Re: Big stack HUGE coredump

2008-02-26 Thread Alexander Nasonov
Mark Kettenis wrote:
 Does the attached diff fix your problem?

Yes, it does. Thanks!
-- 
Alexander Nasonov



bgp routing question

2008-02-26 Thread Erich

hi,

is there a way to announce the same AS an different locations?

lets say 123.123.123.0/23 is mine and i want to have
123.123.123.0/24 @location1 and  23.123.124.0/24 @location2,
right now i have the problem that the bgpd seems to drop the routes to 
each other, means the networks are reachable from everywhere, so it 
seems to work,  but they cannot reach each other..


erich



Re: relayd http check connection failures; hoststated operates correctly

2008-02-26 Thread Brad Arrington
Hi,

I ran into the same problem you did, I thought it was something I
was doing wrong until I read your email...

Here is the fix I came up with.

--- check_tcp.c-current Mon Feb 25 15:11:40 2008
+++ check_tcp.c Mon Feb 25 23:48:45 2008
@@ -82,6 +82,7 @@
if (fcntl(s, F_SETFL, O_NONBLOCK) == -1)
goto bad;

+   gettimeofday(cte-table-conf.timeout, NULL);
bcopy(cte-table-conf.timeout, tv, sizeof(tv));
if (connect(s, (struct sockaddr *)cte-host-conf.ss, len) == -1) {
if (errno != EINPROGRESS)

I should check for return codes on gettimeofday but here it is anyway...
I submited a bug report too.

-Brad


 -Original Message-
 From: [EMAIL PROTECTED]
 Sent: Fri, 22 Feb 2008 16:16:29 -0800
 To: misc@openbsd.org
 Subject: relayd http check connection failures; hoststated operates
 correctly

 hello,

 perhaps it's something that i'm doing wrong here, or a difference
 in the way that relayd works compared to hoststated. but here
 goes.. i'm attempting to get relayd configured to replace my existing
 hoststated setup, doing layer 7 load balancing of web servers.

 what's happening is with every http check done, relayd returns a
 connect failure. in doing a tcpdump i see the session is
 brought up by relayd to the destination servers, the server responds
 with a syn/ack, and then a rst is sent by the system running relayd.

 ...

 i have a similar hoststated configuration running on the very same
 system, load balancing the very same hosts. it operates as expected,
 with the hosts being seen as up and available.

 i have attached relayd debug log output, my relayd configuration
 file, as well as hoststated debug and the hoststated config.

 could someone perhaps shed some light on what i'm doing wrong, if
 anything? perhaps a bug in the http check/tcp check code?

 if i could be cc'd on any replies, i'd appreciate it. i'm not
 currently subscribed to [EMAIL PROTECTED]

 cheers,

 -ben
 startup
 init_filter: filter init done
 tcp_write: connect timed out
 relay_privinit: adding relay www
 init_tables: created 0 tables
 hce_notify_done: aa.bb.cc.209 (tcp_write: connect failed)
 protocol 0: name http
 host aa.bb.cc.209, check http code (3ms), state unknown - down,
 availability 0.00%
 flags: 0x0004
 tcp_write: connect timed out
 type: hce_notify_done: aa.bb.cc.211 (tcp_write: connect failed)
 http
 host aa.bb.cc.211, check http code (4ms), state unknown - down,
 availability 0.00%
 pfe_dispatch_imsg: state -1 for host 3 aa.bb.cc.209
 request pfe_dispatch_imsg: state -1 for host 2 aa.bb.cc.211
 append $SERVER_ADDR:$SERVER_PORT to X-Forwarded-By
 request append $REMOTE_ADDR to X-Forwarded-For
 relay_init: max open files 1024
 relay_init: max open files 1024
 relay_init: max open files 1024
 relay_init: max open files 1024
 relay_init: max open files 1024
 adding 2 hosts from table webhosts:80
 adding 2 hosts from table webhosts:80
 adding 2 hosts from table webhosts:80
 adding 2 hosts from table webhosts:80
 adding 2 hosts from table webhosts:80
 relay_launch: running relay www
 relay_launch: running relay www
 relay_launch: running relay www
 relay_launch: running relay www
 relay_launch: running relay www
 tcp_write: connect timed out
 hce_notify_done: aa.bb.cc.209 (tcp_write: connect failed)
 tcp_write: connect timed out
 hce_notify_done: aa.bb.cc.211 (tcp_write: connect failed)
 ^Chost check engine exiting
 kill_tables: deleted 0 tables
 flush_rulesets: flushed rules
 pf update engine exiting
 socket relay engine exiting
 socket relay engine exiting
 terminating
 [EMAIL PROTECTED] socket relay engine exiting
 socket relay engine exiting
 socket relay engine exiting
 startup
 decremented the demote state of group 'carp'
 init_filter: filter init done
 relay_privinit: adding relay www
 init_tables: created 0 tables
 protocol 0: name http
 flags: 0x0004
 type: http
 request append $SERVER_ADDR:$SERVER_PORT to
 X-Forwarded-By
 request append $REMOTE_ADDR to X-Forwarded-For
 relay_init: max open files 1024
 relay_init: max open files 1024
 relay_init: max open files 1024
 relay_init: max open files 1024
 relay_init: max open files 1024
 adding 2 hosts from table http_hosts
 adding 2 hosts from table http_hosts
 adding 2 hosts from table http_hosts
 adding 2 hosts from table http_hosts
 adding 2 hosts from table http_hosts
 relay_launch: running relay www
 relay_launch: running relay www
 relay_launch: running relay www
 relay_launch: running relay www
 relay_launch: running relay www
 hce_notify_done: aa.bb.cc.209 (tcp_read_buf: check succeeded)
 host aa.bb.cc.209, check http code (115ms), state unknown - up,
 availability 100.00%
 pfe_dispatch_imsg: state 1 for host 1 aa.bb.cc.209
 hce_notify_done: aa.bb.cc.209 (tcp_read_buf: check succeeded)
 host aa.bb.cc.209, check http code (116ms), state unknown - up,
 availability 100.00%
 pfe_dispatch_imsg: state 1 for 

Re: relayd http check connection failures; hoststated operates correctly

2008-02-26 Thread Pierre-Yves Ritschard
Brad Arrington [EMAIL PROTECTED] wrote:
 Hi,
 
 I ran into the same problem you did, I thought it was something I
 was doing wrong until I read your email...
 
 Here is the fix I came up with.
 
 --- check_tcp.c-current Mon Feb 25 15:11:40 2008
 +++ check_tcp.c Mon Feb 25 23:48:45 2008
 @@ -82,6 +82,7 @@
 if (fcntl(s, F_SETFL, O_NONBLOCK) == -1)
 goto bad;
 
 +   gettimeofday(cte-table-conf.timeout, NULL);
 bcopy(cte-table-conf.timeout, tv, sizeof(tv));
 if (connect(s, (struct sockaddr *)cte-host-conf.ss, len)
 == -1) { if (errno != EINPROGRESS)
 
 I should check for return codes on gettimeofday but here it is
 anyway... I submited a bug report too.
 

I'll handle the bug report, thanks for reporting.



Re: spamd and freemail hosts

2008-02-26 Thread OpenBSD - Wire Consulting

Aaron Martinez wrote:
Does anyone have any thoughts on white listing freemail hosts like 
hotmail and yahoo?  I know that people do spam somewhat from these 
places, but I thought it was mainly from people forging the domains 
and I do get a lot of  valid email that is not getting though.  I also 
host a couple domains and want to be prepared if people start 
complaining that they aren't getting mail.

Is there a way to whitelist domains on a per-recipient domain basis?


Thanks in advance.


Aaron Martinez



Freemail hosts like yahoo, hotmail and google have a huge number of
servers which are used to send the email coming from this domains.
The problem I found some time ago, was that the retries didn't come
always from the same server. This simply blows up the greylist principle.

For some of this domains I use the SPF information to whitelist them.
Unfortunately this is not the solution for yahoo because they don't seem to
have any SPF record on their dns...

Pedro Almeida



Re: 4.3-beta

2008-02-26 Thread Bryan Irvine
On Mon, Feb 25, 2008 at 10:20 PM, scott [EMAIL PROTECTED] wrote:
 Just loaded up 4.3-beta.  :-)

  1. Installed to compact flash (CF) media (wd0).  Media supports PIO mode
  4 only (no dma) but ... whoa ... 4.3 is noticeably faster on this CF
  media!  During the past 4.2 install the install progress soother
  displayed --stalled-- quite a few times as it progressed during the
  cd-to-cf writes.  The 4.3 install never, not once, --stalled--.  Very
  nice performance bump.  Nice work!

  2. bwi wireless card working for the very first time. :-)

  3. Then I went long and tried to config bwi0 as an access point and
  discovered mediaopt hostap is not an available option.  :-(  Will
  hostap functionality be coming soon? Or is it a limit of the chipset?

  All in all and so far everything else seems to be normal and working per
  usual.

  Does anyone want me to post dmesg or anything else that may be helpful
  to the dev's?  Say what and where to and it shall be done.

http://openbsd.org/faq/faq4.html#SendDmesg

-Bryan



Re: OpenBSD 4.2 with ftp-proxy, named, spamd - corrections

2008-02-26 Thread Klaus Botschen
Hi,

have some corrections; spamlogd did not update the whitelist counters, so:

in /etc/rc.conf it reads:
 spamlogd_flags=-i pflog0
should be:
 spamlogd_flags=

and in /etc/pf.conf, instead of

 rdr pass on $WORLD proto tcp from spamd-white to \
   $WORLD port smtp - $MAIL
and 
 pass in log quick on $WORLD inet proto tcp from any to \
   $MAIL port smtp keep state
it should read
 rdr on $WORLD proto tcp from spamd-white to \
   $WORLD port smtp - $MAIL port smtp 
and
 pass in log quick on $WORLD inet proto tcp from spamd-white to \
   $MAIL port smtp keep state 

Cheers,
Klaus
:)



Re: spamd and freemail hosts

2008-02-26 Thread Stuart Henderson
On 2008-02-26, OpenBSD - Wire Consulting [EMAIL PROTECTED] wrote:
 Freemail hosts like yahoo, hotmail and google have a huge number of
 servers which are used to send the email coming from this domains.
 The problem I found some time ago, was that the retries didn't come
 always from the same server. This simply blows up the greylist principle.

They often come from within the same /24 though. Most (!spamd) greylisting
implementations mask off the last byte of the address to avoid this problem
and greylisting.org by policy no longer adds common-queue senders to their
lists if they're all from within a /24.

imo this problem is less likely to be seen on a very large mail system,
since enough mail is going through that most of the common-queue pool is
likely to stay whitelisted by spamlogd, but I think it can sometimes be
a problem on smaller installations.



Re: bgp routing question

2008-02-26 Thread Erich

sure.. my fault, just assume the networks are right.
and this is not my problem ;)

Alexander Hall schrieb:

Erich wrote:

hi,

is there a way to announce the same AS an different locations?

lets say 123.123.123.0/23 is mine and i want to have
123.123.123.0/24 @location1 and  23.123.124.0/24 @location2,
right now i have the problem that the bgpd seems to drop the routes 
to each other, means the networks are reachable from everywhere, so 
it seems to work,  but they cannot reach each other..


123.123.124.0/24 would not lie within the 123.123.123.0/23 network 
(and nor would 23.123.124.0/24, of course :). I guess this is not your 
problem, though.


(And I am not in any position to help you with BGPD issues).

/Alexander




Re: Howto Pass googlebot on Webserver [SOLVED]

2008-02-26 Thread Richard Wilson
Insan Praja SW wrote:
 On Tue, 26 Feb 2008 09:31:29 +0700, Ted Unangst [EMAIL PROTECTED]
 wrote:

 On 2/25/08, Insan Praja SW [EMAIL PROTECTED] wrote:
 Hi Misc@,
  While testing my brandnew 4.3-beta AMD64.MP webserver, I apply a
 simple
  pf.conf to let some connection in and all out. But something
 interesting
  came out, pf actually blocks my webserver googlebot apps originated
 from
  the server, which is strange since I use pass out all. So, I'm
 wondering
  if anybody on Misc@ could help me out with this.
  I appreciate any replies related to this.
  Thanks,

  block drop in quick inet from 127.0.0.1 to any

 hmmm

 Well,
 It must bad since the hmmm word came out.. :D
 But really, even after I removed the antispoof dan the scrub, nothin
 changes.. and, finally change block log all to block in log all it
 solve the problem..
 I wonder why... because the last rule is to pass out all. Isn't pf
 plays
 last matching rule? 
No later rule will override the above rule, because it includes the
'quick' keyword.

SD



Re: Intel PRO/1000MT (82546GB) Quad nic with huge packet delay and packet loss

2008-02-26 Thread openbsd firewall
Hello again,

On 25/02/2008, Stuart Henderson [EMAIL PROTECTED] wrote:

 On 2008-02-25, openbsd firewall [EMAIL PROTECTED] wrote:
  I'm trying to build an OpenBSD pf cluster using 6 interfaces, 2 Intel
 1000
  onboard with chipset 82547GI, and a quad port Intel 1000 nic (PCI-X)
 with
  chipset 82546GB.
  Trying to ping the switch connected to one of the quad ports gives me
 the
  following terrible results:

  round-trip min/avg/max/std-dev = 1.822/43.125/161.863/34.999 ms


 First thing to try is 4.3-beta (in the snapshots dir on your local
 ftp.openbsd.org mirror).


Installed 4.3-beta and no good. Still have huge ping delays.

39 packets transmitted, 39 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 1.408/64.221/278.094/59.537 ms

I have installed Linux in the other node to sort out any hardware problems
and things look a bit better, altough far from perfect.
25 packets transmitted, 25 received, 0% packet loss, time 24008ms
rtt min/avg/max/mdev = 1.250/6.212/43.861/11.269 ms

Where could be the source of this ? IRQ conflict or driver problems with
that PCI-X slot ?

Thanks,
John

dmesg output:
OpenBSD 4.3-beta (GENERIC) #665: Mon Feb 25 12:14:26 MST 2008
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) 4 CPU 2.80GHz (GenuineIntel 686-class) 2.80 GHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,CNXT-ID,xTPR
real mem  = 4024909824 (3838MB)
avail mem = 3912945664 (3731MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 07/27/04, BIOS32 rev. 0 @ 0xfb830,
SMBIOS rev. 2.3 @ 0xf0800 (44 entries)
bios0: vendor Phoenix Technologies, LTD version 6.00 PG date 07/27/2004
bios0: Supermicro P4SCT
apm0 at bios0: Power Management spec V1.2 (slowidle)
apm0: AC on, battery charge unknown
acpi at bios0 function 0x0 not configured
pcibios0 at bios0: rev 2.1 @ 0xf/0xdf64
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfde60/224 (12 entries)
pcibios0: PCI Exclusive IRQs: 3 4 7 9 11
pcibios0: PCI Interrupt Router at 000:31:0 (Intel 6300ESB LPC rev 0x00)
pcibios0: PCI bus #4 is the last bus
bios0: ROM list: 0xc/0x8000
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 Intel 82875P Host rev 0x02
ppb0 at pci0 dev 3 function 0 Intel 82875P CSA rev 0x02
pci1 at ppb0 bus 1
em0 at pci1 dev 1 function 0 Intel PRO/1000CT (82547GI) rev 0x00: irq 7,
address 00:30:48:80:af:64
ppb1 at pci0 dev 28 function 0 Intel 6300ESB PCIX rev 0x02
pci2 at ppb1 bus 2
ppb2 at pci2 dev 1 function 0 Pericom PI7C21P100 PCIX-PCIX rev 0x01
pci3 at ppb2 bus 3
em1 at pci3 dev 4 function 0 Intel PRO/1000MT QP (82546GB) rev 0x03: irq
11, address 00:1b:21:10:0e:2c
em2 at pci3 dev 4 function 1 Intel PRO/1000MT QP (82546GB) rev 0x03: irq
4, address 00:1b:21:10:0e:2d
em3 at pci3 dev 6 function 0 Intel PRO/1000MT QP (82546GB) rev 0x03: irq
7, address 00:1b:21:10:0e:2e
em4 at pci3 dev 6 function 1 Intel PRO/1000MT QP (82546GB) rev 0x03: irq
3, address 00:1b:21:10:0e:2f
Marvell 88SX5041 SATA rev 0x03 at pci2 dev 4 function 0 not configured
ppb3 at pci0 dev 30 function 0 Intel 82801BA Hub-to-PCI rev 0x0a
pci4 at ppb3 bus 4
vga1 at pci4 dev 9 function 0 ATI Rage XL rev 0x27
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
em5 at pci4 dev 10 function 0 Intel PRO/1000MT (82541GI) rev 0x00: irq 3,
address 00:30:48:80:af:65
ichpcib0 at pci0 dev 31 function 0 Intel 6300ESB LPC rev 0x02: 24-bit
timer at 3579545Hz
pciide0 at pci0 dev 31 function 1 Intel 6300ESB IDE rev 0x02: DMA, channel
0 configured to compatibility, channel 1 configured to compatibility
pciide0: channel 0 disabled (no drives)
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: TEAC, CD-224E, 1.9A SCSI0 5/cdrom removable
cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
pciide1 at pci0 dev 31 function 2 Intel 6300ESB SATA rev 0x02: DMA,
channel 0 configured to native-PCI, channel 1 configured to native-PCI
pciide1: using irq 7 for native-PCI interrupt
wd0 at pciide1 channel 1 drive 0: HDS722525VLSA80
wd0: 16-sector PIO, LBA48, 238475MB, 488397168 sectors
wd0(pciide1:1:0): using PIO mode 4, Ultra-DMA mode 5
ichiic0 at pci0 dev 31 function 3 Intel 6300ESB SMBus rev 0x02: irq 4
iic0 at ichiic0
spdmem0 at iic0 addr 0x50: 1GB DDR SDRAM ECC PC2700CL2.5
spdmem1 at iic0 addr 0x51: 1GB DDR SDRAM ECC PC2700CL2.5
spdmem2 at iic0 addr 0x52: 1GB DDR SDRAM ECC PC2700CL2.5
spdmem3 at iic0 addr 0x53: 1GB DDR SDRAM non-parity PC2700CL2.5
isa0 at ichpcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: PC speaker
spkr0 at pcppi0
wbsio0 at isa0 port 0x2e/2: W83627HF rev 0x17
lm1 at wbsio0 port 0x290/8: W83627HF
npx0 at isa0 port 0xf0/16: reported by CPUID; using 

Re: bgp routing question

2008-02-26 Thread Claudio Jeker
On Tue, Feb 26, 2008 at 09:51:05AM +0100, Erich wrote:
 hi,

 is there a way to announce the same AS an different locations?

 lets say 123.123.123.0/23 is mine and i want to have
 123.123.123.0/24 @location1 and  23.123.124.0/24 @location2,
 right now i have the problem that the bgpd seems to drop the routes to each 
 other, means the networks are reachable from everywhere, so it seems to 
 work,  but they cannot reach each other..


You need an iBGP sessions between the two routers. This is the only way
the two routers will accept the routes/as pathes of the other one. For
eBGP sessions loop free AS pathes are enforced.

-- 
:wq Claudio



Re: Intel PRO/1000MT (82546GB) Quad nic with huge packet delay and packet loss

2008-02-26 Thread Stuart Henderson
On 2008/02/26 12:18, openbsd firewall wrote:
 Installed 4.3-beta and no good. Still have huge ping delays.

 Where could be the source of this ? IRQ conflict or driver problems with
 that PCI-X slot ?

I would first suspect IRQ routing problems (i.e. the OS can't work
out from the information supplied by the BIOS which IRQ lines are routed
to which devices).

These days it's not uncommon for the $PIR and/or MPBIOS tables in the
BIOS to be wrong in the BIOS, only ACPI having the right information on
how to route interrupts.

In -current ACPI is enabled by default but on a single CPU system
APM (if enabled, which it is by default) takes priority. To disable APM
at the boot prompt, b -c. then at the ukc prompt, disable apm.
If this helps you can make it stick with

# cd /
# config -e -o bsd.no-apm bsd
disable apm
quit
# ln bsd.no-apm nbsd  mv nbsd bsd

this reconfigures the kernel into a new file, installs it to /bsd and
leaves a copy around as /bsd.no-apm in case you forget about it and do
an upgrade.

 bios0 at mainbus0: AT/286+ BIOS, date 07/27/04, BIOS32 rev. 0 @ 0xfb830,

oh, you might also want to try a new BIOS.



Re: bgp routing question

2008-02-26 Thread Erich

Claudio Jeker schrieb:

On Tue, Feb 26, 2008 at 09:51:05AM +0100, Erich wrote:
  

hi,

is there a way to announce the same AS an different locations?

lets say 123.123.123.0/23 is mine and i want to have
123.123.123.0/24 @location1 and  23.123.124.0/24 @location2,
right now i have the problem that the bgpd seems to drop the routes to each 
other, means the networks are reachable from everywhere, so it seems to 
work,  but they cannot reach each other..





You need an iBGP sessions between the two routers. This is the only way
the two routers will accept the routes/as pathes of the other one. For
eBGP sessions loop free AS pathes are enforced.

  

ah ok, thx so far :)
and it shouldnt be an issue if those ibgp sessions are going over serval 
hops?

erich



iperf results not good: 31% system, 69% interrupt, 0% idle!

2008-02-26 Thread Kent Watsen
I just installed a Netgear GA311 (re) into a 500MHz Netra T1 running 4.2 
(sparc64)


Running `iperf -s` on it shows only 187 Mbits/sec, which surprised me 
because other iperf-targets plugged into same switch show ~600 Mbits/sec


Looking at `top` shows why: 31% system, 69% interrupt, 0% idle  and the 
iperf process 25% CPU


What is going on? - is the re driver not good?

Thanks!
Kent



Re: iperf results not good: 31% system, 69% interrupt, 0% idle!

2008-02-26 Thread Stuart Henderson
On 2008-02-26, Kent Watsen [EMAIL PROTECTED] wrote:
 I just installed a Netgear GA311 (re) into a 500MHz Netra T1 running 4.2 
 (sparc64)

 Running `iperf -s` on it shows only 187 Mbits/sec, which surprised me 
 because other iperf-targets plugged into same switch show ~600 Mbits/sec

 Looking at `top` shows why: 31% system, 69% interrupt, 0% idle  and the 
 iperf process 25% CPU

 What is going on? - is the re driver not good?

What's going on is that your machine is busy processing interrupts.

If you want higher performance from what is a fairly slow machine,
you really want a nic with interrupt mitigation.

(as for the next question you'll have after reading that: search
the archives...)



Re: spamd and freemail hosts

2008-02-26 Thread Matthew Dempsky
On 2/26/08, Stuart Henderson [EMAIL PROTECTED] wrote:
  imo this problem is less likely to be seen on a very large mail system,
  since enough mail is going through that most of the common-queue pool is
  likely to stay whitelisted by spamlogd, but I think it can sometimes be
  a problem on smaller installations.

E.g., I can't subscribe to the pf mailing list with my google apps
account because of this.



Re: 4.3-beta

2008-02-26 Thread Vincent Barus
On Tue, Feb 26, 2008 at 7:20 AM, scott [EMAIL PROTECTED] wrote:
 Just loaded up 4.3-beta.  :-)

  1. Installed to compact flash (CF) media (wd0).  Media supports PIO mode
  4 only (no dma) but ... whoa ... 4.3 is noticeably faster on this CF
  media!  During the past 4.2 install the install progress soother
  displayed --stalled-- quite a few times as it progressed during the
  cd-to-cf writes.  The 4.3 install never, not once, --stalled--.  Very
  nice performance bump.  Nice work!

  2. bwi wireless card working for the very first time. :-)

  3. Then I went long and tried to config bwi0 as an access point and
  discovered mediaopt hostap is not an available option.  :-(  Will
  hostap functionality be coming soon? Or is it a limit of the chipset?

  All in all and so far everything else seems to be normal and working per
  usual.

  Does anyone want me to post dmesg or anything else that may be helpful
  to the dev's?  Say what and where to and it shall be done.

  Thanks!!!
  /Scott



Had the same --stalled-- problems with 4.2 and Releases before it.
I noticed that it won't stall while using the floppy install image
instead of the cd image ( I still wonder why... )
Now I give 4.3 Beta a try with a cd.

~ vb



Re: pop-before-smtp and spamd

2008-02-26 Thread Cameron Schaus

Juan Miscaro wrote:

Are there standard solutions for dealing with the obvious collision
between pop-before-smtp and spamd (in greylisting mode)?  I know many
will say to use SMTP AUTH but right now I want to try to get my current
setup to work.  My first idea was to hack the pop-before-smtp Perl
script to have the thing (daemon) add connecting/authenticating sender
IPs to a pf whitelist table.  I'm running OpenBSD 4.2 (stable) with
Postfix 2.5.
  
Why not use port 587 to send mail, instead of port 25, and only allow 
SMTP Auth from this port.


Cam



SME's Lean to Green Webinar: March 4

2008-02-26 Thread Lean and Green
ANNOUNCING AN SME NEW WEBINAR...
The Society of Manufacturing Engineers is hosting a free webinar:
What is Lean-to-Green Sustainability? Why is it important? How does it work?

You'll learn that it leverages Lean in several important respects:

- It provides a substantial competitive edge,
- It does not require large up-front investment,
- It is about people and profits and planet
- It uses many of the tools that Lean uses, and
- It applies in virtually all industries and organizations
  You don't have to be Lean to aim for Sustainability,
  but it probably helps to be on the path!
- Case example from a fellow manufacturer

Click here to register for SME's free webinar.
https://smeorg.webex.com/mw0304l/mywebex/default.do?service=1siteurl=smeorg;
main_url=%2Fmc0705l%2Fe.do%3Fsiteurl%3Dsmeorg%26AT%3DMI%26EventID%3D103329637
%26Host%3D1e9a52b90a52795d4040%26RG%3D1

---

Darcy Winslow of Nike to Present

Organizers of the first annual Lean and Green Summit announced the completion
of the conference agenda. This next generation event will feature keynote
presenter Darcy Winslow of Nike. Darcy is head of Nike's Women's Footwear
Division and is a champion for the company's sustainability efforts.

Attendees of the Summit will learn from industry professionals who display a
high degree of business acumen as they address their company's impact on the
world around them. Don't miss this opportunity! Register today!

www.leanandgreensummit.com

---

Summit Agenda

Thursday, July 17th

8:00am - 9:30am
Opening Program and
Keynote Presentation
Darcy Winslow
General Manager for Women's Shoes, Nike

9:30am - 9:45am
Break

9:45am - 11:15am
Engineering Sustainable Operational Processes
Presenter: Dave Gustashaw, Interface, Inc.

In this session you will be introduced to what it truly means to be
sustainable. As Dave Gustashaw will explain, sustainable operations aren't
what most people think. By explaining Interface's journey, you will learn to
look at sustainability through a different lens and how it's not simply about
compliance. In fact, if you address sustainability as Interface has,
compliance takes a backseat as a non-issue.

World Cafe and the
Technology of Participation
See next article for explanations of these tools.

11:15am - 11:30am
Break

11:30am - 12:30pm
Networking Lunch

12:30pm - 12:45pm
Break

12:45pm - 2:15pm
Design for the Environment
Presenters: Mike Gnam and Paul Chalmer from the National Center for
Manufacturing Sciences

In this session you will be presented with a holistic view of design, with
implications of materials selected. Learn lean (set-based) approaches to
design. The session will also cover concepts of cradle-to-cradle and design
chemistry, life-cycle analysis and implications for business processes and the
value proposition.

World Cafe and the
Technology of Participation

2:15pm-2:30pm
Break

2:30pm-4:00pm
People in a Green Organization
Presenter: Jeff Harvey, President and CEO of Burgerville

One of the largest barriers to Lean is often people and corporate culture.
It's no different when your company moves on the road to Green and
sustainability. Hear from Jeff Harvey, President and CEO of Burgerville how
they address the people and culture side of their business.

FROM BURGERVILLE'S WEBSITE...
Central to the heart of the company, Burgerville people are at the center of
what allows our company to live its values to their fullest extent. Without
strong, vibrant, healthy people, there can be no healthy families or healthy
community. At Burgerville, we believe in developing people throughout our
organization. Leading and thriving in the midst of change calls for alert,
reflective and creative people-people who are flexible in the face of change
and who bring their spirit and imagination to bear on the problems and issues
at hand. By growing their leadership abilities, employees learn how to
powerfully manage change and serve with love not matter the circumstances they
encounter. Leadership at this level contributes innovation and creates
sustainable impact, which grows our business and serves our community.

World Cafe and the
Technology of Participation


Friday, July 18th

8:00 am-9:30am
Performance Measurement
Presenters: Panel of Measurement Experts

How do you measure whether you are truly sustainable or not? What is your true
impact on nature? Unfortunately, there's a proliferation of different set of
metrics, so how do you make sense of what metrics make sense for your
organization.

In this session you will learn how to define metrics for green and
sustainability, so a company can measure its progress and understand what are
the important few things to measure (and not the trivial many).

Discuss how these metrics integrate (or don't integrate) with traditional
financial metrics.

Understand the conflicts with finance and directive management that come with
dedication to lean and sustainability.

World Cafe and the
Technology of Participation


Re: P2V with VMWare - ERR M

2008-02-26 Thread Fabian Heusser
Nick, thank you for taking the time to answer my questions.

As you successfully detected, i have done some brute force with no luck.

Thank you for your tip about dump/restore, i applied it with success.
With the help of a OpenBSD live CD i managed to do some instant dump 
restore over the network.
For this i used a command sequence like the following for each partition:

# mount /dev/sd0a /mnt/hd1
# cd /mnt/hd1
# ssh 192.168.1.52 dump -0f - /dev/sd0a | restore -rvf -
# cd /
# umount /dev/sd0a

At the end I installed the boot loader as described in the manpages
with success.

What was confusing me was that fdisk /dev/sd0c returns the same as
the proper fdisk /dev/sd0 which mixed up my idea of the things.

Fabian




Fabian Heusser wrote:
 Hello

 I have an old box (3.6) which makes a lot of noise, so i like to
 virtualize it. I made an Image with acronis and converted it with
 vmware converter.
 When i start the virtual machine Loading... ERR M is shown. (dmesg
 at the bottom)

 I loaded cd36.iso as cdrom and at the boot prompt tried the following:

 machine boot hd0b - ERR M

I'm surprised you get THAT error, but it is a nonsense command.

 boot hd0a:/bsd - Invalid argument failed(22). will try /bsd
 also with hd0b, hd0c

um.  did you really think that /bsd might be on the b, c, or d
partitions??

 if i boot with the cd, select shell and run the following
 # mount /dev/sd0c /mnt
 i get Inappropriate filetype or format. also with /dev/sd0a - d

I'd *hope* you can't mount sd0c like that.

 If i run
 # cp /usr/mdec/boot /boot
 # /usr/mdec/installboot -v /boot /usr/mdec/biosboot sd0
 i get the following output:
 -8--
 boot: /boot
 proto: /usr/mdec/biosboot
 device: /dev/rsd0c
 /usr/mdec/biosboot: entry point 0
 proto bootblock size 512
 installboot: cross-device install
 -8--
 but the error persists.

You couldn't read the file system, so you figured you would just
run a utility to alter a random sector someplace on the disk.

Did you notice the little error message?  cross-device install???

Read the man page, read the FAQ, and think about that command.

 Does anyone have an idea what i'm doing wrong?

Almost everything so far.
You can't just type random commands without understanding
what you are saying to the computer.  What you are doing is
very, very dangerous.

If you want to get some idea what went wrong, boot a CD, and
do a disklabel sd0 and fdisk sd0, see what that tells you.

There was obviously something that went very wrong with your
imaging transfer process, which doesn't surprise me, the
process of migrating OpenBSD is so simple, it is hard to get
anyone worried about making a special tool, 'specially since
it wouldn't have this kind of flexibility.  Quit using special
tools, and use the OS.

SIMPLE way:
dump(8) each existing partition to a file, move the file,
then restore(8) the files to the partitions of the new
disk.  Install your boot loader (PROPERLY this time), and
done.

And YES, I am being deliberately vague about how to do this.
You need to spend some time with the man pages and the FAQ
and thinking about how things work, not magic commands to type.

The PROPER way of doing this, however, being this is a many
year old, unmaintained install, is to build a new 4.2 or 4.3
system, install the apps, and transfer the data files.
I'm guessing it is a screwed up system, or it would have been
properly maintained and be running 4.2 now.  So, why would
you want to blindly migrate a mess to new hardware?

Nick.



Re: pop-before-smtp and spamd

2008-02-26 Thread Juan Miscaro
--- Cameron Schaus [EMAIL PROTECTED] wrote:

 Juan Miscaro wrote:
  Are there standard solutions for dealing with the obvious collision
  between pop-before-smtp and spamd (in greylisting mode)?  I know
 many
  will say to use SMTP AUTH but right now I want to try to get my
 current
  setup to work.  My first idea was to hack the pop-before-smtp Perl
  script to have the thing (daemon) add connecting/authenticating
 sender
  IPs to a pf whitelist table.  I'm running OpenBSD 4.2 (stable) with
  Postfix 2.5.

 Why not use port 587 to send mail, instead of port 25, and only allow
 
 SMTP Auth from this port.


Right now I'm talking about using pop-before-smtp.

/juan


  Looking for the perfect gift? Give the gift of Flickr! 

http://www.flickr.com/gift/



Re: pop-before-smtp and spamd

2008-02-26 Thread Adam Jacob Muller

pop-before-smtp is highly insecure.
Use SMTP auth.

-Adam

On Feb 26, 2008, at 6:33 PM, Juan Miscaro wrote:


--- Cameron Schaus [EMAIL PROTECTED] wrote:


Juan Miscaro wrote:

Are there standard solutions for dealing with the obvious collision
between pop-before-smtp and spamd (in greylisting mode)?  I know

many

will say to use SMTP AUTH but right now I want to try to get my

current

setup to work.  My first idea was to hack the pop-before-smtp Perl
script to have the thing (daemon) add connecting/authenticating

sender

IPs to a pf whitelist table.  I'm running OpenBSD 4.2 (stable) with
Postfix 2.5.


Why not use port 587 to send mail, instead of port 25, and only allow

SMTP Auth from this port.



Right now I'm talking about using pop-before-smtp.

/juan


 Looking for the perfect gift? Give the gift of Flickr!

http://www.flickr.com/gift/