Re: XenServer 5 with OpenBSD

2008-12-09 Thread Stephan A. Rickauer
On Mon, 2008-12-08 at 14:27 -0600, Adam Douglas wrote: > The biggest question is OpenBSD on XenServer 5 Enterprise consider > production ready even if the errors cannot be resolved? OpenBSD is, Xen isn't.

CARP under heavy load

2008-12-12 Thread Stephan A. Rickauer
carp ads over a dedicated link? (Almost) any comments welcome. ;) -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52 Winterthurerstrasse 190

Re: CARP under heavy load

2008-12-12 Thread Stephan A. Rickauer
pecify *one* dedicated link for all the other CARP interfaces? We do have a dedicated link for pfsync, though. -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich

Re: CARP under heavy load

2008-12-12 Thread Stephan A. Rickauer
er the impression one still needs to do peering on the same link as the carp interfaces sit. Can one use the same 'carppeer ded.ica.ted.ip' statement for all carp interfaces altogether (and the other dedicated peer IP on the other)? This would come in handy. -- Stephan A. Rickauer

Re: OT: Granting access from DMZ servers to iSCSI network

2008-12-12 Thread Stephan A. Rickauer
to control traffic > content) configured as a bridge between DMZ servers and iSCSI servers .. Sounds reasonable. Don't know about the snort part, but you can also use pf on that bridge ... -- Stephan A. Rickauer --- Institute

Re: CARP under heavy load

2008-12-12 Thread Stephan A. Rickauer
On Fri, 2008-12-12 at 17:32 +0100, Felipe Alfaro Solana wrote: > > What's the point on using CARP to send advertisements over a dedicated > link? The dedicated link is typically a cross-over cable (i.e. used > for pfsync) and hence, in case of a switch port failure (or cable > failure), CARP won'

Re: OT, .. but eCommerce?

2008-12-12 Thread Stephan A. Rickauer
On Fri, 2008-12-12 at 09:33 -0600, L. V. Lammert wrote: > A friend of mine is trying to get a small cCommece site up on one of our > 4.4 servers, .. he is trying to get eCommerce Templates running but is > having problems with curl & it looks like others are ahead. > > This seems that is something

Re: CARP under heavy load

2008-12-16 Thread Stephan A. Rickauer
ulate that very easily. However, I do remember that interupts were >12000/s, which was mainly due to em0 and em2 forwarding the traffic (~6000/s each). The cpu load was ~70% - 80% (it's a Pentium 4, 2.66GHz). The bandwidth utilized was a

ipv6/pf/relayd/totd

2008-12-16 Thread Stephan A. Rickauer
:fe2e:251b.13239 > 2001:620:10:1400::4a7d:2768.80 but it's still not seen by relayd. Can someone with some degree of patience shed some light on my dark spots? -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +4

Re: ipv6/pf/relayd/totd

2008-12-16 Thread Stephan A. Rickauer
On Tue, 2008-12-16 at 16:32 +0100, Dirk Mast wrote: > Hi, have you already seen this great post on undeadly? Yes, I have. Without it, I wouldn't have come so far ;)

Re: OpenBSD 4.4 amd64 bsd.mp can't detect 4GB memory

2008-12-16 Thread Stephan A. Rickauer
On Mon, 2008-12-15 at 07:39 -0800, Chris Kuethe wrote: > no. the "config" program can do this without a recompile. I also would like to learn how to do that since we have a couple of 'big' amd64 machines I could test on. Cheers, --

Re: synproxy issue

2008-12-17 Thread Stephan A. Rickauer
uests: > pass in log quick on $ext_if inet proto tcp to port http synproxy state > pass in log quick on $int_if inet proto tcp to port http modulate state I have no doubt that disabling synproxy fixes the issue. My question was rather rais

Re: ipv6/pf/relayd/totd

2008-12-17 Thread Stephan A. Rickauer
hey be interested in being ahead ... Anyhow, this is why I wanted to use ipv6-only clients behind an ipv4-to ipv6 relay (I know that we could just simply nat more private ipv4 addresses, but that is not an option right now). For sure OpenBSD brings all you need to do it - it's just that I am stuck

Re: Going OT Re: ipv6/pf/relayd/totd

2008-12-17 Thread Stephan A. Rickauer
On Wed, 2008-12-17 at 06:54 -0700, Diana Eichert wrote: > On Wed, 17 Dec 2008, Jeroen Massar wrote: > > > Stephan A. Rickauer wrote: > >> > >> If you knew something about the political structures of > >> SWITCH and of UZH you wouldn't recommend "ki

Re: ipv6/pf/relayd/totd

2008-12-17 Thread Stephan A. Rickauer
On Wed, 2008-12-17 at 11:11 +0100, Jeroen Massar wrote: > You are trying to solve the wrong problem with the wrong hammer. "I need to go the bus station. Do you know the way?" "If I were you, I wouldn't start from here." Sorry, but relayd is _exactly_ what can fix this issue, without being a hamm

Re: Soekris equivalent

2008-12-17 Thread Stephan A. Rickauer
On Wed, 2008-12-17 at 20:56 +0100, Marc Balmer wrote: > ALIX boards serve me well. See www.pcengines.ch. I can second that. Alix boards have served me as a robust drop-in replacement for Soekris while being cheaper at the same time (maybe not for non-Swiss customers, though).

Re: OpenBSD 4.4 amd64 bsd.mp can't detect 4GB memory

2008-12-17 Thread Stephan A. Rickauer
On Wed, 2008-12-17 at 14:52 -0500, Ted Unangst wrote: > On Tue, Dec 16, 2008 at 7:43 AM, C. Soragan Ong wrote: > > so let say put "set bigmem=1" into /etc/boot.conf will activate the bigmem? > > correct me if i am wrong, i am new with openbsd :) > > the only permanent way to set that is to change

Re: ipv6/pf/relayd/totd

2008-12-19 Thread Stephan A. Rickauer
srcid me.example.com dstid rmt.example.com > > flow from $me6 to $me6 type bypass > > flow from ::/0 to ff02::/16 type bypass > flow out from ff02::/16 to ::/0 type bypass > flow from ::/0 to fe80::/16 type bypass > flow out from fe80::/16 to ::/0 type bypass >

Re: ipv6/pf/relayd/totd

2008-12-19 Thread Stephan A. Rickauer
you need rtsol(d). > > One trick I picked up from ISC is if you want your client to be '::' then > set this in the hostname.if file: > > inet6 fe80:: > rtsol > .. and you'll get global scope addresses on that host that end in ::. Cool. Will try t

Re: CARP under heavy load

2008-12-23 Thread Stephan A. Rickauer
On Tue, 2008-12-23 at 08:13 +0100, Claudio Jeker wrote: > There is some initial code in -current that tries to avoid the system > entering livelock for extended times. It needs a lot of testing so maybe > you should try it out and report back. sure. Just send me the diffs... --

Re: CARP under heavy load

2008-12-23 Thread Stephan A. Rickauer
On Tue, 2008-12-23 at 09:15 +0100, Stephan A. Rickauer wrote: > On Tue, 2008-12-23 at 08:13 +0100, Claudio Jeker wrote: > > > There is some initial code in -current that tries to avoid the system > > entering livelock for extended times. It needs a lot of testing so maybe >

Re: Pflow and ifconfig

2008-12-28 Thread Stephan A. Rickauer
available on > the latest current version on openbsd. My question is how do I bring > my installation up to the newest stable release? Check out the FAQ: http://www.openbsd.org/faq/faq5.html#Flavors Cheers, -- Stephan A. Rickauer ---

set skip ignores interface group

2009-02-17 Thread Stephan A. Rickauer
o the same? (4.4-stable, amd64) Cheers, -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52 Winterthurerstrasse 190

Re: pfsync vs contrackd

2009-02-19 Thread Stephan A. Rickauer
On Thu, 2009-02-19 at 13:10 +0100, Mikel Jimenez wrote: > What are the limitations of contrackd? When I looked into it some moons ago, contrackd would only sync established tcp connections. -- Stephan A. Rickauer --- Institute

Re: Kernel static map entries and kernel options

2009-02-21 Thread Stephan A. Rickauer
On Thu, 2009-02-19 at 15:07 +1100, Linden Varley wrote: > Recently on some apache reverse proxy servers we have encountered the dreaded > This has occurred on OpenBSD 3.9 i386 and OpenBSD 4.0 amd64. I am unsure If you experience problems that have 'recently' occured on 3.9 and 4.0 your problems'

Re: OpenVPN server refuses connections

2009-03-04 Thread Stephan A. Rickauer
> /etc/openvpn/server.conf: > local 192.168.0.1 > /etc/openvpn/client.conf > remote 66.66.66.66 1194 ? -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich

Re: How do I monitor my PF based firewall?

2009-03-04 Thread Stephan A. Rickauer
sions (I use OpenBSD 4.4 - > stable and the included snmpd). Can you please give me a hint into the > right direction? As far as I remember, including a 'PF-MIB' into opensnmpd is on reyk@'s ever growing todo

Re: How do I monitor my PF based firewall?

2009-03-04 Thread Stephan A. Rickauer
On Wed, 2009-03-04 at 11:33 +0100, Falk Brockerhoff - smartTERRA GmbH wrote: > Am 04.03.2009 um 11:23 schrieb Lars Noodin: > > > It's probably simplest to start with pftop. > > After a first quick look pftop is a great tool for debugging und > manually monitoring firewall activity. But it seems t

Re: spamd handling multiple sending servers

2009-03-23 Thread Stephan A. Rickauer
Hi, On Mon, 2009-03-23 at 18:59 +1100, Mikel Lindsaar wrote: > I understand that spamd is tracking messages based on sender, receiver > and IP address, and then this can cause the problem. Spamd doesn't 'track messages'. All it does is to store a tupal of sender, recipient and IP address and quit

Re: might be slightly OT: `probability in PF'

2009-03-23 Thread Stephan A. Rickauer
On Sat, 2009-03-21 at 12:14 +0100, Henning Brauer wrote: > * jmc [2009-03-11 15:05]: > > so anyway, how are _you_ using probability? > > it's high on my list of useless features in pf I'd rather remove. > if anybody is actually using it, I'd like to hear about it. Once in a while a re-spot this

PKG_CACHE

2009-03-23 Thread Stephan A. Rickauer
What magic do I miss to cache packages in PKG_CACHE? Must be really obvious, but I can't spot it. # PKG_CACHE=/tmp # echo $PKG_CACHE /tmp # pkg_add -x nano Adding nano-2.0.7 # ls -l /tmp/ (empty) Thanks.

Re: spamd handling multiple sending servers

2009-03-23 Thread Stephan A. Rickauer
alled 'sloppy' mode ;) -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52 Winterthurerstrasse 190 Fax +41

Re: PKG_CACHE

2009-03-23 Thread Stephan A. Rickauer
export thanks, Paul. On Mon, 2009-03-23 at 16:49 +0100, Stephan A. Rickauer wrote: > What magic do I miss to cache packages in PKG_CACHE? Must be really > obvious, but I can't spot it. > > # PKG_CACHE=/tmp > # echo $PKG_CACHE > /tmp > # pkg_add -x nano > Add

Re: Live OpenBSD Bootable i386 CD

2009-04-20 Thread Stephan A. Rickauer
On Sun, 2009-04-19 at 19:04 -0400, Josh Grosse wrote: > I'll send you that also. It's a single shell script that converts a disk > based system into a bootable ISO. (Almost, one still needs to build the > custom kernels in a separate step; it's a separate step because I only build > them once a

Re: Live OpenBSD Bootable i386 CD

2009-04-20 Thread Stephan A. Rickauer
On Sun, 2009-04-19 at 13:01 -0500, Marco Peereboom wrote: > Do you have an automated process to generate these at any given time? > If so can you share that? svn://svn.startek.ch/BSDanywhere build.sh gives you the script that builds an image directly from fresh OpenBSD tgz's. The version we used

sendmail: cannot open "/var/spool/mqueue"

2009-04-20 Thread Stephan A. Rickauer
Has anyone seen this before in /var/log/maillog? Apr 20 08:37:51 srv1 sm-mta[10664]: n3K6bpjJ010664: SYSERR(root): gatherq: cannot open "/var/spool/mqueue": No such file or directory Apr 20 08:38:52 srv1 sm-mta[15383]: filesys_update failed: No such file or directory, fs=., avail=-1, blocksize=3

Re: sendmail: cannot open "/var/spool/mqueue"

2009-04-20 Thread Stephan A. Rickauer
On Mon, 2009-04-20 at 07:18 -0400, Nick Holland wrote: > did you, by any chance, install a new baseXX.tgz file on the system? Right, that was it. Funny, I must have read this a dozen times ... > > OpenBSD 4.4-stable (GENERIC.MP) #4: Sun Nov 16 14:21:18 CET 2008 > > I'd be more convinced I was ri

Re: binding services on carp

2009-05-27 Thread Stephan A. Rickauer
On Tue, 2009-05-26 at 16:18 -0400, uday wrote: > Hey guys, > > A quick question, is there a way to bind services to the carp > interface ? You see I have an ftp-proxy running and I wanted to use > carp since I'm already doing fail-over with PF. > > FTP client --> Redundant Firewall w/ftp-proxy --

Re: spamd question

2009-05-27 Thread Stephan A. Rickauer
On Fri, 2009-05-22 at 15:53 -0400, Jim Razmus wrote: > beck@ created the greyscanner Perl script to address the issues you've > highlighted. It does deeper inspection of grey listed senders before > they are white listed. It validates the DNS setup of the sending > server, the validity of the re

Re: Cyrus IMAP performance problems [Long]

2007-10-29 Thread Stephan A. Rickauer
On Tue, Oct 16, 2007 at 01:18:07PM -0300, Marcus Andree wrote: Got similar problems with imap once, a long time ago... Had to switch from mailbox format to maildir then, it wasn't Cyrus. -- Stephan A. Rickauer --- Institu

OpenExpo 2008 Bern

2008-03-08 Thread Stephan A. Rickauer
like last year we'll be present at the OpenExpo event in Bern, Switzerland on March 12/13 2008. It's completely free entrance, but you have to get a ticket online. Feel free to drop by. http://www.openexpo.ch/ Stephan

Gratuitous ARP

2008-03-24 Thread Stephan A. Rickauer
Does anyone happen to know a tool that sends out gratuitous arp from userland on openbsd? P.S. I know there is CARP, but I need to send out o;?gratuitous arp anyway ;) Thanks, Stephan

Re: Gratuitous ARP

2008-03-25 Thread Stephan A. Rickauer
On Mon, 2008-03-24 at 23:11 +0100, Henning Brauer wrote: > MAC="00:11:22:33:44:55" > DNET="dnet" > > for IP in `ifconfig $interface | grep 'inet ' | \ > sed 's/ *inet \([0-9]*\.[0-9]*\.[0-9]*\.[0-9]*\) netmask.*/\1/'`; do > ${DNET} arp op rep sha ${MAC} spa ${IP} tpa ${IP} | \ > ${

Quantis PCI/USB

2007-01-25 Thread Stephan A. Rickauer
so, I will take care of getting Free Programming Documentation and a card, if possible. Please let me know off list. - -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich

ntpd on -current 8 hours off

2007-01-26 Thread Stephan A. Rickauer
26 01:27:33 MST 2007 (on other synchronized machines and on my wrist the time is 09:27:33) Thanks, -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich S

Re: ntpd on -current 8 hours off

2007-01-26 Thread Stephan A. Rickauer
Claudio Jeker wrote: > On Fri, Jan 26, 2007 at 09:30:49AM +0100, Stephan A. Rickauer wrote: >> on a current snapshot from last week "ntpd -s" will successfully >> synchronize the clock at once, but 8 hours off the real time. >> 4.0-release and older snapshots behave

OpenBSD's bind: CVE-2007-0493 and CVE-2007-0494

2007-01-30 Thread Stephan A. Rickauer
x27;s bind? I guess not, but maybe some insider could shed some photons on it. -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635

Re: Backing up /var/db/spamdb

2007-01-31 Thread Stephan A. Rickauer
backup in case a spamd/firewall fails > and needs to be brought back up quickly. I am content to just let spamd Since it's a mere Berkeley DB, can't you just do a 'db_dump /var/db/spamdb | ssh host db_load /var/db/spamdb' ? -- Stephan A. Rickauer

qlogic QLA4050C or QLA4052C

2007-02-07 Thread Stephan A. Rickauer
am not too optimistic with qlogic). Please let me know off list. -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52 Winterthurerstrasse 190

Re: pcn in VMware, 5KB/s

2007-02-12 Thread Stephan A. Rickauer
Srebrenko Sehic wrote: >> >You could always try using vmxnet/vic. Using the Intel 'em' driver is also an option. > ethernet0.virtualDev = "vmxnet" ethernet0.virtualDev = "e1000" -- Stephan A. Rickauer ---

Free Linux Driver Development!

2007-02-13 Thread Stephan A. Rickauer
n. Signing NDA's ensures that Linux gets a working driver, sure, but the internals are indistinguishable from magic. It is a source code version of a blob. It now became clear you also don't give a damn about freedom. Well done, Greg. --

Re: Free Linux Driver Development!

2007-02-14 Thread Stephan A. Rickauer
Greg KH wrote: > On Wed, Feb 14, 2007 at 08:39:36AM +0100, Stephan A. Rickauer wrote: >> On the subject of http://www.kroah.com/log/linux/free_drivers.html >> >> Now these companies have a great excuse to keep specs locked up tight >> under NDA, while pretending to b

Re: filesystem hackathon: still seeking donations

2007-03-01 Thread Stephan A. Rickauer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Nikolay Sturm wrote: > - 8 250G SATA disks I was able to convince Dalco, a Swiss company, to loan those 8 disks to the hackathon. I'll get in touch with you privately so we can sort out the details. Cheers, - -- Stephan A.

Re: Following the patch branch

2007-03-07 Thread Stephan A. Rickauer
as a bad taste of food, but he's right ;) realease(8) is your friend. - -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52 Winterthurer

Re: OT: Google-mini equivalent on OpenBSD suggestions needed

2007-03-09 Thread Stephan A. Rickauer
Daniel Ouellet wrote: > So, I thought to asked valuable feedback if possible. I've had 'perlfect search' running for a couple of years on several web sites. It's perl (surprise), so customization is trivial. And it's fast. http://www.perlfect.com/freescripts/search

df reports capacity >100%

2007-03-22 Thread Stephan A. Rickauer
ed on /projects2.4T 2.0T 418G 84% /projects Not a problem at all, but maybe some developer is interested in understanding this phenomena or knows what one can do to cleanly update the Size information. Thanks. -- Stephan A. Ric

Re: df reports capacity >100%

2007-03-22 Thread Stephan A. Rickauer
Otto Moerbeek wrote: > This is a known bug and not fixable until we change the statfs > structure. > > http://cvs.openbsd.org/cgi-bin/query-pr-wrapper?full=yes&numbers=5169 Awesome. I wish other software had such a high quality of support. Thanks Otto. -- Ste

uvm_mapent_alloc: out of static map entries

2007-03-31 Thread Stephan A. Rickauer
on my not so busy i386 4.0-current web server I get "uvm_mapent_alloc: out of static map entries" ~ once every two days. The archives bear a wide range of suggestions, from tweaking kernel feature xy to not touching anything, because that's stupid. However, this message bothers me a bit and so

Re: Printing using a network printer

2007-04-03 Thread Stephan A. Rickauer
ups/cupsd.conf set LogLevel to Debug, restart cupsd and have a look at your log files in /var/log/cups/, most importantly error_log -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 Unive

Fw: Security Development Lifecycle (SDL) Banned Function Calls

2007-04-04 Thread Stephan A. Rickauer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenBSD as a reference ... Begin forwarded message: - Date: Wed, 04 Apr 2007 10:25:34 +0200 To: "Stephan A. Rickauer" <[EMAIL PROTECTED]> Subject: Security Development Lifecycle (SDL) Banned Functi

-stable no longer mentioned in dmesg?

2007-05-04 Thread Stephan A. Rickauer
/GENERIC # make clean && make depend && make && reboot BTW: What is that #0 for (release has #1435)? Thanks! -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / E

Re: -stable no longer mentioned in dmesg?

2007-05-04 Thread Stephan A. Rickauer
On Fri, 4 May 2007 13:30:06 +0200 Reyk Floeter <[EMAIL PROTECTED]> wrote: > On Fri, May 04, 2007 at 01:15:20PM +0200, Stephan A. Rickauer wrote: > > quick question: My newly build 4.1-stable on i386 says in dmesg: > > > > OpenBSD 4.1 (GENERIC) #0: Thu May 3 14:29:

Intel SRCSAS144E

2007-07-20 Thread Stephan A. Rickauer
Anyone having first hands experience with Intels SRCSAS144E RAID controller? According to mfi(4) it is not only supported but also registers nicely with bio(4). A bioctl output would be highly appreciated, too. Thanks, -- Stephan A. Rickauer

Re: Bioctl ciss controller status

2007-07-20 Thread Stephan A. Rickauer
gh. Only one volume configured, controller firmware 2.08. # bioctl ciss0 bioctl: Can't locate ciss0 device via /dev/bio -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zur

Re: Bioctl ciss controller status

2007-07-20 Thread Stephan A. Rickauer
against 4.1-stable, dmesg and bioctl output follows below. > There is a similar system with 5 HDs in a RAID 5 that works too. Use > this at your own risk: This is good news, thanks a lot. I will test it next week. However, if there is a developer interested in getting th

arc0: unable to query firmware for sensor info

2007-09-27 Thread Stephan A. Rickauer
ev 24 function 2 "AMD AMD64 DRAM Cfg" rev 0x00 pchb3 at pci0 dev 24 function 3 "AMD AMD64 Misc Cfg" rev 0x00 pchb4 at pci0 dev 25 function 0 "AMD AMD64 HyperTransport" rev 0x00 pchb5 at pci0 dev 25 function 1 "AMD

Re: arc0: unable to query firmware for sensor info

2007-09-28 Thread Stephan A. Rickauer
On Fri, Sep 28, 2007 at 08:35:10AM +1000, David Gwynne wrote: On 27/09/2007, at 8:06 PM, Stephan A. Rickauer wrote: A new server shippped by a local vendor fails to boot bsd.mp, with and without acpi enabled (amd64, 4.2). Without acpi it will reboot directly after mounting the root device

Re: I need a new non-sucky laptop...

2007-10-02 Thread Stephan A. Rickauer
On Tue, Oct 02, 2007 at 04:24:44PM +1000, Tanvir Ahmed wrote: I'm using OpenBSD 4.1 with a modified kernel on Lenovo Thinkpad T60 Out of curiosity, what modifications are necessary in your point of view? -- Stephan A. Ric

Re: arc0: unable to query firmware for sensor info

2007-10-03 Thread Stephan A. Rickauer
can't boot. -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52 Winterthurerstrasse 190 Fax +41 44 635 30 53 CH-8057 Z

Re: ms exchange replacement

2007-10-03 Thread Stephan A. Rickauer
devtodo (cause I can). BTW: Does anyone happen to know of a mobile phone than _really_ synchronizes todo's and calendar with OpenBSD? I don't mind using command line tools or write a perl script around some tools ... -- Stephan A

Re: Jumb Frames

2007-10-03 Thread Stephan A. Rickauer
On Wed, Oct 03, 2007 at 01:32:15AM -0700, Jake Conk wrote: I was wondering if setting my ethernet's card mtu to 9000 is all I have to do to enable jumbo frames? (and of course set it on all other devices that the card connects to) works for me. -- Stephan A. Ric

Re: arc0: unable to query firmware for sensor info

2007-10-15 Thread Stephan A. Rickauer
For the archives: Mark has sent me a patch which fixes the problem (also in the tree now). Thanks for this awesome support (once more)! Stephan On Sun, Sep 30, 2007 at 04:20:27PM +0200, Mark Kettenis wrote: Can you run # acpidump -o WTF2V028 > WTF2V028.acpidump and send me all the files it

Re: DDOS attack

2006-07-05 Thread Stephan A. Rickauer
sonjaya wrote: > How to blok ddos/Flooding/ssh brute attack with pf . Thanks to ( max-src-nodes 20, max-src-states 1 ) brute forcing just disappeared. Stephan [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

Re: BSD kernel going to be included in University

2006-07-12 Thread Stephan A. Rickauer
nation available. >> > > and try to understand. Imagine what happens when the teacher explains > a particular struct and everyone is reading a different source. Not to mention the poor Sysadmin forced to support more than one OS in one class ;) -- Stephan A. Rickauer -

firewall on 3.9 i386, crashing after carp failover

2006-07-20 Thread Stephan A. Rickauer
In a setup of two redundant carp firewalls, each serving four interfaces, the master crashes regularly (but not always) after a manuall failover from the backup to the master. This is how I do the manual failover ('carpdown' on master): ---snip--- for i in 0 1 2 3; do ifconfig carp$i down; done

Re: sokeris output

2006-07-24 Thread Stephan A. Rickauer
Lars Hansson wrote: > On Monday 24 July 2006 13:33, Gustavo Rios wrote: >> PS: If you have a kernel configuration file for exact that hardware, i >> would enjoy too. > > Save yourself a loft of pain and frustration and get a CF large enough (256Mb) > for the base system and use the GENERIC kernel.

Re: Help to debug Openbsd freezes...

2006-07-25 Thread Stephan A. Rickauer
Ian Watts wrote: >>> It's still running 3.5 (ok, ok, don't shoot, it's an old one but >>> upgrades are not easy). It's an i386 1U in a safe environment (colo) They are. That's exactly one of the main reasons why I have started using OpenBSD at our Institute. Twice a year I spend ~ 2 hours (that in

Re: Looking to start developing OpenBSD

2006-07-26 Thread Stephan A. Rickauer
Nick Price wrote: > I'm interested in starting to do development on the OpenBSD OS. What are > some good tasks that need to be done that someone isn't currently working > on? Someone suggested ACPId, but apparently it's already being worked on. iSCSI? ;) Stephan [demime 1.01d removed an attach

currently opened file descriptors

2006-08-04 Thread Stephan A. Rickauer
How can one list the number of file descriptors a shell and any processes created by that shell are currently opened? I've learned 'sysctl kern.nfiles' from the archives but believe this is the overall number of opened file descriptors, isn't it? Thanks, --

Re: service monitoring and pf load balancing

2006-08-04 Thread Stephan A. Rickauer
you can write > event handlers for service states. Oh, didn't know that one, thanks. I once used 'mon' on linux which seems to be no longer maintained. -- Stephan A. Rickauer --- Institut f|r Neuroinformatik

Re: currently opened file descriptors

2006-08-04 Thread Stephan A. Rickauer
Sebastian Benoit wrote: > Stephan A. Rickauer([EMAIL PROTECTED]) on 2006.08.04 09:20:09 +: >> How can one list the number of file descriptors a shell and any >> processes created by that shell are currently opened? > > fstat (1) > > /B. brilliant. Thanks

Re: Mail Server configuration question(s)

2006-08-21 Thread Stephan A. Rickauer
ot; stuff before. > It isn't that bad, and not only have I had no issues so far, some of the > things I wasn't really blaming Dovecot for got a lot easier, too. Guess I'll have a look at Courier or Cyrus now ;) -- Stephan A. Rickauer ---

Why no compiler on prod system [Was: Re: How to update httpd without a compiller]

2006-08-24 Thread Stephan A. Rickauer
People from time to time say they don't want to have a compiler installed on a productive system due to security issues. I don't understand this. Isn't is too late anyway, if someone's already able to make use of the compiler? --

Re: Why no compiler on prod system [Was: Re: How to update httpd without a compiller]

2006-08-24 Thread Stephan A. Rickauer
Tomas wrote: > Yes it's too late, but why to let a hacker to compile his exploits on > your system and to go compromising other PCs (from your DMZ or from > internet, it doesn't matter). If a hacker is on your system, he'll also manage to install the compiler himself before using it. Stephan [de

netstat, socket, pid

2006-09-05 Thread Stephan A. Rickauer
What is the most elegant way to find out which pid/program belongs to which socket? netstat(1) and archive didn't help me in that case. Thanks, -- Stephan A. Rickauer --- Institut f|r Neuroinformatik Tel: +41 44 635

Re: Purpose of spamd-setup in greylisting mode?

2008-08-12 Thread Stephan A. Rickauer
somehere. > are those lists handled in greylisting mode? They are loaded using spamd-setup and fed into spamd(8). Hope that helps, -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 Univers

spamdb with '0' as pass

2008-08-14 Thread Stephan A. Rickauer
I have difficulties in understanding why a minority of IP's of a huge set of WHITE entries of our spamdb do not have a 'pass' date set: # spamdb | grep 128.1x8.50.xxx WHITE|128.1x8.50.xxx|||1218625388|0|1221750240|1|1 spamdb(8) says: "time the entry passed from being GREY to being WHITE". Since i

pf visualization

2008-08-28 Thread Stephan A. Rickauer
I am curious what tools people here use to visualize pf-generated logs and/or live traffic. What i'm basically looking for is a tool, that provides various stats about a pf firewall "usage" in a graphical way, but not only 'bytes in/bytes out' (i have that using snmp/cacti) but more detailed stuff

Re: pf visualization

2008-08-29 Thread Stephan A. Rickauer
On Thu, 2008-08-28 at 11:52 -0400, Jason Dixon wrote: > > > Thanks for any ideas beyond pftop, tcpdump, hatched, darkstat and > > ntop ;) > > If I ever get off my lazy ass and finish/package it up, maybe this? > > http://www.netflowdashboard.com/demo/ http://www.netflowdashboard.com/download/

Re: pf visualization

2008-08-29 Thread Stephan A. Rickauer
On Thu, 2008-08-28 at 16:03 +, Stuart Henderson wrote: > > > > Thanks for any ideas beyond pftop, tcpdump, hatched, darkstat and > > ntop ;) > > the nfdump/nfprofile tools (also in ports) are interesting too, > there's a web interface NfSen which is yet to be ported but can > be manually inst

4.4-current on XenServer 5

2008-09-22 Thread Stephan A. Rickauer
In know virtualization is not one of the primary targets of OpenBSD. However, in case someone is interested, here's a dmesg of 4.4-current booting bsd.rd on latest XenServer 5 (Express, with Intel VT). As you can see, there is no harddisk detected. I am ready to help testing if a developer wants t

Re: 4.4-current on XenServer 5

2008-09-22 Thread Stephan A. Rickauer
Stupid me, the disk is there and OpenBSD runs just fine on it. Sorry for the noise. On Mon, 2008-09-22 at 12:24 +0200, Stephan A. Rickauer wrote: > In know virtualization is not one of the primary targets of OpenBSD. > However, in case someone is interested, here's a dmesg of

Re: New tcp stack attack

2008-10-01 Thread Stephan A. Rickauer
perhaps you guys have your ears closer to the ground A little bit less vage info can be found here http://tinyurl.com/3hv3kf -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich

OpenBSD and XenSource

2008-12-01 Thread Stephan A. Rickauer
Those of you interested in running OpenBSD as a Xen guest in XenEnterprise might want to use this opportunity to raise their voice: http://forums.citrix.com/thread.jspa?threadID=151525 (Please note I have no intention to discus the boon and bane of virtualization...) Cheers, Stephan -- ---

synproxy issue

2008-12-03 Thread Stephan A. Rickauer
synproxy off in this case isn't a problem, but I'd like to understand why synproxy wouldn't work in this szenario or what triggers it to fail. Thanks, -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41

Re: wpa now in current?!

2008-04-17 Thread Stephan A. Rickauer
ork-in-progress, but the basic functionality > is there. -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52 Winterthurerst

QLogic lies: now it's up to you

2008-04-21 Thread Stephan A. Rickauer
and other media. -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52 Winterthurerstrasse 190 Fax +41 44 635 30 53 CH-8

Re: QLogic lies: now it's up to you

2008-04-21 Thread Stephan A. Rickauer
should be end of this week. Thanks guys. On Mon, 2008-04-21 at 11:59 +0200, Stephan A. Rickauer wrote: > In October 2007 I have established contact with QLogic, to investigate > whether they could help us in making iSCSI HBAs work in OpenBSD by > donating some hardware and by providi

saslauthd and rimap

2008-05-07 Thread Stephan A. Rickauer
If someone happens to run saslauthd 2.1.22 on OpenBSD and uses rimap as authmech against a cyrus server, please try to authenticate using a password with double-quotes. I think we've found a bug here and it would be neat to have a confirmation. Thanks, -- Stephan A. Ric

Qlogic shipped one adapter, finally

2008-06-06 Thread Stephan A. Rickauer
Update: Qlogic finally managed to donate one iSCSI HBA to the OpenBSD project. I'd like to thank everybody who participated in emailing Qlogic - this step applied the required pressure so they finally kept their promise. Stephan. On Mon, 2008-04-21 at 20:52 +0200, Stephan A. Rickauer

  1   2   >