Re: Romanian layout in OpenBSD
On Wed, Jun 27, 2012 at 09:07:53PM +0300, Claudiu Tanaselia wrote: Hi Paul, Nice to see other gyp^H^H^HRomanians around here. Come, have a sit. Warm your bones beside the fire... I don't know why I chose UTF-16, it was just to make sure everybody knew what characters I was referring to. Could have been UTF-8 as well, just a bad pick from my part. Thanks for your input, I'll need some time to digest and understand all your settings (still testing things out and still learning). Feel free to email me in private if you need further native explanations. For the time being, I'm using Xfce with its own keyboard layout options and works great for my Office-like text editor needs, but if I'll ever change my desktop manager, I'll have to find some more general approaches, like you suggested. Thought as wscons as the most general approach to Romanian special characters, but you're right, it's not like someone's using them outside X anyway. Don't get me wrong, it would be nice to have them in wscons as well. I was just presenting a practical approach until then.
Hay Un Error En Sus Datos !
Durante nuestro mantenimiento regular y procesos de verificacion hemos detectado un error en la informacion que tenemos registrada de tu cuenta. Esto se debe a algunos de estos factores: 1: Un cambio reciente en su informacion personal (cambio de direccion, etc.). 2: La inhabilidad de verificar con exactitud la opcion de su eleccion concerniente a su forma preferente de pago y manejo de cuenta debido a un error tecnico interno dentro de nuestros servidores. Favor de actualizar y verificar la informacion de su cuenta haciendo clic en el siguente enlace. Esto lo redirigira a la pagina principal de nuestro sitio en Internet y podra actualizar dicha informacion desde la comodidad de su hogar. http://www.centro.bbva.es/servicios/ayuda Si la informacion en su cuenta no se actualiza en las 24 hora siguentes, algunos servicios en el uso y acceso a su cuenta seran restringidos hasta que esta informacion sea verificada y actualizada de antemano agadezco su pronta atencion a este asunto.
Compra Premiada Cielo Aproveite.
Caso não consiga visualizar imagem clique em acima exibir imagem .. [IMAGE] [IMAGE] Compra Premiada. Prezado Cliente ( a ) A cada compra a partir de R$ 30,00 com qualquer cartão de crédito ou débito na máquina da Cielo, você ganha um número da sorte. E é com ele que você participa dos sorteios diários de prêmios. Para participar primeiro cadastre-se nesta página, e boa sorte! Para efetuar o cadastro completo clique aqui. [IMAGE] CIelo Fidelidade. © Copyright 1996-2012 Visa. All Rights Reserved.
Re: İGED AKADEMİ: ETKİN TAHSİLÂT BECERİSİ (SERTİFİKALI)
iged; Reklam ve kirlilik amacýyla mail* yollama!!!*
Re: OpenBSD's webpage desing
If you guys are serious about anything, go look at ports-readmes. It does extract information from the ports tree, and creates readmes for all ports. Currently, it's a static port. It could very well be a dynamic application. You can experiment with css, you can experiment with nginx. Preferably, don't add large dependencies (python or ruby out of the question), write it as a perl fcgi or something, you can use Plack or Catalyst or whatever. Or hey, at least tweak the templates to be nicer.
Re: OpenBSD's webpage desing
On Wed, Jun 27, 2012 at 03:46:12PM -0700, Chris Cappuccio wrote: IIRC, Theo did the current design himself after everyone else failed to come up with something good. Well, Theo had some rather fun constraints, like making a web site that works with antiquated browsers, like no css. If that constraint gets lifted (Theo ? is your browser still stuck in 1990 ?), then it would probably be possible to have something that looks the same / looks better and less painful to change...
Re: OpenBSD's webpage desing
Talk ajax to me, baby. On Thu, Jun 28, 2012 at 10:31 AM, Marc Espie es...@nerim.net wrote: On Wed, Jun 27, 2012 at 03:46:12PM -0700, Chris Cappuccio wrote: IIRC, Theo did the current design himself after everyone else failed to come up with something good. Well, Theo had some rather fun constraints, like making a web site that works with antiquated browsers, like no css. If that constraint gets lifted (Theo ? is your browser still stuck in 1990 ?), then it would probably be possible to have something that looks the same / looks better and less painful to change...
Re: OpenBSD's webpage desing
On 06/28/2012 01:26 AM, Marc Espie wrote: If you guys are serious about anything, go look at ports-readmes. It does extract information from the ports tree, and creates readmes for all ports. Currently, it's a static port. It could very well be a dynamic application. You can experiment with css, you can experiment with nginx. Preferably, don't add large dependencies (python or ruby out of the question), write it as a perl fcgi or something, you can use Plack or Catalyst or whatever. Or hey, at least tweak the templates to be nicer. . no no no, keep it static - afaik all *nix systems and grep just fine w/o dynamic - just shoot changes the changes in static form - and grep it out
Re: OpenBSD's webpage desing
On Thu, Jun 28, 2012 at 02:55:53AM -0700, Timmy L Steve wrote: On 06/28/2012 01:26 AM, Marc Espie wrote: If you guys are serious about anything, go look at ports-readmes. It does extract information from the ports tree, and creates readmes for all ports. Currently, it's a static port. It could very well be a dynamic application. You can experiment with css, you can experiment with nginx. Preferably, don't add large dependencies (python or ruby out of the question), write it as a perl fcgi or something, you can use Plack or Catalyst or whatever. Or hey, at least tweak the templates to be nicer. Seriously, a dynamic app would mean you could get a few more indices and search. The information is already in db form anyways.
Re: 8-ports serial card compatible with OpenBSD
On 06/17/12 18:24, Jiri B wrote: Hello, could anybody recommend OpenBSD compatible 8-ports serial card? I'd like to build a small console server. Thank you. jirib this http://www.digi.com/products/serialcards/digineo works fine on OpenBSD-4.9 puc0 at pci7 dev 0 function 0 Digi Neo-8 rev 0x09: ports: 8 com com2 at puc0 port 0 apic 1 int 20 (irq 5): ns16550a, 16 byte fifo com3 at puc0 port 1 apic 1 int 20 (irq 5): ns16550a, 16 byte fifo com4 at puc0 port 2 apic 1 int 20 (irq 5): ns16550a, 16 byte fifo com5 at puc0 port 3 apic 1 int 20 (irq 5): ns16550a, 16 byte fifo com6 at puc0 port 4 apic 1 int 20 (irq 5): ns16550a, 16 byte fifo com7 at puc0 port 5 apic 1 int 20 (irq 5): ns16550a, 16 byte fifo com8 at puc0 port 6 apic 1 int 20 (irq 5): ns16550a, 16 byte fifo com9 at puc0 port 7 apic 1 int 20 (irq 5): ns16550a, 16 byte fifo from man puc: ... The driver currently supports the following cards: ... Digi International Digi Neo 8 (8-port serial) ... -- Alexei Malinin
Re: OpenBSD's webpage desing
On 2012-06-28, ropers rop...@gmail.com wrote: On 28 June 2012 01:17, Andres Perera andre...@zoho.com wrote: http://www.openbsd.org/papers/bsdcan11-mandoc-openbsd.html that page is encoded iso 8859-1, doesn't state so anywhere, breaks with browsers configured to default to utf8 in the absence of encoding qualifiers $ telnet www.openbsd.org 80 Trying 142.244.12.42... Connected to www.openbsd.org. Escape character is '^]'. GET /papers/bsdcan11-mandoc-openbsd.html HTTP/1.1 Host: www.openbsd.org HTTP/1.1 200 OK Date: Wed, 27 Jun 2012 23:59:19 GMT Server: Apache Last-Modified: Sat, 18 Jun 2011 11:11:28 GMT ETag: 65f60c9352dee7ec594696cdfb681e86316269ef Accept-Ranges: bytes Content-Length: 32754 Content-Type: text/html HTML BODY ... Okay, this could transmit Content-Type: text/html; charset=iso-8859-1 but doesn't, but that's ok, we can do this on a page-by-page basis with a META tag, which ought to be ignored by browsers that don't understand it: IMO if it's worth doing this at all, it needs doing to *all* pages that need it, in one go, consistently. Anything else is likely to be way too much pain for the translators.
Re: Can someone describe these possible long term effects and provide an explicit description of these kernel parameters?
* Tristin Davis tristin.co...@gmail.com [2012-06-14 18:35]: Hardware Type: Intel Version: OpenBSD 4.3 Kernel: MP I am currently researching some tweaks to increase our network throughput here's one: upgrade to a non-ancient OpenBSD version. And don't tell me you can't afford the downtime yadda yadda yadda. Upgrading takes much less downtime and work than randomly pushing kernel config buttons. especialy if you don't understand them, which you have already proven here: net.bpf.bufsize=1048576# Internal kernel buffer for storing packet q. e. d. -- Henning Brauer, h...@bsws.de, henn...@openbsd.org BS Web Services, http://bsws.de, Full-Service ISP Secure Hosting, Mail and DNS Services. Dedicated Servers, Root to Fully Managed Henning Brauer Consulting, http://henningbrauer.com/
Re: need advice, network monitor isues on LAN devices..
I see you got a lot of random suggestions which are all off... * Ton Muller spatie...@online.nl [2012-06-19 22:13]: i want to count send/received packets from each network device i have in my lan. and put them in MRTG as nice graps. you need to collect this data on your switch or each and every device. no problem on any reasonable switch, snmp for netflow/sflow/... if you don't care about connections between your hosts and just want to count packets sent to the outside, and your openbsd box happens to be the gateway, you can do the counting there of course, in a gazillion different ways. -- Henning Brauer, h...@bsws.de, henn...@openbsd.org BS Web Services, http://bsws.de, Full-Service ISP Secure Hosting, Mail and DNS Services. Dedicated Servers, Root to Fully Managed Henning Brauer Consulting, http://henningbrauer.com/
Re: Can someone describe these possible long term effects and provide an explicit description of these kernel parameters?
On Thu, Jun 28, 2012 at 02:23:45PM +0200, Henning Brauer wrote: * Tristin Davis tristin.co...@gmail.com [2012-06-14 18:35]: Hardware Type: Intel Version: OpenBSD 4.3 Kernel: MP I am currently researching some tweaks to increase our network throughput here's one: upgrade to a non-ancient OpenBSD version. And don't tell me you can't afford the downtime yadda yadda yadda. Upgrading takes much less downtime and work than randomly pushing kernel config buttons. especialy if you don't understand them, which you have already proven here: net.bpf.bufsize=1048576# Internal kernel buffer for storing packet q. e. d. Q E D ? :-) -- Gilles Chehade https://www.poolp.org @poolpOrg
Re: Can someone describe these possible long term effects and provide an explicit description of these kernel parameters?
Gilles Chehade gil...@poolp.org writes: Q E D ? :-) CQFD. ;) http://en.wikipedia.org/wiki/Q.E.D. -- Jérémie Courrèges-Anglas GPG fingerprint: 61DB D9A0 00A4 67CF 2A90 8961 6191 8FBF 06A1 1494
Re: OpenBSD's webpage desing
On Thu, Jun 28, 2012 at 10:31, Marc Espie wrote: On Wed, Jun 27, 2012 at 03:46:12PM -0700, Chris Cappuccio wrote: IIRC, Theo did the current design himself after everyone else failed to come up with something good. Well, Theo had some rather fun constraints, like making a web site that works with antiquated browsers, like no css. If that constraint gets lifted (Theo ? is your browser still stuck in 1990 ?), then it would probably be possible to have something that looks the same / looks better and less painful to change... CSS should fall back gracefully. It works well enough with lynx anyway, where graphical positioning is useless. Is netscape 4 still something we need to support?
Re: OpenBSD's webpage desing
On Thu, 28 Jun 2012, Stuart Henderson wrote: On 2012-06-28, ropers rop...@gmail.com wrote: On 28 June 2012 01:17, Andres Perera andre...@zoho.com wrote: A http://www.openbsd.org/papers/bsdcan11-mandoc-openbsd.html that page is encoded iso 8859-1, doesn't state so anywhere, breaks with browsers configured to default to utf8 in the absence of encoding qualifiers $ telnet www.openbsd.org 80 Trying 142.244.12.42... Connected to www.openbsd.org. Escape character is '^]'. GET /papers/bsdcan11-mandoc-openbsd.html HTTP/1.1 Host: www.openbsd.org HTTP/1.1 200 OK Date: Wed, 27 Jun 2012 23:59:19 GMT Server: Apache Last-Modified: Sat, 18 Jun 2011 11:11:28 GMT ETag: 65f60c9352dee7ec594696cdfb681e86316269ef Accept-Ranges: bytes Content-Length: 32754 Content-Type: text/html HTML BODY ... Okay, this could transmit Content-Type: text/html; charset=iso-8859-1 but doesn't, but that's ok, we can do this on a page-by-page basis with a META tag, which ought to be ignored by browsers that don't understand it: IMO if it's worth doing this at all, it needs doing to *all* pages that need it, in one go, consistently. Anything else is likely to be way too much pain for the translators. Using META is _ugly_, especially for specifying a charset (since the page will be read up through the META element using the charset specified in the real header or assumed by the browser -- and that charset could be incompatible with the actual encoding.) Why not just use the AddDefaultCharset directive to ensure that a charset is specified in the real header for all pages? Or is this known to break some browsers that are still in use? Dave -- Dave Anderson d...@daveanderson.com
Re: OpenBSD's webpage desing
imo the issue has more to do with one page using a completely different scheme than all the others. that happens when you copy-paste massive tags at the beginning of every doc instead of using your preferred flavor of #include. you could of course go another route and try to justify it by saying it's html1 unlike the rest, but that's just as useless as fixating on the charset On Thu, Jun 28, 2012 at 9:17 AM, Dave Anderson d...@daveanderson.com wrote: On Thu, 28 Jun 2012, Stuart Henderson wrote: On 2012-06-28, ropers rop...@gmail.com wrote: On 28 June 2012 01:17, Andres Perera andre...@zoho.com wrote: A http://www.openbsd.org/papers/bsdcan11-mandoc-openbsd.html that page is encoded iso 8859-1, doesn't state so anywhere, breaks with browsers configured to default to utf8 in the absence of encoding qualifiers $ telnet www.openbsd.org 80 Trying 142.244.12.42... Connected to www.openbsd.org. Escape character is '^]'. GET /papers/bsdcan11-mandoc-openbsd.html HTTP/1.1 Host: www.openbsd.org HTTP/1.1 200 OK Date: Wed, 27 Jun 2012 23:59:19 GMT Server: Apache Last-Modified: Sat, 18 Jun 2011 11:11:28 GMT ETag: 65f60c9352dee7ec594696cdfb681e86316269ef Accept-Ranges: bytes Content-Length: 32754 Content-Type: text/html HTML BODY ... Okay, this could transmit Content-Type: text/html; charset=iso-8859-1 but doesn't, but that's ok, we can do this on a page-by-page basis with a META tag, which ought to be ignored by browsers that don't understand it: IMO if it's worth doing this at all, it needs doing to *all* pages that need it, in one go, consistently. Anything else is likely to be way too much pain for the translators. Using META is _ugly_, especially for specifying a charset (since the page will be read up through the META element using the charset specified in the real header or assumed by the browser -- and that charset could be incompatible with the actual encoding.) Why not just use the AddDefaultCharset directive to ensure that a charset is specified in the real header for all pages? Or is this known to break some browsers that are still in use? Dave -- Dave Anderson d...@daveanderson.com
Re: OpenBSD's webpage desing
All the stuff under papers comes from wherever. It's not really part of the website proper. Consolidating all that content into a consistent style, any style, would be great. On Thu, Jun 28, 2012 at 12:00, Andres Perera wrote: imo the issue has more to do with one page using a completely different scheme than all the others. that happens when you copy-paste massive tags at the beginning of every doc instead of using your preferred flavor of #include. you could of course go another route and try to justify it by saying it's html1 unlike the rest, but that's just as useless as fixating on the charset On Thu, Jun 28, 2012 at 9:17 AM, Dave Anderson d...@daveanderson.com wrote: On Thu, 28 Jun 2012, Stuart Henderson wrote: On 2012-06-28, ropers rop...@gmail.com wrote: On 28 June 2012 01:17, Andres Perera andre...@zoho.com wrote: A http://www.openbsd.org/papers/bsdcan11-mandoc-openbsd.html that page is encoded iso 8859-1, doesn't state so anywhere, breaks with browsers configured to default to utf8 in the absence of encoding qualifiers $ telnet www.openbsd.org 80 Trying 142.244.12.42... Connected to www.openbsd.org. Escape character is '^]'. GET /papers/bsdcan11-mandoc-openbsd.html HTTP/1.1 Host: www.openbsd.org HTTP/1.1 200 OK Date: Wed, 27 Jun 2012 23:59:19 GMT Server: Apache Last-Modified: Sat, 18 Jun 2011 11:11:28 GMT ETag: 65f60c9352dee7ec594696cdfb681e86316269ef Accept-Ranges: bytes Content-Length: 32754 Content-Type: text/html HTML BODY ... Okay, this could transmit Content-Type: text/html; charset=iso-8859-1 but doesn't, but that's ok, we can do this on a page-by-page basis with a META tag, which ought to be ignored by browsers that don't understand it: IMO if it's worth doing this at all, it needs doing to *all* pages that need it, in one go, consistently. Anything else is likely to be way too much pain for the translators. Using META is _ugly_, especially for specifying a charset (since the page will be read up through the META element using the charset specified in the real header or assumed by the browser -- and that charset could be incompatible with the actual encoding.) Why not just use the AddDefaultCharset directive to ensure that a charset is specified in the real header for all pages? Or is this known to break some browsers that are still in use? Dave -- Dave Anderson d...@daveanderson.com
Re: OpenBSD's webpage desing
hmm, on Thu, Jun 28, 2012 at 09:47:00AM -0400, Dave Anderson said that Using META is _ugly_, especially for specifying a charset (since the page will be read up through the META element using the charset specified in the real header or assumed by the browser -- and that charset could be incompatible with the actual encoding.) Why not just use the AddDefaultCharset directive to ensure that a charset is specified in the real header for all pages? Or is this known to break some browsers that are still in use? because AddDefaultCharset is a braindead concept. as the apache config file comment says (on debian): # In general, it is only a good idea if you know that all your files # have this encoding. It will override any encoding given in the files # in meta http-equiv or xml encoding tags. setting AddDefaultCharset is a sure way to break any content on your site that happens to be written in the non-default-charset, as the server setting overrides the explicit meta-tag. the webserver has no business telling the client what charset the content will be in. it cannot know. especially for dynamic content. the webserver simply shuffles bytes. sometimes it can give a hint with mime-types, sometimes not. -f -- good words cost no more than bad.
Re: OpenBSD's webpage desing
If you guys are serious about anything, go look at ports-readmes. It does extract information from the ports tree, and creates readmes for all ports. Currently, it's a static port. It could very well be a dynamic application. You can experiment with css, you can experiment with nginx. Preferably, don't add large dependencies (python or ruby out of the question), write it as a perl fcgi or something, you can use Plack or Catalyst or whatever. If you're considering dynamic pages (which I'm not advocating) you may want to consider Lua. It's tiny, fast, easy to sandbox security memory-wise, had stable syntax over-time and its manual is a KR-thin 100 pages. Unlike most languages it's meant to be embedded into existing code rather than run stand-alone; its 3rd party library is minuscule and optional. Wikipedia's switching to Lua for their templates, other famous users are nmap, wireshark, snort, openwrt, world of warcraft crysis. Obviously if maintainers' know-how is overwhelmingly perl then it's not worth it. /my 2 cents of a Peseta - no language flame war pls. -- p
cpu choice for firewall
I'm looking to build a new mini-itx firewall based on OpenBSD and would like to get some advice on CPU selection. I've seen multiple statements on this list that indicate CPU cache and CPU speed are the most important factors. Sorry if this is a silly question, but which cache is most useful for what I'm trying to do? L1, L2, or L3? What's more important from a CPU point of view? I don't have a specific amount of throughput that I'm targeting. I'm very curious as to what kind of differences I'm likely to see. By the way, the two CPU's I'm looking at are: Intel Atom D2500 (on Intel D2500CC motherboard) Frequency (MHz): 1867 L1 cache: 32 KB (code) / 24 KB (data) L2 cache: 1024 KB L3 cache: none Intel G620 (on Intel S1200KP motherboard) Frequency (MHz): 2600 L1 cache: 64 KB (code) / 64 KB (data) L2 cache: 512 KB L3 cache: 3072 KB The cache numbers are very different on these CPUs. (both boards are mini-itx and have dual intel gigabit nics)
Re: OpenBSD's webpage desing
On Thu, 28 Jun 2012 10:26:52 +0200 Marc Espie es...@nerim.net wrote: If you guys are serious about anything, go look at ports-readmes. It does extract information from the ports tree, and creates readmes for all ports. Currently, it's a static port. It could very well be a dynamic application. You can experiment with css, you can experiment with nginx. Preferably, don't add large dependencies (python or ruby out of the question), write it as a perl fcgi or something, you can use Plack or Catalyst or whatever. Or hey, at least tweak the templates to be nicer. Perl FTW. I think the site could easily be built with ttree. You will have easy to manage templates and content that anyone with some html knowledge can edit as easily as before; plus you will have static html output. Parts that should be templated can be in a flexible and easy to decipher/learn way. Little or no knowledge of Template::Toolkit would be required for most changes to be made. It's pretty easy to bootstrap with your existing layout and content. The build process could be managed with an easy make script. Template Toolkit is in the ports tree. http://www.devshed.com/c/a/Perl/Building-a-Complete-Website-using-the-Template-Toolkit/ --TimH
Re: cpu choice for firewall
On 06/28/2012 01:50 PM, Joe S wrote: I'm looking to build a new mini-itx firewall based on OpenBSD and would like to get some advice on CPU selection. I've seen multiple statements on this list that indicate CPU cache and CPU speed are the most important factors. Sorry if this is a silly question, but which cache is most useful for what I'm trying to do? L1, L2, or L3? What's more important from a CPU point of view? I don't have a specific amount of throughput that I'm targeting. I'm very curious as to what kind of differences I'm likely to see. By the way, the two CPU's I'm looking at are: Intel Atom D2500 (on Intel D2500CC motherboard) Frequency (MHz): 1867 L1 cache: 32 KB (code) / 24 KB (data) L2 cache: 1024 KB L3 cache: none Intel G620 (on Intel S1200KP motherboard) Frequency (MHz): 2600 L1 cache: 64 KB (code) / 64 KB (data) L2 cache: 512 KB L3 cache: 3072 KB The cache numbers are very different on these CPUs. (both boards are mini-itx and have dual intel gigabit nics) A 100MHz I486 handled 1.544Mbits/sec using about 5% of the CPU. Running IPSEC added another 10% - no hardware acceleration available. On my 5/15Mbit link using a 1GHz VIA chip, it's hard to get CPU utilization over 15%. Latency is 150-300 microseconds. A Geode at 300MHz could probably handle 1Mbit. It all depends on your interfaces, your traffic and whatever else the machine is doing.
Re: OpenBSD's webpage desing
On Thu, Jun 28, 2012 at 10:53 AM, Tim Howe th...@bendtel.net wrote: On Thu, 28 Jun 2012 10:26:52 +0200 Marc Espie es...@nerim.net wrote: If you guys are serious about anything, go look at ports-readmes. It does extract information from the ports tree, and creates readmes for all ports. Currently, it's a static port. It could very well be a dynamic application. You can experiment with css, you can experiment with nginx. Preferably, don't add large dependencies (python or ruby out of the question), write it as a perl fcgi or something, you can use Plack or Catalyst or whatever. Or hey, at least tweak the templates to be nicer. Perl FTW. I think the site could easily be built with ttree. You will have easy to manage templates and content that anyone with some html knowledge can edit as easily as before; plus you will have static html output. Parts that should be templated can be in a flexible and easy to decipher/learn way. Little or no knowledge of Template::Toolkit would be required for most changes to be made. It's pretty easy to bootstrap with your existing layout and content. The build process could be managed with an easy make script. Template Toolkit is in the ports tree. http://www.devshed.com/c/a/Perl/Building-a-Complete-Website-using-the-Templa te-Toolkit/ from the page you referenced: | Although HTML is simple, it does tend to be rather | verbose. It's all too easy for the core content of | the page to be obscured by the extra markup | required around it Then, the next link on that page takes you to: http://www.devshed.com/c/a/Perl/Building-a-Complete-Website-using-the-Templat e-Toolkit/1/ Yes, that *IS* much, /much/ better than the initial HTML. --patrick
Fn keyboard issue on lenovo ideapad
hi there, it seems that the Fn key on my netbook is a bit too eager. it seems to work at first glance all right, fn+volume up/down, fn+brightness works, though fn+rfkill does not. xev shows, that after pressing and releasing fn, the events generated by it never stop: KeyPress event, serial 35, synthetic NO, window 0x101, root 0xa7, subw 0x102, time 339067, (39,53), root:(843,73), state 0x0, keycode 240 (keysym 0x0, NoSymbol), same_screen YES, XLookupString gives 0 bytes: XmbLookupString gives 0 bytes: XFilterEvent returns: False KeyRelease event, serial 35, synthetic NO, window 0x101, root 0xa7, subw 0x102, time 339125, (39,53), root:(843,73), state 0x0, keycode 240 (keysym 0x0, NoSymbol), same_screen YES, XLookupString gives 0 bytes: XFilterEvent returns: False KeyPress event, serial 35, synthetic NO, window 0x101, root 0xa7, subw 0x102, time 339125, (39,53), root:(843,73), state 0x0, keycode 240 (keysym 0x0, NoSymbol), same_screen YES, XLookupString gives 0 bytes: XmbLookupString gives 0 bytes: XFilterEvent returns: False KeyRelease event, serial 35, synthetic NO, window 0x101, root 0xa7, subw 0x102, time 339175, (39,53), root:(843,73), state 0x0, keycode 240 (keysym 0x0, NoSymbol), same_screen YES, XLookupString gives 0 bytes: XFilterEvent returns: False ... ... ... and so it goes forever. is there a non-X way to look at the keyboard queue/events? any ideas? OpenBSD 5.2-beta (GENERIC.MP) #299: Tue Jun 26 23:12:21 MDT 2012 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP cpu0: Intel(R) Atom(TM) CPU N570 @ 1.66GHz (GenuineIntel 686-class) 1.67 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,NXE,LONG,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,LAHF real mem = 1061818368 (1012MB) avail mem = 1033613312 (985MB) mainbus0 at root bios0 at mainbus0: AT/286+ BIOS, date 03/31/10, SMBIOS rev. 2.6 @ 0xeb0f0 (53 entries) bios0: vendor LENOVO version 50CN12WW date 04/22/2011 bios0: LENOVO 20109 acpi0 at bios0: rev 3 acpi0: sleep states S0 S1 S3 S4 S5 acpi0: tables DSDT FACP APIC MCFG SLIC HPET acpi0: wakeup devices P0P8(S4) PS2K(S3) PS2M(S3) EUSB(S3) P0PA(S4) P0PB(S4) P0PC(S4) P0P9(S3) USB0(S3) USB1(S3) USB2(S3) USB3(S3) PWRB(S3) SLPB(S3) acpitimer0 at acpi0: 3579545 Hz, 24 bits acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: apic clock running at 166MHz cpu1 at mainbus0: apid 1 (application processor) cpu1: Intel(R) Atom(TM) CPU N570 @ 1.66GHz (GenuineIntel 686-class) 1.67 GHz cpu1: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,NXE,LONG,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,LAHF cpu2 at mainbus0: apid 2 (application processor) cpu2: Intel(R) Atom(TM) CPU N570 @ 1.66GHz (GenuineIntel 686-class) 1.67 GHz cpu2: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,NXE,LONG,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,LAHF cpu3 at mainbus0: apid 3 (application processor) cpu3: Intel(R) Atom(TM) CPU N570 @ 1.66GHz (GenuineIntel 686-class) 1.67 GHz cpu3: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,NXE,LONG,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,LAHF ioapic0 at mainbus0: apid 4 pa 0xfec0, version 20, 24 pins acpimcfg0 at acpi0 addr 0xf000, bus 0-63 acpihpet0 at acpi0: 14318179 Hz acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus 3 (P0P8) acpiprt2 at acpi0: bus 2 (P0PA) acpiprt3 at acpi0: bus -1 (P0PB) acpiprt4 at acpi0: bus -1 (P0PC) acpiprt5 at acpi0: bus 1 (P0P9) acpiec0 at acpi0 acpicpu0 at acpi0:, C3, C2, C1, PSS acpicpu1 at acpi0:, C3, C2, C1, PSS acpicpu2 at acpi0:, C3, C2, C1, PSS acpicpu3 at acpi0:, C3, C2, C1, PSS acpibtn0 at acpi0: PWRB acpibtn1 at acpi0: SLPB acpibtn2 at acpi0: LID_ acpiac0 at acpi0: AC unit offline acpibat0 at acpi0: BAT1 model LNV-L10C6Y12 serial 004706 type LiIon oem CPT-ES3 acpivideo0 at acpi0: GFX0 acpivout0 at acpivideo0: DD02 bios0: ROM list: 0xc/0xda00! 0xce000/0x1000 cpu0: Enhanced SpeedStep 1663 MHz: speeds: 1667, 1334, 1000 MHz pci0 at mainbus0 bus 0: configuration mode 1 (bios) pchb0 at pci0 dev 0 function 0 Intel Pineview DMI rev 0x02 vga1 at pci0 dev 2 function 0 Intel Pineview Video rev 0x02 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) intagp0 at vga1 agp0 at intagp0: aperture at 0xd000, size 0x1000 inteldrm0 at vga1: apic 4 int 16 drm0 at inteldrm0 Intel Pineview Video rev 0x02 at pci0 dev 2 function 1 not configured azalia0 at pci0 dev 27 function 0 Intel 82801GB HD Audio rev 0x02: msi azalia0: codecs: Realtek ALC269 audio0 at
Re: OpenBSD's webpage desing
On Thu, 28 Jun 2012 11:09:37 -0700 patrick keshishian pkesh...@gmail.com wrote: On Thu, Jun 28, 2012 at 10:53 AM, Tim Howe th...@bendtel.net wrote: On Thu, 28 Jun 2012 10:26:52 +0200 Marc Espie es...@nerim.net wrote: If you guys are serious about anything, go look at ports-readmes. It does extract information from the ports tree, and creates readmes for all ports. Currently, it's a static port. It could very well be a dynamic application. You can experiment with css, you can experiment with nginx. Preferably, don't add large dependencies (python or ruby out of the question), write it as a perl fcgi or something, you can use Plack or Catalyst or whatever. Or hey, at least tweak the templates to be nicer. Perl FTW. I think the site could easily be built with ttree. You will have easy to manage templates and content that anyone with some html knowledge can edit as easily as before; plus you will have static html output. Parts that should be templated can be in a flexible and easy to decipher/learn way. Little or no knowledge of Template::Toolkit would be required for most changes to be made. It's pretty easy to bootstrap with your existing layout and content. The build process could be managed with an easy make script. Template Toolkit is in the ports tree. http://www.devshed.com/c/a/Perl/Building-a-Complete-Website-using-the-Templa te-Toolkit/ from the page you referenced: | Although HTML is simple, it does tend to be rather | verbose. It's all too easy for the core content of | the page to be obscured by the extra markup | required around it Then, the next link on that page takes you to: http://www.devshed.com/c/a/Perl/Building-a-Complete-Website-using-the-Templat e-Toolkit/1/ Yes, that *IS* much, /much/ better than the initial HTML. --patrick 90-something percent of the files would only contain the html content and a tag that references what wrapper is used for it. Editing content would not require knowing or working around any TT markup, which was the main point I was trying to make. --TimH
Re: cpu choice for firewall
On Thu, Jun 28, 2012 at 10:50:28AM -0700, Joe S wrote: I'm looking to build a new mini-itx firewall based on OpenBSD and would like to get some advice on CPU selection. I've seen multiple statements on this list that indicate CPU cache and CPU speed are the most important factors. Sorry if this is a silly question, but which cache is most useful for what I'm trying to do? L1, L2, or L3? https://en.wikipedia.org/wiki/CPU_cache#Multi-level_caches What's more important from a CPU point of view? I don't have a specific amount of throughput that I'm targeting. I'm very curious as to what kind of differences I'm likely to see. By the way, the two CPU's I'm looking at are: Intel Atom D2500 (on Intel D2500CC motherboard) Frequency (MHz): 1867 L1 cache: 32 KB (code) / 24 KB (data) L2 cache: 1024 KB L3 cache: none Intel G620 (on Intel S1200KP motherboard) Frequency (MHz): 2600 L1 cache: 64 KB (code) / 64 KB (data) L2 cache: 512 KB L3 cache: 3072 KB The cache numbers are very different on these CPUs. (both boards are mini-itx and have dual intel gigabit nics) -- Juan Francisco Cantero Hurtado http://juanfra.info
Re: cpu choice for firewall
Frequency, cache and memory bus frequency are the most important things for speed. You need to get the packets to the CPU, and back out quickly. On 2012 Jun 28 (Thu) at 10:50:28 -0700 (-0700), Joe S wrote: :I'm looking to build a new mini-itx firewall based on OpenBSD and :would like to get some advice on CPU selection. I've seen multiple :statements on this list that indicate CPU cache and CPU speed are the :most important factors. Sorry if this is a silly question, but which :cache is most useful for what I'm trying to do? L1, L2, or L3? What's :more important from a CPU point of view? I don't have a specific :amount of throughput that I'm targeting. I'm very curious as to what :kind of differences I'm likely to see. : :By the way, the two CPU's I'm looking at are: : :Intel Atom D2500 (on Intel D2500CC motherboard) :Frequency (MHz): 1867 :L1 cache: 32 KB (code) / 24 KB (data) :L2 cache: 1024 KB :L3 cache: none : :Intel G620 (on Intel S1200KP motherboard) :Frequency (MHz): 2600 :L1 cache: 64 KB (code) / 64 KB (data) :L2 cache: 512 KB :L3 cache: 3072 KB : :The cache numbers are very different on these CPUs. :(both boards are mini-itx and have dual intel gigabit nics) : -- There are very few personal problems that cannot be solved through a suitable application of high explosives.
Re: OpenBSD's webpage desing
On Thu, 28 Jun 2012, frantisek holop wrote: hmm, on Thu, Jun 28, 2012 at 09:47:00AM -0400, Dave Anderson said that Using META is _ugly_, especially for specifying a charset (since the page will be read up through the META element using the charset specified in the real header or assumed by the browser -- and that charset could be incompatible with the actual encoding.) Why not just use the AddDefaultCharset directive to ensure that a charset is specified in the real header for all pages? Or is this known to break some browsers that are still in use? because AddDefaultCharset is a braindead concept. No, just one that needs to be applied only when appropriate. The truly braindead idea is that of partially parsing a file in order to find out what charset you should have been using in doing that parsing. This only mostly works because, for the typical page content from the beginning through any META elements, the encoding specified by most charset values happens to match the encoding specified by 8859-1. as the apache config file comment says (on debian): # In general, it is only a good idea if you know that all your files # have this encoding. It will override any encoding given in the files # in meta http-equiv or xml encoding tags. Precisely. In the case under discussion (where, IIRC, the files in question were all 8859-1 but some of them did not get a charset specified in the real headers) it does exactly what is needed. In more complicated situations more configuration is needed and, if this is done properly, setting a default charset may not be appropriate. setting AddDefaultCharset is a sure way to break any content on your site that happens to be written in the non-default-charset, as the server setting overrides the explicit meta-tag. Not true at all. If you're using different charset values for different files, you need to set up a pattern in your file naming which encodes which charset value is appropriate for each type of file and tell the webserver about it; it then emits the appropriate header for each file. For dynamic content it's even simpler -- the program producing the content should also provide the corresponding header information. the webserver has no business telling the client what charset the content will be in. it cannot know. especially for dynamic content. the webserver simply shuffles bytes. sometimes it can give a hint with mime-types, sometimes not. Nonsense! Dave -- Dave Anderson d...@daveanderson.com
Re: OpenBSD's webpage desing
On Thu, Jun 28, 2012 at 10:53:04AM -0700, Tim Howe wrote: On Thu, 28 Jun 2012 10:26:52 +0200 Marc Espie es...@nerim.net wrote: If you guys are serious about anything, go look at ports-readmes. It does extract information from the ports tree, and creates readmes for all ports. Currently, it's a static port. It could very well be a dynamic application. You can experiment with css, you can experiment with nginx. Preferably, don't add large dependencies (python or ruby out of the question), write it as a perl fcgi or something, you can use Plack or Catalyst or whatever. Or hey, at least tweak the templates to be nicer. Perl FTW. I think the site could easily be built with ttree. You will have easy to manage templates and content that anyone with some html knowledge can edit as easily as before; plus you will have static html output. Parts that should be templated can be in a flexible and easy to decipher/learn way. Little or no knowledge of Template::Toolkit would be required for most changes to be made. It's pretty easy to bootstrap with your existing layout and content. The build process could be managed with an easy make script. Template Toolkit is in the ports tree. http://www.devshed.com/c/a/Perl/Building-a-Complete-Website-using-the-Template-Toolkit/ Well, duh, have a look first. Ports-readmes is obviously built with TT... :) I'm more thinking of finishing turning it into a proper dynamic app, or heck, even designing nicer templates. I have enough shit to develop already, so I have spent zero time writing nice tt files or css. Please go ahead, do something nicer.
Re: cpu choice for firewall
Joe S wrote: I'm looking to build a new mini-itx firewall based on OpenBSD and would like to get some advice on CPU selection. I use 800MHz Via C3s or 266MHz Geodes for 15/15 links. Both work great. Best regards, Mikkel C. Simonsen
Re: OpenBSD's webpage desing
On Thu, Jun 28, 2012 at 3:45 PM, Dave Anderson d...@daveanderson.com wrote: On Thu, 28 Jun 2012, frantisek holop wrote: hmm, on Thu, Jun 28, 2012 at 09:47:00AM -0400, Dave Anderson said that Using META is _ugly_, especially for specifying a charset (since the page will be read up through the META element using the charset specified in the real header or assumed by the browser -- and that charset could be incompatible with the actual encoding.) Why not just use the AddDefaultCharset directive to ensure that a charset is specified in the real header for all pages? Or is this known to break some browsers that are still in use? because AddDefaultCharset is a braindead concept. No, just one that needs to be applied only when appropriate. The truly braindead idea is that of partially parsing a file in order to find out what charset you should have been using in doing that parsing. This only mostly works because, for the typical page content from the beginning through any META elements, the encoding specified by most charset values happens to match the encoding specified by 8859-1. [...] the cool thing about tags is that you can access; e.g., local man pages through file:// and have a properly decoded page. no need for a server most charsets coincide with the first 127 characters of ascii, so what's the problem anyway. yea some browsers will reread the whole html but it's a minimal cost if you place the meta tag at the beginning
Re: OpenBSD's webpage desing
hmm, on Thu, Jun 28, 2012 at 04:15:56PM -0400, Dave Anderson said that because AddDefaultCharset is a braindead concept. No, just one that needs to be applied only when appropriate. The truly braindead idea is that of partially parsing a file in order to find out what charset you should have been using in doing that parsing. This only mostly works because, for the typical page content from the beginning through any META elements, the encoding specified by most charset values happens to match the encoding specified by 8859-1. the charset applies to the content and not the markup, which is always latin1. not mostly. # In general, it is only a good idea if you know that all your files # have this encoding. It will override any encoding given in the files # in meta http-equiv or xml encoding tags. Precisely. In the case under discussion (where, IIRC, the files in question were all 8859-1 but some of them did not get a charset specified in the real headers) it does exactly what is needed. In more complicated situations more configuration is needed and, if this is done properly, setting a default charset may not be appropriate. last time i looked there were numerous translation projects for the openbsd web site. setting AddDefaultCharset is a sure way to break any content on your site that happens to be written in the non-default-charset, as the server setting overrides the explicit meta-tag. Not true at all. If you're using different charset values for different files, you need to set up a pattern in your file naming which encodes which charset value is appropriate for each type of file and tell the webserver about it; it then emits the appropriate header for each file. more nonsense from the apache configuration crew. putting the charset in the names of files? oh please. pure masochism. and for what gain? none, whatsoever. For dynamic content it's even simpler -- the program producing the content should also provide the corresponding header information. and it does so inside the head of the page. a perfectly normal and accepted practice. btw. a content-type meta tag is _mandatory_ in most doctype's. go on, leave it out, cause it's ugly the webserver has no business telling the client what charset the content will be in. it cannot know. especially for dynamic content. the webserver simply shuffles bytes. sometimes it can give a hint with mime-types, sometimes not. Nonsense! double nonsense! :] i wouldnt let you close to any of my webservers, that's for sure. -f -- how can i miss you if you won't go away.
Re: multi-port serial card
On Thu, Jun 28, 2012 at 01:43:10PM +0200, Stefan Sperling wrote: I use this 6-port card and it works well: puc0 at pci0 dev 14 function 0 NetMos Nm9845 rev 0x01: ports: 6 com com3 at puc0 port 0 irq 10: ns16550a, 16 byte fifo com4 at puc0 port 1 irq 10: ns16550a, 16 byte fifo com5 at puc0 port 2 irq 10: ns16550a, 16 byte fifo com6 at puc0 port 3 irq 10: ns16550a, 16 byte fifo com7 at puc0 port 4 irq 10: ns16550a, 16 byte fifo com8 at puc0 port 5 irq 10: ns16550a, 16 byte fifo As usual, cards in shops come labelled with a variety of reseller labels, where brand names might depend on the country you're in etc. But you should be able to find a card based on the NetMos Nm9845 chip if you look around. If you want to see a complete list of the supported PCI multi-serial-port chipsets, check this file: /usr/src/sys/dev/pci/pucdata.c Thanks to everybody for every reply! jirib
Re: Fn keyboard issue on lenovo ideapad
hmm, on Thu, Jun 28, 2012 at 08:24:46PM +0200, frantisek holop said that hi there, it seems that the Fn key on my netbook is a bit too eager. it seems to work at first glance all right, fn+volume up/down, fn+brightness works, though fn+rfkill does not. xev shows, that after pressing and releasing fn, the events generated by it never stop: actually there is another thing with the keyboard: after coming back from suspend it stops responding totally. the touchpad works, external usb keyboards work. i tried xev after a resume and no key generates an event. not even Fn :] is there anything i could try to fix this, this is seemingly the only thing preventing a usable suspend/resume. -f -- a kind word and gun gets you more than a kind word alone.
Re: OpenBSD's webpage desing
Other than boring, no one has actually STATED a problem of the OpenBSD website. It's not PINK enough. I want PINK everywhere. PINK PINK PINK. PINK text on a PINK background. Oh and BROWN. BROWN BROWN BROWN. Thinking about it, PINK text on a PINK background won't work will it. Grey, grey text on a pink background (may prevent tempest attacks too, so perfectly appropriate). seriously though a html5 transition which shows a prominent developer with red freebsd horns charge through the page and a moo sound when you CSS hover over puffy would be greatly appreciated. p.s. I might send patches one day If I can ever afford the time but importantly won't care if they are dropped on the floor either and I much prefer dynamic width sites with generous limits to prevent the rediculous like an A4s worth of text on one line. -- Sharpe: But all women like getting married PAT. Harper: A kno, bu why can they just do it and tell us about it after.
Re: OpenBSD's webpage desing
On Wed, Jun 27, 2012 at 03:46:12PM -0700, Chris Cappuccio wrote: IIRC, Theo did the current design himself after everyone else failed to come up with something good. Well, Theo had some rather fun constraints, like making a web site that works with antiquated browsers, like no css. I suppose you mean worked for all users. Priorities right I would have thought. What works for all I guess is a moving target and is it worth checking what that is when cool factor isn't required. OpenBSD looks good even in IE6, for my sites I prefer looking good in most browsers and don't care about the look on IE6 as long as function isn't lost for IE6 users. If that constraint gets lifted (Theo ? is your browser still stuck in 1990 ?), then it would probably be possible to have something that looks the same / looks better and less painful to change... CSS should fall back gracefully. It works well enough with lynx anyway, where graphical positioning is useless. Is netscape 4 still something we need to support? CSS may not run on old Nokias for example and is only partially implemented by even the newest phones. It can still be used selectively without breaking anything as far as I am aware if desirable though. -- Why not do something good every day and install BOINC.
Re: DHCPD give lease to specific machine brand
On 06/27/2012 08:58 AM, sven falempin wrote: only way ? http://ftp.openbsd.org/pub/OpenBSD/5.1/packages/i386/isc-dhcp-server-4.2.3.2.tgz 2012/6/27 sven falempinsven.falem...@gmail.com Hello Imagine i want all the brand X in subnet Y WWW say : It seems that ISC DHCP can do the trick: class testclass { match if substring (hardware, 1, 2) = 00:ad; } openbsd manpages has only : host ncd1 { hardware ethernet 0:c0:c3:49:2b:57; } so i f i want XX:XX:XX:*:*:* it s gonna be 16 millions lines of declaration. My solution to this problem has been to use dnsmasq. They have an active mail list and the maintainer has been responsive to my requests. If you want use this an internal subnet that is well protected and not subject to miscreants, I think you would be OK. It has worked well for me in a non-hostile environment. I have no opinion if you want to use it on the wild Internet or other hostile environments. Ray
Re: OpenBSD's webpage desing
frantisek holop writes: For dynamic content it's even simpler -- the program producing the content should also provide the corresponding header information. and it does so inside the head of the page. a perfectly normal and accepted practice. btw. a content-type meta tag is _mandatory_ in most doctype's. go on, leave it out, cause it's ugly Not a single doctype requires a meta content-type tag. Although it's good practice to include one for servers that don't specify a charset in HTTP, the fact is that if for any reason the server specifies a different charset, it will override the one in the meta tag. This is historical practice (and probably correct according to RFC) and will never change.
Re: OpenBSD's webpage desing
On Jun 29, 2012 6:56 AM, frantisek holop min...@obiit.org wrote: hmm, on Thu, Jun 28, 2012 at 04:15:56PM -0400, Dave Anderson said that For dynamic content it's even simpler -- the program producing the content should also provide the corresponding header information. and it does so inside the head of the page. a perfectly normal and accepted practice. it'll do it in the http header if the developer for the dynamic page knows what they are doing.
masive problems with bind, need secondaty advice...
ok, this is the situation. i have setup named for caching entries ,and local DNS serving. normaly i have nameserver 192.168.1.254 in my resolv.conf so DNS requests go true ISP dns below is my named.conf ,as far it is, it is correct. named.conf. // acl clients { 127.0.0.1; 192.168.0.0/24; 192.168.1.0/24; 192.168.2.0/24; }; options { version ; // Remove this to allow version queries max-cache-size 1 ; listen-on { any; }; empty-zones-enable yes; allow-recursion { clients; }; }; logging { category lame-servers { null; }; }; // Standard zones // zone . { type hint; //file master/named.root; file master/root.zone; }; zone zone.localhost { type master; file /master/zone.localhost; allow-transfer { localhost;}; }; zone revp.localhost { type master; file /master/revp.localhost; allow-transfer { localhost;}; }; // Master zones // zone xs4non.nl { type master; file master/xs4non.nl; allow-transfer { clients;}; }; zone 0.168.192.in-addr.arpa { type master; file /master/0.168.192.in-addr.arpa; allow-transfer { clients;}; }; my dhcpd.conf is also correct, all my lan machine do a lookup to 192.168.0.240 what my LAN ETH is, request are ok, i got all replies. even my webserver on the box is available, on the box ,when i do a ping, i got a reply,even dig works as it should be. now.. when i change resolv.conf to 192.168.1.240 (inbound ETH what is connected from modem) i can go shop, make coffee, make breakfast... having 2 entries works, but..its so massive slow.. so, what the heck is going on. i want to serve local dns entries ,and caching for WAN. oris it perhaps a pf isues...
Re: masive problems with bind, need secondaty advice...
Put these in your options. forward first; forwarders { Your-ISP-DNS-server0; Your-ISP-DNS-server1; } On Fri, Jun 29, 2012 at 07:30:31AM +0200, Ton Muller wrote: ok, this is the situation. i have setup named for caching entries ,and local DNS serving. normaly i have nameserver 192.168.1.254 in my resolv.conf so DNS requests go true ISP dns below is my named.conf ,as far it is, it is correct. named.conf. // acl clients { 127.0.0.1; 192.168.0.0/24; 192.168.1.0/24; 192.168.2.0/24; }; options { version ; // Remove this to allow version queries max-cache-size 1 ; listen-on { any; }; empty-zones-enable yes; allow-recursion { clients; }; }; logging { category lame-servers { null; }; }; // Standard zones // zone . { type hint; //file master/named.root; file master/root.zone; }; zone zone.localhost { type master; file /master/zone.localhost; allow-transfer { localhost;}; }; zone revp.localhost { type master; file /master/revp.localhost; allow-transfer { localhost;}; }; // Master zones // zone xs4non.nl { type master; file master/xs4non.nl; allow-transfer { clients;}; }; zone 0.168.192.in-addr.arpa { type master; file /master/0.168.192.in-addr.arpa; allow-transfer { clients;}; }; my dhcpd.conf is also correct, all my lan machine do a lookup to 192.168.0.240 what my LAN ETH is, request are ok, i got all replies. even my webserver on the box is available, on the box ,when i do a ping, i got a reply,even dig works as it should be. now.. when i change resolv.conf to 192.168.1.240 (inbound ETH what is connected from modem) i can go shop, make coffee, make breakfast... having 2 entries works, but..its so massive slow.. so, what the heck is going on. i want to serve local dns entries ,and caching for WAN. oris it perhaps a pf isues...