First OpenBSD release of EiffelStudio 5.7

[Bernd Schoeller]

Hello everybody,

we have prepared a first release of the development branch of
EiffelStudio 5.7 for OpenBSD x86. EiffelStudio was released as GPL
software on April 5th, 2006. It can be downloaded at

http://eiffelsoftware.origo.ethz.ch/downloads/builds

EiffelStudio is an IDE for the Eiffel programming language. 

Eiffel is an advanced object-oriented programming language that
features concepts like Design by Contract or multiple
inheritance. Eiffel is compiled to machine language via C code. The
Eiffel language has been adopted by ISO as an international standard
in 2006.

EiffelStudio is a modern IDE that is maintained by Eiffel Software
(www.eiffel.com). It has a history of 20 years of development and is
moving ahead at a fast pace. Current features are the integration of a
debugger, a round-trip UML/Bon editor, a GUI builder and some
refactoring support. Programms written in Eiffel are normally highly
portable between operating systems.

In the long run, I would like to provide a usual port, that even might
be integrated into the OpenBSD ports collection (still have to learn
how to do ports, though). Currently, we only have a binary release for
OpenBSD 3.9 on x86. It should be easy to target other hardware
platforms using the provided "PorterPackage", a "precompiled to C"
version of the IDE and compiler.

Please note again that the current release is based on the development
branch (the last stable release was pre-GPL) and has many known issues.

Any feedback is welcome,
Bernd

amavisd-new n postfix at openbsd 3.9

[sonjaya]

dear all

i try put postfix n amavisd-new  as mx in openbsd 3.9 , but i see in
the log of maillog error like this :

n 20 14:35:38 wpi postfix/smtpd[6364]: 58E386A03D:
client=localhost.urangbandung.web.id[127.0.0.1]
Jun 20 14:35:42 wpi amavis[19928]: (19928-01-3) ClamAV-clamd
av-scanner FAILED: Too many retries to talk to /tmp/clamd (Can't
connect to UNIX socket /tmp/clamd: No such file or directory) at (eval
50) line 266.
Jun 20 14:35:42 wpi amavis[19928]: (19928-01-3) WARN: all primary
virus scanners failed, considering backups
Jun 20 14:35:43 wpi postfix/cleanup[23835]: 58E386A03D:
message-id=<[EMAIL PROTECTED]>

i try to telnet localhost 10024 is working :

# telnet localhost 10024
Trying ::1...
telnet: connect to address ::1: Connection refused
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 [127.0.0.1] ESMTP amavisd-new service ready

-sonjaya-

Re: 256 color support for terminals under X

[viq]

On Tuesday 20 June 2006 07:14, Bihlmaier Andreas wrote:
> Hello misc@,
>
> I stumbled across a problem with all X terminal emulators in OpenBSD
> (that is xterm and aterm, eterm and rxvt from ports).
> None of the above seems to support 256 colors. I tried various
> combinations of $TERM (xterm, xterm-color, xterm-xfree86,
> xterm-256color) with all the terminals, running and not running screen.

I'm not sure whether it's 256 colours, but right now I'm using as $TERM 
xterm-vt220

> I need the 256 color support for the superb vim colorscheme (actually
> it is more than just colors) xterm16[0], and no gvim is not an option
> because I don't like GUIs that much.
>
> I googled for about 3 hours last night, but without a definite answer
> whether OpenBSD supports 256colors in terminal under X. The argument I
> read (sorry can't seem to find the link anymore) was that the 256color
> support had some issues and was removed.
>
> Does OpenBSD support 256colors?
>
> BTW. I'm running amd64 STABLE, but I can reproduce the same behavior on
> i386 current (1 month old).
>
> Regards,
> ahb
>
>
> [0] http://vim.sourceforge.net/scripts/script.php?script_id=795

-- 
viq

Reading a file that is been written make the system freeze?

[Federico Giannici]

As I have already told in a couple of previous emails, I'm experiencing 
occasional computer freezes (the PC lockups with no error at all, and I 
can only reset it).


I replaced all the hardware (motherboard, cpu, ram, disc controller, 
etc...) and upgraded to 3.9 and now to -current of some days ago. But it 
keeps freezing...


The pc freezes (but only occasionally) during dumps of the entire 
filesystem, using the system "dump" program. The dump is done while the 
system is in use, so files may change during the dump.


Yesterday another PC freezed!
I noticed that it occurred just at the time that a copy of a directory 
was done, this time by means of the "tar" program. This time too the 
backed-up files were in use and probably written.


So, all these clues make me think that if a file is dumped (readed, in 
particular by "dump" and "tar") while it is written, it can make the 
system froze-up.


Please note that both PCs have softupdates enabled.


Thanks.

--
___
__
   |-  [EMAIL PROTECTED]
   |ederico Giannici  http://www.neomedia.it
___

Re: TOSBHIBA 305CDT: Card detected, but no sound.

[vladas]

On 19/06/06, Fred Crowson <[EMAIL PROTECTED]> wrote:

Hi this is already fixed - the problem is that you have two audio
devices that conflict the sb0 and the wss0:



An example is given at http://www.openbsd.org/i386-laptop.html for the
Toshiba Tecra 8000, another example is given at
http://www.crowsons.net/puters/fcm.php which is for a Toshiba Libretto.


Fred,

Thank you for the help. Sound works now[1].


[1] dd if=/dev/audio of=rec.raw or dd if=/dev/sound of=rec.raw
produce 0 byte size rec.raw. Tested according
http://www.jp.openbsd.org/faq/faq13.html#recordaudio



--- dmesg.before.disable.sb Tue Jun 20 18:05:59 2006
+++ dmesg.after.disable.sb  Tue Jun 20 18:08:07 2006
@@ -9,8 +9,8 @@ using 431 buffers containing 1765376 byt
mainbus0 (root)
bios0 at mainbus0: AT/286+(63) BIOS, date 12/26/97, BIOS32 rev. 0 @ 0xfe95a
apm0 at bios0: Power Management spec V1.2
-apm0: battery life expectancy 61%
-apm0: AC on, battery charge high, charging, estimated 1:32 hours
+apm0: battery life expectancy 63%
+apm0: AC on, battery charge high, charging, estimated 1:40 hours
apm0: flags 20102 dobusy 0 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xf/0x1
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf8e80/96 (4 entries)
@@ -52,15 +52,10 @@ atapiscsi0 at wdc1 channel 0 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0:  SCSI0 5/cdrom removable
cd0(wdc1:0:0): using BIOS timings
-sb0 at isa0 port 0x220/24 irq 5 drq 1: dsp v3.01
-midi0 at sb0: 
-audio0 at sb0
-opl0 at sb0: model OPL3
-midi1 at opl0: 
-wss0 at isa0 port 0x530/8 irq 10 drq 0: CS4231 or AD1845 (vers 4)
-audio1 at wss0
+wss0 at isa0 port 0x530/8 irq 5 drq 1: CS4231 or AD1845 (vers 4)
+audio0 at wss0
pcppi0 at isa0 port 0x61
-midi2 at pcppi0: 
+midi0 at pcppi0: 
spkr0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: using exception 16
@@ -73,7 +68,7 @@ pcmcia0 at pcic0 controller 0 socket 0
pcmcia1 at pcic0 controller 0 socket 1
ne3 at pcmcia1 function 0 "BUFFALO, LPC3-CLT, R01" port 0x300/32, irq
3, address 00:07:40:19:8e:d5
pcic0: irq 9, polling enabled
-biomask e945 netmask e94d ttymask fbcf
+biomask ed45 netmask ed4d ttymask ffcf
pctr: 586-class performance counters and user-level cycle counter enabled
dkcsum: wd0 matches BIOS drive 0x80
root on wd0a


name=wss,ad1848
version=
config=WSS
encodings=mulaw:8,alaw:8,slinear_le:16,ulinear:8,slinear_be:16,slinear:8*,ulinear_le:16*,ulinear_be:16*,adpcm:8
properties=mmap
full_duplex=0
fullduplex=0
blocksize=400
hiwat=163
lowat=122
monitor_gain=0
mode=
play.rate=8000
play.channels=1
play.precision=8
play.encoding=mulaw
play.gain=220
play.balance=32
play.port=0x0
play.avail_ports=0x0
play.seek=0
play.samples=0
play.eof=0
play.pause=0
play.error=0
play.waiting=0
play.open=0
play.active=0
play.buffer_size=65536
record.rate=8000
record.channels=1
record.precision=8
record.encoding=mulaw
record.gain=220
record.balance=32
record.port=0x1
record.avail_ports=0x5
record.seek=0
record.samples=0
record.eof=0
record.pause=0
record.error=0
record.waiting=0
record.open=0
record.active=0
record.buffer_size=65536
record.errors=0


inputs.mic=220,220
inputs.mic.mute=off
inputs.cd=220,220
inputs.cd.mute=off
inputs.dac=220,220
inputs.dac.mute=off
record.record=220,220
record.record.source=mic
monitor.monitor=0




HTH

Fred



vladas

Re: latest sendmail patch

[Alexander Belikov]

AH> Monah Baki wrote:
>> Hi all,
>> 
>> I'm trying to apply the latest patch for sendmail and on my "make", I get
>> the following error:
>> 
>> cc -O2 -pipe  -DSTARTTLS -DMILTER -DFAST_PID_RECYCLE -D_FFR_USE_SETLOGIN
>> -DSM_OMIT_BOGUS_WARNINGS -DNEWDB -DMAP_REGEX -DNETINET6 -DNEEDSGETIPNODE
>> -DSM_CONF_SHM -DNIS -DTCPWRAPPERS
>> -I/usr/src/gnu/usr.sbin/sendmail/sendmail/../sendmail
>> -I/usr/src/gnu/usr.sbin/sendmail/sendmail/../include   -c
>> /usr/src/gnu/usr.sbin/sendmail/sendmail/deliver.c
>> /usr/src/gnu/usr.sbin/sendmail/sendmail/deliver.c: In function `deliver':
>> /usr/src/gnu/usr.sbin/sendmail/sendmail/deliver.c:3269: error: syntax
>> error before '<<' token
>> /usr/src/gnu/usr.sbin/sendmail/sendmail/deliver.c:3286: error: syntax
>> error before '==' token
>> /usr/src/gnu/usr.sbin/sendmail/sendmail/deliver.c:3294: error: syntax
>> error before '>>' token
>> /usr/src/gnu/usr.sbin/sendmail/sendmail/deliver.c:3430: confused by
>> earlier errors, bailing out
>> *** Error code 1
>> 
>> Stop in /usr/src/gnu/usr.sbin/sendmail/sendmail.
>> *** Error code 1
>> 
>> Stop in /usr/src/gnu/usr.sbin/sendmail.

AH> The patch did not apply cleanly. Reinstall the 3_9_BASE sources from cvs
AH> or cd and patch it again.

... or just update your source tree to OPENBSD_3_9

AH> Did you apply the first sendmail patch before? If not, and they affect
AH> the same places in the same file(s), you might get conflicts like this.
AH> Dunno about these patches, though.

AH> /Alexander

Re: Packet overload?

[Stuart Henderson]

On 2006/06/19 20:39, Peter Bako wrote:
> However I've noticed that if more than one or two people are getting email
> from their ISP (standard pop3), then the third person to try to get email
> will get an error that the server could not be reached.

The ISP probably restricts the number of connections from a single
IP address (either concurrent, or per-min). Apart from reducing resource
use on a busy server, this also makes password-guessing slower, so you
can understand why people might do it. See this from inetd.conf(5) on
$some_other_bsd:

{wait|nowait}[/max-child[/max-connections-per-ip-per-minute[/max-child-per-ip]]]

Test it from another connection bypassing the soekris if you like,
just have a couple of "telnet mail.whatever_isp.com 110" running, you
probably don't even need to login.

> Anyone have any idea as to the cause and a solution for this?

If this is what's happening..:

- Ask the ISP if they are restricting like this and see if they
can remove or relax the restriction; they might not realise that
by doing this they're causing problems for people with multiple
POP accounts behind a single NAT, and this is the easiest fix.
(They might not realise they're restricting it at all, even).

- If more IP addresses are available, use them for NATting:
nat on $foo from $foo:network -> { 1.1.1.1, 1.1.1.2, 1.1.1.3 }

- Run an internal mail server, either change to SMTP delivery of
email, or run some program like fetchmail so you can ensure only
one a/c is POPped at once.

> the processor is basically a PII/266 with 128M of RAM

Well... the geode-based systems (soekris, pcengines) have _much_
worse I/O performance than the equivalent PPro/PII. Integer CPU ops
are closer in speed. The Intels perform much better at electric
heating than the Soekris boards, which can be an advantage or a
disadvantage (:

Re: latest sendmail patch

[Moritz Grimm]

Monah Baki wrote:

I'm trying to apply the latest patch for sendmail and on my "make", I get
the following error:

[...]

OpenBSD 3.9-current (GENERIC) #685: Mon Apr 10 14:00:41 MDT 2006


Something is quite weird with your system. Try to run either -current, 
-release+patches or -stable (the latter two would be painful and 
unsupported downgrades in your case; a reinstall would make sense, I 
guess), and not a mix of different versions. It's what the FAQ calls 
"being out of sync" on several occasions, and it's lots of trouble.



Moritz

Re: latest sendmail patch

[Nick Holland]

Monah Baki wrote:

Hi all,

I'm trying to apply the latest patch for sendmail and on my "make", I get
the following error:

...

OpenBSD 3.9-current (GENERIC) #685: Mon Apr 10 14:00:41 MDT 2006
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC


Patches are for RELEASE.  Not -current.  You are running a -current, so 
you are committed to running -current, your (only) option is to upgrade 
to the most recent snapshot...which will have the fix, and you won't 
have to compile anything.



Nick.

Re: latest sendmail patch

[Nick Holland]

Nick Holland wrote:

Monah Baki wrote:

Hi all,

I'm trying to apply the latest patch for sendmail and on my "make", I get
the following error:

...

OpenBSD 3.9-current (GENERIC) #685: Mon Apr 10 14:00:41 MDT 2006
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC


Patches are for RELEASE.  Not -current.  You are running a -current, so 
you are committed to running -current, your (only) option is to upgrade 
to the most recent snapshot...which will have the fix, and you won't 
have to compile anything.


eh...
In *this case*, there are other options.
But I'm not going to detail those.  I don't like special cases... 
especially when it might encourage people to do things wrong and think 
they got away with it.


Nick.

release email in amavis temp

[sonjaya]

dear all
i have installed amavisd-new by port  but amavisd-new trap email that
not spam or virus ana locate at /var/amavisd/tmp/x
so i wan release, i see in manual that using amavisd-release , but i
can find it .


--
-sonjaya-

Re: amavisd-new n postfix at openbsd 3.9

[Rogier Krieger]

On 6/20/06, sonjaya <[EMAIL PROTECTED]> wrote:

i try put postfix n amavisd-new  as mx in openbsd 3.9


Your question seems to have to with Postfix rather than OpenBSD.
Hence, this is not really the appropriate list.

Besides that, given the error message, I suspect careful reading
should provide you a hint of how to solve the problem yourself. Check
your amavisd/clam-av configuration wrt. the existence of /tmp/clamd.

Cheers,

Rogier

--
If you don't know where you're going, any road will get you there.

Re: amavisd-new n postfix at openbsd 3.9

[sonjaya]

ok , i any way i can't find amavisd-release if install form port amavisd-new



Your question seems to have to with Postfix rather than OpenBSD.
Hence, this is not really the appropriate list.

Besides that, given the error message, I suspect careful reading
should provide you a hint of how to solve the problem yourself. Check
your amavisd/clam-av configuration wrt. the existence of /tmp/clamd.




--
-sonjaya-

Missing "network" configuration param in ospfd (3.9)

[Florian Daniel Otel]

[Pls point to the appropriate resource if this is not the right list]

Hello all,

I have the following question: In opspfd (as per vanilla 3.9) I cannot find
a way to specify/filter which network+mask is announced e.g. which network
goes to which area.

TIA for any hints,

Florian

Re: pkg_add -u not working

[Benjamin Collins]

On Sun, Jun 18, 2006 at 01:43:44PM +0200, Marc Espie wrote:
> You'd better really start explaining what you are doing, and what you
> expect the tools to do...
>
> so far, you are not making any kind of point.
>
> pkg_add -ui does exactly what it is supposed to at this point in time.
> If it doesn't work for you, it's probably because there's something you
> have completely not understood...

Let me see chime in here, because I've been wondering about this as well.

What I expect the tool to do if I invoke it like

$ sudo pkg_add -u

is to do this (from pkg_add(1)):
If no pkgname is given, pkg_add will update all installed packages.

What actually happens after the above invocation is what Sebastian
pointed out - updatable package names are printed, but nothing is
actually updated.
> # pkg_add -uv
>
> Candidates for updating atk-1.10.1 -> atk-1.10.3p1
> Candidates for updating glib2-2.6.4 -> glib2-2.8.4
> Looking for updates: complete

bc

[demime 1.01d removed an attachment of type application/pgp-signature]

Re-requesting DHCP lease on media change

[Matthew R. Dempsky]

Is it possible to configure dhclient(8) to automatically re-request a 
DHCP lease on media changes (e.g., plugging in a new ethernet cable, 
associating with a new wireless access point, trunk(4) switching between 
interfaces)?  If not, does anyone else think this a worthwhile feature 
to add?

Thanks.

Re: pkg_add -u not working

[Will Maier]

On Tue, Jun 20, 2006 at 09:29:08AM -0500, Benjamin Collins wrote:
> What actually happens after the above invocation is what Sebastian
> pointed out - updatable package names are printed, but nothing is
> actually updated.

And you're running 3.9 or -current?

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | [EMAIL PROTECTED] |
| freenode:..lt_kije | freenode:..#openbsd,#madlug |
*--[ BSD Unix: Live Free or Die ]--*

named on udp ports only

[Constantine A. Murenin]

Hello,

I'm running an sshd on port 53 (domain) as there is some convenient
wireless hot-spot that allows for both udp and tcp connection on this
port without any authentication. :)

(Yes, there is not even a need for NSTX!)

How do I tell my named(8) to only listen on udp ports, and leave tcp
ports for sshd(8)? Is this at all possible with named.conf alone? I've
glanced through named.conf(5), but didn't find the desired option
there...

Thanks,
Constantine.

Re: named on udp ports only

[Gilles Chehade]

On Tue, 20 Jun 2006 16:07:25 +0100
"Constantine A. Murenin" <[EMAIL PROTECTED]> wrote:

> Hello,
> 
> I'm running an sshd on port 53 (domain) as there is some convenient
> wireless hot-spot that allows for both udp and tcp connection on this
> port without any authentication. :)
> 
> (Yes, there is not even a need for NSTX!)
> 
> How do I tell my named(8) to only listen on udp ports, and leave tcp
> ports for sshd(8)? Is this at all possible with named.conf alone? I've
> glanced through named.conf(5), but didn't find the desired option
> there...
> 
> Thanks,
> Constantine.
> 

can't you just use PF to redirect ?

-- veins

Re: named on udp ports only

[Steve Shockley]

Constantine A. Murenin wrote:

How do I tell my named(8) to only listen on udp ports, and leave tcp
ports for sshd(8)? Is this at all possible with named.conf alone? I've
glanced through named.conf(5), but didn't find the desired option
there...


If you can't do it with named, you could use pf to redir the incoming 
TCP 53 connections to port 22.  Then there's no port conflict.

Re: named on udp ports only

[Constantine A. Murenin]

On 20/06/06, Gilles Chehade <[EMAIL PROTECTED]> wrote:

On Tue, 20 Jun 2006 16:07:25 +0100
"Constantine A. Murenin" <[EMAIL PROTECTED]> wrote:

> Hello,
>
> I'm running an sshd on port 53 (domain) as there is some convenient
> wireless hot-spot that allows for both udp and tcp connection on this
> port without any authentication. :)
>
> (Yes, there is not even a need for NSTX!)
>
> How do I tell my named(8) to only listen on udp ports, and leave tcp
> ports for sshd(8)? Is this at all possible with named.conf alone? I've
> glanced through named.conf(5), but didn't find the desired option
> there...
>
> Thanks,
> Constantine.
>

can't you just use PF to redirect ?


I was thinking about that, but I wanted to make it more "proper". :)

Re: Re-requesting DHCP lease on media change

[Nick Guenther]

On 6/20/06, Matthew R. Dempsky <[EMAIL PROTECTED]> wrote:

Is it possible to configure dhclient(8) to automatically re-request a
DHCP lease on media changes (e.g., plugging in a new ethernet cable,
associating with a new wireless access point, trunk(4) switching between
interfaces)?  If not, does anyone else think this a worthwhile feature
to add?

Thanks.



I think hotplugd(8) might help here. The manpage says: " 3
network interface" so you should be able to just write a one-liner to
do it.

-Nick

Re: named on udp ports only

[Gilles Chehade]

On Tue, 20 Jun 2006 16:28:28 +0100
"Constantine A. Murenin" <[EMAIL PROTECTED]> wrote:

> On 20/06/06, Gilles Chehade <[EMAIL PROTECTED]> wrote:
> > On Tue, 20 Jun 2006 16:07:25 +0100
> > "Constantine A. Murenin" <[EMAIL PROTECTED]> wrote:
> >
> > > Hello,
> > >
> > > I'm running an sshd on port 53 (domain) as there is some
> > > convenient wireless hot-spot that allows for both udp and tcp
> > > connection on this port without any authentication. :)
> > >
> > > (Yes, there is not even a need for NSTX!)
> > >
> > > How do I tell my named(8) to only listen on udp ports, and leave
> > > tcp ports for sshd(8)? Is this at all possible with named.conf
> > > alone? I've glanced through named.conf(5), but didn't find the
> > > desired option there...
> > >
> > > Thanks,
> > > Constantine.
> > >
> >
> > can't you just use PF to redirect ?
> 
> I was thinking about that, but I wanted to make it more "proper". :)
> 

well, you are trying to do something quite disgusting, pf is probably
the most elegant way to do that ;)

Re: named on udp ports only

[Constantine A. Murenin]

On 20/06/06, Gilles Chehade <[EMAIL PROTECTED]> wrote:

On Tue, 20 Jun 2006 16:28:28 +0100
"Constantine A. Murenin" <[EMAIL PROTECTED]> wrote:

> On 20/06/06, Gilles Chehade <[EMAIL PROTECTED]> wrote:
> > On Tue, 20 Jun 2006 16:07:25 +0100
> > "Constantine A. Murenin" <[EMAIL PROTECTED]> wrote:
> >
> > > Hello,
> > >
> > > I'm running an sshd on port 53 (domain) as there is some
> > > convenient wireless hot-spot that allows for both udp and tcp
> > > connection on this port without any authentication. :)
> > >
> > > (Yes, there is not even a need for NSTX!)
> > >
> > > How do I tell my named(8) to only listen on udp ports, and leave
> > > tcp ports for sshd(8)? Is this at all possible with named.conf
> > > alone? I've glanced through named.conf(5), but didn't find the
> > > desired option there...
> > >
> > > Thanks,
> > > Constantine.
> > >
> >
> > can't you just use PF to redirect ?
>
> I was thinking about that, but I wanted to make it more "proper". :)
>

well, you are trying to do something quite disgusting, pf is probably
the most elegant way to do that ;)


The machine in question doesn't run pf, and the DSL router that it is
connected to doesn't have the option to change ports... :(

So I'd like to settle this with named alone. :)

Thanks,
Constantine.

Re: pkg_add -u not working

[sebastian . rother]

> On Tue, Jun 20, 2006 at 09:29:08AM -0500, Benjamin Collins wrote:
>> What actually happens after the above invocation is what Sebastian
>> pointed out - updatable package names are printed, but nothing is
>> actually updated.
>
> And you're running 3.9 or -current?

3.9-amd64 (stable).
But it was mentioned that there are no updated packages avaiable for amd64...
Yes I can update using Ports... but it`s realy not so good (compared to
pkg_add -ui).

*my oppinion*
There are not so many updates in the STABLE-Branch so I realy don`t
understand why nobody can spend 3hrs of Compiling (a day, in the night,
even developers have to speel :)) ) STABLE Packages (just the updated
software! Not ALL Packages..).
It`s realy something I can`t understand if it deals with the great idea of
pkg_add -ui.
*/my oppinion*

Kidn regards,
Sebastian

Re: named on udp ports only

[Dan Farrell]

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of
> Constantine A. Murenin
> Sent: Tuesday, June 20, 2006 11:44 AM
> To: Gilles Chehade
> Cc: misc@openbsd.org
> Subject: Re: named on udp ports only
> 
> On 20/06/06, Gilles Chehade <[EMAIL PROTECTED]> wrote:
> > On Tue, 20 Jun 2006 16:28:28 +0100
> > "Constantine A. Murenin" <[EMAIL PROTECTED]> wrote:
> >
> > > On 20/06/06, Gilles Chehade <[EMAIL PROTECTED]> wrote:
> > > > On Tue, 20 Jun 2006 16:07:25 +0100
> > > > "Constantine A. Murenin" <[EMAIL PROTECTED]> wrote:
> > > >
> > > > > Hello,
> > > > >
> > > > > I'm running an sshd on port 53 (domain) as there is some
> > > > > convenient wireless hot-spot that allows for both udp and tcp
> > > > > connection on this port without any authentication. :)
> > > > >
> > > > > (Yes, there is not even a need for NSTX!)
> > > > >
> > > > > How do I tell my named(8) to only listen on udp ports, and
leave
> > > > > tcp ports for sshd(8)? Is this at all possible with named.conf
> > > > > alone? I've glanced through named.conf(5), but didn't find the
> > > > > desired option there...
> > > > >
> > > > > Thanks,
> > > > > Constantine.
> > > > >
> > > >
> > > > can't you just use PF to redirect ?
> > >
> > > I was thinking about that, but I wanted to make it more "proper".
:)
> > >
> >
> > well, you are trying to do something quite disgusting, pf is
probably
> > the most elegant way to do that ;)
> 
> The machine in question doesn't run pf, and the DSL router that it is
> connected to doesn't have the option to change ports... :(
> 
> So I'd like to settle this with named alone. :)
> 
> Thanks,
> Constantine.


Correct me if I'm wrong (and I usually am) but I thought DNS (and named
specifically) only used tcp connections for zone transfers. 

If you only allow resolution and not zone transfers, named should only
communicate via UDP... no need for nasty pf work.



Dan Farrell
Applied Innovations
[EMAIL PROTECTED]

Re: Re-requesting DHCP lease on media change

[Matthew R. Dempsky]

On Tue, Jun 20, 2006 at 11:36:06AM -0400, Nick Guenther wrote:
> I think hotplugd(8) might help here. The manpage says: " 3
> network interface" so you should be able to just write a one-liner to
> do it.

I'm not sure hotplug is useful here.  hotplug(4) says the only events 
signaled are device attachment and device detachment, and I don't 
believe any of the example scenarios I provided would result in those 
events.

Re: pkg_add -u not working

[Will Maier]

On Tue, Jun 20, 2006 at 06:41:09PM +0200, [EMAIL PROTECTED] wrote:
> 3.9-amd64 (stable).
> But it was mentioned that there are no updated packages avaiable for amd64...
> Yes I can update using Ports... but it`s realy not so good (compared to
> pkg_add -ui).

Right; pkg_add is nice.

> *my oppinion*
> There are not so many updates in the STABLE-Branch so I realy
> don`t understand why nobody can spend 3hrs of Compiling (a day, in
> the night, even developers have to speel :)) ) STABLE Packages
> (just the updated software! Not ALL Packages..).  It`s realy
> something I can`t understand if it deals with the great idea of
> pkg_add -ui.
> */my oppinion*

It's not that developers don't have time; it's that they don't have
resources. We all agree -- it would be great to see updates built
for more/all of the arches. And that can happen, I imagine. The only
problem is money and resources.

So if you care as much about having packages built for your arch as
you seem to, donate money or hardware.

Nikolay has already asked[0] for an amd64 to make -stable packages
happen; can you help?

[0]http://undeadly.org/cgi?action=article&sid=20060619214229

-- 

o--{ Will Maier }--o
| jabber:[EMAIL PROTECTED] | [EMAIL PROTECTED] |
| freenode:..lt_kije | freenode:..#openbsd,#madlug |
*--[ BSD Unix: Live Free or Die ]--*

Re: pkg_add -u not working

[steven mestdagh]

[EMAIL PROTECTED] [2006-06-20, 18:41:09]:
> *my oppinion*
> There are not so many updates in the STABLE-Branch so I realy don`t
> understand why nobody can spend 3hrs of Compiling (a day, in the night,
> even developers have to speel :)) ) STABLE Packages (just the updated
> software! Not ALL Packages..).
> It`s realy something I can`t understand if it deals with the great idea of
> pkg_add -ui.
> */my oppinion*

we need a machine for this. see the recent story on undeadly:
http://undeadly.org/cgi?action=article&sid=20060619214229

-- 
steven

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

Re: pkg_add -u not working

[Paul de Weerd]

On Tue, Jun 20, 2006 at 06:41:09PM +0200, [EMAIL PROTECTED] wrote:
| > On Tue, Jun 20, 2006 at 09:29:08AM -0500, Benjamin Collins wrote:
| >> What actually happens after the above invocation is what Sebastian
| >> pointed out - updatable package names are printed, but nothing is
| >> actually updated.
| >
| > And you're running 3.9 or -current?
|
| 3.9-amd64 (stable).
| But it was mentioned that there are no updated packages avaiable for
amd64...
| Yes I can update using Ports... but it`s realy not so good (compared to
| pkg_add -ui).
|
| *my oppinion*
| There are not so many updates in the STABLE-Branch so I realy don`t
| understand why nobody can spend 3hrs of Compiling (a day, in the night,
| even developers have to speel :)) ) STABLE Packages (just the updated
| software! Not ALL Packages..).
| It`s realy something I can`t understand if it deals with the great idea of
| pkg_add -ui.
| */my oppinion*

Consider this for a bit.

What do you need to do those 3 hours of compiling (even though I think
it's more work to get updated packages) ?

You'll need a machine to build them on. You need the this machine to
run the STABLE version you want to build the package for. OpenBSD
developers support two releases, so you'd need two machines (or boot
between two versions in some way or another, adding to the time it
take to release updated packages).

How many pkg-archs does OpenBSD support ?

see ftp://ftp.openbsd.org/pub/OpenBSD/3.9/packages/ :
alpha, amd64, arm, hppa, i386, m68k, m88k, mips64, powerpc, sparc,
sparc64, vax. That's 12 * 2 = 24 package build machines. That's also
24 * 3 = 72 hours of work (granted, some stuff can be done in parallel
but I still believe it to be more than three hours of work, especially
since some archs are quite a bit slower than your run of the mill quad
3GHz AMD64 box). Please remember that OpenBSD is a multi-platform OS.

All these resources could be used to further -current and the -current
ports tree. I find it amazing developers find time to update packages
for older releases for one arch.

Anyway, as can be seen in a recent post from Nikolay Sturm, they are
looking at supporting another arch. If you really want that support to
be there, please consider donating.

See http://www.undeadly.org/cgi?action=article&sid=20060619214229 for
more info on this request.

Cheers,

Paul 'WEiRD' de Weerd

--
>[<++>-]<+++.>+++[<-->-]<.>+++[<+
+++>-]<.>++[<>-]<+.--.[-]
 http://www.weirdnet.nl/

[demime 1.01d removed an attachment of type application/pgp-signature]

Re: named on udp ports only

[Spruell, Darren-Perot]

From: [EMAIL PROTECTED] 
> > The machine in question doesn't run pf, and the DSL router 
> that it is
> > connected to doesn't have the option to change ports... :(
> > 
> > So I'd like to settle this with named alone. :)
> > 
> > Thanks,
> > Constantine.
> 
> 
> Correct me if I'm wrong (and I usually am) but I thought DNS 
> (and named
> specifically) only used tcp connections for zone transfers. 
> 
> If you only allow resolution and not zone transfers, named should only
> communicate via UDP... no need for nasty pf work.

http://cr.yp.to/djbdns/tcp.html#why outlines cases where TCP is needed.
Large result sets (over 512 bytes) may qualify the use of TCP, but I'm not
clear on whether than means your named needs to bind to 53/tcp to handle
those correctly.

DS

Re: pkg_add -u not working

[Benjamin Collins]

On Tue, Jun 20, 2006 at 09:56:17AM -0500, Will Maier wrote:
> On Tue, Jun 20, 2006 at 09:29:08AM -0500, Benjamin Collins wrote:
> > What actually happens after the above invocation is what Sebastian
> > pointed out - updatable package names are printed, but nothing is
> > actually updated.
>
> And you're running 3.9 or -current?

I've got one machine running -current, and two others running 3.9-stable.

The behavior is the same on all three.

[demime 1.01d removed an attachment of type application/pgp-signature]

Re: named on udp ports only

[Wolfgang S. Rupprecht]

"Dan Farrell" <[EMAIL PROTECTED]> writes:
> Correct me if I'm wrong (and I usually am) but I thought DNS (and named
> specifically) only used tcp connections for zone transfers. 

Last time I looked named used TCP any time a packet needed to be
fragmented due to size.  It is highly unlikely that the OP will have a
fully functional system after turning off 53/tcp to named traffic.

-wolfgang

MySQL losts TCP connection.

[vladimir plotnikov]

Hello!

I have installed OpenBSD 3.8 and MySQL server  4.0.24 (from ports)

From time to time (after high load) I got next - mysql drops connects

by TCP/IP (simple connection closed after telnet to port 3306) and
next in logs:
Few lines like
060620 14:51:06 [ERROR] /usr/local/libexec/mysqld: Can't find file: './tasktrack
er/mantis_news_table.frm' (errno: 9)

then, after I send HUP signal to mysqld process, I got next in error output:

Status information:

Current dir: /var/mysql/
Running threads: 2  Stack size: 196608
Current locks:
lock: 0x7ee75a24:

lock: 0x8bab9a24:

Then also a lot of locks (about 100 total locks listen)

and, finally, log ends width:
Key caches:
default
Buffer_size: 268435456
Block_size:   1024
Division_limit:100
Age_limit: 300
blocks used:  9524
not flushed: 0
w_requests:   3798
writes:   1898
r_requests: 346940
reads:2035


handler status:
read_key:   371358
read_next:  488795
read_rnd 14869
read_first:   2385
write:   34562
delete 341
update: 242660

Table status:
Opened tables:334
Open tables:  334
Open files:   664
Open streams:   0

Alarm status:
Active alarms:   2
Max used alarms: 61
Next alarm time: 28780



# cat /etc/sysctl.conf | grep -v "^#"
kern.maxfiles=2

#cat /etc/my.cnf |grep -v "^#"
[client]
port= 3306
socket  = /tmp/mysql.sock
[mysqld]
user = _mysql
open-files=2
set-variable = max_connections=300
set-variable = back_log=120
skip-locking
set-variable = key_buffer=256M
set-variable = max_allowed_packet=1M
set-variable = table_cache=512
set-variable = sort_buffer=1M
set-variable = record_buffer=1M
set-variable = myisam_sort_buffer_size=64M
set-variable = thread_cache=8
set-variable = thread_concurrency=2
log_slow_queries = slow_query.log
tmpdir = /tmp/
datadir = /var/mysql
[mysqldump]
quick
set-variable = max_allowed_packet=16M
[isamchk]
set-variable = key_buffer=128M
set-variable = sort_buffer=128M
set-variable = read_buffer=2M
set-variable = write_buffer=2M

[mysqlhotcopy]
interactive-timeout


Where is my error in configuration?
I tired to download and install fresh stable mysql-4 brach but I got
same result.
--
Thank you.
Vladimir. Y. Plotnikov,
http://www.smartwebco.com/

Re: named on udp ports only

[Tobias Ulmer]

On Tue, Jun 20, 2006 at 10:53:00AM -0700, Wolfgang S. Rupprecht wrote:
> "Dan Farrell" <[EMAIL PROTECTED]> writes:
> > Correct me if I'm wrong (and I usually am) but I thought DNS (and named
> > specifically) only used tcp connections for zone transfers. 
> 
> Last time I looked named used TCP any time a packet needed to be
> fragmented due to size.  It is highly unlikely that the OP will have a
> fully functional system after turning off 53/tcp to named traffic.
> 
> -wolfgang
> 
>

As long as you don't do zone transfers or need large records,
it doesn't matter that much.

[EMAIL PROTECTED]:~$ sudo pfctl -vs rules | grep -A 1 domain 
pass in on vr0 inet proto tcp from  to 10.0.0.1 port = domain keep
state
  [ Evaluations: 89Packets: 0 Bytes: 0   States:
0 ]
pass in on vr0 inet proto udp from  to 10.0.0.1 port = domain keep
state
  [ Evaluations: 17860 Packets: 11257 Bytes: 1047939 States:
0 ]

Tobias

Re: MySQL losts TCP connection.

[Daniel Ouellet]

vladimir plotnikov wrote:

Hello!

I have installed OpenBSD 3.8 and MySQL server  4.0.24 (from ports)
 From time to time (after high load) I got next - mysql drops connects
by TCP/IP (simple connection closed after telnet to port 3306) and
next in logs:
Few lines like
060620 14:51:06 [ERROR] /usr/local/libexec/mysqld: Can't find file: 
'./tasktrack

er/mantis_news_table.frm' (errno: 9)

then, after I send HUP signal to mysqld process, I got next in error 
output:


Why not install 3.9 and then the package for MySQL at 5.0.22.

Also, great that you increase MySQL limits as looks like you need it, 
but may be you shoudl also look at:


man sysctl.conf for kern.maxfiles

and more importantly, login.conf as well and make sure you start MySQL 
with the call you increase the limits for as if not you will get the 
default limits that you will hit.


May be something like:

# Start MySQL server
if [ -x /usr/local/bin/mysqld_safe ] ; then
su -c _mysql root -c '/usr/local/bin/mysqld_safe &' > /dev/null fi

rc.local might fix your issue.

All discribe in the archive as well.


So, install 3.9, why do old if you just install a new box, then 5.0.22 
if that's i386, that's the latest stable package, then add a class for 
use by and then also increse your limits in sysctl.conf.


After that you will be fine.

Again, all explain in archive.

Daniel

Re: named on udp ports only

[Stuart Henderson]

On 2006/06/20 10:53, Wolfgang S. Rupprecht wrote:
> "Dan Farrell" <[EMAIL PROTECTED]> writes:
> > Correct me if I'm wrong (and I usually am) but I thought DNS (and named
> > specifically) only used tcp connections for zone transfers. 
> 
> Last time I looked named used TCP any time a packet needed to be
> fragmented due to size.

Or EDNS0 (supporting larger DNS responses over UDP). Main place people are
likely to see that needs >512 bytes is aol.com MX records.

Re: MySQL losts TCP connection.

[Jesse Gumm]

Definitely check your sysctl kern.maxfiles and probably more
importantly, /etc/login.conf.

On 6/20/06, Daniel Ouellet <[EMAIL PROTECTED]> wrote:

vladimir plotnikov wrote:
> Hello!
>
> I have installed OpenBSD 3.8 and MySQL server  4.0.24 (from ports)
>  From time to time (after high load) I got next - mysql drops connects
> by TCP/IP (simple connection closed after telnet to port 3306) and
> next in logs:
> Few lines like
> 060620 14:51:06 [ERROR] /usr/local/libexec/mysqld: Can't find file:
> './tasktrack
> er/mantis_news_table.frm' (errno: 9)
>
> then, after I send HUP signal to mysqld process, I got next in error
> output:

Why not install 3.9 and then the package for MySQL at 5.0.22.

Also, great that you increase MySQL limits as looks like you need it,
but may be you shoudl also look at:

man sysctl.conf for kern.maxfiles

and more importantly, login.conf as well and make sure you start MySQL
with the call you increase the limits for as if not you will get the
default limits that you will hit.

May be something like:

# Start MySQL server
if [ -x /usr/local/bin/mysqld_safe ] ; then
 su -c _mysql root -c '/usr/local/bin/mysqld_safe &' > /dev/null fi

rc.local might fix your issue.

All discribe in the archive as well.


So, install 3.9, why do old if you just install a new box, then 5.0.22
if that's i386, that's the latest stable package, then add a class for
use by 

Opinion of MySQL 5.xx on OpenBSD 3.9...

[Anders J]

Hello List.
A customer have a mailserver solution wich must be moved to a new
hardware, today its is running on a old suse 9.2 but i really want to
use OpenBSD if possible.
It uses postfix, cyrus-imap and mysql as the backend for users domain
info, contacts etc. (only 58 named users and 3 domains and several aliases)
My self have experienced mixed issues with MysSQL on OpenBSD and also
read and heard about performance and stability problems with MySQL on
OpenBSD.
So i'm a bit nervous implementing this on OpenBSD (Should i use FreeBSD
instead)?.
Has anyone a positive experience with  3.9+ MySQl
mysql-server-5.0.21.tgz
(or
later)?

And by the way it is not an option to use postgresql since they also
have several other apps which use the database in question .So migrate
to an other db platform is NOT an option.

Regards
Anders

isakmpd + nat (Yes Again!)

[Roy Morris]

ok, I know I've seen this before but can't seem to find the link. I am 
setting up a vpn using isakmpd and for the regular net to net stuff it

works fine. I am trying to use an alias ip on each gateway and nat to
the internal host. The isakmpd.conf would use phase one real-ip-1 and
use real-ip-2 (nat/binat)to the internal client.

Is this making sense? ..

I1 (172.30.1.2) -> GW1(10.0.1.1/24) -router - GW2(10.0.2.1/24)
I1-->NAT ->10.0.1.2 x-router-x 10.0.2.2 NAT ->I2 (172.31.1.2)

pf.conf should? have
binat on enc0 from 172.30.1.2 to any ->10.0.1.2

and would also have /etc/hostname.xyz
inet alias 10.0.1.2

and the same stuff on the other end. Packet capture shows it using
the external interface with no nat to get out.

What am I doing wrong? - a link, doc or whack upside the head is
accepted!

thanks
Roy

Re: Opinion of MySQL 5.xx on OpenBSD 3.9...

[Jesse Gumm]

It's good, but if it's a multiprocessor machine, OpenBSD won't take
full advantage of the other processors with MySQL since MySQL is
multi-threaded.  But it's stable, and runs reasonably fast (and you
are assured the system is more secure, being OpenBSD and all).

My only concern, then, is really if it's a multiprocessor machine, and
you need breakneck performance, you might want to consider running
MySQL on FreeBSD with linuxthreads.

-Jesse

On 6/20/06, Anders J <[EMAIL PROTECTED]> wrote:

Hello List.
A customer have a mailserver solution wich must be moved to a new
hardware, today its is running on a old suse 9.2 but i really want to
use OpenBSD if possible.
It uses postfix, cyrus-imap and mysql as the backend for users domain
info, contacts etc. (only 58 named users and 3 domains and several aliases)
My self have experienced mixed issues with MysSQL on OpenBSD and also
read and heard about performance and stability problems with MySQL on
OpenBSD.
So i'm a bit nervous implementing this on OpenBSD (Should i use FreeBSD
instead)?.
Has anyone a positive experience with  3.9+ MySQl
mysql-server-5.0.21.tgz
(or
later)?

And by the way it is not an option to use postgresql since they also
have several other apps which use the database in question .So migrate
to an other db platform is NOT an option.

Regards
Anders

Re: MySQL losts TCP connection.

[vladimir plotnikov]

Thank you, gays.
login.conf adapted and problem solved
(tested on mysqldump --all-databases >/dev/null)

Re: named on udp ports only

[Dave Anderson]

** Reply to message from "Constantine A. Murenin" <[EMAIL PROTECTED]>
on Tue, 20 Jun 2006 16:07:25 +0100

>Hello,
>
>I'm running an sshd on port 53 (domain) as there is some convenient
>wireless hot-spot that allows for both udp and tcp connection on this
>port without any authentication. :)
>
>(Yes, there is not even a need for NSTX!)
>
>How do I tell my named(8) to only listen on udp ports, and leave tcp
>ports for sshd(8)? Is this at all possible with named.conf alone? I've
>glanced through named.conf(5), but didn't find the desired option
>there...

If you look at the RFCs defining DNS you'll quickly discover that TCP
access is *required* for all servers.  While it's mostly used for zone
transfers, *any* request whose answer is too large to fit in a single
UDP packet must be retried via TCP.

In other words, it's not possible to do what you want.  (It can
*appear* to work, but you'll have obscure problems where some requests
quietly fail for no obvious reason.)

Dave

-- 
Dave Anderson
<[EMAIL PROTECTED]>

Re: 256 color support for terminals under X

[Michal Soltys]

Bihlmaier Andreas wrote:


Hello misc@,

I stumbled across a problem with all X terminal emulators in OpenBSD
(that is xterm and aterm, eterm and rxvt from ports).
None of the above seems to support 256 colors. I tried various
combinations of $TERM (xterm, xterm-color, xterm-xfree86,
xterm-256color) with all the terminals, running and not running screen.


Check simple test scripts at http://frexx.de/xterm-256-notes/ - at least 
you will have answers if colors work properly.

Re: What is the problem with sticky-address and round-robin?

[Giancarlo Razzolini]

Hi all,

Today i googled a little and found someone saying that this problem
could be something related with exhaustion of mbuf's. Then i executed a
netstat -m im my test firewall, which was running with sticky-address,
and it was with it's mbuf's ok. Then i used the sticky-address in my
main firewall, and the mbuf's were even with a lower usage than in my
test firewall. Seriously, i don't know where to look. There is some
problem with the network cards being in the same IRQ  address?

Also, something very weird happened while using my test firewall. One
machine behind it, was assigned to an specific gateway, with a source
track entry not expired and with stated and connections. Then, i don't
know why, the machine started get it's packets sent through the other
gateway. When i pinged some internet ip address, it returned to me some
messages about the next hop being redirected to the other gateway (not
the one in the source track entry) but, it did not lost it's internet
connectivity.

I also want to know if the sticky-address with round-robin is the most
recommend for my case. I can't use source-hash, because i do have 2
different ADSL providers, with 2 ADSL modems, each on an interface.
Also, i want to know if trunk would solve my problem in this case.

Thanks in advance,
--
Giancarlo Razzolini
Linux User 172199
Moleque Sem Conteudo Numero #002
Slackware Current
OpenBSD Stable
Snike Tecnologia em Informatica
4386 2A6F FFD4 4D5F 5842  6EA0 7ABE BBAB 9C0E 6B85

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]

Re: Opinion of MySQL 5.xx on OpenBSD 3.9...

[Daniel Ouellet]

Anders J wrote:

My self have experienced mixed issues with MysSQL on OpenBSD and also
read and heard about performance and stability problems with MySQL on
OpenBSD.


I use it for years (7+) without issues. The only one I recall was with 
3.23.46, yeap, really old, where the database restart itself running out 
of resources then, but that's really old stuff. I mean really old and 
that was on OpenBSD 3.0 then. The only issue always been configurations 
issues, like limits on tables, login.conf stuff, and the like.



So i'm a bit nervous implementing this on OpenBSD (Should i use FreeBSD
instead)?.


Use what you are comfortable with, but OpenBSD sure can do the job just 
fine.



Has anyone a positive experience with  3.9+ MySQl
mysql-server-5.0.21.tgz
(or
later)?


As stated above. No problem here and with plenty of mirror as well. Just 
upgraded to 5.0.22 a few days ago (see below for some stats) in less 
then a minute using pkg_add -u as well and restart MySQL. Really easy to 
manage I tell you. I even have PF running on that box as well obviously 
to protect it and the box is really efficient in resources I tell you.


Nothing wrong with it, use it as you see fit.

# uptime
 3:53PM  up 9 days, 10:34, 1 user, load averages: 0.21, 0.15, 0.14

# ps -auxw | grep mysql
_mysql1794  4.2 17.6 441240 367056 ??  S 11Jun06  539:55.12 
/usr/local/libexec/mysqld --basedir=/usr/local --datadir=/var/mysql 
--user=_mysql --pid-file=/var/mysql/---.com.pid -


mysql> status;
--
mysql  Ver 14.12 Distrib 5.0.22, for unknown-openbsd3.9 (i386) using 
readline 4.3


Connection id:  879766
Current database:
Current user:   [EMAIL PROTECTED]
SSL:Not in use
Current pager:  stdout
Using outfile:  ''
Using delimiter:;
Server version: 5.0.22-log
Protocol version:   10
Connection: Localhost via UNIX socket
Server characterset:latin1
Db characterset:latin1
Client characterset:latin1
Conn.  characterset:latin1
UNIX socket:/var/run/mysql/mysql.sock
Uptime: 9 days 10 hours 34 min 58 sec

Threads: 6  Questions: 4092255  Slow queries: 0  Opens: 0  Flush tables: 
1  Open tables: 540  Queries per second avg: 5.021

--

Re: Opinion of MySQL 5.xx on OpenBSD 3.9...

[Trombley]

On Tue, Jun 20, 2006 at 08:56:36PM +0200, Anders J wrote:
> Hello List.
> A customer have a mailserver solution wich must be moved to a new
> hardware, today its is running on a old suse 9.2 but i really want to
> use OpenBSD if possible.
> It uses postfix, cyrus-imap and mysql as the backend for users domain
> info, contacts etc. (only 58 named users and 3 domains and several aliases)
> My self have experienced mixed issues with MysSQL on OpenBSD and also
> read and heard about performance and stability problems with MySQL on
> OpenBSD.
> So i'm a bit nervous implementing this on OpenBSD (Should i use FreeBSD
> instead)?.
> Has anyone a positive experience with  3.9+ MySQl
> mysql-server-5.0.21.tgz
> (or
> later)?

I've run postfix on OpenBSD using MySQL as the database for several 
years with +400 domains and +4k users; handling about 300K messages 
per day. Never gives me any problems.

I had to bump the kern.maxproc and kern.maxfiles sysctl (man 8 sysctl)
and add the following to /etc/my.cnf
[mysqld_safe]
open-files=2000

You may also want to alter the appropriate parts of /etc/login.conf
(maxproc + openfiles) (man 5 login.conf)

Hope it serves you as well as it has me.

> And by the way it is not an option to use postgresql since they also
> have several other apps which use the database in question .So migrate
> to an other db platform is NOT an option.
> 
> Regards
> Anders

Re: 256 color support for terminals under X

[Timothy]

On Tuesday 20 June 2006 12:14 am, Bihlmaier Andreas wrote:
> Hello misc@,
>
> I stumbled across a problem with all X terminal emulators in OpenBSD
> (that is xterm and aterm, eterm and rxvt from ports).
> None of the above seems to support 256 colors. I tried various
> combinations of $TERM (xterm, xterm-color, xterm-xfree86,
> xterm-256color) with all the terminals, running and not running screen.
>
I use termtype "gnome" to get colors in vim.

Tim

Re: Re-requesting DHCP lease on media change

[Nick Guenther]

On 6/20/06, Matthew R. Dempsky <[EMAIL PROTECTED]> wrote:

On Tue, Jun 20, 2006 at 11:36:06AM -0400, Nick Guenther wrote:
> I think hotplugd(8) might help here. The manpage says: " 3
> network interface" so you should be able to just write a one-liner to
> do it.

I'm not sure hotplug is useful here.  hotplug(4) says the only events
signaled are device attachment and device detachment, and I don't
believe any of the example scenarios I provided would result in those
events.


Oh I didn't think about that. What about hostname.if? Or just do up a
quick script to take a interface and some options that sets up the
interface and then does `dhclient $IF`?

-Nick

Re: Sendmail patch 001

[Joachim Schipper]

On Mon, Jun 19, 2006 at 07:19:44PM -0400, Michael Erdely wrote:
> I was wondering if anyone knew why there had been two versions of 
> 001_sendmail.patch for 3.9.
> 
> When the patch was first released, I downloaded it and updated some of 
> my systems.  This was the patch I downloaded: 
> http://erdelynet.com/downloads/3.9/001_sendmail.patch-ver1
> 
> The file from when 001 was first released and the one at 
> ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.9/common/001_sendmail.patch
> differs by (wrapping will probably break the diff):

Yes, this was covered on either misc@ or tech@, quite likely both - the
patch was not meant to change version numbers, and this error was soon
corrected.

Anyway, it should be mostly harmless.

Joachim

> --- 001_sendmail.patch-ver1 Mon Jun 19 19:11:08 2006
> +++ 001_sendmail.patch-ver2 Mon Jun 19 19:11:17 2006
> @@ -2982,16 +2982,3 @@
> (void) sm_snprintf(h, l, "%03o",
> (unsigned int)((unsigned char) c));
> 
> -Index: gnu/usr.sbin/sendmail/sendmail/version.c
> -===
> -RCS file: /cvs/src/gnu/usr.sbin/sendmail/sendmail/version.c,v
> -retrieving revision 1.24
> -diff -u -p -r1.24 version.c
>  gnu/usr.sbin/sendmail/sendmail/version.c   8 Apr 2005 16:00:52 
> -   1.24
> -+++ gnu/usr.sbin/sendmail/sendmail/version.c   25 Mar 2006 04:21:17 -
> -@@ -15,4 +15,4 @@
> -
> - SM_RCSID("@(#)$Sendmail: version.c,v 8.145 2005/03/25 18:44:44 ca Exp $")
> -
> --char  Version[] = "8.13.4";
> -+char  Version[] = "8.13.5.20060308";
> 
> -- 
> Support OpenBSD: http://www.openbsd.org/orders.html

Re: Opinion of MySQL 5.xx on OpenBSD 3.9...

[Bryan Irvine]

Works ok for me.  Hasn't crashed or anything like that.  I use mysql 5 on
OpenBSD that some web apps talk too.  I just did an import of a previous
dump, and it took somewhere in the neighboorhood of 7 hours give or take.
(for a few tens of million INSERTS that's not bad).

This is run on a slighlty older sun 220r (450Mhz), and 10K rpm disks.

--Bryan


On 6/20/06, Anders J <[EMAIL PROTECTED]> wrote:
>
> Hello List.
> A customer have a mailserver solution wich must be moved to a new
> hardware, today its is running on a old suse 9.2 but i really want to
> use OpenBSD if possible.
> It uses postfix, cyrus-imap and mysql as the backend for users domain
> info, contacts etc. (only 58 named users and 3 domains and several
> aliases)
> My self have experienced mixed issues with MysSQL on OpenBSD and also
> read and heard about performance and stability problems with MySQL on
> OpenBSD.
> So i'm a bit nervous implementing this on OpenBSD (Should i use FreeBSD
> instead)?.
> Has anyone a positive experience with  3.9+ MySQl
> mysql-server-5.0.21.tgz
>  >(or
> later)?
>
> And by the way it is not an option to use postgresql since they also
> have several other apps which use the database in question .So migrate
> to an other db platform is NOT an option.
>
> Regards
> Anders

Re: release email in amavis temp

[Joachim Schipper]

On Tue, Jun 20, 2006 at 07:42:19PM +0700, sonjaya wrote:
> dear all
> i have installed amavisd-new by port  but amavisd-new trap email that
> not spam or virus ana locate at /var/amavisd/tmp/x
> so i wan release, i see in manual that using amavisd-release , but i
> can find it .

Erm... sorry, what do you want do? I know of no such tool, at the least.

You can, however, configure amavisd to save pretty much exactly what you
want to a temporary directory. As to the tmp directory and the directory
amavisd saves to, set up a cron job to clean it out unless you want to
do so manually (I don't; but mail get saved to guard against a possible
false positive on really important mail).

Joachim

Re: Opinion of MySQL 5.xx on OpenBSD 3.9...

[Daniel Ouellet]

Bryan Irvine wrote:

Works ok for me.  Hasn't crashed or anything like that.  I use mysql 5 on
OpenBSD that some web apps talk too.  I just did an import of a previous
dump, and it took somewhere in the neighboorhood of 7 hours give or take.
(for a few tens of million INSERTS that's not bad).

This is run on a slighlty older sun 220r (450Mhz), and 10K rpm disks.


Interesting. It takes me ~25 minutes for 9.5 millions records in many 
databases/tables. But my dump is/was done with --opt as to not create 
the index when you do the import, but only when all data is imported. 
This saves many hours if not use. Are you sure you do your dump with the 
--opt flag? If I don't do this, it sure will take me about 8 1/2 hours 
to do the same.


Just a side note that might help, or it may not, but just thought to 
pass it along in case it help you.


Daniel

Re: Reading a file that is been written make the system freeze?

[Joachim Schipper]

On Tue, Jun 20, 2006 at 10:59:58AM +0200, Federico Giannici wrote:
> As I have already told in a couple of previous emails, I'm experiencing 
> occasional computer freezes (the PC lockups with no error at all, and I 
> can only reset it).
> 
> I replaced all the hardware (motherboard, cpu, ram, disc controller, 
> etc...) and upgraded to 3.9 and now to -current of some days ago. But it 
> keeps freezing...
> 
> The pc freezes (but only occasionally) during dumps of the entire 
> filesystem, using the system "dump" program. The dump is done while the 
> system is in use, so files may change during the dump.
> 
> Yesterday another PC freezed!
> I noticed that it occurred just at the time that a copy of a directory 
> was done, this time by means of the "tar" program. This time too the 
> backed-up files were in use and probably written.
> 
> So, all these clues make me think that if a file is dumped (readed, in 
> particular by "dump" and "tar") while it is written, it can make the 
> system froze-up.
> 
> Please note that both PCs have softupdates enabled.

I have five boxes which do nightly backups, and while they are not
excessively busy at night - in fact, almost idle, but some mailing list
traffic is still coming in, logs are rotated, and so on - I've never
seen one freeze (okay, one, once, but that was due to a faulty em(4)).

These systems run 3.8 (x2), 3.9 (x1), and a recent -current (x2).

So, I don't think the software is at fault. Of course, that's not
terribly helpful. You might want to try on a different box; it's usually
possible to scrounge up an old one by asking around.

On a side note, I've heard of bad power supplies giving the most strange
errors imaginable - have you looked at that, especially if you've been
putting a lot of hardware (disks?) in the box lately?

Joachim

Re: named on udp ports only

[Joachim Schipper]

On Tue, Jun 20, 2006 at 04:07:25PM +0100, Constantine A. Murenin wrote:
> Hello,
> 
> I'm running an sshd on port 53 (domain) as there is some convenient
> wireless hot-spot that allows for both udp and tcp connection on this
> port without any authentication. :)
> 
> (Yes, there is not even a need for NSTX!)
> 
> How do I tell my named(8) to only listen on udp ports, and leave tcp
> ports for sshd(8)? Is this at all possible with named.conf alone? I've
> glanced through named.conf(5), but didn't find the desired option
> there...

It appears an interesting hack would be possible here, in the form of a
proxy that recognizes both DNS and SSH (which are both pretty easy to
recognize, IIRC), and proxies the connection to the proper daemon.

Of course, this is a cludge, too, but at least it's more elegant and not
as likely to break stuff. Someone might even have already written one,
but I think it's likely you'll have to do it yourself.

Joachim

Re: Reading a file that is been written make the system freeze?

[Matthias Kilian]

On Tue, Jun 20, 2006 at 10:59:58AM +0200, Federico Giannici wrote:
[...]
> The pc freezes (but only occasionally) during dumps of the entire 
> filesystem, using the system "dump" program. The dump is done while the 
> system is in use, so files may change during the dump.
> 
> Yesterday another PC freezed!
> I noticed that it occurred just at the time that a copy of a directory 
> was done, this time by means of the "tar" program. This time too the 
> backed-up files were in use and probably written.

What else is running? What's mounted? 

I ask, because I can remember some problems with heavy IO...

- on mounted ext2fs filesystems
- on nullfs-based mounts (doesn't apply to 3.9, of course)
- with large writes to external el-cheapo disks attached to USB,
  allthough this tends to toast the disk, not the system

Ciao,
Kili

ps: as somebody else wrote, fishy power supplies are a common (and
hard to debug) cause of failure, too.

Re: 256 color support for terminals under X

[Christian Weisgerber]

Bihlmaier Andreas <[EMAIL PROTECTED]> wrote:

> I stumbled across a problem with all X terminal emulators in OpenBSD
> (that is xterm and aterm, eterm and rxvt from ports).
> None of the above seems to support 256 colors. I tried various
> combinations of $TERM (xterm, xterm-color, xterm-xfree86,
> xterm-256color) with all the terminals, running and not running screen.

xterm as distributed with OpenBSD is *not* built with 256-color
support.

> I googled for about 3 hours last night, but without a definite answer
> whether OpenBSD supports 256colors in terminal under X. The argument I
> read (sorry can't seem to find the link anymore) was that the 256color
> support had some issues and was removed.

It is simply not enabled by default in the xterm upstream distribution.

-- 
Christian "naddy" Weisgerber  [EMAIL PROTECTED]

Re: 256 color support for terminals under X

[Christian Weisgerber]

viq <[EMAIL PROTECTED]> wrote:

> > I stumbled across a problem with all X terminal emulators in OpenBSD
> > (that is xterm and aterm, eterm and rxvt from ports).
> > None of the above seems to support 256 colors. I tried various
> > combinations of $TERM (xterm, xterm-color, xterm-xfree86,
> > xterm-256color) with all the terminals, running and not running screen.
> 
> I'm not sure whether it's 256 colours, but right now I'm using as $TERM 
> xterm-vt220

Just why do people feel the urge to post comments when it should
be obvious even to them that they don't understand the problem and
have nothing to add to the topic?

It is maddening.

-- 
Christian "naddy" Weisgerber  [EMAIL PROTECTED]

Chrooted sftp-server and /dev/null

[Joshua Sandbrook]

Gidday

Im writing a shell at the moment that chroots into a users home dir and then 
runs only the sftp-server program ( which is in the uses home dir ).

Anyway, it wont work unless /dev/null is present in the chroot... 

I am using execve to run sftp-server, and I am wondering if it has something 
to do with stdout / stdin / stderr fd's being closed on execve? 

Can anyone help me here? 

Thanks, 
Josh

Re: Reading a file that is been written make the system freeze?

[Andy Hayward]

On 6/20/06, Federico Giannici <[EMAIL PROTECTED]> wrote:

As I have already told in a couple of previous emails, I'm experiencing
occasional computer freezes (the PC lockups with no error at all, and I
can only reset it).

I replaced all the hardware (motherboard, cpu, ram, disc controller,
etc...)


And power supply?

-- ach

Re: named on udp ports only

[Giancarlo Razzolini]

Joachim Schipper wrote:
>
> It appears an interesting hack would be possible here, in the form of a
> proxy that recognizes both DNS and SSH (which are both pretty easy to
> recognize, IIRC), and proxies the connection to the proper daemon.
>
> Of course, this is a cludge, too, but at least it's more elegant and not
> as likely to break stuff. Someone might even have already written one,
> but I think it's likely you'll have to do it yourself.
>
>   Joachim
>
>
This hack already exist. AFAIK, delegate http://www.delegate.org, can do
this.

My cent,
--
Giancarlo Razzolini
Linux User 172199
Moleque Sem Conteudo Numero #002
Slackware Current
OpenBSD Stable
Snike Tecnologia em Informatica
4386 2A6F FFD4 4D5F 5842  6EA0 7ABE BBAB 9C0E 6B85

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]

independence from dependencies

[prad]

i'm running koffice which wants postgre8.1.3
but i want to use postgre8.1.4 (not sure why other than because the postgre 
site told me to)

however, when i pkg_add we get a conflict with the postgresql-client-8.1.3 
which has already occupied its spot.

if we do a pkg_add -u koffice will complain again just as it does going from 
python2.3 to 2.4

i can use -F, but that won't solve the problem from koffice's end right?

how does one get by a problem like this?

-- 
In friendship,
prad

  ... with you on your journey
Towards Freedom
http://www.towardsfreedom.com (website)
Information, Inspiration, Imagination - truly a site for soaring I's

Re: Errors with IDE DMA beyond FAQ 14.11

[Nick Holland]

[from a few days ago]

Chris Smith wrote:

I am a n00b.


you missed:
  http://www.openbsd.org/faq/faq2.html#Bugs
...

The system still chokes with a DMA timeout after ~30mins of
heavy stuff (I was compiling /usr/ports/x11/gnome as something I knew
would take forever).

Is this a self-inflicted wound?:


possibly, though sounds like a bug.  However, lack of dmesg and precise 
messages/symptoms leaves doubt.



OpenBSD is the only partition on wd0, and I hurried through the
partitioning, basically chunking the disk evenly across /,
/usr, /var, and /usr/x11 per the installation pamphlet.


"If I got the disk, I got to allocate it".  Don't do that.  Allocate 
what you need, and save the rest for later.  Otherwise, you will spend 
lots of time watching your 99.9% empty partition fsck.


Do you have ANY IDEA how big 300G is?
Can you imagine how much paper tape it would take to back it up??
(years ago, when I first started working in the computer industry, a 
friend and I were drooling over the potential of a hard disk...and we 
asked that question.  The "endless" hard disk in question?  10M.  Hint: 
10 bytes per inch on paper tape).



Questions:
a) Could naive partitioning on a fat IDE drive put enough latency into
   the system that a DMA timeout will inevitably happen?


no.
Not even sure what you are saying, but no.
I have 500M partitions on 1T drives in production (three 500G drives in 
an Accusys RAID5 box).  Works great.



b) Should I punt and beg my wife for enough cash to replace the motherboard?


possibly.  Or a $30 add-on card that works better.  Or $5 for a better 
cable. :)



c) Given C/H/S values of 36481, 255, and 63 what would be a reasonable
   partition scheme for a "home server" box?  (Failing that, pointers
   to previous discussion would be great).


http://www.openbsd.org/faq/faq4.html#Partitioning
However, your partitioning can be a problem without it being the problem 
you are complaining about.


Nick.

Re: named on udp ports only

[Steve Shockley]

Giancarlo Razzolini wrote:

This hack already exist. AFAIK, delegate http://www.delegate.org, can do
this.


Be careful what you wish for!  He finally got around to checking for 
string buffer overflows in December 2004:


http://www.delegate.org/mail-lists/delegate-en/2793

DeleGate has a reputation like OpenBSD has, except it's "not security" 
instead of "security".

Encryption and Compression with ipsecctl?

[Clint Pachl]

Is IP compression/ipcomp flows implemented in ipsecctl(8)? I am trying 
   to perform encryption (enc) and compression (ipcomp) between two

OBSD3.9 hosts.

ipcomp(4) states, "Currently, IPCA can be created using the ipsecadm(8)
tool," with no mention of ipsecctl.

Here is my simple setup:

sysctl net.inet.ipcomp.enable=1

# ipsec.conf
flow esp from 192.168.2.2 to 192.168.2.1
ipcomp from 192.168.2.2 to 192.168.2.1 spi 0x1000:0x1001 comp deflate
esp from 192.168.2.2 to 192.168.2.1 spi 0x1000:0x1001 \
authkey
0x:0x \
enckey
0x:0x

The IP addresses and spi values are swapped on the other host's
ipsec.conf. I also tried using different spi values for ipcomp and esp.

I performed many ftp and scp transfers, checking for ipcomp packets
using tcpdump and netstat, but no ipcomp traffic. Encryption between
the hosts is working properly.

-pachl

Clock Drift - VMWare

[Justin Blackmore]

Hi all

Im running several OpenBSD 3.9 VM's on a GSX server and the clocks on
the OBSD vm's drift pretty bad, the real time host hardware clock is
fine. Anyone got any ideas? I've see stuff about disabling APIC (not
APCI) for freebsd having this same problem, but im not sure if this or
how do disable it under OpenBSD.

Thanks!! :-)

Justin B

Here is the dmesg from the VM

OpenBSD 3.9 (GENERIC) #617: Thu Mar  2 02:26:48 MST 2006
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel Pentium III ("GenuineIntel" 686-class) 934 MHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,
MMX,FXSR,SSE
real mem  = 267952128 (261672K)
avail mem = 237506560 (231940K)
using 3296 buffers containing 13500416 bytes (13184K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(08) BIOS, date 04/21/04, BIOS32 rev. 0 @
0xfd880
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
apm0: flags 30102 dobusy 0 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xfd880/0x780
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdf30/176 (9 entries)
pcibios0: PCI Interrupt Router at 000:07:0 ("Intel 82371FB ISA" rev
0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc/0x8000 0xc8000/0x1000 0xdc000/0x4000!
0xe4000/0x4000!
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel 82443BX AGP" rev 0x01
ppb0 at pci0 dev 1 function 0 "Intel 82443BX AGP" rev 0x01
pci1 at ppb0 bus 1
pcib0 at pci0 dev 7 function 0 "Intel 82371AB PIIX4 ISA" rev 0x08
pciide0 at pci0 dev 7 function 1 "Intel 82371AB IDE" rev 0x01: DMA,
channel 0 configured to compatibility, channel 1 configured to
compatibility
wd0 at pciide0 channel 0 drive 0: 
wd0: 64-sector PIO, LBA, 6144MB, 12582912 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
pciide0: channel 1 ignored (disabled)
piixpm0 at pci0 dev 7 function 3 "Intel 82371AB Power" rev 0x08: SMBus
disabled
vga1 at pci0 dev 15 function 0 "VMware Virtual SVGA II" rev 0x00
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
bha3 at pci0 dev 16 function 0 "BusLogic MultiMaster" rev 0x01: irq 11,
BusLogic 9xxC SCSI
bha3: model BT-958, firmware 5.07B
bha3: sync, parity
scsibus0 at bha3: 8 targets
pcn0 at pci0 dev 17 function 0 "AMD 79c970 PCnet-PCI" rev 0x10,
Am79c970A, rev 0: irq 10, address 00:0c:29:a4:8c:52
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pmsi0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pmsi0 mux 0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: 
spkr0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
biomask eb65 netmask ef65 ttymask ffe7
pctr: 686-class user-level performance counters enabled
mtrr: CPU supports MTRRs but not enabled
dkcsum: wd0 matches BIOS drive 0x80
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302

The Largest collection of home video high

[Earnest]

Singlef moms and Married... Sugar mommiejs :-)
http://foetuses.myfdvfdtyds234.com/?checkeyes


task always instant glad today want code, drive info fresh, not view model 
simply work?
>> fresh stats  provide open: 
provide that site online click know instant task; here after, you now stats.
zero love sell point,  simply twice?

bye
Earnest Costello

Re: Clock Drift - VMWare

[Adrian Close]

On Tue, 20 Jun 2006, Justin Blackmore wrote:


Im running several OpenBSD 3.9 VM's on a GSX server and the clocks on
the OBSD vm's drift pretty bad, the real time host hardware clock is


How much drift?  The guest "hardware" clock generally won't be stable 
enough for NTP to keep things in sync (it might look like it's OK for a 
bit, but it won't be).


You might be able to use the Linux vmware-guestd tool (I haven't tried on 
OpenBSD), which will sync the time to the host hardware if you ask it (but 
you need X11 to config that, from memory).


I once had a GSX setup where guest hardware clocks typically ran at 1/3 - 
1/10th of realtime, and sped up when the guest OS was eating lots of CPU, 
but that doesn't sound like what you have...


Adrian Closeemail:  [EMAIL PROTECTED]
107 Essex St, Pascoe Vale   web:http://www.close.wattle.id.au/~adrian
VIC, 3044, Australiamobile: +61 417 346 094

VIA C7 hardware AES support in IPSEC(ctl)

[Bihlmaier Andreas]

Dear misc@,

I just received my new VIA EN15000 Mini-ITX Board featuring a VIA C7 CPU
@1500MHz. I bought this to utilize the aes crypto support in the CPU for
IPSEC, but I seems to be broken (at least for me).

Since I have no glue at all how IPSEC goes about "looking" for crypto
accelerator hardware and making use of it, I'm kind of stuck. Because
everything I have found so far by google and archives was that it should
"just work".

What I experience is the "normal" behaviour I expect of a general
purpose CPU, crypto has 90% of CPU time when pushing traffic, thus I max
out at about 23Mb/s.

Any help is very much appreciated.

Regards,
ahb

Attached:
-
dmesg
ipsec.conf
openssl speed aes-128-cbc
openssl speed aes-256-cbc
openssl speed -evp aes-128-cbc
openssl speed -evp aes-256-cbc
openssl speed -elapsed -evp aes-128-cbc
openssl speed -elapsed -evp aes-256-cbc
top snippet when pusing 23Mb/s through


## dmesg
OpenBSD 3.9-current (GENERIC) #658: Sun Mar 26 01:19:02 MST 2006
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: VIA Esther processor 1500MHz ("CentaurHauls" 686-class) 1.50 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,CMOV,PAT,CFLUSH,ACPI,MMX,FXSR,SSE,SSE2,TM,SBF,SSE3,EST,TM2
cpu0: RNG AES AES-CTR SHA1 SHA256 RSA
real mem  = 1006137344 (982556K)
avail mem = 911187968 (889832K)
using 4278 buffers containing 50409472 bytes (49228K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(76) BIOS, date 06/01/06, BIOS32 rev. 0 @ 0xf9360
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
apm0: flags 70102 dobusy 1 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xf/0xc4f4
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfc450/160 (8 entries)
pcibios0: bad IRQ table checksum
pcibios0: PCI BIOS has 8 Interrupt Routing table entries
pcibios0: PCI Exclusive IRQs: 5 10 11
pcibios0: PCI Interrupt Router at 000:17:0 ("VIA VT8237 ISA" rev 0x00)
pcibios0: PCI bus #2 is the last bus
bios0: ROM list: 0xc/0xfc00 0xd/0x8000! 0xd8000/0x1000
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 vendor "VIA", unknown product 0x0314 rev 0x00
pchb1 at pci0 dev 0 function 1 vendor "VIA", unknown product 0x1314 rev 0x00
pchb2 at pci0 dev 0 function 2 vendor "VIA", unknown product 0x2314 rev 0x00
pchb3 at pci0 dev 0 function 3 "VIA PT890 Host" rev 0x00
pchb4 at pci0 dev 0 function 4 vendor "VIA", unknown product 0x4314 rev 0x00
pchb5 at pci0 dev 0 function 7 vendor "VIA", unknown product 0x7314 rev 0x00
ppb0 at pci0 dev 1 function 0 "VIA VT8377 AGP" rev 0x00
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 vendor "VIA", unknown product 0x3344 rev 0x01: 
aperture at 0xf400, size 0x1000
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
"VIA VT6306 FireWire" rev 0x80 at pci0 dev 13 function 0 not configured
vge0 at pci0 dev 14 function 0 "VIA VT612x" rev 0x11: irq 10, address 
00:40:63:e6:8f:13
ciphy0 at vge0 phy 1: Cicada CS8201 10/100/1000TX PHY, rev. 2
pciide0 at pci0 dev 15 function 0 "VIA VT6420 SATA" rev 0x80: DMA
pciide0: using irq 11 for native-PCI interrupt
pciide1 at pci0 dev 15 function 1 "VIA VT82C571 IDE" rev 0x06: ATA133, channel 
0 configured to compatibility, channel 1 configured to compatibility
wd0 at pciide1 channel 0 drive 0: 
wd0: 16-sector PIO, LBA, 8223MB, 16841664 sectors
wd1 at pciide1 channel 0 drive 1: 
wd1: 16-sector PIO, LBA, 8056MB, 16498944 sectors
wd0(pciide1:0:0): using PIO mode 4, Ultra-DMA mode 2
wd1(pciide1:0:1): using PIO mode 4, Ultra-DMA mode 2
atapiscsi0 at pciide1 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: <, ATAPI CDROM.48X, 180J> SCSI0 5/cdrom removable
cd0(pciide1:1:0): using PIO mode 4, Ultra-DMA mode 2
uhci0 at pci0 dev 16 function 0 "VIA VT83C572 USB" rev 0x81: irq 5
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: VIA UHCI root hub, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1 at pci0 dev 16 function 1 "VIA VT83C572 USB" rev 0x81: irq 5
usb1 at uhci1: USB revision 1.0
uhub1 at usb1
uhub1: VIA UHCI root hub, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2 at pci0 dev 16 function 2 "VIA VT83C572 USB" rev 0x81: irq 11
usb2 at uhci2: USB revision 1.0
uhub2 at usb2
uhub2: VIA UHCI root hub, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
ehci0 at pci0 dev 16 function 4 "VIA VT6202 USB" rev 0x86: irq 10
usb3 at ehci0: USB revision 2.0
uhub3 at usb3
uhub3: VIA EHCI root hub, rev 2.00/1.00, addr 1
uhub3: 6 ports with 6 removable, self powered
viapm0 at pci0 dev 17 function 0 "VIA VT8237 ISA" rev 0x00
iic0 at viapm0
ppb1 at pci0 dev 20 function 0 "DEC 21154 PCI-PCI" rev 0x01
pci2 at ppb1 bus 2
sf0 at pci2 dev 4 function 0 "Adaptec AIC-6915" rev 0x03: irq 10, address 
00:00:d1:d9:79:1f
sqphy0 at sf0 phy 1: Seeq 80220 10/100 PHY, rev. 1
sf1 at pci2 dev 5 function 0 "Adaptec AIC-6915" rev 0x03: