Re: Kerneltrap interview available

2007-08-08 Thread Robert Clark


I like "retcon", "timelord", or "tardis".

[RC]

On Aug 7, 2007, at 6:54 PM, Chris Turner wrote:


Matthew Dillon wrote:
Jeremy did another interview of me in Kernel Trap, here's the  
URL:


http://kerneltrap.org/node/14116

-Matt


hey so what happened to the "Hammer" FS name ?


JA: Does your new filesystem have a name?
Matthew Dillon: Not yet. 'DFS' is taken unfortunately.








Re: Trying to setup PF and spamd...hell!

2007-08-08 Thread Jeremy C. Reed
On Wed, 8 Aug 2007, Cédric Berger wrote:

> Jeremy C. Reed wrote:
> > On Thu, 9 Aug 2007, [EMAIL PROTECTED] wrote:
> > 
> > > but when i run spamd-setup, i get a message after about 10 seconds: Broken
> > > pipe.
> > > 
> > > also when i run spamdb it says there is no database in /var/db/spamd.
> > 
> > Did you start "spamd" and is the daemon still running? (It creates the
> > database if it doesn't exist.)
> 
> Not sure about that.

The source hs:

  /* check to see if /var/db/spamd exists, if not, create it */
  if ((i = open(PATH_SPAMD_DB, O_RDWR, 0)) == -1 && errno == ENOENT) {
  i = open(PATH_SPAMD_DB, O_RDWR|O_CREAT, 0644);

> Just do a 'touch /var/db/spamd'

  Jeremy C. Reed

mbuf leak found - (was mbuf leak in kernel)

2007-08-08 Thread Matthew Dillon
I found the mbuf leak.  It was introduced in a commit I made in April
which allowed control and address data to be thrown away on insufficient
socket buffer space.  The wrong error code was being returned and
preventing the mbuf from being freed.

The mbuf leak occurs most often when a large amount of information is
sent to syslog, such as by a mail or web server subsystem.

This bug is pretty serious and will require 1.10.1 to be rolled this
weekend.  The 1.10 slip tag has already been updated so release
users can get the change now from the main site (or tomorrow from the
mirrors).  HEAD's slip tag has not yet been updated because of some
issues in HEAD at the moment.

The commits to HEAD are:

http://www.dragonflybsd.org/cvsweb/src/sys/sys/socketvar.h.diff?r1=1.28&r2=1.29&f=u
http://www.dragonflybsd.org/cvsweb/src/sys/kern/uipc_usrreq.c.diff?r1=1.34&r2=1.35&f=u

The commits to RELEASE are:

http://www.dragonflybsd.org/cvsweb/src/sys/sys/socketvar.h.diff?r1=1.28&r2=1.28.2.1&f=u
http://www.dragonflybsd.org/cvsweb/src/sys/kern/uipc_usrreq.c.diff?r1=1.34&r2=1.34.2.1&f=u


-Matt
Matthew Dillon 
<[EMAIL PROTECTED]>


RealTek 8168B/8111B, new revision

2007-08-08 Thread Dennis den Brok
Hello,

is there a chance to get support for what NetBSD calls "SPIN3" of
the chip mentioned in the subject into DF? I've always been eager
to try DF out, but so far was held back by lack of networking
support on my (only) box... cf.
http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/dev/ic/ rtl81*9*.{c,h}
and http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/dev/pci/if_re_pci.c
, respectively.

TIA, anyways.

--
Dennis den Brok


Re: Trying to setup PF and spamd...hell!

2007-08-08 Thread Cédric Berger

Jeremy C. Reed wrote:

On Thu, 9 Aug 2007, [EMAIL PROTECTED] wrote:


but when i run spamd-setup, i get a message after about 10 seconds: Broken
pipe.

also when i run spamdb it says there is no database in /var/db/spamd.


Did you start "spamd" and is the daemon still running? (It creates the 
database if it doesn't exist.)


Not sure about that.

Just do a 'touch /var/db/spamd'

Cedric


mbuf leak in kernel

2007-08-08 Thread Matthew Dillon
It looks like there is a mbuf leak somewhere in -RELEASE and in -HEAD.
I do not know where it is yet but if anyone has done any recent
networking work (general work, not the wireless stuff), please check
over your commits.

-Matt


Re: Trying to setup PF and spamd...hell!

2007-08-08 Thread Joerg Sonnenberger
On Thu, Aug 09, 2007 at 01:22:27AM +1000, [EMAIL PROTECTED] wrote:
> I decided to try spamd/greylisting so I configured pf.conf the following way:

Don't rdr into the 127/8, use a different subnet.

Joerg


Re: Looking for ap22-subversion

2007-08-08 Thread Joerg Sonnenberger
On Wed, Aug 08, 2007 at 02:04:57PM -0300, Sd?vtaker wrote:
> Did someone port ap22-subversion to DFBSD?

You have to build subversion-base with option apache22.
This is related to the incompatibility of apr versions between
Apache 2.0 and Apache 2.2.

Joerg


Re: Looking for ap22-subversion

2007-08-08 Thread Justin C. Sherrill
On Wed, August 8, 2007 1:04 pm, Sdävtaker wrote:
> Did someone port ap22-subversion to DFBSD?
> I saw it in NetBSD and FBSD portcollections, but cant find it for DFBSD.
> Sdäv
>

pkgsrc has it: http://pkgsrc.se/www/ap2-subversion

NetBSD originated pkgsrc, but it runs on multiple operating systems -
DragonFly included.



Re: Kerneltrap interview available

2007-08-08 Thread Matthew Dillon

:> Jeremy did another interview of me in Kernel Trap, here's the URL:
:
:Heh, judging by all the anonymous comments, somebody really has a bee in
:their pants over the whole SMP thing.  I better stop feeding those trolls.
:
:Dare I ask for the cold hard truth about the state of SMP on DragonFly?

It's not actually that bad.  The main paths that need to be locked up
are the I/O path (all the way through to the filesystem code, including
the buffer cache) and the VM path (which is less important).  A
per-process spinlock is also needed to handle MP safe operations in
the presence of multiple threads (LWPs or rforked processes).
Just about everything else is already coded MP safe, but still make
general procedure calls into the kernel which are not yet coded MP safe.
This is basically where the networking code is... MP safe except for
mbuf statistics and mbuf dup/free paths.  Network drivers are serialized
within themselves but still make kernel calls which are not MP safe.
Protocol threads themselves are coded MP safe but do the same thing (make
general calls that aren't).

For userland applications we need to switch from libc_r to libthread_xu,
which means figuring out what still needs to be done in that library to
make it work properly with major applications.  KDE, Firefox, etc.
There isn't a whole lot left that needs to be done there, its just a
matter of tracking down the remaining issues.  We probably need to
implement the various posix scheduling methodologies, too.

SMP isn't on my priority list but that shouldn't stop anyone who wants
to work on it.

-Matt
Matthew Dillon 
<[EMAIL PROTECTED]>


Looking for ap22-subversion

2007-08-08 Thread Sdävtaker

Did someone port ap22-subversion to DFBSD?
I saw it in NetBSD and FBSD portcollections, but cant find it for DFBSD.
Sdäv


Re: Trying to setup PF and spamd...hell!

2007-08-08 Thread Simon 'corecode' Schubert

Cédric Berger wrote:
What's in the spamd-white table?  you don't use quick statements 
above, so the latest matching rule takes precedence, maybe not what 
you want.


rdr/nat rules are first-match rules anyway. not very intuitive I know...


heh.  I suspected that, but thought that the usability was better... :)

cheers
 simon


Re: Trying to setup PF and spamd...hell!

2007-08-08 Thread Jeremy C. Reed
On Thu, 9 Aug 2007, [EMAIL PROTECTED] wrote:

> but when i run spamd-setup, i get a message after about 10 seconds: Broken
> pipe.
> 
> also when i run spamdb it says there is no database in /var/db/spamd.

Did you start "spamd" and is the daemon still running? (It creates the 
database if it doesn't exist.)



  Jeremy C. Reed


Re: Trying to setup PF and spamd...hell!

2007-08-08 Thread Cédric Berger

[EMAIL PROTECTED] wrote:

I decided to try spamd/greylisting so I configured pf.conf the following way:

rdr pass on $int_if proto tcp from  to $int_if port smtp ->
127.0.0.1 port smtp
rdr pass on $int_if proto tcp from  to $int_if port smtp ->
127.0.0.1 port 8025
rdr pass on $int_if proto tcp from  to $int_if port smtp ->
127.0.0.1 port 8025
rdr pass on $int_if proto tcp from  to $int_if port smtp ->
127.0.0.1 port smtp
rdr pass on $int_if proto tcp from ! to $int_if port smtp ->
127.0.0.1 port 8025



This comes from pf.conf example in OpenBSD:

  no rdr on $ext_if proto tcp from  to any port smtp
  rdr pass on $ext_if proto tcp from any to any port smtp \
   -> 127.0.0.1 port spamd

That's all what you need.

Why are you using $int_if? usually you filter spam on external $iface.

Cedric


Re: Trying to setup PF and spamd...hell!

2007-08-08 Thread Cédric Berger

Simon 'corecode' Schubert wrote:

[EMAIL PROTECTED] wrote:

rdr pass on $int_if proto tcp from ! to $int_if port smtp ->
127.0.0.1 port 8025

everything gets delivered the normal way.


What's in the spamd-white table?  you don't use quick statements above, 
so the latest matching rule takes precedence, maybe not what you want.


rdr/nat rules are first-match rules anyway. not very intuitive I know...

Cedric


Re: Trying to setup PF and spamd...hell!

2007-08-08 Thread Simon 'corecode' Schubert

[EMAIL PROTECTED] wrote:

rdr pass on $int_if proto tcp from ! to $int_if port smtp ->
127.0.0.1 port 8025

everything gets delivered the normal way.


What's in the spamd-white table?  you don't use quick statements above, so the 
latest matching rule takes precedence, maybe not what you want.

cheers
 simon


Trying to setup PF and spamd...hell!

2007-08-08 Thread elekktretterr
I decided to try spamd/greylisting so I configured pf.conf the following way:

rdr pass on $int_if proto tcp from  to $int_if port smtp ->
127.0.0.1 port smtp
rdr pass on $int_if proto tcp from  to $int_if port smtp ->
127.0.0.1 port 8025
rdr pass on $int_if proto tcp from  to $int_if port smtp ->
127.0.0.1 port 8025
rdr pass on $int_if proto tcp from  to $int_if port smtp ->
127.0.0.1 port smtp
rdr pass on $int_if proto tcp from ! to $int_if port smtp ->
127.0.0.1 port 8025


The filtering machine is the postfix server itself as you can see.

Ive installed and configured spamd.conf the following way.

daria# less /usr/pkg/etc/spamd.conf
all:\
:spews1:spews2:china:korea:russia:mycustom-black:

# Mirrored from http://www.spews.org/spews_list_level1.txt
spews1:\
:black:\
:msg="SPAM. Your address %A is in the spews level 1 database\n\
See http://www.spews.org/ask.cgi?x=%A for more details":\
:method=http:\
:file=www.openbsd.org/spamd/spews_list_level1.txt.gz:

# Mirrored from http://www.spews.org/spews_list_level2.txt
spews2:\
:black:\
:msg="SPAM. Your address %A is in the spews level 2 database\n\
See http://www.spews.org/ask.cgi?x=%A for more details":\
:method=http:\
:file=www.openbsd.org/spamd/spews_list_level2.txt.gz:

# Mirrored from http://www.okean.com/chinacidr.txt
china:\
:black:\
:msg="SPAM. Your address %A appears to be from China\n\
See http://www.okean.com/asianspamblocks.html for more details":\
:method=http:\
:file=www.openbsd.org/spamd/chinacidr.txt.gz:

# Mirrored from http://www.okean.com/koreacidr.txt
korea:\
:black:\
:msg="SPAM. Your address %A appears to be from Korea\n\
See http://www.okean.com/asianspamblocks.html for more details":\
:method=http:\
:file=www.openbsd.org/spamd/koreacidr.txt.gz:

# Mirrored from
http://www.completewhois.com/statistics/data/ips-bycountry/rirstats/RU-cidr.txt
russia:\
:black:\
:msg="SPAM. Your address %A appears to be a source of spam email\n\
Please contact your ISP regarding this issue":\
:method=http:\

:file=www.completewhois.com/statistics/data/ips-bycountry/rirstats/RU-cidr.txt:

# My custom blacklist
mycustom-black:\
:black:\
:msg="SPAM. Your address %A is in my spammers list. Please stop.":\
:method=file:\
:file=/etc/blacklist.txt:

but when i run spamd-setup, i get a message after about 10 seconds: Broken
pipe.

also when i run spamdb it says there is no database in /var/db/spamd.

When I try to send an email through it gets stopped somewhere after the
redirection. Ive tried to add the IP address of my ISPs mail server to the
whitelist but it just seeems nothing gets through but as soon as I
comment:

rdr pass on $int_if proto tcp from ! to $int_if port smtp ->
127.0.0.1 port 8025

everything gets delivered the normal way.

Is anyone using spamd + pf? Can you show me how you configured yours?

Thanks,

Petr




Re: Kerneltrap interview available

2007-08-08 Thread Simon 'corecode' Schubert

James Frazer wrote:

Dare I ask for the cold hard truth about the state of SMP on DragonFly?


nonexistant in the common kernel code path, except for the network threads.  
everybody knows this.  these trolls are nothing but.  put up or shut up.  if I 
like indenting all code and comments in the project more than doing MP work, so 
what?  my time.  my thing.  plus, anonymous comments don't count anyways :)

cheers
 simon

--
Serve - BSD +++  RENT this banner advert  +++ASCII Ribbon   /"\
Work - Mac  +++  space for low €€€ NOW!1  +++  Campaign \ /
Party Enjoy Relax   |   http://dragonflybsd.org  Against  HTML   \
Dude 2c 2 the max   !   http://golden-apple.biz   Mail + News   / \