Re: make optional servers insttall

2016-06-14 Thread Christopher Ahrens
Francois Pussault wrote: U can play with tuned packages but I think it is usless. Just let defaut install .. it is really tiny even for old machines setup so the space lost questions is just a waste of time in my point of view. I think there are really low space to gain on tunning packages

Re: Creating https certificates dynamically for redirected/blocked requests

2016-06-14 Thread Christopher Ahrens
Ted Wynnychenko wrote: Hello For many years now I have been using a DNS black hole setup to stop http/https connections to blocked websites (well, any connection to those sites). This has worked well. Connections with http are routed to an IP on the internal network which returns a simple "blo

Re: DNS servers around here not working for days. dig works. fix?

2016-06-14 Thread Christopher Ahrens
Chris Bennett wrote: $ dig bsd.org @8.8.4.4 +trace ; <<>> DiG 9.4.2-P2 <<>> bsd.org @8.8.4.4 +trace ;; global options: printcmd . 7197IN NS a.root-servers.net. . 7197IN NS b.root-servers.net. . 7197

Re: DNS servers around here not working for days. dig works. fix?

2016-06-14 Thread Christopher Ahrens
li...@wrant.com wrote: Tue, 14 Jun 2016 11:46:39 -0500 Chris Bennett $ dig bsd.org @8.8.4.4 +trace dig: couldn't get address for 'm.root-servers.net': not found pass ~ $ dig bsd.org @8.8.8.8 +trace dig: couldn't get address for 'i.root-servers.net': not found You know I'm thinking you may

Re: make optional servers insttall

2016-06-14 Thread Christopher Ahrens
Marc Espie wrote: On Tue, Jun 14, 2016 at 01:37:34PM -0500, Chris Bennett wrote: On Tue, Jun 14, 2016 at 06:54:35PM +0200, Marc Espie wrote: On Tue, Jun 14, 2016 at 04:41:56PM +0300, wrote: Split baseXY tarbail to serversXY and baseXY, this step will be optin

Virtualize or bare-metal?

2014-01-13 Thread Christopher Ahrens
I have recently inherited a set of high-spec machines that I intend to use for OpenBSD. I am planning on using these machines for DNS, HTTP, mail, LDAP, netboot, build system for following -stable, etc. So my question is, is it recommended to load all these services on a single instance OpenBS

Re: Virtualize or bare-metal?

2014-01-13 Thread Christopher Ahrens
L. V. Lammert wrote: On Mon, 13 Jan 2014, Christopher Ahrens wrote: I have recently inherited a set of high-spec machines that I intend to use for OpenBSD. I am planning on using these machines for DNS, HTTP, mail, LDAP, netboot, build system for following -stable, etc. So my question is, is

Re: Virtualize or bare-metal?

2014-01-13 Thread Christopher Ahrens
Jack Woehr wrote: Christopher Ahrens wrote: Wish I could split everything off to physical, but all I have for space for is a mini-rack that fits under my desk in my apartment Sounds like you have answered your own question! What I meant by bare-metal was if I should run a bunch of

Re: Virtualize or bare-metal?

2014-01-13 Thread Christopher Ahrens
Matthew Weigel wrote: On 1/13/2014 9:11 PM, Christopher Ahrens wrote: Jack Woehr wrote: Christopher Ahrens wrote: Wish I could split everything off to physical, but all I have for space for is a mini-rack that fits under my desk in my apartment Sounds like you have answered your own

Re: Request for Funding our Electricity

2014-01-16 Thread Christopher Ahrens
Then maybe the number of bugs for an architecture can bematched to the power-on-time for the machines for that architecture. So your solution is to replace requiring financial donations to requiring more hardware donations? Cold boots are by far the biggest cause of hardware failure, this ri

Re: Request for Funding our Electricity

2014-01-16 Thread Christopher Ahrens
Gregor Best wrote: On Wed, Jan 15, 2014 at 09:55:04PM +, Franchini Fabien wrote: [...] I suggest to write a letter to theses companies who are known to using OpenBSD or other product-related like OpenSSH. In this letter we can explain (as the first post from Theo) our issue. I'm sure they c

Re: Request for Funding our Electricity

2014-01-17 Thread Christopher Ahrens
Kevin Lyda wrote: Regarding the "less architecture support to save electricity" argument, I'm not sure one follows the other. Computing power has grown to a point that emulators are perfectly valid - particularly for older systems. I think a push to package and maintain emulators for many of the

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-17 Thread Christopher Ahrens
MJ wrote: On 17 Jan 2014, at 17.30, Christian Weisgerber wrote: As guenther@ has pointed out, refusing all crypto covered by that definition is silly. But even if you limit yourself to the specification part, you should be very disappointed about the newly added Curve25519 key exchange and Ed

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-17 Thread Christopher Ahrens
Theo de Raadt wrote: MJ wrote: On 17 Jan 2014, at 17.30, Christian Weisgerber wrote: As guenther@ has pointed out, refusing all crypto covered by that definition is silly. But even if you limit yourself to the specification part, you should be very disappointed about the newly added Curve255

Re: OpenBSD funding status

2014-01-19 Thread Christopher Ahrens
MJ wrote: On 18 Jan 2014, at 20.01, Desktop User OpenBSD wrote: Hello, I would love to subscribe to the monthly donation on: http://openbsdfoundation.org/donations.html but I need to ask, say a few things before: 1) The https://openbsdfoundation.org/donations.html is redirecting to http:/

Re: problems with non-utf8 characters in mutt after upgrading to 5.4

2014-01-19 Thread Christopher Ahrens
Denis wrote: Hi Karlis, I think you may have forgotten to set PKG_PATH to new value (with 5.4 in it), when running "pkg_add -u" after upgrading from OpenBSD 5.3 to OpenBSD 5.4. This is why I set my PKG_PATH in .profile to: /pub/`uname -s`/`uname -r`/packages/`machine -a`/ with a sym-link for

Re: my PF & ICMP Issues

2014-01-21 Thread Christopher Ahrens
keith wrote: I have two Firewalls running OBSD 5.4 x64 that are both live and working fine except that they are unable to ping each others IP address or the gateway address while PF is enabled. If I quickly disable PF on the FW-D=Backup then I am able to ping everything from that machine. I've go

Re: Thanks a lot to all devs of OpenBSD

2011-08-28 Thread Christopher Ahrens
ption. In my opinion, Linux is the worst thing to happen to have ever happened to Open Source. * well, making them less broken. -- -Christopher Ahrens

Packages missing for amd64 snapshots

2011-09-17 Thread Christopher Ahrens
I am not seeing the packages for the snapshot build of amd64 on any of the mirrors I have tried, but I can see packages for i386 and other platforms. On all of the mirrors I have tried there is an index.txt in the amd64 directory (which only lists itself) and nothing else Has compilation of t

Re: Cascading pf firewalls with both nat and no nat

2010-03-01 Thread Christopher Ahrens
g here. I know I what I am recommending is a monumental task, but it will need to be done eventually. -Christopher Ahrens

Re: Opteron 250 Overheating

2010-03-03 Thread Christopher Ahrens
>> Henning Brauer wrote: >> >* Jeff Ross [2010-03-02 16:59]: >> >>I bought a replacement supermicro motherboard off fleabay that has >> >>dual Opteron 250 @2.4GHz. The cpus have passive heatsinks, it is in >> >>a supermicro 2U chassis with 4 front fans. >> > >> >do you have the air shroud? this

Re: errata46.html update

2010-03-12 Thread Christopher Ahrens
You aren't missing anything, these are 2 different webservers: OpenBSD.org [199.185.137.3, IP registered to Theos Software] and www.OpenBSD.org [142.244.12.42, University of Alberta] Both of these servers have a different copy of the website, and need to be synced. -Christopher Ahrens

Re: I don't get where the load comes from

2011-06-01 Thread Christopher Ahrens
lso reminds me, sendmail have a similar feature using load average, which have also bugged me from time to time. Might be others as well, but none come to mind right now.) Regards, /Benny -- -Christopher Ahrens

Re: microsoft.com -> NetBSD

2010-12-30 Thread Christopher Ahrens
client to show your messages in the wrong order; meaning that I see responses to your questions before the question. -- -Christopher Ahrens -LeviaComm Networks

Re: GigE Chipset

2011-01-20 Thread Christopher Ahrens
nge critical parts mid-way through the life of a model. They changed from a Broadcom chip to an Intel chip mid-way through one of the models of servers I had to support causing my automation script to break -- -Christopher Ahrens -LeviaComm Networks