ami0: timeout with LSI SATA 150-4 Controller

2005-07-04 Thread Martín
Hi there, I'm trying to configure an OpenBSD 3.7 box with a LSI SATA 150-4 RAID Card, but I'm having problems with timeout errors. The machine boots from an IDE disk, and then I have two 160GB SATA disks configured in a RAID 1 fashion, as one logical drive. Every now and then, specially when

Private cloud hosting recommendations

2015-10-09 Thread Martín Ferco
Hi misc, I'm looking for alternatives to host our OpenBSD web frontends off-site. Up until now we've been using AWS for contingecy, but as you may well know, they only support Linux and Windows instances. We already have a couple of OpenBSD frontends on-site, and getting all our frontends to be Op

Re: Private cloud hosting recommendations

2015-10-09 Thread Martín Ferco
Thanks for all your input! I'm not particularly concerned about price -- if they are as expensive as AWS (paying around $150/mo per instance there), I'd be OK as well. If they are cheaper, the better, but I want quality and service as a priority. Also, ideally, it should be located in the US -- w

Re: Private cloud hosting recommendations

2015-10-09 Thread Martín Ferco
I can consider that as well, but I'd like to not depend on someone inserting CDs or something like that for installing the OS for example and, also, I'd like to have the possibility of having our private network connected via VPN to our other sites. I used Softlayer in the past for hosting FreeBSD

Problem with isakmpd, PAYLOAD_MALFORMED and packet lengths

2009-01-28 Thread Martín Coco
Hi misc, I've been trying to configure the following IPSec client using certificates, but with no success. I want to use it a roadwarrior setup: http://www.ncp-e.com/en/vpn-szenarien-produkte/vpn-produkte/secure-entry-client.html Of course, I'm using isakmpd on the OpenBSD side (4.3). I did mana

Replacing Apache with nginx

2012-11-19 Thread Martín Ferco
to add 3rd party modules to it. Is there a suggested way to do that? Thanks so much, Martín.

Re: Replacing Apache with nginx

2012-11-21 Thread Martín Ferco
On Tue, Nov 20, 2012 at 8:36 PM, Nicolai wrote: > On Mon, Nov 19, 2012 at 04:42:57PM -0300, Martín Ferco wrote: > >> I can see that some files have been updated by the OpenBSD team, reading >> README.OpenBSD in the source directory. One of those changes seems to have >> b

Re: Replacing Apache with nginx

2012-11-21 Thread Martín Ferco
On Tue, Nov 20, 2012 at 5:56 PM, Jiri B wrote: > On Mon, Nov 19, 2012 at 04:42:57PM -0300, Martín Ferco wrote: >> I can see that some files have been updated by the OpenBSD team, reading >> README.OpenBSD in the source directory. One of those changes seems to have >> been the

Will the SMP improvements in 5.9 (or future releases) help with IPSec/AES?

2016-03-23 Thread Martín Ferco
Hi misc, I've been reading that some improvements are being made to the network stack regarding SMP. I've also read that this is just starting, and that the KERNEL_LOCK will still be present in 5.9 (seen it here: http://undeadly.org/cgi?action=article&sid=20160302155046), but do you know if this

kernel_map out of virtual space panic on different hardware within hours of difference

2008-01-10 Thread Martín Coco
Hi misc, I'm having frequent crashes on OpenBSD 4.2 (stable) on different machines with the following error: panic: pmap_pinit: kernel_map out of virtual space! Specifically, we have two carped firewalls (running pfsync) that showed the same error with a difference of around 8 hours. First the b

Re: kernel_map out of virtual space panic on different hardware within hours of difference

2008-01-11 Thread Martín Coco
That's interesting indeeed. We are running stable, but I'm not sure how frequently we are updating it. And it seems like this one is a somewhat recent patch, so maybe it's not been included on that install. I'm going to try it and let you know. Thanks for your advice and sorry for not checking the

Problems with dvd+rw-tools and UDF

2006-06-04 Thread Martín Coco
Hi misc, I have, apparently, some sort of problem when burning DVDs with dvd+rw-tools-5.21.4.10.8 using UDF on OpenBSD 3.8. The DVDs are burned, but when I check them with tar (to list its contents for example) I get invalid header errors. Also, when checking the txt index file I also produc

Re: Problems with dvd+rw-tools and UDF

2006-06-05 Thread Martín Coco
Thanks for your reply. Yes, I have checked this. I didn't associate it with my problem as I am not getting "blue" kernel messages, the disc IS mounted ok, and I'm also not seeing negative numbers when listing the directory for example. Now, previous to using OpenBSD 3.8, I was using 3.7, and I WA

Re: Problems with dvd+rw-tools and UDF

2006-06-05 Thread Martín Coco
Ok, I've just upgraded to OpenBSD 3.9, but I'm still having the same issues. Martmn Coco escribis: Thanks for your reply. Yes, I have checked this. I didn't associate it with my problem as I am not getting "blue" kernel messages, the disc IS mounted ok, and I'm also not seeing negative numbers

Dell R200

2008-04-25 Thread Martín Coco
Hi misc, I'll be buying a couple of Dell R200 Rackmount servers to use as firewalls/routers. I found this thread in the archives about it: http://marc.info/?l=openbsd-misc&m=120167827217058&w=2 And it seems to be working with snapshots. But my question is: will it be supported by the 4.3 re

Hardware recommendation for firewalls (more than 4 NICs)

2008-07-11 Thread Martín Coco
Hi misc, I'm currently looking for hardware alternatives for firewalls that should have more than four NICs. Currently we are buying R200s from Dell, but we have the 4 NIC limitation. We could tell Dell to install a quad port NIC (in addition to the two-port onboard card), but I haven't read

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-14 Thread Martín Coco
Thanks! Have you tried the quad nics on those Dells? We do have a couple of R200s, 860s and 850s running with 2 dual port cards no problem, but we have never tried the quad ports. Torsten Frost escribis: On Fri, Jul 11, 2008 at 11:47 PM, Martmn Coco <[EMAIL PROTECTED]> wrote: Hi misc, I'm

Re: Hardware recommendation for firewalls (more than 4 NICs)

2008-07-14 Thread Martín Coco
First of all, thanks to all of you that have replied. I've thought of adding VLANs, and will be doing it in the future maybe, but in our current situation, that's not possible; not all the switches support this option, and there's still some concern about security implications (specially in up

IPSec routing problem when using UDP

2006-09-20 Thread Martín Coco
Hello misc! We are experiencing what seems to be a routing problem when using ipsec flows and udp traffic. We are using OpenVPN for the employees to connect from the outside world to our network. It is configured to use UDP. At the same time, this box has an ipsec tunnel configured to talk betwee

Re: IPSec routing problem when using UDP

2006-09-21 Thread Martín Coco
Yes, my bad. I didn't include any other information because I didn't think it could be version specific. We are using OpenBSD 3.8, and OpenVPN 2.0.6 (from packages). You are right about IPSec not routing. What I meant is how the configured flows are being chosen/matched so that the OS routes the p

IP-IP with ipsecctl problem

2006-10-25 Thread Martín Coco
Hi, I am trying to build IP-IP flows with the new ipsecctl tool. I have two OpenBSD 4.0 snapshots running in different vmware virtual machines, attached to the same network. Box 1 has the following configuration: fw_1 = "10.0.0.1/32" fw_2 = "10.0.0.2/32" flow ipip from $fw_1 to $fw_2 ipi

Booting very slow when using CompactFlash adapters

2005-11-30 Thread Martín Coco
Hi there, We are beginning to do some tests with Compact Flash IDE adapters and OpenBSD 3.8. We installed the OpenBSD 3.8 using a SanDisk 1.0GB CompactFlash on a Pentium 4 (dmesg at the end of this message). The installation finished flawlessly. But when booting, it seems to take ages to boo

Re: Booting very slow when using CompactFlash adapters

2005-12-01 Thread Martín Coco
Nick, First of all, thanks for all your input! My comments below: Nick Holland escribis: Martmn Coco wrote: Hi there, We are beginning to do some tests with Compact Flash IDE adapters and OpenBSD 3.8. We installed the OpenBSD 3.8 using a SanDisk 1.0GB CompactFlash on a Pentium 4 (dmesg

Off-by-one error in named in ISC BIND 9.x

2011-06-10 Thread Martín Ferco
Hello misc, Does anyone know if a patch is being produced for this? http://www.isc.org/software/bind/advisories/cve-2011-1910 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1910 Apparently the fix is trivial to apply, as seen here: http://security.freebsd.org/patches/SA-11:02/bind.patch

Re: Off-by-one error in named in ISC BIND 9.x

2011-06-10 Thread Martín Ferco
Ok, thanks! On Fri, Jun 10, 2011 at 5:30 PM, Stuart Henderson wrote: > openbsd's version of BIND is way too old to be affected > > On 2011-06-10, Mart?n Ferco wrote: >> Hello misc, >> >> Does anyone know if a patch is being produced for this? >> >> http://www.isc.org/software/bind/advisories/cve