Re: HIFN 7955 Support in OpenBSD 4.6 on AMD Geode LX800 System

2010-02-18 Thread Brian A. Seklecki (CFI NOC)
On 2/18/2010 7:21 AM, Liam Farr wrote: Hi, I thought that the system might be using the built in crypto in the AMD Geode CPU instead of the HIFN and have used config -e -o bsd.new /bsd to disable glxsb (glxsb0 at pci0 dev 1 function 2 AMD Geode LX Crypto rev 0x00: RNG AES) in the kernel,

Re: HIFN 7955 Support in OpenBSD 4.6 on AMD Geode LX800 System

2010-02-18 Thread Brian A. Seklecki (CFI NOC)
On 2/18/2010 12:47 PM, Ryan Corder wrote: Essentially, on these lower-power devices, the cost of moving the data to and from the crypto card across the PCI bus negates most performance gains you would achieve trying to offload it. Right Where as on servers, these devices only offer a benefit

Re: OpenBSD Sound

2007-10-31 Thread Brian A Seklecki (Mobile)
On Wed, 2007-10-31 at 14:51 +, Tomas Bodzar wrote: And still one thing When I was try OpenBSD (I think that was 3.8),I use WindowMaker,Xmms and lots Some *BSD systems are adjusting PCM driver support to allow multiple process to open /dev/dsp / /dev/audio multiple times in-exclusively,

Re: OpenBSD 4.2 hardware recommendation

2007-11-02 Thread Brian A Seklecki (Mobile)
On Sat, 2007-11-03 at 00:20 +0300, VP wrote: Hello! I have a network with 100 users and 7 servers and current firewall need to be replaced. I want to by brand server due to company policy. Brand as in put your company name on the hardware It can be SPARC or x86. But vendors don't

Re: Custom Kernel for 4.2 upgrade

2007-11-02 Thread Brian A Seklecki (Mobile)
On Fri, 2007-11-02 at 20:21 +, Stuart Henderson wrote: On 2007/11/02 14:45, Jason Murray wrote: I have a 4.1 box that uses RAIDFrame so I need to compile a customer kernel in order to upgrade. I know this is not supported, but it has worked (minus the one gotcha) for me from 3.6 until

Re: OpenBSD 4.2 hardware recommendation

2007-11-02 Thread Brian A Seklecki (Mobile)
On Sat, 2007-11-03 at 00:42 +0300, VP wrote: It can be SPARC or x86. But vendors don't officially support OpenBSD with their hardware. We need tower server with 1 proccessor, 2 gigs of RAM, 2 SCSI disks and 2 power supply. Does anyone recommend brand server which supports For a

Re: Clamav

2007-11-05 Thread Brian A Seklecki (Mobile)
On Mon, 2007-11-05 at 10:49 -0500, Peter Fraser wrote: get updates on the virus signatures. I was going to put Well how many local patches are there? Did you try to bump the port to the version you want? Just update the Makefile distinfo and see if the patches apply cleanly. ~BAS

Re: 4.2 won't boot after fresh installation

2007-11-05 Thread Brian A Seklecki (Mobile)
Ok, just tried rebooting with your suggestion of: boot -c disable fdc* boot Actually, I had to quit instead of boot It stopped at the same place: fd0 at fdc0 drive 0: 1.44MB 80cyl, 2 head, 18 sec Enable verbose in ukc. It often shows silent probes that fail and lock the system

Re: OpenBSD isakmpd and pf vs Cisco PIX or ASA

2007-11-05 Thread Brian A Seklecki (Mobile)
On Mon, 2007-11-05 at 07:23 +0100, Martin Toft wrote: On Mon, Nov 05, 2007 at 01:29:05AM +0100, Cabillot Julien wrote: Have you try openbsd 4.2 ? PF have been really improved in this release. pf(4) has nothing to do with isakmpd(8), except as it relates to recent addition of routing tags. -

Re: PF problems

2007-11-13 Thread Brian A Seklecki (Mobile)
On Tue, 2007-11-13 at 14:17 -0200, Kleber Rocha wrote: 10.1.1.78 tries to access the ip 10.1.100.210 on port 8080, the If xl0 faces 10.1.1.0 (outside) and bge0 faces your local (inside) 10.1.100.0/24, then your pass in statement will create a state associated with inbound traffic. However, it

Re: 4.1 fresh install dc0: failed to force tx and rx to idle state

2007-11-17 Thread Brian A Seklecki (Mobile)
I have cut and pasted the output from ifconfig and dmesg below. I do have a non tulip nic I might try tomorrow. Try a -current kernel. If it occurs, obtain a backtrace / kernel core dump and post it. Possibly file a PR if it is warranted. It might not get fixed quickly, so grab an

Re: How to test if pfsync is working?

2007-12-02 Thread Brian A. Seklecki (Mobile)
On Sun, 2007-12-02 at 01:14 -0800, Jake Conk wrote: Hello, I have pfsync setup between two servers and they're connected to each The command that you're look for is: $ sudo netstat -s state | grep -A 17 pfsync pfsync: 0 packets received (IPv4) 0 packets received (IPv6)

Re: IPSEC bridge and pf

2007-12-02 Thread Brian A. Seklecki (Mobile)
On Sun, 2007-12-02 at 19:08 -0500, tim wrote: my current pf configuration and add the use of the IPSEC bridge to that set up. Just check tcpdump -vvv -n -s 192 -i pflog0. Probably pass quick proto ipencap all etc.

<    1   2   3