Re: gcc4 cross-tools

[David Coppa]

On Thu, Sep 16, 2010 at 6:50 AM, Hitoshi NAKAMORI
 wrote:
> Hi,
>
> I'm trying to build gcc4 cross compiler in yesterday's snapshot and source 
> tree.
>
> According to Makefile.cross, amd64, i386, hppa, powerpc, and sparc64
> target creates gcc version 4 cross compiler. but
> following errors occurred with all target (expect i386).
>
> - because im using the i386 host, i386 target did not try.
> - many times I run 'cvs up -Pd', but reproduction.
>
> anyone know this error?

You've forgotten a "make obj" before make.

cheers,
david

Re: Safety of lo

[Joachim Schipper]

On Wed, Sep 15, 2010 at 08:21:57PM -0300, Hugo Osvaldo Barrera wrote:
> On Wed, Sep 15, 2010 at 17:02, Joachim Schipper
> > In the specific case of Subversion, it's easy enough to invoke it
> > directly from SSH (...)
> 
> I know, I've used svn+ssh for some time.  The issue is I have several
> repositories, and several externals inside each.  This has two
> disadvantages:
> 1)  I need to set up a new ssh tunnel for each transaction.  These
> take a small while, but add up.
> 2)  For some reason, after several connections are opened, new one
> don't open.  They're NOT rejected, just no response from the server.
> I can't even ssh into the machine from *this machine*, but I can from
> a different one.  I tried the MaxStartups and MaxSessions in
> sshd_config, but that didn't help.
> 
> Reason (2) is really lame, and I should have fixed that, but since
> it's not the issue, I decided to give the single-tunnel idea.

Are you aware of the new Control* SSH options? They work really well,
especially with stupid programs like Subversion that like to open tons
of connections.

Try putting something like the following in ~/.ssh/config:

Host *
ControlPath ~/.ssh/.mux...@%h:%p
ControlPersist 3m

Host svn
HostName svn.example.org
IdentityFile ~/.ssh/id_rsa.svn
ControlMaster auto

Joachim

Minor nits in 4.7/001_kerberos.patch

[Richard Toohey]

Hi all.

Patching a 4.7 box from the errata patch and noticed this:

+
+if (len < checksum_sz + et->confoundersize) {
+   krb5_set_error_string(context, "Encrypted data shorter then "
+ "checksum + confunder");
+   return KRB5_BAD_MSIZE;
+}
+

That "then" should be "than" shouldn't it?

"Encrypted data shorter THAN x"?

And as I read this email again - it should be confounder not confunder in the
message string?

The member name is confounder not confunder?

(Looks like both need to be fixed in three places.)

Looks like still in 4.8 and beyond (if I am looking in the right place.)

http://www.openbsd.org/cgi-bin/cvsweb/src/kerberosV/src/lib/krb5/crypto.c?rev
=1.10.12.1;content-type=text%2Fplain

And wrong in the comments ...

/*
 * In the framework of kerberos, the length can never be shorter
 * then at least one blocksize.
 */

Then should be than.

And the nits are in the code:

if (len < checksum_sz + et->confoundersize) {
krb5_set_error_string(context, "Encrypted data shorter then "
  "checksum + confunder");
return KRB5_BAD_MSIZE;
}

Thanks.

Re: Minor nits in 4.7/001_kerberos.patch

[Bret S. Lambert]

All that, and you don't provide your own diff fixing these?

On Thu, Sep 16, 2010 at 08:41:18PM +1200, Richard Toohey wrote:
> Hi all.
> 
> Patching a 4.7 box from the errata patch and noticed this:
> 
> +
> +if (len < checksum_sz + et->confoundersize) {
> +   krb5_set_error_string(context, "Encrypted data shorter then "
> + "checksum + confunder");
> +   return KRB5_BAD_MSIZE;
> +}
> +
> 
> That "then" should be "than" shouldn't it?
> 
> "Encrypted data shorter THAN x"?
> 
> And as I read this email again - it should be confounder not confunder in the
> message string?
> 
> The member name is confounder not confunder?
> 
> (Looks like both need to be fixed in three places.)
> 
> Looks like still in 4.8 and beyond (if I am looking in the right place.)
> 
> http://www.openbsd.org/cgi-bin/cvsweb/src/kerberosV/src/lib/krb5/crypto.c?rev
> =1.10.12.1;content-type=text%2Fplain
> 
> And wrong in the comments ...
> 
> /*
>  * In the framework of kerberos, the length can never be shorter
>  * then at least one blocksize.
>  */
> 
> Then should be than.
> 
> And the nits are in the code:
> 
> if (len < checksum_sz + et->confoundersize) {
>   krb5_set_error_string(context, "Encrypted data shorter then "
> "checksum + confunder");
>   return KRB5_BAD_MSIZE;
> }
> 
> Thanks.

Re: Minor nits in 4.7/001_kerberos.patch

[Richard Toohey]

D'oh ... didn't even cross my mind!

Now watch me mangle a diff ...

On 16/09/2010, at 8:44 PM, Bret S. Lambert wrote:

> All that, and you don't provide your own diff fixing these?
>
> On Thu, Sep 16, 2010 at 08:41:18PM +1200, Richard Toohey wrote:
>> Hi all.
>>
>> Patching a 4.7 box from the errata patch and noticed this:
>>
>> +
>> +if (len < checksum_sz + et->confoundersize) {
>> +   krb5_set_error_string(context, "Encrypted data shorter then "
>> + "checksum + confunder");
>> +   return KRB5_BAD_MSIZE;
>> +}
>> +
>>
>> That "then" should be "than" shouldn't it?
>>
>> "Encrypted data shorter THAN x"?
>>
>> And as I read this email again - it should be confounder not confunder in
the
>> message string?
>>
>> The member name is confounder not confunder?
>>
>> (Looks like both need to be fixed in three places.)
>>
>> Looks like still in 4.8 and beyond (if I am looking in the right place.)
>>
>>
http://www.openbsd.org/cgi-bin/cvsweb/src/kerberosV/src/lib/krb5/crypto.c?rev
>> =1.10.12.1;content-type=text%2Fplain
>>
>> And wrong in the comments ...
>>
>>/*
>> * In the framework of kerberos, the length can never be shorter
>> * then at least one blocksize.
>> */
>>
>> Then should be than.
>>
>> And the nits are in the code:
>>
>>if (len < checksum_sz + et->confoundersize) {
>>  krb5_set_error_string(context, "Encrypted data shorter then "
>>"checksum + confunder");
>>  return KRB5_BAD_MSIZE;
>>}
>>
>> Thanks.

Re: Popping sounds with azalia(4) device

[Jacob Meuser]

On Thu, Sep 16, 2010 at 02:17:36AM -0400, Joe Gidi wrote:
> I'm getting frequent popping sounds from the azalia device on my system,
> roughly every 15-30 seconds. I have a pair of stereo speakers plugged in
> to the green speaker jack, and the pops always seem to alternate channels
> (one on the left, the next one on the right).
> 
> The pops do not occur under Windows, so I don't believe there's a hardware
> problem.
> 
> Mixerctl -v output and dmesg follow. The pops are quieter if I take "mix"
> off of inputs.mix2_source so it's just using dac-0:1, but they are still
> present.
> 
> Any ideas?

do you hear the noise only when playing something, or do you hear it
even when nothing is playing?


> dmesg:
> 
> OpenBSD 4.8-current (GENERIC.MP) #409: Wed Sep  8 17:36:44 MDT 2010
> dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
> real mem = 3487105024 (3325MB)
> avail mem = 3380445184 (3223MB)
> mainbus0 at root
> bios0 at mainbus0: SMBIOS rev. 2.5 @ 0x9f000 (66 entries)
> bios0: vendor American Megatrends Inc. version "1401" date 06/11/2010
> bios0: ASUSTeK Computer INC. M4A88TD-V EVO/USB3
> acpi0 at bios0: rev 2
> acpi0: sleep states S0 S1 S3 S4 S5
> acpi0: tables DSDT FACP APIC MCFG OEMB SRAT HPET SSDT
> acpi0: wakeup devices PCE2(S4) PCE3(S4) PCE4(S4) PCE5(S4) PCE6(S4)
> PCE7(S4) PCE9(S4) PCEA(S4) PCEB(S4) PCEC(S4) SBAZ(S4) P0PC(S4) GEC_(S4)
> UHC1(S4) UHC2(S4) USB3(S4) UHC4(S4) USB5(S4) UHC6(S4) UHC7(S4) PE20(S4)
> PE21(S4) RLAN(S4) PE22(S4) PE23(S4) PS2M(S4) PS2K(S4) UAR1(S4)
> acpitimer0 at acpi0: 3579545 Hz, 32 bits
> acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
> cpu0 at mainbus0: apid 0 (boot processor)
> cpu0: AMD Athlon(tm) II X4 640 Processor, 3013.70 MHz
> cpu0:
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,MWAIT,CX16,POPCNT,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW
> cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB
> 64b/line 16-way L2 cache
> cpu0: ITLB 32 4KB entries fully associative, 16 4MB entries fully associative
> cpu0: DTLB 48 4KB entries fully associative, 48 4MB entries fully associative
> cpu0: apic clock running at 200MHz
> cpu1 at mainbus0: apid 1 (application processor)
> cpu1: AMD Athlon(tm) II X4 640 Processor, 3013.38 MHz
> cpu1:
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,MWAIT,CX16,POPCNT,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW
> cpu1: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB
> 64b/line 16-way L2 cache
> cpu1: ITLB 32 4KB entries fully associative, 16 4MB entries fully associative
> cpu1: DTLB 48 4KB entries fully associative, 48 4MB entries fully associative
> cpu2 at mainbus0: apid 2 (application processor)
> cpu2: AMD Athlon(tm) II X4 640 Processor, 3013.38 MHz
> cpu2:
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,MWAIT,CX16,POPCNT,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW
> cpu2: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB
> 64b/line 16-way L2 cache
> cpu2: ITLB 32 4KB entries fully associative, 16 4MB entries fully associative
> cpu2: DTLB 48 4KB entries fully associative, 48 4MB entries fully associative
> cpu3 at mainbus0: apid 3 (application processor)
> cpu3: AMD Athlon(tm) II X4 640 Processor, 3013.38 MHz
> cpu3:
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,MWAIT,CX16,POPCNT,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW
> cpu3: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB
> 64b/line 16-way L2 cache
> cpu3: ITLB 32 4KB entries fully associative, 16 4MB entries fully associative
> cpu3: DTLB 48 4KB entries fully associative, 48 4MB entries fully associative
> ioapic0 at mainbus0: apid 4 pa 0xfec0, version 21, 24 pins
> acpihpet0 at acpi0: 14318180 Hz
> acpiprt0 at acpi0: bus 0 (PCI0)
> acpiprt1 at acpi0: bus -1 (P0P1)
> acpiprt2 at acpi0: bus 1 (PCE2)
> acpiprt3 at acpi0: bus -1 (PCE3)
> acpiprt4 at acpi0: bus -1 (PCE4)
> acpiprt5 at acpi0: bus -1 (PCE9)
> acpiprt6 at acpi0: bus 2 (PCEA)
> acpiprt7 at acpi0: bus 3 (P0PC)
> acpiprt8 at acpi0: bus 4 (PE20)
> acpiprt9 at acpi0: bus 5 (PE21)
> acpiprt10 at acpi0: bus -1 (PE22)
> acpiprt11 at acpi0: bus -1 (PE23)
> acpiec0 at acpi0
> acpicpu0 at acpi0: PSS
> acpicpu1 at acpi0: PSS
> acpicpu2 at acpi0: PSS
> acpicpu3 at acpi0: PSS
> aibs0 at acpi0
> acpibtn0 at acpi0: PWRB
> pci0 at mainbus0 bus 0
> pchb0 at pci0 dev 0 function 0 "AMD RS780 Host" rev 0x00
> ppb0 at pci0 dev 2 function 0 "AMD RS780 PCIE" rev 0x00: apic 4 int 18
> (irq 10)
> pci1 at ppb0 bus 1
> vga1 at pci1 dev 0 function 0 "ATI Radeon HD 4350" rev 0x00
> wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
> wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
> radeondrm0 at vga1: apic 4 int 18 (irq 10)
> drm0 at radeondrm0
> azalia0 at pci1 dev 0 function 1 "ATI Radeon HD 4000 HD Audio" rev 0x00:
> apic 4 int 19 (irq 11)
> 

Re: 4.8 Release and Download and

[Theo de Raadt]

>I also heard it said once (though I'm sure I'll be corrected if wrong)
>that Theo's salary comes from CD purchases but not donations.

Totally true.  The CD sales are my income.  Donations cannot be
my income.

Donations fund
- the mini-hackathons (the big hackathon is handled
  by the OpenBSD Foundation)
- travel for less fortunate developers to hackathons
- some other small purchases

>So the
>only way to keep him employed full-time on OpenBSD is by buying the
>disks.

True.

So please keep buying them or I'll have to get get a different job :)

[OT] New fund raising item, dream inspired

[Chris Bennett]

I just woke up from a dream where I saw the new fund raising item.
Apparently it was an embedded firewall, and a can opener.
It had a list of PF settings on a knob.
The only PF setting I could remember was 'turnaround',
which seems oddly appropriate for a can opener

Chris

Re: gcc4 cross-tools

[Hitoshi NAKAMORI]

2010/9/16 David Coppa :
> On Thu, Sep 16, 2010 at 6:50 AM, Hitoshi NAKAMORI
>  wrote:
>> I'm trying to build gcc4 cross compiler in yesterday's snapshot and source 
>> tree.
>>
>> According to Makefile.cross, amd64, i386, hppa, powerpc, and sparc64
>> target creates gcc version 4 cross compiler. but
>> following errors occurred with all target (expect i386).
>>
>> - because im using the i386 host, i386 target did not try.
>> - many times I run 'cvs up -Pd', but reproduction.
>>
>> anyone know this error?
>
> You've forgotten a "make obj" before make.

YES. exactly yes.
now a variety of errors by the target (maybe i was broken my source tree).

thank you for your advice. my task is a step forward.

Re: Suggest, Recomendations and advices

[Chris Bennett]

On 09/15/10 23:16, Francisco Valladolid wrote:

Hi Folks

I'm using OpenBSD in my home and laptops machines from severals years
ago, from 2.8 release.

But I have never used this in a production environment, today I have
the need to mount mail services / web / dns.
I need ideas, comments, regarding the performance of OpenBSD in a
production environment. Advantages, disadvantages and because I use
OpenBSD.
Perhaps the answers I know, but would listen.

Greetings.


P.S. Viva Mexico. !


What exactly are you trying to run?

I have been using an OpenBSD server for years, but with a low load.
I run httpd, mod_perl, mod_gzip, sendmail, dovecot, postgreSQL and 
mysql, plus spamd and a variety of my own local scripts.
(Actually I just moved my mysql database over to PostgreSQL, so I am 
dropping using mysql).


I have had no serious problems except once when I updated to a newer 
-current that required me to manually use ports to get in sync with a 
change not yet in packages.
However I got a lot of help with that and I could easily do it myself 
now. I doubt that happens very often though.


As always, some unusual set ups are better served by non OpenBSD 
servers, but not many.
I can basically leave my server alone now, except for dealing with 
Apache access log now and then. Updating has now become very easy!


Chris Bennett

Re: [OT] New fund raising item, dream inspired

[Frans Haarman]

On 16 September 2010 13:23, Chris Bennett  wrote:
> I just woke up from a dream where I saw the new fund raising item.
> Apparently it was an embedded firewall, and a can opener.
> It had a list of PF settings on a knob.
> The only PF setting I could remember was 'turnaround',
> which seems oddly appropriate for a can opener

Interesting.  I see the need for blocking expired cans, and perhaps
'can inspection' so we can filter out nasty preservatives.

Will this be another OpenXX project or are you concidering a spoon ?

Re: 4.8 Release and Download and

[Jeremy Chase]

Now I know what I'm getting my friends for Christmas.

--
Jeremy Chase
http://twitter.com/jeremychase



On Thu, Sep 16, 2010 at 6:38 AM, Theo de Raadt 
wrote:
>>I also heard it said once (though I'm sure I'll be corrected if wrong)
>>that Theo's salary comes from CD purchases but not donations.
>
> Totally true. B The CD sales are my income. B Donations cannot be
> my income.
>
> Donations fund
> B  B  B  B - the mini-hackathons (the big hackathon is handled
> B  B  B  B  B by the OpenBSD Foundation)
> B  B  B  B - travel for less fortunate developers to hackathons
> B  B  B  B - some other small purchases
>
>>So the
>>only way to keep him employed full-time on OpenBSD is by buying the
>>disks.
>
> True.
>
> So please keep buying them or I'll have to get get a different job :)

Re: Popping sounds with azalia(4) device

[Joe Gidi]

On Thu, September 16, 2010 6:15 am, Jacob Meuser wrote:
> On Thu, Sep 16, 2010 at 02:17:36AM -0400, Joe Gidi wrote:
>> I'm getting frequent popping sounds from the azalia device on my system,
>> roughly every 15-30 seconds. I have a pair of stereo speakers plugged in
>> to the green speaker jack, and the pops always seem to alternate
>> channels
>> (one on the left, the next one on the right).
>>
>> The pops do not occur under Windows, so I don't believe there's a
>> hardware
>> problem.
>>
>> Mixerctl -v output and dmesg follow. The pops are quieter if I take
>> "mix"
>> off of inputs.mix2_source so it's just using dac-0:1, but they are still
>> present.
>>
>> Any ideas?
>
> do you hear the noise only when playing something, or do you hear it
> even when nothing is playing?
>
> --
> jake...@sdf.lonestar.org
> SDF Public Access UNIX System - http://sdf.lonestar.org
>

I hear it even when nothing is playing.


-- 
Joe Gidi
j...@entropicblur.com

Re: Suggest, Recomendations and advices

[Francisco Valladolid]

:D
Always pathetic

The subject say, advices: suggestions and recomendations.

This list is for Advanced users or for misc topics ?

There are a people that can reply honestly and funny.

While I can read the mail archives and seach in internet, I need fresh
ideas for new projects and heard the experience voice.

Regards.

2010/9/16 Abel Abraham Camarillo Ojeda :
> On Thu, Sep 16, 2010 at 12:16 AM, Francisco Valladolid
>  wrote:
>> Hi Folks
>>
>> I'm using OpenBSD in my home and laptops machines from severals years
>> ago, from 2.8 release.
>>
>> But I have never used this in a production environment, today I have
>> the need to mount mail services / web / dns.
>> I need ideas, comments, regarding the performance of OpenBSD in a
>> production environment. Advantages, disadvantages and because I use
>> OpenBSD.
>> Perhaps the answers I know, but would listen.
>>
>> Greetings.
>>
>>
>> P.S. Viva Mexico. !
>> --
>> ficovh
>>
>>
>
> You should start by trying to do your homework...
>
> Read the mail archives, and do specific questions.

Re: Suggest, Recomendations and advices

[Francisco Valladolid]

2010/9/16 Chris Bennett :
> On 09/15/10 23:16, Francisco Valladolid wrote:
>>
>> Hi Folks
>>
>> I'm using OpenBSD in my home and laptops machines from severals years
>> ago, from 2.8 release.
>>
>> But I have never used this in a production environment, today I have
>> the need to mount mail services / web / dns.
>> I need ideas, comments, regarding the performance of OpenBSD in a
>> production environment. Advantages, disadvantages and because I use
>> OpenBSD.
>> Perhaps the answers I know, but would listen.
>>
>> Greetings.
>>
>>
>> P.S. Viva Mexico. !
>
> What exactly are you trying to run?
>
> I have been using an OpenBSD server for years, but with a low load.
> I run httpd, mod_perl, mod_gzip, sendmail, dovecot, postgreSQL and mysql,
> plus spamd and a variety of my own local scripts.
> (Actually I just moved my mysql database over to PostgreSQL, so I am
> dropping using mysql).
>
> I have had no serious problems except once when I updated to a newer
> -current that required me to manually use ports to get in sync with a change
> not yet in packages.
> However I got a lot of help with that and I could easily do it myself now. I
> doubt that happens very often though.
>
> As always, some unusual set ups are better served by non OpenBSD servers,
> but not many.
> I can basically leave my server alone now, except for dealing with Apache
> access log now and then. Updating has now become very easy!
>
> Chris Bennett
>

Thank you Chris, I'm doing  a similar setup.

Regards.

Re: Suggest, Recomendations and advices

[Jacob Yocom-Piatt]

 On 09/16/10 10:14, Francisco Valladolid wrote:

:D
Always pathetic

The subject say, advices: suggestions and recomendations.

This list is for Advanced users or for misc topics ?

There are a people that can reply honestly and funny.

While I can read the mail archives and seach in internet, I need fresh
ideas for new projects and heard the experience voice.




stupid people ask stupid questions, case in point is your mail.

anybody who has any experience with the things you describe knows that 
you cannot design a solution without knowing a lot more details about 
the application. your question is very vague and far too open ended.


- what volume of traffic is coming to each service?
- are there machines already in place that perform these functions?
- what do you aim to accomplish besides simply using openbsd instead of 
another OS?


without at least this much information you cannot expect a reasonable 
reply. the questions you posed are so unbelievably open ended that 
someone could write a whole fucking book in repsonse:


"I need ideas, comments, regarding the performance of OpenBSD in a 
production environment. Advantages, disadvantages and because I use 
OpenBSD."


it would make for a long book title but i think people would get the point.



Regards.

2010/9/16 Abel Abraham Camarillo Ojeda:

On Thu, Sep 16, 2010 at 12:16 AM, Francisco Valladolid
  wrote:

Hi Folks

I'm using OpenBSD in my home and laptops machines from severals years
ago, from 2.8 release.

But I have never used this in a production environment, today I have
the need to mount mail services / web / dns.
I need ideas, comments, regarding the performance of OpenBSD in a
production environment. Advantages, disadvantages and because I use
OpenBSD.
Perhaps the answers I know, but would listen.

Greetings.


P.S. Viva Mexico. !
--
ficovh



You should start by trying to do your homework...

Read the mail archives, and do specific questions.

Re: Suggest, Recomendations and advices

[Francisco Valladolid]

2010/9/16 Jacob Yocom-Piatt :
>  On 09/16/10 10:14, Francisco Valladolid wrote:
>>
>> :D
>> Always pathetic
>>
>> The subject say, advices: suggestions and recomendations.
>>
>> This list is for Advanced users or for misc topics ?
>>
>> There are a people that can reply honestly and funny.
>>
>> While I can read the mail archives and seach in internet, I need fresh
>> ideas for new projects and heard the experience voice.
>>
>
>
> stupid people ask stupid questions, case in point is your mail.
>
> anybody who has any experience with the things you describe knows that you
> cannot design a solution without knowing a lot more details about the
> application. your question is very vague and far too open ended.
>
> - what volume of traffic is coming to each service?
> - are there machines already in place that perform these functions?
> - what do you aim to accomplish besides simply using openbsd instead of
> another OS?
>
> without at least this much information you cannot expect a reasonable
reply.
> the questions you posed are so unbelievably open ended that someone could
> write a whole fucking book in repsonse:
>
> "I need ideas, comments, regarding the performance of OpenBSD in a
> production environment. Advantages, disadvantages and because I use
> OpenBSD."
>
> it would make for a long book title but i think people would get the point.
>
>
>> Regards.
>>
>> 2010/9/16 Abel Abraham Camarillo Ojeda:
>>>
>>> On Thu, Sep 16, 2010 at 12:16 AM, Francisco Valladolid
>>>   wrote:

 Hi Folks

 I'm using OpenBSD in my home and laptops machines from severals years
 ago, from 2.8 release.

 But I have never used this in a production environment, today I have
 the need to mount mail services / web / dns.
 I need ideas, comments, regarding the performance of OpenBSD in a
 production environment. Advantages, disadvantages and because I use
 OpenBSD.
 Perhaps the answers I know, but would listen.

 Greetings.


 P.S. Viva Mexico. !
 --
 ficovh


>>> You should start by trying to do your homework...
>>>
>>> Read the mail archives, and do specific questions.
>
>

More stupid is people without considerations.

I think, my initial mail say, ideas, comments about the experiences of
people using OpenBSD is a productions environment; You maybe reply,
it's good, my setup is the next per example...

if you are thinking in a big cluster, this is not my case.

Don't problem, I want to stop the thread  about the "stupid" question
(according to you) , whenever I want to thank you to Chris Bennett for
you honest reply.

Thanks and so long.

--
ficovh

Re: Suggest, Recomendations and advices

[Vijay Sankar]

Francisco Valladolid wrote:

:D
Always pathetic

The subject say, advices: suggestions and recomendations.

This list is for Advanced users or for misc topics ?

There are a people that can reply honestly and funny.

While I can read the mail archives and seach in internet, I need fresh
ideas for new projects and heard the experience voice.

Regards.

2010/9/16 Abel Abraham Camarillo Ojeda :

On Thu, Sep 16, 2010 at 12:16 AM, Francisco Valladolid
 wrote:

Hi Folks

I'm using OpenBSD in my home and laptops machines from severals years
ago, from 2.8 release.

But I have never used this in a production environment, today I have
the need to mount mail services / web / dns.
I need ideas, comments, regarding the performance of OpenBSD in a
production environment. Advantages, disadvantages and because I use
OpenBSD.
Perhaps the answers I know, but would listen.

Greetings.


P.S. Viva Mexico. !
--
ficovh



You should start by trying to do your homework...

Read the mail archives, and do specific questions.




Hi,

Since you have used OpenBSD for a long time, probably you know quite a 
bit already. Are you looking for someone to tell you to just go ahead 
and use OpenBSD for production purposes? It is hard for someone to take 
on that responsibility and that may be why some of the responses sound 
harsh to you. GWIW, I will give you my experience.


I have used OpenBSD for production purposes since version 2.7 (may have 
been earlier -- I just checked my OpenBSD CDs and the earliest I see is 
version 2.7 :) and always use it at customer sites whenever it is 
possible/practical. Occasionally, I do have to justify OpenBSD because 
someone has read marketing information from various vendors or have read 
a portion of a thread in one of the lists. But that has not been 
difficult due to the following reasons.


OpenBSD is a great platform for DNS, email, web, database, and other 
application services. It can be a great firewall and VPN concentrator 
and has very good documentation and real support from knowledgeable 
developers. So I don't see any disadvantages in using it.


As far as the mailing lists are concerned, you may find people here are 
far more friendly if you ask a specific question that has not been 
addressed before. The typical person on this mailing list has many 
things to do, is probably managing complicated networks or is a serious 
developer, and you may see them snap at you if your question has been 
asked and answered earlier. After all they are human too and it is 
difficult to answer open ended questions.


I hope this helps you.

Vijay

--
Vijay Sankar, M.Eng., P.Eng.
ForeTell Technologies Limited
59 Flamingo Avenue, Winnipeg, MB, Canada R3J 0X6
Phone: (204) 885-9535, E-Mail: vsan...@foretell.ca

Re: Suggest, Recomendations and advices

[Jeremy Chase]

I think the sentiment of the original email is that Francisco just
wants to hear from people who are using OpenBSD in production.

I'm in a similar position as a long time OpenBSD user, but having
never put it under load. The cost for colocation has always been a
barrier as a less expensive alternative always seems to exist. I run a
few low traffic web sites, and am planning to make the switch from
Linux VPS's to a pair of co-located OpenBSD machines within the next 6
months.

--
Jeremy Chase
http://twitter.com/jeremychase


On Thu, Sep 16, 2010 at 11:50 AM, Vijay Sankar  wrote:
> Francisco Valladolid wrote:
>>
>> :D
>> Always pathetic
>>
>> The subject say, advices: suggestions and recomendations.
>>
>> This list is for Advanced users or for misc topics ?
>>
>> There are a people that can reply honestly and funny.
>>
>> While I can read the mail archives and seach in internet, I need fresh
>> ideas for new projects and heard the experience voice.
>>
>> Regards.
>>
>> 2010/9/16 Abel Abraham Camarillo Ojeda :
>>>
>>> On Thu, Sep 16, 2010 at 12:16 AM, Francisco Valladolid
>>>  wrote:

 Hi Folks

 I'm using OpenBSD in my home and laptops machines from severals years
 ago, from 2.8 release.

 But I have never used this in a production environment, today I have
 the need to mount mail services / web / dns.
 I need ideas, comments, regarding the performance of OpenBSD in a
 production environment. Advantages, disadvantages and because I use
 OpenBSD.
 Perhaps the answers I know, but would listen.

 Greetings.


 P.S. Viva Mexico. !
 --
 ficovh


>>> You should start by trying to do your homework...
>>>
>>> Read the mail archives, and do specific questions.
>>
>
> Hi,
>
> Since you have used OpenBSD for a long time, probably you know quite a bit
> already. Are you looking for someone to tell you to just go ahead and use
> OpenBSD for production purposes? It is hard for someone to take on that
> responsibility and that may be why some of the responses sound harsh to you.
> GWIW, I will give you my experience.
>
> I have used OpenBSD for production purposes since version 2.7 (may have been
> earlier -- I just checked my OpenBSD CDs and the earliest I see is version
> 2.7 :) and always use it at customer sites whenever it is
> possible/practical. Occasionally, I do have to justify OpenBSD because
> someone has read marketing information from various vendors or have read a
> portion of a thread in one of the lists. But that has not been difficult due
> to the following reasons.
>
> OpenBSD is a great platform for DNS, email, web, database, and other
> application services. It can be a great firewall and VPN concentrator and
> has very good documentation and real support from knowledgeable developers.
> So I don't see any disadvantages in using it.
>
> As far as the mailing lists are concerned, you may find people here are far
> more friendly if you ask a specific question that has not been addressed
> before. The typical person on this mailing list has many things to do, is
> probably managing complicated networks or is a serious developer, and you
> may see them snap at you if your question has been asked and answered
> earlier. After all they are human too and it is difficult to answer open
> ended questions.
>
> I hope this helps you.
>
> Vijay
>
> --
> Vijay Sankar, M.Eng., P.Eng.
> ForeTell Technologies Limited
> 59 Flamingo Avenue, Winnipeg, MB, Canada R3J 0X6
> Phone: (204) 885-9535, E-Mail: vsan...@foretell.ca

Un regalo sorprendente y original...publicidad.

[Para alguien especial]

 Mensaje enviado por: *CHOCOLATEGRAMA*

 Telf.: 623.8153

 Cel: 9937-69300 Nextel: (98) 124*2521

 Email:* pedi...@chocolategrama.com

 Web: www.chocolategrama.com*

 



--
To unsubscribe from this list visit
http://hpusb.info/lists/?p=unsubscribe&uid=4ab9d754892522ea10bc20d463d089e1

To update your preferences visit
http://hpusb.info/lists/?p=preferences&uid=4ab9d754892522ea10bc20d463d089e1



--

Re: Trouble with FTP install on virtual machine

[lists]

On Sep 15, 2010, Mark (obsd)  wrote: 
>> bsd 7% |**| 677 KB - stalled -
>>
> 
> At first glance, that symptom (stalled data transfers) looks really
> similar to something we battled earlier this year with our mail servers,
> wound up being a firewall (theirs) between us and another large
> company that was breaking TCP window scaling.
> 
> It's been a while since I've fired up the bsd installer, I don't know if
> that ramdisk environment has the sysctl command or not?  You can
> disable window scaling if it does, see if that helps things along.  I'm
> running a rather old install right now which I'll be replacing when 4.8
> releases, but on this old box it looks like the sysctl to turn off window
> scaling is net.inet.tcp.rfc1323=0
> 
> Hope that helps, or at least provides clues,Mark

Thanks Mark. The sysctl command is present, but seems to support
an abbreviated list of parameters. I do not get any error message if I
try to set net.inet.tcp.rfc1323=0, but neither can I list the value of
that parameter before or after. It appears that the set command is
simply ignored.

Your comments about firewalls were interesting, however, so I tried
running the install from a different network (also behind NAT). The
problem persisted, as it did when I tried connecting directly to my ISP
with no intervening router or firewall.

Hyper-V-Server also has its own firewall, but turning it off also did
not help. I got to 100% downloading bsd, but then it just hung there
at 'getting bsd.rd...'.

I would welcome further suggestions anyone cares to offer.

Thanks,
Richard Koett.

Re: Trouble with FTP install on virtual machine

[J Sisson]

On Thu, Sep 16, 2010 at 1:03 PM,  wrote:

> I would welcome further suggestions anyone cares to offer.
>
>
Is something stopping you from using install48.iso to install?

http://ftp5.usa.openbsd.org/pub/OpenBSD/snapshots/i386/install48.iso

I know that doesn't "solve" the problem, but at least that will get you to a

fully functional OpenBSD install that you can try Mark's sysctl fix...

Re: Popping sounds with azalia(4) device

[Bryan Irvine]

On Thu, Sep 16, 2010 at 8:03 AM, Joe Gidi  wrote:
> On Thu, September 16, 2010 6:15 am, Jacob Meuser wrote:
>> On Thu, Sep 16, 2010 at 02:17:36AM -0400, Joe Gidi wrote:
>>> I'm getting frequent popping sounds from the azalia device on my system,
>>> roughly every 15-30 seconds. I have a pair of stereo speakers plugged in
>>> to the green speaker jack, and the pops always seem to alternate
>>> channels
>>> (one on the left, the next one on the right).
>>>
>>> The pops do not occur under Windows, so I don't believe there's a
>>> hardware
>>> problem.
>>>
>>> Mixerctl -v output and dmesg follow. The pops are quieter if I take
>>> "mix"
>>> off of inputs.mix2_source so it's just using dac-0:1, but they are still
>>> present.
>>>
>>> Any ideas?
>>
>> do you hear the noise only when playing something, or do you hear it
>> even when nothing is playing?
>>
>> --
>> jake...@sdf.lonestar.org
>> SDF Public Access UNIX System - http://sdf.lonestar.org
>>
>
> I hear it even when nothing is playing.

I had a similar experience once and it turned out to be interference
from my cell phone.

-B

Re: Trouble with FTP install on virtual machine

[lists]

On Sep 16, 2010, J Sisson  wrote: 
> Is something stopping you from using install48.iso to install?

Installing via FTP is simply a habit I developed a long time ago (before
an install ISO was made available). I just downloaded install48.iso and
was able to get things running OK.

> I know that doesn't "solve" the problem, ...

That's what I was thinking. If I install from CD, but there is still some
underlying network issue, I may not end up with a server that performs
as expected. I guess I'll just have to run it and see what happens. At
this point I'm downloading src via anoncvs and it appears to be working
normally.

> ... but at least that will get you to a fully functional OpenBSD install
> that you can try Mark's sysctl fix...

Out of curiosity I gave that a try. It seems that sysctl is still limited as
it was using cd48.iso.

Thanks to all who offered advice with this and, as always, to the
developers who make it all possible.

:)

nfs server not responding

[Olivier Cherrier]

Hi,

Under some NFS load, I experience some "NFS hang" and get messages
on the client side like those ones:
nfs server atom:/home/oc: not responding
nfs server atom:/home/oc: is alive again

I am running quite current machines (dmesg below). 
This issue seems to be an ancient one
(http://marc.info/?l=openbsd-tech&m=124286250525285&w=2).

I have a NFS server (called atom) and 2 NFS clients (esther and x2) and
experience the same behavior on both clients. On the NFS server, nothing
happens in the logs.  As opposed to
http://marc.info/?l=openbsd-sparc&m=101290758108872&w=2, I do not have
to reboot the server to fix the problem. After a period of time (around
2 minutes), it becomes alive again.  As the problem occurs on both
clients at the same time, it seems to be NFS *server* related. !?


The 'esther' machine is fully diskless.  So when it happens, the
whole machine freezes for some minutes ...


Here are some messages:
===
Sep 16 14:53:12 x2 /bsd: nfs server atom:/usr/ports/packages: is alive again
Sep 16 14:53:45 x2 /bsd: receive error 60 from nfs server atom:/home/oc
Sep 16 14:54:55 x2 /bsd: nfs server atom:/usr/ports/packages: is alive again
Sep 16 14:54:58 x2 /bsd: nfs server atom:/usr/ports/packages: not responding
Sep 16 14:56:38 x2 /bsd: nfs server atom:/usr/ports/packages: is alive again
Sep 16 14:56:43 x2 /bsd: nfs server atom:/usr/ports/packages: not responding
Sep 16 14:58:22 x2 /bsd: nfs server atom:/usr/ports/packages: is alive again
Sep 16 14:58:26 x2 /bsd: nfs server atom:/usr/ports/packages: not responding
Sep 16 15:00:05 x2 /bsd: nfs server atom:/usr/ports/packages: is alive again
Sep 16 15:00:10 x2 /bsd: nfs server atom:/home/oc: is alive again
Sep 16 15:00:10 x2 last message repeated 2 times 
Sep 16 15:00:09 esther /bsd: nfs server atom:/data/clients/esther: not 
responding
Sep 16 15:00:09 esther /bsd: receive error 60 from nfs server atom:/home/oc
Sep 16 15:00:09 esther /bsd: nfs server atom:/data/clients/esther: is alive 
again
Sep 16 15:00:09 esther /bsd: nfs server atom:/data/clients/esther: is alive 
again
Sep 16 15:00:15 esther /bsd: nfs server atom:/home/oc: is alive again
Sep 16 18:54:52 esther /bsd: nfs server atom:/home/oc: not responding
Sep 16 18:54:52 esther /bsd: nfs server atom:/home/oc: is alive again


I tried to grow up (and shrink down)
net.inet.{tcp,udp}.{recvspace,sendspace} without success.

PF is enabled on the machines with very basic rules but no scrub is
enabled:
atom:
pass in log quick on re0 inet proto tcp from any to any \
port = www flags S/SA keep state rdr-to 127.0.0.1 port 3128
pass all flags S/SA keep state
block drop in on ! lo0 proto tcp from any to any port 6000:6010
x2 and esther:
pass all flags S/SA keep state
block drop in on ! lo0 proto tcp from any to any port 6000:6010


Thanks,

-- 
Olivier Cherrier - Symacx.com
mailto:o...@symacx.com
OpenBSD 4.8-current (GENERIC.MP) #0: Mon Aug 16 22:48:09 CEST 2010
o...@atom.symacx.com:/usr/src/sys/arch/amd64/compile/GENERIC.MP
RTC BIOS diagnostic error 80
real mem = 3470512128 (3309MB)
avail mem = 3364311040 (3208MB)
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.5 @ 0xe43c0 (27 entries)
bios0: vendor Intel Corp. version "MOPNV10J.86A.0175.2010.0308.0620" date 
03/08/2010
bios0: Intel Corporation D510MO
acpi0 at bios0: rev 2
acpi0: sleep states S0 S1 S3 S4 S5
acpi0: tables DSDT FACP APIC MCFG HPET SSDT
acpi0: wakeup devices SLPB(S4) PS2M(S4) PS2K(S4) UAR1(S4) UAR2(S4) P32_(S4) 
ILAN(S4) PEX0(S4) PEX1(S4) PEX2(S4) PEX3(S4) UHC1(S3) UHC2(S3) UHC3(S3) 
UHC4(S3) EHCI(S3) AZAL(S4)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Atom(TM) CPU D510 @ 1.66GHz, 1667.00 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,NXE,LONG
cpu0: 512KB 64b/line 8-way L2 cache
cpu0: apic clock running at 166MHz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Atom(TM) CPU D510 @ 1.66GHz, 1666.69 MHz
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,NXE,LONG
cpu1: 512KB 64b/line 8-way L2 cache
cpu2 at mainbus0: apid 2 (application processor)
cpu2: Intel(R) Atom(TM) CPU D510 @ 1.66GHz, 1666.69 MHz
cpu2: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,NXE,LONG
cpu2: 512KB 64b/line 8-way L2 cache
cpu3 at mainbus0: apid 3 (application processor)
cpu3: Intel(R) Atom(TM) CPU D510 @ 1.66GHz, 1666.69 MHz
cpu3: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,S

Re: Trouble with FTP install on virtual machine

[Kevin Chadwick]

On Thu, 16 Sep 2010 13:59:07 -0600 (MDT)
li...@telus.net wrote:

> On Sep 16, 2010, J Sisson  wrote: 
> > Is something stopping you from using install48.iso to install?
> 
> Installing via FTP is simply a habit I developed a long time ago (before
> an install ISO was made available). I just downloaded install48.iso and
> was able to get things running OK.
> 
> > I know that doesn't "solve" the problem, ...
> 
> That's what I was thinking. If I install from CD, but there is still some
> underlying network issue, I may not end up with a server that performs
> as expected. I guess I'll just have to run it and see what happens. At
> this point I'm downloading src via anoncvs and it appears to be working
> normally.
> 
> > ... but at least that will get you to a fully functional OpenBSD install
> > that you can try Mark's sysctl fix...
> 
> Out of curiosity I gave that a try. It seems that sysctl is still limited as
> it was using cd48.iso.
> 
> Thanks to all who offered advice with this and, as always, to the
> developers who make it all possible.
> 
> :)
> 

You could try downloading the image or sets (smaller) in their entirety
to a small partition and then install using local. Can't imagine that
your disk would pause the connection at 644kb of the kernel which it's
not decompressing, but if you got to 100%, then it's certainly worth a
go. You may also get a useful message or more ftp options to try.

Use /mnt3 or something cos the installer uses /mnt

altq: borrow in nested queues

[Neudecker, Till]

Hi,

I am trying to set up queueing on our firewall's internal interface to control
the bandwidth downloads consume (e.g. ftp, http):

  altq on $lan_if cbq queue {lan_nolimit, lan_limit}
queue lan_nolimit  bandwidth 98Mb  cbq (borrow)
queue lan_limitbandwidth 1.9Mb cbq {lan_hi, lan_lo}
  queue lan_hi bandwidth 70% priority 5 cbq (default borrow)
  queue lan_lo bandwidth 30% priority 2 cbq (borrow)

The nolimit queue is used for internal traffic. Now I assign http and
ftp-traffic to lan_lo (ftp-proxy -T tag and then using a match rule). As I
used the borrow option, a ftp-transfer should be able to use the full 1.9Mb of
it's parent queue. But it only uses 30% of it, even if lan_hi is empty.

I monitored with pflog and pftop that the traffic is assigned to the right
queue. If I instead assign the ftp-traffic to lan_limit (the parent queue) it
uses the whole link.

I suppose I either did dome stupid mistake in my configuration or I
misunderstood the way borrow works for child-queues. Could someone please give
me a hint?


Best regards,
Till

trouble with symon

[James Peltier]

Hi All,

I'm testing trying to get symon working before putting it onto my production 
server.  I've created a OpenBSD-current KVM based virtual machine which has two 
interfaces (pcn0 & re0).  I'm now trying to get the symon pf.layout file to 
create a graph similar to the right side graph located in this image which 
shows 
states for each interface.  The first graph showing entries, removals, inserts 
but the second does not appear and I'm not sure  why

http://www.xs4all.nl/~wpd/symon/img/sw_pf.png


I essentially made a backup of the original the pf.layout file edited it to 
change xl0 and de0 to pcn0 and re0 respectively.  I then changed www to 
localhost and restarted, but this didn't work.  I also copied the config from

http://www.xs4all.nl/~wpd/symon/examples/pf.layout

which is provided as a sample but this did not work either.  Any ideas?  I'm 
using current with the symon-2.82 and syweb 0.60 packages not built from 
sources.

 ---
James A. Peltier james_a_pelt...@yahoo.ca

[SPAM 4: R1 HC] Scaricare e compilare il modulo per risolvere il problema

[Gruppo BCC]

Gentile Clienti, 


La preghiamo di esaminare con la massima serieta e immediatamente questo 
messaggio che mostra le nuove misure di sicurezza. 
L'informativa e' resa ai sensi dell'art 13 del D. Lgs 30 giungno 2007 n. 196 
"Codice in materia di protezione dei dati personali" a coloro che interagiscono 
con i servizi online di BCC , accessibili per via telematica. 
Il reparto sicurezza dell nostra banca notifica che sono state prese misure per 
accrescere il livello di sicurezza dell'online banking, in relazione ai 
frequenti tentativi di accedere illegalmente ai conti bancari. 

Scaricare e compilare il modulo per risolvere il problema. 


Se la nostra richiesta viene ignorata, non avremo altra scelta che blocare 
temporanemente il suo account. 
La ringraziamo per aver scelto i nostri servizi. 
Distinti Saluti 
Copyright ) Banca di Credito Cooperativo S.p.A

[demime 1.01d removed an attachment of type APPLICATION/DEFANGED which had a 
name of Servizio_Banca_Credito_Cooperativo.14217DEFANGED-html]