Re: Questions about OpenBSD and IRC

2022-08-16 Thread Alexis



Michael G Workman  writes:

I remember some years there was an IRC channel for openbsd, I 
think it

was
on freenode.

I just installed hexchat and there is no freenode option 
anymore, is

there
still an openbsd irc channel somewhere?


Due to events last year:

"On 19 May 2021, Freenode underwent what some staff described as a 
'hostile takeover' and at least 14 volunteer staff members 
resigned. Following the events, various organisations using 
Freenode – including Arch Linux, CentOS, FreeBSD, Free Software 
Foundation Europe, Gentoo Linux, KDE, LineageOS, Slackware, 
Ubuntu, and Wikimedia Foundation–moved their channels to Libera 
Chat, a network created by former Freenode staff."


-- https://en.wikipedia.org/wiki/Freenode

many FOSS communities have moved from Freenode to 
libera.chat. There's an #openbsd channel there.



Alexis.



Re: Questions about OpenBSD and IRC

2022-08-16 Thread Christoph R. Winter
Hy there,

what you look for is now at https://libera.chat/ there was a - not so welcome - 
take over of freenode in 2021

Regards,


Christoph

> Am 17.08.2022 um 03:44 schrieb Michael G Workman 
> :
> 
> Hello,
> 
> I started getting active with OpenBSD again.
> 
> I remember some years there was an IRC channel for openbsd, I think it was
> on freenode.
> 
> I just installed hexchat and there is no freenode option anymore, is there
> still an openbsd irc channel somewhere?
> 
> Thanks.
> 
> *Michael G. Workman*
> (321) 432-9295
> michael.g.work...@gmail.com


Questions about OpenBSD and IRC

2022-08-16 Thread Michael G Workman
Hello,

I started getting active with OpenBSD again.

I remember some years there was an IRC channel for openbsd, I think it was
on freenode.

I just installed hexchat and there is no freenode option anymore, is there
still an openbsd irc channel somewhere?

Thanks.

*Michael G. Workman*
(321) 432-9295
michael.g.work...@gmail.com


Re: Non-copyleft IRC servers

2018-09-23 Thread Eric Pruitt
On Sat, Sep 22, 2018 at 01:00:57PM -0700, Eric Pruitt wrote:
> Does anyone have recommendations for a maintained IRC server that
> doesn't have a copyleft license? There are only a few listed on
> https://en.wikipedia.org/wiki/Comparison_of_Internet_Relay_Chat_daemons,
> and they don't seem to be maintained. Any runtime is fine, but I'm
> partial to C, and DCC support would be nice but isn't a hard
> requirement.

I found Oragono, an MIT-licensed server written in Go
(https://github.com/oragono/oragono). Go limits its portability, and I
know there have been issues with Go on BSDs in the past, but my IRC
server is hosted on a Linux box making this a non-issue for me right
now.



Re: Non-copyleft IRC servers

2018-09-22 Thread Daniel Corbe
Eric Pruitt  writes:

> On Sat, Sep 22, 2018 at 10:15:04PM +0200, Solene Rapenne wrote:
>> Eric Pruitt  wrote:
>> > Does anyone have recommendations for a maintained IRC server that
>> > doesn't have a copyleft license? There are only a few listed on
>> > https://en.wikipedia.org/wiki/Comparison_of_Internet_Relay_Chat_daemons,
>> > and they don't seem to be maintained. Any runtime is fine, but I'm
>> > partial to C, and DCC support would be nice but isn't a hard
>> > requirement.
>> >
>> > Thanks,
>> > Eric
>>
>> net/ngircd is fine
>
> The GPL is a copyleft license.

The problem you're going to have with IRC servers is most of them are
based on ircd 2.8.  The original sources out of the University of Oulu
were also GPL'd so its decendents are as well.

-Daniel



Re: Non-copyleft IRC servers

2018-09-22 Thread Eric Pruitt
On Sat, Sep 22, 2018 at 10:15:04PM +0200, Solene Rapenne wrote:
> Eric Pruitt  wrote:
> > Does anyone have recommendations for a maintained IRC server that
> > doesn't have a copyleft license? There are only a few listed on
> > https://en.wikipedia.org/wiki/Comparison_of_Internet_Relay_Chat_daemons,
> > and they don't seem to be maintained. Any runtime is fine, but I'm
> > partial to C, and DCC support would be nice but isn't a hard
> > requirement.
> >
> > Thanks,
> > Eric
>
> net/ngircd is fine

The GPL is a copyleft license.



Re: Non-copyleft IRC servers

2018-09-22 Thread Solene Rapenne
Eric Pruitt  wrote:
> Does anyone have recommendations for a maintained IRC server that
> doesn't have a copyleft license? There are only a few listed on
> https://en.wikipedia.org/wiki/Comparison_of_Internet_Relay_Chat_daemons,
> and they don't seem to be maintained. Any runtime is fine, but I'm
> partial to C, and DCC support would be nice but isn't a hard
> requirement.
> 
> Thanks,
> Eric

net/ngircd is fine



Non-copyleft IRC servers

2018-09-22 Thread Eric Pruitt
Does anyone have recommendations for a maintained IRC server that
doesn't have a copyleft license? There are only a few listed on
https://en.wikipedia.org/wiki/Comparison_of_Internet_Relay_Chat_daemons,
and they don't seem to be maintained. Any runtime is fine, but I'm
partial to C, and DCC support would be nice but isn't a hard
requirement.

Thanks,
Eric



Re: Continued, IRC administrator keeps on, can you remove him please

2018-02-09 Thread Theo de Raadt
Unfortunately noone cares.

>The #OpenBSD IRC channel on FreeNode is listed under "OpenBSD
>Resources" at www.openbsd.org , so it is official to some degree.
>
>Blakkheim (I think he is t...@openbsd.org) is insisting with abusing his
>administrator privilege there, today by blocking me again.
>
>He seems to have some form of unsolicited ""IRC crush"" on me, as I
>have done nothing to provoke this stranger. This is tiring.
>
>Can you remove him as IRC administrator please?
>
>Thanks,
>Tinker
>
>



Continued, IRC administrator keeps on, can you remove him please

2018-02-09 Thread Tinker
Hi,

The #OpenBSD IRC channel on FreeNode is listed under "OpenBSD
Resources" at www.openbsd.org , so it is official to some degree.

Blakkheim (I think he is t...@openbsd.org) is insisting with abusing his
administrator privilege there, today by blocking me again.

He seems to have some form of unsolicited ""IRC crush"" on me, as I
have done nothing to provoke this stranger. This is tiring.

Can you remove him as IRC administrator please?

Thanks,
Tinker



Re: Random bans and weird behavior by blakkheim on the IRC channel, lift please? Wondering what's up with this guy, expecting sufficient manners from IRC chat ops.

2018-02-03 Thread Ingo Schwarze
Hi,

ti...@openmailbox.org wrote on Mon, Jan 29, 2018 at 05:31:11PM -:

> The operator "blakkheim" just banned me on the project's IRC channel,

The OpenBSD project does not even have an official IRC channel,
so this mail is completely off-topic on misc@ and i'm not even
going to read the rest of this posting.

Yours,
  Ingo



Re: Random bans and weird behavior by blakkheim on the IRC channel, lift please? Wondering what's up with this guy, expecting sufficient manners from IRC chat ops.

2018-01-29 Thread Sterling Archer
On Mon, Jan 29, 2018 at 6:31 PM,  <ti...@openmailbox.org> wrote:
> Hi misc@,
>
> The operator "blakkheim" just banned me on the project's IRC channel, out of 
> a private passion or agenda rather than for any benefit of the channel.
>
> I did something apparently-unapprioriate previously on the channel, which was 
> to send a handful mass-highlights in October last year, and then two of them 
> about three weeks ago.
>
> I contacted blakkheim separately to discuss the matter recently and he 
> dismissed to communicate. Two other ops said they would not lift blakkheim's 
> ban, and I have not gotten any response from the channel founder Han.
>
> Now that enough time passed, I made the effort to get into the channel and 
> then clarify the issue by sending a clarification that I understand that 
> blakkheim is easily irritated and that I will pay additional consideration to 
> not highlight people as to not disturb blakkheim in particular, please see 
> the clarification I sent, quoted at the bottom here in this email.
>
> blakkheim was not pleased apparently and instead banned me again, maybe 
> because of the fact that I mentioned his nickname at all. In all cases I find 
> his ban abusive.
>
> blakkheim's mandate to ban people from OpenBSD chat, is to protect the chat 
> from influences that would be malign to the flow of the conversation or to 
> the content of conversation.
>
> Since I am not in that zone, I find his behavior presently to be abusive and 
> disrespectful, and this is emphasized by the fact that I am a (non-code) 
> project contributor.
>
> While I totally see that a certain harshness of character is great for other 
> things, I do not see blakkheim to be justified in his present conduct as a 
> chat op.
>
> I have not tracked what he has done on the IRC channel previously, does he 
> have a history of throwing people around?
>
> I would like to be reassured that the ban has been lifted and that I not will 
> be at risk of being aggressed by blakkheim quieting or banning when 
> participating in a normal way on the chat, so that I would need to go through 
> hoops to enjoy normal project chat participation, which should be a normal 
> given.
>
> Any clarification of lift of the ban by PM or otherwise will be much 
> appreciated.
>
> I am not accustomed to being pushed by an IRC chat operator to be so 
> aggressive that I need to invoke a lot of people and make public 
> clarifications. This altogether leads me to ask what's wrong with blakkheim.
>
> Thanks,
> Tinker
>
>  --
>
> Message I sent on the channel:
>
> To finish a previous ban issue:
>
> Soo, I have at least transitorily changed my nickname, to circumvent the ban 
> for mass-highlighting three people in two messages, that blakkheim attributed 
> to me about three weeks ago, and then did not want to revert.
>
> I did a mass-highlight in October prior to that, and also annoyed blakkheim 
> by being chattier than he likes, during 2016.
>
> I'll likely not irritate blakkheim by being chatty in the future, and I 
> understand that he and others are severely irritated by highlighting more 
> than two people, so I will generally not do that.
>
> I would have appreciated if blakkheim did not ban me and insist with keeping 
> me banned, also with respect to the hardware and time donations I did to the 
> project in 2016-2017, not super big but still making a difference, and also 
> the contributions I am doing this year.
>
> Anyhow, so sorry for the highlights. I intend to not highlight again.
>
> Now please stop banning or quieting me, banning well-intended project 
> contributors (albeit not in code) for non-offenses is not productive.
>
> And so now I hope that problem is out of this world, thanks.
>
> .


So, you got banned from an IRC channel.

Okay. I suggest you move on.

-- 
:wq!



Re: Random bans and weird behavior by blakkheim on the IRC channel, lift please? Wondering what's up with this guy, expecting sufficient manners from IRC chat ops.

2018-01-29 Thread Mike Larkin
On Mon, Jan 29, 2018 at 05:31:11PM -, ti...@openmailbox.org wrote:
> Hi misc@,
> 
> The operator "blakkheim" just banned me on the project's IRC channel, out of 
> a private passion or agenda rather than for any benefit of the channel.
> 
> I did something apparently-unapprioriate previously on the channel, which was 
> to send a handful mass-highlights in October last year, and then two of them 
> about three weeks ago.
> 
> I contacted blakkheim separately to discuss the matter recently and he 
> dismissed to communicate. Two other ops said they would not lift blakkheim's 
> ban, and I have not gotten any response from the channel founder Han.
> 
> Now that enough time passed, I made the effort to get into the channel and 
> then clarify the issue by sending a clarification that I understand that 
> blakkheim is easily irritated and that I will pay additional consideration to 
> not highlight people as to not disturb blakkheim in particular, please see 
> the clarification I sent, quoted at the bottom here in this email.
> 
> blakkheim was not pleased apparently and instead banned me again, maybe 
> because of the fact that I mentioned his nickname at all. In all cases I find 
> his ban abusive.
> 
> blakkheim's mandate to ban people from OpenBSD chat, is to protect the chat 
> from influences that would be malign to the flow of the conversation or to 
> the content of conversation.
> 
> Since I am not in that zone, I find his behavior presently to be abusive and 
> disrespectful, and this is emphasized by the fact that I am a (non-code) 
> project contributor.
> 

what is a non-code project contributor?



Random bans and weird behavior by blakkheim on the IRC channel, lift please? Wondering what's up with this guy, expecting sufficient manners from IRC chat ops.

2018-01-29 Thread tinkr
Hi misc@,

The operator "blakkheim" just banned me on the project's IRC channel, out of a 
private passion or agenda rather than for any benefit of the channel.

I did something apparently-unapprioriate previously on the channel, which was 
to send a handful mass-highlights in October last year, and then two of them 
about three weeks ago.

I contacted blakkheim separately to discuss the matter recently and he 
dismissed to communicate. Two other ops said they would not lift blakkheim's 
ban, and I have not gotten any response from the channel founder Han.

Now that enough time passed, I made the effort to get into the channel and then 
clarify the issue by sending a clarification that I understand that blakkheim 
is easily irritated and that I will pay additional consideration to not 
highlight people as to not disturb blakkheim in particular, please see the 
clarification I sent, quoted at the bottom here in this email.

blakkheim was not pleased apparently and instead banned me again, maybe because 
of the fact that I mentioned his nickname at all. In all cases I find his ban 
abusive.

blakkheim's mandate to ban people from OpenBSD chat, is to protect the chat 
from influences that would be malign to the flow of the conversation or to the 
content of conversation.

Since I am not in that zone, I find his behavior presently to be abusive and 
disrespectful, and this is emphasized by the fact that I am a (non-code) 
project contributor.

While I totally see that a certain harshness of character is great for other 
things, I do not see blakkheim to be justified in his present conduct as a chat 
op.

I have not tracked what he has done on the IRC channel previously, does he have 
a history of throwing people around?

I would like to be reassured that the ban has been lifted and that I not will 
be at risk of being aggressed by blakkheim quieting or banning when 
participating in a normal way on the chat, so that I would need to go through 
hoops to enjoy normal project chat participation, which should be a normal 
given.

Any clarification of lift of the ban by PM or otherwise will be much 
appreciated.

I am not accustomed to being pushed by an IRC chat operator to be so aggressive 
that I need to invoke a lot of people and make public clarifications. This 
altogether leads me to ask what's wrong with blakkheim.

Thanks,
Tinker

 --

Message I sent on the channel:

To finish a previous ban issue:

Soo, I have at least transitorily changed my nickname, to circumvent the ban 
for mass-highlighting three people in two messages, that blakkheim attributed 
to me about three weeks ago, and then did not want to revert.

I did a mass-highlight in October prior to that, and also annoyed blakkheim by 
being chattier than he likes, during 2016.

I'll likely not irritate blakkheim by being chatty in the future, and I 
understand that he and others are severely irritated by highlighting more than 
two people, so I will generally not do that.

I would have appreciated if blakkheim did not ban me and insist with keeping me 
banned, also with respect to the hardware and time donations I did to the 
project in 2016-2017, not super big but still making a difference, and also the 
contributions I am doing this year.

Anyhow, so sorry for the highlights. I intend to not highlight again.

Now please stop banning or quieting me, banning well-intended project 
contributors (albeit not in code) for non-offenses is not productive.

And so now I hope that problem is out of this world, thanks.

.

Re: Connection drop (i.e. IRC) caused by pf/pfsync/carp/...?

2014-10-11 Thread Federico Giannici

On 10/10/14 23:34, Stuart Henderson wrote:

oops, missed your sysctl -a output (I wasn't expecting to see it,
well done ;-)

net.inet.ip.ifq.drops=140720

You would probably benefit from increasing net.inet.ip.ifq.maxlen,
maybe double it once or twice and see if net.inet.ip.ifq.drops stops
increasing.



Our users too experience some disconnects.

We have a firewall with a large PF config (a lot of rules and queues) 
and a 500 Mbps Internet connection. Here is some info:


# uptime
10:16AM  up 47 days, 18:52, 1 user, load averages: 0.90, 0.82, 0.77

# sysctl net.inet.ip.ifq
net.inet.ip.ifq.len=0
net.inet.ip.ifq.maxlen=1536
net.inet.ip.ifq.drops=3158576

# sysctl kern.netlivelocks
kern.netlivelocks=12031149

In pf we set limit states 100 and states always remain below 
20 (we graph them).


Complete dmesg, sysctl, and netstat -i follows.

Kernel is GENERIC (no MP) only change is HZ=1000 (for queues accuracy).

Any idea of what could be the problem and how to solve it?

Thanks.



# dmesg
OpenBSD 5.5-stable (NMFW) #1: Fri Aug 22 11:11:29 CEST 2014
giann...@legolas.neomedia.it:/usr/src/sys/arch/amd64/compile/NMFW
real mem = 8530317312 (8135MB)
avail mem = 8294674432 (7910MB)
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xec0f0 (76 entries)
bios0: vendor American Megatrends Inc. version 2.0 date 04/24/2014
bios0: Supermicro X10SLL-F
acpi0 at bios0: rev 2
acpi0: sleep states S0 S4 S5
acpi0: tables DSDT FACP APIC FPDT SSDT SSDT SSDT SSDT SSDT MCFG HPET 
SSDT SSDT SPMI DMAR EINJ ERST HEST BERT
acpi0: wakeup devices PEGP(S4) PEG0(S4) PEGP(S4) PEG1(S4) PEGP(S4) 
PEG2(S4) PXSX(S4) RP01(S4) PXSX(S4) RP02(S4) PXSX(S4) RP03(S4) PXSX(S4) 
RP05(S4) GLAN(S4) EHC1(S4) [...]

acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Xeon(R) CPU E3-1271 v3 @ 3.60GHz, 3600.16 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM

cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 100MHz
cpu at mainbus0: not configured
cpu at mainbus0: not configured
cpu at mainbus0: not configured
ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins
acpimcfg0 at acpi0 addr 0xf800, bus 0-63
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (PEG0)
acpiprt2 at acpi0: bus -1 (PEG1)
acpiprt3 at acpi0: bus -1 (PEG2)
acpiprt4 at acpi0: bus 2 (RP01)
acpiprt5 at acpi0: bus 4 (RP02)
acpiec0 at acpi0: Failed to read resource settings
acpicpu0 at acpi0: C1, PSS
acpipwrres0 at acpi0: PG00, resource for PEG0
acpipwrres1 at acpi0: PG01, resource for PEG1
acpipwrres2 at acpi0: PG02, resource for PEG2
acpipwrres3 at acpi0: FN00, resource for FAN0
acpipwrres4 at acpi0: FN01, resource for FAN1
acpipwrres5 at acpi0: FN02, resource for FAN2
acpipwrres6 at acpi0: FN03, resource for FAN3
acpipwrres7 at acpi0: FN04, resource for FAN4
acpitz0 at acpi0: critical temperature is 105 degC
acpitz1 at acpi0: critical temperature is 105 degC
acpibat0 at acpi0: BAT0 not present
acpibat1 at acpi0: BAT1 not present
acpibat2 at acpi0: BAT2 not present
acpibtn0 at acpi0: SLPB
acpibtn1 at acpi0: PWRB
acpibtn2 at acpi0: LID0
acpivideo0 at acpi0: GFX0
acpivout0 at acpivideo0: DD1F
ipmi at mainbus0 not configured
cpu0: Enhanced SpeedStep 3600 MHz: speeds: 3601, 3600, 3400, 3200, 3000, 
2800, 2600, 2400, 2200, 2000, 1800, 1600, 1400, 1200, 1000, 800 MHz

pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 Intel Xeon E3-1200 v3 Host rev 0x06
ppb0 at pci0 dev 1 function 0 Intel Core 4G PCIE rev 0x06: msi
pci1 at ppb0 bus 1
em0 at pci1 dev 0 function 0 Intel 82571EB rev 0x06: apic 8 int 16, 
address 00:26:55:d0:32:42
em1 at pci1 dev 0 function 1 Intel 82571EB rev 0x06: apic 8 int 17, 
address 00:26:55:d0:32:43

Intel 8 Series xHCI rev 0x05 at pci0 dev 20 function 0 not configured
em2 at pci0 dev 25 function 0 Intel I217-LM rev 0x05: msi, address 
00:25:90:46:61:b5

ehci0 at pci0 dev 26 function 0 Intel 8 Series USB rev 0x05: apic 8 int 16
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1
ppb1 at pci0 dev 28 function 0 Intel 8 Series PCIE rev 0xd5: msi
pci2 at ppb1 bus 2
ppb2 at pci2 dev 0 function 0 ASPEED Technology AST1150 PCI rev 0x03
pci3 at ppb2 bus 3
vga1 at pci3 dev 0 function 0 ASPEED Technology AST2000 rev 0x30
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
ppb3 at pci0 dev 28 function 1 Intel 8 Series PCIE rev 0xd5: msi
pci4 at ppb3 bus 4
em3 at pci4 dev 0 function 0 Intel I210 rev 0x03: msi, address 

Re: Connection drop (i.e. IRC) caused by pf/pfsync/carp/...?

2014-10-11 Thread Daniel Aubry
On Fri, 10 Oct 2014 21:28:25 + (UTC)
Stuart Henderson s...@spacehopper.org wrote:

Hi Stuart

Many thanks for the input, i do have access to the servers too.

 I was going to suggest that you might have asymmetric routing causing
 split states i.e. one firewall seeing inbound packets, one seeing
 outbound, in which case ifconfig pfsync0 defer might help, but
 (assuming you weren't just seeing issues from connections which
 had been setup before disabling one firewall) the above test would
 seem to rule that out ..

I think we had less connection drops with only one firewall, but they
didn't disappear. 

Pfsync is configured to use unicast, the defer option is present:

# cat /etc/hostname.pfsync0 
up syncif vlan123 defer syncpeer xx.xx.xx.xx

You are correct, the routing can be asymmetric in our case.

 What does the output of sysctl kern.netlivelocks net.inet.ip.ifq
 look like?

net.inet.ip.ifq.maxlen was set to 256 i've changed it to 768. I'll look
if the values in net.inet.ip.ifq.drops change.

Kind regards,
Daniel



Re: Connection drop (i.e. IRC) caused by pf/pfsync/carp/...?

2014-10-10 Thread Nicolas Christener
Hi

First, thank you Paul and Andy for your input! I'm very thankful for
your effort!

On Thu, 2014-10-09 at 16:08 +0100, Andy wrote:
 I have seen this when the allowed number or states is too low and PF 
 clears the idle states too early..
 
 See http://www.openbsd.org/faq/pf/options.html;
 set optimization/option/

We already had optimization set to conservative and we also followed
[1] to be sure that we don't hit the state table limit.
The state table limit is set to 300k and we're seeing around 110k states
per average and no massiv peaks.

But what we do see is the following quite high number - could this be a
problem (pfctl -s info)?:
# pfctl -s info 
state-mismatch   90777051.4/s
congestion  22280.0/s

Some settings from our pf.conf which could be related:
set block-policy return
set debug urgent
set fingerprints /etc/pf.os
set limit states 30
set limit src-nodes 5
set loginterface none
set optimization conservative
set reassemble no
set ruleset-optimization basic
set state-policy floating
set timeout frag 30
set timeout interval 10

So according to Paul the problem lays somewhere in pf itself, should we
fill a bug in that case? Or can we do something more to make sure that
the problem isn't on our side?

Thanks again for your help and have a nice day!

Kind regards,
Nicolas

[1]
http://www.packetmischief.ca/2011/02/17/hitting-the-pf-state-table-limit/



Re: Connection drop (i.e. IRC) caused by pf/pfsync/carp/...?

2014-10-10 Thread Stuart Henderson
On 2014-10-09, Nicolas Christener li...@0x17.ch wrote:
 Besides those steps we also disabled one of the boxes by stopping ospf
 and removing the carp interfaces - however, the disconnects didn't go
 away. 

I was going to suggest that you might have asymmetric routing causing
split states i.e. one firewall seeing inbound packets, one seeing
outbound, in which case ifconfig pfsync0 defer might help, but
(assuming you weren't just seeing issues from connections which
had been setup before disabling one firewall) the above test would
seem to rule that out ..

What does the output of sysctl kern.netlivelocks net.inet.ip.ifq
look like?



Re: Connection drop (i.e. IRC) caused by pf/pfsync/carp/...?

2014-10-10 Thread Stuart Henderson
oops, missed your sysctl -a output (I wasn't expecting to see it,
well done ;-)

net.inet.ip.ifq.drops=140720

You would probably benefit from increasing net.inet.ip.ifq.maxlen,
maybe double it once or twice and see if net.inet.ip.ifq.drops stops
increasing.



Connection drop (i.e. IRC) caused by pf/pfsync/carp/...?

2014-10-09 Thread Nicolas Christener
Hello

We have a somewhat curious issue and run out of ideas ;)

We do not have a trigger to reproduce the issue, but we for example see
some IRC disconnects from users behind our firewall.

What we have:
- two HP Proliant DL360 G5 with Broadcom BCM5708 NICs, 2GB RAM,
  Intel Xeon E5335@2.0GHz
- OpenBSD 5.5
- trunk between the two NICs
- 13 VLANs interfaces with carp failover
- one VLAN for pfsync
- ospfd and ospf6d
- approx. 200Mbit/s of traffic
- the initial pfysnc takes quite long (~1h)

The setup looks like this (not sure if relevant):
- both servers have a failover trunk with two interfaces
- all traffic including pfsync is sent over this trunk
- the problem also occurs, if we disable one box

What happens/what we tried:
The main issue is, that we occasionally see broken SSH connections and
quite a lot of broken IRC connections during the day. It looks a bit
like the problem happens more in the evening - however we do not see a
correlation with the amount of traffic or number of connections.
As a first reaction we updated to the latest stable OpenBSD release
which didn't solve the issue. Afterwards we replaced the onboard
Broadcom NIC with a PCIe Intel 82576 (em driver) card, however this card
seems to cause some new issues - i.e. we see quite some input (rx)
errors using netstat -i. Because we don't see such errors using the
Broadcom NICs we decided to not investigate this issue any further and
switch back to the Broadcom setup.
Besides those steps we also disabled one of the boxes by stopping ospf
and removing the carp interfaces - however, the disconnects didn't go
away. 
Furthermore we also checked if any state-tables are overflowing and we
didn't find any suspicious kernel messages either.

We have quite a similar setup which doesn't show those issues - however
we don't have the same amount of traffic over those systems.

I uploaded some information about the system to this place:
* sysctl -a http://dpaste.com/08VBA93
* pfctl (w/o rules and states) http://dpaste.com/2BBJG5P
Feel free to ask for more if needed.

Long story short; do you have any hints or ideas where we could look
next? Did you ever see such a problem in an other setup? At least to me,
it looks like long-during sessions (like IRC) are somehow affected -
does this ring some bells?

I appreciate any hints and hope that I didn't miss any important
information - otherwise feel free to bug me.

Thanks in advance and have a nice day!

Kind regards,
Nicolas



Re: Connection drop (i.e. IRC) caused by pf/pfsync/carp/...?

2014-10-09 Thread Paul S.
I can confirm that we've seen this with any long running TCP connections 
in environments where pf was literally only sampling packets for pflow 
(not even actually firewalling.)


Removing pf from the equation fixed the problem right up.

5.5 current was what I was running at the time.

On 10/9/2014 午後 10:52, Nicolas Christener wrote:

Hello

We have a somewhat curious issue and run out of ideas ;)

We do not have a trigger to reproduce the issue, but we for example see
some IRC disconnects from users behind our firewall.

What we have:
- two HP Proliant DL360 G5 with Broadcom BCM5708 NICs, 2GB RAM,
   Intel Xeon E5335@2.0GHz
- OpenBSD 5.5
- trunk between the two NICs
- 13 VLANs interfaces with carp failover
- one VLAN for pfsync
- ospfd and ospf6d
- approx. 200Mbit/s of traffic
- the initial pfysnc takes quite long (~1h)

The setup looks like this (not sure if relevant):
- both servers have a failover trunk with two interfaces
- all traffic including pfsync is sent over this trunk
- the problem also occurs, if we disable one box

What happens/what we tried:
The main issue is, that we occasionally see broken SSH connections and
quite a lot of broken IRC connections during the day. It looks a bit
like the problem happens more in the evening - however we do not see a
correlation with the amount of traffic or number of connections.
As a first reaction we updated to the latest stable OpenBSD release
which didn't solve the issue. Afterwards we replaced the onboard
Broadcom NIC with a PCIe Intel 82576 (em driver) card, however this card
seems to cause some new issues - i.e. we see quite some input (rx)
errors using netstat -i. Because we don't see such errors using the
Broadcom NICs we decided to not investigate this issue any further and
switch back to the Broadcom setup.
Besides those steps we also disabled one of the boxes by stopping ospf
and removing the carp interfaces - however, the disconnects didn't go
away.
Furthermore we also checked if any state-tables are overflowing and we
didn't find any suspicious kernel messages either.

We have quite a similar setup which doesn't show those issues - however
we don't have the same amount of traffic over those systems.

I uploaded some information about the system to this place:
* sysctl -a http://dpaste.com/08VBA93
* pfctl (w/o rules and states) http://dpaste.com/2BBJG5P
Feel free to ask for more if needed.

Long story short; do you have any hints or ideas where we could look
next? Did you ever see such a problem in an other setup? At least to me,
it looks like long-during sessions (like IRC) are somehow affected -
does this ring some bells?

I appreciate any hints and hope that I didn't miss any important
information - otherwise feel free to bug me.

Thanks in advance and have a nice day!

Kind regards,
Nicolas




Re: Connection drop (i.e. IRC) caused by pf/pfsync/carp/...?

2014-10-09 Thread Andy
I have seen this when the allowed number or states is too low and PF 
clears the idle states too early..

See http://www.openbsd.org/faq/pf/options.html;
set optimization/option/

Good luck, Andy.


On 09/10/14 14:58, Paul S. wrote:
 I can confirm that we've seen this with any long running TCP 
 connections in environments where pf was literally only sampling 
 packets for pflow (not even actually firewalling.)

 Removing pf from the equation fixed the problem right up.

 5.5 current was what I was running at the time.

 On 10/9/2014 午後 10:52, Nicolas Christener wrote:
 Hello

 We have a somewhat curious issue and run out of ideas ;)

 We do not have a trigger to reproduce the issue, but we for example see
 some IRC disconnects from users behind our firewall.

 What we have:
 - two HP Proliant DL360 G5 with Broadcom BCM5708 NICs, 2GB RAM,
Intel Xeon E5335@2.0GHz
 - OpenBSD 5.5
 - trunk between the two NICs
 - 13 VLANs interfaces with carp failover
 - one VLAN for pfsync
 - ospfd and ospf6d
 - approx. 200Mbit/s of traffic
 - the initial pfysnc takes quite long (~1h)

 The setup looks like this (not sure if relevant):
 - both servers have a failover trunk with two interfaces
 - all traffic including pfsync is sent over this trunk
 - the problem also occurs, if we disable one box

 What happens/what we tried:
 The main issue is, that we occasionally see broken SSH connections and
 quite a lot of broken IRC connections during the day. It looks a bit
 like the problem happens more in the evening - however we do not see a
 correlation with the amount of traffic or number of connections.
 As a first reaction we updated to the latest stable OpenBSD release
 which didn't solve the issue. Afterwards we replaced the onboard
 Broadcom NIC with a PCIe Intel 82576 (em driver) card, however this card
 seems to cause some new issues - i.e. we see quite some input (rx)
 errors using netstat -i. Because we don't see such errors using the
 Broadcom NICs we decided to not investigate this issue any further and
 switch back to the Broadcom setup.
 Besides those steps we also disabled one of the boxes by stopping ospf
 and removing the carp interfaces - however, the disconnects didn't go
 away.
 Furthermore we also checked if any state-tables are overflowing and we
 didn't find any suspicious kernel messages either.

 We have quite a similar setup which doesn't show those issues - however
 we don't have the same amount of traffic over those systems.

 I uploaded some information about the system to this place:
 * sysctl -a http://dpaste.com/08VBA93
 * pfctl (w/o rules and states) http://dpaste.com/2BBJG5P
 Feel free to ask for more if needed.

 Long story short; do you have any hints or ideas where we could look
 next? Did you ever see such a problem in an other setup? At least to me,
 it looks like long-during sessions (like IRC) are somehow affected -
 does this ring some bells?

 I appreciate any hints and hope that I didn't miss any important
 information - otherwise feel free to bug me.

 Thanks in advance and have a nice day!

 Kind regards,
 Nicolas



IRC

2013-10-22 Thread tls
I have up until now relied on manpages and issues sent upstream though
users. This issue on the otherhand has ignited my passion.  I have never
been more galvanized or stirred with passion until tonight.  At this very
moment I am filled with rage, on the other hand I realize the fault is not
grasped within my accusers realm.  Had it been I would be continually
working in silence and vocally supporting OpenBSD, however at this time
I've not only been accused as a liar amongst my peers but labeled as
someone that is not me. That I cannot or shall not tolerate.


That being said. I am sure han is reading this and rest assured I am not
this man you fingered me as to be. You see I raised and taught to have
integrety and honor with everything I do - although at time I deviate this
but this is far from the person you accuse me of being.

You'll have to forgive me for raising shitstorm in #freenode but nothing on
this earth will ever incite such anger then someone calling me a liar.


tls.



IRC

2013-10-22 Thread tls
I have up until now relied on manpages and issues sent upstream though
users. This issue on the otherhand has ignited my passion.  I have never
been more galvanized or stirred with passion until tonight.  At this very
moment I am filled with rage, on the other hand I realize the fault is not
grasped within my accusers realm.  Had it been I would be continually
working in silence and vocally supporting OpenBSD, however at this time
I've not only been accused as a liar amongst my peers but labeled as
someone that is not me. That I cannot or shall not tolerate.


That being said. I am sure han is reading this and rest assured I am not
this man you fingered me as to be. You see I raised and taught to have
integrety and honor with everything I do - although at time I deviate this
but this is far from the person you accuse me of being.

You'll have to forgive me for raising shitstorm in #freenode but nothing on
this earth will ever incite such anger then someone calling me a liar.



Re: IRC

2013-10-22 Thread Jérémie Courrèges-Anglas
Just for the record: the freenode #openbsd irc channel isn't the official
irc channel of the OpenBSD project.  We don't care about what happens
there.

-- 
jca | PGP: 0x06A11494 / 61DB D9A0 00A4 67CF 2A90  8961 6191 8FBF 06A1 1494



Re: IRC

2013-10-22 Thread eric oyen
raging about it only makes you look defensive. If someone accuses you of lying, 
ask them to present real  facts to back up the assertion. If they can't, then 
you don't have to do a thing (they are already made foolish enough). Besides, 
anyone who really knows you will dismiss the accusations without any further 
thought. I had to learn this lesson the hard way about 2 decades ago.

anyway, NUFF said.

On Oct 22, 2013, at 7:16 AM, tls wrote:

 I have up until now relied on manpages and issues sent upstream though
 users. This issue on the otherhand has ignited my passion.  I have never
 been more galvanized or stirred with passion until tonight.  At this very
 moment I am filled with rage, on the other hand I realize the fault is not
 grasped within my accusers realm.  Had it been I would be continually
 working in silence and vocally supporting OpenBSD, however at this time
 I've not only been accused as a liar amongst my peers but labeled as
 someone that is not me. That I cannot or shall not tolerate.
 
 
 That being said. I am sure han is reading this and rest assured I am not
 this man you fingered me as to be. You see I raised and taught to have
 integrety and honor with everything I do - although at time I deviate this
 but this is far from the person you accuse me of being.
 
 You'll have to forgive me for raising shitstorm in #freenode but nothing on
 this earth will ever incite such anger then someone calling me a liar.



New UNIX (specially OpenBSD) spaniard community IRC

2011-08-09 Thread Pablo Velasco Fernández
For those from Spain who uses UNIX. We are triying to make a community in
Spain. Its called UNIX in general because there are a few people who  uses
OpenBSD in Spain. We have the irc channel in: irc.freenode.org #unixes. Hope
to find OpenBSD users in Spain soon!



Re: irc

2011-04-28 Thread Alexander Schrijver
On Thu, Apr 28, 2011 at 12:44:24AM +0200, David Steiner wrote:
 thoughts?

Some people don't like it when you make IRC logs publicly available.



Re: irc

2011-04-28 Thread Janne Johansson
2011/4/28 David Steiner davidsteiner2...@gmail.com

 DuClare A true lurker would have seen the unwritten rule
 DuClare Shut up.  If someone starts speaking, complain.

 thoughts?


Sure. If #openbsd at freenode.net was any kind of official IRC channel for
openbsd, it would have said so on the openbsd web.

-- 
 To our sweethearts and wives.  May they never meet. -- 19th century toast



irc

2011-04-27 Thread David Steiner
DuClare A true lurker would have seen the unwritten rule
DuClare Shut up.  If someone starts speaking, complain.

thoughts?



Re: irc

2011-04-27 Thread Ted Unangst
On Wed, Apr 27, 2011 at 6:57 PM, David Steiner
davidsteiner2...@gmail.com wrote:

 akfaew cinch: what i'm trying to say is stop your flooding of boring
 irrelevant shit on this channel

David: what i'm trying to say is stop your flooding of boring
irrelevant shit on this list



irc

2008-04-27 Thread x72eme
Is there an official OpenBSD IRC channel?
thank you, and i am sorry but couldnt find info about it in
faqs



Re: irc

2008-04-27 Thread Jacob Yocom-Piatt

[EMAIL PROTECTED] wrote:

Is there an official OpenBSD IRC channel?
thank you, and i am sorry but couldnt find info about it in
faqs

  


use the archives, this has been discussed.



Re: irc

2008-04-27 Thread Chris
On Mon, 28 Apr 2008 03:03:06 +0200
[EMAIL PROTECTED] wrote:

 Is there an official OpenBSD IRC channel?
 thank you, and i am sorry but couldnt find info about it in
 faqs



I know how frustrating it is to get an answer like:
look elsewhere, or search the archives so...

You would be best served to use freenode.

--
Best regards,

Chris

()  ascii ribbon campaign - against html e-mail
/\  www.asciiribbon.org   - against proprietary attachments

There's no place like 127.0.0.1

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]



Re: Chatting with developers? IRC!

2008-04-16 Thread Paul Greidanus

On 15-Apr-08, at 11:12 AM, Unix Fan wrote:
I found an old email on the mailing lists, dating back to 1996, when  
Theo announced users could connect and chat with the developers on  
their ICB server.


I'm wondering, when did it go private? Why can't users join and  
chat.. or idle.. and watch OpenBSD development as it takes place,  
are there any other places to go besides -cvs?


It sounds like you're interested in building some sort of online  
OpenBSD community, maybe some developers, maybe some users.. maybe  
some newbies, maybe some experienced people.


This exists, it's #openbsd on irc.freenode.net.  I'm there, my nick is  
prg3.  I'm not a dev though, so I may not count.


Paul



IRC Server Setup and Configuration HowTo

2006-10-23 Thread Tito Mari Francis Escaño

Good day!

In our office we use irc-hybrid on CentOS4.4 as IRC server. I plan to
use OpenBSD 3.9 as my test IRC server with the provided irc-2.10.3p1
package.

Can anybody on the list provide me with pointers to howto's how to
configure this IRC server in OpenBSD? You're help would be very much
appreciated.

Thank you very much.



Re: IRC Server Setup and Configuration HowTo

2006-10-23 Thread Girish Venkatachalam
On Mon, Oct 23, 2006 at 06:05:02PM +0800, Tito Mari Francis Esca?o wrote:
 Good day!
Good day to you too! :-)
 
 In our office we use irc-hybrid on CentOS4.4 as IRC server. I plan to
 use OpenBSD 3.9 as my test IRC server with the provided irc-2.10.3p1
 package.
 
 Can anybody on the list provide me with pointers to howto's how to
 configure this IRC server in OpenBSD? You're help would be very much
 appreciated.

I setup my OpenBSD machine as a standalone irc server as well as a bitlbee 
gateway. I think bitlbee has trampled all over my irc setup. :-)

But it was very simple to do since right now I care two hoots about security. 

The config file is attached. It just works but I am damn sure there are plenty 
of gaping security holes in it.

Hope this helps.

The P: lines tell you which all lines ircd listens for irc connections.

Good luck!

regards,
Girish

$grep -v ^# /etc/ircd/ircd.conf

M:girish.ftpaccess.cc::Chennai West Mambalam:6667
A:Girish Venkatachalam, Chennai:Girish Venkatachalam [EMAIL PROTECTED]:Test 
IRC server::
P6667:
P194:
P529:
Y:1:90::100:512000:1:1
I:*:::*:1


-- 
Great people are not defined by ability but by nobility



Re: IRC Server Setup and Configuration HowTo

2006-10-23 Thread Jim Dew
On Mon, Oct 23, 2006 at 06:05:02PM +0800, Tito Mari Francis Escaqo wrote:
 Good day!
 
 In our office we use irc-hybrid on CentOS4.4 as IRC server. I plan to
 use OpenBSD 3.9 as my test IRC server with the provided irc-2.10.3p1
 package.
 
 Can anybody on the list provide me with pointers to howto's how to
 configure this IRC server in OpenBSD? You're help would be very much
 appreciated.
 
 Thank you very much.
 

Well, kind of good news is I ported ircd-hybric and hybserv2 a while ago.
Based on the freebsd ports of the same:

http://www.yggdrasil.ca/openbsd/ports/ircd-hybrid.tgz
http://www.yggdrasil.ca/openbsd/ports/hybserv2.tgz

Jim

-- 
Most moms teach their daughters how to run a house, but you?  You teach
yours the fine art of mass destruction.
  - Nabs - Goodbye is not forever



What do you mean `hand-holding on IRC'!!!

2006-04-02 Thread Han Boetes
We do it all the time!

00:52   BSDWhelp| I know changelogs are the easy way to see what changes, but 
how/when/wherecanwesee how the project gets directed for the next release topic?
00:52Han| plus.html
00:52   BSDWhelp| sure, that's the changelog
00:52   BSDWhelp| but what makes one change the big one?
00:53Han| e dunno... :-\
00:54 cmihai| Check Theo interview on undeadly BSDWhelp
00:54 cmihai| You don't :)
00:54   | scarynetworkguy loved Joan.
00:54  scarynetw| Yay! Theo!
00:54 cmihai| Pfff, you want us to hold your hand now? :D
00:54   BSDWhelp| he's just pumping up the funding again
00:54 cmihai| Apparently he thinks very little of us hand-holders on IRC 
:).
00:54   BSDWhelp| lol
00:54Han| All spend on liquor!
00:54 cmihai| BSDWhelp, well, he needs his beer! Humppa!
00:54   | scarynetworkguy holds cmihai's hand and skips down the 
street. 
00:55   BSDWhelp| yeah, I saw the livejournal too
00:55   | Han joins the handholding :-)
00:55   BSDWhelp| the question about what kind of bird that was on his shoulder 
was an amusing inside joke
00:55Han| Come on everyone. Lets do as Theo suggests and hold hands!
00:55 cmihai| W
00:55 cmihai| This is so 1970, but without the LSD.
00:56  scarynetw| The person with whom I wish to hold hands isn't here. ...
00:56   BSDWhelp| I'm here, scarynetworkguy
00:56  jsunn| yes he is!
00:56  jsunn| :D
00:56 daowee| just open your heart and let the love flow my friend
00:56   | Han _will_ post this on misc@
00:57  scarynetw| Bah
00:57   | scarynetworkguy pouts. 
00:57   | jsunn opens a can of hippie-stallman love all over the channel
00:57   BSDWhelp| the 1970s release was 3.7
00:57  scarynetw| Hehe.
00:58  scarynetw| On Friday night we went to eat at a new age/vegan sort of 
place.
00:58Han| come on scarynetworkguy, bring that person over here! :-)
00:58  scarynetw| Walked in. Looked at my mate. My god, it's full of hippies.
00:58  jsunn| ZOMG!! BEARDS!!
00:58 cmihai| Don't tell me you're a vegan?
00:58  scarynetw| Han: That person is making beer this afternoon.
00:59 cmihai| We used to make home brewed beer all the time.
00:59Han| And then you grabbed your guitar and joined the throng, while 
puffing on a joint ? :-)
00:59   BSDWhelp| puffing! woo openbsd pun
00:59  scarynetw| cmihai: No no no. But they do make a killer pad thai.
00:59Han| Didn't even notice it.
01:00 daowee| it just comes naturally to you when you're in a state of 
elevation man, elevation maaan!
01:00Han| Well I felt sorry for the elephant!
01:01 daowee| hey i'm a lover of all things, i can dig that man
01:01Han| hmmm somehow I got the feeling noone in here knows `The young 
ones.'
01:02 daowee| the song or the tv show?
01:02Han| Actually, cliff did a song with the young ones =)
01:03 daowee| how noble (pun)
01:03Han| Something about a living doll. Go figure.
01:04 cmihai| Michael Jackson?
01:05 cmihai| G. W. Bush??
01:05 cmihai| Oh, wait. That's a puppet.
01:06   | jsunn runs to the store to buy some expensive, non-homebrew 
beer. maybe some heine's...
01:07   | scarynetworkguy cries. 
01:07 daowee| scarynetworkguy: duude, yer getting a bud
01:07  scarynetw| Ew!
01:08   BSDWhelp| that'd be so funny if Wal-Mart offered upa  load of PCs for 
obsd devs


You can find more of this nonsense on irc.freenode.net on the #OpenBSD channel 
=)



# Han



Re: No Joy with net/irc

2005-11-21 Thread Jim Razmus
* Jim Razmus [EMAIL PROTECTED] [051009 19:19]:
 I'm trying to setup an internal 3 node irc network for my company.  I
 have two nodes, both on OpenBSD, bursting just fine.  However, I can't
 seem to get a third node to graft itself on to the hub server.
 
 Has anyone successfully run a multi-node irc network with OpenBSD as a hub
 server?
 
 Thanks,
 Jim
 

For the archives I did solve this problem.  You have to #define HUB in
the config.h file.  It's normally commented out.

I was able to include that define and compile just fine.  I then was
able to setup a four node irc network consisting of the hub and three
leaf nodes.

One other compile time constraint I ran into was max channels per user.
I also saw that I would run into the max connections limit as well.  I
bumped those figures as well.

I am submitting a patch to ports@ that adds the hub and big flavors
to automate these changes.

Jim



No Joy with net/irc

2005-10-09 Thread Jim Razmus
I'm trying to setup an internal 3 node irc network for my company.  I
have two nodes, both on OpenBSD, bursting just fine.  However, I can't
seem to get a third node to graft itself on to the hub server.

Has anyone successfully run a multi-node irc network with OpenBSD as a hub
server?

Thanks,
Jim