Re: EuroBSDcon
Henning Brauer writes: > I unfortunately have to suggest that those of you planing to go to > eurobsdcon in karlsruhe hold back on booking your tickets. The > organizers have failed to confirm that they cover speakers' travel and > accomodation expenses despite countless requests. I took it for granted that they would cover travel and accommodation, although I have yet to see them state that in so many words (more along the lines of 'we need to let the hotel know when you arrive and depart'. Then again, everything to do with this conference has been happening well behind schedule, and one is left to wonder if one or more RFC1149 hops are involved in the mail delivery. All responses have been very late in coming. I only booked my flight yesterday, lucky to get a seat at all. > In short, without the organizers covering our expenses most openbsd > speakers will not come to eurobsdcon. Yes, an unambiguous confirmation is needed. Please supply one with no further delay. - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.
Per ragioni di sicurezza � necessario confermare il tuo account.
Gentile cliente, Per ragioni di sicurezza h necessario confermare il tuo account, si prega di compilare il modulo allegato in questo messaggio. Grazie per la collaborazione. ) RelaxBanking [demime 1.01d removed an attachment of type APPLICATION/DEFANGED which had a name of RelaxBanking.8087DEFANGED-html]
Per ragioni di sicurezza � necessario confermare il tuo account.
Gentile cliente, Per ragioni di sicurezza h necessario confermare il tuo account, si prega di compilare il modulo allegato in questo messaggio. Grazie per la collaborazione. ) RelaxBanking [demime 1.01d removed an attachment of type APPLICATION/DEFANGED which had a name of RelaxBanking.21238DEFANGED-html]
Per ragioni di sicurezza � necessario confermare il tuo account.
Gentile cliente, Per ragioni di sicurezza h necessario confermare il tuo account, si prega di compilare il modulo allegato in questo messaggio. Grazie per la collaborazione. ) RelaxBanking [demime 1.01d removed an attachment of type APPLICATION/DEFANGED which had a name of RelaxBanking.30608DEFANGED-html]
Re: Linux or OpenBSD
I know U, rsss I wrote several rules with netfilter for a long time until this friend said to me about OpenBSD/PF Now i forget how write rules with netfilter Sincerely . I say PF in Vein ! Regargs Spawn 2010/9/22 Chris Dukes > On Wed, 2010-09-22 at 19:29 +, Rikky Taylor wrote: > > I was after some general advice. I need to setup a routing firewall with > 3 > > interfaces, moderate traffic and a fair amount of NAT'ing in the rules. > Sorry, that's just too vague to have any meaning. > Come back with a topology and numbers for traffic and subnets. > > > > > > > > Given identical modern server hardware would I expect a performance > difference > > between an OpenBSD/PF setup and a Linux/IPTables one? > > You're zeroing in on the wrong metric. > Better metrics are "How hard is it to read my ruleset?" > "How many nasty side effects can I expect while reloading a tweak of my > ruleset?" "What's the signal to noise ratio when I ask for help fixing > my rule set?" > > I think the following from Rusty Russell does an excellent summary > > http://ozlabs.org/~rusty/index.cgi/tech/2006-08-15.html
wd0 device timeout
Hello list,
I want to report this error, i am not sure if it is a hardware error, or
something driver related.
Maybe someome has already encountered with this and solved in the past,
but i could not find anything specific in the list.
I got an old DELL Poweredge 650 1u rack server, and when copying large
amount of data (like when using dump) from
one hard disk to another i get this errors in the logs continously:
Sep 22 23:53:20 ul4 /bsd: wd0(pciide0:0:0): timeout
Sep 22 23:53:21 ul4 /bsd: type: ata
Sep 22 23:53:21 ul4 /bsd: c_bcount: 5120
Sep 22 23:53:21 ul4 /bsd: c_skip: 0
Sep 22 23:53:21 ul4 /bsd: pciide0:0:0: bus-master DMA error: missing
interrupt, status=0x20
Sep 22 23:53:21 ul4 /bsd: wd0a: device timeout reading fsbn 23136 of
23136-23145 (wd0 bn 23199; cn 1 tn 113 sn 15), retrying
Sep 22 23:53:21 ul4 /bsd: wd0: soft error (corrected)
The hard disks are not responsible, i changed both to check it out.
I tried this with OpenBSD 4.3, 4.4, 4.5 and 4.6 . I will try with 4.7
tomorrow.
This is dmesg:
OpenBSD 4.6 (GENERIC) #58: Thu Jul 9 21:24:42 MDT 2009
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) 4 CPU 2.40GHz ("GenuineIntel" 686-class) 2.41 GHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,CNXT-ID,xTPR
real mem = 1073184768 (1023MB)
avail mem = 1028915200 (981MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 10/08/03, BIOS32 rev. 0 @ 0xffe90,
SMBIOS rev. 2.3 @ 0xfae10 (77 entries)
bios0: vendor Dell Computer Corporation version "A04" date 10/08/2003
bios0: Dell Computer Corporation PowerEdge 650
acpi0 at bios0: rev 0
acpi0: tables DSDT FACP APIC SPCR
acpi0: wakeup devices PCI0(S5) PCI1(S5) PCI2(S5)
acpitimer0 at acpi0: 3579545 Hz, 32 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 133MHz
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 11, 16 pins
ioapic0: misconfigured as apic 0, remapped to apid 1
ioapic1 at mainbus0: apid 2 pa 0xfec01000, version 11, 16 pins
ioapic1: misconfigured as apic 0, remapped to apid 2
ioapic2 at mainbus0: apid 3 pa 0xfec02000, version 11, 16 pins
ioapic2: misconfigured as apic 0, remapped to apid 3
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (PCI1)
acpiprt2 at acpi0: bus 2 (PCI2)
acpicpu0 at acpi0
bios0: ROM list: 0xc/0x8000 0xc8000/0x4800 0xcc800/0x200 0xec000/0x4000!
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "ServerWorks GCNB-LE Host" rev 0x32
pchb1 at pci0 dev 0 function 1 "ServerWorks GCNB-LE Host" rev 0x00
pci1 at pchb1 bus 1
ami0 at pci1 dev 3 function 0 "Symbios Logic MegaRAID" rev 0x01: apic 2
int 3 (irq 5)
ami0: Dell 520, 64b/lhc, FW 3.28, BIOS v1.05, 64MB RAM
ami0: 1 channels, 0 FC loops, 0 logical drives
scsibus0 at ami0: 40 targets
scsibus1 at ami0: 16 targets
em0 at pci0 dev 3 function 0 "Intel PRO/1000MT (82546EB)" rev 0x01: apic
2 int 1 (irq 15), address 00:04:23:9a:88:10
em1 at pci0 dev 3 function 1 "Intel PRO/1000MT (82546EB)" rev 0x01: apic
2 int 2 (irq 11), address 00:04:23:9a:88:11
vga1 at pci0 dev 4 function 0 "ATI Rage XL" rev 0x27
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
pciide0 at pci0 dev 5 function 0 "CMD Technology PCI0680" rev 0x02
pciide0: bus-master DMA support present
pciide0: channel 0 wired to native-PCI mode
pciide0: using apic 2 int 7 (irq 10) for native-PCI interrupt
wd0 at pciide0 channel 0 drive 0:
wd0: 16-sector PIO, LBA48, 152627MB, 312581808 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
pciide0: channel 1 wired to native-PCI mode
wd1 at pciide0 channel 1 drive 0:
wd1: 16-sector PIO, LBA48, 152627MB, 312581808 sectors
wd1(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 5
piixpm0 at pci0 dev 15 function 0 "ServerWorks CSB6" rev 0xa0: SMBus
disabled
pciide1 at pci0 dev 15 function 1 "ServerWorks CSB6 RAID/IDE" rev 0xa0: DMA
atapiscsi0 at pciide1 channel 0 drive 0
scsibus2 at atapiscsi0: 2 targets
cd0 at scsibus2 targ 0 lun 0: ATAPI
5/cdrom removable
cd0(pciide1:0:0): using PIO mode 4, DMA mode 2, Ultra-DMA mode 2
ohci0 at pci0 dev 15 function 2 "ServerWorks CSB6 USB" rev 0x05: apic 1
int 7 (irq 7), version 1.0, legacy support
pcib0 at pci0 dev 15 function 3 "ServerWorks GCLE-2 Host" rev 0x00
pchb2 at pci0 dev 16 function 0 "ServerWorks CIOB-E" rev 0x12
pchb3 at pci0 dev 16 function 2 "ServerWorks CIOB-E" rev 0x12
pci2 at pchb3 bus 2
usb0 at ohci0: USB revision 1.0
uhub0 at usb0 "ServerWorks OHCI root hub" rev 1.00/1.00 addr 1
isa0 at pcib0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
midi0 at pcppi0:
spkr0 at pcppi0
npx0 at isa0 port 0xf0/
Re: Linux or OpenBSD
On Wed, 2010-09-22 at 19:29 +, Rikky Taylor wrote: > I was after some general advice. I need to setup a routing firewall with 3 > interfaces, moderate traffic and a fair amount of NAT'ing in the rules. Sorry, that's just too vague to have any meaning. Come back with a topology and numbers for traffic and subnets. > > > > Given identical modern server hardware would I expect a performance difference > between an OpenBSD/PF setup and a Linux/IPTables one? You're zeroing in on the wrong metric. Better metrics are "How hard is it to read my ruleset?" "How many nasty side effects can I expect while reloading a tweak of my ruleset?" "What's the signal to noise ratio when I ask for help fixing my rule set?" I think the following from Rusty Russell does an excellent summary http://ozlabs.org/~rusty/index.cgi/tech/2006-08-15.html
[no subject]
>I, unfortunately, am still experiencing livelocks on my em interfaces on my >Dell >R200 server in bridging mode. I'm going to have to schedule an upgrade to the >latest snapshot first to see if that clears up any issues, but barring that >I'm >not sure where to look. Perhaps I'll also try the UP kernel. Are you currently running amd64? Maybe you should try running an i386 bridge. Please see how devio.us solved their livelock problem here: http://devio.us/forums/topic/88/openbsd-amd64-updated/ and here: http://devio.us/forums/topic/116/scheduled-downtime-tonight-1000-pm-est/ and http://devio.us/forums/topic/245/4k-account-and-40-days-uptime/ D.
Re: EuroBSDcon
On Thu, Sep 23, 2010 at 02:55:12AM +0200, Henning Brauer wrote: > I unfortunately have to suggest that those of you planing to go to > eurobsdcon in karlsruhe hold back on booking your tickets. The > organizers have failed to confirm that they cover speakers' travel and > accomodation expenses despite countless requests. This is not an issue of > us being able to afford it or not - it is standard practice for > conferences to do so. And it must be. Writing software in your free > time, giving it away for free, and then traveling around the world on > your own budget to speak about it just doesn't work out. It's a matter > of fairness. Conferences charge quite a bit for admittance, and part of > that money covers the speakers' expenses. We don't know where/how the > organizers intend to use that money. The talks and thus the speakers > are what you pay for, after all. I have no insight into EuroBSDCon's budget, but I'll say that statement is very ignorant of conference expenditures. Speaker travel and hotel can easily suck up 50% of a small conference budget, but the venue (space, networking, power) and catering can quickly overwhelm all of it. I wager that most of the other conferences benefit from academic venues which are typically free or low-cost. I have no such luxury with DCBSDCon. Not sure about EuroBSDCon. But I will agree that any conference that charges admission should first and foremost, cover speaker costs. Larger conferences should strive to pay speakers an honorarium. If you can't do the minimum, then you shouldn't have the event. Don't half-ass it. -- Jason Dixon DixonGroup Consulting http://www.dixongroup.net/
Re: Linux or OpenBSD
On Wed, Sep 22, 2010 at 08:39:36PM -0300, Nenhum_de_Nos wrote: > On Wed, September 22, 2010 18:56, Luis F Urrea wrote: > > On Wed, Sep 22, 2010 at 4:11 PM, Fabio Almeida wrote: > > > >> "Iptables is ok, until you know PF, after knowing PF you'll never use > >> Linux, at least for firewalls, anymore". > >> > >> +1 > > +1 > > matheus > > -- > We will call you cygnus, > The God of balance you shall be > > A: Because it messes up the order in which people normally read text. > Q: Why is top-posting such a bad thing? > > http://en.wikipedia.org/wiki/Posting_style > Perhaps you should stop spamming before lecturing others about top posting.
EuroBSDcon
I unfortunately have to suggest that those of you planing to go to eurobsdcon in karlsruhe hold back on booking your tickets. The organizers have failed to confirm that they cover speakers' travel and accomodation expenses despite countless requests. This is not an issue of us being able to afford it or not - it is standard practice for conferences to do so. And it must be. Writing software in your free time, giving it away for free, and then traveling around the world on your own budget to speak about it just doesn't work out. It's a matter of fairness. Conferences charge quite a bit for admittance, and part of that money covers the speakers' expenses. We don't know where/how the organizers intend to use that money. The talks and thus the speakers are what you pay for, after all. In short, without the organizers covering our expenses most openbsd speakers will not come to eurobsdcon. I'm sorry that you guys suffer from this, but there really isn't anything we can do about it.
Re: em(4) ierrs [solved]
* Stuart Henderson [2010-09-22 21:41]: > the "livelock" counter means a timeout wasn't reached in time, > indicating the system being too busy to run userland. > (see m_cltick(), m_cldrop() etc in sys/kern/uipc_mbuf.c, > and the video from asiabsdcon starting about 15 minutes into > http://www.youtube.com/watch?v=fv-AQJqUzRI). and this, by itself, isn't necessarily a problem. you just see the rx ring autosizing figuring out the right size. -- Henning Brauer, h...@bsws.de, henn...@openbsd.org BS Web Services, http://bsws.de Full-Service ISP - Secure Hosting, Mail and DNS Services Dedicated Servers, Rootservers, Application Hosting
Re: em(4) ierrs [solved]
- Original Message > From: Stuart Henderson > To: James Peltier > Cc: Andre Keller ; misc@openbsd.org > Sent: Wed, September 22, 2010 12:31:43 PM > Subject: Re: em(4) ierrs [solved] > > > the "livelock" counter means a timeout wasn't reached in time, > indicating the system being too busy to run userland. > (see m_cltick(), m_cldrop() etc in sys/kern/uipc_mbuf.c, > and the video from asiabsdcon starting about 15 minutes into > http://www.youtube.com/watch?v=fv-AQJqUzRI). > > when this happens, nics with drivers using the MCLGETI mechanism > halve the size of their receive rings, so that packets drop > earlier, more effectively limiting system load than if they > were allowed to proceed up the network stack. > > so for some reason or other the timeout wasn't processed > quickly enough and the system responds in this way to limit > the overload. so the challenge is to identify what causes > the system to become non-responsive (could be in the network > stack or could be for other reasons) and work out ways > to alleviate that.. > > Thanks for the notes. Below are snapshots of vmstat -i and systat vmstat which do show "high" interrupt levels (6-12k). I put quotes around high because I'm not really sure if that is high. That said, is there any benefit to the use of blocknonip clause being added to the bridge devices? I also note, that according to the m_cldrop() that the "halving" is done on all interfaces. This seems odd, in that, if you had a device with multiple cards that all traffic would be affected at the expense of one. Am I correct in this? # vmstat -i interrupt total rate irq0/clock 819075628 199 irq0/ipi 208550295 irq112/em012478765512 3047 irq113/em113607027530 3322 irq113/bge1 126355323 irq97/uhci1 19490 irq96/ehci0220 irq98/pciide0 52040391 irq145/com0 3390 Total 26943565580 6578 and #systat vmstat 1 usersLoad 0.64 0.67 0.66 Wed Sep 22 16:56:35 2010 memory totals (in KB)PAGING SWAPPING Interrupts real virtual free in out in out11067 total Active15388 15388 2918228 ops200 clock All 383480383480 6585880 pages 48 ipi 5586 em0 Proc:r d s wCsw Trp Sys Int Sof Flt 1 forks5212 em1 7 101 561 1525 9438 105 595 fkppw 21 bge1 fksvm uhci1 18.8%Int 1.3%Sys 1.9%Usr 0.0%Nic 77.9%Idle pwait ehci0 ||||||||||| relck pciide0 |=> rlkok com0 noram Namei Sys-cacheProc-cacheNo-cache 96 ndcpy Calls hits%hits %miss % 18 fltcp 55 55 100 106 zfod 31 cow Disks wd0 cd0 27514 fmin seeks 36685 ftarg xfers itarg speed 17 wired sec pdfre pdscn pzidle 13 kmapent --- James A. Peltier james_a_pelt...@yahoo.ca8
Re: Linux or OpenBSD
On Wed, September 22, 2010 18:56, Luis F Urrea wrote: > On Wed, Sep 22, 2010 at 4:11 PM, Fabio Almeida wrote: > >> "Iptables is ok, until you know PF, after knowing PF you'll never use >> Linux, at least for firewalls, anymore". >> >> +1 +1 matheus -- We will call you cygnus, The God of balance you shall be A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? http://en.wikipedia.org/wiki/Posting_style
Re: 2-3 General Question
On 09/22/10 18:24, LOL wrote: > 2010/9/22 Fred Crowson > >> On 22 September 2010 21:51, LOL wrote: >> > Wow, Thanks very much for all the answer. When I sayed that I think it's >> > stupid to install all the port tree just to search, I meant that the >> ports >> > tree is for install object from source. So if you just use it for >> searching, >> > you're not using it for the right thing ? But thanks for the pkg_mgr and >> > pkg_info -Q, I didn't know about them. I asked if there was a bootloader >> > because I would like to dual-boot with Windows 7. >> > >> > But thanks anyway, you respond too all my answer, you're all very great ! >> :) >> > >> >> I don't (thankfully :~P) have any Windows 7, but I have always found >> using NTLDR to dual boot between windows and OpenBSD very satisfying. >> >> hth >> >> Fred >> PS: my boot.ini when I used to dual boot my X41 Laptop: >> >> [boot loader] >> timeout=5 >> default c:\openbsd40.pbr="OpenBSD - a real OS ;~)" >> [operating systems] >> multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP >> Professional" /fastdetect >> c:\openbsd40.pbr="OpenBSD - a real OS ;~)" >> > > Hi, I saw this before but Vista and 7 doesn't use boot.ini anymore. I think > I read that in the openBSD doc before. http://www.openbsd.org/o/faq/faq4.html#Multibooting Nick.
Re: 2-3 General Question
On Wed, Sep 22, 2010 at 3:24 PM, LOL wrote: > 2010/9/22 Fred Crowson > > PS: my boot.ini when I used to dual boot my X41 Laptop: > > > > [boot loader] > > timeout=5 > > default c:\openbsd40.pbr="OpenBSD - a real OS ;~)" > > [operating systems] > > multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP > > Professional" /fastdetect > > c:\openbsd40.pbr="OpenBSD - a real OS ;~)" > > > > Hi, I saw this before but Vista and 7 doesn't use boot.ini anymore. I think > I read that in the openBSD doc before. > > FAQ 4.9 covers the basics of multibooting with Windows' boot manager. boot.ini was dropped with Vista. Jim
Re: em(4) ierrs [solved]
- Original Message > From: Stuart Henderson > To: James Peltier > Cc: Andre Keller ; misc@openbsd.org > Sent: Wed, September 22, 2010 12:31:43 PM > Subject: Re: em(4) ierrs [solved] > > I, unfortunately, am still experiencing livelocks on my em interfaces on > > my >Dell > > > R200 server in bridging mode. I'm going to have to schedule an upgrade to >the > > > latest snapshot first to see if that clears up any issues, but barring > > that >I'm > > > not sure where to look. Perhaps I'll also try the UP kernel. > > the "livelock" counter means a timeout wasn't reached in time, > indicating the system being too busy to run userland. > (see m_cltick(), m_cldrop() etc in sys/kern/uipc_mbuf.c, > and the video from asiabsdcon starting about 15 minutes into > http://www.youtube.com/watch?v=fv-AQJqUzRI). > > when this happens, nics with drivers using the MCLGETI mechanism > halve the size of their receive rings, so that packets drop > earlier, more effectively limiting system load than if they > were allowed to proceed up the network stack. > > so for some reason or other the timeout wasn't processed > quickly enough and the system responds in this way to limit > the overload. so the challenge is to identify what causes > the system to become non-responsive (could be in the network > stack or could be for other reasons) and work out ways > to alleviate that.. > Watching now. :)
Re: 2-3 General Question
2010/9/22 Fred Crowson > On 22 September 2010 21:51, LOL wrote: > > Wow, Thanks very much for all the answer. When I sayed that I think it's > > stupid to install all the port tree just to search, I meant that the > ports > > tree is for install object from source. So if you just use it for > searching, > > you're not using it for the right thing ? But thanks for the pkg_mgr and > > pkg_info -Q, I didn't know about them. I asked if there was a bootloader > > because I would like to dual-boot with Windows 7. > > > > But thanks anyway, you respond too all my answer, you're all very great ! > :) > > > > I don't (thankfully :~P) have any Windows 7, but I have always found > using NTLDR to dual boot between windows and OpenBSD very satisfying. > > hth > > Fred > PS: my boot.ini when I used to dual boot my X41 Laptop: > > [boot loader] > timeout=5 > default c:\openbsd40.pbr="OpenBSD - a real OS ;~)" > [operating systems] > multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP > Professional" /fastdetect > c:\openbsd40.pbr="OpenBSD - a real OS ;~)" > Hi, I saw this before but Vista and 7 doesn't use boot.ini anymore. I think I read that in the openBSD doc before.
Re: 2-3 General Question
On 22 September 2010 21:51, LOL wrote: > Wow, Thanks very much for all the answer. When I sayed that I think it's > stupid to install all the port tree just to search, I meant that the ports > tree is for install object from source. So if you just use it for searching, > you're not using it for the right thing ? But thanks for the pkg_mgr and > pkg_info -Q, I didn't know about them. I asked if there was a bootloader > because I would like to dual-boot with Windows 7. > > But thanks anyway, you respond too all my answer, you're all very great ! :) > I don't (thankfully :~P) have any Windows 7, but I have always found using NTLDR to dual boot between windows and OpenBSD very satisfying. hth Fred PS: my boot.ini when I used to dual boot my X41 Laptop: [boot loader] timeout=5 default c:\openbsd40.pbr="OpenBSD - a real OS ;~)" [operating systems] multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect c:\openbsd40.pbr="OpenBSD - a real OS ;~)"
Re: Linux or OpenBSD
On Wed, Sep 22, 2010 at 4:11 PM, Fabio Almeida wrote: > "Iptables is ok, until you know PF, after knowing PF you'll never use > Linux, at least for firewalls, anymore". > > +1
Westpac Fraud Prevention Unit
Westpac Online Security Alert An attempt to access Online Banking was denied on: Wednesday, 22 September 2010 at 05:04:26 EST Access was denied for one of two reasons: * Incorrect attempts to access and Login failures. * Signing on from a different location or device different from your location and your IP address. If you remember trying to access Online Banking on the above date and time, please select "That was me." If you do not remember trying to access Online Banking on the above date and time, please select "That was NOT me." You will then be prompted to safeguards your account. That was me That was not me Accounts Management As outlined in our User Agreement, Westpac will periodically send you information about site changes and enhancements. Visit our Privacy Policy and User. Issued for Australia use only | ) Westpac Online Banking 2002 - 2010
Re: Linux or OpenBSD
Hi Rikky, What I can say to you, as a former Linux user (as firewalls) is: "Iptables is ok, until you know PF, after knowing PF you'll never use Linux, at least for firewalls, anymore". That's is my experience on this subject. Fabio Almeida Em Qua, 2010-09-22 C s 19:29 +, Rikky Taylor escreveu: > I was after some general advice. I need to setup a routing firewall with 3 > interfaces, moderate traffic and a fair amount of NAT'ing in the rules. > > > > Given identical modern server hardware would I expect a performance difference > between an OpenBSD/PF setup and a Linux/IPTables one? > > > > Rikky
Re: 2-3 General Question
Wow, Thanks very much for all the answer. When I sayed that I think it's stupid to install all the port tree just to search, I meant that the ports tree is for install object from source. So if you just use it for searching, you're not using it for the right thing ? But thanks for the pkg_mgr and pkg_info -Q, I didn't know about them. I asked if there was a bootloader because I would like to dual-boot with Windows 7. But thanks anyway, you respond too all my answer, you're all very great ! :)
Re: audio has dropouts playing music cds
kaffeine uses libcdio, which I don't think has ever worked quite right on OpenBSD. kaffeine crashes for me on amd64 when I try to play an audio CD. kscd tries to use '/dev/cdrom' by default, which is totally bogus. use cdio(1)'s 'cdplay' command to play audio CDs. cdio(1) is in base. it works. older CD player software on UNIX generally tries to have the CD reader decode the data to analog signals and send that to the audio device through a direct connection. this is what cdio(1)'s 'play' command does too, btw. there is no guarantee that there is an analog connection from the CD device to the soundcard (and no way to check other that visual examination or experimentation), especially on newer laptops. I didn't look at the code, but this is probably why you don't hear anything with kscd (assuming you fixed it to use the right device). On Wed, Sep 22, 2010 at 02:07:56PM -0400, Len Zaifman wrote: > Running OpenBSD 4.8 GENERIC.MP#383 i386 ie a recent -current snapshot I can > run both commercial DVDs and videos downloaded from the web ( flv and mp3,4 > files) using kaffeine and the audio is perfectly fine. > > I use kaffeine-0.8.8p2 from the packages directory. > > When I try to use kaffeine to play commercial CDs I hear dropouts about every > 5-10 seconds. It is very annoying. Since DVDs have much higher bandwidth > requirements than music CDs, it may be a software issue. I tried kscd and > there is no audio output. > > Is there a fix for kaffeine and music cds?? can I get kscd to output audio? > Another CD player on openbsd I can try? > > For Hardware I am on a Lenovo W500 Laptop > > Intel(R) Core(TM)2 Duo CPU T9600 @ 2.80GHz > > real mem = 3214176256 (3065MB) > avail mem = 3151605760 (3005MB) > > cd0 at scsibus0 targ 1 lun 0: ATAPI 5/cdrom > removable > azalia0 at pci0 dev 27 function 0 "Intel 82801I HD Audio" rev 0x03: apic 1 int > 17 (irq 11) > azalia0: codecs: Conexant CX20561, Conexant/0x2c06, using Conexant CX20561 > audio0 at azalia0 > > Len Zaifman > Systems Manager, High Performance Systems > The Centre for Computational Biology > The Hospital for Sick Children > 555 University Ave. > Toronto, Ont M5G 1X8 > > tel: 416-813-5513 > email: leona...@sickkids.ca > > This e-mail may contain confidential, personal and/or health > information(information which may be subject to legal restrictions on use, > retention and/or disclosure) for the sole use of the intended recipient. Any > review or distribution by anyone other than the person for whom it was > originally intended is strictly prohibited. If you have received this e-mail > in error, please contact the sender and delete all copies. -- jake...@sdf.lonestar.org SDF Public Access UNIX System - http://sdf.lonestar.org
Re: Linux or OpenBSD
On Wed, 22 Sep 2010 19:29:31 + Rikky Taylor wrote: > I was after some general advice. I need to setup a routing firewall > with 3 interfaces, moderate traffic and a fair amount of NAT'ing in > the rules. > > > > Given identical modern server hardware would I expect a performance > difference between an OpenBSD/PF setup and a Linux/IPTables one? > > > > Rikky You are considering iptables... So you like to be hurting a lot. Go for it, nothing wrong with that , don't let anybody elses reasoning get into the way of fullfilling your fantasies. Seriously, why would you want to to give someone the impression that the gateway/firewall just works, ... use iptables if you want to keep your job; Think of your children.
Re: Linux or OpenBSD
On 22 September 2010 15:29, Rikky Taylor wrote: > I was after some general advice. I need to setup a routing firewall with 3 > interfaces, moderate traffic and a fair amount of NAT'ing in the rules. Define a "fair amount of NAT'ing". Twenty machines in one class C, multiple class B networks filled to capacity...? Also, I would define "moderate traffic". To some here, multiple gigabit links is moderate, to others moderate may be ten workstations as general web/email clients. > Given identical modern server hardware would I expect a performance difference > between an OpenBSD/PF setup and a Linux/IPTables one? Again, it depends on the number of clients, the hardware being used, type of traffic, Linux distribution (Debian or Gentoo will typically yield better performance out-of-the-box than RHEL, Ubuntu, CentOS, etc) and various other factors. Basically, more information is needed for an informed decision but the answer will almost certainly be yes, you'll see a performance difference and it will be in favour of OpenBSD + pf. kmw
pf for routers?
Greetings List, I would like to ask if someone has done routing via pf(4) (non-NAT rules). My idea is to be able to route packets from one interface to the other. say from tun0 to rl0. I've been googling a lot and most of the rules im seeing have something to do with NAT routes. any help would be awesomely appreciated. thanks, -b -- () ascii ribbon campaign - against html e-mail /\ www.asciiribbon.org - against proprietary attachments
Linux or OpenBSD
I was after some general advice. I need to setup a routing firewall with 3 interfaces, moderate traffic and a fair amount of NAT'ing in the rules. Given identical modern server hardware would I expect a performance difference between an OpenBSD/PF setup and a Linux/IPTables one? Rikky
Re: Linux or OpenBSD
Rikky Taylor wrote: > I was after some general advice. I need to setup a routing firewall with 3 > interfaces, moderate traffic and a fair amount of NAT'ing in the rules. > > > > Given identical modern server hardware would I expect a performance difference > between an OpenBSD/PF setup and a Linux/IPTables one? > > > > Rikky Either will work fine so long as you purchase good NICs and avoid cutting-edge (untested) hardware. The only things Linux does noticeably better is: * Dealing with SMP * Dealing with lot's and lot's of RAM * Dealing with huge file-systems None of those things are needed for simple firewalls. Brad
Re: em(4) ierrs [solved]
On 2010/09/22 10:04, James Peltier wrote: > - Original Message > > > From: Stuart Henderson > > To: Andre Keller > > Cc: misc@openbsd.org > > Sent: Wed, September 22, 2010 8:44:26 AM > > Subject: Re: em(4) ierrs [solved] > > > > On 2010/09/22 17:38, Andre Keller wrote: > > > Hi Stuart > > > > > > On 21.09.2010 01:28, schrieb Stuart Henderson: > > > > I would try wbng first. Failing that, lm. I doubt you would > > > > need to disable ichiic but that would be the next step if there's > > > > no improvement. > > > > > > well disabling wbng seems to be the solution. After one day of normal > > > traffic levels we do not see any Ierrs anymore... > > > > > > Thank you Stuart for the helpful advise. > > > > > > > > > Can somebody explain how this driver (which is for getting voltage > > > levels, fan speeds etc, if i did not misinterpret the manpage) is > > > causing this strange behavior? I'm just curious... > > > > Great, thanks for the feedback. > > > > If any code ties up the kernel for too long, it can't handle > > other tasks in a timely fashion. > > > > > > I, unfortunately, am still experiencing livelocks on my em interfaces on my > Dell > R200 server in bridging mode. I'm going to have to schedule an upgrade to > the > latest snapshot first to see if that clears up any issues, but barring that > I'm > not sure where to look. Perhaps I'll also try the UP kernel. the "livelock" counter means a timeout wasn't reached in time, indicating the system being too busy to run userland. (see m_cltick(), m_cldrop() etc in sys/kern/uipc_mbuf.c, and the video from asiabsdcon starting about 15 minutes into http://www.youtube.com/watch?v=fv-AQJqUzRI). when this happens, nics with drivers using the MCLGETI mechanism halve the size of their receive rings, so that packets drop earlier, more effectively limiting system load than if they were allowed to proceed up the network stack. so for some reason or other the timeout wasn't processed quickly enough and the system responds in this way to limit the overload. so the challenge is to identify what causes the system to become non-responsive (could be in the network stack or could be for other reasons) and work out ways to alleviate that..
Intel(R) PRO/1000 GT+ VLANs + jumbo frames
Hi misc, Could someone advise if running vlans+ jumbo frames is safe on IntelB. PRO/1000 GT? Man page says that there are known performance issues when running udp traffic What sort of performance issues one can face when running udp traffic on them and how much traffic is needed to cause this race condition? I will run not more than the usual DNS/DHCP traffic in LAN. Thanks, Dimitar
audio has dropouts playing music cds
Running OpenBSD 4.8 GENERIC.MP#383 i386 ie a recent -current snapshot I can run both commercial DVDs and videos downloaded from the web ( flv and mp3,4 files) using kaffeine and the audio is perfectly fine. I use kaffeine-0.8.8p2 from the packages directory. When I try to use kaffeine to play commercial CDs I hear dropouts about every 5-10 seconds. It is very annoying. Since DVDs have much higher bandwidth requirements than music CDs, it may be a software issue. I tried kscd and there is no audio output. Is there a fix for kaffeine and music cds?? can I get kscd to output audio? Another CD player on openbsd I can try? For Hardware I am on a Lenovo W500 Laptop Intel(R) Core(TM)2 Duo CPU T9600 @ 2.80GHz real mem = 3214176256 (3065MB) avail mem = 3151605760 (3005MB) cd0 at scsibus0 targ 1 lun 0: ATAPI 5/cdrom removable azalia0 at pci0 dev 27 function 0 "Intel 82801I HD Audio" rev 0x03: apic 1 int 17 (irq 11) azalia0: codecs: Conexant CX20561, Conexant/0x2c06, using Conexant CX20561 audio0 at azalia0 Len Zaifman Systems Manager, High Performance Systems The Centre for Computational Biology The Hospital for Sick Children 555 University Ave. Toronto, Ont M5G 1X8 tel: 416-813-5513 email: leona...@sickkids.ca This e-mail may contain confidential, personal and/or health information(information which may be subject to legal restrictions on use, retention and/or disclosure) for the sole use of the intended recipient. Any review or distribution by anyone other than the person for whom it was originally intended is strictly prohibited. If you have received this e-mail in error, please contact the sender and delete all copies.
Re: em(4) ierrs [solved]
>I, unfortunately, am still experiencing livelocks on my em interfaces on my >Dell >R200 server in bridging mode. I'm going to have to schedule an upgrade to the >latest snapshot first to see if that clears up any issues, but barring that >I'm >not sure where to look. Perhaps I'll also try the UP kernel. http://marc.info/?l=openbsd-misc&m=124082008204226&w=4
Re: 2-3 General Question
On Wed, Sep 22, 2010 at 11:24:00AM -0500, L. V. Lammert wrote: > On Wed, 22 Sep 2010, Stuart Henderson wrote: > > > On 2010-09-22, LOL wrote: > > > Does openBSD have a tools that search packages ? The only way I found it's > > > by installing ports tree but I think it's a bit stupid to have all the > > > tree > > > just to a search. > > > > pkg_add pkg_mgr > > > > > For *packages*, it's much simpler to create a pkg_find alias (originaly > from Matt Van Mater): > > export PKG_PATH=ftp://ftp.openbsd.org/pub/OpenBSD/`uname -a | cut -d" " -f > 3`/packages/`uname -a | cut -d" " -f 5`/ That's ugly: uname -r and arch -s should be used there. That's if you're using -release/-stable. otherwise just use current.
Re: 2-3 General Question
On Wed, 22 Sep 2010, Stuart Henderson wrote: > On 2010-09-22, LOL wrote: > > Does openBSD have a tools that search packages ? The only way I found it's > > by installing ports tree but I think it's a bit stupid to have all the tree > > just to a search. > > pkg_add pkg_mgr > > For *packages*, it's much simpler to create a pkg_find alias (originaly from Matt Van Mater): export PKG_PATH=ftp://ftp.openbsd.org/pub/OpenBSD/`uname -a | cut -d" " -f 3`/packages/`uname -a | cut -d" " -f 5`/ alias pkg_find="echo ls | ftp -a $PKG_PATH | sed 's/.*\ //g' | grep -i " If you have a local repository, just substitute in PKG_PATH. Lee
Re: em(4) ierrs [solved]
- Original Message > From: Stuart Henderson > To: Andre Keller > Cc: misc@openbsd.org > Sent: Wed, September 22, 2010 8:44:26 AM > Subject: Re: em(4) ierrs [solved] > > On 2010/09/22 17:38, Andre Keller wrote: > > Hi Stuart > > > > On 21.09.2010 01:28, schrieb Stuart Henderson: > > > I would try wbng first. Failing that, lm. I doubt you would > > > need to disable ichiic but that would be the next step if there's > > > no improvement. > > > > well disabling wbng seems to be the solution. After one day of normal > > traffic levels we do not see any Ierrs anymore... > > > > Thank you Stuart for the helpful advise. > > > > > > Can somebody explain how this driver (which is for getting voltage > > levels, fan speeds etc, if i did not misinterpret the manpage) is > > causing this strange behavior? I'm just curious... > > Great, thanks for the feedback. > > If any code ties up the kernel for too long, it can't handle > other tasks in a timely fashion. > > I, unfortunately, am still experiencing livelocks on my em interfaces on my Dell R200 server in bridging mode. I'm going to have to schedule an upgrade to the latest snapshot first to see if that clears up any issues, but barring that I'm not sure where to look. Perhaps I'll also try the UP kernel. --- James A. Peltier james_a_pelt...@yahoo.ca
Re: 2-3 General Question
On Tue, Sep 21, 2010 at 10:03:54PM -0400, LOL wrote:
> Does openBSD have a tools that search packages ? The only way I found it's
> by installing ports tree but I think it's a bit stupid to have all the tree
> just to a search.
> Does openBSD has a boot manager like Grub or Boot0 for FreeBSD ?
[Adding to the earlier answers.]
You can search packages using the ports tree (optionally with sqlports),
but you can also go to http://openports.se/.
OpenBSD has its own bootloader, but almost all major bootloaders can be
made to ("chain"-)load it, if you want to dual-boot.
Joachim
--
TFMotD: Archive::Tar (3p) - module for manipulations of tar archives
http://www.joachimschipper.nl/
Re: em(4) ierrs [solved]
On 2010/09/22 17:38, Andre Keller wrote: > Hi Stuart > > On 21.09.2010 01:28, schrieb Stuart Henderson: > > I would try wbng first. Failing that, lm. I doubt you would > > need to disable ichiic but that would be the next step if there's > > no improvement. > > well disabling wbng seems to be the solution. After one day of normal > traffic levels we do not see any Ierrs anymore... > > Thank you Stuart for the helpful advise. > > > Can somebody explain how this driver (which is for getting voltage > levels, fan speeds etc, if i did not misinterpret the manpage) is > causing this strange behavior? I'm just curious... Great, thanks for the feedback. If any code ties up the kernel for too long, it can't handle other tasks in a timely fashion.
Re: em(4) ierrs [solved]
Hi Stuart On 21.09.2010 01:28, schrieb Stuart Henderson: > I would try wbng first. Failing that, lm. I doubt you would > need to disable ichiic but that would be the next step if there's > no improvement. well disabling wbng seems to be the solution. After one day of normal traffic levels we do not see any Ierrs anymore... Thank you Stuart for the helpful advise. Can somebody explain how this driver (which is for getting voltage levels, fan speeds etc, if i did not misinterpret the manpage) is causing this strange behavior? I'm just curious... Thank you all Regards Andre
Richiesta D'amicizia
Ciao sono Linda e avrei voglia di fare nuove conoscenze con chi h disposto a stringere amicizia, se sei interessato mi farebbe molto piacere chattare un pr con te, mio marito h sempre impegnato con le sue cose, che per lui h come se non esistessi, che p...e!?! menomale che da quando ho scoperto la chat, mi diverto un mondo, contento lui?!! Io mi sono iscritta su questa chat che h gratis e anche facile da usare perchh una volta iscritta basta mettere il nickname della persona che si vuole cercare e la citta, sia per la gente che si conosce che per fare nuove conoscenze, poi io per ste cose sono gi` negata per conto mio ha ha... il mio nickname h Romina16/81, di solito mi trovi in chat dalle 14 alle 17 perchh il mattino lavoro. L'unica cosa che ti chiedo h di non rispondermi su questa email perche se mi scopre mio marito succede un casino grazie! io per chattare entro da qul http://partners.sprintrade.com/z/69042/CD15967/ qul sotto ho messo una mia foto ti aspetto, Ciao e un bacio!!?
Re: 2-3 General Question
On 2010-09-22, David Coppa wrote: > On Wed, Sep 22, 2010 at 4:30 PM, Stuart Henderson > wrote: >> On 2010-09-22, LOL wrote: >>> Does openBSD have a tools that search packages ? The only way I found it's >>> by installing ports tree but I think it's a bit stupid to have all the tree >>> just to a search. >> >> pkg_add pkg_mgr > > For very lazy people, there's also www.openports.se ;-) You can be much more lazy with pkg_mgr, since you can install packages directly. It also uses a local sqlite database so latency should be much lower, especially for people with a network which rivals the one at j2k10 for awesomeness ;)
Re: 2-3 General Question
2010/9/22 Stuart Henderson : > On 2010-09-22, LOL wrote: >> Does openBSD have a tools that search packages ? The only way I found it's >> by installing ports tree but I think it's a bit stupid to have all the tree >> just to a search. > > pkg_add pkg_mgr > > pkg_info -Q man pkg_info ... -Q query Show all packages in $PKG_PATH which match the given query. -- I have always wished that my computer would be as easy to use as my telephone. My wish has come true. I no longer know how to use my telephone. - Bjarne Stroustrup
Re: 2-3 General Question
On Wed, Sep 22, 2010 at 4:30 PM, Stuart Henderson wrote: > On 2010-09-22, LOL wrote: >> Does openBSD have a tools that search packages ? The only way I found it's >> by installing ports tree but I think it's a bit stupid to have all the tree >> just to a search. > > pkg_add pkg_mgr For very lazy people, there's also www.openports.se ;-) cheers, david
Re: 2-3 General Question
On 2010-09-22, LOL wrote: > Does openBSD have a tools that search packages ? The only way I found it's > by installing ports tree but I think it's a bit stupid to have all the tree > just to a search. pkg_add pkg_mgr
Consulta
Reciba cordiales saludos de una servidora, presentandole este paquete a Cancun por demas de atractivo, vea http://www.fullallotment.com/cancun 4 dmas para 2 adultos y dos menores, desde ya le agradezco su atencion, saludos. Rocio Morales
Re: Areca ARC-1212 and bioctl
Looks like the latest Areca firmware. Might double check. Do you have the same issue on -current? Hi, I downgraded the firmware to 1.44 and tried with -current: arc0 at pci1 dev 0 function 0 "Areca ARC-1680" rev 0x00: apic 8 int 16 (irq 10) arc0: 4 ports, 256MB SDRAM, firmware V1.44 2008-1-31 scsibus0 at arc0: 16 targets arc0: unable to query firmware for sensor info however, the problem still appears: # bioctl -v -i -h sd0 sd0: , serial 4044af0969800952 # bioctl arc0 bioctl: BIOCINQ: Input/output error The card is detected as a arc-1680 instead of arc-1212 - maybe this is the reason? Cheers Steven
Re: how to viewing packet data?
On 2010e9409f 22f% 12:28, John Jackson wrote: tcpflow does that: 'tcpflow -c -s port 80' Not sure if it's in ports or not. Yes, it is in the ports. and it is what i want. Thank you.
Re: 2-3 General Question
On 09/21/10 22:03, LOL wrote: > Hello everybody, I read already all the faq and the doc on the openBSD > websites. There's just two-three thing that I'm not very sure how to do it > correctly. > The proper way to update a -RELEASE installation is to pick the patch on the > openBSD websites and just follow the instruction that come with the patch ? Please re-read FAQ5. You have two good options. > To update a -CURRENT, you just have to pick a bsd.rd on the openBSD sites > and boot on it and you're on the track ? Please re-read FAQ5. You have multiple options, but installing a snapshot is best, this can be done via bsd.rd or just unpacking the files (see FAQ4). > Does openBSD have a tools that search packages ? The only way I found it's > by installing ports tree but I think it's a bit stupid to have all the tree > just to a search. define "stupid"... vast amounts of information about the available packages is in the ports tree, thus your statement boils down to "It's a bit stupid to have all the information on hand to search for information". however, re-read FAQ15, specifically 15.3.4. > Does openBSD has a boot manager like Grub or Boot0 for FreeBSD ? Standard? thank goodness, no. OpenBSD can boot itself very nicely without third-party add-ons. However, if you wish to make a complicated multiboot system, go for it (it's your foot, your bullets) use whatever boot manager you can manage to get to work, virtually all of them will work with OpenBSD as a generic OS. For simple, single OS systems, they are all solutions looking for a problem. Nick.
Re: 2-3 General Question
On Tue, 21 Sep 2010 21:51:48 -0700 patrick keshishian wrote: > > > Does openBSD has a boot manager like Grub or Boot0 for FreeBSD ? > > I don't think so. > Gag (written in assembly) is quite handy and allows you to select new partitions on the fly.
Re: Installing OpenBSD from Linux Xen VPS
There is a much higher potential of variation of implementations of xens and it is next to impossible to find out any particular hosts, xen details. If anyone has these details, maybe they could share, but you may have a more reliable experience with a Linux KVM host. arpnetworks.com (linux KVM) was recommended to me by someone on this list recently and they advertise OpenBSD 4.7 images. On Wed, 22 Sep 2010 09:47:52 +0700 sonjaya wrote: > i try install in my xen at opensuse , when install success but when > reboot after finish installation blank and try againt same happen > againt. > > > > On Tue, Sep 21, 2010 at 12:25 PM, Stephano Zanzin wrote: > > Hello, > > > > I was wondering if anyone had installed OpenBSD from a Linux VPS running > > over a Xen hosting(like slicehost, linode, etc). So, someone tried it? > > > > -- > > stephano > > > > > > > > -- > sonjaya > http://www.sharenupload.com > http://www.farmproxy.com
Re: 2-3 General Question
On Tue, Sep 21, 2010 at 09:51:48PM -0700, patrick keshishian wrote: > On Tue, Sep 21, 2010 at 7:03 PM, LOL wrote: [cut] > > Does openBSD has a boot manager like Grub or Boot0 for FreeBSD ? > > I don't think so. > > HTH, > --patrick > Grub 0.97 is in ports. See the sysutils/grub port (only for i386 tho). Andreas
