Re: spamd-setup fails from cron

2012-05-29 Thread Mitja Muženič
> > you could be hitting the 'zero minute rush', where world+dog tries to > > connect simultaneously. try shifting to a few minutes past the hour > and > > see if that helps. > > > > Please avoid 15 minutes past the hour ;-) Years ago I've been toying with the idea of having a flag for random-de

Re: GENERIC.MP cold reboot at savecore

2011-03-29 Thread Mitja Muženič
sthen@ just commited a backported fix for this to 4.8-stable for i386 and amd64, it fixed my Dell PE T110 that experienced the same symptoms. Update your 4.8-stable source tree and try again.

Re: kernel pppoe performance problems

2010-07-14 Thread Mitja Muženič
First of all, do not reply to mails sent in private on a public list, it's impolite and will expose my email address to more spam. Second, man 4 pppoe says: MTU/MSS ISSUES Problems can arise on machines with private IPs connecting to the Inter- net via a machine running both Network Add

Re: Why I left OpenBSD

2010-06-11 Thread Mitja Muženič
> Please, someone do an image macro. "I'm in ur router, remappin' yar keyz" Here you are: http://cheezburger.com/View/3620602624 (improved spelling checked through the awesome http://speaklolcat.com/ service). Liek it? :) Mitja

Re: heads up - softraid metadata change

2010-03-27 Thread Mitja Muženič
Don't thank me, I had nothing to do with it - just reporting the good news :) All the thanks and kudos go to Joel, Marco and everybody who's ever worked on softraid(4). Mitja > -Original Message- > From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of J.C. > Roberts >

heads up - softraid metadata change

2010-03-26 Thread Mitja Muženič
Joel Sing (jsing@) has just commited to -current a softraid update that bumps the softraid metadata version - see the commit mail and the brief article on Undeadly. The new kernel will not assemble the existing softraid volumes, so special caution is required BEFORE upgrading your -current kernel o

New OpenOffice.org port build box needed

2009-02-25 Thread Mitja Muženič
A few days ago Robert Nagy (the OpenOffice.org port maintainer) added his request for a build box to www.openbsd.org/want.html. OpenOffice.org 3 is a huge port to build and maintain, and a single build takes over 12 hours on the machine that Robert currently has and cannot afford to run anymore d

Re: Problem with current i386 snapshot

2008-08-03 Thread Mitja Muženič
Same here on a Thinkpad x31. Mitja > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Emilio Perea > Sent: Sunday, August 03, 2008 6:29 AM > To: misc@openbsd.org > Subject: Problem with current i386 snapshot > > This build seems to go into an endles

Re: note for faq, maybe

2008-07-10 Thread Mitja Muženič / Kerberos.si /
Yes, I can confirm that. I too got bitten by it before and I was considering proposing a patch for upgradeXX.html, but I got sidetracked. Mitja > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Marc Balmer > Sent: Thursday, July 10, 2008 3:55 PM > To

Re: isakmpd -- NCP IPsec client: peer proposed invalid phase 2 IDs

2008-06-30 Thread Mitja Muženič
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Harald Dunkel > Sent: Monday, June 30, 2008 9:17 AM > To: [EMAIL PROTECTED] > Cc: Misc OpenBSD > Subject: Re: isakmpd -- NCP IPsec client: peer proposed > invalid phase 2 IDs > > Hi Prabhu, > > I do

more pci ids

2008-05-21 Thread Mitja Muženič
Found in a Dell T300, verified through pciids.sourceforge.net Mitja === RCS file: /cvs/src/sys/dev/pci/pcidevs,v retrieving revision 1.1360 diff -u -r1.1360 pcidevs --- pcidevs 20 May 2008 08:23:18 - 1.1360 +++ pcidevs

two new pci ids

2008-04-01 Thread Mitja Muženič
Found in a Dell PE R200 and verified through pciids.sf.net Index: pcidevs === RCS file: /cvs/src/sys/dev/pci/pcidevs,v retrieving revision 1.1336 diff -u -r1.1336 pcidevs --- pcidevs 23 Mar 2008 12:10:00 - 1.1336 +++ pcid

ipsec.conf and AES 256

2007-11-19 Thread Mitja Muženič
As far as I can tell, currently in ipsec.conf there is no way to use AES with KEY_LENGHT=256. Is anybody working on adding this? Otherwise I might try it when the time permits. I'm thinking that isakmpd should first learn about a new default transform, let's say AES256 - then adding that into ips

Re: glxsb crypto crash

2007-11-15 Thread Mitja Muženič
For the archives, the following two commits have fixed this: -- CVSROOT:/cvs Module name:src Changes by: [EMAIL PROTECTED] 2007/11/14 12:10:44 Modified files: sys/arch/i386/i386: via.c sys/arch/i386/pci: glxsb.c Log message: do not process r

glxsb crypto crash

2007-11-10 Thread Mitja Muženič
Not my day, obviously On a net5501 machine that I just upgraded to 4.2 I experienced a sudden reboot and found this in dmesg: uvm_fault(0xd078d120, 0x0, 0, 1) -> e fatal page fault (6) in supervisor mode trap type 6 code 0 eip d03d4fab cs 8 eflags 10296 cr2 4 cpl 90 panic: trap type 6, code=0

ifconfig regress in combination with pppoe(4)

2007-11-10 Thread Mitja Muženič
Hi all! I just found the hard way that my old hostname.pppoe0 file which used to work under 4.1 causes a spectacular failure on 4.2. # sh /etc/netstart pppoe0 ifconfig: SIOCSIFGENERIC(SPPPIOSDEFS): Device busy The reason turned out to be a whitespace character after the \ sign in hostname.pppoe0

HP Proliant ML110

2007-11-09 Thread Mitja Muženič
For the archives: HP Proliant ML110 will not boot bsd.rd unless the BIOS option "8042 Emulation Support" (which is enabled by default) is disabled. It will hang at the "entry point..." message indefinitely. Maybe this will save somebody half an hour of googling, tweaking bios etc Mitja

Re: weird ppp upgrade problems

2007-10-28 Thread Mitja Muženič
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Otto Moerbeek > Sent: Sunday, October 28, 2007 9:19 PM > To: Mitja Mu>enih > Cc: misc@openbsd.org > Subject: Re: weird ppp upgrade problems > > On Sun, 28 Oct 2007, Mitja Mu>enih wrote: > > > I managed t

Re: weird ppp upgrade problems

2007-10-28 Thread Mitja Muženič
I managed to narrow down this isssue significantly. My hardware setup on this box is a soekris 4801 board + a 4-port serial card by Sunix ( http://www.sunix.com.tw/it/en/Product_Detail.php?cate=2&class_a_id=34&sid=36 1 ), full dmesg at the end. The serial ports are: puc0 at pci0 dev 10 funct

weird ppp upgrade problems

2007-10-20 Thread Mitja Muženič
Hi! I have a box with two external ISDN modems attached to it that acts as an outgoing modem pool to a number of remote located ISDN routers (zyxel P-202H Plus v2). Recently I was given the go-ahead to upgrade this 3.6 box so I swapped the disk with a new one with a fresh install of 4.1 (4.2 cds

Re: vr driver trouble on Soekris 5501

2007-10-12 Thread Mitja Muženič
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Christian Plattner > Sent: Friday, October 12, 2007 4:43 PM > To: misc@openbsd.org > Subject: Re: vr driver trouble on Soekris 5501 > > > Not sure if related, but something similar has been fixed in >

Re: IPSec Keylifetime using ipsecctl and ipsec.conf?

2007-07-26 Thread Mitja Muženič
Coincidentally I have exactly same symptoms connecting 4.1-stable (using isakmpd.conf and AES SHA1) to an unknown remote Firebox VPN gateway running "firebox software 8.3" (very sketchy information because I had to prie it out of the IT people at the remote end). Rekeying occasionaly fails, Phase

Re: wifi signal triangulation

2006-12-18 Thread Mitja Muženič
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Reyk Floeter > Sent: Monday, December 18, 2006 11:22 AM > To: Jacob Yocom-Piatt > Cc: misc@openbsd.org > Subject: Re: wifi signal triangulation > > On Sun, Dec 17, 2006 at 12:09:12PM -0600, Jacob Yocom

Re: VPN interoperability problem with Symantec Enterprise Firewall [solved]

2006-10-19 Thread Mitja Muženič
Found a solution of sort - downgrade the phase 2 transform from AES to 3DES. Even if offically SEF 7.0.4 supports AES for phase 2 and it accepts it during IKE negotiation, the tunnel fails immediately with a misleading error message on SEF. Given the age of Symantec Enterprise Firewall 7.0.4 (rele

Re: OpenBSD dedicated hosting

2006-10-19 Thread Mitja Muženič
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Gilles Chehade > Sent: Thursday, October 19, 2006 12:02 AM > To: [EMAIL PROTECTED] > Cc: misc@openbsd.org > Subject: Re: OpenBSD dedicated hosting > [...] > I have then tried LayeredTech as suggested b

VPN interoperability problem with Symantec Enterprise Firewall

2006-10-18 Thread Mitja Muženič
Hi! Just a quick question if anybody has had the same problem, or contrary, if anybody has a success story with SEF. I'm trying to establish an IPsec tunnel between OpenBSD 3.9 and Symantec Enterprise Firewall 7.0.4 (NT/2k) which is not under my control. The negotiation goes through normally, bu

Re: Oldest Server you run

2006-10-12 Thread Mitja Muženič
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Falk Husemann > Sent: Thursday, October 12, 2006 8:55 PM > To: misc@openbsd.org > Subject: Oldest Server you run > > Hello List! > We're trying to put an old server to good use again and would > like

Re: RAID on 3.9 hangs

2006-06-04 Thread Mitja Muženič
As you referenced my post - I never solved that. It was just too painful to seriously debug it over a rented KVM from half the world away and requiring me to open a trouble ticket for every reboot. I even tried to replicate the problem locally on supposedly same hardware (HP Compaq dc5100 + 2x SATA

Re: 3.9-stable+ raidframe hangs on boot

2006-05-05 Thread Mitja Muženič
This is a fresh install on a supposedly virgin HDD set, but since it's a hosting server, don't know exactly if they aren't simply recycled. I did make some progress a few minutes after posting the initial mail. The hang happens only with option RAID_AUTOCONFIG. If I boot a kernel with RAIDframe bu

3.9-stable+ raidframe hangs on boot

2006-05-05 Thread Mitja Muženič
Hi! Yet another one of those weird things. HP Compaq dc5100, a couple thousand km away from me, I've got a KVM/IP and a 3.9 cd stuck in the drive. Installed -release, rebooted, cvs'd to 3.9-stable, built GENERIC.RAID, rebooted. GENERIC.RAID = GENERIC + option RAID_AUTOCONFIG + pseudo device raid

isakmpd - DPD stops working

2006-04-21 Thread Mitja Muženič
I'm debbuging something weird here. Before I put together a full and sanitized error report, just a quick question: is anybody else seeing DPD to just stop working after a couple of hours, or is it just me & my setup? I have some pre-3.9 -current (mid March or so) machines running some IPsec tunne

Re: pppoe loopback

2006-02-02 Thread Mitja Muženič
> Today one of my clients' firewall lost its pppoe connection 3.8-stable, dmesg follows: OpenBSD 3.8-stable (GENERIC) #0: Wed Nov 30 15:41:10 CET 2005 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel Pentium II ("GenuineIntel" 686-class, 512KB L2 cache) 349 MHz cpu0: FPU,

pppoe loopback

2006-02-02 Thread Mitja Muženič
Hi! Today one of my clients' firewall lost its pppoe connection and had to be manually restarted (ifconfig pppoe0 down/up). The funny thing was this log message: Feb 2 04:57:08 wall /bsd: pppoe0: loopback Feb 2 04:57:08 wall /bsd: pppoe0: phase terminate Feb 2 04:57:08 wall /bsd: pppoe0: phas

Winbond PC87591 on i2c?

2006-01-31 Thread Mitja Muženič
Hi! In the light of recent activity on i2c sensors, is anybody working on Winbond (ex NS) PC87591 ? As far as I can tell there is documentation available at http://www.winbond.com.tw/E-WINBONDHTM/partner/apc_002.html and I believe this is the sensor in at least one IBM Thinkpad model (A31p in my

max preshared key length in isakmpd?

2005-09-08 Thread Mitja Muženič
Does anyone know what is the max length of the preshared key in Authentication= field? A pointer to a IKE RFC would be also nice, if the key size is defined somewhere. Google told me some Ciscos accept up to 48 characters as PSK, but couldn't find anything more specific. I'm trying to connect to a

Re: [OT]: good home switch?

2005-09-04 Thread Mitja Muženič
> I've had one of these since 2002 or 2003 and it has worked > solidly ever > since. Of course, it'd be weird if such a simple device had any > problems. You'd be surprised how often and in how weird ways such simple devices can fail. A couple of months ago at a client's site a cheapo Jaht swit

Re: Moving from 3.7-release to -stable: make build fails (i386)

2005-08-31 Thread Mitja Muženič
> > > # export CFLAGS='-O3 -mcpu=athlon-xp -march=athlon-xp -mmmx > > > -msse -m3dnow > > > -mfpmath=sse' [...] > I could do just 'make obj build' or something like that, but > I wanted to make clear that I'm not skipping any steps which > are required at the first rebuild, as it could be defini

SOLVED: RE: isakmpd: section has no "ID-type" tag

2005-08-30 Thread Mitja Muženič
It turns out that I did some copy&paste action when I was creating the [peer-ID] section. And even if there were no extra blank characters anywhere (I was careful to check that multiple times), somehow something was still messing with the parser. Brackets or =, something must have looked fine on sc

Re: isakmpd: section has no "ID-type" tag

2005-08-30 Thread Mitja Muženič
I don't want to be annoying but I have people breathing down my back. Does anyone at all have a working [peer-ID] section in isakmpd.conf? I mean something similar to: [ABCD-peer] Phase=1 Transport=udp Address=aaa.bbb.ccc.ddd Configuration=ABCD-main-mode ID=ABCD-ID Authentication= [ABC

isakmpd: section has no "ID-type" tag

2005-08-29 Thread Mitja Muženič
I've been working on this for hours after an already long day, so I'm tired. What am I missing here? 001543.953108 Misc 95 conf_get_str: [ABCD-peer]:ID->ABCD-ID 001543.956103 Misc 95 conf_get_str: configuration value not found [ABCD-ID]:ID-type 001543.959050 Default ipsec_id_size: section ABCD-ID

Re: network traffic monitoring

2005-08-22 Thread Mitja Muženič
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of [EMAIL PROTECTED] > Sent: Monday, August 22, 2005 6:34 PM > To: petra merjasec > Cc: misc@openbsd.org > Subject: Re: network traffic monitoring > > If you just want a simple realtime monitor, I'd sugge

Accoom Networks T1/E1

2005-08-14 Thread Mitja Muženič
Call me stupid but is there a link for this card? Google doesn't know anything useful about "Accoom" alone, even less for "Accoom Networks" and all the obvious spelling variations ([Acom, Accom, Accomm] + [PCI,E1,T1,card]). Or is it something not produced yet? Regards, Mitja > -Original Mes

pccom on cardbus not in GENERIC

2005-05-31 Thread Mitja Muženič
A quicker question (a subset of my lenghty mail on tech@): why is pccom at cardbus not included in GENERIC? Does com_cardbus still have issues, is it lack of testing or any other reasons? The reason I'm asking this is that I'm struggling with a cardbus serial device (a GPRS/EDGE data card that is