Re: Dual booting OpenBSD and Windows 8.1

2013-11-14 Thread Brian McCafferty
On 2013-11-15 00:01, za...@gmx.com wrote: Hi I was thinking of dual booting OpenBSd and Windows 8.1. Has anyone managed to do that? I suppose I would have to install Windows first, and then OpenBSD. Does the OpenBSD installation include a boot manager such as GRUB? I have experience setting up d

Re: NSA spy catalog

2014-01-01 Thread Brian McCafferty
On 01/01/14 11:47, Vijay Sankar wrote: Quoting Christian Weisgerber : mufurcz wrote: http://www.itnews.com.au/News/368564,server-vendors-named-in-nsa-spying-toolkit.aspx?eid=1&edate=20131231&utm_source=20131231_AM&utm_medium=newsletter&utm_campaign=daily_newsletter That's just a summary a

Intermittent stops in network traffic with urtw interface

2014-02-05 Thread Brian Curran
now if any additional information would be of help. Thanks! -Brian

Re: Intermittent stops in network traffic with urtw interface

2014-02-05 Thread Brian Curran
On Wed, Feb 05, 2014 at 10:51:19PM +, Alexey Suslikov wrote: > Brian Curran brianpcurran.com> writes: > > > > > Hello, > > > > I have an Alfa AWUS036H USB wi-fi adapter that I am using on OpenBSD > > 5.4 amd64. Problem is, sometimes as often as every

Re: Intermittent stops in network traffic with urtw interface

2014-02-06 Thread Brian Curran
On Thu, Feb 06, 2014 at 09:29:37AM -0500, Brad Smith wrote: > On 06/02/14 9:25 AM, Alexey Suslikov wrote: > >Brian Curran brianpcurran.com> writes: > > > >>>when it stops passing traffic, does issuing "ifconfig urtw0 scan" help? > >>> > >

Re: Intermittent stops in network traffic with urtw interface

2014-02-06 Thread Brian Curran
On Thu, Feb 06, 2014 at 01:37:46PM -0800, Philip Guenther wrote: > On Thu, Feb 6, 2014 at 1:28 PM, Brian Curran wrote: > > Also perhaps of note is that 'arp -a' hangs indefinitely while the > > interface isn't receiving traffic. > > arp does IP->host

Re: lemote yeelong compile time

2014-05-15 Thread Brian Callahan
On 05/15/14 07:32, dam...@thiriet.web4me.fr wrote: Hello, As advised in this thread: http://marc.info/?l=openbsd-arm&m=139894585630709&w=2 I am looking for a netbook that would suit my needs. I am currently hesitating between buying an Acer aspire One 725 and a Lemote Yeelong. Yeelong is more

Re: nmea/udcf recommendation

2021-08-02 Thread Brian Empson
Sounds like a good  driver to learn from for driver dev stuff. On 8/2/2021 6:11 PM, Christian Weisgerber wrote: > Jan Stary: > >> playing with ntpd a bit, I am looking for a working >> nmea or udcf sensor. Can people please recommend >> an easy to use device known to work? > The Gude mouseCLOCKs w

Re: Azure VMs

2021-08-08 Thread Brian Brombacher
> On Aug 8, 2021, at 9:15 PM, Steven Shockley > wrote: > > Does anyone know if OpenBSD still works in Azure? I found the docs on > uploading a VM, but they cover OpenBSD 6.1. I also found > https://github.com/Azure/WALinuxAgent/issues/1360, where someone was trying > to use 6.3 and unab

Re: CARP Cold Spare

2021-09-24 Thread Brian Brombacher
> On Sep 24, 2021, at 6:16 PM, Don Tek wrote: > > Would there be any ‘problem’ with configuring a 2-machine CARP setup and > then just keeping one machine powered-off until needed? > > I realize this defeats live failover, but this is not a requirement for my > customer. > > I just want t

Re: Ifconfig error - SIOCSETPFLOW

2021-10-15 Thread Brian Brombacher
> On Oct 15, 2021, at 7:09 PM, Antonino Sidoti wrote: > > HI, > > I am getting this error since upgrading to v7.0; > > pf enabled > net.inet.ip.forwarding: 0 -> 1 > net.inet6.ip6.forwarding: 0 -> 1 > starting network > > ifconfig: SIOCSETPFLOW: Can't assign requested address > ifconfig: SI

Re: Ifconfig error - SIOCSETPFLOW

2021-10-16 Thread Brian Brombacher
sing “dhcp” in there. > >>> On 16 Oct 2021, at 10:39 am, Brian Brombacher wrote: >>> >>> >>> >>>> On Oct 15, 2021, at 7:09 PM, Antonino Sidoti wrote: >>> >>> HI, >>> >>> I am getting this error since upgra

Re: Using OpenBSD as an L2TP client with A&A ISP

2021-10-26 Thread Brian Brombacher
> On Oct 26, 2021, at 9:31 AM, Matt Dainty wrote: > > I'm currently using OpenBSD with an Andrews & Arnold vDSL connection so I > have > a pppoe(4) interface, etc. and this works for IPv4 & IPv6. > > The problem is because of the rubbish rural Openreach infrastructure here in > the UK I onl

Re: send help ( chroot php fpm refuse to exec/popen/procopen... on 7.0 )

2021-10-26 Thread Brian Brombacher
> On Oct 26, 2021, at 9:22 AM, Sven F. wrote: > > }{ello, > > I updated a device and use php fpm on openbsd 7.0 > everything works fine after putting a resolv file in the chroot > but i can't send email from the chroot > > I hope I didn't see something obvious. > > to troubleshoot i drop t

Re: rc Re: distributive glob Re: type checking/signalling shell and utilities?

2021-11-19 Thread Brian Brombacher
You have a fundamental misunderstanding of what a shell is, how a program executes, and how arguments to that program are passed. You pass arguments to a program through a SINGLE ARRAY. This is true in every operating system. Stop advocating for things you don’t understand. > On Nov 19, 2021,

Re: Is it true that `dd` is almost not needed?

2021-12-11 Thread Brian Brombacher
> On Dec 11, 2021, at 11:12 AM, u...@mailo.com wrote: > > The article: > https://eklitzke.org/the-cult-of-dd > > The content of the article: > > The Cult of DD > Mar 17, 2017 > You'll often see instructions for creating and using disk images on Unix > systems making use of the dd command. Thi

Re: Is it true that `dd` is almost not needed?

2021-12-11 Thread Brian Brombacher
> On Dec 11, 2021, at 11:22 AM, Brian Brombacher wrote: > >  >> On Dec 11, 2021, at 11:12 AM, u...@mailo.com wrote: >> >> The article: >> https://eklitzke.org/the-cult-of-dd >> >> The content of the article: >> >> The Cult o

Re: I did not realize I was an OpenBSD user!

2021-12-27 Thread Brian Brombacher
Hi David, Thank you for the write-up, this was an awesome read. I was on the edge of a cliff waiting to hear what device or app you replaced next. Bravo, excellent job done! -Brian > On Dec 27, 2021, at 1:03 AM, David Rinehart wrote: > > A long read, but may be interesting.

Re: libressl vs openssl

2022-01-28 Thread Brian Brombacher
> On Jan 28, 2022, at 9:46 AM, dansk puffer wrote: > > Are there any major security differences between libressl and openssl > nowadays? From what I read the situation for openssl improved and some Linux > distros switched back to openssl again with mostly? OpenBSD remaining to use > libre

Re: libressl vs openssl

2022-01-28 Thread Brian Brombacher
> On Jan 28, 2022, at 11:53 AM, Laura Smith > wrote: > > ‐‐‐ Original Message ‐‐‐ > >> On Friday, January 28th, 2022 at 14:43, dansk puffer >> wrote: >> >> Are there any major security differences between libressl and openssl >> nowadays? From what I read the situation for opens

Re: httpd.conf: 2 interfaces, 2 listen, IPv6, only one server works

2022-02-06 Thread Brian Brombacher
> On Feb 6, 2022, at 12:07 PM, Mike Fischer wrote: > > Hi Łukasz, > >>> Am 06.02.2022 um 12:08 schrieb Łukasz Moskała : >>> >>> W dniu 6.02.2022 o 05:28, Mike Fischer pisze: >>> OpenBSD 7.0 stable amf64 >>> My host has two ethernet interfaces, em0 and em1. >>> Note: The host is a VM with tw

Re: httpd.conf: 2 interfaces, 2 listen, IPv6, only one server works

2022-02-06 Thread Brian Brombacher
> On Feb 6, 2022, at 4:32 PM, Mike Fischer wrote: > >  >> Am 06.02.2022 um 21:13 schrieb Brian Brombacher : >> >>>> You can work around it by putting both interfaces in diffrent rdomains, >>>> then running two httpd instances, one in rdomai

Re: httpd.conf: 2 interfaces, 2 listen, IPv6, only one server works

2022-02-06 Thread Brian Brombacher
> On Feb 6, 2022, at 4:51 PM, Brian Brombacher wrote: > >  > >> On Feb 6, 2022, at 4:32 PM, Mike Fischer wrote: >> >>  >>>> Am 06.02.2022 um 21:13 schrieb Brian Brombacher : >>> >>>>> You can work around it by putting b

Re: disk i/o test

2022-03-06 Thread Brian Brombacher
> On Mar 6, 2022, at 7:41 AM, Mihai Popescu wrote: > > Since this thread is moving slowly in another direction, let me > reiterate my situation again: I am running a browser (mostly chromium) > and the computer slows down on downloads. Since I've checked the > downloads rates, I observed they

Re: disk i/o test

2022-03-07 Thread Brian Brombacher
. Not sure if that helps but I use that value on every install, including desktop and servers. I can’t remember if the default value has changed in the past 10 years but I always go with 90%. -Brian > On Mar 7, 2022, at 6:17 AM, Mihai Popescu wrote: > > On Mon, Mar 7, 2022 at 8:46

Re: disk i/o test

2022-03-07 Thread Brian Brombacher
Correction: kern.bufcachepercentage=90 > On Mar 7, 2022, at 12:07 PM, Brian Brombacher wrote: > > Hi Mihai, > > Not exactly related to disk speed, but have you cranked up the following > sysctl to see if it helps? > > sysctl kern.bufcachepercentage=9 >

Re: disk i/o test

2022-03-07 Thread Brian Brombacher
> On Mar 7, 2022, at 12:10 PM, Brian Brombacher wrote: > > Hi Mihai, > > Not exactly related to disk speed, but have you cranked up the following > sysctl to see if it helps? > > sysctl kern.bufcachepercentage=9 > > I put an entry in /etc/sysctl.conf for per

Browser access to file system on new install OpenBSD missing.

2022-07-10 Thread Brian Durant
I have a problem with both Firefox and Chromium being unable to access the file system using the "open" dialog. The dialog appears, but no files or directories appear regardless of path. Things function normally however, with both Midori and Thunderbird. I assume that Firefox and Chromium are e

Re: Browser access to file system on new install OpenBSD missing.

2022-07-11 Thread Brian Durant
On 7/11/22 14:40, Björn Gohla wrote: > > Brian Durant writes: > >> I have a problem with both Firefox and Chromium being unable to access >> the file system using the "open" dialog. The dialog appears, but no >> files or directories appea

Re: Browser access to file system on new install OpenBSD missing.

2022-07-11 Thread Brian Durant
On 7/11/22 15:25, Stuart Henderson wrote: > On 2022-07-11, Björn Gohla wrote: >> >> Brian Durant writes: >> >>> I have a problem with both Firefox and Chromium being unable to access >>> the file system using the "open" dialog. The dialo

Re: Browser access to file system on new install OpenBSD missing.

2022-07-11 Thread Brian Durant
On 7/11/22 17:53, Stuart Henderson wrote: > I guess your locate database was last generated when firefox was > installed but chromium was not > >> Wondering if something else is at play here... > grep unveil /usr/local/share/doc/pkg-readmes/* > > ls /etc/*/*unveil* $ grep unveil /usr/local/share

Re: Browser access to file system on new install OpenBSD missing.

2022-07-11 Thread Brian Durant
Actually, there is one major difference between the two systems that I had forgotten about. While both use the Calm window manager, the system that is experiencing problems with the browser file dialogs, uses PCManFM...

Re: Browser access to file system on new install OpenBSD missing.

2022-07-13 Thread Brian Durant
e you can hit save. Also as others have said, Midori and Thunderbird don't have this issue because neither of them use unveil. It would be really cool if one day at least Thunderbird did. Courtney On 7/10/22 23:46, Brian Durant wrote: I have a problem with both Firefox and Chromium

Re: Browser access to file system on new install OpenBSD missing.

2022-07-14 Thread Brian Durant
The browser issue has returned. An open dialog window to upload a file or to open a file cannot find the downloads directory and it is impossible to access by using "recents" or "computer" in the open dialog window. Not sure what is going on, but it sure is irritating.

Web MIDI, Firefox, OpenBSD.

2022-07-14 Thread Brian Durant
On a possibly related issue to my browser access to file system problem, has anyone been able to get Web MIDI working with Firefox on OpenBSD 7.1? Here I am referring to bandcamp.com and flowkey.com in particular. Neither site appears to be receiving any MIDI signal despite an Akai LPK25 (for t

Re: Browser access to file system on new install OpenBSD missing.

2022-07-14 Thread Brian Durant
On 7/14/22 12:09 PM, Zé Loff wrote: On Thu, Jul 14, 2022 at 09:44:20AM +0200, Brian Durant wrote: The browser issue has returned. An open dialog window to upload a file or to open a file cannot find the downloads directory and it is impossible to access by using "recents" or "c

Re: Web MIDI, Firefox, OpenBSD.

2022-07-15 Thread Brian Durant
On 7/15/22 12:54 PM, Alexandre Ratchov wrote: On Thu, Jul 14, 2022 at 10:05:43AM +0200, Brian Durant wrote: On a possibly related issue to my browser access to file system problem, has anyone been able to get Web MIDI working with Firefox on OpenBSD 7.1? Here I am referring to bandcamp.com and

Re: Web MIDI, Firefox, OpenBSD.

2022-07-15 Thread Brian Durant
On 7/15/22 2:53 PM, Alexandre Ratchov wrote: On Fri, Jul 15, 2022 at 02:28:37PM +0200, Brian Durant wrote: On 7/15/22 12:54 PM, Alexandre Ratchov wrote: On Thu, Jul 14, 2022 at 10:05:43AM +0200, Brian Durant wrote: On a possibly related issue to my browser access to file system problem

Behringer UMC404HD USB soundcard with OpenBSD 7.1.

2022-07-15 Thread Brian Durant
which work with a direct audio connection (midi jack cable)... Brian

Re: Behringer UMC404HD USB soundcard with OpenBSD 7.1.

2022-07-16 Thread Brian Durant
On 7/16/22 11:23 AM, Alexandre Ratchov wrote: On Sat, Jul 16, 2022 at 08:26:49AM +0200, Brian Durant wrote: I have thus far been using an audio direct out to my speakers, but would like to get my USB soundcard working in OpenBSD. Without the soundcard, (direct connection) everything works

Re: Behringer UMC404HD USB soundcard with OpenBSD 7.1.

2022-07-16 Thread Brian Durant
On 7/16/22 3:54 PM, Alexandre Ratchov wrote: On Sat, Jul 16, 2022 at 03:36:18PM +0200, Brian Durant wrote: # mixerctl -f /dev/audioctl1 mixerctl: /dev/audioctl1: Device not configured # dmesg forgot to mention: connect and power on the audio interface first ;-) It was. This time I waited

Re: Behringer UMC404HD USB soundcard with OpenBSD 7.1.

2022-07-16 Thread Brian Durant
On Sat, 16 Jul 2022 11:23:16 +0200 Alexandre Ratchov wrote: > On Sat, Jul 16, 2022 at 08:26:49AM +0200, Brian Durant wrote: > > I have thus far been using an audio direct out to my speakers, but would > > like to get my USB soundcard working in OpenBSD. Without the soundca

Re: Behringer UMC404HD USB soundcard with OpenBSD 7.1.

2022-07-16 Thread Brian Durant
On 7/16/22 6:26 PM, Alexandre Ratchov wrote: On Sat, Jul 16, 2022 at 05:37:35PM +0200, Brian Durant wrote: On 7/16/22 3:54 PM, Alexandre Ratchov wrote: On Sat, Jul 16, 2022 at 03:36:18PM +0200, Brian Durant wrote: # mixerctl -f /dev/audioctl1 mixerctl: /dev/audioctl1: Device not configured

Multiple OpenBSD mirror issues for i386.

2022-07-17 Thread Brian Durant
that I haven't just pressed the wrong link. I have gone into the mirrors manually under the correct architecture directory and downloaded the files... Brian

Re: Desktop performance

2024-05-04 Thread Brian Conway
changing settings from to a web site. If you describe the issue you're encountering, you're more likely to receive guidance on whether any knobs are relevant to it. Brian

Re: Correct fdisk info for ext2fs?

2024-05-30 Thread Brian Conway
this. It looks like you have formatted an entire drive without partitioning it first. This isn't wrong *per se*, in the same way you might format certain types of external media without partitioning them, but it's not expected and could become a footgun if you go to perform an operation on the drive and forget that it isn't a filesystem within a partition. As you've noted, it does operate correctly. Brian Conway Owner RCE Software, LLC

Re: [Solved] Edit: Installation amd64 7.5: How to access the distribution sets on the USB stick?

2024-06-08 Thread Brian Conway
the root filesystem on the same stick further along in the OpenBSD boot process. Using USB 2 was a viable workaround. I believe that particular case has since been resolved (BIOS or OS or both, I forget which), but it wasn't the only one I've run into. Brian

Re: crippled my laptop trying to reclaim root space

2024-06-12 Thread Brian Conway
situation without addressing all the things you've done since: /dev should only be a few dozen KB in size (less than 50). Some time in the past, you likely wrote a significant amount of data to a new file in /dev rather than the device you intended. Next time, do: ls -lhS /dev/|head Brian

Re: how to verify OpenBSD CVS repositories from mirrors?

2024-07-03 Thread Brian Conway
eys of the anoncvs mirrors here: https://www.openbsd.org/anoncvs.html They are operated (for the most part) by the same developers/volunteers who contribute to the operating system source code. If you're not comfortable with that, I recommend using releases and snapshots exclusively. Brian Conway Owner RCE Software, LLC

Re: how to verify OpenBSD CVS repositories from mirrors?

2024-07-03 Thread Brian Conway
On Wed, Jul 3, 2024, at 1:04 PM, Florian Obser wrote: > On 2024-07-03 12:59 -05, "Brian Conway" wrote: >> On Wed, Jul 3, 2024, at 12:50 PM, Anon Loli wrote: >>> Hi! >>> I've recently compiled OpenBSD in order to change the source code for the >>

Re: Filesystem corruption on OpenBSD routers after power outage?

2024-07-10 Thread Brian Conway
so im assuming the lack of a swap partition means that this would not > be an issue (in my deployment scenario) That matches my experience. Brian Conway Owner RCE Software, LLC

Re: Filesystem corruption on OpenBSD routers after power outage?

2024-07-10 Thread Brian Conway
that thread, probably because I don't usually read arm@. I definitely never encountered it on swapless amd64, i386, octeon, or macppc (the latter two being in years long past). Brian

Re: random-id / modulate state help

2024-07-31 Thread Brian Conway
cy in my home > internet and didn't know if these might be slowing things down. The > hardware is just an APU2, so nothing very powerful. Less than 1gbit > connection. I would remove 'reassemble tcp'. I've found it causes more problems than it solves. Brian Conway Owner RCE Software, LLC

Re: antispam common practice for dealing with removed users

2009-04-08 Thread Brian Keefer
On Apr 8, 2009, at 7:27 AM, Jose Fragoso wrote: The user account is open. The user starts to opt-in some mailing lists. He is added to some others with opt-out policy. Sometime later, the user is removed before he opts-out of the list he (was) subscribed. ... I would like to hear from membe

OpenBGPD and MRT format dumps read by bgpdump

2009-05-26 Thread Brian Mengel
Greetings, I've just put together a simple server with the goal of using OpenBGPD to collect MRT format BGP table dumps. I'm using: OpenBGPD 4.4 OpenBSD 4.5 libbgpdump-1.4.99.8 (on a separate Linux server) bgpdump parses the dumped table from OpenBGPD, and displays individual routes, but the AS

Re: Any NC107i/broadcom ether follow-up?

2012-01-17 Thread Brian McCafferty
On 01/17/12 14:42, Douglas Ray wrote: Any word on support for the HP ethernet NC107i controllers? I see queries about it have come to this list several times over the past couple of years. The HP ProLiant servers describe their ethernet as "NC107i". Debian and FreeBSD have this implemented as a

Re: OpenBSD 4.1 and NFS and PF trouble

2007-11-25 Thread Brian Morton
Hi guys. I have a problem with nfs and pf. When PF is on , then nfs not work. I put the hole for portmap and nfs in pf... but i think that the problem is in mountd, because mountd every time when I restart the server change his own port: # #rpcinfo -p mars

Using the C programming language

2007-12-22 Thread Brian Hansen
Hi. I address this issue on this list, because a lot of people here are very skillfull C programmers. When looking at some of the different "reasons for security problems" such as: http://www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/ I can't help wonder, why so much software are being

Linus about C++

2007-12-27 Thread Brian Hansen
Hi. This is partly not OpenBSD related, and yet again someone pointed out that perhaps a lot of bug could be avoided using C++. I am writting my big paper on C and C++ and would like some comments from people who are experts. Off-list is okay, but maybe others are interested as well. I found thi

WAP setup problems

2008-02-04 Thread Brian Richardson
interfaces. If I turn off the bridge, I lose the MAC filtering. Is there any way I can have the setup I desire? Not all registered MAC addresses will have a fixed-address, so I can allow a guest access to the external network by simply adding their MAC address to the bridge. Thanks, Brian

Re: WAP setup problems

2008-02-05 Thread Brian Richardson
Stefan Kell wrote: Did you try using one shared-network with two different subnets? You can find an example within man dhcpd.conf. Yes, I did, with the same effect. Brian

Re: WAP setup problems

2008-02-06 Thread Brian Richardson
.rules: pass in on ral0 src 11:de:ad:be:ef:11 pass out on vr0 dst 11:de:ad:be:ef:11 block in/out on ral0 As to why the bridge? I'm not aware of any other way to use MAC filtering to limit access to the external interface. Regards, Brian

Re: WAP setup problems

2008-02-06 Thread Brian Richardson
with explicit block rules. Regards, Brian

Question about Implementing authpf, squid and ldap authentication....

2008-02-20 Thread Brian Shackelford
, Brian Shackelford

Problem configuring vlan interfaces on startup

2006-12-08 Thread Brian Candler
em by hand, for example by # ifconfig vlan1 $(cat /etc/hostname.vlan1) # ifconfig vlan2 $(cat /etc/hostname.vlan2) # sed 's/^/ifconfig vlan3 /' /etc/hostname.vlan3 | sh which works fine. So I was just wondering, is there something I've missed which is needed to get them to self-configure at startup? Thanks, Brian.

Re: Problem configuring vlan interfaces on startup

2006-12-08 Thread Brian Candler
're not. Thanks for pointing me to what I needed. Regards, Brian.

Re: VPN Howto

2006-12-08 Thread Brian Candler
please correct me if I'm wrong) that OpenBSD kernel has only an SAD. You put your policy into ipsecctl, which passes it onto isakmpd, and isakmpd negotiates keys and sticks them in the SAD. For a typical VPN setup which says "everything which comes in via IPSEC is trusted" then th

Re: VPN Howto

2006-12-11 Thread Brian Candler
you have a simple anti-spoofing policy such as "traffic with source 10/8 must originate from an internal interface or enc0" which is often sufficient. Thanks again, Brian.

Re: OpenBSD clients w/Dynamic IP to Cisco w/Fixed IP -- RSA pub keys

2006-12-11 Thread Brian Candler
D. I had a hack at porting rp-l2tp but it doesn't work well; I have a pty problem and I asked here for some help, but none was forthcoming. However I've had Linux clients (using rp-l2tp and racoon from ipsec-tools) working successfully. Otherwise, perhaps you can take some ideas from the above for using either pre-shared-key or certificate authentication. HTH, Brian.

OpenBSD/amd64 on VMware = sloooooow?

2006-12-12 Thread Brian Keefer
OK, so just to be clear I'm not a terribly clever person. I have no idea what I should be looking for to diagnose this issue. It's entirely possible that I have something configured stupidly/wrong, etc or that the answer is right in front of me, but I wouldn't know. I've done a little go

Re: Home networking for an amateur

2006-12-15 Thread Brian Candler
they can then ping each other directly) As you say, another solution would be to bridge rl0 and ath0, and run your home LAN as a single subnet. See man brconfig and bridgename.if HTH, Brian.

Re: OpenBSD/amd64 on VMware = sloooooow?

2006-12-15 Thread Brian Keefer
On Dec 12, 2006, at 11:46 PM, Brian Keefer wrote: OK, so just to be clear I'm not a terribly clever person. I have no idea what I should be looking for to diagnose this issue. It's entirely possible that I have something configured stupidly/wrong, etc or that the answer is righ

Re: Slightly OT: DNS force client to use authoritative

2006-12-19 Thread Brian Candler
at all (*). If you want a machine to run independently of any upstream DNS cache, then you can run a cache locally on that machine, and point the resolver at 127.0.0.1. But you still have not changed the architecture: the resolver is still using a cache, which just happens to be on the same machine.

Re: revision control system for system administration

2006-12-20 Thread Brian Candler
ke changes directly on the target device line by line, and then tftp'ing the updated configs back to a central repository. That is, the central repository is not the place where changes are made, but just a record of changes which were made. Again, you can get into problems with procedures not being followed and the repository coming out of sync with reality. Regards, Brian.

Re: revision control system for system administration

2006-12-21 Thread Brian Candler
On Wed, Dec 20, 2006 at 08:53:41AM -0600, Will Maier wrote: > On Wed, Dec 20, 2006 at 02:31:09PM +0000, Brian Candler wrote: > > That makes a lot of sense. But enforcing that policy might be > > difficult. This is important if you're relying on your gold server > > for

OpenBSD on VMware fusion (dmesg) -- yes it works

2006-12-22 Thread Brian Keefer
n 16 pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo fdc0 at isa0 port 0x3f0/6 irq 6 drq 2 biomask 0 netmask 0 ttymask 0 pctr: 686-class user-level performance counters enabled mtrr: Pentium Pro MTRR support apm0: disconnected dkcsum: wd0 matches BIOS drive 0x80 root on wd0a rootdev=0x0 rrootdev=0x300 rawdev=0x302 cpu1: unknown Core FSB_FREQ value 0 (0x0) Brian Keefer www.Tumbleweed.com "The Experts in Secure Internet Communication"

Re: OpenBSD on VMware fusion (dmesg) -- yes it works

2006-12-22 Thread Brian Keefer
On Dec 22, 2006, at 3:09 AM, Reyk Floeter wrote: On Fri, Dec 22, 2006 at 02:35:00AM -0800, Brian Keefer wrote: Not sure if anyone else has noticed, but VMware finally released Fusion for public beta. It's the port to Macintel. Only caveat so far is that Fusion wouldn't mount the O

Re: VPN solutions for OpenBSD to Windows

2006-12-22 Thread Brian Candler
tp://lists.openbsd.org/cgi-bin/mj_wwwusr?list=misc&brief=on&func=archive-get-part&extra=200612/299 Regards, Brian.

Re: OpenBSD on VMware fusion (dmesg) -- yes it works

2006-12-22 Thread Brian Keefer
On Dec 22, 2006, at 5:15 AM, Reyk Floeter wrote: On Fri, Dec 22, 2006 at 03:59:10AM -0800, Brian Keefer wrote: Here're the dmesg's from RAMDISK_CD and GENERIC.MP on a MBP 15" CoreDuo 2.16GHz: can you try 4.0-current (or a recent snapshot)? it should use the new vic(4) dr

Re: OpenBSD on VMware fusion (dmesg) -- yes it works

2006-12-22 Thread Brian Keefer
On Dec 22, 2006, at 10:26 AM, Jason Dixon wrote: On Dec 22, 2006, at 12:31 PM, Brian Keefer wrote: Jason, what does your .vmx look like? Oddly, I also found a statement: deploymentPlatform = "windows", which I found rather odd since I choose other/other for the OS and type.

Re: 'database filesystems' (was: backing up windows hosts to openbsd)

2007-01-08 Thread Brian Candler
e spot). Filesystem snapshots are pretty old technology - NetApp have had them for years. You reserve a maximum percentage of disk space for snapshots. If you run out of snapshot space, then you just get a normal 'disk full' error, and you can delete old or unwanted snapshots to free up space, or else alter the snapshot percentage. > Or did you mean something else entirely? That's what I'm wondering. Regards, Brian.

Re: OT Re: 'database filesystems'

2007-01-08 Thread Brian Candler
se? Would it talk a SQL dialect directly? Without such a proposal, it's hard to make specific comments. Disclaimer: I am not a database expert, nor a filesystem expert. However I have implemented some systems which use databases. Brian.

Re: OT Re: 'database filesystems'

2007-01-09 Thread Brian Candler
onflicting goals: - something which is small and fast (as it is to be an integral part of the O/S) - something which is huge and featureful (as it is going to supercede every other database out there) There is only one good reason I can think of for integrating the database into the O/S, which is that Microsoft eventually decided it was a bad idea to do so:-) Regards, Brian.

Re: OT Re: 'database filesystems'

2007-01-10 Thread Brian Candler
, but filesystems with versioning and replication. These can be transparent to applications, which continue to open(), read() and write() files as usual(*). And personally I'd find it useful to hear about what options are available in OpenBSD for this. Regards, Brian. (*) If an application wan

Re: VOIP NAT

2007-01-13 Thread Brian Candler
ss. That is, the phone sends its RTP streams to/from the firewall's "inside" IP address, and the softswitch sends its RTP streams to/from the firewall's "outside" IP address. (I believe siproxd used to have the ability to mess with Linux iptables rules, but that functionality was stripped out) Regards, Brian.

Poor performance with gem(4)? (reposted from ppc@)

2007-01-14 Thread Brian Keefer
(sorry for the repost, I guess there aren't many eyes on ppc@) Has anyone else noticed extremely poor performance with gem(4) devices, particularly on the Mac Mini G4? dmesg is below, but the summary is that I have a gem(4), and after finally being fed up with the poor performance I plugged

Re: About pf states

2007-01-17 Thread Brian Candler
aq/pf/example1.html you will see that they deal with this by a global "pass out keep state" rule. Try adding this to your ruleset after your "block in log all" If you were to argue that pf.conf(5) is unclear on this point, especially where it it says By default, packets coming in and out of any interface can match a state then I would not disagree with you :-) HTH, Brian.

Re: About pf states

2007-01-18 Thread Brian Candler
On Wed, Jan 17, 2007 at 02:29:13PM +0100, Samuel Mo?ux wrote: > every state is a [src, dst, direction] tuple > which lets pass [src -> dst, direction ] and [dst -> src, > not(direction)], but not [ src-> dst, not(direction) ] packets. Very clear - I think that description should go into pf.conf(5)

Re: Performance Statistics: -current

2007-01-19 Thread Brian Candler
"mount" and "df -k", plus a description of your disk subsystem, people might have some more suggestions. HTH, Brian.

Re: L2TP/FreeRadius In OpenBSD

2007-01-21 Thread Brian Candler
y. (FreeBSD has a kernel netgraph L2TP implementation, but I found it to be unreliable. Maybe it has improved. But anyway, its control daemon is very noddy and uses a local XML file for authentication, not RADIUS) HTH, Brian.

Re: Poor performance with gem(4)? (reposted from ppc@)

2007-01-21 Thread Brian Keefer
On Jan 21, 2007, at 6:36 AM, Mark Kettenis wrote: Getting quite decent performance on my Mac mini G4: gem0 at pci2 dev 15 function 0 "Apple Uni-N2 GMAC" rev 0x80: irq 41, address 00:0d:93:60:dd:1a bmtphy0 at gem0 phy 0: BCM5221 100baseTX PHY, rev. 4 With an msk(4) at the other end and a dec

Re: OT:

2007-01-21 Thread Brian Keefer
terms of cost-savings in other areas is something else to consider--would a commercial product block more malware, have less false-positives, be able to comply with government regulations, etc? Brian Keefer www.Tumbleweed.com "The Experts in Secure Internet Communication"

Re: OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-21 Thread Brian Keefer
of third-party commercial software in addition to your own code, sadly Linux is currently a better choice. I personally cannot stand Linux, but even I consider Linux a safer choice for an embedded OS right now (safer as in: you won't have to struggle for weeks to get your software t

Re: OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-21 Thread Brian Keefer
On Jan 21, 2007, at 4:34 PM, bofh wrote: On 1/21/07, Brian Keefer <[EMAIL PROTECTED]> wrote: Because driver support for Linux is a lot better than for OpenBSD, I'm not sure if I believe this to be as strong an argument since, as the blackbox maker, you have your choice of hard

Re: OT: Getting a premade box or doing it yourself (was "OT:")

2007-01-21 Thread Brian Keefer
On Jan 21, 2007, at 8:00 PM, L. V. Lammert wrote: On Sun, 21 Jan 2007, Brian Keefer wrote: The company I worked for considered switching our appliance OS to a *BSD from Linux, but in the end we decided that commercial support was too important to ignore. There ARE a number of vendors

Re: named and dns cache

2007-01-21 Thread Brian Keefer
ly isn't in "localnets" (hence, no recursion). Try manually adding your subnets to the ACL, for instance 192.168.0.0/16; (or whatever your internal network is). Brian Keefer www.Tumbleweed.com "The Experts in Secure Internet Communication"

Re: Using isakmpd to build a bridge

2007-01-22 Thread Brian Candler
or ethereal to see what packets are being sent, and checking that they're being forwarded properly. IMO you will end up with a much better solution using routing rather than bridging, as it will scale much better. You will avoid all those nasty Windows NETBIOS naming broadcasts being forwarded down your VPN tunnel for a start. Regards, Brian.

Re: Using isakmpd to build a bridge

2007-01-23 Thread Brian Candler
true if you use Windows domain controllers which are also configured to be DNS servers) Machines register their hostname in this way, so that when you do a lookup on another machine for //foo/subdir then 'foo' can be resolved via DNS. I don't know how this gives you the 'Network neighborhood' browsing capability. Regards, Brian.

Re: High Load - t/s

2007-01-24 Thread Brian Candler
ctories, which you can symlink to multiple disks. Putting the MTA spool directory on a battery-backed RAM disk is best of all. At very least, separating things out this way will make it clear in the tps figures how much is due to the MTA spooling and how much due to operations in the users' mailstores. HTH, Brian.

Re: High Load - t/s

2007-01-24 Thread Brian Candler
inside the user's Maildir. If you know the profile of commands issued by a client, you can try issuing them manually to a server to see how it handles them in terms of file I/O operations, e.g. with strace. If it is poor, then try a different server. Regards, Brian.

<    1   2   3   4   5   6   7   8   9   >