Re: __guard_local issue

2013-05-22 Thread Matthew Dempsky
On Wed, May 22, 2013 at 3:30 AM, Bogdan Andu wrote: > I compile from source Erlang R14B04 on a freshly installed OpenBSD 5.3 amd64 > machine, configured with preinstalled opensssl library > /usr/lib/libssl.so.19.0 . This was fixed upstream in R15B03: https://github.com/erlang/otp/commit/c282f35

Re: __guard_local issue

2013-05-23 Thread Matthew Dempsky
On Thu, May 23, 2013 at 2:38 AM, Bogdan Andu wrote: > ./configure > sudo gmake install > the same error You need to run autoreconf, to regenerate configure from configure.in.

Re: Western Digital - Advanced Format

2013-06-02 Thread Matthew Dempsky
On Sat, Jun 1, 2013 at 7:59 AM, MD wrote: > dmesg indicates the drive reports 512 byte sectors It sounds like you've resolved your problem already, but in the future, if someone asks you for your dmesg output, you'll have better luck if you post your actual dmesg output rather than trying to summ

Re: Western Digital - Advanced Format

2013-06-02 Thread Matthew Dempsky
On Sun, Jun 2, 2013 at 8:02 PM, MD wrote: > I had sent my dmesg output for this board to dmesg@... Thanks for doing that, but be aware that's a separate issue from trying to get help here. If you want help diagnosing a problem, you should make things as easy as possible for the people helping yo

Re: Western Digital - Advanced Format

2013-06-02 Thread Matthew Dempsky
On Sun, Jun 2, 2013 at 8:40 PM, MD wrote: > Matt (May I call you "Matt"?), No.

Re: Header files for C/C++ development

2013-06-02 Thread Matthew Dempsky
On Sun, Jun 2, 2013 at 11:14 PM, eatg75 wrote: > Can someone help me. You need to install the comp53 package.

Re: Header files for C/C++ development

2013-06-02 Thread Matthew Dempsky
On Sun, Jun 2, 2013 at 11:53 PM, Matthew Dempsky wrote: > On Sun, Jun 2, 2013 at 11:14 PM, eatg75 wrote: >> Can someone help me. > > You need to install the comp53 package. Er, sorry, the comp53 set.

Re: OpenBSD Doesn't Support 64-Bit Intel

2013-06-30 Thread Matthew Dempsky
On Sun, Jun 30, 2013 at 9:06 PM, Jash Sefferson wrote: > Don't believe me? It says very clearly at the OpenBSD/amd64 page: “All > versions of the AMD Athlon 64 processors and their clones are supported.” > But does not mention or list any Intel chips. Not one. > > Wtf? I can do CAD on my i7-980X u

Re: OpenBSD Doesn't Support 64-Bit Intel

2013-07-01 Thread Matthew Dempsky
On Mon, Jul 1, 2013 at 7:48 AM, carlos albino garcia grijalba wrote: > IA64 its the name of the arch for the processor created originali by AMD and > INTEL copied so support for AMD64 mean INTEL64 too! No, IA-64 refers to the Itanium architecture, which is very different from AMD64/Intel 64.

Re: OpenBSD Doesn't Support 64-Bit Intel

2013-07-02 Thread Matthew Dempsky
On Tue, Jul 2, 2013 at 1:11 PM, carlos albino garcia grijalba wrote: > jash as u have seen i have really being kicked even theo kick my ass so i was > totally wrong im the guy who needs to read i was totally confused since im a > dummy i tought that amd64 mean all 64 bits arch either by AMD or IN

Re: Java on OpenBSD 5.3

2013-07-19 Thread Matthew Dempsky
"write error"? Did you run out of disk space? On Fri, Jul 19, 2013 at 7:55 AM, wrote: > Hi, > > Anybody managed to build /usr/ports/devel/jdk on OpenBSD 5.3? > > Getting a rather nasty compile error here on amd64, was wondering if maybe > someone could help? Tried asking on the ports mailingli

Re: Default software in the base

2013-07-29 Thread Matthew Dempsky
On Mon, Jul 29, 2013 at 1:31 PM, deoxyt2 wrote: > Respect to replace GCC by LLVM/Clang, I think there is already something > advanced with PCC project. PCC was advanced into the attic over a year ago: http://marc.info/?l=openbsd-cvs&m=133423160431049&w=2

Re: ipv6/pf/relayd/totd

2008-12-16 Thread Matthew Dempsky
On Tue, Dec 16, 2008 at 7:14 AM, Stephan A. Rickauer wrote: > An ipv6 only host with a non-link-local address should be able to use > the ipv4 world. Is this just for fun/practice, or is there a reason you can't just configure the host with both an IPv4 and an IPv6 address? > I don't want to dea

Re: ipv6/pf/relayd/totd

2008-12-17 Thread Matthew Dempsky
On Wed, Dec 17, 2008 at 12:43 AM, Jeroen Massar wrote: > I guess there is a practical use here, that is, if your tools all > understand IPv6, because then you only have an IPv6 "NAT" to IPv4 and > you skip the IPv4 NAT to IPv4 in case you don't have any IPv4 addresses > for your local network. It

Re: relayctl host disable doesn't loop through all hosts

2009-04-01 Thread Matthew Dempsky
On Wed, Apr 1, 2009 at 6:57 AM, Reyk Floeter wrote: > no, it shouldn't be "fixed". one host can have different services with > different states at the same time. But isn't that why you can specify an id to disable just one service on a host? The common use case for specifying a host name would

Re: Using 2 internet connections on OpenBSD Gateway

2009-04-02 Thread Matthew Dempsky
On Thu, Apr 2, 2009 at 5:05 AM, Stefan Sperling wrote: > man 8 route > /mpath I was under the impression that to use multipath routing, you need to also use BGP (which probably isn't a possibility for the OP since he said he's using a cable modem). Am I mistaken?

Re: Stupid Ideas - softraid and ExpEther

2009-04-07 Thread Matthew Dempsky
On Tue, Apr 7, 2009 at 4:28 AM, Steve Shockley wrote: > I mostly trust that nobody is sniffing my PCI bus, I'm less > trusting when data goes over the network. You can use a dedicated network.

Re: VPS default gateway in a different subnet than host

2016-12-13 Thread Matthew Dempsky
[+mpi, jsing] This is a known issue. Local /32 routes don't work with the new ART-based routing table. mpi@ is working on a fix. In the mean time, you may be able to recompile your kernel without "option ART". On Tue, Dec 13, 2016 at 9:09 AM, Jyri Hovila [iki.fi] wrote: > Dear everyone, > > I'm

Re: VPS default gateway in a different subnet than host

2016-12-13 Thread Matthew Dempsky
Here is mpi's proposed fix: http://marc.info/?l=openbsd-tech&m=148162020419474&w=2 On Tue, Dec 13, 2016 at 1:36 PM, Matthew Dempsky wrote: > [+mpi, jsing] > > This is a known issue. Local /32 routes don't work with the new > ART-based routing table. > > mpi@ i

Re: VPS default gateway in a different subnet than host

2016-12-13 Thread Matthew Dempsky
Do you have console access to the VM? You may be able to use: route delete 5.166.16.254/32 route add 5.166.16.252/30 -gateway -iface 193.34.119.15 as a workaround so you can download the kernel sources. On Tue, Dec 13, 2016 at 3:10 PM, Jyri Hovila [iki.fi] wrote: > Hi! > > The thing is,

Re: Thread-local storage support on OpenBSD?

2013-02-25 Thread Matthew Dempsky
There's certainly interest in supporting ELF TLS (i.e., the __thread and thread_local storage classes), but it's going to require some more work still. I'm not familiar with GCC 4.6's TLS support in specific, but unless it compiles to calls to pthread_{get,set}specific(), etc (which I don't think

Re: usleep() buffer update

2013-04-13 Thread Matthew Dempsky
On Sat, Apr 13, 2013 at 2:53 PM, Mihai Popescu wrote: > Can someone give me some hints in this direction, please, what exactly > triggers usleep() internaly ? usleep() doesn't trigger anything, but usleep(1) doesn't mean "sleep exactly 1us", it means "sleep at least 1us". In practice, your proce

Re: OpenBSD and KDE

2013-05-01 Thread Matthew Dempsky
On Wed, May 1, 2013 at 5:33 PM, staticsafe wrote: > KDE seems to be at a much older version than what upstream is at > currently. What gives? Updated ports for KDE 4 were just added recently, but not in time for OpenBSD 5.3. Also, keep in mind, all of the packages are largely maintained by volun

Re: strange errors on OpenBSD

2013-05-07 Thread Matthew Dempsky
Please learn to use Gmail's "Reply" and "Reply to all" features.

Re: _XData32() crash: long* vs int* on amd64 (LP64)

2014-06-17 Thread Matthew Dempsky
I think the issue is that xsel.c allocates "int nr_bytes;" in change_property(), and then passes it to XChangeProperty with format==32. However, XChangeProperty() documents that format==32 specifically means a pointer to long (even on LP64 platforms). I suspect changing "int nr_bytes" to "long nr

Re: _XData32() crash: long* vs int* on amd64 (LP64)

2014-06-17 Thread Matthew Dempsky
xpression would render it rather useless if it's actually supposed to be (long *)... On Tue, Jun 17, 2014 at 9:55 PM, Matthew Dempsky wrote: > I think the issue is that xsel.c allocates "int nr_bytes;" in > change_property(), and then passes it to XChangeProperty with > form

Re: Bad system calls in snapshot bsd.rd

2014-06-18 Thread Matthew Dempsky
On Wed, Jun 18, 2014 at 5:32 AM, David Higgs wrote: > While upgrading my snapshot VMs this morning, bsd.rd on both the i386 > and amd64 produced 'Bad System Call' somewhere between making device > nodes and reboot. That might happen if the bsd.rd you're using for the upgrade process is older than

Re: procfs to die [was: CVS: cvs.openbsd.org: src]

2014-06-22 Thread Matthew Dempsky
I suspect procfs is only enabled on i386 because that's the only arch with compat_linux support? If so, anyone who relies on compat_linux support should be sure to test and report back if they have problems. On Sun, Jun 22, 2014 at 2:22 PM, Philip Guenther wrote: > If you're currently using proc

Re: openbsdstore: enable javascript and buy something or gtfo

2014-10-03 Thread Matthew Dempsky
On Fri, Oct 3, 2014 at 12:20 PM, J Sisson wrote: > If the javascript contains an XMLHTTPRequest object, it can call out > to a different server (than the one you are visiting) without your > explicit knowledge, download content, and do basically whatever the > user the browser is running as can do

OpenBSD and Compute Engine

2013-12-03 Thread Matthew Dempsky
Compute Engine now supports custom OSes [1], so I've been working on getting OpenBSD working on it. I thought I'd share a status update. [1] http://googlecloudplatform.blogspot.com/2013/12/google-compute-engine-is-now-generally-available.html ** virtio-scsi Compute Engine exposes disks as virt

Re: OpenBSD and Compute Engine

2013-12-03 Thread Matthew Dempsky
On Tue, Dec 3, 2013 at 1:35 PM, Jiri B wrote: > Aha, big brother grows up :-) I will try to test virtio-scsi on RHEVM > which also exposes this to VMs. Cool, let me know if you run into any issues. I'm sure there's still some bugs in the driver so I wouldn't put it into production yet, but it sh

Re: OpenBSD and Compute Engine

2013-12-04 Thread Matthew Dempsky
On Wed, Dec 4, 2013 at 9:19 AM, Jiri B wrote: > I have problem to compile it :/ Are you sure you applied the patch cleanly? I'd recommend running cd /usr/src/sys ftp https://codereview.appspot.com/download/issue33540044_80001.diff patch < issue33540044_80001.diff > In file included

Re: OpenBSD and Compute Engine

2013-12-04 Thread Matthew Dempsky
On Wed, Dec 4, 2013 at 12:04 PM, Jiri B wrote: > This is iscsi lun path-through via virtio-scsi on RHEVM 3.3: > > -%- > virtio1 at pci0 dev 4 function 0 vendor "Qumranet", unknown product 0x1004 > rev 0x00: Virtio SCSI host Device > vioscsi0 at virtio1: qsize 128 > scsibus1 at vioscsi0: 255 targe

Re: OpenBSD VPS Providers

2013-12-11 Thread Matthew Dempsky
[Disclosure: I work for Google, but not on Compute Engine.] On Fri, Dec 6, 2013 at 9:37 AM, Some Developer wrote: > I'm looking for a VPS provider that supports OpenBSD (preferably the latest > version). I got OpenBSD working on Google Compute Engine, but I haven't committed the vioscsi(4) drive

Re: DNS resolver retries configurable? (or: Anything to make DNS resolves always work!)

2013-12-19 Thread Matthew Dempsky
On Thu, Dec 19, 2013 at 2:36 PM, Mikael wrote: > a) OpenBSD's resolver configured to retry 999 times before failing, and > [...] > If so, is there any way to do a)? In src/lib/libc/asr/asr.c, change "ac->ac_nsretries = 4;" to "ac->ac_nsretries = 999;", recompile, and reinstall. However, I wouldn

Re: OpenBSD and Compute Engine

2013-12-20 Thread Matthew Dempsky
Thought I'd share a quick update here, since a few people have expressed interest: I've committed the dhclient patch and vioscsi driver. I expect the next set of OpenBSD snapshots that include these commits to work out of box on Compute Engine. There are docs online for how to use Cloud Storage

Re: OpenNTPD and NTP reflection attacks

2014-01-15 Thread Matthew Dempsky
On Wed, Jan 15, 2014 at 11:36 AM, Nicolai wrote: > So, is it correct to say that OpenNTPD is immune from generating large > amplifications? (Recent articles on the subject mention 100x > amplification factors!) It looks like the recent CVEs are about ntp.org ntpd implementing some private extens

Re: NIST-free crypto, autociphering, and libsodium (NaCl)

2014-01-16 Thread Matthew Dempsky
On Thu, Jan 16, 2014 at 9:01 AM, MJ wrote: > So bear with me, but would it be possible to switch /dev/crypto to be an > interface to an autocipher engine where both OpenSSL and NaCl ciphers could > be supported via e.g. /etc/autocipher.conf and then change all crypto-enabled > apps to use /dev/

Re: Can you subscribe to the PF mailing list? I can't

2009-04-09 Thread Matthew Dempsky
On Thu, Apr 9, 2009 at 2:35 PM, Bob Beck wrote: >It's easy to work around if you put google's outbound mx blocks in nospamd table - > which is what I do here. > >Not everyone is willing to try to find what those are of course.. google doesn't > make is easy. Is this not a complete

Re: problem with multiport vlan with OpenBSD

2009-04-16 Thread Matthew Dempsky
On Thu, Apr 16, 2009 at 1:10 PM, RJ45 wrote: > I cannot use the same vlan name and I need an unique name because > I must runa a dhcp server on vlan. > If I have t ocreate a new vlanName for each vr1 vr2 and vr3 > how do I run a dhcpd on interface vlan100 ? I think what Henning is suggesting is

Question about pfkey_reply (from bgpd/pfkey.c)

2009-04-17 Thread Matthew Dempsky
In the first few error cases where pfkey_reply returns early, shouldn't the pending message still at least be read off the socket? E.g., right now (as far as I can tell), if a pfkey response packet ever has sadb_msg_errno set, that response will stay on the socket forever and be used for every futu

Re: ThinkPad T60 audible bell *very* loud

2009-04-21 Thread Matthew Dempsky
On Tue, Apr 21, 2009 at 9:18 AM, Marco Peereboom wrote: > *sigh* i am old school but i surely don't need the typewrite look and > feel. The stupid bell should be killed dead. Agreed. Turning off the keyboard bell is one of the standard customizations I do after every OpenBSD install.

Re: ftp-proxy IPSEC clients?

2009-04-24 Thread Matthew Dempsky
On Fri, Apr 24, 2009 at 12:17 PM, Cameron Schaus wrote: > I have an OpenBSD 4.4 firewall with some clients connecting via IPSEC. Some > clients have flows established to servers not on the local LAN, and these > clients are natted through the internet interface to access these servers. > It's a

Improving kernel crypto performance

2009-04-30 Thread Matthew Dempsky
I've been thinking of playing with improving the speed of OpenBSD's cryptography primitives. My tentative plans: - benchmark aes-ctr performance with current code vs. optimized assembly code (e.g., just hacking sys/crypto/rijndael.c to use optimized code); if no significant improvement, abort

Re: Improving kernel crypto performance

2009-04-30 Thread Matthew Dempsky
On Thu, Apr 30, 2009 at 11:53 AM, Ted Unangst wrote: > All your plans address making the crypto code faster, but I'm not sure > that's actually the slow point. That's possible, hence the first step of benchmarking to see if it helps at all. If not, I'll take a stab at improving something else fi

Re: Improving kernel crypto performance

2009-04-30 Thread Matthew Dempsky
On Thu, Apr 30, 2009 at 4:03 PM, Ariane van der Steldt wrote: >> - add new drivers that attach on specific CPUs and hook into the >> crypto framework to provide optimized implementations > > Even if it isn't faster, it may allow the cpu to do something else in > the meantime. That is a good thin

Re: Improving kernel crypto performance

2009-04-30 Thread Matthew Dempsky
On Thu, Apr 30, 2009 at 5:24 PM, Ariane van der Steldt wrote: > I think if you are going to differentiate on that level, you'll not get > it in the kernel. That's fine. This is a personal project primarily intended for my own benefit in learning more about hacking on the kernel. If it actually

Re: Improving kernel crypto performance

2009-04-30 Thread Matthew Dempsky
On Thu, Apr 30, 2009 at 6:53 PM, Marco Peereboom wrote: > listen to ted; he told you the real reason why it is slow. Ted said it's slow because of the context switches, but Theo confirmed that there are no context switches for the soft crypto code, which is what I'm interested in.

Re: Improving kernel crypto performance

2009-04-30 Thread Matthew Dempsky
On Thu, Apr 30, 2009 at 6:05 PM, Stuart Henderson wrote: > I think you may need to update binutils before you can try these > fastest implementations.. Why do you think that? I just successfully compiled Peter Schwabe's record setting AES implementations for the Core 2, Athlon 64, and Pentium 4

Re: Improving kernel crypto performance

2009-04-30 Thread Matthew Dempsky
On Thu, Apr 30, 2009 at 9:42 PM, Ted Unangst wrote: > If you turn on cryptodevallowsoft and run openssl speed -evp > aes-128-cbc, you can watch the crypto thread in the kernel soaking up > cpu. In order for the thread to be running, you're definitely context > switching to it. Oops, yeah, Marco

Re: Improving kernel crypto performance

2009-04-30 Thread Matthew Dempsky
On Thu, Apr 30, 2009 at 10:18 PM, Theo de Raadt wrote: > Again, you have not said what you want to do. Er, sorry, I thought that email applied regardless. > Do you want the kernel to do crypto faster, or do you want userland to > do crypto fast. The kernel to do crypto faster, hence the email s

Intel DG45ID on-board Ethernet not support

2009-05-02 Thread Matthew Dempsky
I installed the latest OpenBSD snapshot onto my newly assembled computer and discovered the motherboard's on-board Ethernet controller is not supported. Relevant line from dmesg seems to be: "Intel ICH10 R BM LF" rev 0x00 at pci0 dev 25 function 0 not configured I tried quickly hacking if_em

Re: Using ospfd to establish default routes with two outgoing connections

2009-05-07 Thread Matthew Dempsky
On Thu, May 7, 2009 at 1:47 PM, carlopmart wrote: > Which is that sysctl param Stuart?? net.inet.ip.multipath See http://www.openbsd.org/faq/faq6.html#Multipath

Re: Improving kernel crypto performance

2009-05-08 Thread Matthew Dempsky
On Thu, Apr 30, 2009 at 11:29 AM, Matthew Dempsky wrote: > - benchmark aes-ctr performance with current code vs. optimized > assembly code (e.g., just hacking sys/crypto/rijndael.c to use > optimized code); if no significant improvement, abort I didn't have the time to devote to t

Re: Improving kernel crypto performance

2009-05-08 Thread Matthew Dempsky
On Fri, May 8, 2009 at 12:37 AM, Matthew Dempsky wrote: > The eBACS project[1] > times a bunch of different algorithms and implementations on a bunch > of different CPUs. [1] http://bench.cr.yp.to

ath(4) kernel panic on Acer Aspire One

2009-05-11 Thread Matthew Dempsky
I just installed the latest OpenBSD/i386 snapshot on my Aspire One, and if I run "ifconfig ath0 scan", it results in a kernel panic. Also worth pointing out, if I touch the touchpad at all during the installer, it results in a few lines of "pckbcintr: no dev for slot 1". This also seems to have t

Re: ath(4) kernel panic on Acer Aspire One

2009-05-11 Thread Matthew Dempsky
On Mon, May 11, 2009 at 8:34 PM, Matthew Dempsky wrote: > I just installed the latest OpenBSD/i386 snapshot on my Aspire One, > and if I run "ifconfig ath0 scan", it results in a kernel panic. Doh, just found in the archives that this is a known issue. I couldn't find men

Re: promiscuous mode

2009-05-19 Thread Matthew Dempsky
On Tue, May 19, 2009 at 1:03 PM, Fortunato wrote: > Thanks, tcpdump does it alright, but I'd like to have promiscuous mode on > without running tcpdump in the background if possible. The interfaces are put into promiscuous mode automatically when there's something that needs them to be. Otherwi

Re: List of old forked or frozen code like apache that needs cleanup?

2009-06-03 Thread Matthew Dempsky
On Wed, Jun 3, 2009 at 4:45 PM, Paul M wrote: > Gosh, when was vi obsoleted. Fri Feb 25 19:08:45 2000 UTC, according to http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/mg/Makefile :)

Re: Translating dst_port (but not dst_addr) with PF?

2009-06-15 Thread Matthew Dempsky
On Mon, Jun 15, 2009 at 2:52 PM, Jason Dixon wrote: > One of our internal customers asked me to setup a bypass rule for some > outbound SMTP tests so that they could send to a specific high port > (e.g. 60025) and have it redirect to port 25 on the same target. You can abuse the bitmask pool flag

Caps Lock key lags USB input for about a second under X

2009-06-29 Thread Matthew Dempsky
On my desktop, whenever I press the Caps Lock key while using X, all USB input is lagged for about a second. The Caps Lock light on my keyboard does not change state until after this second, and all other subsequent key presses and/or mouse movements are not registered until after either. XXXxxXX

Re: Caps Lock key lags USB input for about a second under X

2009-06-29 Thread Matthew Dempsky
On Mon, Jun 29, 2009 at 9:01 PM, Matthew Dempsky wrote: > On my desktop, whenever I press the Caps Lock key while using X, all > USB input is lagged for about a second. The Caps Lock light on my > keyboard does not change state until after this second, and all other > subsequent key

Re: Caps Lock key lags USB input for about a second under X

2009-06-30 Thread Matthew Dempsky
uot;disable pckbd" is a sufficient workaround to the problem. However, seeing as the console is able to handle having both pckbd0 and ukbd0 without Caps Lock problems, I would expect X to be able to as well. On Mon, Jun 29, 2009 at 9:04 PM, Matthew Dempsky wrote: > On Mon, Jun 29, 2009 at 9:

Re: delegation-only added in 3.5 and removed in 4.5 a few months ago.

2009-07-10 Thread Matthew Dempsky
On Fri, Jul 10, 2009 at 7:19 AM, Daniel Ouellet wrote: > Thanks for the answer and the details. But Verisign wasn't the only one doing > it > based on feedback on the net. But I could be wrong. Anyway, nice to know it's > getting better. Yeah, there are other TLDs that still have wildcards (e.g.,

Re: fdisk flag bootable partition during install

2012-04-24 Thread Matthew Dempsky
On Tue, Apr 24, 2012 at 08:14:19PM +0200, Alexander Hall wrote: > You do not flag which "to use". Multiple A6 entries brings problems > since you get multiple disklabels. Perhaps it's worthwhile for fdisk to sanity check for errors like this before writing out an MBR? Index: cmd.c ===

Re: Bernstein puts qmail in public domain

2007-11-30 Thread Matthew Dempsky
(Ugh, I wish I had noticed this message a few minutes earlier.) On 11/29/07, Tobias Weisserth <[EMAIL PROTECTED]> wrote: > I just wanted to point out that D.J. Bernstein has put qmail in public > domain. I'm not implying anything but wouldn't it be a perfect opportunity > to get rid of sendmail (G

Replace sendmail with qmail?

2007-11-30 Thread Matthew Dempsky
Dan Bernstein has placed qmail 1.03 into the public domain (see http://cr.yp.to/qmail/dist.html). Is there any interest in replacing sendmail with it to remove another component from the src/gnu/ hierarchy?

Re: Replace sendmail with qmail?

2007-11-30 Thread Matthew Dempsky
On 11/30/07, Peter Hessler <[EMAIL PROTECTED]> wrote: > That being said, its really easy to install qmail yourself and have it > replace the in-tree sendmail (see mailer.conf). Right, and maybe for a future OpenBSD release you could swap the placement of sendmail and qmail in that sentence. :-) T

Hardware recommendations for OpenBSD carp router/firewall machines

2007-12-06 Thread Matthew Dempsky
Does anyone have recommendations on server hardware for setting up a redundant OpenBSD firewall? Right now our network handles several million HTTP requests per day, and we expect that to continue growing. I expect a simple pair of Dell rackmounted servers should handle this easily, but I thought

Re: Hardware recommendations for OpenBSD carp router/firewall machines

2007-12-07 Thread Matthew Dempsky
On 12/7/07, Bob Beck <[EMAIL PROTECTED]> wrote: > I run an awful lot of simple pairs of Dell Rackmounted servers. (as > well as hp, ibm. etc.) I've done this with dell 950's, 1650, 1750, > 1850, and 1435's - lately I buy 1435's... Awesome, we actually have two spare 1435s that we decided

Re: Real men don't attack straw men

2007-12-10 Thread Matthew Dempsky
On 12/10/07, Jacob Yocom-Piatt <[EMAIL PROTECTED]> wrote: > "claiming products that use binary blobs and GPL-ed code are more free > than BSD or ISC stuff is about the dumbest thing i've heard on this list > lately, and there's plenty of retarded statements that circulate here. > the pot calling th

pfsync not closing TCP state?

2007-12-12 Thread Matthew Dempsky
I have two OpenBSD 4.2 machines, box1 and box2. They have public IPs 1.1.1.1 and 1.1.1.2 and a direct Ethernet connection with 10.88.0.1 and 10.88.0.2. They share a carp interface configured for 1.1.1.5 (box1 is the master; preempt is enabled), and pfsync is configured on the direct Ethernet. bo

Re: no 4.2-stable package updates??

2007-12-12 Thread Matthew Dempsky
On 12 Dec 2007 14:54:59 -0800, Unix Fan <[EMAIL PROTECTED]> wrote: > Why even have a -CURRENT ports tree? Um, to have somewhere for new and updated ports to go?

Re: pfsync not closing TCP state?

2007-12-12 Thread Matthew Dempsky
On 12/12/07, Matthew Dempsky <[EMAIL PROTECTED]> wrote: > box1's PF state changes to TIME_WAIT, but > box2's stays in ESTABLISHED. Sorry, I had confused my pftop terminals: box2's PF state changes to TIME_WAIT, but box1's stays in ESTABLISHED. (I still exp

Re: pfsync not closing TCP state?

2007-12-12 Thread Matthew Dempsky
On 12/12/07, Matthew Dempsky <[EMAIL PROTECTED]> wrote: > Sorry, I had confused my pftop terminals: box2's PF state changes to > TIME_WAIT, but box1's stays in ESTABLISHED. (I still expect them to > have both changed to ESTABLISHED, however.) Ugh... I still expect the

Re: Real men don't attack straw men

2007-12-13 Thread Matthew Dempsky
On 12/13/07, Marco Peereboom <[EMAIL PROTECTED]> wrote: > On Thu, Dec 13, 2007 at 11:51:37AM -0500, Richard Stallman wrote: > > If such an issue arises for a GNU package, and people think it is not > > doing the most useful thing, I will look at the issue and then if > > necessary discuss it with t

Re: Real men don't attack straw men

2007-12-15 Thread Matthew Dempsky
On 12/15/07, Jeroen Massar <[EMAIL PROTECTED]> wrote: > Should I take this that you don't endorse Debian, and thus also Ubuntu > and other deriviatives, either, as you are now stating that these > contain 'recipes for non-free software'? Correct. RMS does not recommend Debian or Ubuntu.

Re: [Fwd: Open-Hardware]

2008-01-07 Thread Matthew Dempsky
On 1/7/08, Marco Peereboom <[EMAIL PROTECTED]> wrote: > Yeah doing your best really counts. Kind of a Dr. that did his best but > killed the patient. HE TRIED!! The consequences of a doctor making a mistake while trying to save a patient's life are more severe than those of a gNewSense developer

Re: Real men don't attack straw men

2008-01-07 Thread Matthew Dempsky
On 1/7/08, Craig Skinner <[EMAIL PROTECTED]> wrote: > On Mon, Jan 07, 2008 at 06:31:11AM -0500, Richard Stallman wrote: > > > > If I understand that correctly, it means that OpenBSD does distribute > > binary-only firmware, which isn't free. This would be a second reason > > why I should not endor

Re: Real men don't attack straw men

2008-01-07 Thread Matthew Dempsky
On 1/7/08, Marco Peereboom <[EMAIL PROTECTED]> wrote: > We only want an apology Richard. You said things about our project that > were very unfriendly and not true. Apologize and admit you were wrong > and I promise I'll leave this alone. So if Richard sends an email stating "I am sorry for usin

Re: rtorrent + OpenBSD = freeze

2008-02-19 Thread Matthew Dempsky
On 2/19/08, Brian <[EMAIL PROTECTED]> wrote: > Maybe it's time folks start posting their dmesg. Since I can recall rtorrent causing similar symptoms on my OpenBSD firewall as well, I'll post mine too: OpenBSD 4.0 (GENERIC) #1107: Sat Sep 16 19:15:58 MDT 2006 [EMAIL PROTECTED]:/usr/src/sys/arc

Re: OT: fully interconnect switches: interesting problem

2008-02-24 Thread Matthew Dempsky
On 2/24/08, bofh <[EMAIL PROTECTED]> wrote: > Probably broadcast storm. Fastest way to fix the problem - single > connect your switches, and don't loop the last back to the first. He explained in his post that the multiple connections were to avoid single points of failure.

Re: OpenBSD as DNS Server - Benchmarked by ISC.. and it's well... :-(

2008-02-25 Thread Matthew Dempsky
On 2/25/08, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > The ISC made a benchmark of BIND on serval platforms. > OpenBSD outperforms Windows but is the slowest (compared to Linux, fBSD, > nBSD and Solaris!) of the other tested OSs. :-/ Yeah, comparatively, OpenBSD's performance isn't so hot in

Re: kernel naming proposal

2008-02-25 Thread Matthew Dempsky
On 2/25/08, Don Jackson <[EMAIL PROTECTED]> wrote: > Users who wanted to > run the mp kernel could arrange to change this link in their install > process (eg their install.site script) Or you can just run echo "set image bsd.mp" > /etc/boot.conf after installation.

Re: How does (AMD64) OpenBSD SMP support compare to Debian (Stable)?

2008-02-25 Thread Matthew Dempsky
On 2/25/08, Jon <[EMAIL PROTECTED]> wrote: > With something like: > > [cat /proc/cpuinfo on a 4 x Xeon 3.0 GHz box running Linux] What exactly do you want to hear? OpenBSD has SMP support, and I've personally run it on a few machines with two dual-core amd64 processors without problems.

Re: kernel naming proposal

2008-02-25 Thread Matthew Dempsky
On 2/25/08, Tasmanian Devil <[EMAIL PROTECTED]> wrote: > /bsd (the kernal in use, whichever it is) is a copy of one of > them then, easy to identify by its file size. For me that's easier > than with a link. Examining output of "uname -v" is probably even easier. :-)

Re: How does (AMD64) OpenBSD SMP support compare to Debian (Stable)?

2008-02-25 Thread Matthew Dempsky
(Please include misc@openbsd.org in your reply so others can followup as well.) On 2/25/08, Jon <[EMAIL PROTECTED]> wrote: > How good is the support? I want to know how well OpenBSD takes advantage > of multiple processors compared to how well Linux does (running > multi-threaded processes). Op

Re: spamd and freemail hosts

2008-02-26 Thread Matthew Dempsky
On 2/26/08, Stuart Henderson <[EMAIL PROTECTED]> wrote: > imo this problem is less likely to be seen on a very large mail system, > since enough mail is going through that most of the common-queue pool is > likely to stay whitelisted by spamlogd, but I think it can sometimes be > a problem on s

ip(4) still says IP_MAX_MEMBERSHIPS is 20

2008-03-13 Thread Matthew Dempsky
ip(4) says that IP_MAX_MEMBERSHIPS is 20, but it was bumped to 4095 in rev 1.73 of netinet/in.h. Index: ip.4 === RCS file: /cvs/src/share/man/man4/ip.4,v retrieving revision 1.26 diff -p -u -r1.26 ip.4 --- ip.431 May 2007 19:1

dvmrpd dies when I add a vlan interface

2008-03-13 Thread Matthew Dempsky
I have an OpenBSD 4.2-stable machine with the following interfaces (it's gross, I know :(): * bge1: connected to a OpenBSD 4.3 machine via leased line * em1: connected to network switch * vlan0: vlan on em1 * gif0: tunnel to the 4.3 machine * bridge0: bridging vlan0 and gif0 bge1, em1,

Re: dvmrpd dies when I add a vlan interface

2008-03-13 Thread Matthew Dempsky
/include/netinet/ip_mroute.h, so I'm not certain that will actually work. On 3/13/08, Matthew Dempsky <[EMAIL PROTECTED]> wrote: > I have an OpenBSD 4.2-stable machine with the following interfaces > (it's gross, I know :(): > > * bge1: connected to a OpenBSD 4

Re: ip(4) still says IP_MAX_MEMBERSHIPS is 20

2008-03-14 Thread Matthew Dempsky
On 3/14/08, Jason McIntyre <[EMAIL PROTECTED]> wrote: > fixed, thanks (the change happened in -r1.74 though). D'oh, you're right. :-)

Re: dvorak key layout

2008-03-15 Thread Matthew Dempsky
On 3/15/08, Timothy Wilson <[EMAIL PROTECTED]> wrote: > Maybe this is new in 4.3 or 4.2? I don't have this option in 4.1. I > guess I should upgrade :) No, Theo added it in 1996. :-) http://www.openbsd.org/cgi-bin/cvsweb/src/etc/rc.diff?r1=1.11&r2=1.12&f=h

Kernel doesn't reclaim unused interface indexes?

2008-03-19 Thread Matthew Dempsky
OpenBSD's currently limited to using interfaces with an index < 32 for multicast, and on one of my machines I created and destroyed enough virtual interfaces during experimentation that some of the interfaces currently in use and that I would like to route multicast traffic to have indexes >= 32.

Re: Kernel doesn't reclaim unused interface indexes?

2008-03-20 Thread Matthew Dempsky
On 3/20/08, Claudio Jeker <[EMAIL PROTECTED]> wrote: > On Wed, Mar 19, 2008 at 04:59:40PM -0700, Matthew Dempsky wrote: > > OpenBSD's currently limited to using interfaces with an index < 32 for > > multicast, and on one of my machines I created and destroyed e

Should state rules on enc0 default to if-bound?

2008-03-24 Thread Matthew Dempsky
The enc(4) man page states ``all rules on the enc interface should explicitly set `keep state (if-bound)'.'' Defaulting stateful rules to if-bound on the enc0 interface seems like a good candidate for OpenBSD's reasonable defaults policy. Looking at pfctl/parse.y, the main issue in implementing t

Bad link on /tshirts.html

2008-09-05 Thread Matthew Dempsky
It looks like there was a bad copy/paste when adding the 4.4 T-shirt to /tshirts.html: Index: tshirts.html === RCS file: /cvs/www/tshirts.html,v retrieving revision 1.87 diff -p -u -r1.87 tshirts.html --- tshirts.html4 Sep 200

[patch] bgpd.conf(5) gives wrong path for isakmpd's pubkey

2008-10-02 Thread Matthew Dempsky
r1.295 of src/etc/rc changed isakmpd's pubkey path to /etc/isakmpd/local.pub Index: bgpd.conf.5 === RCS file: /cvs/src/usr.sbin/bgpd/bgpd.conf.5,v retrieving revision 1.88 diff -p -u -r1.88 bgpd.conf.5 --- bgpd.conf.5 22 Mar 2008 08:3

Re: DNS confusion about www.oorexx.org

2008-10-02 Thread Matthew Dempsky
On Thu, Oct 2, 2008 at 8:55 AM, Jack Woehr <[EMAIL PROTECTED]> wrote: > The website http://www.oorexx.org 9 times out of ten does not resolve for > me. I think they setup a CNAME record for *.oorexx.org pointing to 208.34.240.200 instead of an A record. The planetdomain.com servers respond to A a

Re: DNS confusion about www.oorexx.org

2008-10-02 Thread Matthew Dempsky
On Thu, Oct 2, 2008 at 11:36 AM, Matthew Dempsky <[EMAIL PROTECTED]> wrote: > Probably what's happening is your cache is ending up with a CNAME > record for www.oorexx.org, I just noticed that queries for www.oorexx.org yield the bogus CNAME record as well, so that's p

  1   2   3   >