Hello all,
I would like to ask, if it's possible to filter incoming and outgoing
announcements from neighbors in the same area (in the same way as in bgpd)?
If it isn't implemented, maybe somebody knows, if it will be possible in
future releases ospfd?
I'm using ospfd from OpenBSD 5.1.
Hi Misc,
I have two routers. On external interfaces I've eBGP session with ISPs.
On internal interfaces, there is iBGP session, carp and pfsync. I'm
trying to set traffic queuing, but I've problem, if packets leaves
network by one router and replies returns by second router (there is
state created
2013/6/7 Sven Gaerner :
> I installed OpenBSD 5.3 i386 on my HP nc6400 notebook. Now when booting
> the system, the kernel prints
> acpitz3: critical temperate exceeded (3290 C): shutting down.
>
> This temperature (3290 C) is shown after starting a system that was
> powered off for several hours
2013/6/7 Sven Gaerner :
> Thanks, I guessed it's an ACPI problem and not an OpenBSD one. But I
> thought one can tell OpenBSD to ignore that useless values.
I stuggle with HP crap at work - pretty recent and expensive one.
FreeBSD just hangs hard during bootup. There is an "official" solution
-
> The HP machines tend to have very complicated AML with heavy SMI and
> EC dependencies. Another vendor which leans this way sometimes is
> Sony.
>
> Some machines do have AML bugs, and the Microsoft/Intel ACPI code
> bases certainly have workarounds for those problems.
>
> Some machines simply u
Hello Marios
DF bit shouldn't be cleared, because it's necessary for PMTUD (Path MTU
Discovery). There is also nothing amazing, that packets has DF flag set
(it depends on operating system)
> Hello misc@,
>
> I currently have a VM running as a NAT64 gateway.
> It is running OpenBSD 5.3 with the
Hello,
If You are using only redirections, source host will receive SYN-ACK
from 192.168.1.70, but there was not previously SYN to this address, so
source host will send TCP Reset. Solution may be:
pass in on $int_if proto tcp from $int_if:network to any port 80 rdr-to
192.168.1.70
pass out on $i
Hello!
I'm trying to build a redundant IPSEC VPN concentrator.
What have I done by now:
* I have a working CARP. Verified from each side. 1-2 pings lost.
Works as expected.
* I have a working iked deployment. Test client can connect, sees
internal network as expected.
* I have a working pfsync.
Things look like that:
When cluster is up and client is connected:
1/ output of "ipsecctl -v -sa" is perfectly in sync between nodes.
2/ output of "pfctll -sstates" is sync between nodes within 1s delay
(as expected)
3/ output of "ikectl sh sa" is *not* in sync between nodes. Passive
node has nul
I have some more info (this time from physical machines):
After a switchover I can see incoming flow on enc0 on the new master,
and it IS decoded correctly. It is just not pushed out into the
protected network.
Additionally, the replay counters seem to be all in sync except for
one - return tunne
Problem with service working after cross-pinging the other sides seems like
some stateful firewall that needs a nudge from inside.
--
Paweł Kraszewski
First: as others mentioned, tcpdump isn't suited for output rotation
via tools like newsyslog. Even if you manage to restart it with new
log, you'll probably skip some packets. You might implement some sort
of overlap (you start tcpdump to a new file, *then* you kill the old
one and write a tool to
Well, I installed 7.0 (*not* 7.1) on my desktop (old Haswell mobo) -
it rendered computer unstartable (not unbootable). Mobo hung so hard
it couldn't even enter the BIOS. I think I was lucky I didn't install
it on my PCIe-card NVMe... It would be shitty to need it hot-plugged
to a working computer
w if dmesg, or ktrace output is can be helpful... 1.4 fails almost
the same way, 1.3 dumps a core. 1.3-linux seems to work, but fails with OOM
on attempting to allocate a 32k array, and ulimit -v is ~512Mb
This is with latest ports for JDKs and redhat-base.
Thanks !
--
With best of best regards
Pawel S. Veselov
Hi,
I was wondering if the 3ware 8006-2LP is supported in 4.2.
The http://www.openbsd.org/i386.html page only lists 5x00, 6x00 and 7x00
as supported devices, but the man page says that 8000 is supported as well.
(just trying to find a cheap SATA hardware raid card...)
Thanks !
Pawel.
On Nov 16, 2007 6:16 PM, Douglas A. Tutty <[EMAIL PROTECTED]> wrote:
> On Fri, Nov 16, 2007 at 08:15:22PM -0500, System Administrator wrote:
> > On 16 Nov 2007 at 16:36, Pawel Veselov wrote:
>
> > > (just trying to find a cheap SATA hardware raid card...)
> >
&g
arguments into trace stream ?
Thanks,
Pawel.
P.S. Not sure this is the right alias for this kind of discussions...
Dunno if I'm doing something wrong, but I'm shutting it down and
trying an NVidea based one instead.
Thanks,
Pawel.
OpenBSD 4.2 (GENERIC) #375: Tue Aug 28 10:38:44MDT 2007
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: AMD Athlon(tm) 64 X2 Dual Core Processor 4800+ (&quo
c 29, 2007 4:32 AM, Peter Strvmberg <[EMAIL PROTECTED]> wrote:
> On 28 Dec 2007 at 21:29, Pawel Veselov wrote:
>
> > Hi,
> >
> > Just had some experience installing 4.2 on ASUS m2a-vm... Wasn't
pleasant.
>
> Try -current, it will work better, with some gotchas
bad unit? Any feedback is greately appreciated.
Here is the dmesg, including the burning session.
Thanks!
Pawel.
OpenBSD 4.2 (GENERIC.MP) #252: Tue Aug 28 10:53:04 MDT 2007
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: AMD Athlon(tm) 64 X2 Dual Core Processor 4800
er had problem writing with that unit at top speed as IDE
Well, here is the cdrecord dvd, at speed#1, no better. Failed after 27Mb.
Thanks!
Pawel.
[EMAIL PROTECTED]/iso# nice -18 cdrecord.dvd -dev=/dev/rcd0c:0,1,0
-speed 1 -eject -v -fs=250M /home/vps/iso/80days.iso
cdrecord.dvd: No write mode s
> > I actually had this unit for long time, connected as an IDE, never had
> > any problems with it.
> > I'm putting it in an enclosure because it started to overheat inside
> > the case with that new
> > hardware I got recently.
>
> Perhaps the enclosure:
> 1. allows the drive to overheat. D
hanks,
Pawel.
--
With best of best regards
Pawel S. Veselov
Hi,
The processing filter for the printer is a pre-compiled Linux binary.
The GPL license is because of Brother CUPS and LPD drivers.
Thanks,
Pawel.
On 10/16/07, Predrag Punosevac <[EMAIL PROTECTED]> wrote:
>
> Pawel Veselov wrote:
> > Hello,
> >
> > I spent
ddr { AF_INET, 127.0.0.1:48830 }
14953 nslookup GIO fd 20 wrote 34 bytes
"\M-p\M-T\^A\0\0\^A\0\0\0\0\0\0
z\^B2y\^Cnet\0\0\^A\0\^A"
Where can it possible be getting this port from?
Thank you,
Pawel.
On Sun, 1 Feb 2015 15:06:17 -0800
"Pawel S. Veselov" wrote:
> Running latest amd64 5.6 (p16, just upgraded to it), for some reason
> my nslookup keeps trying to use port 48830 to connect to the NS
> server. gethostbyname() works just fine, all the apps resolve the
> hostnam
iel Seuffert is.
PS. This e-mail is for Theo. The only reason I'm sending it to the list
is to publicly support Daniel, who is doing a great job for BSD systems
in many areas. Feel free not to respond.
--
Pawel Jakub Dawidek http://www.wheel.pl
[EMAIL PROTEC
e
of evilness ever is fanaticism (religious, political and now what?
software?).
--
Pawel Jakub Dawidek http://www.wheel.pl
[EMAIL PROTECTED] http://www.FreeBSD.org
FreeBSD committer Am I Evil? Yes, I Am!
[demime 1.01d removed
On Mon, Mar 19, 2007 at 06:04:12PM +0100, Ingo Schwarze wrote:
> Hi Pawel,
>
> Pawel Jakub Dawidek schrieb am Mon, Mar 19, 2007 at 03:02:47PM +0100:
> > On Fri, Mar 16, 2007 at 12:38:05PM -0600, Theo de Raadt wrote:
>
> >> So isn't it rather hypocritical to h
but some would go to small networks who do like
knowing that their systems are infected or are used for hacking.
-- Pawel.
Nick ! wrote:
On 4/1/07, Pawel S. Veselov <[EMAIL PROTECTED]> wrote:
> On 4/1/07, Sean Malloy <[EMAIL PROTECTED]> wrote:
>> I just installed OpenBSD on my server in early March 2007. I am
>> running an Apache web server out of my house. I am tracking 4.0 STABLE
>&
ks like
Mandatory Access Control in FreeBSD where policy access to objects, that
are already locked and protected against races, eg. the kernel first
opens a file, locks it and pass a pointer to a locked vnode to the
policy. Then we can be sure no change can be made to this file that will
confuse
try if '-isystem/usr/local/include' works first, -I is bad
Han Boetes wrote:
Mikulas Patocka wrote:
It is possible to add -I/usr/local/include -L/usr/local/lib to compiler
flags, I even distributed links with that for some time, and it turned out
that on other unix systems -L/usr/local/lib
Yeah, otherwise GNU configure will stick the CPPFLAGS/CFLAGS before the
"-I"s from the
Makefiles, and source code often picks up the includes from the
/usr/local/include (e.g.) instead
of their own, and that usually breaks things
Han Boetes wrote:
Pawel S. Veselov wrote:
Han Bo
ISP needs your 30 bucks a month more than they
need anything else.
[ skipped ]
Thanks,
Pawel.
P.S. This thread needs a new name
P.P.S. lol, no one from this list works for an ISP ? :)
ion identifier.
If I were an ISP admin, and I found out there is somone requesting a new
IP every minute (or every hour for that matter), the first thing I'd do is
I'd start looking how to prevent it.
[ skipped ]
Thanks,
Pawel.
Bye.
--
Pawel S. Veselov [vps], Sun Microsystems, In
http://www.squirrelmail.org/
May be not easiest to install, because of specific PHP requirements,
but manageable. Haven't heard about security problems much, and also
don't really know of any good alternative.
Thanks,
Pawel.
Eric Johnson wrote:
Which web mail package is easiest
Hi,
dunno if that was mentioned here, but http://www.gnetcanada.com/ makes
nice boxes,
that are generally laptops with no screens. I have one of their older
boxes at P3 level,
works just great. Their current boxes are VIA C3(tm)/ VIA Eden(tm) 1.0ghz
EBGA embedded processor
-- Pawel
gt; tricks.
>
I think the .bss is guaranteed to be zero filled upon startup. At least
in OpenBSD.
But, of course, any library can screw up errno, if preloaded with
$LD_PRELOAD
or just linked in.
-- Pawel.
[demime 1.01d removed an attachment of type application/gzip which had a name
of errno_test.tar.gz]
man -s3 getifaddrs ?
-- Pawel.
Girish Venkatachalam wrote:
Dear friends,
I know this question sounds basic but it is not.
How to programmatically determine the IP address of an interface?
(Programmatically means using C of course :-)
getsockname(2) is supposed to work but it doesn&#
that enabling these kind of RAIDs is of
little use, since they put almost the same strain on the CPU, making
it run controller's microcode.
Why Sun picks that kinda hardware for it's servers, is another kinda
question But the controller manufacturers play evil here...
Thanks,
Pawel.
Hi Jan,
Jan Stary wrote:
[ skipped ]
*Usually* (I know) it finishes OK, and the *ogg is a valid ogg stream.
In this failing case, it *also* is a valid ogg stream, but much
shorter than usual.
So I suppose the background nc dies before I try to kill it myself
(that is, after sleeping for $LENGT
stan wrote:
On Tue, Oct 24, 2006 at 11:11:43PM -0700, Pawel S. Veselov wrote:
Daniel Ouellet wrote:
stan wrote:
That's actually not a given IFIRK Sun says the RAID on the 2100's
is "Windows only".
Why Sun picks that kinda hardware for it's
o 0.0.0.1 entries for the routing information.
I would guess that for the "host" route (ipv4 only), the only necessary
knowledge it the interface through which the packet needs to be sent. At least
in case of p2p interfaces. So the "gateway" is left at 0/0. Netstat, perhaps
unfortunately, prints 0/0 as "default".
>I am very confused.
-- Pawel.
cally insert the route.
I repeated switching back to sk0 with exactly the same results, nothing
would work until I void the inet address on rl0, and the routes will
not delete when rl0 is down and not insert when sk0 is up...
Thanks !
Pawel.
o noone will be able to save them
earned scores.
Am I missing something ?
humble thanks !
Pawel.
the better way to do this is to put 'bar()' in another shared object, and
dlopen() it before the "module" with the RT_GLOBAL flag.
I put the modified stuff in http://manticore.2y.net/temp/callbacks
thanks, Pawel.
On Wed, Nov 29, 2006 at 10:36:20AM -0600, Dale Rahn wrote:
On Wed, Nov 29, 2006 at 11:28:25PM +, Brian Candler wrote:
>On Wed, Nov 29, 2006 at 09:16:54AM -0800, Pawel S. Veselov wrote:
>> the better way to do this is to put 'bar()' in another shared object, and
>> dlopen() it before the "module" with the RT_GLOBAL f
I got new hard drive. Western Digital 200gb on sata. I connected it to
my pc and I run disklabel
then I run newfs and after that I mounted it and I saw
/dev/wd1a 183G7.8T347G 4602%/mnt/wd1
so I was traying to run fsck -f /dev/wd1a and what I saw? is :
`--# fsck_ffs -fy /dev/wd1
I forgot to add dmesg
OpenBSD 3.8-stable (ROBAL) #0: Tue Nov 1 00:08:26 EST 2005
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/ROBAL
cpu0: Intel(R) Pentium(R) 4 CPU 2.40GHz ("GenuineIntel" 686-class) 2.40 GHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFL
ok i fixed the problem with that harddrive and fsck I just had toi
change disklabel and now everything is working just fine. thx for tip
sdmag.org
Thank you!
--
Pawel Jakub Dawidek
EuroBSDcon Foundation
52 matches
Mail list logo
