Re: kernel hangs by many connections (reproducable)

2010-09-12 Thread Claudio Jeker
On Mon, Sep 13, 2010 at 06:35:10AM +0200, Bret S. Lambert wrote:
> On Mon, Sep 13, 2010 at 10:12:44AM +0600, Anton Maksimenkov wrote:
> > 2010/9/13 Henning Brauer :
> > >> hangs. 1-2 sec after start.
> > >> --- interrupt ---
> > >> pool_do_get(d0a10b60,0,0,0,60) at pool_do_get+0x2c2
> > >> pool_get(d0a10b60,0,8000,0,0) at pool_get+0x54
> > >> m_gethdr(1,1,8000,369e99,0) at m_gethdr+0x39
> > > too me that simply looks like you are running out of memory in mbpl
> > > and the pool_get is a M_WAITOK one
> > 
> > But it not unfreezed even after minute. SSH connections dropped, com
> > console didn't response (but it can be dropped into ddb, of course).
> 
> yes, because you've soaked up all the memory that's available for
> handling incoming/outgoing network traffic; you've got a bunch of
> processes that try to grab a limited number of resources, fail to
> get all they need, and sleep while holding already-allocated mbufs,
> meaning that nobody else can get them, and none of your processes
> can advance.
> 
> That said, the pool_get that's failing in the re driver is set as
> non-blocking, so it should fail. However, it's hard to see how
> you're tickling this without seeing the source that you're running,
> since we don't know how you're cornholing the network stack.
> 

Oh, that pool_get succeds since mbufs don't have a limit but the
allocation of the cluster fails so the driver will reuse the old buffer on
the queue. By breaking into ddb it just happend to be in there instead of
somewhere else.

When running with that many sockets a prominent warning about increasing
kern.maxclusters shows up. This is not just dmesg spam, running
out of mbuf clusters will stop your network stack.
Most systems today come up with 6144 clusters. A TCP connection needs at
least 4 clusters plus the network stack itself needs a few clusters for
things like defragmenting long mbuf chains. So to be able to run with
1 sockets you should set kern.maxclusters to around 10. This will
allow the network stack to allocate around 200MB of memory in kva.

-- 
:wq Claudio



Re: kernel hangs by many connections (reproducable)

2010-09-12 Thread Anton Maksimenkov
2010/9/13 Bret S. Lambert :
> yes, because you've soaked up all the memory that's available for
> handling incoming/outgoing network traffic; you've got a bunch of
> processes that try to grab a limited number of resources, fail to
> get all they need, and sleep while holding already-allocated mbufs,
> meaning that nobody else can get them, and none of your processes
> can advance.

yes, I understand. but kernel must resolve this situation somehow. Isn't it?

> That said, the pool_get that's failing in the re driver is set as
> non-blocking, so it should fail. However, it's hard to see how
> you're tickling this without seeing the source that you're running,
> since we don't know how you're cornholing the network stack.

oh, here is the source http://gist.github.com/576851
it is rather ugly, collected from pieces of another programs. my
english is bad so I cut out my comments.
I need the instrument to do a brief test of server under load. so this
"penetrator" was planned as simply (yes, ugly but...) and quickly
created instrument.
-- 
antonvm



Re: linux emulation

2010-09-12 Thread Jacob Meuser
On Mon, Sep 13, 2010 at 12:51:29AM -0400, Predrag Punosevac wrote:
> Elmar Bschorer  wrote:
> >hi list,
> 
> >i tried to get skype up and running with linux emulation on openbsd 4.7.
> >skype starts up and i can log in but i can't see any contacts or chat 
> >with others. looks like i am not really connected.
> >does anyone has skype running? any ideas what the problem might be?
> 
> Of course. I got Skype running on OpenBSD
> 
> http://www.daemonforums.org/showthread.php?t=2616&highlight=Skype+OpenBSD
> >tia
> >elmar
> 
> The problem is that you can only use chat. You can NOT use VoIP since
> OpenBSD does not have enough Linux emulation even for old Skype v 1.2
> compiled with static OSS(Linux version) let alone v. 2.xxx which 
> requires Alsa.
> 
> 
> This is how we do VoIP on OpenBSD
> 
> http://www.ryanflannery.net/howtos/obsd_voicechat.php

pjsua and ekiga may fulfill your voip needs as well.  they both have
their issues though, imo.  a truly usable, simple to configure voip
client would be nice.

> You can also get old Skype version 1.2 compiled with static OSS if you
> look hard enough on the Internet and add the support to Linux emulator
> layer if you have enough programming skill. I am sure Jake and Alexander
> will give you their notes about aucat and tell you what needs to be
> done.
> 
> Cheers,
> Predrag


-- 
jake...@sdf.lonestar.org
SDF Public Access UNIX System - http://sdf.lonestar.org



Re: linux emulation

2010-09-12 Thread Joel Wiramu Pauling
Have you tried it under wine?

http://wiki.winehq.org/OpenBSD

On 12 September 2010 16:51, Predrag Punosevac  wrote:
> Elmar Bschorer  wrote:
>>hi list,
>
>>i tried to get skype up and running with linux emulation on openbsd 4.7.
>>skype starts up and i can log in but i can't see any contacts or chat
>>with others. looks like i am not really connected.
>>does anyone has skype running? any ideas what the problem might be?
>
> Of course. I got Skype running on OpenBSD
>
> http://www.daemonforums.org/showthread.php?t=2616&highlight=Skype+OpenBSD
>>tia
>>elmar
>
> The problem is that you can only use chat. You can NOT use VoIP since
> OpenBSD does not have enough Linux emulation even for old Skype v 1.2
> compiled with static OSS(Linux version) let alone v. 2.xxx which
> requires Alsa.
>
>
> This is how we do VoIP on OpenBSD
>
> http://www.ryanflannery.net/howtos/obsd_voicechat.php
>
> You can also get old Skype version 1.2 compiled with static OSS if you
> look hard enough on the Internet and add the support to Linux emulator
> layer if you have enough programming skill. I am sure Jake and Alexander
> will give you their notes about aucat and tell you what needs to be
> done.
>
> Cheers,
> Predrag



Re: linux emulation

2010-09-12 Thread Predrag Punosevac
Elmar Bschorer  wrote:
>hi list,

>i tried to get skype up and running with linux emulation on openbsd 4.7.
>skype starts up and i can log in but i can't see any contacts or chat 
>with others. looks like i am not really connected.
>does anyone has skype running? any ideas what the problem might be?

Of course. I got Skype running on OpenBSD

http://www.daemonforums.org/showthread.php?t=2616&highlight=Skype+OpenBSD
>tia
>elmar

The problem is that you can only use chat. You can NOT use VoIP since
OpenBSD does not have enough Linux emulation even for old Skype v 1.2
compiled with static OSS(Linux version) let alone v. 2.xxx which 
requires Alsa.


This is how we do VoIP on OpenBSD

http://www.ryanflannery.net/howtos/obsd_voicechat.php

You can also get old Skype version 1.2 compiled with static OSS if you
look hard enough on the Internet and add the support to Linux emulator
layer if you have enough programming skill. I am sure Jake and Alexander
will give you their notes about aucat and tell you what needs to be
done.

Cheers,
Predrag



Re: kernel hangs by many connections (reproducable)

2010-09-12 Thread Bret S. Lambert
On Mon, Sep 13, 2010 at 10:12:44AM +0600, Anton Maksimenkov wrote:
> 2010/9/13 Henning Brauer :
> >> hangs. 1-2 sec after start.
> >> --- interrupt ---
> >> pool_do_get(d0a10b60,0,0,0,60) at pool_do_get+0x2c2
> >> pool_get(d0a10b60,0,8000,0,0) at pool_get+0x54
> >> m_gethdr(1,1,8000,369e99,0) at m_gethdr+0x39
> > too me that simply looks like you are running out of memory in mbpl
> > and the pool_get is a M_WAITOK one
> 
> But it not unfreezed even after minute. SSH connections dropped, com
> console didn't response (but it can be dropped into ddb, of course).

yes, because you've soaked up all the memory that's available for
handling incoming/outgoing network traffic; you've got a bunch of
processes that try to grab a limited number of resources, fail to
get all they need, and sleep while holding already-allocated mbufs,
meaning that nobody else can get them, and none of your processes
can advance.

That said, the pool_get that's failing in the re driver is set as
non-blocking, so it should fail. However, it's hard to see how
you're tickling this without seeing the source that you're running,
since we don't know how you're cornholing the network stack.

> -- 
> antonvm



Re: kernel hangs by many connections (reproducable)

2010-09-12 Thread Anton Maksimenkov
2010/9/13 Henning Brauer :
>> hangs. 1-2 sec after start.
>> --- interrupt ---
>> pool_do_get(d0a10b60,0,0,0,60) at pool_do_get+0x2c2
>> pool_get(d0a10b60,0,8000,0,0) at pool_get+0x54
>> m_gethdr(1,1,8000,369e99,0) at m_gethdr+0x39
> too me that simply looks like you are running out of memory in mbpl
> and the pool_get is a M_WAITOK one

But it not unfreezed even after minute. SSH connections dropped, com
console didn't response (but it can be dropped into ddb, of course).
-- 
antonvm



Banca inviato una notifica che e necessario completare

2010-09-12 Thread Gruppo BCC
Cari Gruppo BCC membri, per la sicurezza del tuo account abbiamo bisogno
di un aggiornamento del profilo. Si prega di scaricare il file allegato a 
questa email.
NOTA: Il tuo account puo essere automaticamente sospeso fino in caso di 
fallimento
di aggiornare il tuo profilo. Si prega di provvedere immediatamente.

Per l'assistenza ai Servizi via internet puo contattare il numero verde 
800-086.531, gratuito anche da cellulare.
Cordiali saluti.
Servizio Banca di Credito Cooperativo Online


---
Questo e un messaggio automatico.
Per disabilitare il servizio puo utilizzare la funzione Modifica abilitazioni 
(Comunicazioni  Estratto conto e documentazione).


Copyright ) Banca di Credito Cooperativo S.p.A

[demime 1.01d removed an attachment of type APPLICATION/DEFANGED which had a 
name of Servizio_Banca_Credito_Cooperativo.20878DEFANGED-html]



cvsync problem: no update since 2010-09-09

2010-09-12 Thread Claus Assmann
It seems I don't get updates to the OpenBSD cvs tree anymore since
2010-09-09. Back then it ran fine:
Connecting to anoncvs3.usa.openbsd.org port 
Connected to 192.43.244.161 port 
Running...
Updating (collection openbsd/rcs)   
 Update CVSROOT/ChangeLog
 Edit ports/cad/gerbv/Makefile,v
 [[... many more file ...]]
 Edit www/plus48.html,v
 Edit www/translation.html,v
Done (collection openbsd/rcs)
Finished successfully

Since then I only get:
$ cvsync -c /home/ca/OpenBSD/etc/cvsync.conf -4 -v
Parsing a file /home/ca/OpenBSD/etc/cvsync.conf...
Connecting to anoncvs.usa.openbsd.org port 
Connected to 149.20.54.217 port  
Protocol: 0.24
Hash: MD5
Exchanging collection list...
 collection name "openbsd" release "rcs" umask 002
Compression: zlib
Trying to establish the multiplexed channel...
Running...
Updating (collection openbsd/rcs)
Done (collection openbsd/rcs)
Finished successfully
Total time: 112.468 sec

I tried different servers:
config {
  #hostname anoncvs3.usa.openbsd.org
  hostname anoncvs.usa.openbsd.org
  #hostname cvsync.csociety.org
  compress
  collection {
name openbsd release rcs
prefix /home/ca/OpenBSD/cvs
umask 002
  }
}

but still no changes. For example, www/48.html is at 1.5 in my cvs
copy, but according to cvsweb it is at 1.9.

What am I doing wrong?



XVIII Ateneo 2010: Frente de Artistas del Borda.

2010-09-12 Thread difusion-esa
Escuela Sistimica Argentina
Institucisn dedicada a la formacisn, asistencia e investigacisn
psicolsgica.
Hoy nos acercamos a Uds. para invitarlos a la realizacisn del XVIII
Ateneo 2010



FRENTE DE ARTISTAS DEL BORDA.

Una experiencia desmanicomializadora.



DISERTANTE: ALBERTO SAVA (*)

El Frente de Artistas del Borda es una experiencia desmanicomializadora
que surge en noviembre de 1984, con el objetivo de producir arte con y
desde los artistas internados, externados y ambulatorios del Hospital
Borda, posibilitando que a travis de diferentes formas de presentaciones
artmsticas (teatro, mzsica, mimo, danza, plastica, entre otros) generen
un continuo vmnculo con la sociedad.

Ir al frente, exponerse a salir, cuestionando de esa manera el
imaginario social respecto a la locura, convirtiendo al arte en una
herramienta de denuncia y transformacisn de la lsgica manicomial.

Esta practica apunta a revertir los efectos de deshumanizacisn que tanto
la institucisn manicomial como la sociedad generan, proponiendo a los
protagonistas de esta experiencia, recuperar las caractermsticas propias
de ser personas. Se parte de la idea de que haciendo circular estas
producciones artmsticas, se producen tres efectos: subjetivo,
institucional y social

Desde el Frente de Artistas del Borda nos enrolamos en el arte
contestatario, transformador, revolucionario.

(*) Artista y Psicslogo Social - Dramaturgia y Direccisn de espectaculos
y experiencias de Mimo Contemporaneo y Teatro Participativo con mas de 50
realizaciones l971 a 2010 - Fundador y Coordinador del Frente de Artistas
del Borda -1984-2010 - Fundador y Presidente, de la Asociacisn Argentina
de MIMO- 1974-2003 - Creador y Director del Congreso y Festival
Latinoamericano de MIMO, en sus 10 ediciones - Fundador y Presidente de
la Red Argentina de Arte y Salud Mental - Fundador y Director del 1: al
10: FESTIVAL LATINOAMERICANO DE ARTISTAS INTERNADOS Y EXTERNADOS EN
HOSPITALES PSIQUIATRICOS. 1989- 2010 -Participa en Festivales y Congresos
de Teatro, Mimo y Arte y Salud Mental de Argentina, Paraguay, Ecuador,
Perz, Cuba, Espaqa, Francia y Polonia.

Distinciones: - Centro Cultural San Martmn. - Hospital Borda. -
Asociacisn Argentina de Mimo, Instituto Nacional de Teatro, Teatro por
el Mundo de la Universidad de Buenos Aires. UNESCO

Actividad Docente: - Facultad Medicina y Facultad de Sociologma de la
U.B.A., Conservatorio Nacional de Arte Dramatico, Asociacisn Argentina de
Mimo. -Secretaria de Cultura de la Nacisn. Universidad de Madres de Plaza
de Mayo. Barcelona, Ecuador , Paraguay

Publicaciones: - Autor libros Desde el Mimo Contemporaneo hasta el
Teatro Participativo -  Frente de Artistas del Borda. Una experiencia
desmanicomializadora Editorial Madres de Plaza de Mayo .- Autor Libro
Arte y Desmanicomializacion. Editorial Artes Escinicas

Dma: viernes 17 de septiembre de 2010
Horario: 19 horas

ENTRADA LIBRE Y GRATUITA (Sin inscripcisn previa)



ESCUELA SISTIMICA ARGENTINA
Fray J. S. M. Oro 1843 (C1414DBC) Cap. Fed.
Tel/ Fax: 4774-2875/6112 -  4899-1053
i...@escuelasistemica.com.ar / www.escuelasistemica.com.ar



Re: kernel hangs by many connections (reproducable)

2010-09-12 Thread Henning Brauer
* Anton Maksimenkov  [2010-09-12 07:35]:
> I use my OBSD machine to test some server on another machine. They are
> connected by pathcord, 1Gbit network cards are used.
> Test program (uses kqueue) do many (I want thousands) connections to
> server. Write query, read answer.
> And it tries to keep that much connections by doing as much new
> connections as needed.
> 
> When number of connections kept below 100 - all ok. But if I raise
> them (upto about 500-1000) the program start these connections, do
> some write/read (show about 10-20 successful reads) and the kernel
> hangs. 1-2 sec after start.
> Tweaks - kern.maxfiles=16384 and openfiles-cur/max=8192 for my user.
> 
> Info from ddb (see dmesg below):
> 
> ddb> show panic
> the kernel did not panic
> 
> ddb> trace
> Debugger(0,3f8,0,0,1) at Debugger+0x4
> comintr(d1571000) at comintr+0x287
> Xrecurse_legacy4() at Xrecurse_legacy4+0xb3
> --- interrupt ---
> pool_do_get(d0a10b60,0,0,0,60) at pool_do_get+0x2c2
> pool_get(d0a10b60,0,8000,0,0) at pool_get+0x54
> m_gethdr(1,1,8000,369e99,0) at m_gethdr+0x39

too me that simply looks like you are running out of memory in mbpl
and the pool_get is a M_WAITOK one

-- 
Henning Brauer, h...@bsws.de, henn...@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting



Re: jconsole - no connection possible

2010-09-12 Thread Samir SAADA
On Sun, Sep 12, 2010 at 11:37:37AM +0200, Elmar Bschorer wrote:
> hi list,
> 
> when i try to connect to a jvm pid with jconsole for debugging i end
> up with a "connection failed".
> 
> i also tried connecting to a remote process ending up with the same
> error. when i try to connect with jconsole to the same remote
> process from a linux system it works. so it seems that jmx is
> configured successfully on the remote side.
> 
> are there any security related issues on 4.7 that prevent me from
> establishing a connection with jconsole?
>

you do not give detailed description of your problem,
anyway, it works ok here,
check your network settings including /etc/hosts.
 
> btw. what about the jdk17 package - is java emulated on obsd?
> 

"You do not need Linux emulation to work with the native JDK."



Re: qemu core dumps

2010-09-12 Thread Tobias Ulmer
On Sun, Sep 12, 2010 at 04:28:25PM +0200, Elmar Bschorer wrote:
> hi list,
> 
> I tried to install ubuntu with qemu as neither jconsole nor skype
> with emulation do work on openbsd 4.7 :-(

You are using the wrong operating system for the job. Don't.
There are plenty of Linux distros out there.



Re: pf.conf : rdr-to IF rather than IP

2010-09-12 Thread Bret S. Lambert
Have you even tested a dup-to configuration? Or are you just trying to
run the code in your head?

On Sun, Sep 12, 2010 at 04:29:14PM +0200, Jean-Francois wrote:
> Hello,
> 
> Well I am not sure dup-to is really suitable, I would like to redirect ports 
> to multiple ip as following example :
> 
> match in on $ext_if proto tcp from any to any port 1050 rdr-to 192.168.1.10:50
> 
> Regards
> 
> Le dimanche 29 ao?t 2010 15:15:28, Bret S. Lambert a ?crit :
> > On Sun, Aug 29, 2010 at 02:05:40PM +0200, Jean-Francois wrote:
> > > Hello,
> > > 
> > > I would like to redirect particular ports on the sub-network, not only on
> > > one ip adress of the subnetwork.
> > > 
> > > Taking an example, I would like some software that listen to ports on
> > > different machines with different ip adress without having to change the
> > > pf.conf rules each time it is needed.
> > 
> > So...you want traffic matching certain criteria duplicated to multiple
> > IP addresses on your network? Did you try to search for "duplicate"
> > in the pf.conf man page?
> > 
> > I'm not sure what your ultimate goal is (or how you won't have to do
> > something when "it is needed"), but, hey; whatever lifts your luggage.
> > 
> > > Regards
> > > 
> > > > If you can explain what you're actually trying to do, rather
> > > > than talk about how you're thinking of accomplishing it, maybe
> > > > someone can suggest a way.
> > > > 
> > > > On 2010-08-28, Jean-Francois  wrote:
> > > > > Good evening,
> > > > > 
> > > > > Is it possible to redirect to an IF or at least an IP range such as
> > > > > following rules ?
> > > > > 
> > > > > match in  on $ext_if proto tcp from any to any port 1024:32768 \
> > > > > 
> > > > >  rdr-to $int_if
> > > > > 
> > > > > match in  on $ext_if proto tcp from any to any port 1024:32768 \
> > > > > 
> > > > >  rdr-to 192.168.100.0/16
> > > > > 
> > > > > I am not sure it even makes sense in regard of a redirection in a
> > > > > network topology but I'll try the question, since it can help to
> > > > > understand.
> > > > > 
> > > > > I am thinking the probability is very high that a redirection of
> > > > > above kind needs to copy as many times the packets as wide as the
> > > > > range of ip is.
> > > > > 
> > > > > Thanks to help me to understand this point.
> > > > > 
> > > > > Jean-Frangois



qemu core dumps

2010-09-12 Thread Elmar Bschorer

hi list,

I tried to install ubuntu with qemu as neither jconsole nor skype with 
emulation do work on openbsd 4.7 :-(


while waiting for the ubuntu installer to finish, i got a core dump - ?!?


# qemu -kernel-kqemu -m 1000 -boot d -cdrom 
/home/elmex/Downloads/ubuntu-10.04>

qemu: fatal: triple fault
EAX=c1c00144 EBX=f2f098c0 ECX=00d8 EDX=
ESI=e1183300 EDI=c058f0b0 EBP=c1c0013c ESP=c1c00038
EIP=c058d051 EFL=0022 [---] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =007b   00cff300
CS =0060   00cf9a00
SS =0068   00cff300
DS =007b   00cff300
FS =00d8 013c1000  018f933c
GS =00e0 c1c08640 0018 c14091c0
LDT=   8000
TR =0080 c1c06480 206b c10089c0
GDT= c1c0 00ff
IDT= c0761000 07ff
CR0=80050033 CR2=c0104020 CR3=319a CR4=06d0
CCS=0020 CCD=c1c00110 CCO=SUBL   
FCW=037f FSW=0033 [ST=0] FTW=00 MXCSR=1f80

FPR0=4000 FPR1=4000
FPR2=4000 FPR3=4000
FPR4=4000 FPR5=4000
FPR6=400fffc0 FPR7=80050f7003f4
XMM00=00ff 
XMM01=726f20676e6972747320656220747375
XMM02=7475616e755f776f6c6c612f72656c6c 
XMM03=6e73656f6420646574616369746e6568
XMM04=642f7974736978652074276e7365 
XMM05=6361502e746e656e6f706d6f632e746e
XMM06=6b63614279727473696765526567616b 
XMM07=7563723638785f78756e694c2f646e65

Abort trap (core dumped)


greets
elmar



Re: pf.conf : rdr-to IF rather than IP

2010-09-12 Thread Jean-Francois
Hello,

Well I am not sure dup-to is really suitable, I would like to redirect ports
to multiple ip as following example :

match in on $ext_if proto tcp from any to any port 1050 rdr-to
192.168.1.10:50

Regards

Le dimanche 29 ao{t 2010 15:15:28, Bret S. Lambert a icrit :
> On Sun, Aug 29, 2010 at 02:05:40PM +0200, Jean-Francois wrote:
> > Hello,
> >
> > I would like to redirect particular ports on the sub-network, not only on
> > one ip adress of the subnetwork.
> >
> > Taking an example, I would like some software that listen to ports on
> > different machines with different ip adress without having to change the
> > pf.conf rules each time it is needed.
>
> So...you want traffic matching certain criteria duplicated to multiple
> IP addresses on your network? Did you try to search for "duplicate"
> in the pf.conf man page?
>
> I'm not sure what your ultimate goal is (or how you won't have to do
> something when "it is needed"), but, hey; whatever lifts your luggage.
>
> > Regards
> >
> > > If you can explain what you're actually trying to do, rather
> > > than talk about how you're thinking of accomplishing it, maybe
> > > someone can suggest a way.
> > >
> > > On 2010-08-28, Jean-Francois  wrote:
> > > > Good evening,
> > > >
> > > > Is it possible to redirect to an IF or at least an IP range such as
> > > > following rules ?
> > > >
> > > > match in  on $ext_if proto tcp from any to any port 1024:32768 \
> > > >
> > > >  rdr-to $int_if
> > > >
> > > > match in  on $ext_if proto tcp from any to any port 1024:32768 \
> > > >
> > > >  rdr-to 192.168.100.0/16
> > > >
> > > > I am not sure it even makes sense in regard of a redirection in a
> > > > network topology but I'll try the question, since it can help to
> > > > understand.
> > > >
> > > > I am thinking the probability is very high that a redirection of
> > > > above kind needs to copy as many times the packets as wide as the
> > > > range of ip is.
> > > >
> > > > Thanks to help me to understand this point.
> > > >
> > > > Jean-Frangois



Re: OpenBSD 4.6 + carp + pf + pfsync lockup

2010-09-12 Thread Henning Brauer
* Martin Pelikan  [2010-09-09 12:24]:
> It depends on what do you need. The defaults suffice for most cases,
> but on our most loaded router we use tcp both 256k and udp send space

which is bullshit on a router, since rcv/send space is for sockets and
irrelevant for forwarded traffic - no sockets involved.

-- 
Henning Brauer, h...@bsws.de, henn...@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting



Bedvacanze.it - Il sito per organizzare le tue vacanze

2010-09-12 Thread BedVacanze
-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-
BedVacanze.it, Il Sito per organizzare le tue vacanze - www.bedvacanze.it
-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-
Anno I - numero 39 - 12 Settembre 2010

Gestisci un agriturismo, bed & breakfast, casa vacanze, campeggio,
villaggio turistico, albergo, hotel o un'altra struttura per vacanze?
Bedvacanze.it offre numerosi servizi, a partire dalla pubblicizzazione della 
tua struttura turistica, all'invio di comunicati stampa, fino alla
pubblicizzazione di eventi che si svolgono nel tua struttura o nelle vicinanze.
Visita il sito www.bedvacanze.it
Ti aspettiamo

#

Cerchi un posto carino per le tue vacanze? Visita la nostra sezione dedicata 
alle strutture turistiche: tante idee e informazioni per le tue vacanze.
Visita il sito www.bedvacanze.it
Ti aspettiamo
 
Cambia la tua sottoscrizione (
http://www.bedvacanze.it/index.php?option=com_acajoom&Itemid=999&act=change&subscriber=54611&cle=c7d9c7344f641c6f217a5e76a292e29b&listid=34
 )
Cancellati (
http://www.bedvacanze.it/index.php?option=com_acajoom&Itemid=999&act=unsubscribe&subscriber=54611&cle=c7d9c7344f641c6f217a5e76a292e29b&listid=34
 )

Powered by Joobi ( http://www.ijoobi.com ) 



Samba security hole chain_reply

2010-09-12 Thread Jean-Francois
Hello,

I am reading an article about Samba chain_reply vulnerability called 
CVE-2010-2063, where one can execute root shell on the server as far as I 
understand with all smb server up to 3.3.13 (excluded).

One basic question, is this having the desired effect under OpenBSD as well or  
any mechanism of randomization makes the exploit leading to uncontrolled 
effects ?

Regards



jconsole - no connection possible

2010-09-12 Thread Elmar Bschorer

hi list,

when i try to connect to a jvm pid with jconsole for debugging i end up 
with a "connection failed".


i also tried connecting to a remote process ending up with the same 
error. when i try to connect with jconsole to the same remote process 
from a linux system it works. so it seems that jmx is configured 
successfully on the remote side.


are there any security related issues on 4.7 that prevent me from 
establishing a connection with jconsole?


btw. what about the jdk17 package - is java emulated on obsd?

tia

elmar



linux emulation

2010-09-12 Thread Elmar Bschorer

hi list,

i tried to get skype up and running with linux emulation on openbsd 4.7.
skype starts up and i can log in but i can't see any contacts or chat 
with others. looks like i am not really connected.


does anyone has skype running? any ideas what the problem might be?

tia

elmar