Re: CARP under heavy load

2008-12-15 Thread Toni Mueller
On Mon, 15.12.2008 at 10:14:41 +0200, Jussi Peltola pe...@pelzi.net wrote: IME forwarded packets seem to somehow have a higher priority than self-originated traffic in most OS's; don't know why this is, just a gut feeling. I guess that this is true. In any case, if he would be able to maintain

Re: OpenBSD 4.4 amd64 bsd.mp can't detect 4GB memory

2008-12-15 Thread Toni Mueller
Hello, On Mon, 15.12.2008 at 15:47:06 +0100, Paul de Weerd we...@weirdnet.nl wrote: On Mon, Dec 15, 2008 at 10:40:44PM +0800, C. Soragan Ong wrote: | I am using OpenBSD 4.4 and is having problem detecting 4GB ram. Below is the | dmesg Well, all memory is found (see the spdmem entries in

Re: Ethernet flow control

2008-12-17 Thread Toni Mueller
Hi, thanks for answering. I have some comments, though: On Wed, 17.12.2008 at 07:33:19 -0700, Duncan Patton a Campbell campb...@neotext.ca wrote: On Wed, 17 Dec 2008 13:40:35 +0100 Toni Mueller openbsd-m...@oeko.net wrote: I have question regarding Ethernet flow control. It would be nice

Ethernet flow control

2008-12-17 Thread Toni Mueller
Hello, I have question regarding Ethernet flow control. It would be nice to be able to see and/or adjust the current flow control configuration for individual interfaces from the command line, at 100 and 1000MBit/s. My interfaces usually use the fxp(4) or em(4) drivers. I dimly remember having

IPSEC in 4.3 and 4.4: strange packet loss

2008-12-19 Thread Toni Mueller
Hi, I have a VPN running which, for this problem, looks roughly like this: net-West - West - East - net-East | +--- South - net-South West is the central site, and East and South are quite similarly configured branch offices. Esp., regarding the packet

Re: IPSEC in 4.3 and 4.4: strange packet loss (addendum)

2008-12-19 Thread Toni Mueller
On Fri, 19.12.2008 at 10:38:28 +0100, Toni Mueller openbsd-m...@oeko.net wrote: Ping with oversized packets (I see 1548 bytes with tcpdump, and the user set a packet size of slightly more than 1500 bytes) from The user uses this command to test from his desktop computer: ping 1.2.3.4 -l 1500

Re: pppoe not reconnecting

2008-12-22 Thread Toni Mueller
Hi, On Sat, 20.12.2008 at 14:13:34 +, Christian Weisgerber na...@mips.inka.de wrote: However, sometimes pppoe just seems get wedged and stop retrying. Does anybody else see this too? yes, across a number of versions of OpenBSD, and for the last few years. I have static IPs, too, but are

Re: Yahoo! mail and OpenBSD greylisting

2008-12-23 Thread Toni Mueller
Hi, On Tue, 23.12.2008 at 14:49:40 +0530, Girish Venkatachalam girishvenkatacha...@gmail.com wrote: Well we discussed long ago that there is no such thing as a standard that says that mails be retried from the same IP address. So technically speaking yahoo! does not break any standard. I

Re: Yahoo! mail and OpenBSD greylisting

2008-12-23 Thread Toni Mueller
Hi, On Mon, 22.12.2008 at 15:59:29 -0600, Jim Aragon b...@quailnetworks.com wrote: This may be helpful: http://tech.groups.yahoo.com/group/ygmailadmin/ thanks for the info! But I'm aggravated about them taking for granted that they need an exception for their mail service, instead of just

Re: Trouble ticket system suggestions

2008-12-23 Thread Toni Mueller
Hi, On Tue, 23.12.2008 at 19:44:57 +0200, open...@bgone.net open...@bgone.net wrote: I would like to get your suggestions and experience with some Trouble Ticket Systems on OpenBSD. It should be rather simple. Users should be able to sand notes to support and check status of it. Support

Re: Trouble ticket system suggestions

2008-12-23 Thread Toni Mueller
Hi, On Tue, 23.12.2008 at 16:02:02 -0500, Andrew Ruscica a...@jet2.net wrote: Seconds for OTRS; obsd has been running it well for me for the last four years. I deliberately tried to make a neutral kind of statement, because some systems work better in one context, and some systems work better

pfsync

2008-12-29 Thread Toni Mueller
Hi, I just discovered that pfsync needs the sync device to be numbered, even if I simply try to use the multicast address and don't specify a syncpeer. Not numbering it, but simply pulling it up, yielded (eg.) # ifconfig pfsync0 syncdev ste3 ifconfig: SIOCSETPFSYNC: No buffer space available

Re: OpenLDAP w/o bdb okay?

2009-01-06 Thread Toni Mueller
Hi, On Tue, 06.01.2009 at 01:08:27 +0100, Henning Brauer lists-open...@bsws.de wrote: I am using openldap with ldbm backend in an not exactly small installation for 9 or 10 years now. I have never ever experienced a broken database. never. my last encounter with ldbm, a few years back, drove

Re: CARP issues 4.3

2009-01-07 Thread Toni Mueller
Hi, On Tue, 06.01.2009 at 17:11:45 -0600, Jon Slusher jslus...@opinionlab.com wrote: and for some reason it tried to take over as the MASTER, while its CARP a shot in the dark: Are you sure that CARP traffic flows freely between the two firewalls, and that they both have the same password?

Re: OpenLDAP w/o bdb okay?

2009-01-07 Thread Toni Mueller
On Tue, 06.01.2009 at 06:27:17 -0500, ppruett-lists ppru...@webengr.com wrote: Actually a lot linux users suggest using mysql for the non relational authentication tables ;) I knew you've got to be kidding! -- Kind regards, --Toni++

Re: OpenLDAP w/o bdb okay?

2009-01-07 Thread Toni Mueller
Hi, On Tue, 06.01.2009 at 14:42:09 +0100, Henning Brauer lists-open...@bsws.de wrote: * Toni Mueller openbsd-m...@oeko.net [2009-01-06 12:25]: This pattern comes up often, but almost noone suggests an alternative LDAP server package. I am not aware of any. Lack of options doesn't make

Re: Release IP-adress OpenBSD 3.8

2009-01-14 Thread Toni Mueller
Hi, On Thu, 08.01.2009 at 08:50:57 +0100, Maurice Janssen maur...@z74.net wrote: There's another option: change the MAC address of the new card to match the old card's MAC address. Somthing like this in your hostname.if: dhcp NONE NONE NONE lladdr aa:bb:cc:dd:ee:ff this obviously only works

Re: Virtualization, OpenBSD as host

2009-01-17 Thread Toni Mueller
On Fri, 16.01.2009 at 14:42:05 -0500, Nick Guenther kou...@gmail.com wrote: Out of curiousity, what are you doing in Java that needs Windows? Maybe writing Java apps that use specific Windows APIs (at least optionally)? I'm guess that you don't get these in non-Windows builds of Java... Kind

Re: query bug reports?

2011-10-14 Thread Toni Mueller
Hi, On Thu, Oct 13, 2011 at 09:40:42AM +0200, Toni Mueller wrote: My vote would go for Redmine (use together with thin), which has a if the project wants to use/try it, I can offer my help with this one. Please contact me off-list. Kind regards, --Toni++

ISAKMPD question: certificates shipped?

2011-11-30 Thread Toni Mueller
Hi, I'm running into a problem with OpenBSD 5.0 and isakmpd. A config that works on 4.8, doesn't work on 5.0: the client is denied access, allegedly due to OpenBSD shipping the wrong (X.509) certificate, or certificates in the wrong order. The (3rd party) claim is that it might ship the CA

Re: ISAKMPD question: certificates shipped?

2011-12-21 Thread Toni Mueller
Hi Stu, On Sun, Dec 04, 2011 at 11:24:24AM +, Stuart Henderson wrote: I don't see any code changes that would result in a different presentation order of certificates between 4.8 and 5.0.. tcpdump traces of the negotiation from 4.8 and 5.0 might be useful, as might logs from the 3rd

ISAKMPD question: ID-type ASN1_...?

2012-01-04 Thread Toni Mueller
Hi, I've run into an interoperability problem with an Astaro, which does not like our certificate. The certificate basically looks like ... Subject: C=DE, L=..., CN=IP-number ... Subject Alternative Name: IPv4 Address: IP-number ... Now the Astaro is said to require an ID type of ASN1-DN,

ipsec: failure after upgrade

2011-09-28 Thread Toni Mueller
Hi, I have lan1 -- gw1 --- internet --- gw2 -- lan2 The setup has been working for years. Now I upgraded one side to 4.9, while the other - so far - is still at 4.6 (I know... :( ). After that, no connection gets established anymore: 1.2.3.4: OpenBSD 4.6 4.3.2.1: OpenBSD 4.9

Re: ipsec: failure after upgrade [SOLVED]

2011-09-28 Thread Toni Mueller
Hi, I solved the site-site part of it. It turned out to be a typo somewhere. :( But the mobile issue is still open. Kind regards, --Toni++

query bug reports?

2011-10-13 Thread Toni Mueller
Hi, today I wanted to research open bug reports for OpenBSD, using this link in lieu of anything linked from the homepage: http://www.openbsd.org/query-pr.html But when I submit the form, I only get an error message that the CGI was not found. Where should I be looking instead, please? Kind

4.9/amd64: kernel crash with temperhum

2011-10-13 Thread Toni Mueller
Hi, today I experienced a kernel crash on a machine with the temperhum device. The crash message indicates that the driver uthum was responsible, but since the machine is physically inaccessible to me, I only have a screenshot. Is it still worth reporting, scribbling from a handset screenshot,

Re: query bug reports?

2011-10-13 Thread Toni Mueller
Hi Daniel, On Thu, Oct 13, 2011 at 09:10:22AM +0200, LEVAI Daniel wrote: On Thu, Oct 13, 2011 at 09:01:51 +0200, Toni Mueller wrote: today I wanted to research open bug reports for OpenBSD, using this link in lieu of anything linked from the homepage: http://marc.info/?l=openbsd-miscm

UTF-8 on the file system?

2009-05-13 Thread Toni Mueller
Hi, from a discussion around early November last year, I gather that OpenBSD has not much UTF-8 support right now. I am a bit unsure about whether having file names with UTF-8 characters are supported, though. I don't need to type the characters, nor see or print them, but only have a program

Re: UTF-8 on the file system?

2009-05-13 Thread Toni Mueller
Hi Otto, thanks for the quick answer. On Wed, 13.05.2009 at 10:50:37 +0200, Otto Moerbeek o...@drijf.net wrote: On Wed, May 13, 2009 at 10:35:25AM +0200, Toni Mueller wrote: fd = open(filename_with_utf8_characters); succeed on a standard OpenBSD disk (FFS, if I'm not mistaken), using

Re: UTF-8 on the file system?

2009-05-13 Thread Toni Mueller
Hi, On Wed, 13.05.2009 at 12:12:31 +0200, Otto Moerbeek o...@drijf.net wrote: show me what filename you constructed (and how you did that) and the contents of ls-output.txt. I prefer hexdump -C, btw. I can't send you a recipe for constructing these filenames because I didn't do it, and I also

Re: UTF-8 on the file system?

2009-05-13 Thread Toni Mueller
Hi, On Wed, 13.05.2009 at 19:26:59 +0900, Jordi Beltran Creix jbcreix.m...@gmail.com wrote: print '?' or an octal escape sequence on nonprint chars. With a hacked libc and a utf-8 version of multibyte functions as well as a few fixes on apps solve most of these problems, gtk apps and scim

Re: [dera...@cvs.openbsd.org: Re: I would like to send this to misc@ and security-announce@, from me.]

2009-05-13 Thread Toni Mueller
Hi, On Thu, 30.04.2009 at 11:21:50 -0600, Bob Beck b...@openbsd.org wrote: The best place to get OpenBSD is from an official CD set, produced in a secured location FWIW, I have what I think are official CDs, and they contain OS code dated 2009-02-28 22:41 UTC. This means the official

strange performance problem (4.5)

2009-05-20 Thread Toni Mueller
Hi, I've just upgraded a (server) machine to 4.5, and now experience a strange performance problem. The problem itself manifests in about 95-100% CPU usage (0-1% idle), permanently, without being able to see much in top. This is distributed to about 8-25% system and the rest almost exclusively

Re: multilink VPN

2009-05-29 Thread Toni Mueller
Hi, On Wed, 27.05.2009 at 22:07:25 -0300, James Mackinnon jmackin...@devantec.com wrote: I need to setup redundant VPN's between these locations without the use of BGP. I have used sasync in the past, pfsync etc however, I have not tried to setup a VPN where 2 ISPs are used without the ISPs

Re: Where's demime?

2009-05-30 Thread Toni Mueller
Hi, On Fri, 29.05.2009 at 09:29:39 +0200, ropers rop...@gmail.com wrote: I know that demime is being used on the misc mailing list. I even tried to see if it's contained in some other package: http://www.google.ie/search?q=demime+inurl%3Aopenbsd.org+inurl%3Acontents.html A Google search for

Re: arp table timeout / how to update automatically if foreign MAC changes?

2009-06-03 Thread Toni Mueller
Hi, On Tue, 11.03.2008 at 15:59:24 +0100, smartTERRA NOC n...@smartterra.de wrote: I have found a workaround: heartbeat. Heartbeat uses (like carp on OpenBSD) a virtual MAC address, so there is no problem with the arp cache on the OpenBSD firewall. how do I do this if the remote machines

Re: ipsec config with x509 certificates

2009-06-12 Thread Toni Mueller
Hi Eric, On Fri, 13.03.2009 at 19:16:32 +0100, Eric Belhomme eric.belho...@eve-team.com wrote: - copying my host private key on /etc/isakmpd/private/local.key - copying my host public key on /etc/isakmpd/keynote/my FQDN/credentials I was so far unable to get this keynote-credentials stuff

IPSEC problem after upgrading one side to 4.5

2009-06-12 Thread Toni Mueller
Hi, I have a VPN running which looks like a hub-and-spoke configuration. For the remainder of the discussion, the spokes are OpenBSD 4.4. Since I've upgraded the hub to 4.5, a connection to one of the spoke starts to fail. After running for well over a week, the connection was not automatically

Re: amd64 on Xeon X3220

2009-06-16 Thread Toni Mueller
Hi, On Tue, 16.06.2009 at 11:20:35 +0100, Gaby Vanhegan g...@vanhegan.net wrote: I've been googling around for any information about OpenBSD on this hardware. hmmm I can only tell you that it works on an X3230 (Supermicro, though). The machine works for me since a few months now. Getting a

Re: IPSEC problem after upgrading one side to 4.5

2009-06-17 Thread Toni Mueller
Hello, On Fri, 12.06.2009 at 10:54:56 +0200, Toni Mueller openbsd-m...@oeko.net wrote: I have a VPN running which looks like a hub-and-spoke configuration. For the remainder of the discussion, the spokes are OpenBSD 4.4. Since I've upgraded the hub to 4.5, a connection to one of the spoke

Re: re-writing RAIDframe parity asynchronously?

2009-06-17 Thread Toni Mueller
Hi, On Wed, 17.06.2009 at 10:52:05 +0200, Stefan Unterweger ste...@rg-me.it wrote: I am considering patching rc(8) and commenting out the `raidctl -P all` line, and running it via cron(8) at @reboot, but this seems like a hack to me. So before I venture that way, I'd rather make sure I didn't

Re: re-writing RAIDframe parity asynchronously?

2009-07-13 Thread Toni Mueller
Hi, On Wed, 17.06.2009 at 15:55:00 +0200, Raimo Niskanen raimo+open...@erix.ericsson.se wrote: On Wed, Jun 17, 2009 at 03:05:47PM +0200, Toni Mueller wrote: I'm not sure that I understand you correctly, and don't want to make a statement about the merit of having raidctl running

Re: prioritizing carp interfaces

2009-07-13 Thread Toni Mueller
Hi, On Mon, 23.03.2009 at 17:22:55 +0100, Joerg Streckfuss streckf...@dfn-cert.de wrote: In my opinion preemption on both nodes effects that advskew is set to 240 on all interfaces and as a consequence there is no host which could advertise faster then the other host in the carp group.

CARP: multiple host groups on one network?

2009-07-13 Thread Toni Mueller
Hello, I've decided to make more use of CARP, but I'm not sure that I understand how vhid and carpnodes are supposed to work. So far, my reading of carp(4) and ifconfig(8) is as follows: * If I have a number of aliases bound to a certain interface, I should move them all to individual carp

Re: AMD64 with 4GB RAM

2009-07-14 Thread Toni Mueller
Hi, On Mon, 22.06.2009 at 17:21:11 +0200, Claudio Jeker cje...@diehard.n-r-g.com wrote: Consider it unsave. Without iommu (e.g. on Intel Boxes) many devices will be unable to talk to memory 4GB bad if that is where your data is. With the amd64 gart acting as iommu it is possible to use the

'ps auwx' and 'top': inconsistent display?

2009-07-24 Thread Toni Mueller
Hello, I have a perl script that should work as follows: * check some parameters * drop privileges ( $ = ...; $) = ...;) * fork some other programs Now when I run this script and ps auwx thereafter, I see that the programs I forked are running under the user id that I specified in the script.

Perl: strange mode on libs?

2009-07-30 Thread Toni Mueller
Hello, I've just implemented the patch 007 for 4.5, and found out that the .a libs are chmod 0600, while all other .a libs are chmod 0444. Although the Makefiles evaluated to this (amongst others): install -c -o root -g bin -m 600 libperl.a /usr/lib install -c -o root -g bin -m 600

Re: Multiple IPSec-tunnels and load balancing

2009-07-30 Thread Toni Mueller
Hi, On Tue, 30.06.2009 at 11:15:21 +0200, u...@o3si.de u...@o3si.de wrote: I try to use an OpenBSD firewall with two ADSL links connected (dynamic addresses!) to the internet. Now I want to establish two IPSec tunnels over each link to a central VPN gateway (OpenBSD too). Is it possible to

[SOLVED, sort of] Re: 'ps auwx' and 'top': inconsistent display?

2009-08-01 Thread Toni Mueller
Hi, On Fri, 24.07.2009 at 15:09:23 +0200, Toni Mueller openbsd-m...@oeko.net wrote: I have a perl script that should work as follows: * check some parameters * drop privileges ( $ = ...; $) = ...;) it turned out that 'top' displayed the real userid which I didn't set, while 'ps' displayed

locale support, again

2009-08-01 Thread Toni Mueller
Hi, I know that the subject of what to do in the absense of having locale support has been discussed quite often already. I'd like to know what I need to do to supply full locale support to applications that want to use them. My problem arises from those pesky web applications which simply

art(4): how to debug card or line errors?

2009-08-05 Thread Toni Mueller
Hi, I'm experiencing problems with an E1 line, and would very much like to be sure that the other end is to blame, instead of me. Unfortunately, I don't see how to get sufficiently detailed information from the card to find out whether this is a line problem, or a card's problem. The problem set

Re: [SOLVED, sort of] Re: 'ps auwx' and 'top': inconsistent display?

2009-08-05 Thread Toni Mueller
Hi, On Sat, 01.08.2009 at 17:13:43 +0300, Jussi Peltola pe...@pelzi.net wrote: Why should fork touch user id's? I was under the impression that only the effective userid should be inherited by a forked process, not the real user id. Also, the inconsistency in the display of the tools doesn't

Fully Automatic (network-based) Installation of OpenBSD?

2009-08-27 Thread Toni Mueller
Hi, I dimly remember seeing a short thread flowing by that mentions someone's hacks to bsd.rd to arrive at an installation system that works w/o human intervention, but can't seem to find it anymore. Pointers are greatly appreciated! -- Kind regards, --Toni++

Re: Automated service/daemon management

2009-08-27 Thread Toni Mueller
Hi, On Tue, 09.06.2009 at 15:52:55 -0400, Bryan Allen b...@mirrorshades.net wrote: My suggestion would be to move all your services to run under runit or daemontools. You can manage both with Puppet. I'm not familiar with runit, really, but I've used daemontools for years, quite happily, on

Re: Fully Automatic (network-based) Installation of OpenBSD?

2009-08-27 Thread Toni Mueller
Thank you both, Miod and Soeren - I think I was actually after the link Soeren posted, but didn't think that it was that long ago already. -- Kind regards, --Toni++

Recommended Switches for Trunking?

2009-09-02 Thread Toni Mueller
Hi, I'm looking into getting switches to be used in port-extender style, and found a thread from last year recommending Cisco switches. I need about 20-50 ports atm, and would like to avoid Cisco. My current preference is using Procurve (2810 or 29xx). Do they work? What do you recommend? Any

Re: Recommended Switches for Trunking?

2009-09-02 Thread Toni Mueller
Hi, thanks for all your answers! -- Kind regards, --Toni++

OT: Rebranding, was: Re: Recommended Switches for Trunking?

2009-09-03 Thread Toni Mueller
Hi, On Thu, 03.09.2009 at 10:06:26 -0700, J.C. Roberts list-...@designtools.org wrote: Getting people at HP to just admit to rebranding is impossible, but getting them to tell what's really inside the box is double impossible. HP is a big enough company that I'd expect to be able to open the

Re: Very high interrupt load with rl(4)

2009-09-09 Thread Toni Mueller
Hi, On Thu, 13.08.2009 at 19:24:15 +, Stuart Henderson s...@spacehopper.org wrote: - change the nic; almost anything else would be better I'm seeing rl(4) on these small embedded style computers where one can't plug in a regular nic. I don't know how to make vendors ship better interfaces,

Re: shutting down

2009-09-12 Thread Toni Mueller
Hi, On Fri, 11.09.2009 at 22:28:43 +0200, Maurice Janssen maur...@z74.net wrote: Will the master shutdown normally, or will it stall while trying to umount the NFS share? The slaves will shutdown first, so when the master goes down, the NFS server won't be responding. man mount_nfs You

really strange console message?

2009-09-14 Thread Toni Mueller
Hi, today, one of my servers (4.5-stable/i386) beeped to me, over an SSH connection, and said this, via syslogd: hostname /bsd: 1540? The fact that the message went to a terminal suggests that this should describe a pretty serious error condition. Google turned up nothing, though... Kind

IPSEC: Problem with default route

2009-09-18 Thread Toni Mueller
Hi, I tend to a network that locally looks like this: East = 1.2.0.0/15 (central site) West = 1.5.0.0/16 (satellite site) West has a default route across the VPN to East. All gateways are running OpenBSD 4.5-stable. Connectivity between East and West is no problem. The problem is that

Re: IPSEC: Problem with default route

2009-09-19 Thread Toni Mueller
Hi, On Fri, 18.09.2009 at 17:05:51 -0700, Lordsporkton lordspork...@gmail.com wrote: Could you send us some actual details? Interface configs, ipsec.conf, pf.conf, output of route show, maybe a little network diagram? anything so that we actually know what is doing on? this is one

Re: IPSEC: Problem with default route

2009-09-19 Thread Toni Mueller
Hi, thank you for your answer! On Sat, 19.09.2009 at 12:11:43 +, Stuart Henderson s...@spacehopper.org wrote: SADB entries are not normal routing table entries, they take priority. This is what I suspected. But even given those IPSEC semantics (they are documented where, please?), the

IPSEC ECN: no-go?

2009-10-01 Thread Toni Mueller
Hi, I operate a VPN that has some road warriors who all get a default route attached that points them into the local VPN gateway. With names and IP numbers replaced, this looks like this: # ipsecctl -s all FLOWS: flow esp in from 192.168.1.22 to 0.0.0.0/0 peer 1.1.1.1 srcid 5.5.5.5/32 dstid

Re: spamd - nixspam list, September 30, 2009

2009-10-01 Thread Toni Mueller
Hi, On Wed, 30.09.2009 at 09:12:16 -0600, Bob Beck b...@ualberta.ca wrote: Again? sheesh, it wasn't supposed to, we had talked to them. yes, again. I get a 404 all the time. Kind regards, --Toni++

Re: spamd - nixspam list, September 30, 2009

2009-10-01 Thread Toni Mueller
On Thu, 01.10.2009 at 21:16:30 +1000, Rod Whitworth glis...@witworx.com wrote: Me too, but I learned my lesson first time around. Now I have a cronjob that runs a script which attempts to get the file. If that fails the existing local nixspam file is used. I didn't check whether the stale file

Re: Ports isn't working for me...

2009-10-01 Thread Toni Mueller
Hi Marc, [ sorry for cross-posting from ports@ ] On Thu, 01.10.2009 at 17:20:05 +0200, Marc Espie es...@nerim.net wrote: Why do you want to do that ? what's wrong with php5-mbstring ? (which is one of the packages compiled in extensions) I didn't check whether it influences this extension,

OpenBSD + Nehalem: Now or Later?

2009-10-02 Thread Toni Mueller
Hi, I'm considering to purchase Supermicro servers with one or two Nehalem CPUs and a 5520 chipset. Has anyone already tried these, and/or how much breakage should I expect? My reading of /plus.html suggests that it may be too early to jump onto this train, but if some devs want a few weeks play

Feature request: pf + set-tos, Re: IPSEC ECN: no-go?

2009-10-05 Thread Toni Mueller
Hi, On Thu, 01.10.2009 at 12:21:19 +0200, Toni Mueller openbsd-m...@oeko.net wrote: Searching around, I found that this question was already raised by Martin Hedenfalk well over a year ago (http://marc.info/?l=openbsd-miscm=121127258816047w=2), but he got no answer. I thought I'd try

Re: Forum engine

2009-10-12 Thread Toni Mueller
Hi, On Sun, 11.10.2009 at 22:02:45 -0400, Sean Howard sil...@callysto.com wrote: A good usenet implementation is *closer* to a forum, which is what you want. But forums are a different (more dynamic) use case. With smaller entry barriers to large amounts of content. all other things aside: If

Re: Forum engine

2009-10-12 Thread Toni Mueller
On Mon, 12.10.2009 at 15:23:12 +, Matthew Szudzik mszud...@andrew.cmu.edu wrote: On Mon, Oct 12, 2009 at 04:42:44PM +0200, Toni Mueller wrote: archive, whereas, when the forum operator changes his forum software, or shuts down the forum, all past content is simply gone (or as good

Re: Questions for OpenBGPd Developers

2009-10-15 Thread Toni Mueller
Hi, On Tue, 13.10.2009 at 16:41:35 +0200, Igor Sobrado igor.sobr...@gmail.com wrote: requirements come first, then you can choose the best tools to get that work done, not the reverse. why is it so difficult to understand? well... short story: Your definition of better may or may not meet

Re: Questions for OpenBGPd Developers

2009-10-15 Thread Toni Mueller
Hi, On Tue, 13.10.2009 at 11:33:40 -0400, and...@msu.edu and...@msu.edu wrote: The problem with this is that the interface between the other OS and the OpenBSD based code needs to be correct and secure, else there will be bugs and people will complain that OpenBSD code isn't good, etc and in

Re: Anyway to force IP to be assigned only if MAC matches?

2009-10-29 Thread Toni Mueller
Hi, On Wed, 28.10.2009 at 17:29:36 -0500, Andres Salazar ndrsslz...@gmail.com wrote: I Have dhcp enabled on my LAN which assigns an IP according to the clients MAC address, however if a user wanted to be malicious he can statically assign any IP to his NIC. he then has root access to the

Re: Problems with 4.5 as a KVM guest

2009-10-29 Thread Toni Mueller
Hi, On Tue, 14.07.2009 at 11:27:13 -0600, Bob Beck b...@openbsd.org wrote: and/or ask the linux people to fix KVM to make it really a PC. I'm running kvm 85+dfsg-4~bpo5 and see the following interesting behaviour with OpenBSD 4.6: * /bsd.rd runs just fine, using the ne(4) driver, but * /bsd

Re: Script to ping, traceroute a destination and record the time

2009-10-29 Thread Toni Mueller
Hi, On Thu, 29.10.2009 at 16:26:49 +0200, Kasper Adel karim.a...@gmail.com wrote: I am trying to troubleshoot a problem that is totally random and the one idea that would help me is to have a bash script that will ping a few destinations every minute, then do a traceroute to these

Re: Problems with 4.5 as a KVM guest

2009-10-30 Thread Toni Mueller
Thanks, John and Michiel, On Thu, 29.10.2009 at 14:02:27 +0100, Michiel van Baak mich...@vanbaak.info wrote: On 12:18, Thu 29 Oct 09, Toni Mueller wrote: I'm running kvm 85+dfsg-4~bpo5 and see the following interesting behaviour with OpenBSD 4.6: * /bsd.rd runs just fine, using the ne

Re: http://www.theregister.co.uk/2009/11/03/linux_kernel_vulnerability

2009-11-08 Thread Toni Mueller
Hi, On Fri, 06.11.2009 at 13:41:13 +0200, Lars Nooden lars.cura...@gmail.com wrote: Unless you aren't running shit-for-architecture x86 systems still. It is 2009 and there are sparc, mips, freescale and arm on the market. now you only need to educate us about how such machines can be used in

make release w/o make build?

2009-11-10 Thread Toni Mueller
Hi, I'm wondering about the options when I want to make a release, and would like some insight into the build process. Background: During a release's lifetime, I want to create a set of new installation tarballs for -stable, to be able to (re-) install machines with all relevant patches already

Re: Can't get carp to fail over all interfaces with pfsync

2009-11-10 Thread Toni Mueller
Hi, On Tue, 10.11.2009 at 19:53:40 +1100, Mikel Lindsaar raasd...@gmail.com wrote: To clarify, CARP is working in terms of redundancy, what does not seem to be working is the preempting of the primary firewall interfaces by the backup firewall should _one_ of the primary interfaces be taken

IGNORE: Re: Can't get carp to fail over all interfaces with pfsync

2009-11-10 Thread Toni Mueller
On Tue, 10.11.2009 at 13:58:26 +0100, Toni Mueller openbsd-m...@oeko.net wrote: Did you set the appropriate sysctl switch? net.inet.carp.preempt=1 Note to self: Don't write emails when not fully awake. -- Kind regards, --Toni++

art(4): seeking new and used cards

2009-11-16 Thread Toni Mueller
Hi, if someone has to sell known-good Accom cards, I'm very much interested in purchasing some. Please contact me off-list. TIA! -- Kind regards, --Toni++

shutdown and reboot sometimes ignored?

2009-11-22 Thread Toni Mueller
Hi, for several releases of OpenBSD, I now have encountered the problem that I can say shutdown -r now, or halt, or reboot, and nothing appears to happen, except for some messages on the associated terminals. Sometimes, it works after saying it multiple times, and literally after minutes, and on

Re: shutdown and reboot sometimes ignored?

2009-11-23 Thread Toni Mueller
Hi, On Sun, 22.11.2009 at 23:03:10 +0100, Joachim Schipper joac...@joachimschipper.nl wrote: On Sun, Nov 22, 2009 at 10:00:05PM +0100, Peter J. Philipp wrote: On Sun, Nov 22, 2009 at 09:20:46PM +0100, Toni Mueller wrote: for several releases of OpenBSD, I now have encountered the problem

Re: shutdown and reboot sometimes ignored?

2009-11-23 Thread Toni Mueller
Hi, On Mon, 23.11.2009 at 10:04:20 -0600, Chris Bennett ch...@bennettconstruction.biz wrote: If you are running PostgreSQL, and aren't running as root, you will need to use sudo shutdown -r now or /etc/rc.shutdown will hang ?? you mean, if I am not running PostgreSQL as root? I usually

Re: -current (#448): starts dropping packets after a while

2010-04-08 Thread Toni Mueller
Hi, this should have gone into the thread 'spurious need to frag messages'. Sorry for opening a new thread. On Wed, 31.03.2010 at 13:36:48 +0200, Toni Mueller openbsd-m...@oeko.net wrote: recently, a problem with OpenBSD has popped up over here that manifests itself in random connection

-current amd64 (#178): NO PROPOSAL CHOSEN

2010-04-08 Thread Toni Mueller
Hi, while playing around with the latest code as of today, off of CVS's HEAD, I find that it sometimes takes considerable time to establish a connection to a static peer, and while negotiating, the two isakmpds sometimes send NO_PROPOSAL_CHOSEN to each other. After a while, it suddenly works.

Re: Howto Create a Auto-Extract Package with Shell Script tar ?

2010-04-10 Thread Toni Mueller
Hello, On Sat, 10.04.2010 at 09:17:53 +0800, Aaron Lewis aaron.lewis1...@gmail.com wrote: Firstly i need to compress my fonts to a Font_Name.tar.bz2 , if i want to put the extract script and Font_Name.tar.bz2 together , a single bundle , howto archive it ? Right now , i tried

-current i386 (#501): massive performance drop from #448

2010-04-11 Thread Toni Mueller
Hi, going from #448 (March 16th) to #501 (April 8th), I noticed a sharp drop in performance. The problem manifests itself in the machine frequently becoming very sluggish wrt. network performance. In numbers, this means that the packet loss rate jumps to more than a felt 90% for more than a

Re: addendum: 4.7 causes different problem Re: spurious need to frag messages

2010-05-03 Thread Toni Mueller
Hi, On Wed, 17.03.2010 at 17:48:21 +0100, Toni Mueller openbsd-m...@oeko.net wrote: On Mon, 15.03.2010 at 19:10:12 +0100, Toni Mueller openbsd-m...@oeko.net wrote: # pfctl -s a |grep mss # ifconfig|grep mtu|grep -v 1500 lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 33152 enc0

Re: OT - UML, can someone state that it works ?

2010-05-05 Thread Toni Mueller
On Wed, 05.05.2010 at 14:31:32 -0500, Walter Goulet wgou...@gmail.com wrote: I think the UML the OP is referring to is Unified Modeling Language and Rational Unified Process. I think this solves it: On Wed, May 5, 2010 at 2:25 PM, Lars Nooden lars.cura...@gmail.com wrote: :P ;) Kind

Re: OT - UML, can someone state that it works ?

2010-05-05 Thread Toni Mueller
Hi, I'm not an OpenBSD developer, but would like to chime in anyway: On Wed, 05.05.2010 at 16:08:47 -0300, Christiano F. Haesbaert haesba...@haesbaert.org wrote: I'm really sick of hearing about UML/RUP and all this boulshit about software engineering in my university. Many of those things

nested vlans: safe to use?

2010-05-11 Thread Toni Mueller
Hi, I've been trying to figure out whether I can use OpenBSD in a nested vlan scenario. I'm looking at a data centre where I want to get two wires, each carrying several vlans, and funneling them home across a WAN link. Various switch vendors claim to be able to do it, but I couldn't really

Re: nested vlans: safe to use?

2010-05-12 Thread Toni Mueller
Hi, On Wed, 12.05.2010 at 01:09:55 +, Stuart Henderson s...@spacehopper.org wrote: First talk to your wan provider, they might either be able to allocate you a couple of vlans that they'll carry for you, or do QinQ (i.e. you feed the provider plain vlans, and they appear directly at the

Re: nested vlans: safe to use?

2010-05-12 Thread Toni Mueller
Hi, On Wed, 12.05.2010 at 14:23:18 +0200, Pete Vickers p...@systemnet.no wrote: http://www.openbsd.org/papers/asiabsdcon2010_vether/index.html especially page 6/7... thanks, but... I may have mis-stated the problem. I have no bandwidth or fragmentation problem, but rather a configuration

Re: nested vlans: safe to use?

2010-05-12 Thread Toni Mueller
On Wed, 12.05.2010 at 19:48:47 +0100, Stuart Henderson s...@spacehopper.org wrote: But usually you just feed plain vlans to the wan provider and they handle translation or stacking.. ?!? If they're doing nested vlans (tag stacking), usually you feed them frames, they add their own

Re: OpenBSD 4.7 as VPN Gateway for Road Warriors, Preferred Configuration

2010-05-31 Thread Toni Mueller
Hi, On Sun, 23.05.2010 at 11:41:27 +0200, Martin PelikC!n martin.peli...@gmail.com wrote: It really depends on what you need - most road warriors are okay with transport mode (where obviously DHCP doesn't make any sense). If I'd say that transport mode is a design error in IPSEC and should be

4.7/pf: table changes ignored until reloading the rule set?

2010-05-31 Thread Toni Mueller
Hi, I have a problem with tables in pf in that I can add addresses and/or network blocks to tables and don't get them recognized until I reload the filter rules. Example: # pfctl -T a -t extra-oekonet-dst 172.16.19.0/24 1/1 addresses added. # pfctl -T s -t extra-oekonet-dst

4.7: my error, or system error?

2010-07-20 Thread Toni Mueller
Hi, I've recompiled my system(s) several times in order to follow -stable, but (now?) see this problem: # savecore -v /var/crash/ dumpoff = 4838922240 (9451020 * 512) savecore: /bsd: kvm_dump_mkheader: invalid magic in cpu_hdr savecore: no core dump

<    1   2   3   4   5   >