Re: softraid RAID1 + CRYPTO error writing metadata

2013-02-08 Thread Joel Sing
On Sat, 9 Feb 2013, Scott McEachern wrote: > On 02/08/13 11:26, Joel Sing wrote: > > On Sat, 9 Feb 2013, Jiri B wrote: > >> On Sat, Feb 09, 2013 at 02:56:47AM +1100, Joel Sing wrote: > >>> While stacked softraid volumes generally work, they are not officially > >>> supported (for a variety of reaso

Re: usb hub as kvm switch

2013-02-08 Thread Shawn K. Quinn
On Sat, 2013-02-09 at 05:54 +0100, Zoran Kolic wrote: > I have two nodes side by side. KVM switches for just > usb are almost imposible to find in my area. I plan > to use usb keyboard and usb mouse only, since my mo- > nitor has two adapters for both boxen. > Is it possible to use plain usb hub to

Re: softraid RAID1 + CRYPTO error writing metadata

2013-02-08 Thread Joel Sing
On Sat, 9 Feb 2013, Stuart Henderson wrote: > On 2013-02-08, Paul de Weerd wrote: > > On Fri, Feb 08, 2013 at 01:54:27PM -0500, Scott McEachern wrote: > >| What kind of hardware do you have powering those machines? Besides, > >| I don't use the crypto partition too often and I really should make

usb hub as kvm switch

2013-02-08 Thread Zoran Kolic
I have two nodes side by side. KVM switches for just usb are almost imposible to find in my area. I plan to use usb keyboard and usb mouse only, since my mo- nitor has two adapters for both boxen. Is it possible to use plain usb hub to do the job? One of the nodes would be openbsd 5.2 amd64. Best r

Re: bge(4) Broadcom 5720/Dell R320 support backout

2013-02-08 Thread Chris Cappuccio
Rodolfo Gouveia [rgouv...@cosmico.net] wrote: > Hi all, > It seems that the support for 5720 was backout because > it broke another chipset. [1] > The thing is that the newer Dell R320 has this chipset and > I'm currently evaluating the its support. > So I would like to know if the support would i

Re: pppx interface group

2013-02-08 Thread Chris Cappuccio
Robert Blacquiere [open...@blacquiere.nl] wrote: > Hi, > > I've seen on the tech mailing list a patch for implementing a pppx > interface group (just one line code addition). Is this going to be in > 5.3 release? It would make PF filtering much nicer with many dynamic > ipsec/l2tp connections. >

Re: openbsd and vmware

2013-02-08 Thread Norman Golisz
On Thu Feb 7 2013 17:50, Jan Lambertz wrote: > I also tried the socket trick in different setups but couldn't make it > work. You *do* boot bsd.mp, right? Because bsd.rd never recognised a such configured VM as being SMP-capable in my case, and installed bsd.sp by default, instead. > I tried a s

Re: softraid RAID1 + CRYPTO error writing metadata

2013-02-08 Thread Stuart Henderson
On 2013-02-08, Paul de Weerd wrote: > On Fri, Feb 08, 2013 at 01:54:27PM -0500, Scott McEachern wrote: >| What kind of hardware do you have powering those machines? Besides, >| I don't use the crypto partition too often and I really should make >| it smaller (it's only at 17% capacity out of 1.4T

Re: 5.2, i386, small kernel crash

2013-02-08 Thread Christian Grössler
On 08.02.13 20:34, Mike Larkin wrote: Kernels other than GENERIC/GENERIC.MP and RAMDISK aren't supported by devs. Ok, sorry for the noise. That being said, we should probably clean up the do_real_mode_post business at some point. I think it's outlived its usefulness. I found the problem. I

Re: softraid RAID1 + CRYPTO error writing metadata

2013-02-08 Thread Scott McEachern
On 02/08/13 15:19, Paul de Weerd wrote: Admittedly, these are pretty powerful machines. And Antoine was right, it's amd64 (I don't have i386 in real day-to-day use anymore). I have a couple of P4s (no HT) running i386 (firewall, and my web/db server), but otherwise everything is amd64. But

Re: softraid RAID1 + CRYPTO error writing metadata

2013-02-08 Thread Paul de Weerd
On Fri, Feb 08, 2013 at 01:54:27PM -0500, Scott McEachern wrote: | What kind of hardware do you have powering those machines? Besides, | I don't use the crypto partition too often and I really should make | it smaller (it's only at 17% capacity out of 1.4TB). Admittedly, these are pretty powerful

Re: 5.2, i386, small kernel crash

2013-02-08 Thread Mike Larkin
On Fri, Feb 08, 2013 at 06:56:08PM +0100, Christian Groessler wrote: > Hi, > > I've tried to make a kernel config which only includes what I need. It's > attached. > > The resulting kernel crashes in vga_pci_attach() when it writes to > do_real_mode_post. > do_real_mode_post is in the text sect

Re: softraid RAID1 + CRYPTO error writing metadata

2013-02-08 Thread Scott McEachern
On 02/08/13 13:32, Paul de Weerd wrote: On Fri, Feb 08, 2013 at 12:52:00PM -0500, Scott McEachern wrote: | Either way, it sounds fantastic and having "smooth" RAID (esp. | crypto) operations, l think, would be a huge feather in OpenBSD's | cap. I haven't tried full disk encryption yet, maybe on

Re: softraid RAID1 + CRYPTO error writing metadata

2013-02-08 Thread Antoine Jacoutot
On Fri, Feb 08, 2013 at 07:32:49PM +0100, Paul de Weerd wrote: > On Fri, Feb 08, 2013 at 12:52:00PM -0500, Scott McEachern wrote: > | Either way, it sounds fantastic and having "smooth" RAID (esp. > | crypto) operations, l think, would be a huge feather in OpenBSD's > | cap. I haven't tried full d

Re: softraid RAID1 + CRYPTO error writing metadata

2013-02-08 Thread Paul de Weerd
On Fri, Feb 08, 2013 at 12:52:00PM -0500, Scott McEachern wrote: | Either way, it sounds fantastic and having "smooth" RAID (esp. | crypto) operations, l think, would be a huge feather in OpenBSD's | cap. I haven't tried full disk encryption yet, maybe on a test box | one day, because I just don't

Re: softraid RAID1 + CRYPTO error writing metadata

2013-02-08 Thread Scott McEachern
On 02/08/13 13:00, Stefan Sperling wrote: On Fri, Feb 08, 2013 at 12:52:00PM -0500, Scott McEachern wrote: Shit, I forgot to mention that I already gave that a whirl by putting: umount -f /st3 <-- the mount point of the crypto volume in /etc/rc.shutdown. It makes no difference; I still get th

Re: 5.2, i386, small kernel crash

2013-02-08 Thread Amit Kulkarni
On Fri, Feb 8, 2013 at 11:56 AM, Christian Groessler wrote: > Hi, > > I've tried to make a kernel config which only includes what I need. It's > attached. > > The resulting kernel crashes in vga_pci_attach() when it writes to > do_real_mode_post. > do_real_mode_post is in the text section, so shou

Re: softraid RAID1 + CRYPTO error writing metadata

2013-02-08 Thread Stefan Sperling
On Fri, Feb 08, 2013 at 12:52:00PM -0500, Scott McEachern wrote: > Shit, I forgot to mention that I already gave that a whirl by putting: > > umount -f /st3 <-- the mount point of the crypto volume > > in /etc/rc.shutdown. It makes no difference; I still get that > warning/error. > > I also tri

5.2, i386, small kernel crash

2013-02-08 Thread Christian Groessler
Hi, I've tried to make a kernel config which only includes what I need. It's attached. The resulting kernel crashes in vga_pci_attach() when it writes to do_real_mode_post. do_real_mode_post is in the text section, so should be readonly, therefore the crash makes sense. But when I build GENER

Re: softraid RAID1 + CRYPTO error writing metadata

2013-02-08 Thread Scott McEachern
On 02/08/13 11:26, Joel Sing wrote: On Sat, 9 Feb 2013, Jiri B wrote: On Sat, Feb 09, 2013 at 02:56:47AM +1100, Joel Sing wrote: While stacked softraid volumes generally work, they are not officially supported (for a variety of reasons). The problem that you mention above is due to the way that

Re: Safe bruteforce rule for mobile-friendly website

2013-02-08 Thread Mikkel Bang
So is there any point in having bruteforce for httpd? Especially now that "mobile is the future"? Mikkel 2013/2/7 Mikkel Bang > > I forget if mobiles do more prefetching on dns and/or tcp on mobiles but > > perhaps that's worth considering as a culprit. > > My God Kevin, that's gotta be it! >

Re: softraid RAID1 + CRYPTO error writing metadata

2013-02-08 Thread Jiri B
On Sat, Feb 09, 2013 at 03:26:33AM +1100, Joel Sing wrote: > > Would stackable softraid volumes work in near future or is it big > > problem as how softraid was designed? > > Generally speaking they already "work" - there are just some caveats, > primarily relating to assembly and shutdown. Most

Re: softraid RAID1 + CRYPTO error writing metadata

2013-02-08 Thread Joel Sing
On Sat, 9 Feb 2013, Jiri B wrote: > On Sat, Feb 09, 2013 at 02:56:47AM +1100, Joel Sing wrote: > > While stacked softraid volumes generally work, they are not officially > > supported (for a variety of reasons). The problem that you mention above > > is due to the way that softraid volumes are shut

Re: softraid RAID1 + CRYPTO error writing metadata

2013-02-08 Thread Jiri B
On Sat, Feb 09, 2013 at 02:56:47AM +1100, Joel Sing wrote: > While stacked softraid volumes generally work, they are not officially > supported (for a variety of reasons). The problem that you mention above is > due to the way that softraid volumes are shutdown - the shutdown order is > approxim

Re: softraid RAID1 + CRYPTO error writing metadata

2013-02-08 Thread Joel Sing
On Fri, 8 Feb 2013, Scott McEachern wrote: > I get a rather curious error when shutting down a machine with a RAID 1 > setup that contains a crypto partition and a "normal" partition: > > syncing disks... done > sd3 detached > softraid0: I/O error 5 on dev 0x433 at block 16 > softraid0: could not w

Re: pf blocking active connections

2013-02-08 Thread Stuart Henderson
On 2013-02-08, Martijn van Duren wrote: > On Fri, 2013-02-08 at 08:23 +, Stuart Henderson wrote: >> On 2013-02-07, Martijn van Duren wrote: >> > Thanks for all the quick responses, but if I understand you all >> > correctly there is no way to cut off an established connection by adding >> > a

Re: relayd and icecast

2013-02-08 Thread Kapetanakis Giannis
On 08/02/13 15:34, Sebastian Benoit wrote: Kapetanakis Giannis(bil...@edu.physics.uoc.gr) on 2013.02.08 14:32:21 +0200: On 07/02/13 15:50, Kapetanakis Giannis wrote: [snip] which version of OpenBSD are you using? I've been using 5.2 release, but yesterday I've installed latest snapshot (am

Re: relayd and icecast

2013-02-08 Thread Sebastian Benoit
Kapetanakis Giannis(bil...@edu.physics.uoc.gr) on 2013.02.08 14:32:21 +0200: > On 07/02/13 15:50, Kapetanakis Giannis wrote: [snip] which version of OpenBSD are you using?

Re: relayd and icecast

2013-02-08 Thread Kapetanakis Giannis
On 07/02/13 15:50, Kapetanakis Giannis wrote: Hi, I'm trying to use an OB server as an icecast streaming server. I'm also trying to use relayd as a relay between the client and icecast server to limit access to admin pages of icecast. I have a problem with relayd closing connections. I belie

Re: pf blocking active connections

2013-02-08 Thread Martijn van Duren
On Fri, 2013-02-08 at 08:23 +, Stuart Henderson wrote: > On 2013-02-07, Martijn van Duren wrote: > > Thanks for all the quick responses, but if I understand you all > > correctly there is no way to cut off an established connection by adding > > an ip address to a blocked table, so I'm still l

Re: pf blocking active connections

2013-02-08 Thread James Griffin
--> patrick keshishian [2013-02-07 12:16:40 -0800]: > look in 'man pfctl' and search for killing active sessions. > > > On Thu, Feb 7, 2013 at 12:13 PM, Martijn van Duren > wrote: > > Hello misc, > > > > Today I watch the current connections on my small home server and I > > noticed an unfami

Re: pf blocking active connections

2013-02-08 Thread Stuart Henderson
On 2013-02-07, Martijn van Duren wrote: > Thanks for all the quick responses, but if I understand you all > correctly there is no way to cut off an established connection by adding > an ip address to a blocked table, so I'm still left with my two stage > drop off the connection (both adding the th