Re: npppd / pppoe server troubles

2013-10-18 Thread Gruel Bruno
Le 18-10-2013 6:18, YASUOKA Masahiko a écrit : Hi, On Wed, 16 Oct 2013 21:10:25 +0200 Gruel Bruno wrote: As i thought that it's doesn't read my users file i changed the username & password but nothing else. Yes, the log shows the session is terminated because the passwords are mismatched. I

Re: new queueing subsystem

2013-10-18 Thread Henning Brauer
* Johan Beisser [2013-10-16 21:09]: > Right. I guess if I want to define multiple queues for matching > traffic, I need to either redo the filter rules to use tagging*, or > simply do it per outbound bit of traffic. let's make that outright clear: defining queues is for bandwidth shaping only. th

Re: new queueing subsystem

2013-10-18 Thread Henning Brauer
* Boris Goldberg [2013-10-17 15:59]: > You probably need to mention that the new queuing is using hfsc model and > what hfsc model is. I don't think anyone should have to care what algorithm is being used under the hood. > I extensively use cbq and very confused by the current queuing manual

Re: porter's handbook - pkg-readmes

2013-10-18 Thread Stuart Henderson
On 2013-10-18, Gabriel Guzman wrote: > +Does my package need a readme? > +A package may require special instructions to run on OpenBSD, or > +additional files may need to be downloaded before the port will work > +properly, or your port may rely on additional packages to support > +additional f

Re: ntfs with big files

2013-10-18 Thread Paolo Aglialoro
Just a thought: now that fuse support is enabled what about ntfs-3g? Il 17/ott/2013 23:36 "David Vasek" ha scritto: > > On Fri, 11 Oct 2013, Joel Sing wrote: > >> On Thu, 10 Oct 2013, Manuel Giraud wrote: >>> >>> Hi, >>> >>> I have a ntfs partition with rather large (about 3GB) files on it. When

Re: Experiences with OpenBSD RAID5

2013-10-18 Thread Stuart Henderson
On 2013-10-18, Scott McEachern wrote: > Circumstances change, and I might be able to redeploy those HDDs as a > RAID5 array. This, at least in theory, would allow the 18TB total to be > realized as 15TB as RAID5, gaining me 6TB. even if softraid would rebuild raid5, I'd worry about additional

Re: ntfs with big files

2013-10-18 Thread David Coppa
On Fri, Oct 18, 2013 at 1:32 PM, Paolo Aglialoro wrote: > Just a thought: now that fuse support is enabled what about ntfs-3g? ntfs-3g is in ports (sysutils/ntfs-3g). It's fuse support that, as of now, it's not enabled. Ciao, David

Re: Experiences with OpenBSD RAID5

2013-10-18 Thread Scott McEachern
On 10/18/13 07:31, Stuart Henderson wrote: On 2013-10-18, Scott McEachern wrote: Circumstances change, and I might be able to redeploy those HDDs as a RAID5 array. This, at least in theory, would allow the 18TB total to be realized as 15TB as RAID5, gaining me 6TB. even if softraid would rebu

Re: porter's handbook - pkg-readmes

2013-10-18 Thread Marc Espie
On Fri, Oct 18, 2013 at 11:28:44AM +, Stuart Henderson wrote: > On 2013-10-18, Gabriel Guzman wrote: > > +Does my package need a readme? > > +A package may require special instructions to run on OpenBSD, or > > +additional files may need to be downloaded before the port will work > > +proper

Re: ntfs with big files

2013-10-18 Thread David Vasek
On Thu, 17 Oct 2013, David Vasek wrote: On Fri, 11 Oct 2013, Joel Sing wrote: On Thu, 10 Oct 2013, Manuel Giraud wrote: Hi, I have a ntfs partition with rather large (about 3GB) files on it. When I copy these files on a ffs partition they are corrupted. When I try to checksum them directly f

BGP & CARP - suggestions?

2013-10-18 Thread Adam Thompson
I've got two OpenBSD boxes acting as my border router[s], talking BGP to a small # (~4) of peers. At the moment, I've got them using carp(4) on every interface, and bgpd.conf has for each neighbor{} stanza, a "depend on carpX" line. This works, more or less, but failover is anything but instantan

AX88179 usb gigabit ethernet

2013-10-18 Thread man Chan
Hello, I recently brought a pci usb gigabit ethernet with chipset AX88179 and update the source to 5.4.  After the making the 5.4 new kernel, I found out that I still can't use the usb gigabit enternet.  Is there anyone using the usb gigabit ethernet under 5.4  ?  Any idea to solve the problem ?

Re: AX88179 usb gigabit ethernet

2013-10-18 Thread Jonathan Gray
There is a driver in development in -current that is not yet enabled, axen(4). It is not part of 5.4. On Fri, Oct 18, 2013 at 10:29:27PM +0800, man Chan wrote: > Hello, > > I recently brought a pci usb gigabit ethernet with chipset AX88179 and > update the source to 5.4.? After the making the 5.

Kernel TCP recv / send buffer auto scaling

2013-10-18 Thread Frederic URBAN
Hello guys, Since 4.9, there is a auto-scaling tcp buffer size, good functionnality but i've a question. I'm using a pair of OpenBSD servers as squid proxies. Our internet bandwidth is 1Gb/s so we are able to download @ 90 Mbytes /s if needed. When I was using OpenBSD 4.8, i was tuning kerne

Re: Kernel TCP recv / send buffer auto scaling

2013-10-18 Thread Sebastian Reitenbach
On Friday, October 18, 2013 16:53 CEST, Frederic URBAN wrote: > Hello guys, > > Since 4.9, there is a auto-scaling tcp buffer size, good functionnality > but i've a question. I'm using a pair of OpenBSD servers as squid > proxies. Our internet bandwidth is 1Gb/s so we are able to download @

Re: new queueing subsystem

2013-10-18 Thread Boris Goldberg
Hello Henning, Friday, October 18, 2013, 5:37:23 AM, you wrote: >> I extensively use cbq and very confused by the current queuing manual. It >> seems that actual speed will be somewhere between "min" and "max" (and wont >> be equal to "bandwidth"), but how to get an idea where? HB> bandwidth i

Re: new queueing subsystem

2013-10-18 Thread Andy Lemin
I think he did answer your question, if you read between the lines.. A session cannot be 'pushed' to max! It needs to demand the bandwidth in the first place. Try reading this; http://trash.net/~kaber/hfsc/SIGCOM97.pdf This along side /many/ other Internet pages allowed us to fully implement and

Re: dump(8) and permissions

2013-10-18 Thread Alexander Hall
On 10/11/13 15:38, Rodolfo Gouveia wrote: On Fri, Oct 11, 2013 at 09:04:16AM -0400, Jiri B wrote: Try `su' to your user on that system and try to `ls -lR' those dirs, I suppose he won't be able to do that. j. Thanks Jiri. Indeed he can't. I've looked at this closer and I found out that on so

Blocking facebook.com: PF or squid?

2013-10-18 Thread Stefan Wollny
Hi there, having a personal dislike of Facebook (and the MeeToo-systems alike) for their impertinent sniffing for private data I tried on my laptop to block facebook.com via hosts-file. Interestingly this failed: Calling "http://www.facebook.com"; always resulted in a lookup for "httpS://www.faceb

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Andres Genovez
Regards, The way it gets blocked (but not all for a wise kid) properly is via CDIR and block DNS via OpenDNS services Greetings. 2013/10/18 Stefan Wollny > Hi there, > > having a personal dislike of Facebook (and the MeeToo-systems alike) > for their impertinent sniffing for private data I t

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Eric Johnson
On Sat, 19 Oct 2013, Stefan Wollny wrote: > Hi there, > > having a personal dislike of Facebook (and the MeeToo-systems alike) > for their impertinent sniffing for private data I tried on my laptop to > block facebook.com via hosts-file. Interestingly this failed: Calling > "http://www.facebook.c

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Marios Makassikis
On 19 October 2013 00:27, Stefan Wollny wrote: > > Hi there, > > having a personal dislike of Facebook (and the MeeToo-systems alike) > for their impertinent sniffing for private data I tried on my laptop to > block facebook.com via hosts-file. Interestingly this failed: Calling > "http://www.face

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Stefan Wollny
Hi Andres, yes - I have read about OpenDNS' services and that many out there are really happy with them. But I try to do my homework first before relying on s.o. else: I _do_ have this OpenBSD-based squid-server - why not use it to it's full potential? Might not be a big deal traffic-wise, but it

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Brian McCafferty
On 10/18/13 18:27, Stefan Wollny wrote: > Hi there, > > having a personal dislike of Facebook (and the MeeToo-systems alike) > for their impertinent sniffing for private data I tried on my laptop to > block facebook.com via hosts-file. Interestingly this failed: Calling > "http://www.facebook.com"

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Stefan Wollny
Am Fri, 18 Oct 2013 19:21:44 -0400 schrieb Brian McCafferty : [ ... ] > If you use dhclient on your laptop, I think you need to make sure to > specify "lookup file bind" (the search order) to have the hosts file > checked before DNS server. ie- in resolv.conf.tail > bind file is the default. > So

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Stefan Wollny
Am Fri, 18 Oct 2013 19:33:11 -0400 schrieb mia : [ ... ] > > > If you're handling DHCP for all of the traffic for your site, why not > just set up a dns server, point your dhcp clients to this DNS server > and create an authoritative zone for facebook.com that points to > somewhere other than face

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Stefan Wollny
Am Sat, 19 Oct 2013 01:02:58 +0200 schrieb Marios Makassikis : Hi Marios! [ ... ] > > > > Anyway: I think I finally managed to block all their IPs via PF and > > on this laptop I now feel a little less 'observed'. [Yes, I know - > > this is just today's snapshot of IPs!] > > > > Did you block

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread mia
On 10/18/13 18:27, Stefan Wollny wrote: Hi there, having a personal dislike of Facebook (and the MeeToo-systems alike) for their impertinent sniffing for private data I tried on my laptop to block facebook.com via hosts-file. Interestingly this failed: Calling "http://www.facebook.com"; always r

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Stefan Wollny
Am Fri, 18 Oct 2013 18:02:55 -0500 (CDT) schrieb Eric Johnson : > On Sat, 19 Oct 2013, Stefan Wollny wrote: > > > Hi there, > > > > having a personal dislike of Facebook (and the MeeToo-systems alike) > > for their impertinent sniffing for private data I tried on my > > laptop to block facebook.

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Clint Pachl
mia wrote, On 10/18/13 16:33: If you're handling DHCP for all of the traffic for your site, why not just set up a dns server, point your dhcp clients to this DNS server and create an authoritative zone for facebook.com that points to somewhere other than facebook? Running your own own DNS res

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Mike.
On 10/19/2013 at 12:27 AM Stefan Wollny wrote: |Hi there, |[snip] | |My question is on the squid-server I have running at home: What |would make more sense - blocking facebook.com via pf.conf alike or are |there reasons to use squid's ACL instead? Performance? Being |ultra-paranoid and implementin

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Chris Cappuccio
i'd imagine that putting 'www.facebook.com' in your hosts file will do it, unless the browser ignores /etc/hosts you could always use the url filtering mechanism of relayd combined with pf redirects, but if people really want to bypass it, they'll do proxyies (via ssh even) or remote desktop or vp

Re: SSDs in RAID and bio(4)

2013-10-18 Thread Chris Cappuccio
Darren Spruell [phatbuck...@gmail.com] wrote: > I don't have a great deal of experience with SSD disks but was spec'ing > some systems to use them. We'd be doing RAID on the hosts and I'd prefer > to have something supported by bio(4) for volume management. Do SSDs > have any impact on ability to d

Re: Experiences with OpenBSD RAID5

2013-10-18 Thread Scott McEachern
List, I'm bringing you into the middle of an off-list conversation where I'm setting up a RAID10 array. Well, I'm using two RAID1 arrays as the drives for a RAID0 array. All relevant information follows. Any clue to why I'm ending up with an array 1/4 the size I'm expecting? On 10/18/13 23

Re: Looking for good, small, canadian version laptop suggestions

2013-10-18 Thread Jonathan Thornburg
IBM sells refurbished ThinkPads: http://www.ibm.com/shop/used/pref http://www-304.ibm.com/shop/americas/content/home/store_IBMPublicCanada/en_CA/icpepcs.html I have bought a couple of laptops from them in the past, with generally good experiences. -- -- "Jonathan Thornburg [remove -animal to