relayd - sporadic high CPU usage

2013-11-25 Thread mxb
Hello list, I have a pair of pre-5.4 in master/backup setup. This setup is used for load balancing and firewalling. relayd is used and ONLY redirects in relayd.conf. At some point of time, relayd starts to consume enormous amount of CPU and start a chain reaction there the rest of processes star

Re: System freeze after zzz

2013-11-25 Thread Mike Larkin
On Sun, Nov 24, 2013 at 10:42:45AM -0500, Don Allen wrote: > I'm running current (as of the 11/14 snapshot) on a micro-itx box I > built around an Intel Atom d510mo motherboard. When I try to wake > the system after zzz, my X session comes alive and I can change > workspaces with the window manager

Re: Layer 7 filtering example using pf and relayd : block torrent use and some urls

2013-11-25 Thread Wesley MOUEDINE ASSABY
Hi, Tested with facebook.com/ It works. In this case, PF doesn't block any IP, relayd take all the work, it is a transparent proxy with https/http inspection. I also tested this : Download .torrent file is not allowed. From a usb key, i tried to open a .torrent with utorrent client (windows)

Re: Intel 82574L vs 82579LM

2013-11-25 Thread Chris Cappuccio
Paul B. Henson [hen...@acm.org] wrote: > > I didn't find anything really conclusive. Evidentally the main > difference (http://supermicro.biz/support/faqs/faq.cfm?faq=11847) is > that the 82574L is a fully separate ethernet interface connected over > pcie, whereas the 82579LM is just a PHY that co

Re: remove

2013-11-25 Thread Chris Cappuccio
Jason [size...@gmail.com] wrote: > Please remove Please provide your name, address, social security number, phone number, and credit card information. You will then be removed. Chris

remove

2013-11-25 Thread Jason
Please remove

Re: Intel 82574L vs 82579LM

2013-11-25 Thread Paul B. Henson
On Mon, Nov 25, 2013 at 04:30:36PM +0400, Alexander Pakhomov wrote: > Both should not load CPU a lot. But that doesn't mean they wouldn't. > Write here if notice intense interrupts CPU load. My OpenBSD 5.4 amd64 > laptop fail to handle 2 MB/s wifi due to some drivers issues (they > load CPU up to

Re: IPMI SOL serial console wedges

2013-11-25 Thread Paul B. Henson
On Mon, Nov 25, 2013 at 12:09:33PM +, Stuart Henderson wrote: > > How come freebsd dynamically detects the correct irq, but openbsd has it > > hardcoded? > > linux and freebsd kernels use acpi to configure isa serial ports, openbsd > uses static allocations. Ah, ok; now that I know what's g

Re: Layer 7 filtering example using pf and relayd : block torrent use and some urls

2013-11-25 Thread Paolo Aglialoro
Hi, really nice tutorial :) What about blocking some sites like dropbox, gdrive, etc. which are the main channels through which files are nowadays leaking out of companies? For instance, in the case of dropbox a single url would not be enough, just look here: https://ipdb.at/org/Dropbox Same to

Re: [OpenBGPd <=> Cisco] error in OPEN message, unknown subcode 8

2013-11-25 Thread Laurent CARON
On Wed, Oct 10, 2012 at 12:13:44PM +0200, Laurent CARON wrote: > Hi, > > I'm trying to establish a peering session with another member of an IX > (France-IX). > > On my side I do have 2 OpenBSD (OpenBGPd) boxes. (..snip..) > In my logs I do observe this: > Oct 9 09:44:40 bgpgw-003 bgpd[17498]:

Re: smtpd config issue

2013-11-25 Thread Chris Smith
On Mon, Nov 25, 2013 at 2:35 PM, Christopher Zimmermann wrote: > Now I'd be looking at 'route -n show -inet', 'ifconfig "$ext_if"' and > 'ifconfig "$alias1"' ifconfig doesn't understand pf macros (as far as i can tell) == # route -n show -inet |hea

Re: smtpd config issue

2013-11-25 Thread Chris Smith
On Mon, Nov 25, 2013 at 12:33 PM, Giancarlo Razzolini wrote: > Taking a look on the smtpd.conf(5) man page, there is the source > directive, which does what you are trying to accomplish. Don't know what I'm doing wrong as I can't get it to work here. Using these rules works fine for the :0 ad

Re: smtpd config issue

2013-11-25 Thread Giancarlo Razzolini
Em 25-11-2013 15:18, Chris Smith escreveu: > Hello, > > Trying to use smtpd on a particular interface alias (for sending only, > not for listening) and am not finding a way to do so. It seems to > default sending out via the :0 address. > > Chris > Hi Chris, Taking a look on the smtpd.conf(5)

smtpd config issue

2013-11-25 Thread Chris Smith
Hello, Trying to use smtpd on a particular interface alias (for sending only, not for listening) and am not finding a way to do so. It seems to default sending out via the :0 address. Chris

Re: Layer 7 filtering example using pf and relayd : block torrent use and some urls

2013-11-25 Thread Vijay Sankar
Quoting Wesley MOUEDINE ASSABY : Hi, A new how to about PF and relayd : http://www.mouedine.net/relayd Cheers, Wesley MOUEDINE ASSABY Nice! Thanks very much, Vijay Vijay Sankar, M.Eng., P.Eng. ForeTell Technologies Limited vsan...@foretell.ca ---

Re: IPSec VPN with iked (8)

2013-11-25 Thread Benjamin Epitech
On Mon, Nov 25, 2013 at 1:21 PM, Stuart Henderson wrote: > For Android phones the standard way to do VPNs is l2tp-over-ipsec (IKE). > You can do this with npppd and isakmpd (iked is for IKEv2 which is not > compatible with IKE). > > Apparently someone made an Android app to support IKEv2 ( https:/

Layer 7 filtering example using pf and relayd : block torrent use and some urls

2013-11-25 Thread Wesley MOUEDINE ASSABY
Hi, A new how to about PF and relayd : http://www.mouedine.net/relayd Cheers, Wesley MOUEDINE ASSABY

Re: is zeroing CRYPT needed?

2013-11-25 Thread Nick Holland
On 11/25/13 04:07, obsd, cgi wrote: > according to: > http://www.openbsd.org/cgi-bin/man.cgi?query=bioctl > > dd if=/dev/zero of=/dev/rsd3c bs=1m count=1 > > is needed. but Why? > I've actually found it more useful to zero the raw RAID partition than the "assembled" softraid "disk". This takes

Re: Intel 82574L vs 82579LM

2013-11-25 Thread Alexander Pakhomov
Test it. Both should not load CPU a lot. But that doesn't mean they wouldn't. Write here if notice intense interrupts CPU load. My OpenBSD 5.4 amd64 laptop fail to handle 2 MB/s wifi due to some drivers issues (they load CPU up to 100% interrupts). Additional info about interrupts load would be h

Re: ejabberd installation and configuration guide

2013-11-25 Thread Stuart Henderson
On 2013-11-25, Tito Mari Francis EscaƱo wrote: > Good day, > I'm planning to setup ejabberd on OpenBSD 5.4 for a project as proof of > concept but I have no experience with XMPP stuff. Can somebody please point > me to the right direction how to configure ejabberd on current OBSD. Thank > you very

Re: IPSec VPN with iked (8)

2013-11-25 Thread Stuart Henderson
On 2013-11-25, Benjamin Epitech wrote: > Hello, > > I am new to the concept of IPSec VPNs and although there are many tutorials > to set one up with isakmp (8), I find there is less resources on setting up > one with the newer iked. > > Can someone give me the main steps required to set up an IPSe

Re: IPMI SOL serial console wedges

2013-11-25 Thread Stuart Henderson
On 2013-11-24, Paul B. Henson wrote: > erase ^?, werase 1234567890123456 16 chars, because of the 16 byte buffer in the uart. > com2 at isa0 port 0x3e8/8 irq 5: ns16550a, 16 byte fifo ^^ when enough chars have been sent to fill the buffer, we wait f

Re: IPMI SOL serial console wedges

2013-11-25 Thread Stuart Henderson
On 2013-11-24, Paul B. Henson wrote: > Back on topic to my actual problem, it looks like the IPMI SOL com2 is > actually using IRQ 10 rather than 5, which both linux and freebsd detect: > > [2.324044] 00:0e: ttyS2 at I/O 0x3e8 (irq = 10) is a 16550A > uart2: <16550 or compatible> port 0x3.8-0

IPSec VPN with iked (8)

2013-11-25 Thread Benjamin Epitech
Hello, I am new to the concept of IPSec VPNs and although there are many tutorials to set one up with isakmp (8), I find there is less resources on setting up one with the newer iked. Can someone give me the main steps required to set up an IPSec VPN with iked? I understand this is still under de

Re: is zeroing CRYPT needed?

2013-11-25 Thread Luca Ferrari
On Mon, Nov 25, 2013 at 10:08 AM, obsd, cgi wrote: > according to: > http://www.openbsd.org/cgi-bin/man.cgi?query=bioctl > > dd if=/dev/zero of=/dev/rsd3c bs=1m count=1 > > is needed. but Why? Isn't already explained? "the first megabyte of it should be zeroed, so tools like fdisk(8) or disklabel

Re: is zeroing CRYPT needed?

2013-11-25 Thread Norman Golisz
On Mon Nov 25 2013 10:08, obsd, cgi wrote: > according to: > http://www.openbsd.org/cgi-bin/man.cgi?query=bioctl > > dd if=/dev/zero of=/dev/rsd3c bs=1m count=1 > > is needed. but Why? since it's likely to contain garbage. If this area has been in use before, there's a good chance it exposes "ra

is zeroing CRYPT needed?

2013-11-25 Thread obsd, cgi
according to: http://www.openbsd.org/cgi-bin/man.cgi?query=bioctl dd if=/dev/zero of=/dev/rsd3c bs=1m count=1 is needed. but Why?