Re: Help with snmpd...

2010-12-03 Thread Pierre-Yves Ritschard
On Thu, Dec 2, 2010 at 10:33 PM, Bales, Tracy tracy.ba...@williams.com wrote: I'm running 4.8 on an i386 platform. I have snmpd running with 300 custom MIB's installed via snmpd.conf. I've confirmed that they're installed using net-snmp's snmpwalk program. Each of my MIB's is an integer

Re: change hppa LCD display text

2010-05-06 Thread Pierre-Yves Ritschard
There is no support for changing the output right now. You can try to adapt the attached patch, I don't have access to an hppa machine anymore but it used to work (on a C3000). - pyr 2010/5/6 Kapetanakis Giannis bil...@edu.physics.uoc.gr Hi, I have 2 HP J6000 and I want to change the text

Re: Apache Firefox and Ogg Theora (Byte-range requests)

2010-02-17 Thread Pierre-Yves Ritschard
This appears to be due to the format of the string being passed to strtonum(). ap_strtol() was tolerant of it. It's being passed the string from the Range: header. For example, the following valid request (taken directly from sniffing a wget session). GET /testfile HTTP/1.0 Range:

Re: ypldap, NULL domain !

2009-08-05 Thread Pierre-Yves Ritschard
* Wijnand Wiersma (wijn...@videre.net) wrote: Hi, I am trying to get ypldap working on a very recent snapshot and I can't figure out what I am doing wrong. It seems ypldap is working just fine: # ypldap -dv startup [debug mode] configuration starting applying configuration connecting to

Re: 'xterm -e mutt' doesn't show colors

2009-06-18 Thread Pierre-Yves Ritschard
On Wed, 17 Jun 2009 22:39:56 +0200 Pieter Verberne pieterverbe...@xs4all.nl wrote: Hi, When I run mutt (or tmux/colorls -G/etc) from xterm, I have fancy colors=] But when I run: $ xterm -e mutt I don't have colors =[ (I'm running dwm and I want xterm to start tmux automaticly) $

Re: sendmail vs. other MTAs

2009-05-12 Thread Pierre-Yves Ritschard
Who was complaining? There's a difference between suggesting a good design, such as qmail's and complaining. So what you mean, is that when developing software we should look at what already exists and try to do things right by learning from the strength and weaknesses of other projects.

Re: ypldap and ldaps

2009-05-06 Thread Pierre-Yves Ritschard
On Wed, 6 May 2009 18:51:45 +0300 Vasiliy Kiryanov vasiliy.kirya...@gmail.com wrote: Hello community. I would want to use ypldap with our ldap server that work over ssl. The problem is how to change ypldap.conf to work with ldaps. I will appreciate any ideas. thanks. Hi, There is no

Re: relayctl host disable doesn't loop through all hosts

2009-04-01 Thread Pierre-Yves Ritschard
* Pascal Lalonde (plalo...@overnet.qc.ca) wrote: Hello, I've been playing with relayd lately. There is a behavior which seems unintuitive and I was wondering if that was a bug or the intended behavior. It's the intended behavior but I have been meaning to fix that at some point. When I

Re: hoststated on OpenBSD

2009-01-23 Thread Pierre-Yves Ritschard
* Beavis (pfu...@gmail.com) wrote: Greetings List, I would like to ask some folks here regarding hoststated is it still available for OpenBSD? All i got through google is http://cvs.openbsd.org/papers/eurobsdcon07/pyr-loadbalancing/ I'm looking for a tool that would be able me to setup

Re: Realyd exits when relayctl disables and enables a host

2008-07-30 Thread Pierre-Yves Ritschard
* David Caro ([EMAIL PROTECTED]) wrote: Hi all, first of all, sorry for my english (it's not my first language, but i'm trying to learn) i have two testing firewalls running OpenBSD 4.3 -release (fresh install), with carp and pfsync configured and working. I was trying to configure

Re: Trying to compile cwm on Linux

2008-07-24 Thread Pierre-Yves Ritschard
6. Compile and link: $ for i in *.c; do gcc -I /usr/include/freetype2 -c $i; done $ gcc -lXft -lXrender -lX11 -lXau -lXdmcp -lXext -lfontconfig -lexpat -lfreetype -lz -o cwm *.o Most linux distributions carry a pmake package which provides the a bsd.prog.mk and thus support for the

Re: sloppy states and dsr

2008-06-20 Thread Pierre-Yves Ritschard
* Ted Unangst ([EMAIL PROTECTED]) wrote: One would only use sloppy state tracking on the load balancer, right? The firewall in front of everything still uses normal tracking? Yes, you use sloppy state only on the host(s) seeing half of the trafic.

Re: relayd and src track

2008-05-16 Thread Pierre-Yves Ritschard
+ if (rdr-conf.flags F_STICKY) + if (ioctl(env-sc_pf-dev, DIOCCLRSRCNODES, 0) == -1) + fatal(sync_table: cannot clear the tree of source tracking nodes); + free(addlist); log_debug(sync_table: table %s: %d added, %d deleted, %d

Re: relayd exits (crashes) if all hosts become disabled... expected?

2008-05-06 Thread Pierre-Yves Ritschard
* Mark Rolen ([EMAIL PROTECTED]) wrote: At that point, relayd is dead, and won't restart. /var/log/daemon shows: fatal: flush_table: cannot flush table stats: Operation not supported by device This is a bug and has been fixed in -current yesterday, it will be part of the next snapshot.

Re: relayd http check connection failures; hoststated operates correctly

2008-02-27 Thread Pierre-Yves Ritschard
Brad Arrington [EMAIL PROTECTED] wrote: Hi, I ran into the same problem you did, I thought it was something I was doing wrong until I read your email... Here is the fix I came up with. --- check_tcp.c-current Mon Feb 25 15:11:40 2008 +++ check_tcp.c Mon Feb 25 23:48:45 2008 @@ -82,6

Re: relayd http check connection failures; hoststated operates correctly

2008-02-27 Thread Pierre-Yves Ritschard
Brad Arrington [EMAIL PROTECTED] wrote: Hi Pierre-Yves, I guess we are both wrong... I used a few different timeout values including 1000 before changing any code. I just checked relayd(the unpatched version) again and I get the same results. These web servers just serve the default

Re: relayd http check connection failures; hoststated operates correctly

2008-02-26 Thread Pierre-Yves Ritschard
Brad Arrington [EMAIL PROTECTED] wrote: Hi, I ran into the same problem you did, I thought it was something I was doing wrong until I read your email... Here is the fix I came up with. --- check_tcp.c-current Mon Feb 25 15:11:40 2008 +++ check_tcp.c Mon Feb 25 23:48:45 2008 @@ -82,6

Re: hoststated - some questions

2007-12-06 Thread Pierre-Yves Ritschard
[sent to wrong list] Also hoststatectl reload does not work for me. [EMAIL PROTECTED] root# hoststatectl reload command failed Expected behavior? Unfortunately, yes. reload currently does not work for layer7 (relay) configurations. it should be available before 4.3 though.

Re: OpenBSD kernel janitors

2007-10-31 Thread Pierre-Yves Ritschard
n0g0013 [EMAIL PROTECTED] wrote: i personally find it quite disheartening to hear the attitude that prevails here but that's the community's decision. it certainaly seems to refelect the attitute of it's leaders (developers). Instead of doing something useful like reading code, identifying

Re: Network Time Synchronization using timed or ntpd or a Combination?

2007-10-23 Thread Pierre-Yves Ritschard
Boris Goldberg [EMAIL PROTECTED] wrote: Hello Rogier, Tuesday, October 23, 2007, 9:01:32 AM, you wrote: RK On 10/23/07, Boris Goldberg [EMAIL PROTECTED] wrote: You don't really need ntpd on all systems. One (timeserver) runs ntpd, and others use rdate, called from cron (once a day is

Re: Hoststated check https; what am I missing?

2007-10-18 Thread Pierre-Yves Ritschard
I'm wondering how sensitive hoststated is to the certificate (might check https digest fail because the server certificate and the name I'm asking for don't match?), or could it be that hoststated computes the https digest before the html output is decrypted? Hoststated doesn't check

Re: hoststated: throws Undefined error: 0 in i386 -current

2007-10-18 Thread Pierre-Yves Ritschard
Rolf Sommerhalder [EMAIL PROTECTED] wrote: This simple configuration file for hoststated below is syntactically correct (and semantically, too), however apparently only if its file mode bits are 600 (which makes sense). Somehow, I ended up with mode bits being set to 644, upon which

Re: hoststated, using the same tables for more than one service

2007-09-25 Thread Pierre-Yves Ritschard
Anyway, my question is, can I use the same tables in multiple service entries? ( one for each connection ) no problem there.

Re: hoststated, using the same tables for more than one service

2007-09-25 Thread Pierre-Yves Ritschard
On Tue, 25 Sep 2007 23:25:44 +1200 Josh [EMAIL PROTECTED] wrote: Well after trying it, it appears there _IS_ a problem there. One of the services was not working. As soon as I gave it its own separate tables, it worked. Pierre-Yves Ritschard wrote: Anyway, my question is, can I use

Re: hoststated, using the same tables for more than one service

2007-09-25 Thread Pierre-Yves Ritschard
On Tue, 25 Sep 2007 14:08:50 +0200 Pierre-Yves Ritschard [EMAIL PROTECTED] wrote: On Tue, 25 Sep 2007 23:25:44 +1200 Josh [EMAIL PROTECTED] wrote: Well after trying it, it appears there _IS_ a problem there. One of the services was not working. As soon as I gave it its own separate

Re: what if hoststated dies?

2007-09-25 Thread Pierre-Yves Ritschard
On Tue, 25 Sep 2007 14:22:19 +0200 Luca Corti [EMAIL PROTECTED] wrote: On Wed, 2007-09-26 at 00:01 +1200, Josh wrote: What happens if hoststated crashes? Does its latest table entry's and rdr rules still remain? Maybe you can try a kill -9 and see what happens. ciao Luca better

Re: Get rid of leaf packages

2007-08-30 Thread Pierre-Yves Ritschard
On Thu, 30 Aug 2007 09:22:18 +0100 Edd Barrett [EMAIL PROTECTED] wrote: Hi, On 30/08/2007, Jona Joachim [EMAIL PROTECTED] wrote: You can find it here: http://hcl-club.lu/svn/development/python/cutleaves This is useful! Why not write a port? Why write it in python ? The package system

Re: howto set global environment variable (e.g. PATH, JAVA_HOME)

2007-08-10 Thread Pierre-Yves Ritschard
On Fri, 10 Aug 2007 09:11:55 +0100 Edd Barrett [EMAIL PROTECTED] wrote: On 09/08/07, Lars Hansson [EMAIL PROTECTED] wrote: If you're using xdm things are different though. The Xsession script does not source any global files so you'll have to modify it to source /etc/profile. Is there a

Re: hoststated and UDP

2007-06-28 Thread Pierre-Yves Ritschard
On Thu, 28 Jun 2007 00:19:56 +0200 Luca Corti [EMAIL PROTECTED] wrote: Hello, I've setup hoststated for load balancing of some services, and it works well. If I'm not missing something hoststated actually works just for TCP. Is there any plan to implement UDP support? Yes there is, I will

Re: Regular Expression Problem

2007-06-15 Thread Pierre-Yves Ritschard
On Thu, 14 Jun 2007 18:49:46 +0200 OBSD [EMAIL PROTECTED] wrote: Hi All, thanks for all the suggestions. With this it works: cat mail.txt | egrep [EMAIL PROTECTED] | egrep \.[a-zA-Z]{2,4}$ It is probably possible to avoid the last egrep but I have not find out how. Have a look at

Re: Load balancing with DSR

2007-06-13 Thread Pierre-Yves Ritschard
On Wed, 13 Jun 2007 15:40:36 +1000 Darren Tucker [EMAIL PROTECTED] wrote: Would it be possible to to this the way the IBM eNetwork dispatchers used to do this? Put all of the machines on the same broadcast domain, then: 1. add a static published arp entry for the cluster address on the

Re: Load balancing with DSR

2007-06-13 Thread Pierre-Yves Ritschard
pass in on $ext_if route-to { $webh1, $webh2 } round-robin proto tcp \ from any to $virt_ip port http no state pass out on $int_if from any to $virt_ip port http no state Wouldn't you need some kind of state here? Otherwise there's no guarantee of the packets for a given connection

Re: Load balancing with DSR

2007-06-13 Thread Pierre-Yves Ritschard
On Wed, 13 Jun 2007 17:05:44 +0200 Reyk Floeter [EMAIL PROTECTED] wrote: i don't like the idea about DSR, it sounds like an evil hack to get some performance at the wrong place. it is better to focus on improving the pf/network stack performance itself and to be able to do traffic filtering

Re: Load balancing with DSR

2007-06-12 Thread Pierre-Yves Ritschard
On Wed, 13 Jun 2007 10:54:58 +0800 Lars Hansson [EMAIL PROTECTED] wrote: Linden Varley wrote: Anyone know of any load balancing software for OpenBSD that can do direct-server return? (our load balancers (openbsd boxes) are co-located and we pay for all data bandwidth). hoststated?

Re: hoststated: fatal: relay_dispatch_pfe: desynchronized,

2007-06-07 Thread Pierre-Yves Ritschard
On Wed, 6 Jun 2007 21:29:42 +0300 Paulius Bulotas [EMAIL PROTECTED] wrote: well ;) probably you will have to wait for 4.2, but fix for similar problem (try to disable table, then enable it ;) so probably the same applies for host disabling, enabling... at least, with this patch it works for

Re: hoststated: fatal: relay_dispatch_pfe: desynchronized,

2007-06-07 Thread Pierre-Yves Ritschard
--- src/usr.sbin/hoststated/relay.c.origWed Mar 7 19:40:32 2007 +++ src/usr.sbin/hoststated/relay.c Sun May 13 18:37:48 2007 @@ -1775,7 +1775,7 @@ fatalx(relay_dispatch_pfe: invalid host id); if (host-flags F_DISABLE)

Re: hoststated: fatal: relay_dispatch_pfe: desynchronized,

2007-06-06 Thread Pierre-Yves Ritschard
On Wed, 6 Jun 2007 14:09:19 +0200 Jvrg Streckfu_ [EMAIL PROTECTED] wrote: Hi list, First a tribut for the good work to the authors of hoststated. In the future i plan to use hoststated in production environments to check for the availability of our webservices. But before I set it up on my

Re: hoststated

2007-05-02 Thread Pierre-Yves Ritschard
On Wed, 02 May 2007 11:39:01 +0200 holger glaess [EMAIL PROTECTED] wrote: i try to setup the hoststated daemon but it fail to start. i would to like setup an simple loadbalancer for http with 2 host. i add also rdr-anchor hoststated/* to my pf.conf after the rdr rules. thanks for

Re: hoststated

2007-04-27 Thread Pierre-Yves Ritschard
On Fri, 27 Apr 2007 08:57:16 +0200 holger glaess [EMAIL PROTECTED] wrote: hi i try to setup the hoststated daemon but it fail to start. i would to like setup an simple loadbalancer for http with 2 host. i add also rdr-anchor hoststated/* to my pf.conf after the rdr rules. thanks for

Re: http load balancing with pf (apache access log)

2007-01-30 Thread Pierre-Yves Ritschard
On Tue, 30 Jan 2007 13:06:00 + Rui Miguel Silva Seabra [EMAIL PROTECTED] wrote: By the way, what do you use/recommend in order to manage the webserver pool? 1 test/min (in cron for instance) is too large a value for many use cases, so what would be best in your opinion? It's likely I'll

Re: http load balancing with pf (apache access log)

2007-01-30 Thread Pierre-Yves Ritschard
On Tue, 30 Jan 2007 15:20:42 + Rui Miguel Silva Seabra [EMAIL PROTECTED] wrote: Ter, 2007-01-30 `s 14:25 +0100, Pierre-Yves Ritschard escreveu: On Tue, 30 Jan 2007 13:06:00 + Rui Miguel Silva Seabra [EMAIL PROTECTED] wrote: By the way, what do you use/recommend in order

Re: http load balancing with pf (apache access log)

2007-01-29 Thread Pierre-Yves Ritschard
On Mon, 29 Jan 2007 16:21:13 +0100 Marian Hettwer [EMAIL PROTECTED] wrote: However, one thing is bothering me. Obviously, my apache access logs on those load balanced machines can only show the IP address of my load balancer, not the real remote ip of the request. Why are you rewriting the

Re: http load balancing with pf (apache access log)

2007-01-29 Thread Pierre-Yves Ritschard
On Mon, 29 Jan 2007 17:20:50 +0100 Marian Hettwer [EMAIL PROTECTED] wrote: Which would mean, I send a SYN to my load balancer, which forwards the SYN to one of my webservers, and the webserver would send a SYN-ACK back to me. But my machine, obviously can't do anything with a SYN-ACK from

Re: http load balancing with pf (apache access log)

2007-01-29 Thread Pierre-Yves Ritschard
On Mon, 29 Jan 2007 17:34:51 +0100 Marian Hettwer [EMAIL PROTECTED] wrote: Pierre-Yves Ritschard schrieb: On Mon, 29 Jan 2007 17:20:50 +0100 Marian Hettwer [EMAIL PROTECTED] wrote: Which would mean, I send a SYN to my load balancer, which forwards the SYN to one of my webservers

Re: Redundant web servers

2007-01-19 Thread Pierre-Yves Ritschard
Nick Ryan wrote: If you haven't already seen it on undeadly.org this might be what you're after: http://spootnik.org/hoststated/hoststated_introduction.html Cheers This means having a third machine. If its OK with you you can indeed use hoststated (with 2 tables containing 1 host each):

Re: hoststated and 802.11

2007-01-18 Thread Pierre-Yves Ritschard
Sam Fourman Jr. wrote: I was reading about the new hoststated tool in OpenBSD, and wondering if it would be possible to use rssi as a link health check. Short answer: not at the moment. Scripting will soon be enabled and will allow you to specify external health checkers. Of course with RSSI

Re: pf and load balancing some webservers

2007-01-18 Thread Pierre-Yves Ritschard
PS.: although wrong thread, any chance to use the brand new hoststated in OpenBSD 4.0 ? If I get it via CVS, will it build? I don't like the idea to upgrade my production box to -CURRENT at all ;) What you can do is get the 4.0 source, then just checkout latest hoststated and hoststatectl

Re: pf load balancer and server health

2006-12-05 Thread Pierre-Yves Ritschard
You might also want to check http://spootnik.org/slbd which is specifically aimed at your problem. Its a privilege separated daemon which can perform several types of health checks and has support for sorry servers.

Re: building kernel for new release in previous stable system

2006-11-03 Thread Pierre-Yves Ritschard
Another solution would be, once 4.1 gets out to unpack the base41.tgz, etc41.tgz and comp41.tgz into /usr/somewhere then unpack or checkout using cvs the 4.1 kernel sources in there as well. Once you are in this situation you can chroot to this new fake 4.1 system: chroot /usr/somewhere /bin/sh

Re: building kernel for new release in previous stable system

2006-11-03 Thread Pierre-Yves Ritschard
* Stuart Henderson ([EMAIL PROTECTED]) wrote: On 2006/11/03 11:34, Pierre-Yves Ritschard wrote: Another solution would be, once 4.1 gets out to unpack the base41.tgz, etc41.tgz and comp41.tgz into /usr/somewhere then unpack or checkout using cvs the 4.1 kernel sources in there as well

ospfd: multi-areas and cost problems

2006-10-19 Thread Pierre-Yves Ritschard
Hi misc@, We're currently moving some of our routers from linux/quagga to OpenBSD/OpenOSFPD. In our topology, we have border routers connected to 2 areas, each announcing routes from one area into another. Basically in Quagga/IOS speak this gives (with imaginary networks): network 10.0.1.0

broadcom ips500a

2006-10-10 Thread Pierre-Yves Ritschard
Hi, The broadcom 5823 chipset is listed as supported in OpenBSD's supported hardware list. I found a card from broadcom, the ips500a, has anybody run that card, I'd like a fast (as in 500mpbs or faster when doing IPSEC) card that would work with OpenBSD, and its the only one I've found that

Re: upgrading without physical access

2006-09-23 Thread Pierre-Yves Ritschard
Thanks for all the advice. It's been working well for 3.6 - 3.9.

upgrading without physical access

2006-09-21 Thread Pierre-Yves Ritschard
Hi list, I have a machine running OpenBSD 3.6 on a remote location that I would like to upgrade. I only have ssh access unless I buy myself an expensive plane ticket. I wondered if there's a safe way to upgrade remotely or should I just wait until I get an opportunity to be in front of the

Re: Where to start studying OpenBSD networking code

2006-06-30 Thread Pierre-Yves Ritschard
The second volume of TCP/IP Illustrated is very interesting, it describes the BSD implementation of the TCP stack, walking you through the code. Although dated, the code still bears a lot of similarities with what you'll find in /usr/src.

Re: The HP nc7170 dual port

2006-04-04 Thread Pierre-Yves Ritschard
In case anyone was wondering, they work well with OpenBSD, they show up as em nics. em0 at pci5 dev 7 function 0 Intel PRO/1000MT (82546EB) rev 0x01: apic 7 int 2 (irq 11), address 00:11:0a:5c:6b:04 em1 at pci5 dev 7 function 1 Intel PRO/1000MT (82546EB) rev 0x01: apic 7 int 3 (irq 5), address

Re: HP ProLiant DL 385

2006-03-15 Thread Pierre-Yves Ritschard
cycle counter enabled dkcsum: sd0 matches BIOS drive 0x80 root on sd0a rootdev=0x400 rrootdev=0xd00 rawdev=0xd02 cpu1: AMD Powernow: TS FID VID TTP -- Pierre-Yves Ritschard Ingenieur Systemes, Reseaux et Securite Steria Pour France Telecom - SCR/HDI/DOP/HEBEX Sophia-Antipolis - France

The HP nc7170 dual port

2006-02-28 Thread Pierre-Yves Ritschard
Hi, I've been desperately looking for syskonnect 9822 dual port cards but it seems its sold-out everywhere and syskonnect just told me on the phone that they won't produce anymore. I'm left with Intel based dual port cards and since I have access to cheap nc7170 (Intel 82546EB chipset) I

Re: The Apache Question

2006-02-08 Thread Pierre-Yves Ritschard
Sure OpenBSD's modified Apache 1.3 is way more secure than most stuff out there, and is working great. However, the Subversion versioning control system (which my project uses) demands Apache2 in order to do DAV checkouts and commits, better authentication and more. So, my only choice was

Re: Flame bait - recommendations for web devlopment language?

2005-12-16 Thread Pierre-Yves Ritschard
Yes, FastCGI looks really cool. However, in my particular case, it's not like I am the only one who does some work on the website, and I'll not be around forever either (it's volunteer work, basically). Using straight PHP is technically inferior, but is much more likely to actually be used