Re: OpenBSD httpd: PCI - DSS Compliance

2019-04-10 Thread Chris Cappuccio
Kihaguru Gathura [pqscr...@gmail.com] wrote: > Hi, > > The message below refers. Has httpd met the particular requirement > 6.5.1 - 6.5.10 as shown? or is it a matter of further configuration. > > "Requirement 6.5 > Fingerprinted versions of web software used on the website may contain > publicly

Re: Down on em fibre doesn't kill Layer 1 ?

2019-04-23 Thread Chris Cappuccio
Rachel Roch [rr...@tutanota.de] wrote: > > Would it be too much to ask to get this functionality implemented ? > No as long as you are asking yourself... Or perhaps, if you are willing to pay someone else! > I was dealing with a carrier the other day and we were dealing with bringing > up two

Re: Upgrade procedure (6.4 -> 6.5)

2019-05-02 Thread Chris Cappuccio
Ingo Schwarze [schwa...@usta.de] wrote: > > It might be a good idea to do > > # rm -rf /usr/share/man/* /usr/X11R6/man/* > > immediately before an upgrade. > I go one step further, and rm -rf /usr/include /usr/share /usr/X11R6 before a new snapshot is applied. This is a bit overkill but it's

Re: Double nat with pf ?

2019-05-09 Thread Chris Cappuccio
Mik J [mikyde...@yahoo.fr] wrote: > Hello, > Is it possible to nat both source and destination IP on the same openbsd pf > instance aka double nat ? > If yes do someone has an example of it ? are you trying to do "hairpin" NAT? what are you trying to accomplish?

Re: Lenovo w/ AMD Ryzen CPU

2019-05-28 Thread Chris Cappuccio
David Anthony [d...@silentsystems.org] wrote: > All, > > The Lenovo release of T*95 series laptops with AMD Ryzen CPU appears > imminent. > > Would these be poor choices for OpenBSD? Are there any anticipated > ???gotchas??? that I should be aware of? Any thoughts would be greatly > appreciat

Re: Let's Encrypt ACMEv1 end-of-life

2019-06-03 Thread Chris Cappuccio
Diogo Pinela [dpin...@ipatimup.pt] wrote: > > That's interesting, but it doesn't answer my question at all. I don't know if Kristaps is planning on updating it. Nobody else has mentioned it. Maybe it's a prime job for you to investigate? The final RFC version, ACMEv2, is documented in RFC 8555:

Re: umsm0: this device is not using CDC notify message in intr pipe. HP Compaq dc5750

2019-06-29 Thread Chris Cappuccio
Kihaguru Gathura [pqscr...@gmail.com] wrote: > Hello, > > Huawei E303 modem now detaches in OpenBSD 6.5 This works fine on > OpenBSD 6.2 same machine. > There's a remote chance that this is fixed in 6.5-current. Some USB work has been going on. But if that doesn't work, you'll have to try more k

Re: may an edgerouter or pair / queue porblem

2019-06-29 Thread Chris Cappuccio
ms [m...@it-infrastrukturen.org] wrote: > What hardware (CPU, memory type, network cards) do you use in your > configuration? > > Myself I have faced network related performance issues on OpenBSD (v. 6.4). > > Network card drivers are known "not to be very fast" in OpenBSD.. > OpenBSD 6.5-curre

Re: Future of X.org?

2019-06-29 Thread Chris Cappuccio
Leonid Bobrov [mazoc...@disroot.org] wrote: > On Fri, Jun 28, 2019 at 01:56:43PM -0400, Christopher Turkel wrote: > > First, I'd like to blame Xenocara for this pain porting Wayland to > OpenBSD (because building Mesa from ports would be an opportunity), > right now to build Mesa with Wayland supp

Re: Routing 10-40 Mpps on OpenBSD

2016-09-11 Thread Chris Cappuccio
K [k...@protonmail.com] wrote: > All, > > This message is a call for people who are interested to benchmark commodity > hardware with the goal of pushing as much PPS as possible through OpenBSD. > The initial target is to reach 10 Mpps at 64 bytes (or more precisely 84 > bytes with interpacket gap

Re: Routing 10-40 Mpps on OpenBSD

2016-09-11 Thread Chris Cappuccio
K K [kk...@outlook.com] wrote: > I thought Intel, but I speak out of impressions, not backed by any facts. > David Gwynne who is working on the Myricom driver recommends the intel card if that helps > What is the take of OpenBSD developers on this? > Are they any plans? > There's a lot of wor

Re: ARM64:s finally on the market, and flooding it. OpenBSD support?

2016-09-22 Thread Chris Cappuccio
Tinker [ti...@openmailbox.org] wrote: > The market is finally being flooded with ARM64:s. And some of them are > inexpensive. > > I guess AllWinner A64/H64 will be the most ubiquitous one as the chip > is/soon will be something like 5 USD. The Allwinner 64-bit parts are supported under 32-bit mod

Re: LLVM license change

2016-09-27 Thread Chris Cappuccio
Ingo Schwarze [schwa...@usta.de] wrote: > Hi Benjamin, > > kbenjamin Coplon wrote on Mon, Sep 26, 2016 at 01:23:43PM -0400: > > > What does the OpenBSD community think about the LLVM proposal to move > > to the Apache license? > > > > http://lists.llvm.org/pipermail/llvm-dev/2016-September/10477

Re: Laptop Recommendations?

2016-11-11 Thread Chris Cappuccio
harry666t [harry6...@gmail.com] wrote: > On 11 November 2016 at 03:25, Brian wrote: > > Thinkpads are used often by folks wanting to get that penguin OS going also. > > Typing this on a Thinkpad X200s, running 6.0, very very happy with it. I consistently get junk when I buy old Thinkpads. Usuall

Re: Laptop Recommendations?

2016-11-15 Thread Chris Cappuccio
Mihai Popescu [mih...@gmail.com] wrote: > Folks, pay attention, please! The OP asked about a laptop. > Pansonic Thoughbook is not a laptop! It's a real desktop. > I was talking about the Panasonic _Toughbook_ which is definitely a laptop. The CF-C1 and CF-19MK3/MK4/MK5 models are all very portab

Broadcom Wifi Chip Datasheets

2016-11-15 Thread Chris Cappuccio
https://twitter.com/marcan42/status/798720961562361857 "Cypress bought Broadcom's WiFi business and apparently published all their formerly unobtainium datasheets": http://www.cypress.com/search/all?f[0]=meta_type%3Atechnical_documents&f[1]=resource_meta_type%3A575&f[2]=field_related_products%3A

Re: network address in vm by kvm - default gw

2016-11-28 Thread Chris Cappuccio
Max Power [open...@cpnetserver.net] wrote: > Hi guys, > Forgive me, but I am not very expert of OpenBSD. > Guide, about Virtual Host, show examples for all > Operating System but not for OpenBSD. Stupid OVH! > This is the FreeBSD 8.0 way: > > Contents of the file : /etc/rc.conf > ifconfig_em0="ine

Re: Can not read NTPd timedelta from NMEA device by sysctl hw.sensors.nmea0

2016-12-06 Thread Chris Cappuccio
Mihai Popescu [mih...@gmail.com] wrote: > | # ldattach -s 9600 nmea /dev/cuaU2 > > Did you try with /dev/cua00, /dev/cua01, ... > > I think /dev/cuaXX means XX are numbers. if he's using a USB adapter, cuaU2 could be correct, if he has two other usb serial adapters plugged in at least

Re: new httpd mime types problem

2014-11-04 Thread Chris Cappuccio
li...@ggp2.com [li...@ggp2.com] wrote: > > include "/etc/nginx/mime.types" This is fixed in 5.6-current. (The include can only be at certain parts of the config file otherwise)

Re: More missing file removals from upgrade*.html?

2014-11-04 Thread Chris Cappuccio
David Higgs [hig...@gmail.com] wrote: > While the upgrade process is so painless that I often forgot the > #RmFiles steps, I may have found some omissions in past releases... > > The 5.2 => 5.3 upgrade is the last one that removed this directory: > /usr/lib/gcc-lib/*-unknown-openbsd5.x > > I have

Re: new httpd mime types problem

2014-11-04 Thread Chris Cappuccio
li...@ggp2.com [li...@ggp2.com] wrote: > > I've also run into 2 other issues when testing in case anyone is > interested. This may be duplicates, but I can't seem to find any commit > messages regarding these in the CVS logs or chatter on misc@ > > > 1) httpd seems to be broken on files with sp

Re: Mac Mini

2014-11-20 Thread Chris Cappuccio
Austin Gilbert [austin.gilb...@gmail.com] wrote: > > On Nov 20, 2014, at 1:27 PM, Otto Moerbeek wrote: > > > >> On Thu, Nov 20, 2014 at 12:37:58PM -0600, Austin Gilbert wrote: > >> > >> I have an amd64 based Mac Mini which I would like to run OpenBSD on. > >> > >> With OpenBSD 5.6, the USB keyboar

Re: Mac Mini

2014-11-20 Thread Chris Cappuccio
Austin Gilbert [austin.gilb...@gmail.com] wrote: > > I saw the news about the USB 3 driver in current and was very excited about > that. The first thing I did was grab a snapshot. Sadly, the snapshot BSD.rd > behaves the same as the stable 5.6 release (as of the 16th). xhci is commented out on

Re: Packet Filter router i368 vs 64bit

2014-12-02 Thread Chris Cappuccio
Stan Gammons [sg063...@gmail.com] wrote: > > The APU1C works fine for a home network. The only 2 things I dislike are > the CPU temperature and the link LED's are off when the Ethernet ports are > linked at 1 gig. I've complained about the link LED issue on the PC Engines > support forum, but I g

Re: Packet Filter router i368 vs 64bit

2014-12-02 Thread Chris Cappuccio
li...@ggp2.com [li...@ggp2.com] wrote: > On Tue, Dec 02, 2014 at 07:51:19AM -0800, Chris Cappuccio wrote: > > Stan Gammons [sg063...@gmail.com] wrote: > > Call me crazy, but when OpenBSD takes over control of the Realtek chips, > > isn't it OpenBSD's responsibilit

Re: OpenBSD embedded? (was: OpenBSD 5.6-current on ASUS Chromebox)

2014-12-03 Thread Chris Cappuccio
Alan McKay [alan.mc...@gmail.com] wrote: > This is very interesting - I've been looking at various small boxes > like this to use as a home firewall. > The only problem is that not many of them have 2 NICs, and the ones > that do are very expensive (higher end Zotac) > > Does anyone know of a simi

Re: OpenBSD embedded?

2014-12-04 Thread Chris Cappuccio
Russell Sutherland [russell.sutherl...@utoronto.ca] wrote: > Does anyone know if the Dual-Core 500 MHz, MIPS64 board that is used in > the Ubiquiti EdgeRouter family, > has been used as an OpenBSD platform? I know there is development on the > octeon http://www.openbsd.org/octeon.html > platforms,

Re: OpenBSD embedded?

2014-12-04 Thread Chris Cappuccio
Russell Sutherland [russell.sutherl...@utoronto.ca] wrote: > Thanks? And may I assume with net booting saving local customizations > (firewall rules, network configuration, etc.) > is a bit awkward, as there is no local storage? > Your NFS server presents a unique /etc for the machine. I'd rather

Re: iscsid(8) and FreeNAS 8.2.0

2012-10-11 Thread Chris Cappuccio
Do you have a /dev/vscsi0 ? If not, cd /dev and ./MAKEDEV vscsi Insan Praja SW [insan.pr...@gmail.com] wrote: > Hi Misc@, > > Has anyone tried using OBSD iscsid(8) initiator and FreeNAS target? > I was trying to do it on amd64 -current but so far unsuccessful. > > Best Regards, > > > Insan >

Re: 5.2 SSD machine won't boot

2012-11-09 Thread Chris Cappuccio
Devin Ceartas [de...@nacredata.com] wrote: > > If I wanted to hack on a solution to this AHCI (softraid related?) issue > with SSDs, where would I start? > vi /usr/src/sys/dev/pci/ahci.c

Re: softraid to encrypt _AND_ raid?

2012-11-29 Thread Chris Cappuccio
Have you tried stacking a crypto volume on top of the softraid raid1 volume ? zgeggy2k [zgegg...@yahoo.com] wrote: > Hi, > > I'm using 5.2 and trying to use 2 mirrored disks as RAID1, but also encrypt > them. > I can use softraid to either raid1 _OR_ encrypt, but not both. > > I've RTFM'd and UT

Re: bsd cloud

2012-11-30 Thread Chris Cappuccio
Jiri B [ji...@devio.us] wrote: > On Tue, Nov 27, 2012 at 04:13:47PM -0200, Friedrich Locke wrote: > > > > So what would a BSD cloud be different in the context of cloud (not openbsd > > features) ? > > You can of course try to "port" KVM to OpenBSD, hehe. OpenBSD supports Sun's LDom hypervisor h

Re: BSD licensed gnupg replacement question

2012-12-07 Thread Chris Cappuccio
Maximo Pech [mak...@gmail.com] wrote: > I said I can't code that. If you already knew the answer was "write it", then you asked the wrong question. > I know that gnupg is in the ports tree, but it > just seems strange to me that it isn't on the base system, because for me > it sounds logical that

Re: BSD licensed gnupg replacement question

2012-12-09 Thread Chris Cappuccio
Nico Kadel-Garcia [nka...@gmail.com] wrote: > > SSH is the gold standard: OpenSSH is the popular and effective > freeware version, which did solve a number of issues. The early > history of SSH is interesting, and covered reasonably well at > http://docstore.mik.ua/orelly/networking_2ndEd/ssh/ch01

Re: BSD licensed gnupg replacement question

2012-12-11 Thread Chris Cappuccio
Maximo Pech [mak...@gmail.com] wrote: > > I already knew an answer (not the only one) could be "write it". > What others did you have in mind? "Thank you for bringing the most important software project of modern time to our attention. We will now begin writing it for you." ??? > > > > > > Do

Re: 5.2 : ssd support!

2012-12-17 Thread Chris Cappuccio
Mayuresh Kathe [mayur...@wolfman.devio.us] wrote: > > hence my question, "how good or bad is the ssd support under 5.2?". > most of my usage would be software development using either lisp, c > and c++ (at the console, no x). > There is some TRIM command support, not sure how extensive it is, bu

Re: integrated graphics

2013-01-11 Thread Chris Cappuccio
Zoran Kolic [zko...@sbb.rs] wrote: > > Yeah, I like amd better. On desktop it is 8120 bulldozer. And I > like it. > > I might bother gentle readers, but have no clue what to buy and > stay alive. I need exact processor name. So, if someone has amd > or intel, integrated, wirking on amd64 5.2, ple

Re: vether0

2013-01-24 Thread Chris Cappuccio
Steven Kovalsky [kovalsky1...@gmail.com] wrote: > The need for additional nic (for nat) i created vether0 > vether0 has 10.254.254.17/29 address > > On the other host set ip addres 10.254.254.18/29 > >From this host i can't ping 10.254.254.17 > and from 10.254.254.17->10.254.254.18 > > net.inet.i

Re: OpenBSD VAX on SIMH, sloooow networking!

2013-02-05 Thread Chris Cappuccio
Francois Pussault [fpussa...@contactoffice.fr] wrote: > It may be a NIC speed issue... no ? > VAX have often AUI nic about 10Mbits/s Half so if you have hard 100Mbits/s > Full > it can cause a duplex conflict... > then a very low speed network... > > not sure this is the problem but check >

Re: pppx interface group

2013-02-08 Thread Chris Cappuccio
Robert Blacquiere [open...@blacquiere.nl] wrote: > Hi, > > I've seen on the tech mailing list a patch for implementing a pppx > interface group (just one line code addition). Is this going to be in > 5.3 release? It would make PF filtering much nicer with many dynamic > ipsec/l2tp connections. >

Re: bge(4) Broadcom 5720/Dell R320 support backout

2013-02-08 Thread Chris Cappuccio
Rodolfo Gouveia [rgouv...@cosmico.net] wrote: > Hi all, > It seems that the support for 5720 was backout because > it broke another chipset. [1] > The thing is that the newer Dell R320 has this chipset and > I'm currently evaluating the its support. > So I would like to know if the support would i

Re: Constant attacks and ISP's are ignoring them

2013-02-18 Thread Chris Cappuccio
Kevin Chadwick [ma1l1i...@yahoo.co.uk] wrote: > > > Every firewall/router product that I have purchased has been > > > compromised so far. > > > > I don't believe this at all. Not one bit. > > I could believe it but that doesn't mean that I do. 90% of the routers > on my street will be insecur

Re: Constant attacks and ISP's are ignoring them

2013-02-19 Thread Chris Cappuccio
Richard Thornton [rich...@thornton.net] wrote: > Linksys routers are defaulted to port forwarding NOT enabled, so check facts > before ranting. > Your routers are impervious to penetration.

Re: BSD-friedly companies producing embedded x86 computers

2013-02-26 Thread Chris Cappuccio
There's always companies like Portwell, Lanner, and even Supermicro has some nice mini boxes with motherboard and soldered CPU for $100-$150 USD. Voland Levit [vol...@iamcrab.ru] wrote: > I know about Soekris and Alix. Please tell me if there is anyone else worthy > of attention. > > Thanks!

Re: Changing Architecture from amd64 to i386

2013-02-27 Thread Chris Cappuccio
Jes [jjje...@gmail.com] wrote: > In my experience it's perfectly possible to move from one > architecture to another one. > > I do the following: > > - backup /etc (only for security) > - remove all installed packages (I save a list of installed packages > to figure out what to install again afte

Re: OpenBGP Issues. :-(

2013-02-28 Thread Chris Cappuccio
Alex Mathiasen [a...@mira.dk] wrote: > > It appeared the BGPD kept receiving the routing tables, and then start all > over. > You don't mention which version of openbsd you are using. There are some problems like this in older versions of bgpd which are now fixed. You may want to try a new sna

Re: i965 DRI crashes with 5.2

2013-03-21 Thread Chris Cappuccio
Alan Corey [alan01...@gmail.com] wrote: > > Not much to go on probably, but anyone else seeing this? > OpenBSD 5.3-current (post 5.3 release) now supports the latest Intel XF86 driver with KMS. It's worth trying before you do look at much else. See the snapshots/i386 or snapshots/amd64 directory

Re: CVS: cvs.openbsd.org: src - kms

2013-03-21 Thread Chris Cappuccio
Kevin Chadwick [ma1l1i...@yahoo.co.uk] wrote: > Made my day. > > So does this mean machdep can be turned off for some hardware and is > the best way to find out, simply to try? > If inteldrm attaches, the aperture now appears to work at 1 (instead of 2) but not yet 0.

Re: ospfd OOM crash

2013-03-21 Thread Chris Cappuccio
MJ [m...@sci.fi] wrote: > Hi, > > On two occasions (had to test it to see if it was repeatable), ospfd has > crashed on my 5.2 release i386 machine while I was running a ruby script > that consumed too much memory (which also crashed). No other daemons on the > machine crashed except ospfd. Ne

Re: Openbsd openrisc opencores arm

2013-03-25 Thread Chris Cappuccio
Nick Holland [n...@holland-consulting.net] wrote: > > The problem with ARM is there is no ARM reference platform. > Every machine is significantly different than every other machine, > technical details of how it is built are not published (why should they > be? They aren't being sold as general p

Re: Perl fails to build in -current

2013-03-29 Thread Chris Cappuccio
make -j breaks in the perl build at the moment Ryan Kavanagh [r...@debian.org] wrote: > I downloaded a snapshot on the 27th or so, and am trying to update by > compiling > from source, but get the FTBFS below. This may or may not have to do with the > perl update (my snapshot came with perl 5.16.

Re: faxing

2013-04-24 Thread Chris Cappuccio
Peter Fraser [p...@thinkage.ca] wrote: > I believe I am trying to interface into a T38 gateway which is supported by > my SIP supplier. > I expect but don't know, that if I don't uses T38 my Sip supplier will send > the call on a SIP > call to any other client which will not recognize it as FAX.

Re: faxing

2013-04-24 Thread Chris Cappuccio
Andres Genovez [andresgeno...@gmail.com] wrote: > I think this is a clean solution, putting an ATA Works fine even for POS > Machines (Credit Cards) that require a land line. > Only when you have a damn good connection :)

Re: Sturdy and secure mail server

2013-05-02 Thread Chris Cappuccio
Ireneusz Szcze??niak [irek.szczesn...@gmail.com] wrote: > Hi, > > I'm running OpenBSD 5.2 on i386. I want to run there a personal mail > server (further referred to as "my server") with some specific > requirements. I want my server to be secure and stable. > > These are my critical requirement

Re: DHCLIENT v5.3

2013-05-08 Thread Chris Cappuccio
For now you'll need to call your dns script from dhclient. A system() will do the trick. Scott [8f27e...@gmail.com] wrote: > Hi everyone, > > Migrated to v5.3. I had a mod to the former dhclient-script that would fire > a "wget" to my dns provider, which in turn, would act as a dynamic update >

local daemons udp bind to multiple IPs with same netmask?

2015-05-05 Thread Chris Cappuccio
For various reasons that include Asterisk restrictions and Metaswitch restrictions, I've had to setup multiple IP addresses to talk to different partitions of a Metaswitch with Asterisk... That means, for all practical purposes, my config looks like: /etc/hostname.em0: inet 10.10.10.2 255.255.255

Re: "when SSDs are not so solid" or why no TRIM support can be a good thing :)

2015-06-19 Thread Chris Cappuccio
Mikael [mikael.tr...@gmail.com] wrote: > 2015-06-18 2:07 GMT+05:30 Gareth Nelson : > > > On point 3, hybrid SSD drives usually just present a standard IDE > > interface - just use a SATA controller and you don't need to worry about it > > > > No I meant, you plug in a 2TB SSD and a 2TB magnet HD,

Re: "when SSDs are not so solid" or why no TRIM support can be a good thing :)

2015-06-19 Thread Chris Cappuccio
Karel Gardas [gard...@gmail.com] wrote: > Honestly with ~20% provision, once your SSD starts to shrink down, > it's already good enough to be put into dustbin. > The recent SSD endurance reviews on the review sites seem to show that it takes a long, long, long time before the modern SSD indicates

Re: Illumos adopting arc4random

2015-06-23 Thread Chris Cappuccio
It's like, adopt, or die! Karel Gardas [gard...@gmail.com] wrote: > Hello, > > haven't seen this in OpenBSD related press nor mailing list, so I've > thought it may be good to let you know that Illumos which is > former-OpenSolaris fork has adopted arc4random from OpenBSD in a > commit done on Ap

Re: CPU temp high

2015-07-04 Thread Chris Cappuccio
Predrag Punosevac [punoseva...@gmail.com] wrote: > I noticed that when I compile something the CPU temperature on my > desktop (dmesg is incouded) jumbs from about 57C to anywhere between > 65C-84C. Did I misconfigure something or I should get another CPU > cooler? > You might try an OpenBSD 5.8-

Re: tor not working in 5.8 #1024

2015-07-15 Thread Chris Cappuccio
Michael McConville [mmcco...@sccs.swarthmore.edu] wrote: > > Someone correct me if I'm wrong, but it seems that the days of i386 > images being reasonable to run on amd64 hardware are coming to an end. > i386 support appears to be a fading priority for most projects and the > subset of amd64 featu

Re: Firewall question: is using a NIC with multiple jacks considered insecure?

2015-07-27 Thread Chris Cappuccio
Joseph Crivello [josephcrive...@gmail.com] wrote: > If someone successfully attacks the firmware on any of your network cards, > you are screwed no matter what. Any modern network card is going to have the > ability to issue DMAs and can easily root your entire system. If you are running OpenBSD

Re: new (nasty) spam pattern

2015-07-29 Thread Chris Cappuccio
Quartz [qua...@sneakertech.com] wrote: > >Any cluebats? > > Not sure if it will help your specific situation, but you could look into > server side "grey listing". This will cause your mail server to temporarily > reject mail from them, forcing them to try again a couple hours later. > Fly-by-nigh

Re: new (nasty) spam pattern

2015-07-30 Thread Chris Cappuccio
li...@wrant.com [li...@wrant.com] wrote: > > The spammers that he's talking about already handle greylisting, and > > they have SPF records, so you need to involve some kind of collaborative > > reporting system to block them quickly before they change colors again. > > closed or open community?

Re: ceill(0.9) returns 0 instead of 1 ?

2015-08-06 Thread Chris Cappuccio
Graham Stephens [gra...@thestephensdomain.com] wrote: > Your code runs fine under the gcc version in OpenBSD 5.3. > So you get 1 and not 0 from the top two lines of ceill output? Nothing has changed in /usr/src/lib/libm/src/ld80/s_ceill.c since 5.3 and the supporting headers have not changed in

Re: 64 Queue Sizes in OpenBSD 5.8

2015-08-18 Thread Chris Cappuccio
Andy Lemin [a...@brandwatch.com] wrote: > > Simply we need to impose shaping to ensure the CDR is not breached. We > really need to upgrade the CDR to 6Gbps, but the penalties for taking our > 95% percentile above the CDR are very expensive. > If you are buying hardware right now, you might try

Re: SuperMicro thin mini itx?

2015-08-19 Thread Chris Cappuccio
Try the X10SBA Quartz [qua...@sneakertech.com] wrote: > We need to build some OpenBSD-based network devices that we'd strongly > prefer to be based on SuperMicro hardware. Does anyone know offhand if they > offer any products that conform to the Thin-Mini-ITX standard? Their website > is unhelpful

Re: Ubiquiti EdgeRouter Lite

2015-08-20 Thread Chris Cappuccio
Stuart Henderson [s...@spacehopper.org] wrote: > On 2015-08-18, Ted Unangst wrote: > > I don't use IPsec, and I notice that Ubiquiti don't mention it as a selling > > point for the device. I would probably not use the edgerouter for anything > > too > > far outside what the adverising materials s

Re: SuperMicro thin mini itx?

2015-08-20 Thread Chris Cappuccio
Quartz [qua...@sneakertech.com] wrote: > >Why would you contact their marketing department? That's silly. > > Well because I assume that marketing encompasses sales, and the sales > department kinda ought to know what products the company sells. > > > >Contact their support department. > >

Re: PC Engine APU1 - GPIO and LEDs

2015-08-24 Thread Chris Cappuccio
We have an implementation which needs to be cleaned up if you want... Erik Lax [e...@halon.se] wrote: > Hi, > > We're looking into getting GPIO and LEDs working on the "new" PC Engine > APU1. We found FreeBSD drivers[1] and Linux drivers[2], documentation is > indicating it's driven by the AMD A5

Re: Thinkpad spyware

2015-08-31 Thread Chris Cappuccio
?? ?? [art.is...@yandex.ru] wrote: > On Thu, Aug 27, 2015 at 06:20:10AM +0300, li...@wrant.com wrote: > > > This is happening for a while now in industry, > > > > If you want to react to this, do something about it at the right place > > to complain, where your voice counts. >

Re: pf vs mp

2015-09-01 Thread Chris Cappuccio
Quartz [qua...@sneakertech.com] wrote: > Quick question: I need to make a decision between a faster single core and a > slower multicore. The faq currently states that pf gets no improvement from > mp. Is this still correct/current information? Presumably it would see no > benefit from hyperthreadi

Re: spamassasin large CPU usage on new snapshot and a huge bayes_toks file not reported in df

2015-09-04 Thread Chris Cappuccio
Adam Wolk [adam.w...@tintagel.pl] wrote: > Hi misc@ > > I upgraded my mail server to an amd64 snapshot from Sep 2nd and found > the server stuck delivering mail in the morning with spamassasin > churning at 90% CPU usage. > > Quick investigation lead me to a huge bayes_toks file of 65.3G in > /va

Re: Native EFI Bootloader Support

2015-09-04 Thread Chris Cappuccio
Gerald Hanuer [ghanuer497...@gmail.com] wrote: > Hello misc@, > > Native UEFI goes in tree. > http://marc.info/?l=openbsd-cvs&m=144115942223734&w=2 > . > Great work all. > > So what might the future hold for UEFI Secure Boot. > So, the

Re: spamassasin large CPU usage on new snapshot and a huge bayes_toks file not reported in df

2015-09-04 Thread Chris Cappuccio
Adam Wolk [adam.w...@tintagel.pl] wrote: > > > -rw--- 1 _spampd _spampd 9.8M Sep 3 22:52 bayes_seen > > > -rw--- 1 _spampd _spampd 65.3G Sep 3 22:55 bayes_toks > > > > > > > What are your memory limits for the user/daemon class that runs > > spamassassin? > > Touche, not set. Th

Re: Native EFI Bootloader Support

2015-09-04 Thread Chris Cappuccio
Romain FABBRI [romain.fab...@alienconsulting.net] wrote: > Could help some people like me who have an asus t100 which only accept UEFI > boot. (scarry) > Except, your T100 can also have secure boot disabled. OpenBSD UEFI support is coming together right now, just for your T100.

Re: spamassasin large CPU usage on new snapshot and a huge bayes_toks file not reported in df

2015-09-06 Thread Chris Cappuccio
Adam Wolk [adam.w...@tintagel.pl] wrote: > On Fri, 4 Sep 2015 11:37:09 -0700 > Chris Cappuccio wrote: > > > Adam Wolk [adam.w...@tintagel.pl] wrote: > > > > > -rw--- 1 _spampd _spampd 9.8M Sep 3 22:52 bayes_seen > > > > > -rw--- 1 _s

Re: Running roundcube over httpd

2015-09-09 Thread Chris Cappuccio
Alexander Hall [alexan...@beard.se] wrote: > Hi! > > Does anyone have an example for a functional configuration for > roundcube[mail] over the new httpd? > > pkg-readmes/roundcubemail* seems to be for running apache. > It "just works" when you use a standard php_fpm config.

Re: Native EFI Bootloader Support

2015-09-10 Thread Chris Cappuccio
Toby Slight [tobysli...@gmail.com] wrote: > On 10 September 2015 at 13:09, Toby Slight wrote: > > > Thought I'd try giving this a whirl on my T430 (which thankfully support > > CSM legacy mode). The miniroot58.fs snapshot from today (10 September) gets > > to the bootloader when UEFI is enabled a

Re: Native EFI Bootloader Support

2015-09-10 Thread Chris Cappuccio
Chris Cappuccio [ch...@nmedia.net] wrote: > b. Format the UEFI partition on softraid disks: >newfs_msdos /dev/sd0i >newfs_msdos /dev/sd1i > c. Get BOOTX64.EFI and BOOTIA32.EFI: >ftp ftp.openbsd.org >cd pub/OpenBSD/snapshots/amd64/ >

Re: mysterious ulimit values

2015-09-11 Thread Chris Cappuccio
luke...@onemodel.org [luke...@onemodel.org] wrote: > default:\ > :path=/usr/bin /bin /usr/sbin /sbin /usr/X11R6/bin /usr/local/bin > /usr/l ocal/sbin:\ > :umask=022:\ > #(next2 lines changed for chrome, IIRC): > #:datasize-max=512M:\ > #:datasize-

Re: requesting help working around boot failures with supermicro atom board

2015-09-14 Thread Chris Cappuccio
Kurt Mosiejczuk [kurt-open...@se.rit.edu] wrote: > > Hearing that Linux doesn't trip it, I'm wondering if it's an ACPI difference > between OpenBSD and Linux. Perhaps OpenBSD runs the CPU hotter before > turning it back over to the BIOS on reboot? > OpenBSD 5.8-current enters deeper C states th

Re: Native EFI Bootloader Support

2015-09-15 Thread Chris Cappuccio
Toby Slight [tobysli...@gmail.com] wrote: > > Finally, is this kind of testing and information at all useful to the devs, > or am I just creating unnecessary noise on the list, and should I just wait > until it's a little further down the line? I've got a fair bit of free time > in the next week o

Re: Native EFI Bootloader Support

2015-09-15 Thread Chris Cappuccio
Toby Slight [tobysli...@gmail.com] wrote: > On 15 September 2015 at 18:09, Chris Cappuccio wrote: > > > > > Sounds like a bug in the brand new EFI boot blocks which affects your uefi > > firmware and not some others. It seems all of your tests are pointing in > > th

Re: Sep 13 snapshot doesn't cleanly unmount / on reboot?

2015-09-16 Thread Chris Cappuccio
Darren Tucker [dtuc...@zip.com.au] wrote: > Hi all. > > I've got a pcengines APU running a recent snap (upgraded via bsd.rd), > and it doesn't seem to cleanly unmount the root filesystem on reboot, > always claiming "/mnt was not properly unmounted". Any ideas ideas why? > Sometime before 5.8 r

Re: Sep 13 snapshot doesn't cleanly unmount / on reboot?

2015-09-16 Thread Chris Cappuccio
Darren Tucker [dtuc...@zip.com.au] wrote: > On Thu, Sep 17, 2015 at 1:48 AM, Chris Cappuccio wrote: > > > > Sometime before 5.8 release, a 4 second pause was removed from the shutdown > > path. This must have been giving your USB disk time to finish before the > > reset

Re: Cheap hardware for router, perhaps fileserver?

2015-09-21 Thread Chris Cappuccio
Predrag Punosevac [punoseva...@gmail.com] wrote: > > 1. I don't like diversity at home so OpenBSD would be the first choice. > 4TB HDD are cheap enough and I could mirror (RAID 1) all my personal > data on two of them. There are two options for mirroring. Either use > softraid or get a cheap used

Re: SR RAID5 rebuild/stability issue.

2015-09-21 Thread Chris Cappuccio
Karel Gardas [gard...@gmail.com] wrote: > > Let me ask, should SR RAID5 survive such testing or is for example > rebuilding with off-lined drive considered unsupported feature? > It's new, considered experimental and not well tested. In my initial testing with RAID5, it was so slow as to be unu

Re: update/upgrade

2015-09-21 Thread Chris Cappuccio
Quartz [qua...@sneakertech.com] wrote: > >If availability is critical you might consider redundancy with CARP/pfsync. > > It looks like the M:tier thing is pretty close, my only concern is how long > it'll last before the maintainers lose interest and the project gets > abandoned. Stuart already

Re: Just curious, what are approx plans for kernel-multicore-ness next 1-2 years? (net/file IO) How much is it a relevant prio?

2016-02-24 Thread Chris Cappuccio
Tinker [ti...@openmailbox.org] wrote: > First, Thank you for this fantastically awesome OS. > > > Just curious, what are approx plans for kernel-multicore-ness next 1-2 > years? (Network IO, file/disk IO) > Network SMP (and other subsystems required to support it) is the heaviest area right now

Re: IPv6

2016-02-24 Thread Chris Cappuccio
Paul Ammann [p...@fastmail.us] wrote: > Hi > > I've been reading about IPv6 and the KAME project. > > I read that OpenBSD integrated just IPv6 code rather than both (having > developed their own IPSec stack). > > The information that I'm reading is from 2004. Does anyone who if this > is still

Re: What's good safe PPC/MIPS/SPARC networking hardware with open firmware that works well with OpenBSD? Many ethernet plugs and 1U rack mount = bonus.

2016-03-03 Thread Chris Cappuccio
Tinker [ti...@openmailbox.org] wrote: > On 2016-02-28 05:26, Karel Gardas wrote: > >Open firmware? What do you mean by that precisely? > > Or just as little firmware as possible, just to minimize that as attack > vector. > > >Anyway, while asking such question it would also help if you tell > >so

Re: OpenBSD on AMD Embedded G-Series T40E APU?

2016-03-07 Thread Chris Cappuccio
Alan McKay [alan.mc...@gmail.com] wrote: > Next question ... do they make them with 4 or more NIC ports? > > I only see them with 3 ports on that site. Nope. You might want a Supermicro X11SBA-LN4F or maybe Netgate's RCC-VE 2440 if you need 4 ports.

Re: Octeon - Rhino Labs SDNA

2016-03-28 Thread Chris Cappuccio
Chris Jones [cjo...@autonomic.ca] wrote: > Good evening, > > Just wondering if any of the OpenBSD devs on the list could provide any > feedback about these network appliances based on the Octeon III 7xxx > processors. Are these devices something that may be supported with the > current Octeon port

Re: Quick APU2 review

2016-04-19 Thread Chris Cappuccio
sven falempin [sven.falem...@gmail.com] wrote: > > This : https://github.com/jasperla/openbsd-wip ?? > Like : echo /bin/ksh > /etc/rc.securelevel ?? > echo sysctl kern.securelevel=-1 >/etc/rc.securelevel > > No patch here : wont work ? > Get the securelevel right first, then worry about the pa

Re: Quick APU2 review

2016-04-21 Thread Chris Cappuccio
Stuart Henderson [s...@spacehopper.org] wrote: > >>> Heat: The APUs have an innovative design where the CPU heat sink > >>> is coupled to the case. Since this is typically assembled by the > >>> customer, a lot of attention is drawn to it and people obsess over > >>> the CPU temperature. It's a n

Re: vr(4) watchdog timeout

2016-05-16 Thread Chris Cappuccio
emigrant [emig...@gmail.com] wrote: > TEST1: > > pfsync(vr2) moved to vr0, 15 min later: > > May 9 11:58:13 backup /bsd: vr0: watchdog timeout > So, pfsync is triggering a bug in the vr driver? Can you find another way to trigger it?

Re:

2016-05-16 Thread Chris Cappuccio
Riccardo Mottola [riccardo.mott...@libero.it] wrote: > Don't feed the troll. > > 1 9 wrote: > >What editor? vim or emacs? what is the reason? > > start by putting a subject in your mails, having a proper name, greeting > and sign-off. > "Don't feed the trolls" vi

Re:

2016-05-16 Thread Chris Cappuccio
Kamil Cholewi??ski [harry6...@gmail.com] wrote: > sed -i Kamil shows us who the REAL troll is!!! I'm proficient in 'ed' and also the MS-DOS variation 'edlin'. Why can't everyone write their kernel in ed?

Re: Is loss of read-only /usr permanent?

2016-05-19 Thread Chris Cappuccio
Jasper Valentijn [jasper.valent...@gmail.com] wrote: > Maybe relevant... > > diskless(8), Example 10 states: > > If the */usr* partition is to be shared between machines, as in the example > */etc/exports* above, a more suitable entry might be: > > myserver:/usr /usr nfs ro 0 0 That is a perfec

<    1   2   3   4   5   6   7   8   >