BCM5719/20 or I350

2014-01-05 Thread Hrvoje Popovski
Hello,

I need to upgrade my OpenBSD firewalls and have chance to buy HP DL360p
G8 or Supermicro 5017R-WRF. Which card is better or more stable for
firewalling BCM5719/20 or Intel I350? I see that I350 doesn't support
VLAN_HWTAGGING nor TX CSUM's and it seems that is quite different from
older em cards. On other hand BCM5719/20 cards are quite new but there
was lot of development in a last couple of months. I prefer em over bge
and I am willing to donate I350 for development, but if there are more
interest in development bge card I will go with BCM5719/20.

Present firewall numbers are between 300-400Mbps and 40-60kpps.

Thank you.



Re: BCM5719/20 or I350

2014-01-05 Thread mxb
I have I350 on several machines and haven’t seen any problems.
 
On 5 jan 2014, at 12:18, Hrvoje Popovski hrv...@srce.hr wrote:

 Hello,
 
 I need to upgrade my OpenBSD firewalls and have chance to buy HP DL360p
 G8 or Supermicro 5017R-WRF. Which card is better or more stable for
 firewalling BCM5719/20 or Intel I350? I see that I350 doesn't support
 VLAN_HWTAGGING nor TX CSUM's and it seems that is quite different from
 older em cards. On other hand BCM5719/20 cards are quite new but there
 was lot of development in a last couple of months. I prefer em over bge
 and I am willing to donate I350 for development, but if there are more
 interest in development bge card I will go with BCM5719/20.
 
 Present firewall numbers are between 300-400Mbps and 40-60kpps.
 
 Thank you.



Re: popa3d removed from base - what do people recommend?

2014-01-05 Thread Peter Hessler
dovecot is pretty much the only sane option for pop3 and imap servers
these days.

On 2014 Jan 04 (Sat) at 21:04:27 -0500 (-0500), John Smith wrote:
:I'm a fan of simple setups and try to stick with the base programs if
:possible. I've been using an SSL relayd wrapper around popa3d for a simple and
:base-supported mail setup with opensmtpd.
:
:What would people recommend for a simple replacement for SSL pop3? I feel like
:the general consensus will be switch to popa3d in ports, but I'll take this
:as an opportunity to migrate to something better if there's a good
:alternative.
:
:Thanks in advance!
:

-- 
I have made this letter longer than usual
because I lack the time to make it shorter.
-- Blaise Pascal



Re: popa3d removed from base - what do people recommend?

2014-01-05 Thread Артур Истомин
On Sun, Jan 05, 2014 at 05:24:35PM +0100, Peter Hessler wrote:
 dovecot is pretty much the only sane option for pop3 and imap servers
 these days.
 
 On 2014 Jan 04 (Sat) at 21:04:27 -0500 (-0500), John Smith wrote:
 :I'm a fan of simple setups and try to stick with the base programs if
 :possible. I've been using an SSL relayd wrapper around popa3d for a simple 
 and
 :base-supported mail setup with opensmtpd.
 :
 :What would people recommend for a simple replacement for SSL pop3? I feel 
 like
 :the general consensus will be switch to popa3d in ports, but I'll take this
 :as an opportunity to migrate to something better if there's a good
 :alternative.
 :
 :Thanks in advance!
 :

I don't think so.
See:
https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=dovecot (31 CVE)
vs.
https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=courier-imap (3 CVE)