Re: Privoxy lockups

2006-02-18 Thread Juha Erkkila
On Fri, Feb 17, 2006 at 08:38:32PM +0100, Michael Frost wrote: Using OpenBSD-v3.8 and v3.9-BETA on i386 together with tor, privoxy stops working alfways after a few minutes up to a few hours. 'Stop working' means either the privoxy process isn't running anymore (so it needs to be restarted) or

Re: slow downloads to gateway

2006-02-18 Thread Bachman Kharazmi
bw_test_512MB:ETA: 1:08 101.21/512.00 MB6.03 MB/s I increased the value to 10 thanks /bkw On 18/02/06, Melameth, Daniel D. [EMAIL PROTECTED] wrote: Bachman Kharazmi wrote: I'm running obsd 3.8 release on my gateway. Two xl nics are installed. The GW does NAT

Workaround if your broadcom nic timed out when disabling ethernet mac

2006-02-18 Thread Alexey E. Suslikov
i have EXACTLY the same issue on one of Samsung's notebook. you need to UNPLUG power cord from your PC/notebook BEFORE booting into OpenBSD/NetBSD. see here http://mail-index.netbsd.org/netbsd-bugs/2004/03/25/0005.html Bryan Brake wrote: This annoyance started when I bought a brand-new Dell

strange ipv6 routing issue

2006-02-18 Thread Olivier Mehani
Hello list, I'm playing with IPv6 in 3.8 and came up to this strange problem. My IPv6 connectivity is given by a broker (xs26.net) and I have set up a gif interface to use it (gif0): /etc/hostname.gif0 contains: tunnel SIS0IPv4 BROKERIPv4 inet6 IPv6PREFIX::1 !route add -inet6 default

Re: strange ipv6 routing issue

2006-02-18 Thread David Hill
On Sat, Feb 18, 2006 at 12:57:05PM +0100, Olivier Mehani wrote: Hello list, I'm playing with IPv6 in 3.8 and came up to this strange problem. My IPv6 connectivity is given by a broker (xs26.net) and I have set up a gif interface to use it (gif0): /etc/hostname.gif0 contains: tunnel

Re: slow downloads to gateway

2006-02-18 Thread Bachman Kharazmi
By the way, when I now have a proper download speed, I have to ask why the default vaule of net.inet.tcp.recvspace is set so low? I have a 100MBit inet connection so it was little confusing with my earlier bandwidth limitation. /bkw On 18/02/06, Bachman Kharazmi [EMAIL PROTECTED] wrote:

Re: slow downloads to gateway

2006-02-18 Thread Melameth, Daniel D.
I'm certain someone will correct me if I'm wrong, but the current setting is optimized for low latency networks, like LANs, and reduces kernel memory consumption. Also, your use of a value of a million, is overly high and might lead to problems--experiment and use the lowest value that meets your

Utilisation of free memory as disc cache: tweaking is required?

2006-02-18 Thread Constantine A. Murenin
Hello, I have a box with 512MB of RAM, which is running a snapshot from 2006-02-13. The box does not get used much, so most of the RAM stays still, i.e. not used by the userland. I am now quite surprised why OpenBSD does not use all of this RAM for disc cache etc. After rebooting the system,

Problem using Nslookup through VPN link

2006-02-18 Thread Todd Boyer
I have two 3.8 (GENERIC) IPSec VPN gateways using ISAKMP transforms for negotiation. No complicated PF rules, everything is wide open between networks. I can access and negotiate every protocol except when I call an nslookup request from one side to a W2K3 server on the other. I receive timeouts

Re: nat, pf, and ftp

2006-02-18 Thread Darrin Chandler
David Higgs wrote: After reading the man pages for pf.conf and ftp-proxy, it's not 100% clear to me how I should go about supporting ftp. I have a basic 2-nic obsd box doing nat for my internal network, and run ftp-proxy with the -n flag. The relevant portions of my pf.conf are shown below:

anoncvs as root or user?

2006-02-18 Thread Erwin Zbinden
Hi Do I checkout source via anoncvs as root or as user? Erwin -- Telefonieren Sie schon oder sparen Sie noch? NEU: GMX Phone_Flat http://www.gmx.net/de/go/telefonie

Re: pix firewall question

2006-02-18 Thread Thomas Börnert
pix isn't so easy as openbsd :-| rdr from outside: global (outside) 1 interface nat (inside) 1 INTERNALPC 255.255.255.255 static (inside,outside) tcp EXTERNALIP smtp INTERNALPC smtp netmask 255.255.255.255 Thomas On Sat, 2006-02-18 at 13:13 -0500, Rod Dorman wrote: On Saturday, February 18,

Re: Crash after halt -p (i386, current of feb. 5th)

2006-02-18 Thread Oliver J. Morais
For the archives: Tried again with sysctl machdep.apmhalt=1, same game :-/ # halt -p /etc/rc.shutdown in progress... /etc/rc.shutdown complete. syncing disks... done Attempting to power down... apm0: APM set power state: unrecognized device ID (9) uvm_fault(0xd6930298, 0x8000, 0, 1) - e kernel:

Re: nat, pf, and ftp

2006-02-18 Thread David Higgs
I'm beginning to wonder if I'm being dense and missing something brutally simple. I've looked at the pf FAQ, payed special attention to the FTP section, and even used identical configuration without success. The problem is that with passive mode, the client is actively attempting to connect to

Re: nat, pf, and ftp

2006-02-18 Thread Stuart Henderson
On 2006/02/18 16:12, David Higgs wrote: The problem is that with passive mode, the client is actively attempting to connect to the server. Port numbers on either end cannot be predicted Well, that depends somewhat on your ftp server. Most modern ones allow you to restrict the range of ports

Re: nat, pf, and ftp

2006-02-18 Thread Martin Schröder
On 2006-02-18 16:12:39 -0500, David Higgs wrote: Any further ideas? Check the example. It uses ftp-proxy(8) Best Martin PS: http://en.wikipedia.org/wiki/Top-posting -- http://www.tm.oneiros.de

Problems with ath wireless card

2006-02-18 Thread Aaron Hsu
Hey all, I have having trouble getting my Atheros based WG311T Netgear wireless card to work. I have ruled out bad signal strength thus far, and the driver seems to be working. Dmesg (STABLE-branch GENERIC 3.8): ath0 at pci3 dev 7 function 0 Atheros AR5212 rev 0x01: irq 10 ath0: AR5212 7.9

Re: Error making devel/jdk

2006-02-18 Thread Jeff Quast
On 2/18/06, Aaron Hsu [EMAIL PROTECTED] wrote: I'm trying to get the Java plugin for my browsers (Opera and Firefox), and from what I can tell from the documentation, this is done by installing the jdk package. The documentation I read said that only the 1.3 and 1.4 version have plugins for

Re: pix firewall question

2006-02-18 Thread Samurai Chef
At the risk of sounding like I'm a regular on this list, RTFM. OR look at other examples in the PIX config. On 2/18/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hi there. I am a long time user of openbsd and ipf/pf. I just got stuck with the task of managing some pix firewalls for the

Re: Feb 13 X snapshot

2006-02-18 Thread Maxim Bourmistrov
Re! Keyboard does not work in Feb 15 snapshot too. Actually it work on my laptop, but not on my desktop. On desktop I'm having the same error: KbdOn: tcsetattr: Operation not supported Complete X.log: (--) checkDevMem: using aperture driver /dev/xf86 (--) Using wscons driver in pcvt

Redundant Failover Firewalls

2006-02-18 Thread John Brooks
I am needing to build two identical failover firewalls with openbsd, pf, pfsync, and carp. So far simple enough, with so many articles and examples available. All of these are using NAT. However, I am needing to use public IP's out of a /25 allocation, without NAT. I have not been able to find

Sera Systems no more

2006-02-18 Thread Matthew Closson
Maybe someone else has mentioned this already on the list, I happened to go to Sera Systems site today while looking for some 1U OpenBSD boxes, and I found this: --- After many pleasurable years, we have decided to

Re: Sera Systems no more

2006-02-18 Thread Rod.. Whitworth
On Sun, 19 Feb 2006 01:09:21 -0500 (EST), Matthew Closson wrote: Maybe someone else has mentioned this already on the list, I happened to go to Sera Systems site today while looking for some 1U OpenBSD boxes, and I found this:

Error making devel/jdk

2006-02-18 Thread Aaron Hsu
I'm trying to get the Java plugin for my browsers (Opera and Firefox), and from what I can tell from the documentation, this is done by installing the jdk package. The documentation I read said that only the 1.3 and 1.4 version have plugins for browsers, so I chose 1.4. Doing a make after