SSL connections not working.

can find no one with the same issue. I've tried rebuilding and reconfiguring things several different ways now based on different pages I found, but they all result in the same behavior. Any help, even if it's just pointing me to a more appropriate forum, would be greatly apprec

Busy BIND + 5.2.1 = UDP Packet Loss

pt drops: % sysctl -a | grep drops net.inet.ip.intr_queue_drops: 13981 So, given the traffic profile (nameserver, heavy UDP) and the info here can someone help point me in the right direction? I'm not sure where to go from here? -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP ke

Re: Article on Sun's DTrace

software "features" exhibit an exponentially decaying re-implementation time. The next implementation might take two people 6 months, the one after that two people 2 months, and so on. I for one, look forward to this technology. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 34

Re: /bin/ls sorting bug?

the parent suggested) but I put two in my post. Can't win 'em all. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org pgpkVmPPYkvt3.pgp Description: PGP signature

Re: Yes, send-pr results in virus emails

In a message written on Wed, Jan 28, 2004 at 04:38:54PM +0100, Dag-Erling Smørgrav wrote: > No, you need to realize that spam will happen no matter how careful > you are, and take appropriate countermeasures. Wearing a seatbelt and defensive driving are not mutually exclusive. --

Re: Yes, send-pr results in virus emails

ssword protected web/e-mail interface). When forwarded to a mailing list it could come from [EMAIL PROTECTED] or something. While spam is a fact of life, in some cases we need to reevaluate plastering an e-mail address everywhere just because we can. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 34

Re: dhclient & dynamic DNS updates

I'm replying to my own message for the sake of list archives. I just tried the new dhclient (3.0p12), and dynamic DNS works just fine. Looks like this was a bug that was fixed. The man page has also been updated and it now works just as documented in the man page. -- Leo Bic

Re: Where is FreeBSD going?

w. https://www.rentacoder.com/ Maybe someone could get them to make a FreeBSD section, where only people with commit bits can apply for jobs or something -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www

Re: Discussion on the future of floppies in 5.x and 6.x

py booter setup, but I can see other OS projects using something like this as well, so perhaps some cross work with NetBSD or OpenBSD, or even the Linux camp could make an open source "load an image" floppy, that since it just loaded an ISO could load about anything. -- Leo Bicknell -

Re: Where is FreeBSD going?

development team can forget about all the other hardware out there in massive quantities, heck no. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org pgp0.pgp Description: PGP signature

Re: Where is FreeBSD going?

means a complete rewrite because of how different the kernels are. Otherwise people get forced to run 5.x for a few driver issues, and then complain like crazy about all the other stuff that's not ready for prime time. Mom said it best, small bites, chew with your mouth closed. -- L

Re: ipfw2 problem

er, eg, "dropped_dyn_rules" should be incremented, so the user can at least verify the limit is the problem. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org pgp0.pgp Description: PGP signature

Re: natd + ipfw question

Original broken case: In a message written on Tue, Dec 23, 2003 at 03:17:12PM -0500, Leo Bicknell wrote: > > ipfw add 1000 divert natd ip from any to any recv fxp0 > > ipfw add 1001 divert natd ip from any to any xmit fxp0 In a message written on Tue, Dec 23, 2003 at 12:28:09PM

Re: natd + ipfw question

e 3 times I'm now even more confused. I'd love for someone to explain to me why the middle one doesn't work (or, why in and out are required). -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org pgp0.pgp Description: PGP signature

natd + ipfw question

bound traffic differently, but this basic case doesn't seem to work, and it seems to me like it should. What am I missing? -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org pgp0.pgp Descri

Re: adding more ram

ggestion, just put near that recomendation that crash dumps may greatly increase /var need, and also mention that in the swap sizing section as to why swap == ram should probably be a minimum (otherwize you can't turn on crash dumps without repartitioning). -- Leo Bicknell - [EMAIL PRO

Re: adding more ram

and a 128M /var, as recomended. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org pgp0.pgp Description: PGP signature

dhclient bug

there any FreeBSD people who've bug-fixed dhclient in the past who might be able to help me make a proper patch? If so, please contact me off-list as this is not a FreeBSD issue per-se. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Rea

healthd oddities

a problem I didn't know I had? -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/m

Re: Making a FreeBSD DVD

ou get them both on a DVD, and give the user a boot choice? -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org pgp0.pgp Description: PGP signature

Making a FreeBSD DVD

to build DVD's, a-la what they sell on FreeBSD mall? -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org pgp0.pgp Description: PGP signature

Re: dhclient & dynamic DNS updates

al for config #2 though is boxes on the end of cable modem or DSL lines using dhcp. In that case I don't control the DHCP server, I just want the client to add it's address to a nameserver I do control so there is a way to get to it remotely. -- Leo Bicknell - [EMAIL PROTEC

dhclient & dynamic DNS updates

shows no DNS update packets of any kind coming from the machine running dhclient. What's the magic to get dhclient to emit a dynamic DNS update? -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org pgp0.pgp Description: PGP signature

Re: 5.x kernel config changes?

as well. :) Other than that, thanks much, I'm off to be a happy 5.x user now. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org pgp0.pgp Description: PGP signature

5.x kernel config changes?

it seems impossible to build a new kernel after changing just "options" statements and install it without also rebuilding all the modules...which takes quite some time. This seems to be because it moves the whole directory out of the way in /boot. This seems a little subopt

Loading a kernel module before the installer.

ink if I can do this I should be able to tell the installer to newfs them and do an install saving a lot of trouble over the more manual vinum install procedure. If this should work, how do I load the kernel module from the new boot loader? -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440

Re: non-root process and PID files

open(pidfile) write(pid, pidfile) flush(pidfile) [go do all the server stuff, and then at shutdown] close(pidfile) All other apps just read it, but can't overwrite it because it's RO. I'm not sure how useful this sort of file system change would be in practice, but it would solve th

Re: 802.11 AP Status?

ds, one running in each mode? I get the impression if you run an AP in 802.11g mode then 802.11b clients "just work", but it doesn't say that explicitly. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List -

802.11 AP Status?

at is well supported in BSS Mode on FreeBSD? -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org pgp0.pgp Description: PGP signature

Re: Changing the NAT IP on demand?

could be quite useful. I think I'm going to have to set up a lab box now and dig into this at a deeper level. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org pgp0.pgp Description: PGP signature

Re: Changing the NAT IP on demand?

pplication on the box to bind to a.a.a.a or b.b.b.b it would use only that link) thing, and then have NAT pick an IP on the fly. They key is when nat switches not to dump the existing connections so it appears to be a "seamless" switch over. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org pgp0.pgp Description: PGP signature

Changing the NAT IP on demand?

lly) should be kept, while new ones go to #2. The only ways I know to change the outside address seem to tear down all existing connections. Is it possible to make this work today? Would it be hard to fix if it doesn't work today? -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440

Re: Ugly Huge BSD Monster

ckages would be a far superior solution to using the ports tree. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org pgp0.pgp Description: PGP signature

Re: Non-executable mappings now in NetBSD too

that seems to introduce a performance penalty no one likes. Wrappering it in a new malloc (sbrk?) interface to the kernel might allow the same thing with much less penalty. Of course, we'd need multiple platforms to make developers use it. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440

Re: dd to floppies broken?

media device -- rather than just the FreeBSD portion > of it. Thanks for the info. I figured out what worked back with 0.8 NetBSD and have stuck with it ever since. :) -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List -

Re: dd to floppies broken?

=18k of=/dev/rfd0c if=memtest86-2.9/precomp.bin I forget why, but 18k maximizes performance on (some?) floppies. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org pgp0.pgp Description: PGP signature

Re: file size different from ls to du

./sparse % ls -lag sparse-file -r-xr- 1 bicknell bicknell 1073741834 Jul 29 11:52 sparse-file* % du -k sparse-file 48 sparse-file -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org pgp0.pgp Description: PGP signature

Re: Network pipes

performance concerns. ssh -c none? Note, you don't want to use password authentication in this case, but public key should still be ok. You could also set up something like kerberos and use krsh or similar... -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at h

Re: mbuf cluster shortage caused kernel panic

pintr () #7 0xc0292631 in swi_net_next () #8 0xc0185d83 in sendit () #9 0xc0185e86 in sendto () #10 0xc02a0e51 in syscall2 () #11 0xc028e53b in Xint0x80_syscall () #12 0x8061d3e in ?? () #13 0x8061b54 in ?? () #14 0x80894fb in ?? () #15 0x8060bb3 in ?? () #16 0x804b54a in ?? () (kgdb) -- Leo

Re: Correct way to call execve?

ritable-strings", poof, strings are now "char *", the cast away the cost problem goes away, "-Wcast-qual" works fine. It always seemed to me a lot of things included -fwritable-strings for no good reason, maybe this is part of the reason. :) -- Leo Bicknell - [EMAIL PR

Re: Correct way to call execve?

it means you used the wrong option. Similarly, if you do things in your program that require constants to not be, then turning on an option to warn you about that seems a bit backwards as well. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org pgp0.pgp Description: PGP signature

Re: Correct way to call execve?

#include #include #include int main(int argc, char *const argv[], char *const envp[]) { char *const execargv[] = { strdup(_PATH_BSHELL), strdup(NULL) }; execve(_PATH_BSHELL,execargv,envp); return 0; } % cc -Wwrite-strings -Wcast-qual exec.c % cc -Wall exec.c -- Leo Bicknell

Re: Correct way to call execve?

ple does not. % cat exec.c #include #include int main(int argc, char *const argv[], char *const envp[]) { char *execargv[2]; execargv[0] = (char *)_PATH_BSHELL; execargv[1] = (char *)NULL; execve(_PATH_BSHELL,execargv,envp); return 0; } % cc -Wwrite-strings exec.c % cc -Wall exec

Re: Correct way to call execve?

tant here, this passes gcc -Wall: #include #include int main(int argc, char *const argv[], char *const envp[]) { char *const execargv[] = { _PATH_BSHELL, NULL }; execve(_PATH_BSHELL,execargv,envp); return 0; } -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://

Re: tcsh / tset problem on 4.7 only?

bility. Removing > that capability is a workaround for this bug.) > Hope this helps someone to track the problem down. I think you've tracked down the problem, probably a tcsh parser error with eval. I wonder if there is a tcsh guru around. -- Leo Bicknell - [EMAIL PROTECTED] -

tcsh / tset problem on 4.7 only?

I checked the cvs logs for both /etc/termcap, and for tset, and see nothing that would have changed between those releases. I even looked briefly at csh aka tcsh, and saw nothing obvious. Anyone have any idea why this is broken on 4.7? -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3

Re: floppy.. Was: Drawing graphics on terminal

In a message written on Mon, Jun 16, 2003 at 12:37:08PM -0700, Julian Elischer wrote: > On Mon, 16 Jun 2003, Leo Bicknell wrote: > > Some of this could be done in the current installer, if there wasn't > > an effort to make it still fit on a floppy. Mind you, I'd like to

Re: Drawing graphics on terminal

hout making anyone download a 600M file to do so. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org pgp0.pgp Description: PGP signature

Re: boot without user and password

put it in a startup script somewhere. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org pgp0.pgp Description: PGP signature

Re: C coding editor

a. It really doesn't take that much time, and teaches you so much more. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org pgp0.pgp Description: PGP signature

DNS / UDP Port Logging Wierdness

her things I should look at? While searching for last night's attacks this finally annoyed me enough to do something about it. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org msg394

Re: Reading rc.conf from C programs?

trade off to make the file more easily parseable in many languages. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org msg38941/pgp0.pgp Description: PGP signature

Re: Perl issue on freebsd 4.x?

work on my FreeBSD 4.7 ] system (syslogd is started with -s flag) without specifying ] setlogsock(). Perl 5.8 does not seem to be a part of 4.x, is it in 5.0 or -CURRENT? -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG

Re: Perl issue on freebsd 4.x?

how to do inet sockets at all. Thus it's not a perl interface to syslog(3), it should rather be called "Perl implementation of the syslog protocol, similar to syslog(3)." It may be picking at nits, but when I see something called an interface to...I assume it has the same semantic

Re: Perl issue on freebsd 4.x?

as the default, to do inet sockets. For anyone running any sort of "secure" syslog this results in failure. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org msg38789/pgp0.pgp Description: PGP signature

Re: Perl issue on freebsd 4.x?

t evidently is meaningless. Code as you posted works, which means I can fix my script. Thanks. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org msg38782/pgp0.pgp Description: PGP signature

Re: Perl issue on freebsd 4.x?

In a message written on Thu, Dec 19, 2002 at 05:45:34PM -0600, GB Clark wrote: > What version of Perl is this? > > I've used syslogging with FreeBSD 4.4/4.5. Have not tried it lately. /usr/bin/perl as shipped on 4.4, 4.5, and 4.7. -- Leo Bicknell - [EMAIL PROTECTE

Re: Perl issue on freebsd 4.x?

socket, both of which should succeed even if syslog isn't running) I don't think the security makes a difference. I also find it odd that I can get no error out of openlog, and when I dig into it with the perl debugger I can't tell anything other than it's call to create the socket fails, but I have no idea why. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org msg38766/pgp0.pgp Description: PGP signature

Perl issue on freebsd 4.x?

slog -s, the other -a with all IP's and localhost in the ACL. I suppose it could be a security thing but all other apps syslog just fine so I suspect perl should work. While probably a perl issue, FreeBSD does seem to be the only place it's broken for me, which is why I thought I'd tr

Re: How can I post a pr when my IP can't be reverse-resolved?

and then simply confirm it. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-hackers" in the body of the message

Re: inet_aton() Bug or feature?

ug. :) I'd definately call the poster's original problem a bug though, IMHO. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org To Unsubscribe: send mail to [EMAIL PROTECTED] with

Re: inet_aton() Bug or feature?

t_aton (although it makes some sense), it would seem to me much better if: 0xff00 was hex, 0123456701234567 was octal, 010.010.010.010 was 4 decimal parts I was very surprised from the poster that 192.168.0.010 might actually be 192.168.0.8. -- Leo Bicknell - [EMAIL PROTECTED] - C

Re: Insider's scoop: Why FreeBSD is dying

;t believe Microsoft was able to get around that process. So they are playing by the same rules and guidelines as anyone else. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-hackers" in the body of the message

Using FreeBSD as a base station

systems as AP's, and I'm thinking I should pick a card with better functionality. What's the recomendation on the best supported card to make a FreeBSD AP? -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL

Re: what causes a userland to stop, but allows kernel to continue ?

ut the semi-hung machine isn't a new occurrence. :-) -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-hackers" in the body of the message

Re: Difference between RELENG_* and RELENG_*_BP

entation it would also be essential to remove highly moderated comments as they are integrated into the documentation. At the end of the day, we need to lower the barrier to adding documentation, while increasing the quality. Far from an easy task. -- Leo Bicknell - [EMAIL PROTE

Re: GPS time.

achieve < 1ms accuracy can be had for < $1000, so if you really care you should get one of those. You might want to do some searches for NTP in google. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTE

Re: RFC: style(9) isn't explicit about booleans for testing -- an actual analysis of the code!

follows: C does not provide a proper boolean type. As a result, FreeBSD uses integers for a boolean type. The boolean values are 0 for false, and all other values for true. All code using a boolean type must not depend on "true" having any specific value. -- Leo Bick

Re: cannot get more than 32 PTYs in 4.4-RELEASE

by default sh MAKEDEV pty7 # 224-255 xterm won't recognize by default It's fairly trival to patch xterm to look for additional letters. It may have made it in the XFree source already. *shrug* -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.o

Re: Multicast problem with sis interface?

th some generated (0's, 1's, /dev/random, whatever) should be a top priority. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org To Unsubscribe: send mail to [EMAIL PROTECTED] wit

Re: Clearcase and FreeBSD

FreeBSD, this is not sufficient. FreeBSD (and BSD in general) has outlived a number of companies and technologies, and if Perforce went down the tubes and there was no source we could have a major problem. Now, where did I put my SCCS copy of the tree... -- Leo Bicknell - [EMAIL PROTECTED] - CCI

Re: JKH - Jr. Kernel Hacker task

t_flags(dev, device_get_flags(dev) & ~(bit)) Wow, this kernel hacking stuff is easy. :-) Apologies to Warner. :-) -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org To Unsubscribe: se

Re: serial console + boot blip

en DTR is momentarily dropped. I'll be darned if I can see where that happens in init though. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org To Unsubscribe: send mail to [EMAIL PROT

Re: serial console + boot blip

I'd like to zero in on why the software is doing this and fix it though. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubs

Re: serial console + boot blip

ked out between the kerkel and init starting that is bothering me. Something is changing the serial port settings at that time in a bad way. This is a fairly minor problem, but since it works so well "out of the box" with the default Cisco parts, it seems we should be able to make it work

Re: serial console + boot blip

lem in this case is the termainal server paying attention to DTR, I believe the way it's configured now it ignores CD. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org To Unsubscribe: s

Re: serial console + boot blip

etty is a bit, well, cryptic to someone who doesn't normally write terminal code, is there a getty expert in the house? -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org To Unsubscribe:

Re: serial console + boot blip

eat it too! -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-hackers" in the body of the message

Re: serial console + boot blip

t starts). Even if it's a part of init, it looks like it would be relatively simple to tell it not to send the hup the very first time, regardless of the config which would fix my problem. Is that an unreasonable behavior? I want to make sure I'm going down the right road, before I

Re: serial console + boot blip

x27;t hangup though, right? I like that behavior, what I don't like is the hangup on the switch from kernel mode to {single,multi}-user mode. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.

serial console + boot blip

you don't get to select that earlier with a serial console. Have others noticed this behavior? Does anyone know a way to work around it? Does some init genuis know why this happens? -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG

Re: Overriding ARG_MAX

;*.data" -perm 444 | xargs grep -H something You can't do that with ls | grep, since only the filenames make it to grep. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-hackers" in the body of the message

Re: path_mtu_discovery

mp mtu messages, anything) 2) Implement a warning if the MTU is set smaller than some minimum value (perhaps 576 for the global internet) if admins which to see such things. 3) Allow admins to enforce a higher minimum size for servers in attack situations, knowing this violates the RFC. --

Re: path_mtu_discovery

n 576 octets. Hmm, I'd swear there was a defined minimum, I may have the wrong one. For reference, it appears Cisco IOS based devices won't allow MTU smaller than 128 to be configured. I have no idea if that's based on some standard. It seems like there should be a minimum globa

Re: path_mtu_discovery

ysctl, however I'll also be quite insistant that our defaults match the Internet. I'm fairly sure more FreeBSD boxes are connected to the Internet than any other network. :-) -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/

Re: path_mtu_discovery

er got an MTU less than 576 we should ignore it. Right? -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-hackers" in the body of the message

Re: path_mtu_discovery

out of the victim machine down to 296 bytes... I might be assuming something here, but I want to clarify. It is _NOT_ the case that a box with say, only a default route, would limit _ALL_ TCP connections to the lowest returned MTU. The MTU is on the *route*, where *route* == the cloned route, correct

Re: FreeBSD performing worse than Linux?

oss situation that TCP seems to not handle particularly well, it might be worth using it to investigate if there is a generic TCP improvment that could be made. Fair enough? -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG

Re: sendmail + auth + ssl + freebsd

the base distribution so this could be made the default? I, for one, think it would be really cool if saying "sendmail="YES"" in /etc/rc.conf gave you a sendmail that could authenticate against the password file, and if you gave it a certificate do SSL. I think that would get

Re: sendmail + auth + ssl + freebsd

postfix, at this time. If I can't do it I might go to postfix. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-hackers" in the body of the message

sendmail + auth + ssl + freebsd

lease clue me in, and if necessary I'll still write that handbook page. :-) It would be very nice if it was simple to make FreeBSD sendmail SSL and authenticate against the password file. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell

Re: Can TCP changes be put in RELENG_4?

. The guy who just bought a gig of ram because it came in a cracker jack box should be able to click the 'use an obscene amount of memory to make everything faster' button, without having to understand the 300+ things he could tune in a kernel, or loader.conf, or whereever else you ca

Re: Can TCP changes be put in RELENG_4?

king a "guess" about maxusers (and the cascade of changes that has) based on total RAM would be a crude but useful start. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org To Unsubscri

Re: Can TCP changes be put in RELENG_4?

t. Worrying about the hardware isn't worth your time. It will continue to grow at moores law, making the bloat unimportant. Target what's being sold now, as if you target last years computers by the time your OS is on them next year they will be retired. -- Leo Bicknell - [

Re: Can TCP changes be put in RELENG_4?

tinue to be upgraded. If we want to retain the (easy) ability to boot on a 4 meg machine we can supply a second MICRO-GENERIC. For some random thoughts, MAXMEM should be 256M minimum, 1G preferably. MAXUSERS should be perhaps 128 or 256 out of the box. I'd suggest our target should be a P-I

Re: Can TCP changes be put in RELENG_4?

On Wed, Dec 05, 2001 at 03:12:29PM -0800, Crist J . Clark wrote: > 4.5-RELEASE is only a month and a half away. By the time this "while" > passes, we'll be there. If people have lived this long with the bugs, > they can last until late January. I find it hard to argue wi

Re: Can TCP changes be put in RELENG_4?

I think this is very good stuff, and that most of the people tracking RELENG4_4 would want it, but only if it is 210% fully tested and helps out 99.999% of all people. So let's verify both of those and then revisit the issue. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440

random + large IRQ's + SMP

ws when it was fixed, or could just point me to the right file to hunt in it would be a huge help. -- Leo Bicknell - [EMAIL PROTECTED] - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - [EMAIL PROTECTED], www.tmbg.org To Unsubscribe: send mail to [EMAIL PROTE

Re: TCP Performance Graphs

On Tue, Dec 04, 2001 at 12:48:45PM +0100, Nicolas Souchu wrote: > Question, what is RTT? The subject seems interesting but without the > background... :) Round Trip Time. The time it takes for a segment to travel to the destination, be processed, and an ack returned. -- Leo Bi

Re: TCP Performance Graphs

On Fri, Nov 30, 2001 at 05:48:16PM -0800, Luigi Rizzo wrote: > On Fri, Nov 30, 2001 at 08:39:05PM -0500, Leo Bicknell wrote: > > Note that if we implement a 'fair share' buffering scheme we would > > never get a failure, which would be a good thing. Unfortuantely >

  1   2   >