Re: IPSEC tunnels failing intermittently

2011-05-11 Thread Jakob Alvermark
Has anyone filed a bug report or should I send this to bugs@?

Regards,
Jakob Alvermark

On 6 maj 2011, at 11:33, Jakob Alvermark wrote:

 A little more info:

 I have now ENCDEBUG enabled on both ends in the lab.
 When one tunnel fails I get the same error on both machines:

 May  4 12:27:55 test1 /bsd: esp_input_cb(): authentication failed for
packet
 in SA xxx.xxx.xxx.97/84be7b20

 May  4 12:27:18 test2 /bsd: esp_input_cb(): authentication failed for
packet
 in SA xxx.xxx.xxx.99/da1d3abb

 ipsecctl -v -sa give no hints, everything looks normal:

 esp tunnel from xxx.xxx.xxx.99 to xxx.xxx.xxx.97 spi 0x84be7b20 auth
 hmac-sha2-256 enc aes
sa: spi 0x84be7b20 auth hmac-sha2-256 enc aes
state mature replay 16 flags 4
lifetime_cur: alloc 0 bytes 7968 add 1304504831 first 1304504875
lifetime_hard: alloc 0 bytes 0 add 1200 first 0
lifetime_soft: alloc 0 bytes 0 add 1080 first 0
address_src: xxx.xxx.xxx.99
address_dst: xxx.xxx.xxx.97
identity_src: type prefix id 0: xxx.xxx.xxx.99/32
identity_dst: type prefix id 0: xxx.xxx.xxx.97/32
src_mask: 255.255.255.0
dst_mask: 255.255.255.0
protocol: proto 0 flags 0
flow_type: type use direction in
src_flow: 192.168.31.0
dst_flow: 192.168.1.0
remote_auth: type rsa

 esp tunnel from xxx.xxx.xxx.97 to xxx.xxx.xxx.99 spi 0xda1d3abb auth
 hmac-sha2-256 enc aes
sa: spi 0xda1d3abb auth hmac-sha2-256 enc aes
state mature replay 16 flags 4
lifetime_cur: alloc 0 bytes 48864 add 1304504837 first 1304504838
lifetime_hard: alloc 0 bytes 0 add 1200 first 0
lifetime_soft: alloc 0 bytes 0 add 1080 first 0
address_src: xxx.xxx.xxx.97
address_dst: xxx.xxx.xxx.99
identity_src: type prefix id 0: xxx.xxx.xxx.97/32
identity_dst: type prefix id 0: xxx.xxx.xxx.99/32
src_mask: 255.255.255.0
dst_mask: 255.255.255.0
protocol: proto 0 flags 0
flow_type: type use direction in
src_flow: 192.168.1.0
dst_flow: 192.168.31.0
remote_auth: type rsa


 On 2 maj 2011, at 21:59, MG wrote:

 On 5/2/2011 12:13 PM, Vijay Sankar wrote:
 Per olof Ljungmark wrote:
 On 05/02/11 18:08, Robert wrote:
 Hi,

 Same here, but between 2 hosts in the same subnet (very basic network
 setup).
 I was also waiting for 4.9 (and time to investigate...)

 We see same behaviour on 4.9 so upgrading will not help.

 On Mon, 2 May 2011 13:30:34 + (UTC)
 Stuart Henderson s...@spacehopper.org wrote:

 I see something similar which I've been trying to track down but not
 really succeeding. The thing we have in common is multiple subnets,
 I wonder if this is a factor...


 (and this setup has always been post-4.4 On 2011-05-02, Jakob
Alvermark
 jakob.alverm...@bsdlabs.com wrote:
 Hi,

 I am getting some strange problems with IPSEC tunnels.
 There are 5 sites connected using IPSEC tunnels, which used to work
 perfectly,
 but since upgrading to 4.8 (from 4.4),
 tunnels started failing, seemly at random intervals.
 To investigate I set up two machines in the lab and they exhibit the
 same
 behavior:
 After a seemingly random amount of time, when there is a
renegotiation
 of an
 SA due to its lifetime expired,
 traffic will stop flowing (I have a ping running). 'ipsecctl -sa' and
 'netstat
 -rn' shows everything as normal.
 When that SA lifetime expires and a new SA is negotiated it comes
back
 again.

 I recompiled the kernel with 'option ENCDEBUG' and set
 net.inet.ip.encdebug=1
 and when it fails
 I get 'esp_input_cb(): authentication failed for packet in SA
 xxx.xxx.xxx.97/6e68c6ae'

 The machines are installed with stock OpenBSD 4.8, nothing special
 about the
 configuration.
 ipsec.conf is very simple, just one line:

 ike esp from {192.168.1.9/24 172.16.1.0/24} to {192.168.31.0/24
 192.168.32.254} local xxx.xxx.xxx.97 peer xxx.xxx.xxx.99

 Public keys copied across, isakmpd started with flags -K -v

 Does anyone have any ideas about this?

 Thank you

 Jakob Alvermark
 jakob.alverm...@bsdlabs.com
 BSDLabs AB
 Solna, Sweden
 556759-7652


 FWIW, I have the following number of flows and tunnels using OpenBSD 4.8
at
 the moment. I have not seen any problems when both peers are OpenBSD
servers.

 Mon May 02 11:57:12 CPU@36.0C # ipsecctl -sa | grep -c flow
 160
 Mon May 02 11:57:21 CPU@36.0C # ipsecctl -sa | grep -c tunnel
 254

 Approximately two months ago I had a similar situation to what you
 described and sort of narrowed it down to the following:

 The peer site had Cisco ASA VPN concentrator and they had different
subnets
 with 172.16.0.0/24, 172.16.1.0/24, and so on to different customer
networks.
 At our end with OpenBSD, we had a subnet of 172.16.0.0/21 for our internal
 network. Because the Cisco end could not change their subnet mask, we
changed
 the subnet mask on the OpenBSD box to 172.16.1.0/24 and allowed access only
to
 a few hosts with the address 

Re: [Bulk] html5 video and browsers

2011-05-11 Thread LEVAI Daniel
On Tue, May 10, 2011 at 15:06:14 +0200, LEVAI Daniel wrote:
 On Tue, May 10, 2011 at 11:33:44 +, Kevin Chadwick wrote:
  On Tue, 10 May 2011 12:04:50 +0200
  LEVAI Daniel wrote:
  
   Hi!
   
   I'm trying out youtube with html5 videos, and I have few question to the
   fellow video watchers.
   
   In mozilla-firefox I can't even enable html5 in youtube :/
  
  If it's mozilla-firefox 3.6 then you can play html5 video but only in
  ogg format. Youtube is using webM now which was introduced in firefox 4.
 I'm using 4.0rc2 from packages. But I see now that in the tree, there is
 a newer version. I'll wait for a package update.

So it seems I got stuck with an rc package version from when it was
still in the testing phase. For some reason I couldn't update it
(mozilla-firefox-4.0rc2 vs. mozilla-firefox-4.0.1p2), so I had to
pkg_delete it, and then pkg_add the new one.
Indeed it is working alright, but the fullscreen mode is worse than with
xxxterm in my case.


Daniel

-- 
LIVAI Daniel
PGP key ID = 0x83B63A8F
Key fingerprint = DBEC C66B A47A DFA2 792D  650C C69B BE4C 83B6 3A8F



Re: DHCP client question. bug ?

2011-05-11 Thread Erik

Op 10-5-2011 16:00, Per-Olov Sjvholm schreef:

Hi misc

I think there maybe is a bug in the dhcp client. I am not sure but will ask
the list...

I have have had the following:
em0: lan static IP
em1: internet interface with static IP
a default route to the isp is in mygate

I had to add a dhcp interface to this
This means I added dhcp to the hostname.bge0 interface

When I got the IP from the dhcp config on the bge0 interface it destroyed the
mygate and resolv.conf files and the default gateway was now going over to the
bge0 instead (expected though)...

I then changed the dhclient.conf to just contain the bge0 interface and the
row:
request subnet-mask;

This looks good as I want ONLY the IP and MASK from the DHCP-server and not
the gw and dns servers. However with this config the default gateway is
removed but not replaced with the gateway from the dhcp.


Question:
Why is the default gateway destroyed by the dhcp config?

This system uses OpenBSD 4.6 stable

Tnx in advance

/Per-Olov
If I understand well then the 'request' statement makes sure you want to 
know the parameters attached. The dhcp server can (and will in your 
case) provide other information which is accepted by dhclient. If you 
specifically do _not_ want parameters to be set use the 'supersede' 
command. That way you will exclude those parameters from being set.


eg I use
request subnet-mask, broadcast-address, routers, 
domain-name,domain-name-servers, host-name;

supersede domain-name bla.local domain.local;
prepend domain-name-servers 127.0.0.1;

The use of the prepend command is shown here as well, I am sure you can 
figure out why it is there. ;)


BTW your version of OpenBSD is outdated and unsupported.

HTH, erik



Re: problem with download limit

2011-05-11 Thread Henning Brauer
* Wesley MOUEDINE ASSABY open...@e-solutions.re [2011-05-10 20:54]:
 When PF is enabled on the box, there's no queuing limit.
 And disable PF, don't solve the problem. Really, i don't understand why i
 download the file at 32Ko/s instead of ~80Ko/s
 
 At work, connection used is SDSL 1M (128 Ko/s = upload and download); We
 have 5 Public Ip Adress; ORANGE is the ISP.
 At Home, my connection is ADSL 8M (upload is 800K).

well, the limiting factor these days and especially when DSL (consumer
DSL even more so) is involved is latency, not the claimed bandwidth.
read up on bandwidth-delay-product.

 On Tue, 10 May 2011 13:11:14 +, Kevin Chadwick ma1l1i...@yahoo.co.uk
 wrote:
 Not sure, there's certainly not enough info here. PF won't cause
 that unless you have some queuing limit. Maybe you have an
 autonegotiation conflict. You could try setting all devices to
 100baseTX full-duplex.

that is extremely bad advice.

-- 
Henning Brauer, h...@bsws.de, henn...@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting



Re: problem with download limit (resolved)

2011-05-11 Thread Henning Brauer
bad advice. zero effect by definition.

* Wesley MOUEDINE ASSABY open...@e-solutions.re [2011-05-11 07:47]:
 I try this on our firewall (OpenBSD 4.8 -stable)
 sysctl -w net.inet.tcp.recvspace=65535
 
 the default value was : 16384
 
 Thank's to Daniel Melameth
 
 Cheers,
 
 Wesley MOUEDINE ASSABY
 www.mouedine.net
 
 On Tue, 10 May 2011 15:59:09 -0600, Daniel Melameth dan...@melameth.com
 wrote:
 Try sysctl net.inet.tcp.recvspace=65535.  This is resolved in 4.9.
 

-- 
Henning Brauer, h...@bsws.de, henn...@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting



Re: problem with download limit (resolved)

2011-05-11 Thread Otto Moerbeek
On Wed, May 11, 2011 at 10:27:59AM +0200, Henning Brauer wrote:

 bad advice. zero effect by definition.

maybe the test is flawed by donwloading on the firewall itself?

 
 * Wesley MOUEDINE ASSABY open...@e-solutions.re [2011-05-11 07:47]:
  I try this on our firewall (OpenBSD 4.8 -stable)
  sysctl -w net.inet.tcp.recvspace=65535
  
  the default value was : 16384
  
  Thank's to Daniel Melameth
  
  Cheers,
  
  Wesley MOUEDINE ASSABY
  www.mouedine.net
  
  On Tue, 10 May 2011 15:59:09 -0600, Daniel Melameth dan...@melameth.com
  wrote:
  Try sysctl net.inet.tcp.recvspace=65535.  This is resolved in 4.9.
  
 
 -- 
 Henning Brauer, h...@bsws.de, henn...@openbsd.org
 BS Web Services, http://bsws.de
 Full-Service ISP - Secure Hosting, Mail and DNS Services
 Dedicated Servers, Rootservers, Application Hosting



Re: problem with download limit (resolved)

2011-05-11 Thread Kevin Chadwick
On Wed, 11 May 2011 10:27:59 +0200
Henning Brauer wrote:

 bad advice. zero effect by definition.

Yeah but some ciscos etc. don't follow the
definition and a device could have been set manually.



Re: problem with download limit (resolved)

2011-05-11 Thread Wesley MOUEDINE ASSABY
But it works now. Just in modifying recvspace value for a higher... 
If you have other idea ...

I have test it on the firewall and also on an OpenBSD standalone machine
(directly with a public ip address).

At work : ISP is Orange with a SDSL connection (1M upload=download)
My home : ISP is SFR with an ADSL connection (8M for download, 800K for
upload)
the file is : http://marauders.dyndns.org/~wesley/file.ex (for testing)

Cheers,

Wesley MOUEDINE ASSABY.

On Wed, 11 May 2011 10:27:59 +0200, Henning Brauer lists-open...@bsws.de
wrote:
 bad advice. zero effect by definition.
 
 * Wesley MOUEDINE ASSABY open...@e-solutions.re [2011-05-11 07:47]:
 I try this on our firewall (OpenBSD 4.8 -stable)
 sysctl -w net.inet.tcp.recvspace=65535
 
 the default value was : 16384
 
 Thank's to Daniel Melameth
 
 Cheers,
 
 Wesley MOUEDINE ASSABY
 www.mouedine.net
 
 On Tue, 10 May 2011 15:59:09 -0600, Daniel Melameth
dan...@melameth.com
 wrote:
 Try sysctl net.inet.tcp.recvspace=65535.  This is resolved in 4.9.



Re: problem with download limit (resolved)

2011-05-11 Thread Henning Brauer
* Wesley MOUEDINE ASSABY open...@e-solutions.re [2011-05-11 12:25]:
 But it works now. Just in modifying recvspace value for a higher... 

yeah right, changing the size of a socket buffer will help a lot for a
forwarded connection where no sockets are involved

-- 
Henning Brauer, h...@bsws.de, henn...@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting



Re: problem with download limit (resolved)

2011-05-11 Thread Kevin Chadwick
On Wed, 11 May 2011 12:51:38 +0200
Henning Brauer wrote:

 yeah right, changing the size of a socket buffer will help a lot for a
 forwarded connection where no sockets are involved

Now, remove the laptop, take a pc, install OpenBSD 4.8, configure the
network card with a public ip address

I guess there was only one box involved.



Re: problem with download limit (resolved)

2011-05-11 Thread Wesley MOUEDINE ASSABY
Tried with OpenBSD 4.9 works (RELEASE)
Tried with OpenBSD 4.8 doesn't work (Fresh install)
Tried with OpenBSD 4.8 on 2 machines * with net.inet.tcp.recvspace=65535
works

Thank you a lot for your replies !

Cheers,

Wesley MOUEDINE ASSABY



4.9 firewalls

2011-05-11 Thread David Gwynne
anyone replaced firewalls with 4.9 boxes yet? noticed a difference?



Re: 4.9 firewalls

2011-05-11 Thread Kent Watsen

On 5/11/11 9:14 AM, David Gwynne wrote:

anyone replaced firewalls with 4.9 boxes yet? noticed a difference?

   

A drop in replacement for me - works great!



Re: cmpci(4) and S/PDIF?

2011-05-11 Thread David Steiner
On Wed, May 04, 2011 at 05:35:07PM +, Christian Weisgerber wrote:
 Has anybody had success using the S/PDIF output of a cmpci(4) sound
 card?
 
 -- 
 Christian naddy Weisgerber  na...@mips.inka.de
 

yes! my soundcard just arrived, which i bought for SPDIF playback with the
C-Media chipset. sofar it works like a charm. here's how i got it
working:

aucat -r 44100 -b 8192 -l
mixerctl -t playback.mode # this puts it in SPDIF playback mode

dmesg specs:
cmpci0 at pci3 dev 0 function 0 C-Media Electronics CMI8738/C3DX Audio
rev 0x10: apic 2 int 20
model: Sweex SC015, 7.1 PCI Sound Card (http://www.sweex.com/SC015)



altq cripples other connections as well

2011-05-11 Thread Tom Murphy
I had set up ALTQ on a 4.9 firewall box as a box in our network needed
its sending throttled, but I noticed that while the firewall was
throttling this machine in question, ALL connections going through the
machine were adversely affected and slow. Interactive SSH sessions had
sometimes 1-2 seconds up to 10 seconds before keystrokes showed up.

Once the machine had stopped sending all its traffic, things were fine
again.

I am not sure if the hotplug ppb and em(4) / bge(4) issue of shared
interrupts could be applied here or not. The box happily forwards
traffic without lag if I turn ALTQ off on it. However, this is not
an option as we cannot go past 100 megabits on our connection.

I also noticed I had to jack qlimit up to 8000 to stop getting lots of
packets being dropped. 

Machine is a Dell PowerEdge R210. It's running amd64. I tried i386 on it
and it was unstable, so switched it to amd64. 

Yes, it has ipmi enabled, but ipmi does not appear to cause any issues.
It's only when ALTQ is enabled.

Any ideas? Would this stuff be fixed in -current? I'd try -current on
it, but need to convince management.

Thanks,
Tom

The altq line in /etc/pf.conf:

altq on em0 priq bandwidth 95Mb qlimit 8000 queue { bulk, std, mail,
ssh, web, vpn, dns, ack }


dmesg:

OpenBSD 4.9 (GENERIC.MP) #794: Wed Mar  2 07:19:02 MST 2011
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) Core(TM)2 Duo CPU E4500 @ 2.20GHz (GenuineIntel
686-class) 2.21 GHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,TM2,SSSE3,CX16,xTPR,PDCM
real mem  = 1071947776 (1022MB)
avail mem = 1044254720 (995MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 10/24/07, BIOS32 rev. 0 @ 0xfadd0,
SMBIOS rev. 2.5 @ 0x3ff9c000 (46 entries)
bios0: vendor Dell Inc. version 1.0.0 date 10/24/2007
bios0: Dell Inc. PowerEdge R200
acpi0 at bios0: rev 2
acpi0: sleep states S0 S4 S5
acpi0: tables DSDT FACP APIC SPCR HPET MCFG WD__ SLIC ERST HEST BERT
EINJ SSDT SSDT SSDT
acpi0: wakeup devices PCI0(S5)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 200MHz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Core(TM)2 Duo CPU E4500 @ 2.20GHz (GenuineIntel
686-class) 2.21 GHz
cpu1:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,TM2,SSSE3,CX16,xTPR,PDCM
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
ioapic0: misconfigured as apic 0, remapped to apid 2
acpihpet0 at acpi0: 14318179 Hz
acpimcfg0 at acpi0 addr 0xe000, bus 0-255
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (PEX1)
acpiprt2 at acpi0: bus 2 (SBE0)
acpiprt3 at acpi0: bus 3 (SBE4)
acpiprt4 at acpi0: bus 4 (SBE5)
acpiprt5 at acpi0: bus 5 (COMP)
acpicpu0 at acpi0: PSS
acpicpu1 at acpi0: PSS
bios0: ROM list: 0xc/0x9000 0xec000/0x4000!
ipmi0 at mainbus0: version 1.5 interface KCS iobase 0xca8/8 spacing 4
cpu0: Enhanced SpeedStep 2201 MHz: speeds: 2200, 2000, 1800, 1600, 1400,
1200 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 Intel 3200/3210 Host rev 0x01
ppb0 at pci0 dev 1 function 0 Intel 3200/3210 PCIE rev 0x01: apic 2
int 16 (irq 15)
pci1 at ppb0 bus 1
ppb1 at pci0 dev 28 function 0 Intel 82801I PCIE rev 0x02: apic 2 int
16 (irq 15)
pci2 at ppb1 bus 2
em0 at pci2 dev 0 function 0 Intel PRO/1000 PT (82571EB) rev 0x06:
apic 2 int 16 (irq 15), address 00:15:17:6c:c7:a2
em1 at pci2 dev 0 function 1 Intel PRO/1000 PT (82571EB) rev 0x06:
apic 2 int 17 (irq 14), address 00:15:17:6c:c7:a3
ppb2 at pci0 dev 28 function 4 Intel 82801I PCIE rev 0x02
pci3 at ppb2 bus 3
bge0 at pci3 dev 0 function 0 Broadcom BCM5721 rev 0x21, BCM5750 C1
(0x4201): apic 2 int 16 (irq 15), address 00:19:b9:fa:59:20
brgphy0 at bge0 phy 1: BCM5750 10/100/1000baseT PHY, rev. 0
ppb3 at pci0 dev 28 function 5 Intel 82801I PCIE rev 0x02
pci4 at ppb3 bus 4
bge1 at pci4 dev 0 function 0 Broadcom BCM5721 rev 0x21, BCM5750 C1
(0x4201): apic 2 int 17 (irq 14), address 00:19:b9:fa:59:21
brgphy1 at bge1 phy 1: BCM5750 10/100/1000baseT PHY, rev. 0
uhci0 at pci0 dev 29 function 0 Intel 82801I USB rev 0x02: apic 2 int
21 (irq 11)
uhci1 at pci0 dev 29 function 1 Intel 82801I USB rev 0x02: apic 2 int
20 (irq 10)
uhci2 at pci0 dev 29 function 2 Intel 82801I USB rev 0x02: apic 2 int
21 (irq 11)
ehci0 at pci0 dev 29 function 7 Intel 82801I USB rev 0x02: apic 2 int
21 (irq 11)
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1
ppb4 at pci0 dev 30 function 0 Intel 82801BA Hub-to-PCI rev 0x92
pci5 at ppb4 bus 5
vga1 at pci5 dev 5 function 0 ATI ES1000 rev 0x02
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
radeondrm0 at vga1: apic 2 int 19 (irq 

Re: 4.9 firewalls

2011-05-11 Thread Kapetanakis Giannis
On 11/05/11 16:14, David Gwynne wrote:
 anyone replaced firewalls with 4.9 boxes yet? noticed a difference?

Yes, works better :)

Giannis

[demime 1.01d removed an attachment of type application/pkcs7-signature which 
had a name of smime.p7s]



Re: HP DL320 G6 shared network adapter not working

2011-05-11 Thread Stuart Henderson
On 2011-05-10, Peter van Oord van der Vlies 
peter.vanoordvandervl...@itisit.nl wrote:
 I am installing several HP DL320G6 servers and see there are some problems
 with the Network Adapter that is shared with ILO2 .

 When openbsd boots the ILO adapter becomes unavailable and within openbsd the
 interface bge0 is not usable. It's connected at 10BaseT but in real it's
 connected at 1000baseT .

OpenBSD does not support NICs shared between management card and OS,
you will need to use a dedicated NIC.

IIRC HP iLO usually lets you dedicate a NIC for this and hide it
from the OS, otherwise you will probably need to install a nic
supported by a different driver, and disable bge in kernel config.

With Dells you need the expensive enterprise dracs to avoid
sharing.

Sharing NICs like this is a real security worry...



Re: 4.9 firewalls

2011-05-11 Thread Patsy
On Wed, 11 May 2011 23:14:36 +1000, David Gwynne l...@animata.net 
wrote:

anyone replaced firewalls with 4.9 boxes yet? noticed a difference?


It has a new sticker on it :-)



Re: altq cripples other connections as well

2011-05-11 Thread Stuart Henderson
On 2011-05-11, Tom Murphy open...@pertho.net wrote:
 I had set up ALTQ on a 4.9 firewall box as a box in our network needed
 its sending throttled, but I noticed that while the firewall was
 throttling this machine in question, ALL connections going through the
 machine were adversely affected and slow. Interactive SSH sessions had
 sometimes 1-2 seconds up to 10 seconds before keystrokes showed up.

 Once the machine had stopped sending all its traffic, things were fine
 again.

Watch 'systat q' or 'pfctl -vvsq' and check that packets are being
assigned to the expected queues..



Re: altq cripples other connections as well

2011-05-11 Thread Amit Kulkarni
On Wed, May 11, 2011 at 8:47 AM, Tom Murphy open...@pertho.net wrote:
 I had set up ALTQ on a 4.9 firewall box as a box in our network needed
 its sending throttled, but I noticed that while the firewall was
 throttling this machine in question, ALL connections going through the
 machine were adversely affected and slow. Interactive SSH sessions had
 sometimes 1-2 seconds up to 10 seconds before keystrokes showed up.

 Once the machine had stopped sending all its traffic, things were fine
 again.

 I am not sure if the hotplug ppb and em(4) / bge(4) issue of shared
 interrupts could be applied here or not. The box happily forwards
 traffic without lag if I turn ALTQ off on it. However, this is not
 an option as we cannot go past 100 megabits on our connection.

 I also noticed I had to jack qlimit up to 8000 to stop getting lots of
 packets being dropped.

 Machine is a Dell PowerEdge R210. It's running amd64. I tried i386 on it
 and it was unstable, so switched it to amd64.

 Yes, it has ipmi enabled, but ipmi does not appear to cause any issues.
 It's only when ALTQ is enabled.

 Any ideas? Would this stuff be fixed in -current? I'd try -current on
 it, but need to convince management.

 Thanks,
 Tom

 The altq line in /etc/pf.conf:

 altq on em0 priq bandwidth 95Mb qlimit 8000 queue { bulk, std, mail,
 ssh, web, vpn, dns, ack }


http://marc.info/?l=openbsd-miscm=129371647818083w=2

?



Re: altq cripples other connections as well

2011-05-11 Thread Tom Murphy
Stuart Henderson wrote:
 Watch 'systat q' or 'pfctl -vvsq' and check that packets are being
 assigned to the expected queues..

I get this (sorry for the wonky formatting):

QUEUE BW SCH  PRIO PKTSBYTES DROP_P   
DROP_B QLEN BORROW SUSPEN P/S B/S
bulk priq   1333079 1611153K 000
std  priq2 29649766   27725M 30364 40897687 
   0
mail priq9 79223719   88413M 5363  7279626  
  0
ssh  priq   10  1420163  103931K 000
web  priq   12  2650944 3078267K 72956180
vpn  priq   13 11907422 9255256K 000
dns  priq   14 11147040  982677K 000
ack  priq   15 48287941 2899340K 000

The offending machine that was sending out a ton of traffic had been
relegated to the bulk queue that had the lowest priority.

Despite that, ssh connections were stuttering, even though they had
higher priority.

Tom



Re: bsd.rd and (automated) upgrading

2011-05-11 Thread Kevin Chadwick
On Thu, 5 May 2011 21:23:40 +
Kevin Chadwick wrote:

 On Sat, 30 Apr 2011 13:15:33 +0200
 Rogier Krieger wrote:
 
  Yes, see e.g. Yaifo. The link came by earlier this week on the list.
  http://sourceforge.net/projects/yaifo/files/yaifo/4.8/yaifo-4.8.tgz/download
 
 
 I noticed the Update to 4.9 added to CHANGES and downloaded yaifo from
 cvs.
 
 Built yaifo.fs but at the OpenBSD boot screen I get.
 
 booting hd0a:/bsd: 8439220 read text failed (0). will try /bsd
 
 Anyone had it working with 4.9?
 

Linux is really pissing me off right now.

I guess the defaults are different or something but I'm lost at the
minute.

I have a working yaifo.fs, except.

If I use dd from the OpenBSD cd the yaifo bsd.rd loads.

Do the same from a debian install cd the yaifo bsd.rd loads.

Do it from an installed debian dd (coreutils) 8.5 and I get read text
failed.

Any ideas anyone of the differences in dd and if a flag or option may
make OpenBSD boot?



Re: cmpci(4) and S/PDIF?

2011-05-11 Thread Alexandre Ratchov
On Wed, May 11, 2011 at 03:36:47PM +0200, David Steiner wrote:
 On Wed, May 04, 2011 at 05:35:07PM +, Christian Weisgerber wrote:
  Has anybody had success using the S/PDIF output of a cmpci(4) sound
  card?
  
  -- 
  Christian naddy Weisgerber  na...@mips.inka.de
  
 
 yes! my soundcard just arrived, which i bought for SPDIF playback with the
 C-Media chipset. sofar it works like a charm. here's how i got it
 working:
 
 aucat -r 44100 -b 8192 -l
 mixerctl -t playback.mode # this puts it in SPDIF playback mode
 
 dmesg specs:
 cmpci0 at pci3 dev 0 function 0 C-Media Electronics CMI8738/C3DX Audio
 rev 0x10: apic 2 int 20
 model: Sweex SC015, 7.1 PCI Sound Card (http://www.sweex.com/SC015)

if you do aucat -i /dev/zero, does the server crash after a certain
amount of time?

-- Alexandre



I hate Spam

2011-05-11 Thread SpamTrap
I'm new to this list and to OpenBSD,  and currently signed up for misc,
ports and www lists, 

and receive a lot of spam mail through the lists.

I'm running my own sendmail server, spamd and spamassassin filtered by
procmail,

but to much junk passing because it's relayed through the list servers.

This far I've collected the mail addresses by hand and pasted them in to my
spamassassin local.cf

 

Just wondering how other subscribers solving this mather ?

 

Best regards

Hasse Hansson

Thorshammare.org



I hate Spam

2011-05-11 Thread OpenBSD MailingList
I'm new to this list and to OpenBSD,  and currently signed up for misc,
ports and www lists, 

and receive a lot of spam mail through the lists.

I'm running my own sendmail server, spamd and spamassassin filtered by
procmail,

but to much junk passing because it's relayed through the list servers.

This far I've collected the mail addresses by hand and pasted them in to my
spamassassin local.cf

 

Just wondering how other subscribers solving this mather ?

 

Best regards

Hasse Hansson

s...@horshammare.org



Re: I hate Spam

2011-05-11 Thread John Cosimano
--- SpamTrap [Wed, May 11, 2011 at 04:51:19PM +0200]: --- 
 I'm new to this list and to OpenBSD,  and currently signed up for misc,
 ports and www lists, 
 
 and receive a lot of spam mail through the lists.

taken from:

http://www.openbsd.org/mail.html

 The OpenBSD mailing lists use spamd(8) in greylisting mode as well as
 SpamAssassin to keep down the spam volume but things do sneak
 through--deal with it. In addition, the list server also has regex-based
 rules to reject based on some common spam and virus telltales. If you
 get spam through one of the OpenBSD mailing lists, you don't need to
 send a copy to the list owner--chances are he's already seen it. Also,
 please do not submit spam received through the mailing lists to spamcop
 as this will result in the list server being added to their RBL.
 Complaining about and commenting upon spam on the list proper is
 counter-productive as it generates more traffic than the spam itself.



Re: cmpci(4) and S/PDIF?

2011-05-11 Thread David Steiner
On Wed, May 11, 2011 at 05:23:36PM +0200, Christian Weisgerber wrote:
 In article 20110511133647.ga3...@mango.fritz.box you write:
 
   Has anybody had success using the S/PDIF output of a cmpci(4) sound
   card?
  
  yes! my soundcard just arrived, which i bought for SPDIF playback with the
  C-Media chipset. sofar it works like a charm. here's how i got it
  working:
  
  mixerctl -t playback.mode # this puts it in SPDIF playback mode
 
 Can you send me the output of mixerctl -v please?
 
 -- 
 Christian naddy Weisgerber  na...@mips.inka.de

$ mixerctl -v
inputs.dac=192,192 volume
inputs.dac.mute=off  [ off on ]
inputs.fmsynth=192,192 volume
inputs.fmsynth.mute=off  [ off on ]
inputs.cd=0,0 volume
inputs.cd.mute=on  [ off on ]
inputs.line=0,0 volume
inputs.line.mute=on  [ off on ]
inputs.aux=0,0 volume
inputs.aux.mute=on  [ off on ]
inputs.mic=0 volume
inputs.mic.mute=on  [ off on ]
inputs.mic.preamp=off  [ off on ]
inputs.spkr=128 volume
record.source=  { mic cd line aux wave fmsynth spdif }
record.mic=0 volume
playback.mode=spdif  [ dac spdif ]
spdif.input=spdin1  [ spdin1 spdin2 spdout ]
spdif.input.phase=positive  [ positive negative ]
spdif.output=playback  [ playback spdin ]
spdif.output.playback=wave  [ wave legacy ]
spdif.output.voltage=5V  [ 5V 0.5V ]
spdif.monitor=spdout  [ off spdin spdout ]
outputs.master=128,128 volume
outputs.rear=off  [ off on ]
outputs.rear.individual=off  [ off on ]
outputs.rear.reverse=off  [ off on ]
outputs.surround=off  [ off on ]



RETIRO PARA LIDERES (2 dias y una noche)

2011-05-11 Thread ESCUELA DE NEGOCIOS
RETIRO PARA LIDERES 2011Organizaciones Emocionalmente Inteligentes
ASISTA AL ENTRENAMIENTO EMOCIONAL QUE HA IMPULSADO LOS RESULTADOS DE LOS
LMDERES MAS EXITOSOS A NIVEL MUNDIAL. (Solicite temario y pormenores a la
Escuela de Negocios) Incluye: 0 Viaje redondo + 0 Hospedaje (2 dmas y una
noche) + 0 Alimentos y bebidas 0 El entrenamiento en alta direccisn
Organizaciones Emocionalmente Inteligentes USTED DESARROLLARA LOS
PRINICPIOS ESTRATEGICOS DE UN LIDER EMOCIOANLMENTE INTELIGENTE:o TOMA DE
DECISIONESo TALENTO SOCIALo LIDERAZGO FORMATIVOo COMUNICACISN ASERTIVAo
OBJETIVIDADo SOLUCION DE CONFLICTOSo TECNICAS DE INFLUENCIAo ALINEACION
EMPRESARIAL EN FUNCION DE COMPETENCIAS FECHA:  nbs
p;nb sp;n bsp; nbsp;
Jueves 26 y viernes 27 de mayo de 2011INVERSISN NORMAL:   nbs
p;nb sp;$7,000.00MN + IVA ANTES DEL MARTES 17 DE
MAYO:   $4,450.00MN + IVA SOLICITE AHORA MISMO INFORMACION Y EL
TEMARIO DEL entrenamiento.conta...@altorendimiento.com.mx /uEscuela de
Negocios: 56899832 56896568w ww.altorendimiento.com.mx

Esta invitacisn se envma como maximo una vez cada trimestre, si desea
dejar de recibirla responda este email con el asunto remover



Re: I hate Spam

2011-05-11 Thread Mikkel C. Simonsen

OpenBSD MailingList wrote:

and receive a lot of spam mail through the lists.


I only receive a couple a day - no problem at all.


Just wondering how other subscribers solving this mather ?


I use the messages that pass through for training bogofilter :)

Best regards,

Mikkel C. Simonsen



Re: I hate Spam

2011-05-11 Thread rancor
I second that!

Some must live the perfect life if a couple of spam messages is considered
as a problem.

I often use a key on my keyboard named Delete, takes no time at all and I
can sleep well at night.

// rancor

2011/5/11 Mikkel C. Simonsen m...@post5.tele.dk

 OpenBSD MailingList wrote:

 and receive a lot of spam mail through the lists.


 I only receive a couple a day - no problem at all.

  Just wondering how other subscribers solving this mather ?


 I use the messages that pass through for training bogofilter :)

 Best regards,

 Mikkel C. Simonsen



你是英语达人吗?

2011-05-11 Thread 韦博国际英语
d= f/h1h/-hd::eo

Dear misc@openbsd.org,

gd8
e;dd9f(ge-mailh=/d;6d8
f/fHTMLc
h/7h.?i.d8igg=i!5d=?f(h=e$e(g=i!5f5h'e6d8-ih/;h?f!d?!f/o

http://emarketing-china.dmdelivery.com/x/?S7Y1NPqfa2tuavC.yNbQ0NLM1Njc7H_OraW
BJQAA45



Sendmail listens on *:465 when it is not supposed to!

2011-05-11 Thread Michael Sioutis
OS: OpenBSD 4.9 i386

My configuration file for sendmail:
divert(0)dnl
VERSIONID(`@(#)openbsd-localhost.mc $Revision: 1.4 $')
OSTYPE(openbsd)dnl
FEATURE(nouucp, `reject')dnl
FEATURE(`accept_unresolvable_domains')dnl
FEATURE(`no_default_msa')dnl
define(`SMART_HOST',`host.at.some.where')dnl
MAILER(local)dnl
MAILER(smtp)dnl
DAEMON_OPTIONS(`Family=inet, address=127.0.0.1, Name=MTA')dnl
DAEMON_OPTIONS(`Family=inet6, address=::1, Name=MTA6, M=O')dnl
DAEMON_OPTIONS(`Family=inet, address=127.0.0.1, Port=587, Name=MSA, M=E')dnl
DAEMON_OPTIONS(`Family=inet6, address=::1, Port=587, Name=MSA6, M=O, M=E')dnl
CLIENT_OPTIONS(`Family=inet6, Address=::')dnl
CLIENT_OPTIONS(`Family=inet, Address=0.0.0.0')dnl
dnl
dnl Some broken nameservers will return SERVFAIL (a temporary failure)
dnl on T_ (IPv6) lookups.
define(`confBIND_OPTS', `WorkAroundBroken')dnl

$ netstat -na | grep LISTEN
...
tcp  0  0  127.0.0.1.587  *.*LISTEN
tcp  0  0  127.0.0.1.25   *.*LISTEN
tcp  0  0  *.465  *.*LISTEN
...

I can understand 127.0.0.1.587 and 127.0.0.1.25, but there did *.465 come from?!

Also to make sure it is sendmail, fstat | grep 465
root sendmail98854* internet stream tcp 0xd8dd8cc0 *:465

I amd running sendmail with the -bd flag.
Anyone kind enough to educate me?

I thank you.
Mike



Intel GM45 3d acceleration

2011-05-11 Thread Chess Griffin

Hello-

I am thinking about buying a second (used) Thinkpad to run OpenBSD and 
was wondering whether 3d acceleration is working on the Intel GM45 
(4500MHD) graphics chipsets like the ones found on the T400 laptops.  3d 
works fine in OpenBSD on my x61s which has the GM965 (X3100) chipset but 
I don't have access to a machine with the GM45 to test 4.9 or a 
snapshot.


I've searched through the mailing list archives and ran several Google 
searches but did not come up with a definitive answer.  It appears X11 
itself works fine in 2d with the GM45 but I'm uncertain about 3d.


If anyone could confirm yes or no I would appreciate it.  Thank you in 
advance.


--
Chess Griffin



Re: udl(4) support for StarTech CONV-USB2DVI

2011-05-11 Thread T
On Thu, 27 May 2010 11:14:19 -0700, Bryan Vyhmeister wrote:
 On Thu, May 27, 2010 at 12:37 PM, Owain Ainsworth zer...@googlemail.com 
 wrote:
  On Thu, May 27, 2010 at 11:02:10AM -0400, Bryan Vyhmeister wrote:
  Using your patches as a starting point, I was able to get
  the device recognized as udl0 and attach to wsdisplay1. Does
  anyone have a working xorg.conf that uses wsudl as a second
  display? I have tried a bunch of different options but keep
  getting errors. I want to verify that this device can even
  work and then I'll submit the patches back to the list.
  Thank you.
 
  Try using just udl for X at first to make sure it is working.
  Then play with multi-head.

 That's a good idea but I couldn't get it to work either. Below
 are the xorg.conf and Xorg.0.log. I believe the problem is
 stated here:

 (EE) wsudl(0): We are not attached to the udl driver

 I'm just not sure how to go about fixing this.

Has anyone found a solution for this? I've been trying to get a
Lilliput UM-70 working, but so far I've had no success; it's
detected and correctly identified by the kernel, but when trying
to use it I get the same error messages as Bryan did a year ago,
although I'm using OpenBSD 4.9.

/Dave

 Section ServerLayout
Identifier X.org Configured
Screen  0  Screen0 0 0
InputDeviceMouse0 CorePointer
InputDeviceKeyboard0 CoreKeyboard
 EndSection

 Section Files
ModulePath   /usr/X11R6/lib/modules
FontPath /usr/X11R6/lib/X11/fonts/misc/
FontPath /usr/X11R6/lib/X11/fonts/TTF/
FontPath /usr/X11R6/lib/X11/fonts/OTF
FontPath /usr/X11R6/lib/X11/fonts/Type1/
FontPath /usr/X11R6/lib/X11/fonts/100dpi/
FontPath /usr/X11R6/lib/X11/fonts/75dpi/
 EndSection

 Section Module
Load  dbe
Load  dri
Load  dri2
Load  extmod
Load  glx
 EndSection

 Section InputDevice
Identifier  Keyboard0
Driver  kbd
 EndSection

 Section InputDevice
Identifier  Mouse0
Driver  mouse
Option  Protocol wsmouse
Option  Device /dev/wsmouse
Option  ZAxisMapping 4 5 6 7
 EndSection

 Section Monitor
Identifier   Monitor0
VendorName   Monitor Vendor
ModelNameMonitor Model
 EndSection

 Section Device
Identifier  Card0
Driver  wsudl
 EndSection

 Section Screen
Identifier Screen0
Device Card0
MonitorMonitor0
SubSection Display
Viewport   0 0
Depth 24
EndSubSection
 EndSection

 (--) checkDevMem: using aperture driver /dev/xf86
 (--) Using wscons driver on /dev/ttyC4 in pcvt compatibility mode (version 
 3.32)

 X.Org X Server 1.6.5
 Release Date: 2009-10-11
 X Protocol Version 11, Revision 0
 Build Operating System: OpenBSD 4.7 i386
 Current Operating System: OpenBSD myhostname 4.7 GENERIC.MP#0 i386
 Build Date: 26 May 2010  10:02:59PM

Before reporting problems, check http://wiki.x.org
to make sure that you have the latest version.
 Markers: (--) probed, (**) from config file, (==) default setting,
(++) from command line, (!!) notice, (II) informational,
(WW) warning, (EE) error, (NI) not implemented, (??) unknown.
 (==) Log file: /var/log/Xorg.0.log, Time: Thu May 27 13:58:25 2010
 (==) Using config file: /etc/X11/xorg.conf
 (==) ServerLayout X.org Configured
 (**) |--Screen Screen0 (0)
 (**) |   |--Monitor Monitor0
 (**) |   |--Device Card0
 (**) |--Input Device Mouse0
 (**) |--Input Device Keyboard0
 (==) Not automatically adding devices
 (==) Not automatically enabling devices
 (**) FontPath set to:
/usr/X11R6/lib/X11/fonts/misc/,
/usr/X11R6/lib/X11/fonts/TTF/,
/usr/X11R6/lib/X11/fonts/OTF,
/usr/X11R6/lib/X11/fonts/Type1/,
/usr/X11R6/lib/X11/fonts/100dpi/,
/usr/X11R6/lib/X11/fonts/75dpi/,
/usr/X11R6/lib/X11/fonts/misc/,
/usr/X11R6/lib/X11/fonts/TTF/,
/usr/X11R6/lib/X11/fonts/OTF,
/usr/X11R6/lib/X11/fonts/Type1/,
/usr/X11R6/lib/X11/fonts/100dpi/,
/usr/X11R6/lib/X11/fonts/75dpi/
 (**) ModulePath set to /usr/X11R6/lib/modules
 (II) Loader magic: 0x7ec0
 (II) Module ABI versions:
X.Org ANSI C Emulation: 0.4
X.Org Video Driver: 5.0
X.Org XInput driver : 4.0
X.Org Server Extension : 2.0
 (II) Loader running on openbsd
 (--) PCI:*(0:0:2:0) 8086:27ae:17aa:3870 Intel 82945GME Video rev 3,
 Mem @ 0x9828/524288, 0x8000/268435456, 0x9830/262144, I/O
 @ 0x60c0/8
 (--) PCI: (0:0:2:1) 8086:27a6:17aa:3870 Intel 82945GM Video rev 3, Mem
 @ 0x9820/524288
 (II) System resource ranges:
[0] -1  0   0x000f - 0x000f (0x1) MX[B]
[1] -1  0   0x000c - 0x000e (0x3) MX[B]
[2] -1  0   0x - 0x0009 (0xa) MX[B]
[3] -1  0   0x - 

Re: cmpci(4) and S/PDIF?

2011-05-11 Thread Christian Weisgerber
David Steiner davidsteiner2...@gmail.com wrote:

 yes! my soundcard just arrived, which i bought for SPDIF playback with the
 C-Media chipset. sofar it works like a charm. here's how i got it
 working:
 
 aucat -r 44100 -b 8192 -l
 mixerctl -t playback.mode # this puts it in SPDIF playback mode
 
 dmesg specs:
 cmpci0 at pci3 dev 0 function 0 C-Media Electronics CMI8738/C3DX Audio
 rev 0x10: apic 2 int 20
 model: Sweex SC015, 7.1 PCI Sound Card (http://www.sweex.com/SC015)

Hmm.

I have a similar card (it has only four analog jacks and an additional
joystick port) with the very same chipset...

cmpci0 at pci4 dev 6 function 0 C-Media Electronics CMI8738/C3DX Audio
rev 0x10: apic 2 int 20

... but I can't get it to output anything on the S/PDIF port.

Mysterious.  I'm beginning to wonder if the port on my card is
simply shot.

-- 
Christian naddy Weisgerber  na...@mips.inka.de



Re: I hate Spam

2011-05-11 Thread Hasse Hansson
-Oprindelig meddelelse-
Fra: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] Pe vegne af
rancor
Sendt: den 11 maj 2011 21:33
Til: OpenBSD MailingList; misc@openbsd.org
Emne: Re: I hate Spam

I second that!

Some must live the perfect life if a couple of spam messages is considered
as a problem.

I often use a key on my keyboard named Delete, takes no time at all and I
can sleep well at night.

// rancor

2011/5/11 Mikkel C. Simonsen m...@post5.tele.dk

 OpenBSD MailingList wrote:

 and receive a lot of spam mail through the lists.


 I only receive a couple a day - no problem at all.

  Just wondering how other subscribers solving this mather ?


 I use the messages that pass through for training bogofilter :)

 Best regards,

 Mikkel C. Simonsen

Thanks for the answers.
Apparently I didn't make myself clear enough.
I'm not complaining about a couple of spam-mails.
I posted this message to try to learn something from more experienced users.
Like tips  tricks on the mentioned spamd and spamassassin, hell yeah, even
sendmail.
So tips like the above, are especially valuable.

snip
I often use a key on my keyboard named Delete, takes no time at all and I
can sleep well at night.
/snip

All the best
/Hasse



Re: HP DL320 G6 shared network adapter not working

2011-05-11 Thread Jonathan Gray
You can normally get a dedicated iLO port for HP machines that
lack them as an option, this is apparently 514206-B21 on your machine.

There is perhaps a register to poke in bge that will make
bge0 useable regardless of what the bios does as well.

See if you can set it as a dedicated NIC via the bios,
we don't do 'shared' management ports in OpenBSD.

On Tue, May 10, 2011 at 07:54:25AM +, Peter van Oord van der Vlies wrote:
 Hello misc,
 
 I am installing several HP DL320G6 servers and see there are some problems
 with the Network Adapter that is shared with ILO2 .
 
 When openbsd boots the ILO adapter becomes unavailable and within openbsd the
 interface bge0 is not usable. It's connected at 10BaseT but in real it's
 connected at 1000baseT .
 Ifconfig :
 
 bge0: flags=8802BROADCAST,SIMPLEX,MULTICAST mtu 1500
 lladdr 1c:c1:de:f9:c6:50
 priority: 0
 media: Ethernet autoselect (10baseT full-duplex)
 status: active
 
 See below dmesg output :
 
 OpenBSD 4.9 (GENERIC.MP) #794: Wed Mar  2 07:19:02 MST 2011
 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
 cpu0: Intel(R) Xeon(R) CPU E5502 @ 1.87GHz (GenuineIntel 686-class) 1.87
 GHz
 cpu0:
 FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
 H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3
 ,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT
 real mem  = 3747340288 (3573MB)
 avail mem = 3675897856 (3505MB)
 mainbus0 at root
 bios0 at mainbus0: AT/286+ BIOS, date 12/31/99, BIOS32 rev. 0 @ 0xf,
 SMBIOS rev. 2.7 @ 0xdf7fe000 (134 entries)
 bios0: vendor HP version W07 date 01/29/2011
 bios0: HP ProLiant DL320 G6
 acpi0 at bios0: rev 2
 acpi0: sleep states S0 S4 S5
 acpi0: tables DSDT FACP SPCR MCFG HPET  SPMI ERST APIC SRAT  BERT HEST
 DMAR SSDT SSDT SSDT
 acpi0: wakeup devices PCI0(S4)
 acpitimer0 at acpi0: 3579545 Hz, 24 bits
 acpimcfg0 at acpi0 addr 0xe000, bus 0-63
 acpihpet0 at acpi0: 14318179 Hz
 acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
 cpu0 at mainbus0: apid 16 (boot processor)
 cpu0: apic clock running at 133MHz
 cpu1 at mainbus0: apid 20 (application processor)
 cpu1: Intel(R) Xeon(R) CPU E5502 @ 1.87GHz (GenuineIntel 686-class) 1.87
 GHz
 cpu1:
 FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
 H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3
 ,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT
 ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins
 ioapic1 at mainbus0: apid 0 pa 0xfec8, version 20, 24 pins
 acpiprt0 at acpi0: bus 1 (IP2P)
 acpiprt1 at acpi0: bus 3 (NIB1)
 acpiprt2 at acpi0: bus 4 (IPT5)
 acpiprt3 at acpi0: bus -1 (PRB2)
 acpiprt4 at acpi0: bus 10 (PT07)
 acpiprt5 at acpi0: bus 7 (PT03)
 acpiprt6 at acpi0: bus 13 (PT01)
 acpiprt7 at acpi0: bus 0 (PCI0)
 acpicpu0 at acpi0: C3, C3, C1
 acpicpu1 at acpi0: C3, C3, C1
 acpitz0 at acpi0: critical temperature 31 degC
 bios0: ROM list: 0xc/0xb000 0xcb000/0x4000! 0xcf000/0x1a00
 ipmi at mainbus0 not configured
 pci0 at mainbus0 bus 0: configuration mode 1 (bios)
 pchb0 at pci0 dev 0 function 0 Intel 5500 Host rev 0x13
 ppb0 at pci0 dev 1 function 0 Intel X58 PCIE rev 0x13
 pci1 at ppb0 bus 13
 bnx0 at pci1 dev 0 function 0 Broadcom BCM5709 rev 0x20: apic 0 int 4 (irq
 7)
 bnx1 at pci1 dev 0 function 1 Broadcom BCM5709 rev 0x20: apic 0 int 16 (irq
 11)
 ppb1 at pci0 dev 3 function 0 Intel X58 PCIE rev 0x13
 pci2 at ppb1 bus 7
 ppb2 at pci0 dev 7 function 0 Intel X58 PCIE rev 0x13
 pci3 at ppb2 bus 10
 ciss0 at pci3 dev 0 function 0 Hewlett-Packard Smart Array rev 0x01: apic 0
 int 6 (irq 7)
 ciss0: 1 LD, HW rev 2, FW 3.00/3.00, 64bit fifo rro
 scsibus0 at ciss0: 1 targets
 sd0 at scsibus0 targ 0 lun 0: HP, LOGICAL VOLUME, 3.00 SCSI3 0/direct fixed
 sd0: 286070MB, 512 bytes/sec, 585871964 sec total
 pchb1 at pci0 dev 13 function 0 vendor Intel, unknown product 0x343a rev
 0x13
 pchb2 at pci0 dev 13 function 1 vendor Intel, unknown product 0x343b rev
 0x13
 pchb3 at pci0 dev 13 function 2 vendor Intel, unknown product 0x343c rev
 0x13
 pchb4 at pci0 dev 13 function 3 vendor Intel, unknown product 0x343d rev
 0x13
 pchb5 at pci0 dev 13 function 4 Intel 5520/X58 QuickPath rev 0x13
 pchb6 at pci0 dev 13 function 5 Intel 5520 QuickPath rev 0x13
 pchb7 at pci0 dev 13 function 6 vendor Intel, unknown product 0x341a rev
 0x13
 pchb8 at pci0 dev 14 function 0 vendor Intel, unknown product 0x341c rev
 0x13
 pchb9 at pci0 dev 14 function 1 vendor Intel, unknown product 0x341d rev
 0x13
 pchb10 at pci0 dev 14 function 2 vendor Intel, unknown product 0x341e rev
 0x13
 pchb11 at pci0 dev 14 function 3 vendor Intel, unknown product 0x341f rev
 0x13
 pchb12 at pci0 dev 14 function 4 vendor Intel, unknown product 0x3439 rev
 0x13
 Intel X58 Misc rev 0x13 at pci0 dev 20 function 0 not configured
 Intel X58 GPIO rev 0x13 at pci0 dev 20 function 1 not configured
 Intel X58 RAS rev 0x13 at pci0 dev 20 function 2 not configured
 

Package ZDCARD

2011-05-11 Thread eric lee
Dear Sir or Madam



Glad to know that you are on the market for packaging.



ZDCARD, as a leading packaging manufacturer, specializes in this field for
more than 14 years, with top engineers and advanced equipments.



Our products include plastic printed gift box, transparent package, PVC
packaging box,  PVC card, magnetic stripe card, scratch card, special size
card, RFID tags.



If you have any questions, please just feel free to contact me.



Your early reply is much highly appreciated.



Best Regards



Jack

Sales Manager



Contact Person: Jack

Email: l...@zdcardcn.com

MSN: zdc...@live.com

TEL: 86+ 15818643766

WEB: www.packaging.hk



Cómo Ganar Licitaciones con PEMEX, Taller Premier 17 de Mayo 2011

2011-05-11 Thread Ing. Manuel Ruelas
[IMAGE]

Pms Capacitacisn Efectiva de Mixico presenta:

Licitaciones Pzblicas para la Ley de Pemex

17 de Mayo Ciudad de Mixico

Expositor: Mtro. Alberto Ledesma Gonzalez

Empresa Registrada ante la STPS Reg. COLG640205CP30005

Smguenos en Twitter@pmscapacitacion o bien en Facebook PMS de Mixico

Solicite Mayores informes responda este correo electrsnico con los
siguientes datos.
Empresa:
Nombre:
Telifono:
Email:
Nzmero de Interesados:
Y en breve le haremos llegar la informacisn completa del evento. 
O bien comunmquense a nuestros telifonos  un ejecutivo con gusto le
atendera
Tels. (33) 8851-2365, (33)8851-2741.

Copyright (C) 2010, PMS Capacitacisn Efectiva de Mixico  S.C. Derechos
Reservados. PMS de Mixico, El logo de PMS de Mixico son marcas
registradas. ADVERTENCIA PMS de Mixico no cuenta con alianzas
estratigicas de ningzn tipo dentro de la Republica Mexicana. NO SE DEJE
ENGAQAR - DIGA NO A LA PIRATERIA. Todos los logotipos, marcas comerciales
e imagenes son propiedad de sus respectivas corporaciones y se utilizan
con fines informativos solamente.

Este Mensaje ha sido enviado a   misc@openbsd.org  como usuario de Pms de
Mixico o bien un usuario le refiris para recibir este boletmn.
Como usuario de Pms de Mixico, en este acto autoriza de manera expresa
que Pms de Mixico le puede contactar vma correo electrsnico u otros
medios.
Si usted ha recibido este mensaje por error, haga caso omiso de el y
reporte su cuenta respondiendo este correo con el subject BAJAPEMEX

Unsubscribe to this mailing list, reply a blank message with the subject
UNSUBSCRIBE BAJAPEMEX
Tenga en cuenta que la gestisn de nuestras bases de datos es de suma
importancia y no es intencisn de la empresa la inconformidad del
receptor.

[demime 1.01d removed an attachment of type image/jpeg which had a name of 
imagepemex002.jpg]