[cryptography export] OpenBSD solution for usage within EAR/CRF defined rouge states.

2016-07-07 Thread Per Engelbrecht
Hi misc@ I have been assinged a task with an extremely short timeline. The objective is to produce a EAR/CRF compliant laptop based workplace solution with as much bells and whistles as possible (anything from vpn, mta, LibraOffice to SAPgui and more) on non-us produced OS and hardware.  I have lo

Could someone please tell Mark Kettenis that ..

2006-11-14 Thread Per Engelbrecht
Hi all, Could someone close to Mark Kettenis please tell Mark to get in touch with me directly/off-list, thank you. The best to you all, /per [EMAIL PROTECTED] -- "The most worth-while thing is to try to put happiness into the lives of others." - Sir Robert Baden-Powell

Syskonnect [msk] problem

2006-10-09 Thread Per Engelbrecht
Hi all, i386 / 4.0 (Aug. 28 2006 23:10 snap) dmesg below. I am replacing a couple of high-traffic routers in our datacenter and have just received (among others) a bunch of Syskonnect SK-9X22 dual Gbit server adapters for the job. These nic's should be supported by the 'msk' driver from 3.9-cu

Re: OT Media-Converters, was Re: BGP router now running desp. low on mem.

2006-09-21 Thread Per Engelbrecht
Diana Eichert wrote: Just wanted to throw in my US$.02 worth on the media converter issue. At my place of employment a facility design decision was taken a few years ago mandating all fiber buildings. It was pretty obvious they were clueless about commodity h/w so now we have this huge installa

Re: OT Media-Converters, was Re: BGP router now running desp. low on mem.

2006-09-21 Thread Per Engelbrecht
Siegbert Marschall wrote: Hi, ## Physical connection: # ## We are terminating with this carrier in a FE port but due to the distance between them and us at the datacenter location, a FDDI connection was placed in between like: [our router][100baseTX][

Re: BGP router now running desperately low on memory [epilogue]

2006-09-20 Thread Per Engelbrecht
Stuart Henderson wrote: On 2006/09/20 17:05, Per Engelbrecht wrote: The BGP box I have (OpenBSD 3.9 -stable / amd64 / bsd.mp) is a "serverworks" based box with 2GB of ram per cpu, Intel PRO/1000MT dual and quard server nic's, U320 SCSI etc., etc. -> i.e. this is not abo

Re: BGP router now running desperately low on memory [epilogue]

2006-09-20 Thread Per Engelbrecht
Hi all, Just to make sure nobody's sitting and wondering what happened with this thread, then here's a final mail with a short description of what's cooking right now and what was boiling back then. Below you'll find: - case - situation - conclusion - physical connection - hardware - a few ti

BGP router now running desperately low on memory

2006-08-31 Thread Per Engelbrecht
Hi Henning, Claudio and everybody else on the list, I've been working with kern.maxclusters up and down between 6144 and 32768. Whenever I raise the value I get a short lived drop in "Kbytes allocated to network' (netstat -m) only to see a clime again within minutes. Average is 75-90% Anything

Re: BGP router running low on memory with 4GB of RAM ..!

2006-08-31 Thread Per Engelbrecht
Henning Brauer wrote: * Per Engelbrecht <[EMAIL PROTECTED]> [2006-08-31 13:45]: The kern.maxclusters are currently 6144 (standard) on the box. If I raise it to e.g. 16384 or 12288 I get a: "sysctl: top level name 16384 is invalid" - what would be a correct stepwise increasem

Re: BGP router running low on memory with 4GB of RAM ..!

2006-08-31 Thread Per Engelbrecht
Henning Brauer wrote: * Per Engelbrecht <[EMAIL PROTECTED]> [2006-08-31 11:55]: Hi all, - OpenBSD 4.0 (build on snap from aug. 28 2006 23:10) - i386 - 'netstat -m', 'top' and 'dmesg' below. I've just rebuild one of my BGP routers and I'm ha

BGP router running low on memory with 4GB of RAM ..!

2006-08-31 Thread Per Engelbrecht
Hi all, - OpenBSD 4.0 (build on snap from aug. 28 2006 23:10) - i386 - 'netstat -m', 'top' and 'dmesg' below. I've just rebuild one of my BGP routers and I'm having a real bad memory/performance issue with this box. (yes, Im running -current in production due to a Intel Pro/1000GT Quard card I

Re: AS path prepending [OpenBGPD]

2006-08-18 Thread Per Engelbrecht
Claudio Jeker wrote: On Fri, Aug 18, 2006 at 07:25:17AM +0200, Per Engelbrecht wrote: Claudio Jeker wrote: On Thu, Aug 17, 2006 at 05:32:52PM +0200, Per Engelbrecht wrote: Hi all, (obsd3.8 / i386) So fare I've used 'weight' and 'localpref' between o

Re: AS path prepending [OpenBGPD]

2006-08-17 Thread Per Engelbrecht
Claudio Jeker wrote: On Thu, Aug 17, 2006 at 05:32:52PM +0200, Per Engelbrecht wrote: Hi all, (obsd3.8 / i386) So fare I've used 'weight' and 'localpref' between our peers in order to put one in favour of the other (mainly for pricing). Now I'm adding third

AS path prepending [OpenBGPD]

2006-08-17 Thread Per Engelbrecht
Hi all, (obsd3.8 / i386) So fare I've used 'weight' and 'localpref' between our peers in order to put one in favour of the other (mainly for pricing). Now I'm adding third peer and wan't to use AS path prepending in ordet to compensate for one of my old peer's inappropriate peering agreements

Re: Intel pro/1000GT quad adapter [not working]

2006-08-03 Thread Per Engelbrecht
Stuart Henderson wrote: On 2006/08/03 15:54, Per Engelbrecht wrote: I'm beefing up two of our bgp routers i.e. replacing Intel Pro/1000MT dual port server adapters with Intel Pro/1000GT quad-port server adapters. The GT card is the MT cards successor and should be backwards compatible

Intel pro/1000GT quad adapter [not working]

2006-08-03 Thread Per Engelbrecht
Hi all, (obsd3.9 / i386) I'm beefing up two of our bgp routers i.e. replacing Intel Pro/1000MT dual port server adapters with Intel Pro/1000GT quad-port server adapters. The GT card is the MT cards successor and should be backwards compatible, but my vanilla 3.9 installation 'no habla GT'.

Re: x.org

2006-06-15 Thread Per Engelbrecht
[EMAIL PROTECTED] wrote: Strange problem which appeared in 3.8 and appears in 3.9. When I type startx it does nothing. After waiting for half a minute i press cancel and only then it begins to do something but fails to start. When I open another tty and type there startx it starts normally. The s

Re: Linuxforum 2006 from a OpenBSD perspective.

2006-03-07 Thread per engelbrecht
Felix Kronlage wrote: On Sun, Mar 05, 2006 at 12:37:35PM +0100, per engelbrecht wrote: Wim also made a last minute sensational save for Felix Kronlage and held the 'Mobility with OpenBSD' talk. Wim is very meticulous and has a very plesant way of communicating / presenting th

Linuxforum 2006 from a OpenBSD perspective.

2006-03-05 Thread per engelbrecht
Hi all, LinuxForum [LF06] is now over and as usual the number of visitors have surpassed any of the previous years. Two years ago it was moved from Symbion Science Park to The Royal Danish Academy of Fine Arts, School of Architecture simply because the number of exhibitors, speakers and guest

Re: erratic networking problem

2005-12-26 Thread per engelbrecht
Han Boetes wrote: per engelbrecht wrote: recently had a problem with a NFS server. Lousy performance when getting data (not putting) from most clients (but not all) until they discovered diffs in size of the transmit/receive bufferes. When fixed users felt like going from walking to flying

Re: erratic networking problem

2005-12-26 Thread per engelbrecht
Han Boetes wrote: Ted Unangst wrote: On 12/22/05, Han Boetes <[EMAIL PROTECTED]> wrote: This problem has been bugging me for month now. It started happening a month after 3.8 got tagged. At least, that's when I started noticing it. So it might be anything. But I suspect the OpenBSD side the m

Re: ccd on active disks?

2005-11-18 Thread per engelbrecht
Markus Wernig wrote: Hi misc Is anybody aware of a document that describes how to ccd all slices (including /) after installation? I've installed 3.8 generic using just one of two identical disks. Now I need to mirror that disk onto the other one. I copied the disklabel from the active disk over

Re: OpenBGPD and eBGP nexthop

2005-11-09 Thread per engelbrecht
Henning Brauer wrote: * per engelbrecht <[EMAIL PROTECTED]> [2005-11-07 19:01]: #neighbors and peers neighbor $peer0 { remote-as 6 descr eBGP local-address aaa.aaa.aaa.163 set nexthop aaa.aaa.aaa.161 multihop 10 set localpref 100 set weight 45 announce self } i

OpenBGPD and eBGP nexthop

2005-11-07 Thread per engelbrecht
Hi All [20051019 snap i386] Last night I switched from our old BGP setup (fbsd/zebra) to our new obsd/openbgpd. All but a single eBGP session to one of our peers was established. The eBGP peer switched between 'active' and 'connected' and I could ping both nexthop IP and peer IP but still no

Re: smartmontools (smartd) kills system [trace/gdb]

2005-11-06 Thread per engelbrecht
Kenneth R Westerback wrote: On Fri, Nov 04, 2005 at 03:22:33PM +0100, per engelbrecht wrote: Kenneth R Westerback wrote: On Fri, Nov 04, 2005 at 07:14:05AM +0100, per engelbrecht wrote: K WESTERBACK wrote: I'm interested. Ken Hi again Ken If you find anything of val

smartmontools (smartd) kills system [trace/gdb]

2005-11-03 Thread per engelbrecht
Hi again Followup on first mail with only trace/gdb info: GNU gdb 6.3 Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to

smartmontools (smartd) kills system

2005-11-03 Thread per engelbrecht
Hi all [20051019 snap i386] Running smartd on a SCSI/U320 based single-disk system kills the system at once! - dmesg further down. (sysctl hw.disknames=sd0,cd0,fd0) Snip of /etc/smartd.conf [...] #DEVICESCAN /dev/sd0c /dev/sd0c -m [EMAIL PROTECTED] -M test /dev/sd0c -d scsi -H -l error -l se

Re: bgpd.conf md5sig, iBGP and redistributing routes to/from ospf

2005-11-03 Thread per engelbrecht
Jesper Louis Andersen wrote: per engelbrecht wrote: Q: setting up iBGP I've used our own AS as 'remote-as' but can't find a 'no synchronization' option for this connection. Do I need it at all. Been poking around in /usr/src/usr.sbin/bgpd without solving it, but

Re: bgpd.conf md5sig, iBGP and redistributing routes to/from ospf [forgot to sign it]

2005-11-02 Thread per engelbrecht
Claudio Jeker wrote: On Wed, Nov 02, 2005 at 12:34:29AM +0100, per engelbrecht wrote: Hi all [20051019 snap i386] I've made a setup with two identical bgp routers. On each router there's 3 peers (BGP and eBGP), one failover (carp/iBGP/ospf) interconnecting these routers and fin

bgpd.conf md5sig, iBGP and redistributing routes to/from ospf [forgot to sign it]

2005-11-01 Thread per engelbrecht
Hi all [20051019 snap i386] I've made a setup with two identical bgp routers. On each router there's 3 peers (BGP and eBGP), one failover (carp/iBGP/ospf) interconnecting these routers and finally pipes backwards to the internal nets. Part of bgpd.conf further down. I'm replacing a single ro

bgpd.conf md5sig, iBGP and redistributing routes to/from ospf

2005-11-01 Thread per engelbrecht
Hi all [20051019 snap i386] I've made a setup with two identical bgp routers. On each router there's 3 peers (BGP and eBGP), one failover (carp/iBGP/ospf) interconnecting these routers and finally pipes backwards to the internal nets. Part of bgpd.conf further down. I'm replacing a single ro

Re: ipmi(4)

2005-10-23 Thread per engelbrecht
Marco Peereboom wrote: Folks who keep track of cvs changes might have noticed a barrage of commits regarding ipmi(4). The driver is functionally complete but needs wide testing on both amd64 and i386 architectures. Jordan Hargrave (jordan@) wrote most of the code. Let's talk a bit about ipmi(4

Re: congrats on OpenBSD SAN... one little question

2005-10-21 Thread per engelbrecht
Nick Holland wrote: Jason Dixon wrote: On Oct 20, 2005, at 1:49 PM, Joe Advisor wrote: Congrats on the cool OpenBSD SAN installation. I was wondering how you are dealing with the relatively large filesystem. By default, if you lose power to the server, OpenBSD will do a rather long fsck wh

Re: iptables vs pf

2005-10-19 Thread per engelbrecht
Edy Purnomo wrote: i suggested to my friend to replace his linux box to openbsd. he uses mailnly for internet gateway : pf + squid proxy after 2 weeks later he switched it back linux and said : linux much faster to respond the http requests (he had a same configuration on openbsd, pf + squid pr

Re: OpenBSD's 10th birthday

2005-10-18 Thread per engelbrecht
On 10/18/05, Theo de Raadt <[EMAIL PROTECTED]> wrote: Now it is really OpenBSD's 10th birthday ;) Greetings from Denmark and thank you all for OpenBSD (The TAO of Operatingsystems) and anything related. /per [EMAIL PROTECTED]

Re: pf and ospf

2005-10-18 Thread per engelbrecht
Henning Brauer wrote: * per engelbrecht <[EMAIL PROTECTED]> [2005-10-18 14:36]: Claudio Jeker wrote: On Mon, Oct 17, 2005 at 04:32:26PM -0400, stan wrote: What ports do I need to open up on a pf firewall to allow it to send/recieve ospf? pass proto ospf Hm, that's very

Re: pf and ospf

2005-10-18 Thread per engelbrecht
Claudio Jeker wrote: On Mon, Oct 17, 2005 at 04:32:26PM -0400, stan wrote: What ports do I need to open up on a pf firewall to allow it to send/recieve ospf? pass proto ospf Hm, that's very short (but parsing the rule work). Actually I'm building an OpenBSD/OpenBGPD/OSPF/PF [3.8 20051010

Re: OpenBGPD sizing

2005-09-30 Thread per engelbrecht
Claudio Jeker wrote: On Thu, Sep 29, 2005 at 02:39:15AM +0200, per engelbrecht wrote: per engelbrecht wrote: Stuart Henderson wrote: How much RAM might I want in order to accept full views from 2-3 peers? Thanks. Running 3 peers, full table (170.097 prefixes) uses 317MB ram all

Re: OpenBGPD sizing

2005-09-28 Thread per engelbrecht
Stuart Henderson wrote: How much RAM might I want in order to accept full views from 2-3 peers? Thanks. Running 3 peers, full table (170.097 prefixes) uses 317MB ram all included. /per [EMAIL PROTECTED]

Re: OpenBGPD sizing

2005-09-28 Thread per engelbrecht
per engelbrecht wrote: Stuart Henderson wrote: How much RAM might I want in order to accept full views from 2-3 peers? Thanks. Running 3 peers, full table (170.097 prefixes) uses 317MB ram all included. Just to avoid any misinterpretation, that is for the BGP part only. (".. ra

Re: Nmap -O... will it be fixed some day?

2005-09-16 Thread per engelbrecht
Lukasz Sztachanski wrote: [...] doesn't think so; try to disable pf ;) Probably it's a matter of pf`s traffic normalization. [...] Or use; pass in quick on $xxx all allow-opts on int used specific(!) for nmap, snort et al. /per [EMAIL PROTECTED]

Re: ARP Poisoning

2005-08-08 Thread per engelbrecht
Artur Grabowski wrote: "Miroslav Kubik" <[EMAIL PROTECTED]> writes: Hello In our intranet is an attacker who flooding OpenBSD router by ARP requests. Due to this we have trouble with internet connection. Is there a way how to protect server against ARP poisoning attack? Excuse me? You ha

Re: PHP or Mysql problem?

2005-06-16 Thread Per Engelbrecht
James Strandboge wrote: On Wed, 2005-06-15 at 11:30 +0200, Nico Meijer wrote: Hi Kiraly, mysql error: Can't create/write to file '/tmp/ #sql_4c99_0.MYD' (Errcode: 9) MySQL problem. Simple suggestions, not idiot-proof: I prefer this on OpenBSD 3.6 (should be same on 3.7): Add to /etc/l

Re: PHP or Mysql problem?

2005-06-15 Thread Per Engelbrecht
Luca Losio wrote: Nico Meijer wrote: Hi Kiraly, mysql error: Can't create/write to file '/tmp/ #sql_4c99_0.MYD' (Errcode: 9) MySQL problem. Simple suggestions, not idiot-proof: /etc/my.cnf: Mmm..installing mysqlserver usually doesn't create /etc/my.cfn...isn't it? I can't find that

Re: MySQL issues

2005-06-09 Thread Per Engelbrecht
John Tate wrote: Right, I created a hardlink of the socket into /var/www/mysql/mysql.sock and changed this directive in php.ini to the following... mysql.default_socket = /var/www/mysql/mysql.sock I however could not find the my.cnf file, where is it on OpenBSD 3.6, I did a "find / | grep my.cn

Re: Informations about the directories in /usr/src.

2005-05-31 Thread Per Engelbrecht
Joco Salvatti wrote: Hi all, I'd like to know where I can find informations about the directories in /usr/src. What does each directory keep? What are they purposes? I believe that a document containing the description of the file system hierarchy under OpenBSD systems could help me so well. Th

Re: OBSD 3.7 ports -- mysql

2005-05-27 Thread Per Engelbrecht
Hi Daniel I'm running a little behind schedule - I've just started on the mysql installation. >> You will need to install the package p5-DBD-mysql-2.9004.tgz, but >>that's already available on the main site. So, get it from there. Then >>install the client and server. I didn't release the t

Re: MySQL upgrade to 4.1.12 packages files

2005-05-27 Thread Per Engelbrecht
Daniel Ouellet wrote: datasize, maxproc and openfiles values should then be ... ? Value really varies for your setup. But you can't run the full tests, or benchmark test with the default value. You can however run individual tests and they will terminate well, but the run-full-test will not

Re: MySQL upgrade to 4.1.12 packages files

2005-05-26 Thread Per Engelbrecht
Daniel Ouellet wrote: Hi, [...] So, here is my first port to bring the in tree MySQL version to the latest stable recommended version 4.1.12. All works on AMD64 and I386. I also added one more package for the benchmark as well as I use that too to test my port. It's complete then :)

Re: OBSD 3.7 ports -- mysql

2005-05-25 Thread Per Engelbrecht
Daniel Ouellet wrote: Per Engelbrecht wrote: I'm about to launche a [3.7 AMD64 GENERIC.MP] mysql server (mysql backend for a lot of servers / production environment) and would like to test and use the new MySQL 4.1.12 I have the packages for i386 and amd64 ready for all cl

Re: OBSD 3.7 ports -- mysql

2005-05-25 Thread Per Engelbrecht
Daniel Ouellet wrote: Just FYI. I am finishing up a port that hopefully will be put in for MySQL 4.1.12, their latest recommended stable version. Hi Daniel That's brilliant! So far all works well and pass all the tests suites stuff, with the exception that I have to create three hard lin

Re: Linuxwochen Vienna 2005, May 24 - 27, 2005, Vienna, Austria.

2005-05-25 Thread Per Engelbrecht
Wim Vandeputte wrote: Hey, I'm on my way to Vienna now for the Linuxwochen, May 24 - 27, 2005 Reinhard and me will be in the MuseumsQuartier from Wednesday 25 to answer your questions or just meet people for a chat and drinks Wim. Hi Wim A little off topic and for whatever it's worth; -

Re: building ccd during install [solved]

2005-05-22 Thread Per Engelbrecht
To Paul, Kenneth and Hugo Building a ccd during install worked just fine :) (sorry for a late response) Thank you all! respectfully /per [EMAIL PROTECTED]

Re: apache2, webdav

2005-05-17 Thread Per Engelbrecht
Mike Gould wrote: Hi Has anyone got any advice for installing apache2 on openbsd 3.6 (stable). There seems to be a port for freebsd but nothing for openbsd. If I start from the apache source what kinds of things will I need to change? Hi Mike httpd on OpenBSD will get you all the way. It's int

Re: well that does it

2005-05-16 Thread Per Engelbrecht
Theo de Raadt wrote: on the topic, after reyk's talk andphk bullshitting, greg lehey let us know that "phk is not speaking for freebsd". At the presentation. In the crowd. So who is speaking for FreeBSD? Is it phk and all the freebsd developers sending me hate mail for exposing this? Like Scott L

Re: building ccd during install

2005-05-14 Thread Per Engelbrecht
Paul de Weerd wrote: On Sat, May 14, 2005 at 03:59:57AM +0200, Per Engelbrecht wrote: | >So that's a good hint that you should be able to use CCD during | >install. I'd suggest (as suggested earlier) first installing /var on / | >(as it's only ~10MB). Then, when the ins

Re: building ccd during install

2005-05-13 Thread Per Engelbrecht
Paul de Weerd wrote: On Fri, May 13, 2005 at 01:06:19PM +0200, Per Engelbrecht wrote: | Hi all | | [OpenBSD 3.7 amd64 bsd.mp] | | Is it possible to build a ccd during install ? | I need an extreemly large /var (spanning the remains of two disks) and | would like /var/ to be installed there

Re: building ccd during install

2005-05-13 Thread Per Engelbrecht
Hugo Villeneuve wrote: On Fri, May 13, 2005 at 01:06:19PM +0200, Per Engelbrecht wrote: Hi all [OpenBSD 3.7 amd64 bsd.mp] Is it possible to build a ccd during install ? I need an extreemly large /var (spanning the remains of two disks) and would like /var/ to be installed there. Looks to me a bit

building ccd during install

2005-05-13 Thread Per Engelbrecht
Hi all [OpenBSD 3.7 amd64 bsd.mp] Is it possible to build a ccd during install ? I need an extreemly large /var (spanning the remains of two disks) and would like /var/ to be installed there. Looks to me a bit like the 'chiken and egg' thing. Can't find 'pseudo-device ccd' in GENERIC but 'config'

Re: Automatically redirecting ftp uploads to another Server in OpenBSD

2005-05-13 Thread Per Engelbrecht
Siju George wrote: Hi all, I need some advice on implementing this setup with OpenBSD. The users in the LAN should be able to write files( or ftp upload) to certain directories dir1, dir2, dir3, dir4 etc. the files uploaded to dir1 should be automatically uploaded to an ftp server1 on the internet

OpenBSD 3.7 and 'tcpdump' problems [amd64]

2005-05-09 Thread Per Engelbrecht
Hi all I'm having a peculiar problem with 'tcpdump' on a OpenBSD 3.7 (20050404 snap) amd64. ('dmesg, + 'sysctl' + 'fstab' are below) tcpdump with 0-2 flags = output. tcpdump with 3-x flags = no output. tcpdump with x flags and '-w' = non written at all. When 'tcpdump' is stopped I recive normal '