Re: uvm_mapent_alloc

2008-10-13 Thread jared r r spiegel
fwiw, i had uvm_mapent_alloc terrors a while back, which have been nonpresent since the july 14th 2008 snapshots -- jared

Re: rtorrent problems - solved?

2008-07-14 Thread jared r r spiegel
On Sun, Jul 13, 2008 at 11:16:59PM -0700, Aaron Stellman wrote: > On Mon, Jul 14, 2008 at 07:55:23AM +0200, Bj??rn Ketelaars wrote: > > viq wrote: > > > Sorry for the "carpet bombing", I grabbed the list of people who I saw > > > report problems with rtorrent. > > > > > > I'm writing to ask those

uvm_mapent_alloc: out of static map entries

2008-07-16 Thread jared r r spiegel
cri on jul 11 snapshots now, have gone thru i think 2 or 3 snapshot iterations since ~early/mid june. first recorded/noticed incident of the 'uvm_mapent_alloc: out of static map entries' jobby was jun.16th while running a DEBUG.MP kernel i had made in attempt to catch more info on a

Re: 'Nother broken package - git-1.5.4.2

2008-07-16 Thread jared r r spiegel
On Wed, Jul 16, 2008 at 04:54:34PM -0500, L. V. Lammert wrote: > At 05:23 PM 7/16/2008 -0400, William Boshuck wrote: >> On Wed, Jul 16, 2008 at 03:42:15PM -0500, L. V. Lammert wrote: >> > >> > I always do my homework, >> >> Is the following mindless word-drool about 'put startx into rc' >> an examp

Re: uvm_mapent_alloc: out of static map entries

2008-07-16 Thread jared r r spiegel
On Wed, Jul 16, 2008 at 09:13:14PM -0400, jared r r spiegel wrote: > > on jul 11 snapshots now, have gone thru i think 2 or 3 snapshot iterations > since ~early/mid june. cracked out again hardcore a bit ago (when it shits out it seems accurate to call it a deadlock), so

Re: FFS2

2008-08-01 Thread jared r r spiegel
On Thu, Jul 24, 2008 at 08:53:24PM -0400, jmc wrote: > --- John Nietzsche [Thu, Jul 24, 2008 at 07:19:11PM -0300]: --- > > Dear OpenBSD friends, > > > > how may i format a slice with FFS2? and what to put into /etc/fstab > IIRC from some list traffic, you have to be careful what filesystems you >

Re: uvm_mapent_alloc: out of static map entries

2008-08-01 Thread jared r r spiegel
On Wed, Jul 16, 2008 at 11:15:50PM -0401, jared r r spiegel wrote: > On Wed, Jul 16, 2008 at 09:13:14PM -0400, jared r r spiegel wrote: > > > > on jul 11 snapshots now, have gone thru i think 2 or 3 snapshot iterations > > since ~early/mid june. > > cracked o

Re: hostname.wi0 nwflag hidenwid oddity

2006-10-17 Thread jared r r spiegel
On Tue, Oct 17, 2006 at 09:38:48PM -0400, William Graeber wrote: > I have managed to gain a bit more information regarding my problem - I > added an echo statement in /etc/netstart to get a copy of the command > which was being run. netstart, if has no args, runs thru the whole hostname/bridgena

Re: hostname.wi0 nwflag hidenwid oddity

2006-10-18 Thread jared r r spiegel
On Wed, Oct 18, 2006 at 11:05:51AM -0400, William Graeber wrote: > The up doesn't make a difference if I add it before the inet line :( > output of sh -v /etc/netstart is pretty lengthy, but I can post it > somewhere if someone would like to take a look. output of that is probably no differ

Re: pf / pkg_add broken in latest snapshot?

2006-10-18 Thread jared r r spiegel
On Wed, Oct 18, 2006 at 08:45:31PM +0200, Michael wrote: > > Too bad I can't go back to my old snapshot, or is there any chance to > get the 4.0 packages before official release so I can downgrade to a > working state? ja; cvs -qd${your_favourite_cvs_mirror}:/cvs co -r OPENBSD_4_0_BASE

Re: /stand still useful?

2006-10-18 Thread jared r r spiegel
On Wed, Oct 18, 2006 at 10:15:21PM +1000, Rod.. Whitworth wrote: > On Wed, 18 Oct 2006 13:50:41 +0200, Martin Schrvder wrote: > >hier(7) says: > man 7 hier oops. > Do we look from up over? i don't know if you look like a mop that had been pissed in. > Do NOT CC me - I am subscribed to the

Re: Troubles trying to configure non-default VPN

2006-11-08 Thread jared r r spiegel
On Wed, Nov 08, 2006 at 07:50:46AM +1100, nuffnough wrote: > I have an OpenBSD 3.9 box and I've been asked to configure it to terminate a > VPN using AES-256 encryption with SHA authentication, DH Group 5 (rather > than the default group 2) and a lifetime of one day. I configured my > isakmpd.conf

Re: Wild card greytrapping setup in spamdb

2006-11-08 Thread jared r r spiegel
On Wed, Nov 08, 2006 at 02:46:35PM -0500, Daniel Ouellet wrote: > > So, I see absolutely nothing wrong with this, but only huge benefit. with the "not" wildcard stuff, it seems like that would perhaps be a bit heavier to implement than the "definately is" matching. grep vs. egrep, only for

Re: named bug?

2006-11-08 Thread jared r r spiegel
On Wed, Nov 08, 2006 at 05:07:36PM +0100, Michael wrote: <...> > /var/named/etc/named.conf > [...] > listen-on { > localhost; > 80.237.156.59; > }; > > //listen-on-v6 { any; }; > [...] did you make sure that /etc/hosts isn't the reason fo

Re: increasing the speed of an openbsd firewall

2006-11-08 Thread jared r r spiegel
On Wed, Nov 08, 2006 at 10:44:46PM -0500, Michael Lockhart wrote: > Looking for thoughts on improving performance, throughput, etc. I'm > leaning towards just throwing up 2 better boxes with 2GB of ram and > P4's. Wish I could show the pf.conf rules but that's out of the > question. if sanitiz

Re: Troubles trying to configure non-default VPN

2006-11-12 Thread jared r r spiegel
On Fri, Nov 10, 2006 at 05:50:54AM +1100, nuffnough wrote: > On 11/9/06, jared r r spiegel <[EMAIL PROTECTED]> wrote: > > > No Phase one. Just a packet to initiate, then a packet back to say that > the far end doesn't like me. Debug on the other end indicated that wh

Re: Problems with java

2006-11-16 Thread jared r r spiegel
On Thu, Nov 16, 2006 at 09:35:56PM -0500, ICMan wrote: > > Thank you everyone. I discovered that ulimit -d 20 works on my > system. I don't really know what that means, and I have yet to figure > out how to set this for all users (so they can use java), but that's > stuff I can puzzle out.

Re: ports installing files in /etc?

2006-11-18 Thread jared r r spiegel
On Sat, Nov 18, 2006 at 08:53:04AM -0600, Will Maier wrote: > On Sat, Nov 18, 2006 at 02:35:27PM +0100, Igor Sobrado wrote: > > > > I read a lot of documentation on the utilities for managing > > packages on NetBSD, where /usr/pkg/etc is used. I expected the > > same behaviour on OpenBSD. > > W

Re: spamd [-c maxcon]

2006-11-28 Thread jared r r spiegel
On Tue, Nov 28, 2006 at 07:43:48PM -0500, Daniel Ouellet wrote: > > Thanks for the update. I understand that. Not a complain what so ever, > but just a thought that may be the man page should include the default > of 800 to be also the max allow. jmc@ took care of that 2w ago -- jared

prepping for big spamd(8) rollout

2006-11-30 Thread jared r r spiegel
working on getting a dual core dual cpu 64b 2MB cache xeon 2.8GHz w/12GB RAM and dual copper em(4) put in place in front of our MX vip for a greylisting spamd(8). i've got a similar machine with faster CPU ( 3.0 GHz / 4MB ) but it "only" has 4GB of RAM with 4.0 installed on it now tha

Re: prepping for big spamd(8) rollout

2006-12-01 Thread jared r r spiegel
On Fri, Dec 01, 2006 at 07:43:05AM +0100, Srebrenko Sehic wrote: > > AFAIK, amd64 does not support >4GB, unless that > patch from tech@ somehow sneaked into the tree without me noticing. this one? http://marc.theaimsgroup.com/?l=openbsd-tech&m=114498992417267&w=2 it's not in -current. i'

Re: 4.0 and 4GB ram?

2006-12-06 Thread jared r r spiegel
On Wed, Dec 06, 2006 at 04:07:16PM +0100, Cristiano Deana wrote: > Hi, > > i have a system (dell 1950) with 4GB ram. OpenBSD (amd64) only detects: > real mem = 3488907264 (3407136K) > avail mem = 2990874624 (2920776K) > > bios detects all 4 GB's. > kernel is GENERIC.MP. > > Is it possible to use

Re: Build Userland Problem

2005-05-27 Thread jared r r spiegel
On Fri, May 27, 2005 at 07:11:29PM -0400, Nick Holland wrote: > >http://www.openbsd.org/faq/faq5.html#BldBinary > > "The first step in building from source is to make sure you have the > closest available binary installed." > > Upgrade by binary, then build -stable. that really does make

Re: ipcomp weirdness (traffic not decompressed when large compression ratio)

2005-05-29 Thread jared r r spiegel
On Sun, May 29, 2005 at 07:27:52PM -0600, jared r r spiegel wrote: > > to save ppl the time of reading the entire mail, i'm having > failure crop up when an ipcomp packet does a very good > ratio of compression, it doesn't get decompressed on the > receiving end,

ipcomp weirdness (traffic not decompressed when large compression ratio)

2005-05-29 Thread jared r r spiegel
i can't recall if this has been discussed anywhere before, but i remember trying to use ipcomp a few years ago and i think i had the same pitfall happen; but i'm not sure what came of it. to save ppl the time of reading the entire mail, i'm having failure crop up when an ipcomp packet

Re: ipcomp weirdness (traffic not decompressed when large compression ratio)

2005-05-29 Thread jared r r spiegel
On Sun, May 29, 2005 at 08:02:22PM -0600, jared r r spiegel wrote: > > note, i setup the 192.168.7.17 <-> 192.168.7.18 testcase due > to initially seeing the issue against a remote host, and then > trying to duplicate with a simple case. > > also, the following c

Re: ipcomp weirdness (...no XFORM set in TDB...)

2005-05-30 Thread jared r r spiegel
i'll be getting a few hifns soon, and then i will try to duplicate the issue using -comp lzs. also, i can try installing some linux and seeing if the decompressing host duplicates it if either side is a linux. i am hoping i am just setting up the ipcomp CPIs/flows wrong, but am at t

ipcomp_input_cb(): crypto error 22

2005-05-31 Thread jared r r spiegel
in the hopes that i'm not just spitting random nonsense and wasting everyone's time, i upgraded to -current snapshot: OpenBSD 3.7-current (GENERIC) #164: Sun May 29 17:28:51 MDT 2005 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC brought /usr/src up to speed with "

Re: ipcomp_input_cb(): crypto error 22

2005-05-31 Thread jared r r spiegel
on a whim, i tried IPv6, but he says: === ipcomp_init(): initialized TDB with ipcomp algorithm Deflate ipcomp_output(): unknown/unsupported protocol family 24, IPCA 2001:0470:1f01:0245:0007:e9ff:fe08:d1fc/ === so it correctly determines whether to send an ipcomp packet or not, but

Re: Writing to console...

2005-06-15 Thread jared r r spiegel
On Wed, Jun 15, 2005 at 10:17:30AM -0500, kevin wrote: > > I was downloading GNU gcc on a machine and when I looked over > after the download, the screen was writing: > "All work and no play makes Jack a dull boy" i know there's an xscreensaver for that. since you said specifically c

Re: newfs_msdos - Question

2005-06-16 Thread jared r r spiegel
On Fri, Jun 17, 2005 at 01:31:05AM +0200, [EMAIL PROTECTED] wrote: > I've a question related to newfs_msdos. > > I bought a USB-Stick and formated it (FAT32) but I'm still limited to the > 8.3 DOS-Style for the filenames. > > Maybe I'm wrong but MS Windows 98 wich was able to use FAT32 was able t

Re: OSPFd over IPSEC (enc)? - OT

2005-06-16 Thread jared r r spiegel
On Thu, Jun 16, 2005 at 10:50:10PM +0200, Claudio Jeker wrote: > > AFAIK it was not yet tested. I'm not sure if it will work because the enc > interface is not a real interface. I know it works over gre tunnels. > Using the enc device may work but I'm not sure about it (until now I never > had to

Re: OT: Hardware keyloggers embedded in new keyboards?

2005-06-20 Thread jared r r spiegel
On Mon, Jun 20, 2005 at 07:49:47AM -0500, Dave Feustel wrote: > > I *would* like to see some pictures of a keylogger chip installed in a > keyboard. also might be a good idea to find some pictures of the underside of a keyboard. phillips head screws and all... for me, it's time to edi

Re: sshd suddenly not responding

2005-06-21 Thread jared r r spiegel
On Tue, Jun 21, 2005 at 01:38:15PM -0700, Winston Williams wrote: > > OpenSSH_3.8.1p1 Debian-8.sarge.4, OpenSSL 0.9.7e 25 Oct 2004 > debug1: Reading configuration data /etc/ssh/ssh_config > debug1: Connecting to tigl [207.114.###.###] port 22. > debug1: Connection established. > debug1: identity f

Re: Proxy arp needed for NAT?

2005-06-21 Thread jared r r spiegel
On Tue, Jun 21, 2005 at 11:29:59AM -0700, Michael Favinsky wrote: > So if I'm using CARP, do I create separate CARP interfaces and VHIDs for > 192.0.2.4 and 192.0.2.5? Or can one CARP interface have multiple VHIDs > assigned to it? don't know if you an hve multiple VHIDs, but you can have multip

Re: isakmpd only works if one side begins the communication

2005-06-22 Thread jared r r spiegel
On Wed, Jun 22, 2005 at 02:01:43PM +0200, Abel Talaversn Estevez wrote: > > Is it normal? Can I solve it with a parameter like "Retransmit" or "Timeout"? > I know that it happens something similar with D-Link Firewalls. need configs to answer accurately, please. shouldn't need to dinker wi

Re: isakmpd only works if one side begins the communication

2005-06-22 Thread jared r r spiegel
On Wed, Jun 22, 2005 at 04:15:19PM +0200, Abel Talaversn Estevez wrote: > > [General] > Exchange-max-time= 30 > Check-interval= 30 > DPD_check_interval= 30 if you're certain those are what you need to use for one reason or another, then you need to use them :), but > I've been tryin

Re: Update (was Re: Greylisting causes mail failure)

2005-06-22 Thread jared r r spiegel
On Wed, Jun 22, 2005 at 06:11:58PM +0200, Hannah Schroeter wrote: > >Perhaps it'd be an improvement to spamd to report to the client on how > >it got decided to block or greylist the IP, as that can come quite handy > >if debugging is needed (i.e. legitimate mail doesn't get through even > >after

Re: NFS Protocol not supported when mounting from a Linux machine.

2005-06-22 Thread jared r r spiegel
On Wed, Jun 22, 2005 at 03:49:39PM -0500, Rene Rivera wrote: > > bash-3.00# mount_nfs -2 192.168.0.3:/export /mnt/export.3 > mount_nfs: /mnt/export.3: Protocol not supported > bash-3.00# mount_nfs -2 -T 192.168.0.3:/export /mnt/export.3 > mount_nfs: /mnt/export.3: Protocol not supported > bash-3.0

OT: Re: Install on Multiple Disks

2005-06-22 Thread jared r r spiegel
On Wed, Jun 22, 2005 at 11:33:07PM +0200, Otto Moerbeek wrote: > > I'd have to check to know for sure, but I think having a swap > partition on the root disk is mandatory. But you can always add extra > swap partitions later. i got away with installing a "full-disk" / when i was doing a soe

Re: Can't rebuilt aliases.db file...?

2005-06-23 Thread jared r r spiegel
On Thu, Jun 23, 2005 at 08:45:29AM -0700, Timothy Horie wrote: > Hello, > > I'm trying to rebuild my /etc/mail/aliases file after changing it but it > isn't working. does it work if you back out your changes? > Can someone give me some hints? The aliases.db file isn't supposed to be > 0 byte

Re: raidFRAME - Disk id's changed, raid labels confused?

2005-07-18 Thread jared r r spiegel
On Mon, Jul 18, 2005 at 02:21:09PM -0700, Golliher, Blake wrote: > > I've changed the raidframe.conf to reflect the change, but that didn't > work, unless I missed something. I still get a message about a hosed > raid device. I think the raidlabels contain some disk id information, > and I'll ne

Re: raidFRAME - Disk id's changed, raid labels confused?

2005-07-18 Thread jared r r spiegel
On Mon, Jul 18, 2005 at 04:39:36PM -0700, Golliher, Blake wrote: > So I can get the serial number, but I'm not sure how to change anything > on the raidlabel. was wondering if the situation you're in is if you didn't get the physical drives in the same logical order for the component raid s

Re: carp and spamd greylisting

2005-07-18 Thread jared r r spiegel
On Mon, Jul 18, 2005 at 11:34:10AM -0700, Bryan Irvine wrote: > > I've googled and read TFA, but couldn't find anything with this scenario. at the moment, seems you would have to come up with something hackish. doesn't look like spamd has a facility for communicating its database to peers

Re: bsd.mp, different IPL interrupts = degraded performance?

2005-07-18 Thread jared r r spiegel
On Fri, Jul 15, 2005 at 04:06:42AM -0400, Mike Schreckengost wrote: > Hello all, >I have recently installed OpenBSD 3.7-current (as of 07/12/05) and have > selected the bsd.mp kernel since I am running a system with 2 CPUs. After > looking at the dmesg output after the initial boot, I noticed

Re: isakmpd question

2005-08-04 Thread jared r r spiegel
On Wed, Aug 03, 2005 at 09:28:32AM -0400, Brandon Mercer wrote: > I've tried running the debug, but I > can't figure out which part of the proposal is incompatible. My config has: when i had to setup a tunnel against a speedstream 5930 ( dsl modem/router ), i told the speedstream to make an

Re: BSD PPPoA Hardware

2005-08-24 Thread jared r r spiegel
On Tue, Aug 16, 2005 at 01:54:46AM -0700, J.C. Roberts wrote: > On Tue, 16 Aug 2005 08:20:33 +0100, Simon Farnsworth > <[EMAIL PROTECTED]> wrote: > > >On Tuesday 16 August 2005 06:34, J.C. Roberts wrote: > >> You seem to be confused on your terms. The term "PPPoA" means > >> Point-to-Point Protoco

Re: BSD PPPoA Hardware

2005-08-24 Thread jared r r spiegel
On Wed, Aug 24, 2005 at 09:55:50PM -0600, jared r r spiegel wrote: > take a phone cord coming in and an ethernet cord going out. > > it's possible > > i suppose > there could be a please forget this train of thought. > > it may be possible to use OpenB

Re: Openbgpd & kernel tuning

2006-03-08 Thread jared r r spiegel
On Wed, Mar 08, 2006 at 06:24:02PM +0100, Marcel Prisi wrote: > > I read some old threads about too small tcp.sendspace / tcp.recvspace in > 3.4 time that used to hit performance so I thought it would be useful. of all the times i dicked with those, my results have been that any performance

Re: Soekris VPN1411 seen but not used w/stock 3.8

2006-03-08 Thread jared r r spiegel
On Wed, Mar 08, 2006 at 10:03:40AM -0600, Gordon Grieder wrote: > sees the card OK but > won't use it. Quick script to turn userland crypto off and on with > benchmarks proves that. > <...> > > Here's a dmesg for both, any advice or direction is appreciated. including the commandlines of said b

Re: Soekris VPN1411 seen but not used w/stock 3.8

2006-03-08 Thread jared r r spiegel
On Wed, Mar 08, 2006 at 06:29:47PM -0600, Gordon Grieder wrote: > On Wed, Mar 08, 2006 at 06:07:30PM -0500, jared r r spiegel wrote: > > > > including the commandlines of said benchmarks would have been hot, > > in this case. > > The speed with and without user

Re: OpenBSD <-> Cisco IPSEC

2006-03-10 Thread jared r r spiegel
On Fri, Mar 10, 2006 at 08:12:59AM -0500, Paolo Supino wrote: > Hi > > I need to setup an IPSEC VPN between 2 locations. 1 location runs > Cisco gear (out of my control) and the other runs OpenBSD (my decision). depending on whether this is relevant to your needs or not, vpnc from ports(/s

Re: tcpdump needs no root privileges

2006-03-19 Thread jared r r spiegel
On Sun, Mar 19, 2006 at 05:59:23PM +0100, Joachim Schipper wrote: > On Sun, Mar 19, 2006 at 07:43:46PM +0300, Alex B wrote: > > Hello. > > > > When started from user, tcpdump complains: "need root privileges", even if I > > want it to read packets from regular file. > > Error is located in privsep

some crashes with VIA VT-310DP (npxdna_xmm(d06e7660) at npxdna_xmm+0x71)

2006-03-27 Thread jared r r spiegel
OPENBSD_3_8 from sources grabbed mar.2. kernel config: == $ diff -u GENERIC.MP GENERIC.MP.RAID --- GENERIC.MP Sun May 1 03:54:20 2005 +++ GENERIC.MP.RAID Sun Mar 26 21:45:32 2006 @@ -9,3 +9,6 @@ cpu* at mainbus? ioapic*at mainbu

Re: soekris: "corrupted mac on input" , on openbsd_3_9

2006-03-27 Thread jared r r spiegel
On Sun, Mar 26, 2006 at 06:43:38AM +, Didier Wiroth wrote: > Hi, > > I built a release from the OPENBSD_3_9 cvs sources a few days ago and > installed them on my soekris gate, a net 4801 with a soekris 1411 mini-pci > vpn card. > > When I ssh to the soekris host or I ssh from my soekris box

Re: RFC 2348 in libexec/tftpd

2006-03-28 Thread jared r r spiegel
On Tue, Mar 28, 2006 at 09:31:01AM +0530, Siju George wrote: > > Wow! This was not the impression I got from > > http://packages.debian.org/stable/net/tftp-hpa > > which says > > - > HPA's tftp client > > This is a tftp client derived from OpenBSD tftp with some extra > opti

Re: some crashes with VIA VT-310DP (npxdna_xmm(d06e7660) at npxdna_xmm+0x71)

2006-03-29 Thread jared r r spiegel
On Mon, Mar 27, 2006 at 03:11:49PM -0500, jared r r spiegel wrote: > > i forgot 'show panic' and 'show registers' these three times. ddb{0}> show panic the kernel did not panic ddb{0}> show registers ds 0x10 es

Re: some crashes with VIA VT-310DP (npxdna_xmm(d06e7660) at npxdna_xmm+0x71)

2006-03-30 Thread jared r r spiegel
On Thu, Mar 30, 2006 at 10:40:24AM +0200, mickey wrote: > On Thu, Mar 30, 2006 at 12:54:16AM -0500, jared r r spiegel wrote: > > On Mon, Mar 27, 2006 at 03:11:49PM -0500, jared r r spiegel wrote: > > > > > > i forgot 'show panic' and 'show registers&#

Re: soekris: "corrupted mac on input" , on openbsd_3_9

2006-03-31 Thread jared r r spiegel
On Mon, Mar 27, 2006 at 04:36:55PM -0500, jared r r spiegel wrote: > > > > When I ssh to the soekris host or I ssh from my soekris box to another one, > > I get disconnected with the following message: "corrupted mac on input". It > > happens on a inregular bas

Re: I need some help on frequently failing ipsec tunnel.

2006-03-31 Thread jared r r spiegel
On Fri, Mar 31, 2006 at 11:25:37AM +0200, Hans-Joerg Hoexer wrote: > On Fri, Mar 31, 2006 at 11:01:03AM +0200, Stefan Sczekalla-Waldschmidt wrote: > > > Whaa Isakmpd-debug-level Options should I set to get a better glue what > > ist happening ? this is not perfect, but when i am having trouble,

Re: [OT] This happens if you're using BLOBs

2006-04-08 Thread jared r r spiegel
On Sat, Apr 08, 2006 at 02:52:01PM +0200, Matthias Kilian wrote: > Hi, > > yet another example for what happens when people use BLOBs (it's *so* > convenient): > > http://www.freebsd.org/cgi/cvsweb.cgi/ports/UPDATING?rev=1.307&content-type=text/x-cvsweb-markup either i'm missing something, or

Re: [OpenCVS] what does soon mean?

2006-04-09 Thread jared r r spiegel
On Sun, Apr 09, 2006 at 10:38:13PM +0200, knitti wrote: > On 4/9/06, Stefan <[EMAIL PROTECTED]> wrote: > > It would be nice to know about when it's to be released so I can > > decide if I should use the "old" GNU CVS or if I should wait for a > > public stable release. > > Everything one could rea

Re: Looking for a default /etc/mk.conf to see all possible options to change

2006-04-09 Thread jared r r spiegel
On Sun, Apr 09, 2006 at 11:11:59PM +0200, Michael wrote: > > I read about the file /etc/mk.conf in which you can disable compile > options. These options will then apply to the src and the portstree. i found that things such as turning off YP and AFS are just a bit of a nuisance in the form

Re: spamd not logging to /var/log/spamd

2006-04-11 Thread jared r r spiegel
On Tue, Apr 11, 2006 at 03:42:09PM -0700, Bryan Irvine wrote: > > ---My modifications to syslog.conf--- > !spamd > daemon.err;daemon.warn;daemon.info /var/log/spamd > when you: $ sed -ne '/spamd/l' /etc/syslog.conf do you have !spamd\n$ daemon.err;daemon.warn;daemon.

Re: 'set skip on' being inconsistent

2006-04-13 Thread jared r r spiegel
On Thu, Apr 13, 2006 at 02:12:19PM -0600, Chris Cameron wrote: > In my pf.conf I have: > > set skip on tun0 > set skip on enc0 > set skip on lo0 <...> > > The connection attempt in my pflog: > > Apr 13 14:03:37.157867 rule 0/(match) block in on tun0: > 192.168.123.6.1160 > 192.168.120.50.23: S 6

Re: NFS server responsiveness

2006-04-15 Thread jared r r spiegel
On Sat, Apr 15, 2006 at 08:31:18AM -0600, David Wilk wrote: > I've got a test server with OpenBSD-3.8 on it (GENERIC except with > RAIDFRAME support) and considering the hardware, it does pretty well > with NFS performance. However, I've noticed that when under heavy NFS > load, it becomes nearly

Re: Interesting sensorsd.conf examples?

2006-04-27 Thread jared r r spiegel
On Thu, Apr 27, 2006 at 01:36:00PM -0400, Will H. Backman wrote: > Anyone running interesting sensorsd.conf files that they would like to > share with the list? > I don't see a lot of examples out there. > What actions are you having sensord performs? Are most people just > sending to syslog and u

Re: using torrents for packages?

2006-05-01 Thread jared r r spiegel
On Tue, May 02, 2006 at 03:57:42AM +0200, [EMAIL PROTECTED] wrote: > > Btw: I talked about synergy-effects wich would be provide an advantage for > all Servers. If you don`t know what synergy is and if that`s the reason > why you can`t stop bitching you may wanna visit the school again > > Th

Re: Compilers make a system less secure?

2006-05-02 Thread jared r r spiegel
On Tue, May 02, 2006 at 04:21:41PM +1200, josh wrote: > Hello... > > Some people seem to think that installing a compiler inherently makes > their system less secure... despite never being able to cite any actual > reasons why. i had a machine get compromised once; now we don't have a compiler

Re: Compilers make a system less secure?

2006-05-02 Thread jared r r spiegel
On Tue, May 02, 2006 at 09:33:48AM -0400, jared r r spiegel wrote: > > i am not asserting that the compromise-pack did not have > a precompiled sshd binary for openbsd ( the prior hop > up the compromise chain in this case was a debianlinux ), > but if it didn't, it

Re: Compilers make a system less secure?

2006-05-02 Thread jared r r spiegel
On Tue, May 02, 2006 at 09:49:07PM +0100, Constantine A. Murenin wrote: > On 02/05/06, jared r r spiegel <[EMAIL PROTECTED]> wrote: > > > > if we didn't have that little PIII/450 sitting next to the > > machine now, for the purposes of bringing live, getting >

Re: www.openbsd.org defaults to Japanese

2006-05-02 Thread jared r r spiegel
On Tue, May 02, 2006 at 08:01:49PM -0401, Ray Lai wrote: > On Tue, May 02, 2006 at 11:26:37PM +, Tan Dang wrote: > > Any reason why www.openbsd.org displays Japanese by default now? woot! maybe it's there so you get into the habit of using mirrors for the www also. -- jared [ openbs

Re: clueless bluetooth quesiton

2006-05-04 Thread jared r r spiegel
On Thu, May 04, 2006 at 06:24:14PM +0200, Javier Sol?rzano wrote: > > uhidev0 at uhub0 port 1 configuration 1 interface 0 > uhidev0: Cambridge Silicon Radio BlueCore, rev 1.10/9.01, addr 2, > iclass 3/1 > ukbd0 at uhidev0: 8 modifier keys, 6 key codes > wskbd1 at ukbd0 mux 1 > uhidev1 at uhub0 p

Re: Harddrive in soekris

2006-05-04 Thread jared r r spiegel
On Thu, May 04, 2006 at 11:35:32PM +0200, Lasse Bach wrote: > Hi folks, > > I'm installing 3.9 on my soekris 4801. > I'm installing on new IBM travelstar harddrive. > > I't makes som strange errors? Can anyone enlighten me? > Is it just a bad harddrive? <...> > wd0(pciide0:0:0): timeout > t

Re: adding alias to carp if fails after creation of pseudo device

2006-05-08 Thread jared r r spiegel
> Dag Richards wrote: > > Am I correct in inferring ( not assuming no! ) that once a carp iface is > > created we can not add aliases to them? i can from here > > fw1:root:/etc #ifconfig carp1 > > carp1: flags=8843 mtu 1500 > > description: virtual if for all internal traffic > >

Re: New server

2006-05-19 Thread jared r r spiegel
On Fri, May 19, 2006 at 08:37:13PM +0100, Gaby vanhegan wrote: > > I don't want to put the entire /home partition into the chroot, that > leaves everybody's files vulnerable if apache/php gets haxored. I > could just keep each users websites folder in the chroot, but then > sftpd or ftpd (b

ksh: typeset screwing up subsequent parameter's array indices?

2006-05-20 Thread jared r r spiegel
=== [/home/jrrs] $ uname -mrpsv OpenBSD 3.9 GENERIC.MP#690 i386 AMD Athlon(tm) MP 2800+ ("AuthenticAMD" 686-class, 512KB L2 cache) [/home/jrrs] $ echo $KSH_VERSION @(#)PD KSH v5.2.14 99/07/13.2 [/home/jrrs] $ ls -l $(which ksh) -r-xr-xr-x 3 root bin 324128 May 1 20:28 /bin/ksh === if i star

Re: ksh: typeset screwing up subsequent parameter's array indices?

2006-05-20 Thread jared r r spiegel
On Sat, May 20, 2006 at 11:28:26AM -0400, jared r r spiegel wrote: > > i have half a mind that says otto@/kili@/ckuthe will come down > and cluestick me about why what i am seeing is expected behaviour, > but the other half expects this to be not what should be happening. the

Re: ksh: typeset screwing up subsequent parameter's array indices?

2006-05-20 Thread jared r r spiegel
On Sat, May 20, 2006 at 11:59:13PM +0200, Otto Moerbeek wrote: > > How about this? If I see things correctly, the ATEMP allocation should > be cleaned up automatically Running a little test loop does not > show a leak. Both bugs are fixed, and array entries are nice integer vals. > <...> > >

Re: Comment evaluation in pf.conf

2006-05-22 Thread jared r r spiegel
On Mon, May 22, 2006 at 10:40:47PM +0200, Paulo Rodriguez wrote: > > . > > # pas on re0 from any \ # > # to any port 59# > > . > > is it expected behavior that pfctl complains about a space after the > backs

Re: Comment evaluation in pf.conf

2006-05-22 Thread jared r r spiegel
> >On Mon, May 22, 2006 at 03:07:14PM -0600, Theo de Raadt wrote: > # pas on re0 from any \ # > # to any port 59# > >[...] > >>> i would think the good reason is that the line is not a comment > >>> as you imagine, but would effectively turn into: > >[...] >

Re: clamav-0.88.2

2006-05-26 Thread jared r r spiegel
On Fri, May 26, 2006 at 03:25:59PM -0400, Peter Fraser wrote: > I just pulled down ftp.openbsd.org/pub/OpenBSD/3.9/ports.tar.gz > > and it too contains only clamav-0.88 not clamav-0.88.2 iirc that's -release, not -stable checked a few of the others in that pkg-stable.html, and the versions

Re: ioapic0 degraded performance

2006-05-29 Thread jared r r spiegel
On Sun, May 28, 2006 at 12:18:51AM +0200, Antoine Jacoutot wrote: > ioapic0 at mainbus0: apid 2 pa 0xfec0, version 11, 24 pins > ioapic0: conflicting map entries for pin 0 > ioapic0: pin 19 shares different IPL interrupts (40..90), degraded performance > > I don't quite understand what it mean

Re: [Fwd: 'Corrupted MAC on input' points to vpn1411 problem]

2006-05-29 Thread jared r r spiegel
On Mon, May 29, 2006 at 10:01:21PM -0600, Breen Ouellette wrote: > > A few months ago, Didier Wiroth posted to this list that his net4801 with > a vpn1411 was giving him 'Corrupted MAC on input' errors. He was looking > for a solution to this problem. i think i chimed in on that one. since i

Re: hw.sensors, Dell 1850

2006-05-29 Thread jared r r spiegel
On Mon, May 29, 2006 at 05:23:09PM -0500, Doug Carter wrote: > I'm running OpenBSD 3.9 on a Dell 1850. A fine list of hardware > sensors and their current readings is given by sysctl -a; does > anyone have a cross reference from this list to the actual hardware > components in the Dell 1850

Re: [Fwd: 'Corrupted MAC on input' points to vpn1411 problem]

2006-05-31 Thread jared r r spiegel
On Tue, May 30, 2006 at 07:49:39AM -0600, Breen Ouellette wrote: > > Thanks for your post. I hope you take it one step further and run that > script (and then report your result to this list)! :) i just run worms(6) or rain(6) in a screen(1) window and then set it to monitor for 30s silenc

Re: vpn1411 problem related to software error? (was Re: [Fwd: 'Corrupted MAC on input' points to vpn1411 problem])

2006-06-01 Thread jared r r spiegel
On Thu, Jun 01, 2006 at 02:32:22PM -0600, Breen Ouellette wrote: > Didier Wiroth wrote: > >Hello, > > > >Hmm I get the "corrupted mac" error again on current, while > >connecting to the net4801 with windows + putty. > > > >Connecting with openbsd ssh client does not produce the error, I only

Re: How to enable hw crypto?

2006-06-02 Thread jared r r spiegel
On Fri, Jun 02, 2006 at 05:23:40PM -0700, Winston wrote: > I have tried the following command to get the hw crypto to work: > openssl speed des-cbc -engine cryptodev > But the result I got is pretty much the same if I don't specify the > cryptodev engine. > The crypto card I have is hifn7956. > I t

Re: certpatch in 3.8 ...

2005-09-03 Thread jared r r spiegel
On Tue, Aug 23, 2005 at 03:58:31PM +0100, Jason McIntyre wrote: > > yes, it was removed a little while ago. you can get the same > functionality from openssl(1) req. see also isakmpd(8). i checked on the isakmpd(8), it gives an example how to make a subjectAltName extension field using IP or

Re: watch irq usage: soekris net4801 + vpn1401: unterstand vmstat output

2005-09-04 Thread jared r r spiegel
On Sun, Sep 04, 2005 at 09:31:36PM +0200, Vincent Immler wrote: > > What does this output mean? Is someone able to explain this output to me? > > /* not copying files*/ > soekris# vmstat -i | grep hifn > irq11/hifn0397322 488 > > /* start to copying files via SFTP*/ > so

isakmpd/x509 - 'default-phase-1-id' required? (user-fqdn)

2005-09-08 Thread jared r r spiegel
i've been trying to write an isakmpd.conf for two peers to establish IPsec after using x509 certs for Phase 1. each peer has a copy of the CA cert in /etc/isakmpd/ca, has their own public cert in /etc/isakmpd/certs, and their private key in /etc/isakmpd/private. i used the procedure doc

Re: isakmpd/x509 - 'default-phase-1-id' required? (user-fqdn)

2005-09-08 Thread jared r r spiegel
On Thu, Sep 08, 2005 at 07:25:52AM -0600, jared r r spiegel wrote: mis-format on the two configs, please split them thus: > -[peer a] > [general] > #default-phase-1-id=id1hklocal > > [phase 2] > connections=cx >

Re: max-mss/max-ttl question

2005-09-09 Thread jared r r spiegel
On Fri, Sep 09, 2005 at 03:18:24PM +0200, Stephan A. Rickauer wrote: > That's probably a quick one: > > mtu - IPheader - TCPheader = max-mss? > > E.g. for ethernet: > > 1500 - 20 - 20 = 1460? i use the max-mss like this: scrub on $t all fragment reassemble reassemble tcp no-df random

Re: X kills console.

2005-09-10 Thread jared r r spiegel
On Sat, Sep 03, 2005 at 04:51:31PM +0200, Adam Papai wrote: > > Ahh! I re-read your post. I know your problem. Sometimes ATI cards do > this. I don't know why. But if you type startx again "blind" then your > screen will probaby come back. It's the same with every Xorg and > XFree86. Sometimes

Re: Spamd/Postfix behaving strangely

2005-09-11 Thread jared r r spiegel
On Sun, Sep 11, 2005 at 11:12:07AM -0400, Jason Dixon wrote: > On Sep 11, 2005, at 11:02 AM, Steve Williams wrote: > > >Jason Dixon wrote: > >>[EMAIL PROTECTED] root]# telnet mail.domain.com 25 > >>Trying x.x.x.x... > >>Connected to mail.domain.com (x.x.x.x). > >>Escape character is '^]'. > >>220

Re: Random reboots with 3.8 beta i386 on multiple boxes

2005-09-12 Thread jared r r spiegel
On Mon, Sep 12, 2005 at 04:23:01PM +1000, Rod.. Whitworth wrote: > > >On Mon, 12 Sep 2005, Rod.. Whitworth wrote: > > > >> Any clues/ things to try? I am a bit worried about the build #137 as > >> that's pretty close to release but I haven't heard anybody else > >> reporting problems and the archi

Re: Random reboots with 3.8 beta i386 on multiple boxes

2005-09-12 Thread jared r r spiegel
oh yeah, my dmesg fwiw: OpenBSD 3.8 (GENERIC) #137: Thu Sep 1 17:41:20 MDT 2005 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Geode(TM) Integrated Processor by National Semi ("Geode by NSC" 586-class) 267 MHz cpu0: FPU,TSC,MSR,CX8,CMOV,MMX cpu0: TSC disabled real mem = 13

Re: MP3 Daemon

2005-09-12 Thread jared r r spiegel
On Mon, Sep 12, 2005 at 11:50:55AM -0400, Michael Shalayeff wrote: > > of course the easiest solution being lpd(8). > no need to install no stinky pkg! before someone fails to check the archives and receives STFA: http://marc.theaimsgroup.com/?l=openbsd-misc&m=105365665315880&w=2 jared -

anyone tried bgpd vs. he.net/tunnelbroker.net

2005-09-17 Thread jared r r spiegel
hurricane electric has that IPv6 thing where they'll bgp with you so you can get their view of IPv6 internet. tried it a while ago (~3.6?) with openbsd bgpd and it would bomb on me complaining of unsupported capability. tried it on sep.1 current and same thing. when i watch tcpdump,

Re: PF performance question

2005-09-18 Thread jared r r spiegel
On Sun, Sep 18, 2005 at 01:17:04AM -0300, Vinicius Pavanelli Vianna wrote: > Hi, > > I'm using OpenBSD 3.7 with pf and bridge enabled for a transparent > proxy, and I'm having some packet loss somewhere in this bridge, since > netstat -ni doesn't give me any ierrors what about pkts? does the i

<    1   2   3   >