Re: PF sync doesn't not work very well

2013-07-03 Thread Loïc BLOT
Hi, Thanks for your reply. I wasn't careful about this section. If i understand i must add defer option to my WAN iface (or i'm wrong i must add it to my vlan995 iface ?) ? I will test it this morning, and i return back to misc :) -- Best regards, Loïc BLOT, UNIX systems, security and network

Re: Compiling and debugging custom ralink driver for 5.3 GENERIC (release)

2013-07-03 Thread Remco
Nathan Goings wrote: I purchased an Edimax EW-7128Gn that contains a ralink RT3060 chip and it's unrecognized. dmesg: vendor Ralink, unknown product 0x3060 (class network subclass miscellaneous, rev 0x00) at pci4 dev 0 function 0 not configured The documentation says a/g/n but this is a

Re: Still unable to compile binaries :(

2013-07-03 Thread jV
Thanks Phil. Your advice worked out. It is quite sad that I can't run parallel compile while building system, but this definitely wont stop me from using OBSD! On 7/3/2013 0:50 AM, Philip Guenther wrote: On Tue, Jul 2, 2013 at 2:19 PM, jV j...@dodec.lt wrote: ... then I followed instructions

Re: Still unable to compile binaries :(

2013-07-03 Thread jV
Hi Marc, can you please be more specific here ? Thanks, On 7/3/2013 7:37 AM, Marc Espie wrote: On Tue, Jul 02, 2013 at 02:50:08PM -0700, Philip Guenther wrote: These are defined in y.tab.h, which is created by yacc -d This might have been fixed in -current by the import of the newer version

Re: PF sync doesn't not work very well

2013-07-03 Thread Loïc Blot
Okay, defer is now enabled on pfsync interface (sorry for my last idea, i haven't the man on me :) ). It seems the problem isn't resolved. The transfer starts but blocked at random time. -- Best regards, Loïc BLOT, Engineering UNIX Systems, Security and Networks http://www.unix-experience.fr

Re: PF sync doesn't not work very well

2013-07-03 Thread mxb
How does your CARP setup looks like. On both machines? Can you send your ifconfig output? What is your environment/setup for this 2-node CARP? How interfaces (ext/int) are connected? What switches do you use? On 3 jul 2013, at 10:23, Loïc Blot loic.b...@unix-experience.fr wrote: Okay, defer

Hang possibly related to pipex

2013-07-03 Thread Marko Cupać
I have a machine that has been serving as NAT gateway and VPN server (both pptp/poptop and openvpn) since 5.0 without problems. On 5.2 I switched poptop to npppd compiled from sources and was very happy with it. With release of 5.3 I added second machine as CARP failover backup. In last 10 days

Re: PF sync doesn't not work very well

2013-07-03 Thread Loïc Blot
Hello, no carp is used at this time. My configuration on each router is simple: em0 + em3 = trunk0 em1 + em2 = trunk1 4 interco vlan (at this time, only 2 are active, 1 for a BGP neighbor IPv4, 1 for a BGP neighbor IPv6) on trunk0 vlan 50 + vlan 90 + vlan995 on trunk1 pfsync on vlan 995 --

Re: PF sync doesn't not work very well

2013-07-03 Thread Mark Felder
On Wed, 03 Jul 2013 07:00:02 -0500, Loïc Blot loic.b...@unix-experience.fr wrote: Hello, no carp is used at this time. pfsync needs to be used with carp... without it you're just playing whack-a-mole with your session table.

Re: PF sync doesn't not work very well

2013-07-03 Thread Loïc Blot
It's not possible to sync pf table without CARP ? I must use it in some case, then those case will be fixed but the other (OSPFd routing) may fail i think ? -- Best regards, Loïc BLOT, Engineering UNIX Systems, Security and Networks http://www.unix-experience.fr Le mercredi 03 juillet 2013

Re: PF sync doesn't not work very well

2013-07-03 Thread Mark Felder
On Wed, 03 Jul 2013 07:40:08 -0500, Loïc Blot loic.b...@unix-experience.fr wrote: It's not possible to sync pf table without CARP ? In order to answer that I'll need to understand what you believe the pf table is.

Re: PF sync doesn't not work very well

2013-07-03 Thread mxb
Sure it syncs, but node1 has completely different IP addresses than node2(both external and internal ??), if no CARP. So storing states from node1, which passes/initiated connection to ftp.fr , on node2 does not help. In your case, you'd probably to decide to ever have MASTER-BACKUP or to have

Re: PF sync doesn't not work very well

2013-07-03 Thread Loïc Blot
For me pf table is (sorry for the missing precisions) the pf state stable for stateful operations -- Best regards, Loïc BLOT, Engineering UNIX Systems, Security and Networks http://www.unix-experience.fr Le mercredi 03 juillet 2013 à 08:22 -0500, Mark Felder a écrit : On Wed, 03 Jul 2013

Re: PF sync doesn't not work very well

2013-07-03 Thread Patrick Lamaiziere
Le Wed, 03 Jul 2013 07:11:08 -0500, Mark Felder f...@feld.me a écrit : On Wed, 03 Jul 2013 07:00:02 -0500, Loïc Blot loic.b...@unix-experience.fr wrote: Hello, no carp is used at this time. pfsync needs to be used with carp... without it you're just playing whack-a-mole with your

Re: PF sync doesn't not work very well

2013-07-03 Thread Mark Felder
On Wed, 03 Jul 2013 09:24:54 -0500, Loïc Blot loic.b...@unix-experience.fr wrote: For me pf table is (sorry for the missing precisions) the pf state stable for stateful operations First of all, the states of node 1 being synced to node 2 and vice versa is worthless because they have

Re: PF sync doesn't not work very well

2013-07-03 Thread Loïc Blot
I don't understand why they can't be synced because if i have this scheme: server 1 - | Router 1 + Router 2 | remote server 1 contact remote, outgoing by Router 1 and the return traffic comes from Router 2. The state may have server 1 port A to remote port B, then the virtual IP is useless in

Re: PF sync doesn't not work very well

2013-07-03 Thread mxb
States ARE synced. IPs are not the same on node1 and node2 for external. The you initiated connection to ftp.fr, you done it via node1 with its external IP. On node2 those packets will be DROPPED as those do not belong to external NIC on node2 (IP) On 3 jul 2013, at 17:16, Loïc Blot

Re: PF sync doesn't not work very well

2013-07-03 Thread Loïc Blot
The connection is not done by my routers themselves but by DMZ servers behind them ! -- Best regards, Loïc BLOT, Engineering UNIX Systems, Security and Networks http://www.unix-experience.fr Le mercredi 03 juillet 2013 à 17:32 +0200, mxb a écrit : States ARE synced. IPs are not the same on

Re: Softraid performance: CRYPTO on top of RAID 1?

2013-07-03 Thread Joel Sing
On Tue, 2 Jul 2013, Erling Westenvik wrote: Hi folks, Anyone having any experience with putting an softraid CRYPTO partition on top of a softraid RAID 1? In terms of performance? I'd like to build a file server that favors redundancy, availability and privacy over performance. The latter

Re: OpenBSD Doesn't Support 64-Bit Intel

2013-07-03 Thread carlos albino garcia grijalba
hello florenz! u are wright! i was a wrong and try to defend myself by answering back but i check again to what jash was saying and then bang he was Wright, Damm even worse, but ok i learn the lesson, usually y try to internet and then on archives but this time i got confused on supports from 32

Re: Compiling and debugging custom ralink driver for 5.3 GENERIC (release)

2013-07-03 Thread Nathan Goings
Thanks for your response! On 7/3/2013 1:07 AM, Remco wrote: AFAIK this is step one. Assuming you added the PCI IDs correctly, the driver's attach function should run. However, to the best of my understanding, you chose a more or less random attach function for your unsupported device. My guess

Re: OpenBSD Doesn't Support 64-Bit Intel

2013-07-03 Thread Chris Cappuccio
Nick Holland [n...@holland-consulting.net] wrote: On 07/02/2013 11:44 AM, noah pugsley wrote: More wrong? Maybe so. My point was that both are and either way it's inconsistent. not anymore. new text, as of last night: Processors All CPUs compatible with the Intel 80486 or better, with

Re: OpenBSD Doesn't Support 64-Bit Intel

2013-07-03 Thread Zeljko Jovanovic
On 03.07.2013. 19:15, Chris Cappuccio wrote: Is there floating-point hardware for 486 or higher that isn't Intel-compatible? This text seems superfluous. I remember some Weitek floating-point coprocessors from those times - I suppose they were not x87 compatible?

Re: OpenBSD Doesn't Support 64-Bit Intel

2013-07-03 Thread Nick Holland
On 07/03/2013 01:15 PM, Chris Cappuccio wrote: Nick Holland [n...@holland-consulting.net] wrote: On 07/02/2013 11:44 AM, noah pugsley wrote: More wrong? Maybe so. My point was that both are and either way it's inconsistent. not anymore. new text, as of last night: Processors All CPUs

Re: softdep issue in 5.3-current ?

2013-07-03 Thread Andreas Bartelt
On 07/03/13 05:45, Andreas Bartelt wrote: I made a new build of current and the problem with tar performance seems to be resolved now. before: # time tar -xzpf /usr/releasedir/comp53.tgz 3m17.81s real 0m2.14s user 0m2.22s system # time tar -xzpf /usr/releasedir/base53.tgz

Re: OpenBSD Doesn't Support 64-Bit Intel

2013-07-03 Thread Christian Weisgerber
Zeljko Jovanovic zelj...@tesla.rcub.bg.ac.rs wrote: Is there floating-point hardware for 486 or higher that isn't Intel-compatible? This text seems superfluous. I remember some Weitek floating-point coprocessors from those times - I suppose they were not x87 compatible? They

Re: OpenBSD Doesn't Support 64-Bit Intel

2013-07-03 Thread Miod Vallat
an unlikely combination, but a 486sx with a Weitek 4167 would qualify. And OpenBSD would not run on it, because it only expects an x87-compatible FPU on such a system. Plus... I would not be surprised if some day, someone (probably Chinese/Taiwanese/Indian) did an embedded x86 compatible-ish

luit and crashing xterm

2013-07-03 Thread Jan Stary
In my ~/.Xresources, I specify XTerm*locale:ISO8859-2 to get my xterm to display the chars of the Czech language, and in my ~/.xinitrc, I toggle -layout us,cz via setxkbmap to be able to type the Czech chars. (See full ~/.Xresources and ~/.xinitrc at bottom.) My problem is that _sometimes_ I

Re: luit and crashing xterm

2013-07-03 Thread Christian Weisgerber
Jan Stary h...@stare.cz wrote: I understand that the support for the XTerm*locale: ISO8859-2 setting is achieved by using luit(1). If I comment the locale setting out (and so don't launch luit and lose the locale support), these problems disappear. This leads me to suspect luit, or the way

Re: Softraid performance: CRYPTO on top of RAID 1?

2013-07-03 Thread Jiri B
On Thu, Jul 04, 2013 at 02:33:51AM +1000, Joel Sing wrote: [...snip...] FWIW one of my servers (handles mail, etc) is a Sun Fire V210 (sparc64) machine with 2x1GHz CPU, 2GB RAM and a pair of SCSI drives - it runs perfectly well in a similar CRYPTO on RAID 1 configuration. That said, you'd

Re: Any other ThinkPad W500 users out there?

2013-07-03 Thread Fred Crowson
On 2 July 2013 14:39, Mikhail Krutov n...@takino.org wrote: On Sun, Jun 30, 2013 at 02:43:28AM -0400, STeve Andre' wrote: If so, I'd like to know if you are running a recent 5.3-current. Mail me off list so we don't pollute misc@. Steve, My opinion (if it costs anything) is that this info

Fuse on OpenBSD

2013-07-03 Thread Hugo Osvaldo Barrera
About a month ago, I followed up on tech@ that some fuse support had been merged into the kernel, but disable by default. (By the way, congrats and thanks to the devs for that! :D) I'm wondering if there's any timeframe for this getting enabled by default - I'd love to have fuse support, but I

Re: softraid: adding volumes, CPU requirements, RAID5

2013-07-03 Thread Hugo Osvaldo Barrera
On 2013-07-02 18:53, Nick Holland wrote: On 07/02/13 17:07, Jean-Francois Simon wrote: Le 20/05/2013 13:46, Nick Holland a écrit : On 05/20/13 00:52, Hugo Osvaldo Barrera wrote: ... 3) The man pages report RAID5 as experimental. I'm curious, why is this so? Is it just not-very-thoroughly

Re: Fuse on OpenBSD

2013-07-03 Thread Theo de Raadt
About a month ago, I followed up on tech@ that some fuse support had been merged into the kernel, but disable by default. (By the way, congrats and thanks to the devs for that! :D) I'm wondering if there's any timeframe for this getting enabled by default - I'd love to have fuse support,

Re: Fuse on OpenBSD

2013-07-03 Thread eric oyen
Theo, Don't you just love it when folks ask questions they already know the answers to? Still, FUSE is a wonderful idea. It certainly would make OpenBSD more versatile (and even allow it to wend its way further into both the user and corporate market segments. anyway, hope you are having a

Re: Fuse on OpenBSD

2013-07-03 Thread Theo de Raadt
Still, FUSE is a wonderful idea. It certainly would make OpenBSD more versatile (and even allow it to wend its way further into both the user and corporate market segments. So we should enable it right now, today, when it is brand new code? Skip the testing period? Start from go, and

Re: Fuse on OpenBSD

2013-07-03 Thread eric oyen
Did I say that it had to be run today? Funny, I only remember remarking that its a wonderful idea. As for my being an idiot, the jury is still out on that one. :) I know that this is your way to motivate others into doing for themselves. There are better ways to do this, but you are you and I

Re: Fuse on OpenBSD

2013-07-03 Thread opendaddy
Why do we need FUSE anyway? O.D. On 4. juli 2013 at 2:10 AM, eric oyen eric.o...@gmail.com wrote: Did I say that it had to be run today? Funny, I only remember remarking that its a wonderful idea. As for my being an idiot, the jury is still out on that one. :) I know that this is your way to

Re: Fuse on OpenBSD

2013-07-03 Thread Brad Smith
On 03/07/13 11:07 PM, openda...@hushmail.com wrote: Why do we need FUSE anyway? To be able to utilize FUSE based filesystems. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

Re: Fuse on OpenBSD

2013-07-03 Thread Johan Beisser
On Jul 3, 2013, at 20:23, Brad Smith b...@comstyle.com wrote: On 03/07/13 11:07 PM, openda...@hushmail.com wrote: Why do we need FUSE anyway? To be able to utilize FUSE based filesystems. Fuse is a terrible hack. But, a useful one that solves all kinds of problems. Sent form my iFoe.

sdhc and Ricoh 5U823

2013-07-03 Thread Greg Thomas
My first dumb question since I've been back and there will probably be plenty more. With the Ricoh 5U823 does sdhc only recognize SD cards on boot? OpenBSD 5.3 (GENERIC.MP) #58: Tue Mar 12 18:43:53 MDT 2013 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP cpu0: Intel(R)