spamdb statistics
hi there, i was wondering if someone has made a spamdb statistics tool. i am not looking for anything fancy (graphs, etc), something like pflogsumm would be more than enough. -f -- first came reality. then there was wolfenstein 3d...
Re: Dependancies with make search key=
On Tue, Feb 28, 2006 at 07:01:26PM -0600, Harry Putnam wrote: Hannah Schroeter [EMAIL PROTECTED] writes: X isn't in packages, but in simple tarballs. cd / ; for i in some/path/x*.tgz; do tar xvvzpf $i; done Configure if needed, run X. Nick Holland [EMAIL PROTECTED] writes: No. X is not a package. It is a file set, not part of the ports tree. Not to be argumentative but ratpoison is still dependant on it [them]. Seems that should be made apparent in the ports search output somehow eh? Well, you *are* under /usr/ports/x11... It could be argued that some output might be desirable here; but on the other hand, this would lead to lots of people asking on misc@ where this 'x' package can be found... Joachim
Re: Ethernet via USB cable
Hi David, So do I need special USB Ethernet hardware to configure a network between two OpenBSD hosts connected together via USB, if not, which manpage did I missed? If you're asking if you can plug a dumb usb cable between two computers, the answer is no. You can only have one host on the bus at one time. To get ethernet via usb between the hosts you will need two usb to ethernet nics and a crossover cable, or a cdce device such as the one made by prolific. thanks, for the clear answer. cdce is plugged straight into the usb ports of both machines, but they both see it as a network device (ie, it appears as a device to both hosts). If you find one let me know, I've been interested in getting one for a while. i did not get a pl-2501, but a pl-2302, which is only usb 1.1 compatible It is a rather old device, but here are the details: Name: USL-116 USB Net Link Cable Vendor: NoName Chipset: Prolific pl-2302 USB: 1.1 OBSD Ethernet Device: upl0 Point-to-Point device I think it will work as a sync device for pfsync. lars -- DSL-Aktion wegen gro_er Nachfrage bis 28.2.2006 verldngert: GMX DSL-Flatrate 1 Jahr kostenlos* http://www.gmx.net/de/go/dsl
upl(4) interface not working
Hi list, first I was happy to find this upl(4) device. after connecting it to the usb port, the device shows up as: upl0 at uhub0 port 2 upl0: Prolific Technology Inc. PL2302 Host-Host Interface, rev 1.00/0.01, addr 2 I configured it on the first machine: ifconfig upl0 inet 10.200.200.1 10.200.200.2 netmask 255.255.255.255 up and on the second host: ifconfig upl0 inet 10.200.200.2 10.200.200.1 netmask 255.255.255.255 up ifconfig upl0 on host 1 shows: upl0: flags=8d1UP,POINTTOPOINT,RUNNING,NOARP,SIMPLEX mtu 1024 inet 10.200.200.1 -- 10.200.200.2 netmask 0x ifconfig upl0 on host 2 shows: upl0: flags=8d1UP,POINTTOPOINT,RUNNING,NOARP,SIMPLEX mtu 1024 inet 10.200.200.2 -- 10.200.200.1 netmask 0x I am unable to ping either end of the point-to-point from both hosts. Also when I try to sniff the connection with tcpdump, then I see the following error message: tcpdump -n -i upl0 tcpdump: Failed to open bpf device for upl0: Device not configured the upl(4) manual page is not that much descriptive about how to use this interface, it more or less only refers to ifconfig(8) I think i have missed sth. obvious? Anybody can point me into the right direction? greetings Lars -- Bis zu 70% Ihrer Onlinekosten sparen: GMX SmartSurfer! Kostenlos downloaden: http://www.gmx.net/de/go/smartsurfer
Re: WebDAV locking trouble (yes, DavLockDB is chroot relative)
Hi, I don't know if this helps you but I thought I let you know. I used to run into a lot of strange problems running httpd with mod_dav, httpd crashes and also (as far as I can remember) some db lock problems. All my problems were solved by copying the libdav.so into the chroot directory: /var/www/usr/lib/apache/modules/libdav.so You might want to give it a try... Good luck Regards Didier
Re: upl(4) interface not working
I'm not much of an network expert but wouldn't it help to use a /31 (255.255.255.254) instead of a /32 (255.255.255.255) mask? sebastian
3.9-beta ancontrol has gone question and cisco aironet firmware problem
Hello, can anyone tell us which tool are the replacement for the ancontrol? Secound question: We made an firmware update of the aironet card to 5.61.00 from november 2005 and getting this error message: an0 at pcmcia0 function 0 Cisco Systems, 350 Series Wireless LAN Adapter an0: record buffer is too small, rid=ff00, size=198, len=258 an0: read caps failed an0: failed to attach controller with the 5.41.00 and lower firmware everything is fine. dmesg dell latitude L400: OpenBSD 3.9 (GENERIC) #614: Tue Feb 28 07:49:08 MST 2006 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel Pentium III (GenuineIntel 686-class) 498 MHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE real mem = 267952128 (261672K) avail mem = 237506560 (231940K) using 3296 buffers containing 13500416 bytes (13184K) of memory mainbus0 (root) bios0 at mainbus0: AT/286+(83) BIOS, date 05/09/03, BIOS32 rev. 0 @ 0xfd7a0 apm0 at bios0: Power Management spec V1.2 apm0: battery life expectancy 100% apm0: AC on, battery charge high apm0: flags 30102 dobusy 0 doidle 1 pcibios0 at bios0: rev 2.1 @ 0xfd7a0/0x860 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdf40/160 (8 entries) pcibios0: PCI Interrupt Router at 000:07:0 (Intel 82371FB ISA rev 0x00) pcibios0: PCI bus #2 is the last bus WARNING: can't reserve area for I/O APIC. bios0: ROM list: 0xc/0x1 0xd/0x800! 0xdc000/0x4000! cpu0 at mainbus0 pci0 at mainbus0 bus 0: configuration mode 1 (no bios) pchb0 at pci0 dev 0 function 0 Intel 82443BX AGP rev 0x03 ppb0 at pci0 dev 1 function 0 Intel 82443BX AGP rev 0x03 pci1 at ppb0 bus 1 vga1 at pci1 dev 0 function 0 ATI Mobility 1 rev 0x64 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) pcib0 at pci0 dev 7 function 0 Intel 82371AB PIIX4 ISA rev 0x02 pciide0 at pci0 dev 7 function 1 Intel 82371AB IDE rev 0x01: DMA, channel 0 wired to compatibility, channel 1 wired to compatibility wd0 at pciide0 channel 0 drive 0: IC25N020ATDA04-0 wd0: 16-sector PIO, LBA, 19077MB, 39070080 sectors wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2 pciide0: channel 1 disabled (no drives) uhci0 at pci0 dev 7 function 2 Intel 82371AB USB rev 0x01: irq 11 usb0 at uhci0: USB revision 1.0 uhub0 at usb0 uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered piixpm0 at pci0 dev 7 function 3 Intel 82371AB Power rev 0x03: SMI iic0 at piixpm0 unknown at iic0 addr 0x18 not configured clct0 at pci0 dev 8 function 0 Cirrus Logic CS4281 CrystalClear rev 0x01 irq 10 ac97: codec id 0x43525914 (Cirrus Logic CS4297A rev 4) ac97: codec features headphone, 20 bit DAC, 18 bit ADC, Crystal Semi 3D audio0 at clct0 cbb0 at pci0 dev 10 function 0 Texas Instruments PCI1410 CardBus rev 0x01: irq 10 xl0 at pci0 dev 13 function 0 3Com 3c905C 100Base-TX rev 0x78: irq 10, address 00:06:5b:31:4a:69 bmtphy0 at xl0 phy 24: Broadcom 3C905C internal PHY, rev. 7 ATT/Lucent LTMODEM rev 0x01 at pci0 dev 16 function 0 not configured isa0 at pcib0 isadma0 at isa0 pckbc0 at isa0 port 0x60/5 pckbd0 at pckbc0 (kbd slot) pckbc0: using irq 1 for kbd slot wskbd0 at pckbd0: console keyboard, using wsdisplay0 pms0 at pckbc0 (aux slot) pckbc0: using irq 12 for aux slot wsmouse0 at pms0 mux 0 pcppi0 at isa0 port 0x61 midi0 at pcppi0: PC speaker spkr0 at pcppi0 lpt0 at isa0 port 0x378/4 irq 7 npx0 at isa0 port 0xf0/16: using exception 16 pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo fdc0 at isa0 port 0x3f0/6 irq 6 drq 2 cardslot0 at cbb0 slot 0 flags 0 cardbus0 at cardslot0: bus 2 device 0 cacheline 0x8, lattimer 0x20 pcmcia0 at cardslot0 biomask ef6d netmask ef6d ttymask ffef pctr: 686-class user-level performance counters enabled mtrr: Pentium Pro MTRR support dkcsum: wd0 matches BIOS drive 0x80 root on wd0a rootdev=0x0 rrootdev=0x300 rawdev=0x302 an0 at pcmcia0 function 0 Cisco Systems, 350 Series Wireless LAN Adapter an0: Firmware 4.25.1e, Radio: 802.11 DS, address: 00:09:43:b3:10:55 an0 detached an0 at pcmcia0 function 0 Cisco Systems, 350 Series Wireless LAN Adapter an0: record buffer is too small, rid=ff00, size=198, len=258 an0: read caps failed an0: failed to attach controller an0 detached an0 at pcmcia0 function 0 Cisco Systems, 350 Series Wireless LAN Adapter an0: Firmware 5.41.00, Radio: 802.11 DS, address: 00:09:43:f4:c7:5b an0 detached multiply freed item 0xd0e02680 panic: free: duplicated free Stopped at OpenBSD 3.9 (GENERIC) #614: Tue Feb 28 07:49:08 MST 2006 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel Pentium III (GenuineIntel 686-class) 498 MHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE real mem = 267952128 (261672K) avail mem = 237506560 (231940K) using 3296 buffers containing 13500416 bytes (13184K) of memory mainbus0 (root) bios0 at mainbus0: AT/286+(83) BIOS, date 05/09/03, BIOS32 rev. 0 @ 0xfd7a0 apm0 at bios0: Power Management
Squid QOS
I wish someone make this http://www.docum.org/docum.org/faq/cache/65.html for obsd pf n altq, because very useful for SOHO user for bandwidth efficiency, maybe have another ideas for that goal -- Regards' -- Cahyo
Re: upl(4) interface not working
Hi Sebastian, Henning, --- Urspr|ngliche Nachricht --- Von: Sebastian Schmitzdorff [EMAIL PROTECTED] An: misc@openbsd.org Kopie: Lars Weste [EMAIL PROTECTED] Betreff: Re: upl(4) interface not working Datum: Wed, 01 Mar 2006 15:15:07 +0100 I'm not much of an network expert but wouldn't it help to use a /31 (255.255.255.254) instead of a /32 (255.255.255.255) mask? sebastian I tried with ifconfig upl0 inet 10.200.200.1 10.200.200.2 netmask 255.255.255.252 up I also tried without netmask, same result. the routing looks like the following: netstat -rn Destination Gateway Flags Refs Use MtuInterface Default ... 10.200.200.2 10.200.200.1 UH 0 0 -upl0 ... I cannot ping 10.200.200.1 nor 10.200.200.2 from this host. So I assume it must sth. else. greetings Lars -- Bis zu 70% Ihrer Onlinekosten sparen: GMX SmartSurfer! Kostenlos downloaden: http://www.gmx.net/de/go/smartsurfer
Does Rebuild Kernel also mean binaries?
When a patch says to rebuild the kernel, does that also mean to rebuild the system binaries? -- Chet Langin
Re: WebDAV locking trouble (yes, DavLockDB is chroot relative)
On 3/1/06, Didier Wiroth [EMAIL PROTECTED] wrote: Hi, I don't know if this helps you but I thought I let you know. I used to run into a lot of strange problems running httpd with mod_dav, httpd crashes and also (as far as I can remember) some db lock problems. All my problems were solved by copying the libdav.so into the chroot directory: /var/www/usr/lib/apache/modules/libdav.so You might want to give it a try... I chouldn't even get httpd to start w/o copying libdav.so in to the chroot. Thanks for the idea, though. Nick
make build error on 3.9 (-current) i386
Hi guys, I was just updating my source tree through cvsup, and I've been following -current for a while. There hadn't been any problems before. But today, make build returned errors. The last time I cvsup'd was today around 10pm (GMT +7), and here's some of the log: Edit src/sys/arch/sparc/include/param.h Add delta 1.35 2006.02.28.18.24.18 miod Edit src/sys/dev/ic/atw.c Add delta 1.43 2006.02.28.06.52.35 jsg Edit src/sys/dev/mii/ciphy.c Add delta 1.10 2006.02.28.08.13.47 jsg Add delta 1.11 2006.02.28.12.37.15 jsg Edit src/sys/dev/mii/ciphyreg.h Add delta 1.2 2006.02.28.08.13.47 jsg Edit src/sys/kern/uipc_usrreq.c Add delta 1.31 2006.02.27.23.38.11 miod Edit src/usr.bin/ssh/session.c Add delta 1.197 2006.02.28.01.10.21 djm Now, after reinstalling a new kernel, I did a make build, and got these errors: nroff -Tascii -mandoc -/usr/src/usr.sbin/httpd/src/support/apxs.8 src/support/apxs.cat8 nroff -Tascii -mandoc -/usr/src/usr.sbin/httpd/src/support/suexec.8 src/support/suexec.cat8 make: no target to make *** Error code 2 Stop in /usr/src/usr.sbin/httpd (line 628 of /usr/src/usr.sbin/httpd/ Makefile.bsd-wrapper). *** Error code 1 Stop in /usr/src/usr.sbin. *** Error code 1 Stop in /usr/src (line 73 of Makefile). Can anyone help me with it? Thanks for the help. -Reza
Re: WebDAV locking trouble (yes, DavLockDB is chroot relative)
On 2/28/06, Nick Forrette [EMAIL PROTECTED] wrote: From: [EMAIL PROTECTED] Subject:httpd / mod_dav locking troubles (DavLockDB is chrooted relative) Date: February 28, 2006 7:21:59 AM PST To: [EMAIL PROTECTED] I'm running OpenBSD 3.8 stable with mod_dav 1.0.3p0 installed from ports (sparc64 architecture). My goal is to get mod_dav working over https. While https is working ok, and my DAV client (Mac OS X 10.4.5) can connect and authenticate, any time the client attempts to create a file it will hang. Examining the error_log shows the following message repeated many thousands of time (before I killed httpd and waited for the Mac to timeout): Last night I recompiled httpd and mod_dav with debugging enabled, and ran httpd in gdb with arguments -X -DSSL -f /var/www/conf/httpd.conf. I set a breakpoint in sdbm_store, which was the routing that was failing with errno = EINVAL. After a little digging, I found the following: mod_dav constructs a dbm key based (at least in part) on the file name being locked. However, the file name used to construct the key was always the empty string. Looks a lot like there is a bug in mod_dav. I'm relatively new to the DAV and OpenBSD communities, and am wondering if it makes more sense if I take this up on either the port-bugs or the dav-dev list. Thx, Nick
-current crashes on amd64
Hi guys, After upgrading my -current system to the newest snapshot the system crashes on while booting the kernel. This is an amd64 on an Gigabyte GA-K8NMF. Is this problem known already (haven't found anything in last days mails)? This happens for bsd and bsd.mp, but not bsd.rd! If you need further infos, I'd be happy to provide them! Regards, Stephan OpenBSD/amd64 BOOT 2.11 boot boot booting hd0a:/bsd: 3697028+694336+601400+0+422832 [80+308208+189663]=0x9a3fd0 entry point at 0x1001e0 [7205c766, 3404, 24448b12, be60a304]{[ using 498720 bytes of bsd ELF symbol table ] Copyright (c) 1982, 1986, 1989, 1991, 1993 The Regents of the University of California. All rights reserved. Copyright (c) 1995-2006 OpenBSD. All rights reserved. http://www.OpenBSD.org OpenBSD 3.9 (GENERIC) #450: Mon Feb 27 14:07:30 MST 2006 [EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC real mem = 2147020800 (2096700K) avail mem = 1835884544 (1792856K) using 22937 buffers containing 214908928 bytes (209872K) of memory mainbus0 (root) cpu0 at mainbus0: (uniprocessor) cpu0: AMD Athlon(tm) 64 Processor 3000+, 1809.48 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,SSE3,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 16-way L2 cache cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative cpu0: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative pci0 at mainbus0 bus 0: configuration mode 1 NVIDIA nForce4 DDR rev 0xa3 at pci0 dev 0 function 0 not configured pcib0 at pci0 dev 1 function 0 NVIDIA nForce4 ISA rev 0xa3 nviic0 at pci0 dev 1 function 1 NVIDIA nForce4 SMBus rev 0xa2 iic0 at nviic0 iic1 at nviic0 ohci0 at pci0 dev 2 function 0 NVIDIA nForce4 USB rev 0xa2: irq 10, version 1.0, legacy support usb0 at ohci0: USB revision 1.0 uhub0 at usb0 uhub0: NVIDIA OHCI root hub, rev 1.00/1.00, addr 1 uhub0: 10 ports with 10 removable, self powered ehci0 at pci0 dev 2 function 1 NVIDIA nForce4 USB rev 0xa3: irq 11 usb1 at ehci0: USB revision 2.0 uhub1 at usb1 uhub1: NVIDIA EHCI root hub, rev 2.00/1.00, addr 1 uhub1: 10 ports with 10 removable, self powered auich0 at pci0 dev 4 function 0 NVIDIA nForce4 AC97 rev 0xa2: irq 12, nForce4 AC97 ac97: codec id 0x414c4790 (Avance Logic ALC850) audio0 at auich0 pciide0 at pci0 dev 6 function 0 NVIDIA nForce4 IDE rev 0xa2: DMA, channel 0 configured to compatibility, channel 1 configured to compatibility wd0 at pciide0 channel 0 drive 0: Maxtor 6B200P0 wd0: 16-sector PIO, LBA48, 194479MB, 398294975 sectors wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 6 atapiscsi0 at pciide0 channel 1 drive 0 scsibus0 at atapiscsi0: 2 targets cd0 at scsibus0 targ 0 lun 0: HL-DT-ST, DVDRAM GSA-4120B, A111 SCSI0 5/cdrom removable cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2 ppb0 at pci0 dev 9 function 0 NVIDIA nForce4 PCI-PCI rev 0xa2 pci1 at ppb0 bus 1 skc0 at pci1 dev 7 function 0 Schneider Koch SK-98xx v2.0 rev 0x10, Marvell Yukon (0x1): irq 11 sk0 at skc0 port A, address 00:00:5a:9f:01:bc eephy0 at sk0 phy 0: Marvell 88E1011 Gigabit PHY, rev. 3 nfe0 at pci0 dev 10 function 0 NVIDIA CK804 LAN rev 0xa3: irq 5, address 00:14:85:0c:12:fe rlphy0 at nfe0 phy 1: RTL8201L 10/100 PHY, rev. 1 ppb1 at pci0 dev 11 function 0 NVIDIA nForce4 PCIE rev 0xa3 pci2 at ppb1 bus 2 ppb2 at pci0 dev 12 function 0 NVIDIA nForce4 PCIE rev 0xa3 pci3 at ppb2 bus 3 ppb3 at pci0 dev 13 function 0 NVIDIA nForce4 PCIE rev 0xa3 pci4 at ppb3 bus 4 ppb4 at pci0 dev 14 function 0 NVIDIA nForce4 PCIE rev 0xa3 pci5 at ppb4 bus 5 vga1 at pci5 dev 0 function 0 vendor NVIDIA, unknown product 0x0161 rev 0xa1 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) pchb0 at pci0 dev 24 function 0 AMD AMD64 HyperTransport rev 0x00 pchb1 at pci0 dev 24 function 1 AMD AMD64 Address Map rev 0x00 pchb2 at pci0 dev 24 function 2 AMD AMD64 DRAM Cfg rev 0x00 pchb3 at pci0 dev 24 function 3 AMD AMD64 Misc Cfg rev 0x00 isa0 at pcib0 isadma0 at isa0panic: isadmaattach: can not create DMA map Stopped at Debugger+0x5: leave RUN AT LEAST 'trace' AND 'ps' AND INCLUDE OUTPUT WHEN REPORTING THIS PANIC! DO NOT EVEN BOTHER REPORTING THIS WITHOUT INCLUDING THAT INFORMATION! ddb trace Debugger() at Debugger+0x5 panic() at panic+0x12a isadmaattach() at isadmaattach+0x87 config_attach() at config_attach+0x10f isascan() at isascan+0x14d config_scan() at config_scan+0xce config_attach() at config_attach+0x10f pcib_callback() at pcib_callback+0x4e config_process_deferred_children() at config_process_deferred_children+0x5f config_attach() at config_attach+0x117 mainbus_attach() at mainbus_attach+0x121 config_attach() at config_attach+0x10f cpu_configure() at cpu_configure+0x1c main() at main+0x35c end trace frame: 0x0, count: -14 ddb ps PID PPID PGRPUID S FLAGS WAIT COMMAND *0 -1
Re: make build error on 3.9 (-current) i386
Reza Muhammad wrote: Hi guys, I was just updating my source tree through cvsup, and I've been following -current for a while. There hadn't been any problems before. But today, make build returned errors. The last time I cvsup'd was today around 10pm (GMT +7), and here's some of the log: Edit src/sys/arch/sparc/include/param.h Add delta 1.35 2006.02.28.18.24.18 miod Edit src/sys/dev/ic/atw.c Add delta 1.43 2006.02.28.06.52.35 jsg Edit src/sys/dev/mii/ciphy.c Add delta 1.10 2006.02.28.08.13.47 jsg Add delta 1.11 2006.02.28.12.37.15 jsg Edit src/sys/dev/mii/ciphyreg.h Add delta 1.2 2006.02.28.08.13.47 jsg Edit src/sys/kern/uipc_usrreq.c Add delta 1.31 2006.02.27.23.38.11 miod Edit src/usr.bin/ssh/session.c Add delta 1.197 2006.02.28.01.10.21 djm Now, after reinstalling a new kernel, I did a make build, and got these errors: nroff -Tascii -mandoc -/usr/src/usr.sbin/httpd/src/support/apxs.8 src/support/apxs.cat8 nroff -Tascii -mandoc -/usr/src/usr.sbin/httpd/src/support/suexec.8 src/support/suexec.cat8 make: no target to make *** Error code 2 Stop in /usr/src/usr.sbin/httpd (line 628 of /usr/src/usr.sbin/httpd/ Makefile.bsd-wrapper). *** Error code 1 Stop in /usr/src/usr.sbin. *** Error code 1 Stop in /usr/src (line 73 of Makefile). Can anyone help me with it? Thanks for the help. -Reza Speaking of CVSup: Are a lot of people using CVSup, CVSsyc, manual CVS, or something else?
Re: make build error on 3.9 (-current) i386
On 2006/03/01 12:03, Will H. Backman wrote: Speaking of CVSup: Are a lot of people using CVSup, CVSsyc, manual CVS, or something else? on my main network - cvsync a whole repo and normal cvs against that, for remote boxes - usually anoncvs against a suitable public server.
Re: Dependancies with make search key=
make search key= is more or less deprecated... What is the preffered make target now? Regards Edd
Problems with PF and ftp-proxy with 2 links
Hi folks, I'm having a bad time doing a setup that is a little complex. I do have 2 ADSL links, both working. And i have and DMZ and a LAN. The setup is this: LAN net: 10.0.0.0/24 DMZ net: 10.1.1.0/24 LINK#1 NET: 192.168.200.0/24 LINK#1 IP: 192.168.200.1 LINK#1 GATEWAY: 192.168.200.254 LINK#2 NET: 192.168.201.0/24 LINK#1 IP: 192.168.201.1 LINK#1 GATEWAY: 192.168.201.254 I'm doing nat on both interfaces and have a ftp-proxy properly configured, with a rdr rule redirecting the traffic to it. I did made a rule with the round-robin, and made it work flawlessly. My problem arises in the following form: If i let only one link working (don't use round-robin), the ftp-proxy works both for passive connections and for active connections made from LAN and from DMZ. If i active the round-robin, and use the ftp-proxy with the -n switch, the active mode works flawlessly, but in the passive mode, if the client is going out trough the LINK#2, the remote server says that my control and data connections are coming from different places. I want to: 1) either make both the control connections and passive data connections go out trough the same interface and gateway, as LINK#1 2) make ftp-proxy make the control connection trough the same link the passive connection will go out (then i will use round-robin with sticky address) I have a strange problem using ftp-proxy without the -n switch. If i interpreted the manual correctly, even the pasive connections will go trough the proxy, with should eliminate my problem, because even if a machine on LAN net is going out trough the LINK#2, the passive connection will go out trough the same link that the firewall itself is using as default gateway (LINK#1). But if i don't use the -n switch, the active connections still work, but passive connections have the destination not to the remote server, but to the LINK#1 IP, or 192.168.200.1, that is very strange, and the connections time out. I played with the -a and -S switches, but without any luck. If some one have some light, i would be glad. This is the only thing that is holding me using load balancing in full time. Thanks in advance, -- Giancarlo Razzolini Linux User 172199 Moleque Sem Conteudo Numero #002 Slackware Current OpenBSD Stable Snike Tecnologia em Informatica 4386 2A6F FFD4 4D5F 5842 6EA0 7ABE BBAB 9C0E 6B85 [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]
VIA fanless 1GHz
Has anyone tried VIA Eden fanless at 1GHz yet or the new Eden-N or NL (Luke series) yet ? If so, how did they perform. Also I have found a dual, eden fanless 1GHz. http://www.crn.com/sections/testcenter/whitebox/whitebox.jhtml?articleId=173402172
Re: VIA fanless 1GHz
On Wednesday 01 March 2006 15:33, you wrote: Has anyone tried VIA Eden fanless at 1GHz yet or the new Eden-N or NL (Luke series) yet ? If so, how did they perform. Also I have found a dual, eden fanless 1GHz. http://www.crn.com/sections/testcenter/whitebox/whitebox.jhtml?articleId=17 3402172 I doubt there are boards out for the new 1.5GHz fanless yet though. But if you don't ask... http://www.itnewsonline.com/showstory.php?storyid=2440scatid=3contid=2
off topic but possibly interesting to someone...
List, File transfer between my iBook G4 and OpenBSD box (3.8 GENERIC#138 i386) over SSH seems really slow. I have made sure the iBook en0 interface is 100baseTX full-duplex and the same with the rl0 interface on the OpenBSD box. When transferring files with scp or rsync (over ssh) top reports sshd at 80-85% and transfer speed is limited to anywhere between 70-80k/sec. The OpenBSD box specs are as follows: cpu0: VIA Samuel 2 (CentaurHauls 686-class) 533 MHz cpu0: FPU,DE,TSC,MSR,MTRR,PGE,MMX real mem = 158900224 (155176K) avail mem = 138125312 (134888K) using 1965 buffers containing 8048640 bytes (7860K) of memory rl0 at pci0 dev 20 function 0 Realtek 8139 rev 0x10: irq 11 address x0:x0:xc:x9:x0:xf so it isn't the fastest box in the world but I'd expect it to cope better than it is. I have tried FTP and speed is constantly around 500k/sec, which I can live with but realise it should be much faster. FIrst thoughts is possible bottleneck when waiting for more entropy. If this is the case would adding memory make a huge difference? or is the CPU the bottleneck? any ideas out there? i'll continue googling in the meantime thanks guys, poncenby
Re: VIA fanless 1GHz
On 2006-03-01 15:33:21 -0500, marrandy wrote: Also I have found a dual, eden fanless 1GHz. ^^^ Sure? Onboard I/O Connectors 1 4-pin CPU fan and 2 3-pin chassis fan http://www.via.com.tw/en/products/mainboards/mini_itx/vt_310dp/index.jsp 3 NICs :-) Best Martin -- http://www.tm.oneiros.de
Re: VIA fanless 1GHz
http://www.epiacenter.com/modules.php?name=Contentpa=showpagepid=82 has a review with pictures (note the fan) and benchmarks. Best Martin -- http://www.tm.oneiros.de
Re: off topic but possibly interesting to someone...
From: [EMAIL PROTECTED] cpu0: VIA Samuel 2 (CentaurHauls 686-class) 533 MHz cpu0: FPU,DE,TSC,MSR,MTRR,PGE,MMX real mem = 158900224 (155176K) avail mem = 138125312 (134888K) using 1965 buffers containing 8048640 bytes (7860K) of memory rl0 at pci0 dev 20 function 0 Realtek 8139 rev 0x10: irq 11 address x0:x0:xc:x9:x0:xf so it isn't the fastest box in the world but I'd expect it to cope better than it is. I have tried FTP and speed is constantly around 500k/sec, which I can live with but realise it should be much faster. FIrst thoughts is possible bottleneck when waiting for more entropy. If this is the case would adding memory make a huge difference? or is the CPU the bottleneck? What raw transfer speeds do you see with an application such as iperf or ttcp? DS
LinuxForum 2006, Mar 3 - 4, 2006, Copenhagen
Hey, just a heads up that Henning and I will be in Copenhagen on Friday and Saturday, Linux Forum is a nice event and defenitly worth a visit. -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= https://kd85.com/notforsale.html --
acpi battery state
Hi, I try to find out how many energy is left on my battery. I run OpenBSD 3.8. My notebook does not support APM but ACPI and I compiled ACPI support in my kernel. I run acpid and acpidump displays a lot of output I don't understand ;-) I read that i can get my battery values via sysctl hw.sensors but there is no 'sensors' sub under 'hw'. It seems that this is because my hardware is not supported because it works fine on my workstation for the temperature stuff. Is there any way to get the battery-values? I bootet knoppix 4.0 and it was able to display my battery-values in KDE but I want to use OpenBSD. If it is not possibly: Is is generally possibly to develop some code in userspace to do that or does the kernel not support it? My dmesg output follows; --snip- OpenBSD 3.8 (AMILO) #5: Tue Feb 28 16:47:49 CET 2006 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/AMILO cpu0: Intel(R) Celeron(R) M processor 1.40GHz (GenuineIntel 686-class) 1.40 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA, CMOV,PAT,CFLUSH,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,SBF real mem = 199532544 (194856K) avail mem = 175292416 (171184K) using 2461 buffers containing 10080256 bytes (9844K) of memory User Kernel Config UKC quit Continuing... mainbus0 (root) acpi0 at mainbus0: revision 0 attached acpitimer0 at acpi0: 3579545 Hz, 24 bits acpi device at acpi0 from table DSDT not configured acpi device at acpi0 from table FACP not configured acpi device at acpi0 from table APIC not configured acpi device at acpi0 from table APIC not configured acpi device at acpi0 from table SSDT not configured acpi device at acpi0 from table SSDT not configured bios0 at mainbus0: AT/286+(d2) BIOS, date 09/28/05, BIOS32 rev. 0 @ 0xfd780 pcibios0 at bios0: rev 2.1 @ 0xfd780/0x880 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdf40/160 (8 entries) pcibios0: PCI Interrupt Router at 000:17:0 (VIA VT82C596A ISA rev 0x00) pcibios0: PCI bus #2 is the last bus bios0: ROM list: 0xc/0xfc00 0xd/0x4000! 0xdf000/0x1000! cpu0 at mainbus0 pci0 at mainbus0 bus 0: configuration mode 1 (no bios) pchb0 at pci0 dev 0 function 0 vendor VIA, unknown product 0x0314 rev 0x00 pchb1 at pci0 dev 0 function 1 vendor VIA, unknown product 0x1314 rev 0x00 pchb2 at pci0 dev 0 function 2 vendor VIA, unknown product 0x2314 rev 0x00 pchb3 at pci0 dev 0 function 3 vendor VIA, unknown product 0x3208 rev 0x00 pchb4 at pci0 dev 0 function 4 vendor VIA, unknown product 0x4314 rev 0x00 pchb5 at pci0 dev 0 function 7 vendor VIA, unknown product 0x7314 rev 0x00 ppb0 at pci0 dev 1 function 0 VIA VT8377 PCI-PCI rev 0x00 pci1 at ppb0 bus 1 vga1 at pci1 dev 0 function 0 vendor VIA, unknown product 0x3344 rev 0x01: aperture at 0xf000, size 0x1000 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) vendor Broadcom, unknown product 0x4318 (class network subclass miscellaneous, rev 0x02) at pci0 dev 6 function 0 not configured cbb0 at pci0 dev 12 function 0 vendor Texas Instruments, unknown product 0x8031 rev 0x00: irq 5 vendor Texas Instruments, unknown product 0x8032 (class serial bus subclass Firewire, rev 0x00) at pci0 dev 12 function 2 not configured pciide0 at pci0 dev 15 function 0 VIA VT8237 SATA rev 0x80: DMA pciide0: using irq 9 for native-PCI interrupt wd0 at pciide0 channel 0 drive 0: ST94813AS wd0: 16-sector PIO, LBA48, 38154MB, 78140160 sectors wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5 pciide1 at pci0 dev 15 function 1 VIA VT82C571 IDE rev 0x06: ATA133, channel 0 configured to compatibility, channel 1 configured to compatibility pciide1: channel 0 ignored (disabled) atapiscsi0 at pciide1 channel 1 drive 0 scsibus0 at atapiscsi0: 2 targets cd0 at scsibus0 targ 0 lun 0: HL-DT-ST, RW/DVD GCC-4244N, 1.00 SCSI0 5/cdrom removable cd0(pciide1:1:0): using PIO mode 4, Ultra-DMA mode 2 uhci0 at pci0 dev 16 function 0 VIA VT83C572 USB rev 0x81: irq 10 usb0 at uhci0: USB revision 1.0 uhub0 at usb0 uhub0: VIA UHCI root hub, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered uhci1 at pci0 dev 16 function 1 VIA VT83C572 USB rev 0x81: irq 10 usb1 at uhci1: USB revision 1.0 uhub1 at usb1 uhub1: VIA UHCI root hub, rev 1.00/1.00, addr 1 uhub1: 2 ports with 2 removable, self powered ehci0 at pci0 dev 16 function 4 VIA VT6202 USB rev 0x86: irq 5 usb2 at ehci0: USB revision 2.0 uhub2 at usb2 uhub2: VIA EHCI root hub, rev 2.00/1.00, addr 1 uhub2: 4 ports with 4 removable, self powered pcib0 at pci0 dev 17 function 0 VIA VT8237 ISA rev 0x00 auvia0 at pci0 dev 17 function 5 VIA VT8233 AC97 rev 0x60pci_intr_map: no mapping for pin C: couldn't map interrupt VIA VT82C686 Modem rev 0x80 at pci0 dev 17 function 6 not configured vr0 at pci0 dev 18 function 0 VIA RhineII-2 rev 0x78: irq 10 address 00:40:ca:da:4a:65 ukphy0 at vr0 phy 1: Generic IEEE 802.3u media interface ukphy0: OUI 0x004063, model 0x0032, rev. 10 cardslot0 at cbb0 slot 0 flags 0 cardbus0 at
Re: VIA fanless 1GHz
On Wednesday 01 March 2006 16:28, Martin Schrvder wrote: On 2006-03-01 15:33:21 -0500, marrandy wrote: Also I have found a dual, eden fanless 1GHz. ^^^ Sure? That's what it says The VT310-DP supports the x86 architecture and is powered by two 1GHz VIA Eden-N processors. The board supports up to 2 Gbytes of memory in two slots. The VT310-DP motherboard uses very little power. Combined, the two 1GHz VIA Eden-N processors draw a maximum of 14 watts. Onboard I/O Connectors 1 4-pin CPU fan and 2 3-pin chassis fan http://www.via.com.tw/en/products/mainboards/mini_itx/vt_310dp/index.jsp It says it on your link as well The VT-310DP Mini-ITX Board boasts dual VIA Eden-N NanoBGA Processors 3 NICs :-) Best Martin
sendmail and Undeliverables
I've recently setup an access list with the following: To:mydomain.com REJECT To:[EMAIL PROTECTED] OK To:[EMAIL PROTECTED] OK etcetera, which has really helped in reducing the amount of DSN reports I receive. (Thanks to Claus A_mann for the suggestion) I'm still getting a couple here and there and I'm trying to figure out how to prevent them as it concerns me a little. Here is a sample: Your message did not reach some or all of the intended recipients. Subject: Returned mail: see transcript for details Sent: 2/28/2006 11:58 AM The following recipient(s) could not be reached: [EMAIL PROTECTED] on 3/1/2006 4:46 PM The e-mail account does not exist at the organization this message was sent to. Check the e-mail address, or contact the recipient directly to find out the correct address. mfg.mydomain.com #5.1.1 SMTP; 550 RCPT TO:[EMAIL PROTECTED] User unknown I'm concerned that sendmail is even accepting these messages as they have nothing to do with my domain and I don't know how to prevent this behavior, any info on this subject would be appreciated, thank you.
Re: VIA fanless 1GHz
On Wednesday 01 March 2006 16:28, Martin Schrvder wrote: On 2006-03-01 15:33:21 -0500, marrandy wrote: Also I have found a dual, eden fanless 1GHz. ^^^ Sure? Or were you talking about the fanless part. With power consumption so low, the need for cooling fans is eliminated, Onboard I/O Connectors 1 4-pin CPU fan and 2 3-pin chassis fan http://www.via.com.tw/en/products/mainboards/mini_itx/vt_310dp/index.jsp the VIA VT310 DP enables the development of a wealth of high density, low power consumption, fanless, and embedded applications 3 NICs :-) Best Martin
Re: VIA fanless 1GHz
On Wednesday 01 March 2006 16:33, Martin Schrvder wrote: http://www.epiacenter.com/modules.php?name=Contentpa=showpagepid=82 has a review with pictures (note the fan) and benchmarks. I don't see one. Just a large black clip-on heatsink. Fans have a power connector and I don't see one going off to the motherboard. It also says the VIA VT310 DP enables the development of a wealth of high density, low power consumption, fanless, and embedded applications Best Martin
Re: VIA fanless 1GHz
On 2006-03-01 18:07:19 -0500, marrandy wrote: On Wednesday 01 March 2006 16:33, Martin Schrvder wrote: http://www.epiacenter.com/modules.php?name=Contentpa=showpagepid=82 has a review with pictures (note the fan) and benchmarks. I don't see one. Just a large black clip-on heatsink. Fans have a power connector and I don't see one going off to the motherboard. Page 3 :-) Read the whole review. Best Martin -- http://www.tm.oneiros.de
BOINC distributed computing project
I've downloaded the BOINC client for windows and am running it with no issues, I was wondering if anyone has tried using the OpenBSD version. It can be found here... http://www.lb.shuttle.de/apastron/boincDown.shtml#opbsd Does anyone do this? I am sure there is, I just wanted to find out how stable it is. Bryan
Re: VIA fanless 1GHz
On Wednesday 01 March 2006 18:30, you wrote: Look at page 3. Also note the mobo comes with fan pins labelled cpu fan. Perhaps with a large enough, or well enough desinged heat sink, or if the cpu's are clocked down far enough, the fan isn't necessary. Just read the whole article...hmm...interesting http://www.epiacenter.com/pictures/news/2006/epia_cn.jpg Now that is a heatsink. I'm looking for a fanless VIA with the Padlock crypto system and was hoping someone may already have practical experience with recent versions. Regards...Martin
Backup MX server
Hello. Basic sendmail question. I want to set up a backup mx server to field incoming mail when my primary mail server goes down. I understand how to do this from a DNS standpoint, but what I don't know is what should be in my sendmail.mc/sendmail.cf file for this. Is there anything special I need to do for this? Anyone know any good documentation? Thanks. Chris
Avis Important et personnel
[IMAGE] Cher(e) membre Desjardins/ AcchsD Le dipartement de virification comptable a ditecti un problhme de transaction dans votre compte. Un montant a iti diposi et retiri par notre systhme comptable. Nous vous avisons de cette erreur afin que vous ne soyez pas surpris quand vous verrez ces transactions sur votre relevi transactionnel. Nous avons repris le montant total sans appliquer les frais de transactions. Desjardins. Si vous constatez une autre erreur, communiquez avec votre institution durant les heures normales de bureau. Pour accider ` votre compte et virifier que tout soit normal, cliquez sur ce lien sicurisi: https://accesd.desjardins.com/ Le Groupe Desjardins vous remercie de votre clienthle et appricie votre comprihension. Desjardins / AcchsD Conjuguer avoirs et jtres Copyright ) 2005 Mouvement des caisses Desjardins. Tous droits riservis.
Re: Backup MX server
On Wed, Mar 01, 2006 at 07:19:18PM -0500, Chris wrote: Hello. Basic sendmail question. I want to set up a backup mx server to field incoming mail when my primary mail server goes down. I understand how to do this from a DNS standpoint, but what I don't know is what should be in my sendmail.mc/sendmail.cf file for this. Is there anything special I need to do for this? Anyone know any good documentation? Backup MX is a relic and a legacy. It breaks almost all spam filters. Modern mail infrastructure doesn't need it, except in rare cases. Save your other mailhost the trouble of dealing with all the double bounces and just skip it.
Re: BOINC distributed computing project
On 01/03/06, Bryan Brake [EMAIL PROTECTED] wrote: I've downloaded the BOINC client for windows and am running it with no issues, I was wondering if anyone has tried using the OpenBSD version. It can be found here... http://www.lb.shuttle.de/apastron/boincDown.shtml#opbsd Does anyone do this? I am sure there is, I just wanted to find out how stable it is. Bryan Yes, I have ran BOINC (plus Seti) in the past on an OpenBSD/amd64 system. It works pretty well.
Re: VIA fanless 1GHz
On 2006-03-01 19:11:54 -0500, marrandy wrote: http://www.epiacenter.com/pictures/news/2006/epia_cn.jpg Now that is a heatsink. Yes. :-) It would be nice if that beast hat 3 NICs and supported PoE... Best Martin -- http://www.tm.oneiros.de
Re: Backup MX server
Really? So when the box goes down, just let the mail bounce? How would it break spamassassin (which is what I use)? David Terrell wrote: On Wed, Mar 01, 2006 at 07:19:18PM -0500, Chris wrote: Hello. Basic sendmail question. I want to set up a backup mx server to field incoming mail when my primary mail server goes down. I understand how to do this from a DNS standpoint, but what I don't know is what should be in my sendmail.mc/sendmail.cf file for this. Is there anything special I need to do for this? Anyone know any good documentation? Backup MX is a relic and a legacy. It breaks almost all spam filters. Modern mail infrastructure doesn't need it, except in rare cases. Save your other mailhost the trouble of dealing with all the double bounces and just skip it. -- This address is soon to be defunct. If you are anyone at all important to me, please contact me, and I will get you my new email address. Thanks, Chris
Re: acpi battery state
This is bad advice at the moment. ACPI has some memory leaks and eventually will deplete device buffer memory. It is under heavy development and nowhere near consumable quality. Don't run with ACPI unless you are writing me some diffs. Rogier Krieger wrote: On 3/1/06, Steffen Wendzel [EMAIL PROTECTED] wrote: I try to find out how many energy is left on my battery. I run OpenBSD 3.8. My notebook does not support APM but ACPI In that case, you should probably give -current snapshots a spin. There has been quite a bit of work on ACPI since 3.8. Apart from the list/source-changes archives, you may want to take a look at several articles at undeadly.org regarding ACPI. but there is no 'sensors' sub under 'hw'. It seems that this is because my hardware is not supported because it works fine on my workstation for the temperature stuff. Possibly, you have lm(4) or other sensor devices on your workstation. The sysctl output should show you which sensor it uses. Is there any way to get the battery-values? I bootet knoppix 4.0 and it was able to display my battery-values in KDE [...] Fortunately, that means your hardware itself is probably OK. You should really try a -current snapshot to see whether ACPI support will work for you. Cheers, Rogier -- If you don't know where you're going, any road will get you there.
Re: VIA fanless 1GHz
On Wed, 1 Mar 2006, marrandy wrote: On Wednesday 01 March 2006 16:28, Martin Schrvder wrote: On 2006-03-01 15:33:21 -0500, marrandy wrote: Also I have found a dual, eden fanless 1GHz. ^^^ Sure? That's what it says The VT310-DP supports the x86 architecture and is powered by two 1GHz VIA Eden-N processors. The board supports up to 2 Gbytes of memory in two slots. The VT310-DP motherboard uses very little power. Combined, the two 1GHz VIA Eden-N processors draw a maximum of 14 watts. They exist. I know an organization that has 27 of the Dual CPU boards each with an additional 4 port USB 2.0 card. They're trying to get them interconnected with USB 2.0 bridge cables as a hypercube. diana
Re: VIA fanless 1GHz
On Wed, 1 Mar 2006, marrandy wrote: On Wednesday 01 March 2006 16:28, Martin Schrvder wrote: On 2006-03-01 15:33:21 -0500, marrandy wrote: Also I have found a dual, eden fanless 1GHz. ^^^ Sure? Or were you talking about the fanless part. I don't recall if they're fanless, somewhere I have a picture of them. diana
Re: Backup MX server
Backup MX is a relic and a legacy. It breaks almost all spam filters. Modern mail infrastructure doesn't need it, except in rare cases. why so? I use one here at work with great success. I use Postfix so I'm no use to the OP. I don't have any problems with double bounces, and my spam tools aren't broken. I have noticed that spammers won't even bother trying to connect to the primary, they just try the backup thinking that my primary server will accept mail as a relay from the backup, which of course it will, but only if that message passes spamd, 3 rbls, and amavis/SA, in which case it would have passed on the primary one anyway if I didn't have a backup configured at all. Seems to be just fine. --Bryan
Re: make build error on 3.9 (-current) i386
Reza Muhammad wrote: Hi guys, I was just updating my source tree through cvsup, and I've been following -current for a while. There hadn't been any problems before. But today, make build returned errors. ... Can anyone help me with it? What seems to be missing from your process is the words, I downloaded and installed the most recent snapshot before I started the 'make build' Always Start From A Snapshot. Usually, you can stop right there, too. There is very little reason to build from source after installing a snapshot. Nick.
Re: upl(4) interface not working
On Wednesday 01 March 2006 21:09, Lars Weste wrote: I configured it on the first machine: ifconfig upl0 inet 10.200.200.1 10.200.200.2 netmask 255.255.255.255 up Wrong netmask. point-to-point links usually use 255.255.255.252 (a /30). --- Lars Hansson
Re: Backup MX server
On Wed, Mar 01, 2006, Chris wrote: I want to set up a backup mx server to field incoming mail when my primary mail server goes down. I understand how to do this from a DNS standpoint, but what I don't know is what should be in my sendmail.mc/sendmail.cf file for this. Is there anything special I need to do for this? Anyone know any good documentation? You need to allow relaying to the main server, see cf/README. PS: from the sendmail X README: Note about Backup MX Servers It is not a good idea to run a backup MX server B for a host A that has stronger anti-spam measures; if mails are sent to A via B, then B may accept them for delivery, but A may reject them and hence B has to sent bounces, which, in case of spam, are most likely to forged addresses, hence those bounces will only cause additional problems. The opposite case (B has stronger anti-spam measures than A) can cause the rejection of mail that A actually wanted to receive. Hence B and A should have the same anti-spam measures; i.e., a system that acts as backup MX server for another one should perform the same anti-spam checks as the main MX server(s).
Re: Backup MX server
On Wed, 1 Mar 2006 18:49:44 -0800, Claus Assmann wrote: On Wed, Mar 01, 2006, Chris wrote: I want to set up a backup mx server to field incoming mail when my primary mail server goes down. I understand how to do this from a DNS standpoint, but what I don't know is what should be in my sendmail.mc/sendmail.cf file for this. Is there anything special I need to do for this? Anyone know any good documentation? You need to allow relaying to the main server, see cf/README. PS: from the sendmail X README: Note about Backup MX Servers It is not a good idea to run a backup MX server B for a host A that has stronger anti-spam measures; if mails are sent to A via B, then B may accept them for delivery, but A may reject them and hence B has to sent bounces, which, in case of spam, are most likely to forged addresses, hence those bounces will only cause additional problems. The opposite case (B has stronger anti-spam measures than A) can cause the rejection of mail that A actually wanted to receive. Hence B and A should have the same anti-spam measures; i.e., a system that acts as backup MX server for another one should perform the same anti-spam checks as the main MX server(s). AND most importantly: BOTH servers MUST reject mail that is addressed to a non-existant recipient at the RCPT TO: phase. The very worst idea you can have about a secondary MX is that it doesn't need to know anything about the delivery domain other than the domain name itself. As a result spammers target secondaries strongly in preference to primaries. As a project I listed a secondary for a server I support using an alias on the same machine. All of the mail sent to the secondary address (unless I missed one or two) was spam. Only about 60% directed to the primary was spam. These days OpenBSD spamd does wonders and we don't use a secondary at all. Primary down = sender retries in a little while. Down means adsl out or power down longer than UPS reserve or hardware crash. I've not seen any of those last 24 hours and the common retry limit is in excess of 3 days. From the land down under: Australia. Do we look umop apisdn from up over? Do NOT CC me - I am subscribed to the list. Replies to the sender address will fail except from the list-server.
Re: Backup MX server
Backup MX is a relic and a legacy. It breaks almost all spam filters. Modern mail infrastructure doesn't need it, except in rare cases. me thinks this is spreading FUD. define modern mail infrastructure. perhaps the origin of the FUD is the M$ visual studio .net overexposure?
Re: Backup MX server
On Thursday 02 March 2006 10:47, [EMAIL PROTECTED] wrote: me thinks this is spreading FUD. define modern mail infrastructure. perhaps the origin of the FUD is the M$ visual studio .net overexposure? No, it's not FUD. The large majorityt domains dont need backup MX's. Mail wont bounce just because your primary/only MX is down, it will get queued at the sending MTA and delivered when your MX comes back up. --- Lars Hansson
Re: WebDAV locking trouble (yes, DavLockDB is chroot relative)
What version of Apache? The standard pached variant of 1.3.29 that is included with 3.8-stable.
Re: Backup MX server
Although I know where David is coming from with this slightly contentious comment, he's wrong. The argument is that most senders will do their own back-off, and the hassle of setting up a *good* backup MX server is so high that the benefit scarcely justifies it. However where he is wrong is not in the senders who don't resend (they're just broken anyway) or in the local clients who are sending outgoing mail via your server (bad idea anyway), but in clients who back off *for a long time* when they think you're down. In other words a backup MX lets you recover more quickly and more gracefully than not having one. Also critical is backup DNS. Let's assume we're looking at a disaster here, a long-term (5 day?) outage rather than a failed UPS. If your DNS is on the same net as the mailer, its down too. Senders soon get no result at all when they look you up, with the result that mail *bounces* (unknown address) rather than requeues. So set up a backup DNS even if you don't have a backup MX. Also for a major disaster, you probably don't want to continue secondarying your main (locally hosted) zone file. You may even want to replace the zone file on the backup MX host with a different one pointing to different servers, so you can have a web presence and maybe even some way of accessing your mail. In this case make sure you have a pre-prepared primary zone file that you can run on your backup DNS host, and have a protocol (i.e. a human protocol, phone no's and a password) so you can tell the remote person that it is time to switch from being a secondary DNS server to being a primary. You might even have your disaster site always running in preparation, just with no DNS normally pointing to it. (I do, and I'm not telling you the address ;-) ) In the event of a truly major disaster, with no telephones even, leave explicit instructions with this remote person on what circmstances they can kick in your backup DNS automatically, eg there is a national emergency reported on TV and your site has not been reachable for X days. Personally I do believe in Backup MX, as long as it does proper relay checking. It's nice if it also does spam checking, but not critical because your primary MX will still do that. However if you do spam checking *and rejection* on your backup MX, you'll significantly lower the load on the primary when it returns. Note that 5 days of pent-up mail arriving at once can kill a machine even if it is normally up to the peak loads you get, so you want a throttling control both on what the backup MX forwards to you when you return, and what you accept from other sources when you return. Graham
Re: Backup MX server
On Wed, Mar 01, 2006 at 11:16:59PM -0600, Graham Toal wrote: Personally I do believe in Backup MX, as long as it does proper relay checking. It's nice if it also does spam checking, but not critical because your primary MX will still do that. However if you do spam checking *and rejection* on your backup MX, you'll significantly lower the load on the primary when it returns. multiple prioritized MX is fine, as long as they're under the same administrative control with similar settings. Backup MX to me means some other site that just takes any mail for your domain and blindly forwards it on. I ran it for years. I've had other people run it for me. It's a disaster. In the modern world of spammers and smtp, any mail you have to generate a bounce message for (i.e. your relayhost accepts a mail for an invalid account on your primary host) means either someone else is getting junk from you or the backup host has to deal with double bounces. I prefer to avoid the junk.
Re: Backup MX server
On Wed, 01 Mar 2006 23:16:59 -0600, Graham Toal wrote: Although I know where David is coming from with this slightly contentious comment, he's wrong. The argument is that most senders will do their own back-off, and the hassle of setting up a *good* backup MX server is so high that the benefit scarcely justifies it. However where he is wrong is not in the senders who don't resend (they're just broken anyway) or in the local clients who are sending outgoing mail via your server (bad idea anyway), but in clients who back off *for a long time* when they think you're down. In other words a backup MX lets you recover more quickly and more gracefully than not having one. Also critical is backup DNS. Let's assume we're looking at a disaster here, a long-term (5 day?) outage rather than a failed UPS. If your DNS is on the same net as the mailer, its down too. Senders soon get no result at all when they look you up, with the result that mail *bounces* (unknown address) rather than requeues. NO - it does not! Well, not unless the sending MTA is broken. To quote from Postfix documentation referring to not getting an MX record from DNS: By default, the Postfix SMTP client defers delivery and tries again after some delay. This behavior is required by the SMTP standard. It also neglects the fact that lots of caching nameservers elsewhere will have a copy of the records that likely will not expire for quite sometime. I know mine are set to 3600 but I have had the sad experience of changing a domain from one dns hosting service to another and the old one had a TTL good for a week. So set up a backup DNS even if you don't have a backup MX. Also for a major disaster, you probably don't want to continue secondarying your main (locally hosted) zone file. You may even want to replace the zone file on the backup MX host with a different one pointing to different servers, so you can have a web presence and maybe even some way of accessing your mail. In this case make sure you have a pre-prepared primary zone file that you can run on your backup DNS host, and have a protocol (i.e. a human protocol, phone no's and a password) so you can tell the remote person that it is time to switch from being a secondary DNS server to being a primary. You might even have your disaster site always running in preparation, just with no DNS normally pointing to it. (I do, and I'm not telling you the address ;-) ) In the event of a truly major disaster, with no telephones even, leave explicit instructions with this remote person on what circmstances they can kick in your backup DNS automatically, eg there is a national emergency reported on TV and your site has not been reachable for X days. Personally I do believe in Backup MX, as long as it does proper relay checking. It's nice if it also does spam checking, but not critical because your primary MX will still do that. However if you do spam checking *and rejection* on your backup MX, you'll significantly lower the load on the primary when it returns. Note that 5 days of pent-up mail arriving at once can kill a machine even if it is normally up to the peak loads you get, so you want a throttling control both on what the backup MX forwards to you when you return, and what you accept from other sources when you return. 5 days of pent up mail will NOT all arrive at once. Not all of the senders will try again simultaneously and it is also likely that each of them will also not even flush all of the delayed messages in one batch. Rate limiting in decent MTAs mitigates the problem. That said, having backup DNS located elsewhere is never harmful as long as you can get it updated as fast as your master in house. Graham From the land down under: Australia. Do we look umop apisdn from up over? Do NOT CC me - I am subscribed to the list. Replies to the sender address will fail except from the list-server.
Re: Backup MX server
On Thursday, March 2, Rod.. Whitworth wrote: On Wed, 01 Mar 2006 23:16:59 -0600, Graham Toal wrote: If your DNS is on the same net as the mailer, its down too. Senders soon get no result at all when they look you up, with the result that mail *bounces* (unknown address) rather than requeues. NO - it does not! Well, not unless the sending MTA is broken. To quote from Postfix documentation referring to not getting an MX record from DNS: By default, the Postfix SMTP client defers delivery and tries again after some delay. This behavior is required by the SMTP standard. If the client can't find any DNS information on the destination, it tends to bounce. At least in all non-broken MTAs. Try it. Send email to [EMAIL PROTECTED] and see what happens. It also neglects the fact that lots of caching nameservers elsewhere will have a copy of the records that likely will not expire for quite sometime. I know mine are set to 3600 but I have had the sad experience of changing a domain from one dns hosting service to another and the old one had a TTL good for a week. This was 1/2 his argument. No DNS info means no DNS info. Not somewhere out there (sung like the song) we have a cache... Note that 5 days of pent-up mail arriving at once can kill a machine even if it is normally up to the peak loads you get, so you want a throttling control both on what the backup MX forwards to you when you return, and what you accept from other sources when you return. 5 days of pent up mail will NOT all arrive at once. Not all of the senders will try again simultaneously and it is also likely that each of them will also not even flush all of the delayed messages in one batch. Rate limiting in decent MTAs mitigates the problem. It most certainly will if the backup MTA sends it all at once. And if you read what you responded to, he said make sure that the backups to rate limiting. And you respond with Rate lmiting in decent MTAs mitigates the problem. So? Why are you saying what you are saying? That said, having backup DNS located elsewhere is never harmful as long as you can get it updated as fast as your master in house. scp, rsync, etc, etc. It will tend to get updated faster than the primary, considering you've got to edit the primiry's version by hand (usually). --Toby.
Re: upl(4) interface not working
Hi all, On Wednesday 01 March 2006 21:09, Lars Weste wrote: I configured it on the first machine: ifconfig upl0 inet 10.200.200.1 10.200.200.2 netmask 255.255.255.255 up Wrong netmask. point-to-point links usually use 255.255.255.252 (a /30). I tried with different netmasks, /30, /31, /32, /0 and without specifying a netmask. As mentioned in a previous mail, the interface shows up as configured, also the routing table looks good to me. ifconfig upl0 inet 10.200.200.1 10.200.200.2 netmask 255.255.255.252 up ping 10.200.200.1 the ping command returns with no route to host... I am unable to ping the local ip on the local upl0 interface. Regardless which netmask i have configured, shouldn't I be able to ping the local configured IP? I plugged the cable into a linux host, the device was recognized as the following: Mar 2 07:26:03 linux kernel: usb 4-1: new full speed USB device using uhci_hcd and address 2 Mar 2 07:26:03 linux /etc/hotplug.d/usb/50-usb.hotplug[16124]: cat: /sys//devices/pci:00/:00:1d.3/usb4/4-1/product: No such file or directory Mar 2 07:26:04 linux kernel: usb0: register usbnet at usb-:00:1d.3-1, Prolific PL-2301/PL-2302, f6:d5:9f:cb:1a:5c Mar 2 07:26:04 linux kernel: usbcore: registered new driver usbnet Mar 2 07:26:10 linux ifup: No configuration found for usb0 This was a suse linux host, so yast came up, asking whether I want to configure the new network card. Linux takes the device as a network card, not as a point-to-point device. after assigning a ip address I was able to ping the local ip of the usb device. I am a bit clueless why it is in linux a ordinary network interface and in openbsd a point-to-point interface. greetings lars -- Feel free mit GMX FreeMail! Monat f|r Monat 10 FreeSMS inklusive! http://www.gmx.net