Re: relayd as transparent HTTPS proxy

2013-11-20 Thread Gianfranco Gallizia
On 18/11/2013 15:09 CET, Gianfranco Gallizia wrote: Hello everyone, I have a question regarding relayd(8) in OpenBSD 5.3 I was playing a little with relayd as a transparent proxy with URL filtering using this relayd.conf: http protocol httpfilter { # Return HTML error pages

Re: DNS Hosting Managed DNS

2013-11-20 Thread Henning Brauer
* Nicolai nicolai-om...@chocolatine.org [2013-10-24 18:49]: On Thu, Oct 24, 2013 at 10:35:51AM -0400, Predrag Punosevac wrote: We are looking to move to something little bit more secure with DNSSEC support out of box. The security you'd get with DNSSEC would be tiny in comparison to

Dovecot out of memory right at startup

2013-11-20 Thread Marc Peters
Hi List, i wanted to move my main mailserver from one to another. To avoid update hassles i jumped directly to a recent -current from the beginning of this month (full dmesg below): OpenBSD 5.4-current (GENERIC.MP) #145: Sun Nov 10 22:55:43 MST 2013

Re: Dovecot out of memory right at startup

2013-11-20 Thread Stuart Henderson
On 2013-11-20, Marc Peters m...@mpeters.org wrote: When i started dovecot, i got out of memory errors right at startup from the master process: Nov 20 10:50:55 master: Fatal: pool_system_realloc(8589934592): Out of memory Misc is the wrong place for this really. Anyway from the error message

Re: low-power/small form factor server (supermicro X9SCL-F w Core i3-3220T)

2013-11-20 Thread Stuart Henderson
On 2013-11-20, Bryan Vyhmeister br...@bsdjournal.net wrote: You'll have no issues at all. It's a great combination. I tell my customers and everyone else to just go with an X9SC{L,M} board, an LGA1155 Pentium, Core i3, or Xeon E3 (if absolutely necessary) and be done with it. The cheaper

Re: npppd l2tp/ipsec - openbsd client

2013-11-20 Thread Stuart Henderson
On 2013-11-20, anon ymous ramrunner0...@gmail.com wrote: Hello list! If anyone could shed some light to the following i would be thankful.. i have 2 5.4-current boxes, one acting as an npppd server over ipsec and the other one wishing to be a client. My understanding is that to accomplish

Re: OT: OpenBSD website scores high in Google PageSpeed Insight

2013-11-20 Thread Craig R. Skinner
On 2013-11-19 Tue 21:23 PM |, Theo de Raadt wrote: That is the score you get when you don't leverage all the latest new cool but heavy shit. +12 votes for flat static HTML without client scripts.

Re: OT: OpenBSD website scores high in Google PageSpeed Insight

2013-11-20 Thread Erling Westenvik
On Wed, Nov 20, 2013 at 12:54:36PM +, Craig R. Skinner wrote: On 2013-11-19 Tue 21:23 PM |, Theo de Raadt wrote: That is the score you get when you don't leverage all the latest new cool but heavy shit. +12 votes for flat static HTML without client scripts. I'd love to see LaTeX

Re: smtpd.conf help

2013-11-20 Thread Gilles Chehade
On Sun, Nov 17, 2013 at 09:05:14AM +0100, Didier Wiroth wrote: Hi, I'm not familiar with mail daemons and I'm trying to setup opensmtpd. Hi, Here is what I would like to do: 1) the mail server should accept mails for the 3 following domains: - kma.mydomain.net - prv.mydomain.net -

mac mini

2013-11-20 Thread Friedrich Locke
Does anyone here run Open/FreeBSD on mac mini ? Does the OS fully supports macmini hadrwared ? Thank you for the answers. Fried.

Re: mac mini

2013-11-20 Thread Jan Stary
On Nov 20 16:09:07, friedrich.lo...@gmail.com wrote: Does anyone here run Open/FreeBSD on mac mini ? Does the OS fully supports macmini hadrwared ? It works fine for me. Haven't tried the bwi(4) though. Jan OpenBSD 5.4-current (GENERIC) #79: Thu Nov 14 02:48:44 MST 2013

Re: mac mini

2013-11-20 Thread Mike Erdely
There are many generations of Mac Mini. I have a i386 Core Duo (read: old) that ran OpenBSD. I have a macppc (read: older) that also runs OpenBSD quite well. I have wired Ethernet, so I wasn't concerned with wireless. I can't comment on that. On Wed, Nov 20, 2013 at 1:09 PM, Friedrich Locke

Re: mac mini

2013-11-20 Thread Kenneth R Westerback
On Wed, Nov 20, 2013 at 04:09:07PM -0200, Friedrich Locke wrote: Does anyone here run Open/FreeBSD on mac mini ? Does the OS fully supports macmini hadrwared ? Thank you for the answers. Fried. I'm typing this on OpenBSD on the last generation of powerpc mac mini's if that helps.

Re: mac mini

2013-11-20 Thread dsp
On Wed, Nov 20, 2013 at 08:09:46PM +0200, Friedrich Locke wrote: Does anyone here run Open/FreeBSD on mac mini ? as mike said in the post below there are many models. i also run it on a macppc macmini and everything works like a charm. dmesg included. Does the OS fully supports macmini

OpenBSD 5.4 VMXNET3 not recognized

2013-11-20 Thread Dan Shechter
Hi All, Running OpenBSD in VMWare workstation 10. OpenBSD 5.4 amd64 do not recognize VMXNET3, but it does recognize VMXNET: VMware Virtual VMXNET3 rev 0x01 at pci3 dev 0 function 0 not configured Am I doing something wrong? Thanks, Dan OpenBSD 5.4 (GENERIC.MP) #41: Tue Jul 30 15:30:02 MDT

Re: OpenBSD 5.4 VMXNET3 not recognized

2013-11-20 Thread Brad Smith
On 20/11/13 3:11 PM, Dan Shechter wrote: Hi All, Running OpenBSD in VMWare workstation 10. OpenBSD 5.4 amd64 do not recognize VMXNET3, but it does recognize VMXNET: VMware Virtual VMXNET3 rev 0x01 at pci3 dev 0 function 0 not configured Am I doing something wrong? Yes, your expectation.

Re: OT: OpenBSD website scores high in Google PageSpeed Insight

2013-11-20 Thread Peter N. M. Hansteen
Erling Westenvik erling.westen...@gmail.com writes: I'd love to see LaTeX support BLINK though. I always wondered how the development of flashing ink was going, back in the day -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/

Re: low-power/small form factor server (supermicro X9SCL-F w Core i3-3220T)

2013-11-20 Thread Paul B. Henson
From: Bryan Vyhmeister [mailto:br...@bsdjournal.net] Sent: Tuesday, November 19, 2013 9:46 PM I have lots of X9SCL-F, X9SCL+-F, X9SCM-F, X9SCI-LN4, X9SCI-LN4F, X9SCM-iiF boards running OpenBSD in production. Both network interfaces work flawlessly. Cool, thanks much for the info. Although

Re: low-power/small form factor server (supermicro X9SCL-F w Core i3-3220T)

2013-11-20 Thread Paul B. Henson
From: Stuart Henderson Sent: Wednesday, November 20, 2013 3:54 AM One thing to note, which may be irrelevant, but may be very important, is which CPUs support AES-NI - the LGA1155 Pentium/i3 don't. Yeah, you've got to bump up to a much more expensive Xeon to get that :(. Thanks for the heads

Re: low-power/small form factor server (supermicro X9SCL-F w Core i3-3220T)

2013-11-20 Thread 'Bryan Vyhmeister'
On Wed, Nov 20, 2013 at 12:26:49PM -0800, Paul B. Henson wrote: With the 200W power supply in the small form factor chassis, supermicro says the max processor TDP supported by the motherboard is 45w. I guess if you put one in that potentially uses greater power but never push it to do so it

Re: low-power/small form factor server (supermicro X9SCL-F w Core i3-3220T)

2013-11-20 Thread Paul B. Henson
On Wed, Nov 20, 2013 at 12:35:35PM -0800, 'Bryan Vyhmeister' wrote: From looking at Supermicro's CSE-510-203B page, it says 65W TDP and every CPU I've mentioned below except for the Xeon E3 1220 (80W) and Xeon E3 1230v2 (69W) fall below this. Hmm, I guess I was actually looking at the

Re: low-power/small form factor server (supermicro X9SCL-F w Core i3-3220T)

2013-11-20 Thread 'Bryan Vyhmeister'
On Wed, Nov 20, 2013 at 01:31:23PM -0800, Paul B. Henson wrote: Hmm, I guess I was actually looking at the SuperServer 5017C-LF page: http://www.supermicro.com/products/system/1U/5017/SYS-5017C-LF.cfm It has the X9SCL-F motherboard, a similar chassis with a 200w power supply, and indicates

sound

2013-11-20 Thread Alexander Pakhomov
Hi. sndiod -r on fails with snd0: rsnd/0: failed to open audio device. All other programs are capable to play sound, but they lock device. aucat -i test.wav -d says it uses snd0. That's strange, sndiod can't open the same snd0 azalia device. Any ideas? Are there any other software mixer working

Re: sound

2013-11-20 Thread Alexander Pakhomov
21.11.2013, 04:21, Alexander Pakhomov ker0...@yandex.ru: Hi. sndiod -r on fails with sorry, sndiod -a on snd0: rsnd/0: failed to open audio device. All other programs are capable to play sound, but they lock device. aucat -i test.wav -d says it uses snd0. That's strange, sndiod can't open the

Re: low-power/small form factor server (supermicro X9SCL-F w Core i3-3220T)

2013-11-20 Thread Paul B. Henson
From: 'Bryan Vyhmeister' [mailto:br...@bsdjournal.net] Sent: Wednesday, November 20, 2013 1:51 PM Very interesting. There is some ambiguity in the specs. Looking at the SC510L-200B chassis which is what's included with the SYS-5017C-LF system you linked to, it also says 65W TDP. Well, it

Re: sound

2013-11-20 Thread Alexander Pakhomov
Got it with gdb. I restricted access to /dev/audio* to wheel (tried to restrict anybody else to hear my laptop mic), this causes sndiod to fail after privdrop(). 21.11.2013, 04:23, Alexander Pakhomov ker0...@yandex.ru: 21.11.2013, 04:21, Alexander Pakhomov ker0...@yandex.ru:  Hi.  sndiod -r

Re: low-power/small form factor server (supermicro X9SCL-F w Core i3-3220T)

2013-11-20 Thread 'Bryan Vyhmeister'
On Wed, Nov 20, 2013 at 05:38:33PM -0800, Paul B. Henson wrote: I managed to escalate the integrated graphics question high enough to find somebody who knew what they were talking about, he said, as you confirmed, that they work fine with this motherboard other than that you cannot use the

Re: low-power/small form factor server (supermicro X9SCL-F w Core i3-3220T)

2013-11-20 Thread Ted Unangst
On Wed, Nov 20, 2013 at 18:59, 'Bryan Vyhmeister' wrote: (running 5.4, by the way). The ipmi(4) driver shows up in my dmesg but as: ipmi at mainbus0 not configured A few years back I had an X7SPA-HF or similar board in the barebones system you can buy but I don't have a dmesg from it

Re: low-power/small form factor server (supermicro X9SCL-F w Core i3-3220T)

2013-11-20 Thread Paul B. Henson
On Wed, Nov 20, 2013 at 10:16:05PM -0500, Ted Unangst wrote: The ipmi driver is disabled by default because it does bad things on some systems. If you don't go out of your way to enable it, the not configured line is all you'll see. That's what I was going to say, but you beat me to it ;).

Re: SASL auth, SSL via StartTLS vs Kerberized SSL via StartTLS

2013-11-20 Thread Predrag Punosevac
Predrag Punosevac wrote: I am trying to get my head wrapped around securing LDAP so please forgive me this n00b questions. My final goal is to replace our current NFS+NIS with NFS+LDAP+[Kerberos] set up. I see by default OpenLDAP clients are authenticating via SASL. I also see the

Re: low-power/small form factor server (supermicro X9SCL-F w Core i3-3220T)

2013-11-20 Thread 'Bryan Vyhmeister'
On Wed, Nov 20, 2013 at 10:16:05PM -0500, Ted Unangst wrote: The ipmi driver is disabled by default because it does bad things on some systems. If you don't go out of your way to enable it, the not configured line is all you'll see. Thanks for the clarification. I wasn't aware of that. What

Re: low-power/small form factor server (supermicro X9SCL-F w Core i3-3220T)

2013-11-20 Thread Ted Unangst
On Wed, Nov 20, 2013 at 21:33, 'Bryan Vyhmeister' wrote: On Wed, Nov 20, 2013 at 10:16:05PM -0500, Ted Unangst wrote: The ipmi driver is disabled by default because it does bad things on some systems. If you don't go out of your way to enable it, the not configured line is all you'll see.

Re: low-power/small form factor server (supermicro X9SCL-F w Core i3-3220T)

2013-11-20 Thread 'Bryan Vyhmeister'
On Thu, Nov 21, 2013 at 12:57:06AM -0500, Ted Unangst wrote: machine hangs and such. you will figure out if you're affected or not pretty quickly. :) cause unknown. Good to know. I'll try it out and see what happens. Thanks. Bryan

Re: sound

2013-11-20 Thread Alexandre Ratchov
On Thu, Nov 21, 2013 at 04:19:55AM +0400, Alexander Pakhomov wrote: Hi. sndiod -r on fails with snd0: rsnd/0: failed to open audio device. All other programs are capable to play sound, but they lock device. aucat -i test.wav -d says it uses snd0. That's strange, sndiod can't open the same

Re: sound

2013-11-20 Thread Alexandre Ratchov
On Thu, Nov 21, 2013 at 06:01:58AM +0400, Alexander Pakhomov wrote: Got it with gdb. I restricted access to /dev/audio* to wheel (tried to restrict anybody else to hear my laptop mic), this causes sndiod to fail after privdrop(). you could start a private sndiod process to get exclusive