touchpad slight regression (snap: 20141121-20150217)

2015-02-24 Thread patrick keshishian
Hi,

I'm noticing slight annoyance with recent update from 20141121
snapshot to 20150217.

My touchpad, while two-finger scrolling (up/down) sometimes ignores
the scrolls. I have to lift my fingers and retry the gesture to initiate
the scroll.

Full Xorg.0.log at the end, but here is a diff with last snapshot's one
where I did not have this issue.

two notes:
1. Only thing different w/respect to my configuration is, I removed
   sections I used to have for usbtablet. b/c after a sleep/wake cycle
   the usbtablet would not reattach to X (requiring an X restart).
2. two entries seen in this diff with Applying InputClass ... are marked
with (**)' from config file. This is a lie. my current xorg.conf follows.

--- /tmp/a  Tue Feb 24 12:12:49 2015
+++ /tmp/b  Tue Feb 24 12:12:32 2015
@@ -6,12 +6,12 @@
 [  ]   linear framebuffer access unavailable
 [  ] (--) Using wscons driver on /dev/ttyC4 in pcvt
compatibility mode (version 3.32)
 [  ]
-[  ]er 1.16.1
-[  ]: 2014-09-21
+[  ]er 1.16.4
+[  ]: 2014-12-20
 [  ] X Protocol Version 11, Revision 0
-[  ] Build Operating System: OpenBSD 5.6 amd64
-[  ] Current Operating System: OpenBSD noir.boxsoft.com 5.6
GENERIC.MP#592 amd64
-[  ] Build Date: 18 November 2014  01:12:21AM
+[  ] Build Operating System: OpenBSD 5.7 amd64
+[  ] Current Operating System: OpenBSD noir.boxsoft.com 5.7
GENERIC.MP#856 amd64
+[  ] Build Date: 17 February 2015  12:12:30PM
 [  ]
 [  ] Current version of pixman: 0.32.6
 [  ]   Before reporting problems, check http://wiki.x.org
@@ -19,17 +19,15 @@
 [  ] Markers: (--) probed, (**) from config file, (==) default setting,
 [  ]ommand line, (!!) notice, (II) informational,
 [  ]g, (EE) error, (NI) not implemented, (??) unknown.
-[  ] (==) Log file: /var/log/Xorg.0.log, Time: Sun Nov 23
14:10:20 2014
+[  ] (==) Log file: /var/log/Xorg.0.log, Time: Thu Feb 19
11:03:10 2015
 [  ] (==) Using config file: /etc/X11/xorg.conf
 [  ] (==) Using system config directory
/usr/X11R6/share/X11/xorg.conf.d
-[  ] (==) ServerLayout Layout0
+[  ] (==) No Layout section.  Using the first Screen section.
 [  ] (==) No screen section available. Using defaults.
 [  ] (**) |--Screen Default Screen Section (0)
 [  ] (**) |   |--Monitor default monitor
 [  ] (==) No monitor specified for screen Default Screen Section.
 [  ]ault monitor configuration.
-[  ] (**) |--Input Device w_stylus
-[  ] (**) Option AllowMouseOpenFail True
 [  ] (==) Disabling SIGIO handlers for input devices
 [  ] (==) Automatically adding devices
 [  ] (==) Automatically enabling devices
@@ -48,7 +46,7 @@
 [  ] (==) ModulePath set to /usr/X11R6/lib/modules
 [  ] (II) The server relies on wscons to provide the list of
input devices.
 [  ]es become available, reconfigure wscons or disable AutoAddDevices.
-[  ] (II) Loader magic: 0x1adf0cd0a040
+[  ] (II) Loader magic: 0xd9c9eb0b6e0
 [  ] (II) Module ABI versions:
 [  ]   X.Org ANSI C Emulation: 0.4
 [  ]   X.Org Video Driver: 18.0
@@ -58,7 +56,7 @@
 [  ] (II) LoadModule: glx
 [  ] (II) Loading /usr/X11R6/lib/modules/extensions/libglx.so
 [  ] (II) Module glx: vendor=X.Org Foundation
-[  ]   compiled for 1.16.1, module version = 1.0.0
+[  ]   compiled for 1.16.4, module version = 1.0.0
 [  ]   ABI class: X.Org Server Extension, version 8.0
 [  ] (==) AIGLX enabled
 [  ] (==) Matched ati as autoconfigured driver 0
@@ -67,28 +65,21 @@
 [  ] (II) LoadModule: ati
 [  ] (II) Loading /usr/X11R6/lib/modules/drivers/ati_drv.so
 [  ] (II) Module ati: vendor=X.Org Foundation
-[  ]   compiled for 1.16.1, module version = 7.3.0
+[  ]   compiled for 1.16.4, module version = 7.3.0
 [  ]   Module class: X.Org Video Driver
 [  ]   ABI class: X.Org Video Driver, version 18.0
 [  ] (II) LoadModule: radeon
 [  ] (II) Loading /usr/X11R6/lib/modules/drivers/radeon_drv.so
 [  ] (II) Module radeon: vendor=X.Org Foundation
-[  ]   compiled for 1.16.1, module version = 7.3.0
+[  ]   compiled for 1.16.4, module version = 7.3.0
 [  ]   Module class: X.Org Video Driver
 [  ]   ABI class: X.Org Video Driver, version 18.0
 [  ] (II) LoadModule: vesa
 [  ] (II) Loading /usr/X11R6/lib/modules/drivers/vesa_drv.so
 [  ] (II) Module vesa: vendor=X.Org Foundation
-[  ]   compiled for 1.16.1, module version = 2.3.3
+[  ]   compiled for 1.16.4, module version = 2.3.3
 [  ]   Module class: X.Org Video Driver
 [  ]   ABI class: X.Org Video Driver, version 18.0
-[  ] (II) LoadModule: usbtablet
-[

Re: cpuset for OpenBSD

2015-02-24 Thread Peter Hessler
On 2015 Feb 24 (Tue) at 13:39:30 +0530 (+0530), Sai Prajeeth wrote:
:I am looking for a program that will confine certain processes to run only
:on a particular set of cpus. Is there something like 'cpuset' of FreeBSD?
:
:Thanks !
:

No, this does not exist for OpenBSD.  At this time, there is no
intention of adding such a thing.


-- 
McGowan's Madison Avenue Axiom:
If an item is advertised as under $50, you can bet it's not
$19.95.



Re: usb ehci errors in 5.6-stable

2015-02-24 Thread Evgeny Zhavoronkov
Ok. So I tried -current and situation is the same.
I can reproduce the total crash (laptop reboot) by attach/detach athn usb
wifi or playing with usb devs somehow.

On Thu, Jan 15, 2015 at 11:51 AM, Stefan Sperling s...@stsp.name wrote:

 On Thu, Jan 15, 2015 at 10:20:48AM +0400, Evgeny Zhavoronkov wrote:
  When I have these repeted messages from ehci_idone (ehci.c) some
  devices work very slow and unstable. Often Wifi is going down.
  If I try to detach any USB device during these errors I get a kernel
 crash

 Please try -current. It is close to the state of what 5.7 will be.
 It would be helpful to know if this problem has been fixed for
 you between 5.6 and 5.7 releases. Martin Pieuchot has done a lot
 of work on the USB stack over the past months.

 FWIW I'm sometimes still seeing ehci_idone spinning with my USB keyboard
 and mouse attached behind several USB hubs, but otherwise not anymore.



Re: pkg_add vs. cvs -up, and pkg_check telling me about unknown files directories

2015-02-24 Thread Marc Espie
On Sun, Feb 22, 2015 at 10:46:36PM +0900, Joel Rees wrote:
 I then tried using pkg_check to see if I could clear whatever I had
 done, and it tells me about unknown directories and files, a long list
 of files and directories which should have nothing to do with
 packages, I think, including such things as /boot, /bsd, about 30
 files in /etc, the pkg_check_out.text I produced in my /root directory
 to try to understand the output and a bunch of other stuff. It does
 not output my entire file system tree.
[...]
 Marc or anyone care to enlighten me on what the output from pkg_check
 is supposed to mean? (I'm thinking it may have something to do with
 mtree, but I'm not remembering what to look at for that.)

That part of pkg_check is not totally finished. It does check the full
fs, and remove anything it knows about (thanks to the various locate(8)dbs
and to /var/db/pkg) plus a few well known positives, but I haven't gotten
around to teaching it the few important exceptions that remain.

And also, some packages create ghost data. On my todo list to register
properly with pkgs.

You can usually use it to remove some older stuff, older gcc and perl modules
that no longer exist in base show up as a sore thumb.

I guess THAT specific functionality is mostly developer material for now.
When you already know the system well, it can be very useful.



Re: hardware support

2015-02-24 Thread Joseph Oficre
I got this with VESA driver enabled:
[  1011.000] (WW) checkDevMem: failed to open /dev/xf86 and /dev/mem
(Operation not permitted)
Check that you have set 'machdep.allowaperture=1'
in /etc/sysctl.conf and reboot your machine
refer to xf86(4) for details
[  1011.000]linear framebuffer access unavailable
[  1011.008] (--) Using wscons driver on /dev/ttyC4 in pcvt compatibility
mode (version 3.32)
[  1011.021]
X.Org X Server 1.16.4
Release Date: 2014-12-20
[  1011.021] X Protocol Version 11, Revision 0
[  1011.021] Build Operating System: OpenBSD 5.7 amd64
[  1011.021] Current Operating System: OpenBSD usf.my.domain 5.7
GENERIC.MP#858 amd64
[  1011.022] Build Date: 20 February 2015  06:16:24AM
[  1011.022]
[  1011.022] Current version of pixman: 0.32.6
[  1011.022]Before reporting problems, check http://wiki.x.org
to make sure that you have the latest version.
[  1011.022] Markers: (--) probed, (**) from config file, (==) default
setting,
(++) from command line, (!!) notice, (II) informational,
(WW) warning, (EE) error, (NI) not implemented, (??) unknown.
[  1011.022] (==) Log file: /var/log/Xorg.0.log, Time: Tue Feb 24
05:14:41 2015
[  1011.022] (==) Using config file: /etc/X11/xorg.conf
[  1011.022] (==) Using system config directory
/usr/X11R6/share/X11/xorg.conf.d
[  1011.022] (==) ServerLayout X.org Configured
[  1011.022] (**) |--Screen Screen0 (0)
[  1011.022] (**) |   |--Monitor Monitor0
[  1011.022] (**) |   |--Device Card0
[  1011.022] (**) |--Input Device Mouse0
[  1011.022] (**) |--Input Device Keyboard0
[  1011.022] (==) Disabling SIGIO handlers for input devices
[  1011.022] (==) Automatically adding devices
[  1011.022] (==) Automatically enabling devices
[  1011.022] (==) Not automatically adding GPU devices
[  1011.022] (**) FontPath set to:
/usr/X11R6/lib/X11/fonts/misc/,
/usr/X11R6/lib/X11/fonts/TTF/,
/usr/X11R6/lib/X11/fonts/OTF/,
/usr/X11R6/lib/X11/fonts/Type1/,
/usr/X11R6/lib/X11/fonts/100dpi/,
/usr/X11R6/lib/X11/fonts/75dpi/,
/usr/X11R6/lib/X11/fonts/misc/,
/usr/X11R6/lib/X11/fonts/TTF/,
/usr/X11R6/lib/X11/fonts/OTF/,
/usr/X11R6/lib/X11/fonts/Type1/,
/usr/X11R6/lib/X11/fonts/100dpi/,
/usr/X11R6/lib/X11/fonts/75dpi/
[  1011.022] (**) ModulePath set to /usr/X11R6/lib/modules
[  1011.022] (WW) Hotplugging is on, devices using drivers 'kbd', 'mouse'
or 'vmmouse' will be disabled.
[  1011.022] (WW) Disabling Mouse0
[  1011.022] (WW) Disabling Keyboard0
[  1011.022] (II) Loader magic: 0x10928860b6e0
[  1011.022] (II) Module ABI versions:
[  1011.022]X.Org ANSI C Emulation: 0.4
[  1011.022]X.Org Video Driver: 18.0
[  1011.022]X.Org XInput driver : 21.0
[  1011.022]X.Org Server Extension : 8.0
[  1011.022] (--) PCI:*(0:1:0:0) 10de:0fc6:1043:8427 rev 161, Mem @
0xf600/16777216, 0xe000/268435456, 0xf000/33554432, I/O @
0xe000/128
[  1011.022] (II) glx will be loaded. This was enabled by default and
also specified in the config file.
[  1011.022] (II) LoadModule: glx
[  1011.023] (II) Loading /usr/X11R6/lib/modules/extensions/libglx.so
[  1011.028] (II) Module glx: vendor=X.Org Foundation
[  1011.028]compiled for 1.16.4, module version = 1.0.0
[  1011.028]ABI class: X.Org Server Extension, version 8.0
[  1011.028] (==) AIGLX enabled
[  1011.028] (II) LoadModule: vesa
[  1011.028] (II) Loading /usr/X11R6/lib/modules/drivers/vesa_drv.so
[  1011.028] (II) Module vesa: vendor=X.Org Foundation
[  1011.028]compiled for 1.16.4, module version = 2.3.3
[  1011.028]Module class: X.Org Video Driver
[  1011.028]ABI class: X.Org Video Driver, version 18.0
[  1011.028] (II) VESA: driver for VESA chipsets: vesa
[  1011.028] (II) Loading sub module vbe
[  1011.028] (II) LoadModule: vbe
[  1011.029] (II) Loading /usr/X11R6/lib/modules/libvbe.so
[  1011.029] (II) Module vbe: vendor=X.Org Foundation
[  1011.029]compiled for 1.16.4, module version = 1.1.0
[  1011.029]ABI class: X.Org Video Driver, version 18.0
[  1011.029] (II) Loading sub module int10
[  1011.029] (II) LoadModule: int10
[  1011.029] (II) Loading /usr/X11R6/lib/modules/libint10.so
[  1011.029] (II) Module int10: vendor=X.Org Foundation
[  1011.029]compiled for 1.16.4, module version = 1.0.0
[  1011.029]ABI class: X.Org Video Driver, version 18.0
[  1011.029] (II) VESA(0): initializing int10
[  1011.029] (EE) VESA(0): Cannot read int vect
[  1011.029] (II) UnloadModule: vesa
[  1011.029] (II) UnloadSubModule: int10
[  1011.029] (II) Unloading int10
[  1011.029] (II) UnloadSubModule: vbe
[  1011.029] (II) Unloading vbe
[  1011.029] (EE) Screen(s) found, but none have a usable configuration.
[  1011.029] (EE)
Fatal server error:
[  1011.029] (EE) no screens found(EE)
[  1011.030] (EE)
Please consult the The X.Org Foundation support
 at http://wiki.x.org
 for help.
[  1011.030] (EE) Please also check the log file at 

Re: ppp not found

2015-02-24 Thread Stuart Henderson
On 2015-02-23, A Y afyous...@hotmail.com wrote:
 /etc/ppp/peers/vodafone.chat provides details for a specific ISP. How do I
 know what to write for my ISP? I read about the chat script but it doesn't
 tell me any specifics that is related to my ISP. Or, maybe this is not related
 to the ISP.

The chat script mostly depends on the modem. The only line in that
example relating to the isp is the one with web.omnitel.it, you should
replace that with your provider's APN.



cpuset for OpenBSD

2015-02-24 Thread Sai Prajeeth
I am looking for a program that will confine certain processes to run only
on a particular set of cpus. Is there something like 'cpuset' of FreeBSD?

Thanks !



Re: usb ehci errors in 5.6-stable

2015-02-24 Thread Evgeny Zhavoronkov
Ok. I'll try to determine under what circumstances it always go to ddb.

On Tue, Feb 24, 2015 at 2:34 PM, Stefan Sperling s...@stsp.name wrote:

 On Tue, Feb 24, 2015 at 03:27:24PM +0400, Evgeny Zhavoronkov wrote:
  Sometime yes. But more often - no.

 Sometimes we can fix bugs without seeing ddb output. But more often - no.



Re: ppp not found

2015-02-24 Thread David Coppa
On Tue, Feb 24, 2015 at 12:21 PM, A Y afyous...@hotmail.com wrote:

 umsm0: this device is not using CDC notify message in intr pipe

By experience, you can usually ignore this warning.

Be sure that your /etc/resolv.conf contains a valid nameserver line.
Try to ping, e.g., www.google.com

Ciao
David
-- 
If you try a few times and give up, you'll never get there. But if
you keep at it... There's a lot of problems in the world which can
really be solved by applying two or three times the persistence that
other people will.
-- Stewart Nelson



Re: usb ehci errors in 5.6-stable

2015-02-24 Thread Stefan Sperling
On Tue, Feb 24, 2015 at 02:30:06PM +0400, Evgeny Zhavoronkov wrote:
 Ok. So I tried -current and situation is the same.
 I can reproduce the total crash (laptop reboot) by attach/detach athn usb
 wifi or playing with usb devs somehow.

And you don't get any ddb output when it crashes?



Re: spamd whitelist

2015-02-24 Thread Craig Skinner
On 2015-02-23 Mon 22:38 PM |, F Bax wrote:
 Thanks for the suggestion. I whitelisted the ip addresses for mta[567].
 am0.yahoodns.net ; but email from yahoo still gets bounced.
 

Email is not instant messaging.

I don't bother with whitelisting, but rather set the spamd(8) greyexp
time to 48 hours.

All those spastic mutli-ip popular free mail senders eventually pass.

Then with regular inbound mail, their shitty servers stay in spamd's
whitelist.

Don't trust SPF;- last time I looked, Google listed about 78,000 ips.
Liars. Their HR PCs, routers, web servers, tape silos, visitor lobby
Wifi zones aren't valid senders.

-- 
Good day for overcoming obstacles.  Try a steeplechase.



Re: usb ehci errors in 5.6-stable

2015-02-24 Thread Evgeny Zhavoronkov
Sometime yes. But more often - no.

On Tue, Feb 24, 2015 at 2:23 PM, Stefan Sperling s...@stsp.name wrote:

 On Tue, Feb 24, 2015 at 02:30:06PM +0400, Evgeny Zhavoronkov wrote:
  Ok. So I tried -current and situation is the same.
  I can reproduce the total crash (laptop reboot) by attach/detach athn usb
  wifi or playing with usb devs somehow.

 And you don't get any ddb output when it crashes?



Re: usb ehci errors in 5.6-stable

2015-02-24 Thread Stefan Sperling
On Tue, Feb 24, 2015 at 03:27:24PM +0400, Evgeny Zhavoronkov wrote:
 Sometime yes. But more often - no.

Sometimes we can fix bugs without seeing ddb output. But more often - no.



Re: ppp not found

2015-02-24 Thread A Y
1. While the machine is turned off.2. I inserted the USB modem in the USB 2.0
port.3. I turned the machine on.4. #dmesg
umsm0 at uhub0 port 2 configuration 1 interface 0 HUAWEI HUAWEI Mobile rev
2.00/1.02 addr 2umsm1 at uhub0 port 2 configuration 1 interface 1 HUAWEI
Technologies HUAWEI Mobile E353 Initial rev 2.00/1.02 addr 2
5. created the two following files:
# cat /etc/ppp/peers/mobinil
/dev/cuaU0debugcrtscts921600defaultroutenoauth:10.64.64.64connect
'/usr/sbin/chat -v -f /etc/ppp/peers/mobinil.chat'
# cat /etc/ppp/peers/mobinil.chat
ABORT NO CARRIERABORT NO DIALTONEABORT ERRORABORT NO ANSWERABORT
BUSYABORT Username/Password IncorrectTIMEOUT 15 ATZOK ATE1OK
ATQ0V1E1S0=0C1D2+FCLASS=0OK 'AT+CGDCONT=1,IP,mobinilweb'OK
ATDT*99***1#TIMEOUT 30CONNECT \d\c
6. # ifconfig ppp0 create  pppd file /etc/ppp/peers/mobinil
umsm0: this device is not using CDC notify message in intr pipe
What am I doing wrong?



Re: ERP

2015-02-24 Thread Romain FABBRI
Depends on what you call a good ERP.
A really simple and efficient one is dolibarr.

http://sourceforge.net/projects/dolibarr/files/


-Message d'origine-
De : owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] De la part de 
Cédric Krier
Envoyé : mardi 24 février 2015 15:21
À : Jay Patel
Cc : openbsd-misc
Objet : Re: ERP

On 24 Feb 19:31, Jay Patel wrote:
 Hi,
 
 Anyone know good ERP that works on OpenBSD? or provides solution for it.

There is Tryton [1] which is in the ports:
http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/productivity/tryton/

Disclaimer, I'm one of the developers.

[1] http://www.tryton.org/
-- 
Cédric Krier - B2CK SPRL
Email/Jabber: cedric.kr...@b2ck.com
Tel: +32 472 54 46 59
Website: http://www.b2ck.com/



Using percentages in the new queuing syntax

2015-02-24 Thread Andy Lemin
Hi,

Hopefully this is just a quick question and I'm missing something here, but it
seems that we can no longer use percentages in our PF child queues.

For example;
This:-
altq on $if_trunk bandwidth 4294Mb hfsc queue { _local, _wan }
oldqueue _local on $if_trunk bandwidth 4100Mb priority 4 hfsc(linkshare
4100Mb, upperlimit 4100Mb) { local_kernel, local_pri, local_data }
oldqueue local_kernel on $if_trunk bandwidth 1% qlimit 100 priority 7
hfsc(realtime 1%, linkshare 1%)
oldqueue local_pri on $if_trunk bandwidth 10% qlimit 100 priority 4
hfsc(realtime 10%, linkshare 10%)
oldqueue local_data on $if_trunk bandwidth 89% qlimit 100 priority 0
hfsc(linkshare 89%)
oldqueue _wan on $if_trunk bandwidth 190Mb priority 15 hfsc(linkshare
190Mb, upperlimit 190Mb) { wan_rt, wan_int, wan_pri, wan_vpn, wan_web,
wan_dflt, wan_bulk }
oldqueue wan_rt on $if_trunk bandwidth 20% priority 7 qlimit 100
hfsc(realtime(20%, 5000, 10%), linkshare 20%)
oldqueue wan_int on $if_trunk bandwidth 10% priority 5 qlimit 200
hfsc(realtime 5%, linkshare 10%)
oldqueue wan_pri on $if_trunk bandwidth 10% priority 4 qlimit 300
hfsc(realtime(15%, 2000, 5%), linkshare 10%)
oldqueue wan_vpn on $if_trunk bandwidth 30% priority 3 qlimit 300
hfsc(realtime 15%, linkshare 30%)
oldqueue wan_web on $if_trunk bandwidth 10% priority 2 qlimit 500
hfsc(realtime(10%, 3000, 5%), linkshare 10%)
oldqueue wan_dflt on $if_trunk bandwidth 15% priority 1 qlimit 100
hfsc(realtime(10%, 5000, 5%), linkshare 15%, ecn, default)
oldqueue wan_bulk on $if_trunk bandwidth 5% priority 0 qlimit 100
hfsc(linkshare 5%, upperlimit 30%, ecn, red)


Now has to be written like this:-
queue trunk_root on $if_trunk bandwidth 4294M
queue qlocal on $if_trunk parent trunk_root bandwidth 4.1G
queue local_kern on $if_trunk parent qlocal bandwidth 6M min 6M
queue local_pri on $if_trunk parent qlocal bandwidth 80M min 80M
queue local_data on $if_trunk parent qlocal bandwidth 4G min 1G
default
queue qwan on $if_trunk parent trunk_root bandwidth 190M
queue wan_rt on $if_trunk  parent qwan bandwidth 38M min 19M burst 38M
for 5000ms
queue wan_int on $if_trunk parent qwan bandwidth 19M min 9M
queue wan_pri on $if_trunk parent qwan bandwidth 19M min 10M burst 25M
for 2000ms
queue wan_vpn on $if_trunk parent qwan bandwidth 50M min 25M
queue wan_web on $if_trunk parent qwan bandwidth 19M min 10M burst 19M
for 3000ms
queue wan_dflt on $if_trunk parent qwan bandwidth 19M min 10M burst
19M for 5000ms
queue wan_bulk on $if_trunk parent qwan bandwidth 20M max 50M

It looks simpler to read and should be easier for people to get used to, but
not being able to use percentages really affects us.


We use Puppet to deploy *many* firewalls around the world, all with
different bandwidth available to them, but with nearly identical PF files. So
we deploy the PF files as a common template and each site just defines a few
simple site specific variables to define the downstream and upstream bandwidth
like this;
altq on $if_lan bandwidth 970Mb hfsc queue { lan_local, lan_wan }
queue lan_local bandwidth 880Mb priority 4 hfsc(upperlimit 881Mb) {
lan_local_kernel, lan_local_data }
queue lan_local_kernel bandwidth 1% priority 4 hfsc(realtime
1%)
queue lan_local_data bandwidth 99% priority 1 hfsc
queue lan_wan bandwidth $downstreambw priority 7 hfsc(linkshare
$downstreambw, upperlimit $downstreambw) { lan_wan_rt, lan_wan_int,
lan_wan_pri, lan_wan_vpn, lan_wan_web, lan_wan_dflt, lan_wan_bulk }
queue lan_wan_rt bandwidth 20% priority 7 qlimit 150
hfsc(realtime(40%, 2500, 20%), linkshare 20%)
queue lan_wan_int bandwidth 10% priority 5 qlimit 200
hfsc(realtime 5%, linkshare 10%)
queue lan_wan_pri bandwidth 20% priority 4 qlimit 300
hfsc(realtime 5%, linkshare 20%)
queue lan_wan_vpn bandwidth 10% priority 3 qlimit 300
hfsc(realtime 5%, linkshare 10%)
queue lan_wan_web bandwidth 20% priority 2 qlimit 500
hfsc(realtime(10%, 3000, 5%), linkshare 20%)
queue lan_wan_dflt bandwidth 10% priority 1 qlimit 100
hfsc(realtime(20%, 3000, 5%), linkshare 10%, default)
queue lan_wan_bulk bandwidth 5% priority 0 qlimit 200
hfsc(upperlimit 20%, linkshare 5%)


How can we use percentages again?

Hoping I'm just being a bit stupid..
Cheers, A



Re: spamd whitelist

2015-02-24 Thread Paul de Weerd
On Tue, Feb 24, 2015 at 12:50:52PM +, Craig Skinner wrote:
| Don't trust SPF;- last time I looked, Google listed about 78,000 ips.
| Liars. Their HR PCs, routers, web servers, tape silos, visitor lobby
| Wifi zones aren't valid senders.

Only 78000 IPs?  I think you're off by either a factor of ~3 or by ~23
orders of magnitude, depending on what you're counting as ips.

[weerd@despair] $ dig +short -t TXT _netblocks.google.com | \
tr ' ' '\n' | awk -F/ '
/ip4/ {
sum+= 2^(32-$NF)
print $0, 2^(32-$NF), IPv4 addresses
} END {
print 
print sum, total IPv4 addresses
}'
ip4:64.18.0.0/20 4096 IPv4 addresses
ip4:64.233.160.0/19 8192 IPv4 addresses
ip4:66.102.0.0/20 4096 IPv4 addresses
ip4:66.249.80.0/20 4096 IPv4 addresses
ip4:72.14.192.0/18 16384 IPv4 addresses
ip4:74.125.0.0/16 65536 IPv4 addresses
ip4:173.194.0.0/16 65536 IPv4 addresses
ip4:207.126.144.0/20 4096 IPv4 addresses
ip4:209.85.128.0/17 32768 IPv4 addresses
ip4:216.58.208.0/20 4096 IPv4 addresses
ip4:216.239.32.0/19 8192 IPv4 addresses

217088 total IPv4 addresses

It's funnier for IPv6 (_netblocks2.google.com):

ip6:2001:4860:4000::/36 4951760157141521099596496896 IPv6 addresses
ip6:2404:6800:4000::/36 4951760157141521099596496896 IPv6 addresses
ip6:2607:f8b0:4000::/36 4951760157141521099596496896 IPv6 addresses
ip6:2800:3f0:4000::/36 4951760157141521099596496896 IPv6 addresses
ip6:2a00:1450:4000::/36 4951760157141521099596496896 IPv6 addresses
ip6:2c0f:fb50:4000::/36 4951760157141521099596496896 IPv6 addresses

29710560942849126597578981376 total IPv6 addresses

Cheers,

Paul 'WEiRD' de Weerd

-- 
[++-]+++.+++[---].+++[+
+++-].++[-]+.--.[-]
 http://www.weirdnet.nl/ 



Re: ERP

2015-02-24 Thread Joachim Gwoke
Not from experience but from what I hear,
odoo from www.odoo.com formerly OpenERP works.

regards
Joachim


On 2/24/15, Jay Patel rockworl...@gmail.com wrote:
 Hi,

 Anyone know good ERP that works on OpenBSD? or provides solution for it.

 Thanks,
 Jay



Re: ERP

2015-02-24 Thread Cédric Krier
On 24 Feb 19:31, Jay Patel wrote:
 Hi,
 
 Anyone know good ERP that works on OpenBSD? or provides solution for it.

There is Tryton [1] which is in the ports:
http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/productivity/tryton/

Disclaimer, I'm one of the developers.

[1] http://www.tryton.org/
-- 
Cédric Krier - B2CK SPRL
Email/Jabber: cedric.kr...@b2ck.com
Tel: +32 472 54 46 59
Website: http://www.b2ck.com/



pflog0 showing traffic for rule with no logging requested

2015-02-24 Thread Martin Gignac
Hi,

With a fresh install of a 5.7 snapshot on amd64 (OpenBSD 5.7-beta (GENERIC)
#805: Sun Feb 22 03:09:53 MST 2015) I have noticed the following:

With this pf ruleset:

$ sudo pfctl -s r
block drop all
pass all flags S/SA
block return in on ! lo0 proto tcp from any to any port 6000:6010
block drop in log on internal-group all
pass in on internal-group inet proto udp from any to 172.28.78.11 port = 53
pass in on internal-group inet proto udp from any to 172.28.79.11 port = 53
pass in on internal-group inet proto udp from any to 172.28.79.19 port = 123
pass in on internal-group inet proto udp from any to 172.28.79.29 port = 123
pass in on internal-group inet proto tcp from 10.121.130.139 to
172.28.78.11 port = 636 flags S/SA
pass in on internal-group inet proto tcp from 10.121.130.139 to
172.28.79.11 port = 636 flags S/SA
pass in on internal-group inet proto tcp from 10.121.130.139 to
172.28.79.29 port = 25 flags S/SA
pass in on internal-group inet proto icmp from any to 10.121.130.129
icmp-type echoreq
pass in on internal-group inet proto icmp from any to 10.121.124.1
icmp-type echoreq

I get this pflog output:

$ sudo tcpdump -i pflog0 -n -e action pass
tcpdump: WARNING: snaplen raised from 116 to 160
tcpdump: listening on pflog0, link-type PFLOG
08:24:27.831052 rule 1/(match) pass in on vlan308: 10.120.108.2  224.0.0.1:
igmp query [tos 0xc0] [ttl 1]
08:26:36.645149 rule 1/(match) pass in on vlan308: 10.120.108.2  224.0.0.1:
igmp query [tos 0xc0] [ttl 1]

Two things which I don't understand:

1. Why is pflog0 showing packets for a rule (1:pass all flags S/SA) that
does not even have logging enabled?

2. If we ignore question #1, why is is pflog0 only showing the IGMP
traffic, considering that while the tcpdump was run other traffic matched
rule 1 as well and created state?

Is this the normal pflog0 behavior with regards to IGMP traffic (i.e. it's
always reported, regardless of whether or not logging was requested in a
given rule)?

Thanks!
-Martin



ERP

2015-02-24 Thread Jay Patel
Hi,

Anyone know good ERP that works on OpenBSD? or provides solution for it.

Thanks,
Jay



Re: ppp not found

2015-02-24 Thread A Y
I checked for /etc/resolv.conf and couldn't find it. So I re-installed
OpenBSD to let the installer create it.
Here is the contents of this file:
#cat /etc/resolv.conflookup file bindnameserver ipnameserver addressnameserver
list
I can create a ppp0 interface through the following command:
#ifconfig ppp0 create  pppd file /etc/ppp/peers/mobinil
However, I cannot ping to www.google.com



FW: ppp not found

2015-02-24 Thread A Y
# cat /etc/ppp/peers/mobinil
/dev/cuaU0debugcrtscts921600defaultroutenoauth:10.64.64.64connect
'/usr/sbin/chat -v -f /etc/ppp/peers/mobinil.chat'
# cat /etc/ppp/peers/mobinil.chat
ABORT NO CARRIERABORT NO DIALTONEABORT ERRORABORT NO ANSWERABORT
BUSYABORT Username/Password IncorrectTIMEOUT 15 ATZOK ATE1OK
ATQ0V1E1S0=0C1D2+FCLASS=0OK 'AT+CGDCONT=1,IP,mobinilweb'OK
ATDT*99***1#TIMEOUT 30CONNECT \d\c
# grep chat /var/log/*
# grep pppd /var/log/*/var/log/daemon:Feb 24 10:03:59 ce pppd[15103]: pppd
2.3.5 started by ce, uid 0/var/log/daemon:Feb 24 10:03:59 ce pppd[15103]:
Failed to open /dev/cuaU0: Device not configured.
# cat /etc/resolv.conf
lookup file bindnameserver 213.131.64.119nameserver 41.196.200.23nameserver
137.117.214.6nameserver ns10.link.netnameserver ns11.link.netnameserver
ns12.link.net
I got the above nameservers from the mobinil website



Re: FW: ppp not found

2015-02-24 Thread Fred

On 02/24/15 17:42, A Y wrote:

# cat /etc/ppp/peers/mobinil
/dev/cuaU0debugcrtscts921600defaultroutenoauth:10.64.64.64connect
'/usr/sbin/chat -v -f /etc/ppp/peers/mobinil.chat'
# cat /etc/ppp/peers/mobinil.chat
ABORT NO CARRIERABORT NO DIALTONEABORT ERRORABORT NO ANSWERABORT
BUSYABORT Username/Password IncorrectTIMEOUT 15 ATZOK ATE1OK
ATQ0V1E1S0=0C1D2+FCLASS=0OK 'AT+CGDCONT=1,IP,mobinilweb'OK
ATDT*99***1#TIMEOUT 30CONNECT \d\c
# grep chat /var/log/*
# grep pppd /var/log/*/var/log/daemon:Feb 24 10:03:59 ce pppd[15103]: pppd
2.3.5 started by ce, uid 0/var/log/daemon:Feb 24 10:03:59 ce pppd[15103]:
Failed to open /dev/cuaU0: Device not configured.
# cat /etc/resolv.conf
lookup file bindnameserver 213.131.64.119nameserver 41.196.200.23nameserver
137.117.214.6nameserver ns10.link.netnameserver ns11.link.netnameserver
ns12.link.net
I got the above nameservers from the mobinil website



You are getting closer - but there is information missing to help solve 
the problem which is /dev/cuaU0 failing to be opened.


What is the output of: ls -l /dev/cuaU*
and: grep com /var/log/messages

hth

Fred



Fix for ix(4) SFP+ module detection when booting without the modules plugged in. (current vs 5.6 stable)

2015-02-24 Thread Tom Smyth
Hi Lads

I saw this changelog for SFP+ drivers so that they will recognize a SFP
module when it is plugged in (rather than having to reboot the box to have
the OS pick up the new module)

Fix for ix(4) SFP+ module detection when booting without the modules
plugged in.


I was wondering if it would be possible to include this in the 5.6 Stable
as a Patch,

The reason is I would like to deploy to our production router, and I would
be worried about running 5.7 current on the production system..
I was wondering if there wasn't a significant functionality change in the
driver would it be possible to include it as patch in stable branch ?

failing that would someone  give advice about trying to back port the fix
( I hate the thought of it )

any help / advice would be appreciated.

Thanks



-- 
Kindest regards,
Tom Smyth

Mobile: +353 87 6193172
-
PLEASE CONSIDER THE ENVIRONMENT BEFORE YOU PRINT THIS E-MAIL
This email contains information which may be confidential or privileged.
The information is intended solely for the use of the individual or entity
named above.  If you are not the intended recipient, be aware that
any disclosure, copying, distribution or use of the contents of this
information is prohibited. If you have received this electronic
transmission in error, please notify me by telephone or by electronic mail
immediately. Any opinions expressed are those of the author, not the
company's  .This email does not constitute either offer or acceptance of
any contractually binding agreement. Such offer or acceptance must be
communicated in
writing. You are requested to carry out your own virus check before opening
any attachment. Thomas Smyth accepts no liability for any loss or damage
which may be caused by malicious software or attachments.



Re: Generic SFP+ recognition in Intel based Hotlava Cards Open BSD 5.6 / 5.7 beta

2015-02-24 Thread Tom Smyth
Hi guys

Couple of issues that compounded them selves  to make diagnostics
1) bad patching at provider side meant a link was impossible
2) Buggy Network Appliance running proprietary  software indicated a Link
was present (when there was not a link)  (bad Control test)

Once those were resolved  I could acquire a link no problem on either 5.6
Stable or 5.7 beta.

the Bridge address Conflicts were resolved by turning of  Bios memory
mapping for 64 bit PCI-E devices (above4GB ram)  (this feature not required
when running native 64 bit os)
I also disabled Visualization features such as IRQ mapping etc as im not
using these features anyway.


I hope this helps...


-- 
Kindest regards,
Tom Smyth

Mobile: +353 87 6193172
-
PLEASE CONSIDER THE ENVIRONMENT BEFORE YOU PRINT THIS E-MAIL
This email contains information which may be confidential or privileged.
The information is intended solely for the use of the individual or entity
named above.  If you are not the intended recipient, be aware that
any disclosure, copying, distribution or use of the contents of this
information is prohibited. If you have received this electronic
transmission in error, please notify me by telephone or by electronic mail
immediately. Any opinions expressed are those of the author, not the
company's  .This email does not constitute either offer or acceptance of
any contractually binding agreement. Such offer or acceptance must be
communicated in
writing. You are requested to carry out your own virus check before opening
any attachment. Thomas Smyth accepts no liability for any loss or damage
which may be caused by malicious software or attachments.



Re: usb ehci errors in 5.6-stable

2015-02-24 Thread Naim, Halim.
I have returned to linux because of this problem. I'm gonna read ddb's man
page. And try to gather more information. 



sndio non-blocking with kqueue

2015-02-24 Thread Sam Good
From sndio design, it looks like non-blocking (like in sio_write) can be done 
with poll.
sio_pollfd can be used to obtain the pollfd struct which contains the file 
descriptor fd.
The fd descriptor seems to be equivalent to the unix stream for the sound 
playing device.

Would it be possible to use the file descriptor fd with kqueue instead of poll?


(I wanted to adapt an application that uses kqueue for internet/TCP server 
listening, and be able to add an audio playing capability; I wanted to try to 
use kqueue for both. I also wanted to learn more about using kqueue)

I wrote a basic program that gets the sndio playing device file descriptor fd 
from sio_pollfd, and then adds that fd to the kevent with filter EVFILT_WRITE.
Then loop with kevent appears to return that the fd is ready for WRITE, and 
the kevent return data shows '4096' (available space in buffer for write)
but sio_write returns with value 0, indicating that no bytes could be written 
into
the output buffer.


Is there something different about the file descriptor for the sndio output 
device, that kqueue/kevent can't be used?

thanks.