Adam Jensen
I recently (last night) installed OpenBSD-5.4-amd64 on an HP-Proliant ML370-G4 that has a Smart Array 6404 controller card in a 64-bit, 133-MHz PCI-X slot. It has two Ultra320 SCSI channels and 192MB of RAM cache. One SCSI channel is connected to two 146GB U320 10kRPM drives which are configure

Re: net.inet.ip.arpqueued

2013-12-09 Thread James A. Peltier
- Original Message - | Hi, | | Would anyone be able to share some insight on this? | | | On 11/21/2013 3:44 AM, Han Hwei Woo wrote: | > Hi, | > | > I was doing some ARP troubleshooting, and noticed this sysctl | > variable, and was wondering what it is for? On our office firewall | > wit

Re: net.inet.ip.arpqueued

2013-12-09 Thread Han Hwei Woo
Hi, Would anyone be able to share some insight on this? On 11/21/2013 3:44 AM, Han Hwei Woo wrote: Hi, I was doing some ARP troubleshooting, and noticed this sysctl variable, and was wondering what it is for? On our office firewall with just 14 ARP entries, I see it's normally at 0 but on a

Re: BackupPC

2013-12-09 Thread Martin Schröder
2013/12/9 Peter N. M. Hansteen : > The only backup system I've actually ever enjoyed working with is > Bacula (in packages, and it supports a wide range of systems, > including the Seattle-area ones). More complicated than tar or rsync > for sure, but it scales and is in my experience at least a ve

Re: spamd in blacklist only mode

2013-12-09 Thread Maurice Janssen
On 12/09/13 08:41, Jason McIntyre wrote: On Sun, Dec 08, 2013 at 07:59:48PM +0100, Maurice Janssen wrote: Hi, If I understand the man pages correctly, you should start both spamd and spamd-setup with the -b option when you want to use spamd in blacklist only mode. In /etc/rc.d/spamd, the -b opt

Re: BackupPC

2013-12-09 Thread Dennis Davis
On Mon, 9 Dec 2013, Peter Fraser wrote: > From: Peter Fraser > To: "'misc@openbsd.org'" > Date: Mon, 9 Dec 2013 19:33:55 > Subject: BackupPC ... > I gather from reading the documentation that winbindd needs pam > and since OpenBSD doesn't support pam winbindd is not going to > allow authentica

Re: BackupPC

2013-12-09 Thread Peter N. M. Hansteen
Peter Fraser writes: > For years I have a had Debian system that ran BackupPC. > The system was used to back up a bunch of Windows workstations and servers. > The Debian system self-destructed when doing a update. I must admit this is the first I heard of BackupPC, but since this sounds like at

Re: dhcpd: rejecting bogus offer

2013-12-09 Thread Kenneth R Westerback
On Mon, Dec 09, 2013 at 01:25:30PM -0500, Chris Smith wrote: > What might be the implications of the following messages in the log? > > > Dec 6 15:09:39 firewall dhcpd[29710]: option option-79 (119) larger > than buffer. > Dec 6 15:09:39 firewall dhcp

BackupPC

2013-12-09 Thread Peter Fraser
For years I have a had Debian system that ran BackupPC. The system was used to back up a bunch of Windows workstations and servers. The Debian system self-destructed when doing a update. Since OpenBSD now and actually for while allows large file systems. My backup pools is about 4 Terabytes. I th

Re: NPPPD

2013-12-09 Thread Giancarlo Razzolini
Em 09-12-2013 16:34, Or Elimelech escreveu: > Giancarlo, > > Thanks for the article though it did not solve the problem, > Therefore it's not MTU issue, I'm not getting any answers from the dns server > and I also cannot ping anywhere even with IP > It's like there's a connection to the vpn but no

Re: (5.3) load problem on em(4) MSI / interrupt ?

2013-12-09 Thread Theo de Raadt
> > I don't think msi can be re-enabled for this part in OpenBSD, the > > reason it's disabled is that there is a bug in the 82571/2 chips > > (errata 63 in > > http://www.intel.co.uk/content/dam/www/public/us/en/documents/specification-updates/82571eb-82572ei-gbe-controller-spec-update.pdf) > > an

Re: NPPPD

2013-12-09 Thread Or Elimelech
Giancarlo, Thanks for the article though it did not solve the problem, Therefore it's not MTU issue, I'm not getting any answers from the dns server and I also cannot ping anywhere even with IP It's like there's a connection to the vpn but no where else. - Original Message - From: "Gianc

Re: (5.3) load problem on em(4) MSI / interrupt ?

2013-12-09 Thread Patrick Lamaiziere
Le Mon, 09 Dec 2013 12:31:04 +, Stuart Henderson a écrit : Hello, > I don't think msi can be re-enabled for this part in OpenBSD, the > reason it's disabled is that there is a bug in the 82571/2 chips > (errata 63 in > http://www.intel.co.uk/content/dam/www/public/us/en/documents/specificati

dhcpd: rejecting bogus offer

2013-12-09 Thread Chris Smith
What might be the implications of the following messages in the log? Dec 6 15:09:39 firewall dhcpd[29710]: option option-79 (119) larger than buffer. Dec 6 15:09:39 firewall dhcpd[29710]: rejecting bogus offer. Dec 9 12:15:35 firewall dhcpd[29710]:

Re: NPPPD

2013-12-09 Thread Giancarlo Razzolini
Em 09-12-2013 11:11, Or Elimelech escreveu: > npppd.conf > # Global > > ## Max sessions > set max-session 100 > > ## Max user-sessions > set user-max-session 1 > > > # Tunnel > > tunnel L2TP protocol l2tp { > listen on 192.168.38.15 > } > > > # IPCP > > ipcp IPCP { > pool-address 10

Re: loongson:automatic loading of OpenBSD:YES to 8G ssd No for 500G disk

2013-12-09 Thread ropers
On 9 December 2013 01:36, Fung wrote: > > Sorry, 163.com mail server always eat some lines , so resend email from > qq.com and add # disklabel wd0 > > Few people using loongson notebook? > Recently one Chinese organization sale this notebook about 45 $, they dump > about 1,000 notebooks in 2 mon

Re: NPPPD

2013-12-09 Thread Or Elimelech
npppd.conf # Global ## Max sessions set max-session 100 ## Max user-sessions set user-max-session 1 # Tunnel tunnel L2TP protocol l2tp { listen on 192.168.38.15 } # IPCP ipcp IPCP { pool-address 10.0.0.2-10.0.0.254 dns-servers 192.168.10.242 } # Interface interfac

Re: failure to build nginx after errata 004_nginx.patch

2013-12-09 Thread Marko Cupać
On Mon, 9 Dec 2013 13:55:13 +0100 Remco wrote: > Possible previously compiled left-overs in your object directory ? > If I'm not mistaken, cleaning out /usr/obj/ will help. rm -rf /usr/obj/* did the trick. Thanx! -- Marko Cupać

Re: failure to build nginx after errata 004_nginx.patch

2013-12-09 Thread Remco
Marko Cupa? wrote: > On three of four of my 5.4's, after applying 004_nginx.patch, > rebuilding and reinstalling nginx went fine. > > On one of them it is failing with the following message: > > objs/src/http/modules/ngx_http_ssl_module.o(.text+0xb36): In function > `ngx_http_ssl_merge_srv_conf'

Re: NPPPD

2013-12-09 Thread Giancarlo Razzolini
Em 09-12-2013 05:38, Or Elimelech escreveu: > Hi, > > I've configured nppd server and clients for Linux, Android, iOS, OSX and > Windows. > This works on all platforms when routing all traffic through VPN except for > Windows clients. > > I can connect to the vpn and I get a route for 0.0.0.0

Re: ipv6 static routing

2013-12-09 Thread Giancarlo Razzolini
Em 08-12-2013 23:50, dikshie escreveu: > sure, i'll check with tcpdump after working/business hour. -dikshie- You could enforce v4 traffic going through the v4 gateway and v6 traffic going through the v6 gateway, using pf and route-to. This way you can assure that the right protocol is going throu

Re: (5.3) load problem on em(4) MSI / interrupt ?

2013-12-09 Thread Stuart Henderson
I don't think msi can be re-enabled for this part in OpenBSD, the reason it's disabled is that there is a bug in the 82571/2 chips (errata 63 in http://www.intel.co.uk/content/dam/www/public/us/en/documents/specification-updates/82571eb-82572ei-gbe-controller-spec-update.pdf) and the symptom in

failure to build nginx after errata 004_nginx.patch

2013-12-09 Thread Marko Cupać
On three of four of my 5.4's, after applying 004_nginx.patch, rebuilding and reinstalling nginx went fine. On one of them it is failing with the following message: objs/src/http/modules/ngx_http_ssl_module.o(.text+0xb36): In function `ngx_http_ssl_merge_srv_conf': src/http/modules/ngx_http_ssl_mo

Re: loongson:automatic loading of OpenBSD:YES to 8G ssd No for 500Gdisk

2013-12-09 Thread Fung
PMON> vers PMON: PMON2000 2.1 (Bonito) #14: Tue May 18 10:33:47 CST 2010 RE: Does the system boot if you press `enter' when the system is apparently hung with the splash screen still displayed? NO! Press Enter ,nothing happened > 1)when power up the notebook, system will hung in the splash screen

Re: (5.3) load problem on em(4) MSI / interrupt ?

2013-12-09 Thread Patrick Lamaiziere
Le Tue, 1 Oct 2013 08:37:09 + (UTC), Stuart Henderson a écrit : Hello, > On 2013-10-01, Patrick Lamaiziere wrote: > > Hello, > > > > With OpenBSD 5.3, our firewall does not handle our network load > > well. We loose around 5% of packets and netstat shows a lot of Ierr. > > > > That worked m