Re: SBE wanPMC-xT3E3 support

2005-08-31 Thread Toni Mueller
Hi, On Mon, 22.08.2005 at 12:16:19 -0700, andrew fresh [EMAIL PROTECTED] wrote: Is there another T3 card that is supported by OpenBSD? I have exactly the same problem, but think about using media converters instead, speaking E3-something on the WAN side, and Ethernet on the LAN side. When I

-current: problem with PPP

2005-08-31 Thread Toni Mueller
Hello, I have a box running -current as of 27.8. and experience the following problem: On PPPoE, apparently no keep-alives (LCP echo requests + answers) get send or received. Therefore, the connection gets reset by the (Cisco) peer. While it is possible to deactivate PPP keepalives on the Cisco,

Re: -current: problem with PPP (partially solved)

2005-08-31 Thread Toni Mueller
Hello, On Wed, 31.08.2005 at 11:50:34 +0200, Toni Mueller [EMAIL PROTECTED] wrote: problem: On PPPoE, apparently no keep-alives (LCP echo requests + answers) get send or received. Therefore, the connection gets reset by digging the man page and upping the logging noise revealed that LCP echo

Re: ftp-proxy and TLS

2005-09-01 Thread Toni Mueller
Hi, On Fri, 19.08.2005 at 12:41:20 +0200, Henning Brauer [EMAIL PROTECTED] wrote: ftp-proxy does not support TLS. ok. moreover, when you think about it, ftp w/TLS encrypts the control channel, it's the entire point that 3rd parties (like ftp-proxy) can't see or modify what's gpoing on, so

Re: OpenBSD with IBM ServeRaid Card

2005-09-01 Thread Toni Mueller
Hello, On Sat, 20.08.2005 at 11:54:27 +0800, range [EMAIL PROTECTED] wrote: I plan to buy IBM XSeries Server, short answer: Don't, but tell your IBM rep the machine count and the reason, too. But I can't see any IBM ServeRaid card (SCSI) in OpenBSD support list, (

Re: SBE wanPMC-xT3E3 support

2005-09-01 Thread Toni Mueller
Hi Aaron, On Wed, 31.08.2005 at 09:28:01 -0700, Aaron Glenn [EMAIL PROTECTED] wrote: Allied Telesyn makes a DS3 to Ethernet converter box that's about US$800 each. They work as advertised, but management wise are pretty clunky. thanks for the suggestion. I'm also looking into other units and

Re: ftp-proxy and TLS

2005-09-01 Thread Toni Mueller
Hi, On Thu, 01.09.2005 at 19:29:57 +0200, Markus Wernig [EMAIL PROTECTED] wrote: Squid is different. Usually, it doesn't do SSL itself, but just passes the connection on. it does, however, talk SSL to the outside server. You might be able to code around that by terminating two distinct

Re: OpenBSD with IBM ServeRaid Card

2005-09-01 Thread Toni Mueller
Hi, On Thu, 01.09.2005 at 13:15:54 -0400, Michael Shalayeff [EMAIL PROTECTED] wrote: we do not want their driver. i betcha it'd be a piece of goo size of minneapolis and we would not be able to maintain it ever since... well, I didn't ask them to write a driver, but asked for docs to be able

Re: ftp-proxy and TLS

2005-09-02 Thread Toni Mueller
Hi, On Fri, 02.09.2005 at 00:26:36 +0200, Markus Wernig [EMAIL PROTECTED] wrote: [...] I am also a bit undecided about the usefulness | of such devices. Erm ... wasn't it you to suggest that the control channel could be used to break end-to-end encryption into two pieces, originating or

Re: OpenBSD with IBM ServeRaid Card

2005-09-03 Thread Toni Mueller
Sorry, On Fri, 02.09.2005 at 10:58:57 -0400, Michael Shalayeff [EMAIL PROTECTED] wrote: i know. i can't read: ... futhermore nowhere in your email you even mention docs... my bad - obviously I can't _write_. But anyway, I've written about this stuff on this list several times before, and

Re: BGP peering, 2 peers, hardware reqirements questions

2005-09-17 Thread Toni Mueller
Hi, On Fri, 16.09.2005 at 14:49:18 +0100, tony sarendal [EMAIL PROTECTED] wrote: Your own as, two full bgp feeds and just let bgp decide path. Loadsharing is usually pretty good, this depends *very*much* to whom you are connected, and how. Please remember that one of the main points in BGP is

3.7: INVALID PAYLOAD TYPE

2005-09-22 Thread Toni Mueller
Hello, I have three machines: one 3.7, one 3.6, and one Windows 2000 laptop. The client software on the laptop is this: ftp://ftp.funkwerk-ec.com/pub/ipsec_client/bintec_secure_client_v11.zip aka NCP Secure Entry which usually runs very nicely. The two OpenBSD machines are configured

Re: SUN Fire x2200, anyone?

2007-07-15 Thread Toni Mueller
Hi, On Wed, 20.06.2007 at 09:26:13 -0500, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Did you ever get the x2200? I'm looking at buying one and was wondering what experience you had with OpenBSD on it. yes, I got one, and no, no luck with it, yet. I'm about to return it as the box seems to

Re: support for Sun Fire

2007-07-16 Thread Toni Mueller
Hi Mark, On Tue, 29.05.2007 at 14:13:06 +0100, mark reardon [EMAIL PROTECTED] wrote: I just got a x2100 M2 from Sun yesterday on a 60 day trial and am having trouble setting the MTU on one of the bge NICs. Just some initial findings. Not a big problem for me really. did you get it to run

Re: support for Sun Fire

2007-07-19 Thread Toni Mueller
Hi, On Mon, 16.07.2007 at 14:25:05 -0400, Daniel Ouellet [EMAIL PROTECTED] wrote: Toni Mueller wrote: On Tue, 29.05.2007 at 14:13:06 +0100, mark reardon [EMAIL PROTECTED] wrote: I just got a x2100 M2 from Sun yesterday on a 60 day trial and am having did you get it to run OpenBSD properly

IPSEC client question

2007-07-19 Thread Toni Mueller
Hello, can anyone please share their experience you have with this IPSEC client product, working against OpenBSD? http://www.hob.de/produkte/security/vpn.jsp So far, I was unable to test it myself (lacking a working Windows box atm). TIA! Best, --Toni++

getty problem

2007-07-29 Thread Toni Mueller
Hi, I've managed to have an OpenBSD4.0 box connected to another box via serial cable, with a getty running on both ends. I killed one getty and connected to the serial port with a terminal program. But the other getty was already gone, having spawned login. Now I have two login processes and no

iBGP: losing routes after eBGP flap

2007-08-03 Thread Toni Mueller
Hi, I've got a setup on two i386 family PCs with 4.1-stable which includes the following: Internet 1 - p1 - r1 -- r2 - p2 - Internet 2 r1 and r2 have an iBGP session running, and the Internet connections go to different ISPs, running eBGP on each (r1-p1, r2-p2). I receive full

Re: iBGP: losing routes after eBGP flap

2007-08-04 Thread Toni Mueller
Hi Claudio, On Fri, 03.08.2007 at 20:57:43 +0200, Claudio Jeker [EMAIL PROTECTED] wrote: This is more or less expected. iBGP session only transmit eBGP pathes that are valid and best for the router. So on r2 you have all the iBGP routes from r1 and r2 has no reason to send something back to r1

Re: iBGP: losing routes after eBGP flap

2007-08-06 Thread Toni Mueller
Hi Ronnie, On Mon, 06.08.2007 at 00:14:17 +0200, Ronnie Garcia [EMAIL PROTECTED] wrote: I was observing this behiviour you are describing until yesterday, when i re-installed my two border routers to 4.1, then updated to 4.1-stable. hmmm... all affected machines on my side are 4.1-stable as

Re: Intel Core 2 - errata pulled?!?

2007-08-07 Thread Toni Mueller
Hi, On Wed, 27.06.2007 at 11:08:16 -0600, Theo de Raadt [EMAIL PROTECTED] wrote: http://download.intel.com/design/processor/specupdt/31327914.pdf looks like intel pulled that paper. I'm unable to find it and would like to receive a private copy. An easier summary document for some people to

Re: Intel Core 2 - errata pulled?!? [SOLVED]

2007-08-07 Thread Toni Mueller
Hi, On Tue, 07.08.2007 at 16:22:08 +0200, Toni Mueller [EMAIL PROTECTED] wrote: On Wed, 27.06.2007 at 11:08:16 -0600, Theo de Raadt [EMAIL PROTECTED] wrote: http://download.intel.com/design/processor/specupdt/31327914.pdf looks like intel pulled that paper. I'm unable to find it and would

ospfd: some machines stuck in 2-WAY/OTHER

2007-08-20 Thread Toni Mueller
Hi, in my network, I have five OSPF routers and hosts which learn their routes via OSPF, all in one area. One of the routers is a Cisco, all other affected routers and hosts are OpenBSD/i386 4.1-stable as of May 24th. The problem is that some machines establish an adjacency with some, but not all

Re: ospfd: some machines stuck in 2-WAY/OTHER

2007-08-21 Thread Toni Mueller
Hi, On Mon, 20.08.2007 at 15:15:15 +0200, Claudio Jeker [EMAIL PROTECTED] wrote: This is perfectly fine. Only the DR and BDR routers 10.0.0.6 and 10.0.0.4 will have full connections with all other routers. All others (state OTHER) will remain in 2-WAY (as in we have to way communication but we

OSPF: routing instabilities

2007-08-22 Thread Toni Mueller
Hi, I have routing problems with OSPF. For reasons I don't understand right now, routing does not get adapted in the right way. Given are some OSPF speakers in a network /24 and a few dumb(er) boxen which have subnets of said /24 behind them. There are static routes pointing from some of the

Re: OSPF: routing instabilities

2007-08-24 Thread Toni Mueller
Note to self: On Wed, 22.08.2007 at 17:13:30 +0200, Toni Mueller [EMAIL PROTECTED] wrote: I have routing problems with OSPF. For reasons I don't understand right now, routing does not get adapted in the right way. looking into the plus42.html file, it looks like I should be (or at least start

Re: OSPF: routing instabilities

2007-08-24 Thread Toni Mueller
Hi Claudio, On Fri, 24.08.2007 at 11:05:04 +0200, Claudio Jeker [EMAIL PROTECTED] wrote: All redistributed networks are originated with a nexthop of the ospf router. That is how it works for the moment and changing that is not simple as you need to know if the nexthop you intend to use is

Re: That whole Linux stealing our code thing

2007-09-03 Thread Toni Mueller
Hi, On Sat, 01.09.2007 at 00:42:25 -0600, Theo de Raadt [EMAIL PROTECTED] wrote: So true, the license You use can't be removed. But when You get the dual-licensed software, when You start modifying it You arrange the licensing deal on terms of either first or second or both licenses. You

Re: Wasting our Freedom

2007-10-11 Thread Toni Mueller
On Thu, 13.09.2007 at 23:09:51 -0400, Jason Dixon [EMAIL PROTECTED] wrote: It boggles my mind that we can lie around complacently, arguing about installer menus and taking the bait from trolls, while our freedoms are quickly eroding away. The rights and recognition of one of our own

Re: making a release with 4.1 Sept 24 snapshot

2007-10-12 Thread Toni Mueller
Hi, On Mon, 08.10.2007 at 16:17:35 -0400, Juan Miscaro [EMAIL PROTECTED] wrote: I am running the Sept 24 snapshot. I've never tried to make a release with a snapshot before and so I wonder whether it's possible. I updated my sources with cvsup (tag=OPENBSD_42) and keep getting a crash:

Re: problem booting amd64 w/ 3.6

2005-05-11 Thread Toni Mueller
Hi, On Wed, 11.05.2005 at 19:14:21 +0200, Rogier Krieger [EMAIL PROTECTED] wrote: On 5/11/05, Toni Mueller [EMAIL PROTECTED] wrote: It crashes after most of dmesg with this error message: uvm_fault(0x80890500, 0x1, 0, 1) - e fatal page fault in supervisor mode trap type 6

Re: problem booting amd64 w/ 3.6

2005-05-17 Thread Toni Mueller
Hi Jared, On Wed, 11.05.2005 at 15:17:38 -0600, jared r r spiegel [EMAIL PROTECTED] wrote: does the tyan k8s have bios console redirect? yes, but that doesn't seem to work too well, but anyway, there's a new dmesg with the official 3.7 CD: -- cut probing: pc0

Re: problem booting amd64 w/ 3.6 (and 3.7)

2005-05-17 Thread Toni Mueller
Hi, from reading some archives I figured that it might be important to note that the LSI card (53C1020) is PCI-X, but sticks in a regular PCI slot. I have one other PCI-X type card that should go into this same machine which I'll probably be able to test tomorrow. Best, --Toni++

Re: problem booting amd64 w/ 3.6 [SOLVED, partially]

2005-05-19 Thread Toni Mueller
Hi, the problem could be nailed down to be related to a hardware defect. Please see below: On Tue, 17.05.2005 at 17:09:21 +0200, Toni Mueller [EMAIL PROTECTED] wrote: bge0 at pci1 dev 13 function 0 Broadcom BCM5705 rev 0x03, BCM5705 A3 (0x3003): irq 9 address 00:e0:81:64:6f:97 brgphy0

OpenBSD 3.[67] against Cisco VPN 3000: little luck

2005-06-04 Thread Toni Mueller
Hi, I'm trying to talk IPSEC to a Cisco VPN 3000 series machine, but only get few promising results. Looking at the exchange I can see this (I'm 1.2.3.4, the Cisco, not under my control, is 4.3.2.1): Packet capture: 14:11:14.364288 0:e0:81:64:2:d 0:2:16:48:b1:c2 0800 206: 1.2.3.4.500

Re: ISAKMPD VPN w/ Cisco Concentrator

2005-07-12 Thread Toni Mueller
Hi Paul, On Wed, 23.03.2005 at 12:28:17 -0500, Paul Lussier [EMAIL PROTECTED] wrote: Authentication ESP/MD5/HMAC-128 Should 'Athentication' above be AUTHENTICATION_METHOD in isakmpd.conf? this would translate to HASH_ALGORITHM= MD5 because there is no way to specify a key length

BGPD: crash

2005-07-13 Thread Toni Mueller
Hi, I'm running OpenBSD's bgpd on one of my machines (i386) and, for some reasons, a snapshot of July 12th. Before, I ran a snap from May 2nd (?) which worked very nicely wrt. BGP, with a session lifetime in the neighborhood of 10 days (I rebooted the box for unrelated reasons). The machine

Re: BGPD: crash

2005-07-14 Thread Toni Mueller
Hi Claudio, On Wed, 13.07.2005 at 23:58:30 +0200, Claudio Jeker [EMAIL PROTECTED] wrote: For some reasons you end up with two prefixes in the RIB that are indistinguishable. The decision process should in any case find a more prefered route or it will fatal with the given message. imho just

Re: BGPD: crash

2005-07-14 Thread Toni Mueller
Hi, On Thu, 14.07.2005 at 09:07:48 +0200, Toni Mueller [EMAIL PROTECTED] wrote: imho just dropping one of them should be sufficient to solve the problem if they are indistinguishable anyway (perhaps together with a warning)? sorry for the noise - of course that might be not so good an idea

cloned route gets wrong mtu

2005-12-23 Thread Toni Mueller
Hello, I just stumbled across a problem where a directly connected host gets a wrong MTU in his route entry in an OpenBSD 3.7 box. Network diagram: openbsd .1 -- linux .2 The two hosts are connected via Fast Ethernet which has a nominal MTU of 1500. The entry for the linux box in the

Re: Redundant links with BGP and VPN

2006-01-05 Thread Toni Mueller
Hello, On Wed, 23.11.2005 at 14:32:21 +, tony sarendal [EMAIL PROTECTED] wrote: 1. You create the gif tunnels (firewall-firewall) 2. you encrypt the gif tunnels (firewall-firewall traffic, or leave this for last) 3. You integrate it with your current routing setup and just treat the

Re: CVSup and stable

2006-01-24 Thread Toni Mueller
Hello, On Tue, 10.01.2006 at 12:20:29 +, Christian Weisgerber [EMAIL PROTECTED] wrote: Stefan [EMAIL PROTECTED] wrote: OpenBSD-src tag=OPENBSD_3_8 Would this download/sync only the stable tree? Yes. Another question, the recomended way of syncing is with cvsync but this

boot.conf timeout ignored on amd64?

2006-01-27 Thread Toni Mueller
Hi, I'm working on an amd64 box (Opteron 146) with a soft raid with autoconfig in place. The soft raid works fine, but boot.conf is somewhat weird. Some experimenting revealed that I have three partitions which are recognized as boot partitions: /dev/wd0a, /dev/wd1a, and /dev/raid0a. On

Re: running OpenBSD on switch hardware

2007-04-20 Thread Toni Mueller
Hi Claudio, On Fri, 06.04.2007 at 12:09:38 +0200, Claudio Jeker [EMAIL PROTECTED] wrote: Even the most expensive Cisco/Foundry/Extreme switches have not the CPU power to route or filter packets. how comes they boast running BGP and such stuff? Eg. Cisco 6509 and up, or Extreme Black Diamond?

Re: 4.1 i386, server freezing... ( was: Yet, another thread about running out of static map entries.)

2007-05-01 Thread Toni Mueller
Hi, On Thu, 26.04.2007 at 12:53:26 -0400, STeve Andre' [EMAIL PROTECTED] wrote: Try decreasing the amount of ram. what changes in OpenBSD are required to use really much RAM ( 4GB), then? Please... Best, --Toni++

Re: Networking issue: two routers with the same IP

2007-05-01 Thread Toni Mueller
Hi, On Tue, 01.05.2007 at 00:55:40 -0600, rc [EMAIL PROTECTED] wrote: Address. One router between the second line will not resolve this problem since the two different network is needed to make routing possible. I'm not convinced, but instead think that one router put in between solves the

Re: OpenBSD 4.1 install issue?? [RESOLVED]

2007-05-22 Thread Toni Mueller
Hi, On Mon, 21.05.2007 at 18:00:30 +0200, Toni Mueller [EMAIL PROTECTED] wrote: Is this problem worth opening a bug on the OpenBSD web site? after reading the great advice of Rob Waite, the answer is obviously NO. Sorry for the noise. Best, --Toni++

Re: vpn in OBSD 4.1

2007-05-22 Thread Toni Mueller
Hi, On Fri, 11.05.2007 at 08:33:03 -0400, Lars D. Noodin [EMAIL PROTECTED] wrote: However, by connecting MS Windows machines into your VPN you neutralize many of the security benefits that you may have in place. I'd say that depends on your setup. Imho, for many people, using a VPN is meant to

Re: i386 - amd64 after motherboard swap

2007-05-24 Thread Toni Mueller
Hi, On Wed, 02.05.2007 at 16:47:50 +0100, Stuart Henderson [EMAIL PROTECTED] wrote: Moving a running system from i386 - amd64 is _possible_ but there are potential problems in doing so; a clean install is always preferable. this makes me curious. How do you do it? How would you go about doing

Re: package tools misbehaving

2008-04-29 Thread Toni Mueller
Hi, On Mon, 04.02.2008 at 01:03:13 +0100, Ingo Schwarze [EMAIL PROTECTED] wrote: When you request a non-existant package, printing an error message and exiting is OK imho. it would be better to not be offered non-existing files, wouldn't it? I mean, in interactive mode, pkg_add has control

Re: Looking for a good commerce package for chrooted Apache/mod-perl on OpenBSD....

2008-04-29 Thread Toni Mueller
Hi, On Thu, 17.04.2008 at 16:02:09 -0400, Andre Pierre [EMAIL PROTECTED] wrote: Reading the misc@ archives lead me to Interchange (http://www.icdevgroup.org) Anyone running a Interchange eCommerce server on chrooted Apache on OpenBSD? Are there any OpenBSD or chroot specific caveats one

Re: no 4.2-stable package updates??

2008-05-02 Thread Toni Mueller
Hi Brian, On Wed, 12.12.2007 at 11:26:13 -0500, Brian A. Seklecki [EMAIL PROTECTED] wrote: There's a vulnxml feed for OpenBSD ports. It should be updated with critical patches, and those should be pulled into 4.2-stable. are you talking about this website? http://www.vuxml.org/openbsd/

how to hunt for suspected memory leaks?

2006-02-24 Thread Toni Mueller
Hi, I have a PC running 3.8 which is currently idle (ie, it is powered on, but nobody uses it except me for minor maintenance). The box showed the following behaviour over the last few weeks: w/o much processes running and almost no activity, the amount of free memory shown in 'top' decreases

Re: how to hunt for suspected memory leaks?

2006-02-25 Thread Toni Mueller
Hello, On Fri, 24.02.2006 at 21:49:16 +, Nick Guenther [EMAIL PROTECTED] wrote: On 2/24/06, Gabriel George POPA [EMAIL PROTECTED] wrote: I understand your problem. In fact a closer analysis will show that there is no problem. Probably the memory you are reporting as filled

art(4): Link change recorded where?

2006-03-16 Thread Toni Mueller
Hello, I'm trying to get a better idea about how my stuff performs, and are now looking for ideas on where any changes on art(4) interfaces are recorded. Can we please have some general play loud option that would send everything to syslog using eg. kern.info? Seeing malloc() failures is probably

Re: Carp, isakmpd sasyncd

2006-03-17 Thread Toni Mueller
Hi, On Thu, 16.03.2006 at 00:41:16 -0700, Theo de Raadt [EMAIL PROTECTED] wrote: There are serious bugs in sasyncd. Please do not use it yet. Instead perhaps (like me) you can encourage the developers who wrote it to... finish it. thanks for the heads-up. Can we please all have some release

Re: art(4): Link change recorded where?

2006-03-17 Thread Toni Mueller
Hello, On Thu, 16.03.2006 at 09:21:18 -0700, Theo de Raadt [EMAIL PROTECTED] wrote: [ better logging on interfaces, for whatever that means ] Claudio: Link state changes are generally not logged by the kernel. Only lmc(4) and sppp(4) tend to fill the syslog with useless status

Re: OpenBGPd... Feature request...

2006-03-17 Thread Toni Mueller
Hello Claudio, On Fri, 17.03.2006 at 10:28:31 +0100, Claudio Jeker [EMAIL PROTECTED] wrote: Finally packet forwarding should be mostly unaffected by userland CPU usage as it runs with much higher priority in the kernel. I think this is actually not the case in real life. When one of my routers

Re: art(4): Link change recorded where? (one short note)

2006-03-24 Thread Toni Mueller
Hello Theo, On Fri, 17.03.2006 at 16:44:58 -0700, Theo de Raadt [EMAIL PROTECTED] wrote: Then the entire idea is to improve the drivers to erradicate this special treatment that makes them believe that they should syslog of kernel printf us to death. That is not the solution you want. this

Re: Bank transfers for donating

2006-03-24 Thread Toni Mueller
Hello, one more note: On Fri, 24.03.2006 at 01:14:34 +0100, Ingo Schwarze [EMAIL PROTECTED] wrote: So we have setup a bank account, and people can use the following information for IBAN and SWIFT/BIC transfers: http://www.openbsd.org/bank-donation.html Thanks! This is quite useful

Re: OpenBSD and the money

2006-03-24 Thread Toni Mueller
Hello, On Thu, 23.03.2006 at 16:26:04 -0500, Peter Fraser [EMAIL PROTECTED] wrote: To get money from the government you have to work with professionals consultants. The good ones are expensive, but they do work on a contingency basis. I don't agree, generally. This whole idea seems

DC, SATA ok nowadays?

2006-03-24 Thread Toni Mueller
Hi, I'm trying to get an idea about the next machine I'm going to purchase. So far, I'm aiming at some Opteron box (AMD 270 HE Dual-Core CPU? - DC series being claimed the only ones left having 940 sockets), possibly with SATA drives this time. The vendor I asked so far suggested using 3ware

Re: Pre-orders for our releases.

2006-03-25 Thread Toni Mueller
Hello, On Fri, 10.03.2006 at 21:24:47 -0600, Kevin [EMAIL PROTECTED] wrote: For example, two of our sites are upgrading all Mac desktops to G5, literally throwing away dozens of functional Mac G3s, because there is a very short list of tax-deductible charities to which the Company authorizes

Re: Pre-orders for our releases.

2006-03-25 Thread Toni Mueller
Hello, please get a grip on business mechanics. On Sat, 11.03.2006 at 00:48:30 +0100, Wijnand Wiersma [EMAIL PROTECTED] wrote: If there are big plans, and the companies could benefit from those big plans it might actually make them donate if those plans need real donations. It all depends on

Re: VPN SA expires in a minute

2006-03-28 Thread Toni Mueller
Hello, On Sun, 26.03.2006 at 22:45:15 +0200, HEINER Piter [EMAIL PROTECTED] wrote: I tried setting these with isakmpd.conf and sysctls, here's some I can't remember using sysctl for VPN tuning so far. Default-phase-1-lifetime= 28800,60:28800 Default-phase-2-lifetime= 28800,60:28800

ping shows negative times

2006-04-05 Thread Toni Mueller
Hello, I have just experienced the weird situation that I see a number of pings show negative times: $ ping 172.20.10.1 PING 172.20.10.1 (172.20.10.1): 56 data bytes 64 bytes from 172.20.10.1: icmp_seq=0 ttl=64 time=162.004 ms 64 bytes from 172.20.10.1: icmp_seq=1 ttl=64 time=-3.-995 ms 64 bytes

Re: When would you NOT use OpenBSD?

2006-04-05 Thread Toni Mueller
Hello Chris, On Wed, 05.04.2006 at 04:55:39 +0200, Chris Alatakis [EMAIL PROTECTED] wrote: holding more than 30 domain names some with lot of traffic almost what is a lot of traffic? unpatched and unupdated (3.2 stable). I bet if I left it there unpatched for the next 5 years I will not

Re: Symantec firewalls

2006-04-06 Thread Toni Mueller
Hello, On Thu, 06.04.2006 at 08:56:44 +0300, Gabriel George POPA [EMAIL PROTECTED] wrote: something around 15000$-3$). In fact I don't know many details, just that customers are pleased to give the money and say that they're safe behing that Symantec machine. Pros: nice GUI Cons:

Re: Best WAN Adaper?

2006-04-19 Thread Toni Mueller
Hello, On Sat, 15.04.2006 at 16:22:31 -0400, Daniel Ouellet [EMAIL PROTECTED] wrote: I don't know about the DS3 one as I am still looking for that myself, ... As for the DS3, if you get an answer on that one, please share with us! these seem to have mostly vanished from the planet. The only

Hardware Reliability, was: Re: Dual Core

2006-04-24 Thread Toni Mueller
Hello Otto, On Tue, 18.04.2006 at 17:49:28 +0200, Otto Moerbeek [EMAIL PROTECTED] wrote: On Tue, 18 Apr 2006, Matt Jibson wrote: Some of us have had problems with dual core: http://marc.theaimsgroup.com/?l=openbsd-miscm=113860396723795w=2 That should be solved now, try a recent snap. I've

3.7: weird IP address problem

2006-04-24 Thread Toni Mueller
Hello, I have a box that once had two IP addresses on one interface. I deconfigured one of them using ifconfig -alias. Now, when I want to use any (?) program on that box to go over this interface, it wants to use the addresses which is no longer present. I double-checked to ensure that there is

Re: 3.7: weird IP address problem

2006-04-25 Thread Toni Mueller
Hello, On Mon, 24.04.2006 at 15:30:55 -0400, Matthew Closson [EMAIL PROTECTED] wrote: [ wrong IP address ] What could that be, and why can't I see this address anywhere? I'd rather not reboot only to make a change in IP numbers effective... Can you send us the output of ifconfig ifname0

Re: 3.7: weird IP address problem

2006-04-25 Thread Toni Mueller
Hello Ste, On Mon, 24.04.2006 at 22:49:48 +0100, Ste Jones [EMAIL PROTECTED] wrote: I've noticed the same thing before with aliases. Down and upping the interface combined with a route flush sh /etc/netstart should fix the problem I am glad that you can confirm the problem. I'm sure a

Re: 3.7: weird IP address problem

2006-04-25 Thread Toni Mueller
Hi, On Mon, 24.04.2006 at 15:39:36 -0400, Brian A. Seklecki [EMAIL PROTECTED] wrote: Also, is it still ARP'ing for the old address (tcpdump(8) will show). no ARP. It's going straight to the target machine, but with the wrong sender IP (so it doesn't ever get any replies for packets it

Re: 3.7: weird IP address problem

2006-04-25 Thread Toni Mueller
Hello Otto, On Tue, 25.04.2006 at 10:46:37 +0200, Otto Moerbeek [EMAIL PROTECTED] wrote: Does it work when you force the source address to the desired address? With ping, use -I address, with ssh use -b address. yes, it does work when I specify the correct address with ping, but doesn't when I

Re: exploit for openbsd 3.9 php 4.4.1p0/5.0.5p0

2006-05-07 Thread Toni Mueller
Hello Jacob, On Tue, 02.05.2006 at 22:39:54 -0700, Jacob Meuser [EMAIL PROTECTED] wrote: have you tested Robert's php update and given him feedback? if not, you really have no place to complain. this is not quite correct. He has posted an update to PHP5 which doesn't solve any of the problems

Cisco, TCP problem, ISN selection... please help!

2006-05-09 Thread Toni Mueller
Hello all, a while ago (1-2 yrs?) there was a big problem with Cisco trying to push their fix for ISN attacks into being an IETF standard, and having a patent on it, too (afair). Unfortunately, I'm currently both _very_much_swamped_ AND also under _HIGH_PRESSURE_ to dig this whole story up until

Re: OT: Good GigE 8-port switch?

2006-05-09 Thread Toni Mueller
Hello, On Tue, 09.05.2006 at 15:02:07 +0200, Karel Gardas [EMAIL PROTECTED] wrote: On 2006-05-09 14:19:00 +0200, Karel Gardas wrote: OvisLink, D-Link, Edimax, 3Com, Linksys, LevelOne, SMC which do support at ^^ Avoid. http://en.wikipedia.org/wiki/NTP_vandalism Indeed!

CVS problem in 20060502 snap

2006-05-12 Thread Toni Mueller
Hello, I have a problem with CVS in the snapshot named above. Updating my ports tree, I get A LOT of conflicts for no apparent reason, just showing a short piece of the log, but in sequence of time: U x11/xzoom/pkg/DESCR U x11/xzoom/pkg/PLIST ... lots of other stuff... cvs update: move away

C++ problem in current snapshot (2006-05-22)

2006-05-25 Thread Toni Mueller
Hello, I'd like to compile a small C++ program (part of building the HylaFAX port). This is the program: - #include iostream.h int main(){ cout Hello World! endl; return 0;} - Compiling it goes like this: $ c++ testit.cc

Re: C++ problem in current snapshot (2006-05-22)

2006-05-26 Thread Toni Mueller
Hello, On Thu, 25.05.2006 at 18:27:30 +0200, Toni Mueller [EMAIL PROTECTED] wrote: I'd like to compile a small C++ program (part of building the HylaFAX port). This is the program: thanks for all the answers. I'm no C++ guru either, as many of you have already pointed out, but I didn't really

Re: OpenBGPD AS transit

2006-05-26 Thread Toni Mueller
Hello, On Thu, 25.05.2006 at 22:38:53 +0200, Sylwester S. Biernacki [EMAIL PROTECTED] wrote: But it doesn't. Other peers can't see as 8545 nor prefix 195.182.219.0/24. how about adding network 195.182.219.0/24 to your bgpd.conf? Best, --Toni++

Re: C++ problem in current snapshot (2006-05-22) [SOLVED]

2006-05-26 Thread Toni Mueller
Hello all, On Thu, 25.05.2006 at 19:23:20 +, Steffen Wendzel [EMAIL PROTECTED] wrote: #include iostream.h using namepsace std; I'd like to resolve the question and report my findings: * Deleting everything under /usr/include and then reextracting comp39.tgz was the first step that made

Re: b/g wifi card on wi list?

2006-06-09 Thread Toni Mueller
Hello Stuart, On Thu, 08.06.2006 at 14:22:59 +0100, Stuart Henderson [EMAIL PROTECTED] wrote: There are a limited number of PCMCIA/CardBus cards with external antennas (which you're likely to want for an AP), so you might be yes, of course. available; Wim sells them, amongst others. Good

Re: b/g wifi card on wi list?

2006-06-09 Thread Toni Mueller
Hello, On Fri, 09.06.2006 at 13:10:40 +0100, Constantine A. Murenin [EMAIL PROTECTED] wrote: Based on some pictures, I think that Zonet ZEW2500P would be a good candidate for a ural(4) USB 2.0 wireless device. It has a dandy aerial, too. :)

Re: Issues with OpenOSPFD in 3.9?

2006-07-10 Thread Toni Mueller
Hello Lars, On Fri, 07.07.2006 at 10:40:11 +0800, Lars Hansson [EMAIL PROTECTED] wrote: Make sure you run 3.9-stable and not -release. There's a bug in -release that causes ospfd to crash when a /32 route is removed from the rib. you mean, something like this: Jul 10 18:53:23 myname

Re: Choices for Soekris disk drives

2006-08-19 Thread Toni Mueller
Hi, On Tue, 08.08.2006 at 03:13:36 +0200, Pailloncy Jean-Girard [EMAIL PROTECTED] wrote: I use now 24x7 drive with extended temp range, and I hope it will where do you get these? service more than 6 months. Pretty

Re: Opinion of MySQL 5.xx on OpenBSD 3.9...

2006-09-07 Thread Toni Mueller
Hello, On Thu, 22.06.2006 at 12:49:22 +0200, Henning Brauer [EMAIL PROTECTED] wrote: I haven't seen stability problems with mysql on OpenBSD in a long time. not even on sparc64. then you are very lucky, imho. On a variety of OpenBSD boxes, and with a variety of MySQL versions, I experience

Re: Opinion of MySQL 5.xx on OpenBSD 3.9...

2006-09-12 Thread Toni Mueller
Hello, On Fri, 08.09.2006 at 10:51:00 +0200, Lukasz Sztachanski [EMAIL PROTECTED] wrote: mysql Ver 12.22 Distrib 4.0.27, for unknown-openbsd3.8 (i386) Uptime: 94 days 17 hours 17 min 50 sec mind you that my problems radically increased with 5.x - nobody is talking about 4.x

Crash Report - Desired Info Quality?

2006-09-25 Thread Toni Mueller
Hello, I'm getting a reproducible panic on a remote 3.9-stable system and have managed to talk someone into taking photographs with his cell phone camera that show the panic and 'ps' and 'trace' info. The image quality is generally poor, however. The crash occurs when using smartmontools (from

Opinions on IBM x326m?

2006-09-28 Thread Toni Mueller
Hello, I've recently read that these machines are now fully supported on OpenBSD. What experience do you have with them, please? Any advices on what to watch out for? TIA! Best, --Toni++

Re: Deploying isakmp/vpn with PKI

2006-10-05 Thread Toni Mueller
Hi, On Tue, 03.10.2006 at 13:25:50 +0200, Joachim Schipper [EMAIL PROTECTED] wrote: If those are just standard OpenSSL-style x509 certificates, you can generate them whereever you want, and they will work just fine. I routinely generate such certificates on Linux with OpenSSL and deploy on

Re: Experience with isakmpd/ipsec in production?

2006-10-05 Thread Toni Mueller
Hi, On Mon, 21.08.2006 at 10:23:43 -0400, Melameth, Daniel D. [EMAIL PROTECTED] wrote: We have since changed how we're doing this, but we had a Cisco and OpenBSD VPN running for a few years. why, and how did you change? What's better now? Best, --Toni++

Re: Experience with isakmpd/ipsec in production?

2006-10-05 Thread Toni Mueller
Hi, On Mon, 21.08.2006 at 15:43:14 +0200, Sven Ingebrigt Ulland [EMAIL PROTECTED] wrote: How long have you been running openbsd isakmpd/ipsec (in production)? I think I run this stuff since around 2000, or 2001 at the latest. What problems, if any, have you had with the openbsd vpn

Re: Intel policy wrt OSS [was: Re: cvs.openbsd.org: src]

2006-10-12 Thread Toni Mueller
Hi, On Sat, 30.09.2006 at 12:43:00 +0200, Maxim Bourmistrov [EMAIL PROTECTED] wrote: Why don't ignore them and don't buy their products? this is easier said than done. I have already a list of vendors I'm not buying products from anymore, like Adaptec. I also have such a list which eg.

Re: GPL = BSD + DRM [Was: Re: Intel's Open Source Policy Doesn't Make Sense]

2006-10-13 Thread Toni Mueller
Hello chefren, On Fri, 06.10.2006 at 00:46:11 +0200, chefren [EMAIL PROTECTED] wrote: The argument against GPL that works best for me during discussions about it is that GPL is BSD with Digital Rights Management. sorry, but this is a blatant lie. Arguing this way will hopefully get you *NO*

Re: GPL = BSD + DRM [Was: Re: Intel's Open Source Policy Doesn't Make Sense]

2006-10-13 Thread Toni Mueller
Hello, On Fri, 06.10.2006 at 15:12:47 -0600, Theo de Raadt [EMAIL PROTECTED] wrote: Even today the Linux kernel tree is full of non-free components, for example firmwares. Let's not talk about GPL and source and all that. Yes, there are problems there. But even more basic problems exist,

Re: Setting up IPSEC VPN to Cisco IOS (Old fashioned way)

2006-10-13 Thread Toni Mueller
Hello Gordon, On Fri, 06.10.2006 at 23:50:56 +0100, Gordon Ross [EMAIL PROTECTED] wrote: I'm trying to setup an IPSEC connection between OpenBSD3.9 Cisco IOS 12.3 using pre-shared keys authentication the old fashioned way. (One step at a time) However, I can't get the tunnel to come up. Can

best hardware plattform for openbsd

2006-10-13 Thread Toni Mueller
Hello, I am trying to find systems that can be used _well_ with OpenBSD. The applications are middle class BGP routers with hopefully more than 500kpps sustained, and web and database servers. With RAID, I'm currently undecided whether I should stick with RAIDframe and be able to use

Re: best hardware plattform for openbsd

2006-10-13 Thread Toni Mueller
Hi Claudio, first, I'd like to thank you for your comment. On Fri, 13.10.2006 at 16:00:55 +0200, Claudio Jeker [EMAIL PROTECTED] wrote: 500kpps sustained is a crazy amount of packets (especially think about possible peaks). Currently you can fine tune a OpenBSD box to do over 450kpps but

  1   2   3   4   5   >