from:"tony"

Re: OpenBSD -current on T495

2019-11-09 Thread Tony Boston

Could you please provide a dmesg output? The info you gave is not very helpful 
without it.

--
Tony

GPG-FP: 49CC8250 CDCF2183 6209C1AE 625677C1 F7783D5F
Threema: DN8PJX4Z






> On 9. Nov 2019, at 12:08, Thomas de Grivel  wrote:
> 
> Everything works except wifi, suspend/resume and screen backlight, and
> mute speakers button.
> 
> --
> Thomas de Grivel
> kmx.io
>

Re: Question regarding wi-fi card support

2019-08-10 Thread Tony Boston

keep in mind that  iwm(4) doesn’t have 802.11ac functionality 

from the manpage:
The iwm driver does not support any of the 802.11ac capabilities offered
 by the adapters.  Support for 802.11n 40MHz channels and Tx aggregation
 is not yet implemented.  Additional work is required in ieee80211(9)
 before those features can be supported.

just so you know

I stumbled upon this when I installed OpenBSD on a few thinkpads with those 
chips built-in and was wondering why I couldn’t connect to my 2nd home network 

--
Tony

GPG-FP: 49CC8250 CDCF2183 6209C1AE 625677C1 F7783D5F
Threema: DN8PJX4Z





> On 9. Aug 2019, at 15:32, Timothy Brown  wrote:
> 
> On Thu, Aug 08, 2019 at 09:30:20PM +, flauenroth wrote:
>> I am in the need for a proper wi-fi solution for my Lenovo E485. 
> 
> I've replaced the original one in my work Dell XPS13 with:
> 
> iwm0 at pci2 dev 0 function 0 "Intel Dual Band Wireless AC 8260" rev 0x3a, msi
> iwm0: hw rev 0x200, fw ver 16.242414.0,
> 
> It's M.2 card, works well.
> 
> Tim
>

Re: Apache 2.4 not running php OpenBSD 6.4

2019-07-11 Thread Tony Boston

IT is not about going to sites like stackoverflow or asking for solutions on 
mailing lists especially THIS topic doesn’t have anything to do with openbsd.
You should learn the basics and your “issue” is very basic. 
I bet the logs you’ll get from either application tell you what the problem is 
but you don’t seem to even know that this would be the first start to solving 
problems..

--
Tony

GPG-FP: 49CC8250 CDCF2183 6209C1AE 625677C1 F7783D5F
Threema: DN8PJX4Z

> On 11. Jul 2019, at 08:40, mansoor  wrote:
> 
> Hi,
> I hope you guys are doing great.
> 
> I am using OpenBSD 6.4, apache-httpd-2.4.35, php version 5.6.
> I have disabled default httpd of OpenBSD, now apache2 is showing plain php
> code in browser it doesn't process php at all.
> 
> I couldn't find solution to this problem on stackOverflow (or any other site
> on internet).
> Please help me if anyone know about this problem. 
> Thanks.
> 
> 
> 
> 
> --
> Sent from: http://openbsd-archive.7691.n7.nabble.com/openbsd-user-misc-f3.html
>

Re: Packet loss with latest snapshot

2019-03-04 Thread Tony Sarendal

On Mon, 4 Mar 2019, 13:29 David Gwynne,  wrote:

> On Mon, Mar 04, 2019 at 10:36:23AM +0100, Tony Sarendal wrote:
> > On Mon, 4 Mar 2019, 09:43 Tony Sarendal,  wrote:
> >
> > >
> > >
> > > Den m??n 4 mars 2019 kl 09:26 skrev Tony Sarendal :
> > >
> > >> Den s??n 3 mars 2019 kl 21:35 skrev Theo de Raadt <
> dera...@openbsd.org>:
> > >>
> > >>> Tony,
> > >>>
> > >>> Are you out of your mind?  You didn't provide even a rough hint about
> > >>> what your firewall configuration looks like.  You recognize that's
> > >>> pathetic, right?
> > >>>
> > >>> > Earlier in the week I could run parallel ping-pong tests through my
> > >>> test
> > >>> > firewalls
> > >>> > at 300kpps without any packet loss. I updated to the latest
> snapshot
> > >>> today
> > >>> > and
> > >>> > start to see packet loss at around 80kpps.
> > >>> >
> > >>> > /T
> > >>> >
> > >>> > OpenBSD 6.5-beta (GENERIC.MP) #764: Sun Mar  3 10:24:08 MST 2019
> > >>> > dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/
> > >>> GENERIC.MP
> > >>> > real mem = 34300891136 (32711MB)
> > >>> > avail mem = 33251393536 (31711MB)
> > >>> > mpath0 at root
> > >>> > scsibus0 at mpath0: 256 targets
> > >>> > mainbus0 at root
> > >>> > bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xec170 (34 entries)
> > >>> > bios0: vendor American Megatrends Inc. version "3.0" date
> 04/24/2015
> > >>> > bios0: Supermicro X10SLD
> > >>> > acpi0 at bios0: rev 2
> > >>> > acpi0: sleep states S0 S4 S5
> > >>> > acpi0: tables DSDT FACP APIC FPDT FIDT SSDT SSDT MCFG PRAD HPET
> SSDT
> > >>> SSDT
> > >>> > SPMI DMAR EINJ ERST HEST BERT
> > >>> > acpi0: wakeup devices PEGP(S4) PEG0(S4) PEGP(S4) PEG1(S4) PEGP(S4)
> > >>> PEG2(S4)
> > >>> > PXSX(S4) RP01(S4) PXSX(S4) RP02(S4) PXSX(S4) RP03(S4) PXSX(S4)
> RP04(S4)
> > >>> > PXSX(S4) RP05(S4) [...]
> > >>> > acpitimer0 at acpi0: 3579545 Hz, 24 bits
> > >>> > acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
> > >>> > cpu0 at mainbus0: apid 0 (boot processor)
> > >>> > cpu0: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.68 MHz,
> 06-3c-03
> > >>> > cpu0:
> > >>> >
> > >>>
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
> > >>> > cpu0: 256KB 64b/line 8-way L2 cache
> > >>> > cpu0: smt 0, core 0, package 0
> > >>> > mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
> > >>> > cpu0: apic clock running at 99MHz
> > >>> > cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4, IBE
> > >>> > cpu1 at mainbus0: apid 2 (application processor)
> > >>> > cpu1: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.01 MHz,
> 06-3c-03
> > >>> > cpu1:
> > >>> >
> > >>>
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
> > >>> > cpu1: 256KB 64b/line 8-way L2 cache
> > >>> > cpu1: smt 0, core 1, package 0
> > >>> > cpu2 at mainbus0: apid 4 (application processor)
> > >>> > cpu2: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.01 MHz,
> 06-3c-03
> > >>> > cpu2:
> > >>> >
> > >>>
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE

Re: Packet loss with latest snapshot

2019-03-04 Thread Tony Sarendal

On Mon, 4 Mar 2019, 09:43 Tony Sarendal,  wrote:

>
>
> Den mån 4 mars 2019 kl 09:26 skrev Tony Sarendal :
>
>> Den sön 3 mars 2019 kl 21:35 skrev Theo de Raadt :
>>
>>> Tony,
>>>
>>> Are you out of your mind?  You didn't provide even a rough hint about
>>> what your firewall configuration looks like.  You recognize that's
>>> pathetic, right?
>>>
>>> > Earlier in the week I could run parallel ping-pong tests through my
>>> test
>>> > firewalls
>>> > at 300kpps without any packet loss. I updated to the latest snapshot
>>> today
>>> > and
>>> > start to see packet loss at around 80kpps.
>>> >
>>> > /T
>>> >
>>> > OpenBSD 6.5-beta (GENERIC.MP) #764: Sun Mar  3 10:24:08 MST 2019
>>> > dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/
>>> GENERIC.MP
>>> > real mem = 34300891136 (32711MB)
>>> > avail mem = 33251393536 (31711MB)
>>> > mpath0 at root
>>> > scsibus0 at mpath0: 256 targets
>>> > mainbus0 at root
>>> > bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xec170 (34 entries)
>>> > bios0: vendor American Megatrends Inc. version "3.0" date 04/24/2015
>>> > bios0: Supermicro X10SLD
>>> > acpi0 at bios0: rev 2
>>> > acpi0: sleep states S0 S4 S5
>>> > acpi0: tables DSDT FACP APIC FPDT FIDT SSDT SSDT MCFG PRAD HPET SSDT
>>> SSDT
>>> > SPMI DMAR EINJ ERST HEST BERT
>>> > acpi0: wakeup devices PEGP(S4) PEG0(S4) PEGP(S4) PEG1(S4) PEGP(S4)
>>> PEG2(S4)
>>> > PXSX(S4) RP01(S4) PXSX(S4) RP02(S4) PXSX(S4) RP03(S4) PXSX(S4) RP04(S4)
>>> > PXSX(S4) RP05(S4) [...]
>>> > acpitimer0 at acpi0: 3579545 Hz, 24 bits
>>> > acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
>>> > cpu0 at mainbus0: apid 0 (boot processor)
>>> > cpu0: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.68 MHz, 06-3c-03
>>> > cpu0:
>>> >
>>> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
>>> > cpu0: 256KB 64b/line 8-way L2 cache
>>> > cpu0: smt 0, core 0, package 0
>>> > mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
>>> > cpu0: apic clock running at 99MHz
>>> > cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4, IBE
>>> > cpu1 at mainbus0: apid 2 (application processor)
>>> > cpu1: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.01 MHz, 06-3c-03
>>> > cpu1:
>>> >
>>> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
>>> > cpu1: 256KB 64b/line 8-way L2 cache
>>> > cpu1: smt 0, core 1, package 0
>>> > cpu2 at mainbus0: apid 4 (application processor)
>>> > cpu2: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.01 MHz, 06-3c-03
>>> > cpu2:
>>> >
>>> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
>>> > cpu2: 256KB 64b/line 8-way L2 cache
>>> > cpu2: smt 0, core 2, package 0
>>> > cpu3 at mainbus0: apid 6 (application processor)
>>> > cpu3: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.01 MHz, 06-3c-03
>>> > cpu3:
>>> >
>>> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,

Re: Packet loss with latest snapshot

2019-03-04 Thread Tony Sarendal

Den mån 4 mars 2019 kl 09:26 skrev Tony Sarendal :

> Den sön 3 mars 2019 kl 21:35 skrev Theo de Raadt :
>
>> Tony,
>>
>> Are you out of your mind?  You didn't provide even a rough hint about
>> what your firewall configuration looks like.  You recognize that's
>> pathetic, right?
>>
>> > Earlier in the week I could run parallel ping-pong tests through my test
>> > firewalls
>> > at 300kpps without any packet loss. I updated to the latest snapshot
>> today
>> > and
>> > start to see packet loss at around 80kpps.
>> >
>> > /T
>> >
>> > OpenBSD 6.5-beta (GENERIC.MP) #764: Sun Mar  3 10:24:08 MST 2019
>> > dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/
>> GENERIC.MP
>> > real mem = 34300891136 (32711MB)
>> > avail mem = 33251393536 (31711MB)
>> > mpath0 at root
>> > scsibus0 at mpath0: 256 targets
>> > mainbus0 at root
>> > bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xec170 (34 entries)
>> > bios0: vendor American Megatrends Inc. version "3.0" date 04/24/2015
>> > bios0: Supermicro X10SLD
>> > acpi0 at bios0: rev 2
>> > acpi0: sleep states S0 S4 S5
>> > acpi0: tables DSDT FACP APIC FPDT FIDT SSDT SSDT MCFG PRAD HPET SSDT
>> SSDT
>> > SPMI DMAR EINJ ERST HEST BERT
>> > acpi0: wakeup devices PEGP(S4) PEG0(S4) PEGP(S4) PEG1(S4) PEGP(S4)
>> PEG2(S4)
>> > PXSX(S4) RP01(S4) PXSX(S4) RP02(S4) PXSX(S4) RP03(S4) PXSX(S4) RP04(S4)
>> > PXSX(S4) RP05(S4) [...]
>> > acpitimer0 at acpi0: 3579545 Hz, 24 bits
>> > acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
>> > cpu0 at mainbus0: apid 0 (boot processor)
>> > cpu0: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.68 MHz, 06-3c-03
>> > cpu0:
>> >
>> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
>> > cpu0: 256KB 64b/line 8-way L2 cache
>> > cpu0: smt 0, core 0, package 0
>> > mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
>> > cpu0: apic clock running at 99MHz
>> > cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4, IBE
>> > cpu1 at mainbus0: apid 2 (application processor)
>> > cpu1: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.01 MHz, 06-3c-03
>> > cpu1:
>> >
>> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
>> > cpu1: 256KB 64b/line 8-way L2 cache
>> > cpu1: smt 0, core 1, package 0
>> > cpu2 at mainbus0: apid 4 (application processor)
>> > cpu2: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.01 MHz, 06-3c-03
>> > cpu2:
>> >
>> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
>> > cpu2: 256KB 64b/line 8-way L2 cache
>> > cpu2: smt 0, core 2, package 0
>> > cpu3 at mainbus0: apid 6 (application processor)
>> > cpu3: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.01 MHz, 06-3c-03
>> > cpu3:
>> >
>> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
>> > cpu3: 256KB 64b/line 8-way L2 cache
>> > cpu3: smt 0, core 3, package 0
>> > ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins
>> > acpimcfg0 at acpi0
>> > acpimcfg0: addr 0xf800, bus 0-63
>> > acpihpet0 at acpi0: 14318179 Hz
>>

Re: Packet loss with latest snapshot

2019-03-04 Thread Tony Sarendal

Den sön 3 mars 2019 kl 21:35 skrev Theo de Raadt :

> Tony,
>
> Are you out of your mind?  You didn't provide even a rough hint about
> what your firewall configuration looks like.  You recognize that's
> pathetic, right?
>
> > Earlier in the week I could run parallel ping-pong tests through my test
> > firewalls
> > at 300kpps without any packet loss. I updated to the latest snapshot
> today
> > and
> > start to see packet loss at around 80kpps.
> >
> > /T
> >
> > OpenBSD 6.5-beta (GENERIC.MP) #764: Sun Mar  3 10:24:08 MST 2019
> > dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
> > real mem = 34300891136 (32711MB)
> > avail mem = 33251393536 (31711MB)
> > mpath0 at root
> > scsibus0 at mpath0: 256 targets
> > mainbus0 at root
> > bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xec170 (34 entries)
> > bios0: vendor American Megatrends Inc. version "3.0" date 04/24/2015
> > bios0: Supermicro X10SLD
> > acpi0 at bios0: rev 2
> > acpi0: sleep states S0 S4 S5
> > acpi0: tables DSDT FACP APIC FPDT FIDT SSDT SSDT MCFG PRAD HPET SSDT SSDT
> > SPMI DMAR EINJ ERST HEST BERT
> > acpi0: wakeup devices PEGP(S4) PEG0(S4) PEGP(S4) PEG1(S4) PEGP(S4)
> PEG2(S4)
> > PXSX(S4) RP01(S4) PXSX(S4) RP02(S4) PXSX(S4) RP03(S4) PXSX(S4) RP04(S4)
> > PXSX(S4) RP05(S4) [...]
> > acpitimer0 at acpi0: 3579545 Hz, 24 bits
> > acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
> > cpu0 at mainbus0: apid 0 (boot processor)
> > cpu0: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.68 MHz, 06-3c-03
> > cpu0:
> >
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
> > cpu0: 256KB 64b/line 8-way L2 cache
> > cpu0: smt 0, core 0, package 0
> > mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
> > cpu0: apic clock running at 99MHz
> > cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4, IBE
> > cpu1 at mainbus0: apid 2 (application processor)
> > cpu1: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.01 MHz, 06-3c-03
> > cpu1:
> >
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
> > cpu1: 256KB 64b/line 8-way L2 cache
> > cpu1: smt 0, core 1, package 0
> > cpu2 at mainbus0: apid 4 (application processor)
> > cpu2: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.01 MHz, 06-3c-03
> > cpu2:
> >
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
> > cpu2: 256KB 64b/line 8-way L2 cache
> > cpu2: smt 0, core 2, package 0
> > cpu3 at mainbus0: apid 6 (application processor)
> > cpu3: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.01 MHz, 06-3c-03
> > cpu3:
> >
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
> > cpu3: 256KB 64b/line 8-way L2 cache
> > cpu3: smt 0, core 3, package 0
> > ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins
> > acpimcfg0 at acpi0
> > acpimcfg0: addr 0xf800, bus 0-63
> > acpihpet0 at acpi0: 14318179 Hz
> > acpiprt0 at acpi0: bus 0 (PCI0)
> > acpiprt1 at acpi0: bus 1 (PEG0)
> > acpiprt2 at acpi0: bus 2 (PEG1)
> > acpiprt3 at acpi0: bus -1 (PEG2)
> > acpiprt4 at acpi0: bus 3 (RP01)
> > acpiprt5 at acpi0: bus -1 (RP02)
> > acpiprt6 at acpi0: bus -1 (RP03)
> > acpiprt7 at acpi0: bus -1 (RP04)
> > acpiprt8 at acpi

Packet loss with latest snapshot

2019-03-03 Thread Tony Sarendal

Earlier in the week I could run parallel ping-pong tests through my test
firewalls
at 300kpps without any packet loss. I updated to the latest snapshot today
and
start to see packet loss at around 80kpps.

/T

OpenBSD 6.5-beta (GENERIC.MP) #764: Sun Mar  3 10:24:08 MST 2019
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 34300891136 (32711MB)
avail mem = 33251393536 (31711MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xec170 (34 entries)
bios0: vendor American Megatrends Inc. version "3.0" date 04/24/2015
bios0: Supermicro X10SLD
acpi0 at bios0: rev 2
acpi0: sleep states S0 S4 S5
acpi0: tables DSDT FACP APIC FPDT FIDT SSDT SSDT MCFG PRAD HPET SSDT SSDT
SPMI DMAR EINJ ERST HEST BERT
acpi0: wakeup devices PEGP(S4) PEG0(S4) PEGP(S4) PEG1(S4) PEGP(S4) PEG2(S4)
PXSX(S4) RP01(S4) PXSX(S4) RP02(S4) PXSX(S4) RP03(S4) PXSX(S4) RP04(S4)
PXSX(S4) RP05(S4) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.68 MHz, 06-3c-03
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 99MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4, IBE
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.01 MHz, 06-3c-03
cpu1:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 0, core 1, package 0
cpu2 at mainbus0: apid 4 (application processor)
cpu2: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.01 MHz, 06-3c-03
cpu2:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu2: 256KB 64b/line 8-way L2 cache
cpu2: smt 0, core 2, package 0
cpu3 at mainbus0: apid 6 (application processor)
cpu3: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.01 MHz, 06-3c-03
cpu3:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu3: 256KB 64b/line 8-way L2 cache
cpu3: smt 0, core 3, package 0
ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins
acpimcfg0 at acpi0
acpimcfg0: addr 0xf800, bus 0-63
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (PEG0)
acpiprt2 at acpi0: bus 2 (PEG1)
acpiprt3 at acpi0: bus -1 (PEG2)
acpiprt4 at acpi0: bus 3 (RP01)
acpiprt5 at acpi0: bus -1 (RP02)
acpiprt6 at acpi0: bus -1 (RP03)
acpiprt7 at acpi0: bus -1 (RP04)
acpiprt8 at acpi0: bus -1 (RP05)
acpiprt9 at acpi0: bus -1 (RP06)
acpiprt10 at acpi0: bus -1 (RP07)
acpiprt11 at acpi0: bus -1 (RP08)
acpiec0 at acpi0: not present
acpicpu0 at acpi0: C1(@1 halt!)
acpicpu1 at acpi0: C1(@1 halt!)
acpicpu2 at acpi0: C1(@1 halt!)
acpicpu3 at acpi0: C1(@1 halt!)
acpipwrres0 at acpi0: PG00, resource for PEG0
acpipwrres1 at acpi0: PG01, resource for PEG1
acpipwrres2 at acpi0: PG02, resource for PEG2
acpipwrres3 at acpi0: FN00, resource for FAN0
acpipwrres4 at acpi0: FN01, resource for FAN1
acpipwrres5 at acpi0: FN02, resource for FAN2
acpipwrres6 at acpi0: FN03, resource for FAN3
acpipwrres7 at acpi0: FN04, resource for FAN4
acpitz0 at acpi0: critical temperature is 105 degC
acpitz1 at acpi0: critical temperature is 105 degC
acpipci0 at acpi0 PCI0: 0x 0x0011 0x0001
acpicmos0 at acpi0
"IPI0001" at acpi0 not configured
acpibtn0 at acpi0: SLPB
acpibtn1 at acpi0: PWRB
"PNP0C0B" at acpi0 not configured
"PNP0C0B" at

Re: Substitute mandoc for tlb command

2019-02-08 Thread Tony Boston


> On 8. Feb 2019, at 16:22, Артур Истомин  wrote:
> 
> I need t command to accomplish example from "The AWK Programming Language" 
> book.
> Is it possible somehow substitute it with mandoc?
> 
> Thanks!
> 

you are funny

--
Tony

GPG-FP: 49CC8250 CDCF2183 6209C1AE 625677C1 F7783D5F
Threema: DN8PJX4Z






signature.asc
Description: Message signed with OpenPGP

40G ixl nics

2019-02-03 Thread Tony Sarendal

Good evening,

We inserted a 2x40G NIC into one of our old franken-pc's, and got this:

ixl0 at pci2 dev 0 function 0 "Intel XL710 QSFP+" rev 0x02: port 0, FW
5.0.40043 API 1.5, msi, address 0c:c4:7a:5e:f9:c8
ixl0: unable to query phy types
ixl1 at pci2 dev 0 function 1 "Intel XL710 QSFP+" rev 0x02: port 1, FW
5.0.40043 API 1.5, msi, address 0c:c4:7a:5e:f9:c9
ixl1: unable to query phy types

NIC:
https://www.supermicro.com/manuals/other/datasheet-AOC-S40G-i1Q_i2Q.pdf

Any ideas ?

Regards Tony

OpenBSD 6.4-current (GENERIC.MP) #658: Fri Feb  1 02:25:34 MST 2019
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 34300891136 (32711MB)
avail mem = 33251758080 (31711MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xec170 (34 entries)
bios0: vendor American Megatrends Inc. version "3.0" date 04/24/2015
bios0: Supermicro X10SLD
acpi0 at bios0: rev 2
acpi0: sleep states S0 S4 S5
acpi0: tables DSDT FACP APIC FPDT FIDT SSDT SSDT MCFG PRAD HPET SSDT SSDT
SPMI DMAR EINJ ERST HEST BERT
acpi0: wakeup devices PEGP(S4) PEG0(S4) PEGP(S4) PEG1(S4) PEGP(S4) PEG2(S4)
PXSX(S4) RP01(S4) PXSX(S4) RP02(S4) PXSX(S4) RP03(S4) PXSX(S4) RP04(S4)
PXSX(S4) RP05(S4) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.69 MHz, 06-3c-03
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LO
NG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 100MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4, IBE
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.01 MHz, 06-3c-03
cpu1:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LO
NG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 0, core 1, package 0
cpu2 at mainbus0: apid 4 (application processor)
cpu2: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.01 MHz, 06-3c-03
cpu2:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LO
NG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu2: 256KB 64b/line 8-way L2 cache
cpu2: smt 0, core 2, package 0
cpu3 at mainbus0: apid 6 (application processor)
cpu3: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.01 MHz, 06-3c-03
cpu3:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LO
NG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu3: 256KB 64b/line 8-way L2 cache
cpu3: smt 0, core 3, package 0
ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins
acpimcfg0 at acpi0
acpimcfg0: addr 0xf800, bus 0-63
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (PEG0)
acpiprt2 at acpi0: bus 2 (PEG1)
acpiprt3 at acpi0: bus -1 (PEG2)
acpiprt4 at acpi0: bus 3 (RP01)
acpiprt5 at acpi0: bus -1 (RP02)
acpiprt6 at acpi0: bus -1 (RP03)
acpiprt7 at acpi0: bus -1 (RP04)
acpiprt8 at acpi0: bus -1 (RP05)
acpiprt9 at acpi0: bus -1 (RP06)
acpiprt10 at acpi0: bus -1 (RP07)
acpiprt11 at acpi0: bus -1 (RP08)
acpiec0 at acpi0: not present
acpicpu0 at acpi0: C1(@1 halt!)
acpicpu1 at acpi0: C1(@1 halt!)
acpicpu2 at acpi0: C1(@1 halt!)
acpicpu3 at acpi0: C1(@1 halt!)
acpipwrres0 at acpi0: PG00, resource for PEG0
acpipwrres1 at acpi0: PG01, resource for PEG1
acpipwrres2 at acpi0: PG02, resource for PEG2
acpipwrres3 at acpi0: FN00, resource for FAN0
acpipwrres4 at acpi0: FN01, resource for FAN1
acpipwrres5 at acpi0: FN02, resource for FAN2
acpipwrres6 at acpi0: FN03, resource for FAN3
acpipwrres7 at acpi0: F

Re: OpenBSD & OpenBGPD router replacement

2018-12-19 Thread Tony Sarendal

You will likely run out of CPU before bandwidth.
Even on nice hardware I have yet to exceed 1Mpps with OpenBSD.

/T


Den ons 19 dec. 2018 kl 03:12 skrev Max Clark :

> Tom,
>
> The presentation was very interesting and it's given me a lot of food for
> thought for another project. Fortunately for this application I don't need
> to worry about fire walling at the BGP edge, just the router replacement
> itself.
>
> Max
>
>
> On Tue, Dec 18, 2018 at 6:02 PM Tom Smyth 
> wrote:
>
> > Max,
> >
> > another thing to consider, is that with BGP feeds / Advertising
> > you only have some control over which direction traffic enters / leaves
> > the network, you may pefer one transit provider, but another network on
> the
> > internet can prefer your second transit provider, so  you can have
> > traffic that appears out of state...
> >
> > If you need stateful packet filtering  I would suggest stepping that
> > protection
> > back from your edge routers  ... disadvantage is you would need 4
> > devices to do this
> > but this would give you the redundancy you want from a Transit
> perspective
> > and you would have the ability control  flow of traffic between your
> > edge routers
> > and your Stateful Firewalls
> >
> > Hope This Helps
> >
> > Tom Smyth
> >
> >
> >
> >
> > On Wed, 19 Dec 2018 at 01:52, Max Clark  wrote:
> > >
> > > Thanks Arnaud - I understand that it's not a stateful
> protocol/failover.
> > > It's interesting from the standpoint that if I lose a specific box
> acting
> > > as a router I would recover and maintain the route via the affected
> > > carrier. A few minutes of outage for carp and BGP to come up is better
> > than
> > > a prolonged outage until equipment is replaced.
> > >
> > > Max
> > >
> > >
> > > On Tue, Dec 18, 2018 at 4:47 PM Arnaud BRAND  >
> > > wrote:
> > >
> > > > Hi Max,
> > > >
> > > > I would advise against using CARP for BGP peers.
> > > > BGP is a stateful protocol and there's no bgpsyncd, so I don't think
> > > > this
> > > > will work.
> > > >
> > > > I would rather build two servers, and have 2 BGP sessions/fullfeeds,
> > > > each
> > > > on one 10G link in order to provide redundancy.
> > > >
> > > > Best regards
> > > > Arnaud
> > > >
> > > > Le 2018-12-19 00:17, Max Clark a écrit :
> > > > > Hello,
> > > > >
> > > > > I've been presented with an opportunity to greatly simplify
> upstream
> > > > > networking within a datacenter. At this point I'm expecting to
> > condense
> > > > > down to two 10 Gbps full feed IPv4+IPv6 transit links plus a 10
> Gbps
> > > > > link
> > > > > to the peering fabric. Total 95th percentile transit averages in
> the
> > > > > 3-4
> > > > > Gbps range with bursts into the 6-7 Gbps (outside of the rare DDoS
> > then
> > > > > everything just catches on fire until provider mitigation kicks
> in).
> > > > >
> > > > > With the exception of the full tables it's a pretty simple
> > requirement.
> > > > > There's plenty of options to purchase a new TOR device(s) that
> could
> > > > > take
> > > > > the full tables, but I'd just rather not commit the budget for it.
> > Plus
> > > > > this feels like the perfect time to do what I've wanted for a
> while,
> > > > > and
> > > > > deploy an OpenBSD & OpenBGPD edge.
> > > > >
> > > > > I should probably ask first - am I crazy?
> > > > >
> > > > > With that out of the way I could either land the fiber directly
> into
> > > > > NICs
> > > > > on an appropriately sized server, or I was thinking about landing
> the
> > > > > transit links on a 10 Gbps L2 switch and using CARP to provide
> server
> > > > > redundancy on my side (so each transit link would be part of VLAN
> > with
> > > > > two
> > > > > servers connected, primary server would advertise the /30 to the
> > > > > carrier
> > > > > with BGPD, and secondary server could take over with heartbeat
> > > > > failure). I
> > > > > would use two interfaces on the server - one facing the Internet
> and
> > > > > one
> > > > > facing our equipment.
> > > > >
> > > > > Would the access switch in this configuration be a bad idea?
> Should I
> > > > > keep
> > > > > things directly homed on the server?
> > > > >
> > > > > And my last question - are there any specific NICs that I should
> look
> > > > > for
> > > > > and/or avoid when building this?
> > > > >
> > > > > Thanks!
> > > > > Max
> > > >
> >
> >
> >
> > --
> > Kindest regards,
> > Tom Smyth
> >
> > Mobile: +353 87 6193172
> > The information contained in this E-mail is intended only for the
> > confidential use of the named recipient. If the reader of this message
> > is not the intended recipient or the person responsible for
> > delivering it to the recipient, you are hereby notified that you have
> > received this communication in error and that any review,
> > dissemination or copying of this communication is strictly prohibited.
> > If you have received this in error, please notify the sender
> > immediately by telephone at the number above and erase the message
> > You are requested to

Re: daily cron not starting

2018-11-13 Thread Tony Boston




On 11/13/2018 06:58 AM, Tom Smyth wrote:
> what does crontab -l say ?

SHELL=/bin/sh
PATH=/bin:/sbin:/usr/bin:/usr/sbin
HOME=/var/log
#
#minute hourmdaymonth   wdaycommand
#
# rotate log files every hour, if necessary
0   *   *   *   *   /usr/bin/newsyslog
# send log file notifications, if necessary
#1-59   *   *   *   *   /usr/bin/newsyslog -m
#
# do daily/weekly/monthly maintenance
30  1   *   *   *   /bin/sh /etc/daily
30  3   *   *   6   /bin/sh /etc/weekly
30  5   1   *   *   /bin/sh /etc/monthly
#0  *   *   *   *   sleep $((RANDOM \% 2048)) &&
/usr/libexec/spamd-setup
# list available patches
30  9   *   *   *   syspatch -c
# expire non confirmed publication requests
30  11  *   *   *   doas -u vmail env -i
HOME=/var/vmail /usr/local/bin/gpg-wks-server --cron
# update the root trust anchor for DNSSEC validation
20  2   1,14*   *   unbound-anchor && rcctl restart
unbound
# get list of authoritative nameservers
20  4   1   May,Nov *   ftp -o
/var/unbound/etc/root.hints https://FTP.INTERNIC.NET/domain/named.cache
&& rcctl restart unbound
@reboot echo "Reboot $(date)"

On 11/13/2018 07:07 AM, Bruno Flueckiger wrote:
> Is the cron(8) daemon running?

yes

> On Tue, 13 Nov 2018 at 05:49, Tony Boston  wrote:
>>
>> Hi misc@,
>>
>> the daily cron is not running anymore although I can execute '/bin/sh
>> /etc/daily' by hand just fine. I don't see anything in the logs and I
>> don't have any clue what else to check.
>> Do you guys have any idea?
>>
>> --
>> Tony
>>
>> GPG-FP: 49CC8250 CDCF2183 6209C1AE 625677C1 F7783D5F
>> Threema: DN8PJX4Z
>>
> 
>

daily cron not starting

2018-11-12 Thread Tony Boston

Hi misc@,

the daily cron is not running anymore although I can execute '/bin/sh
/etc/daily' by hand just fine. I don't see anything in the logs and I
don't have any clue what else to check.
Do you guys have any idea?

-- 
Tony

GPG-FP: 49CC8250 CDCF2183 6209C1AE 625677C1 F7783D5F
Threema: DN8PJX4Z

Re: Reduced network performance since installing 6.4

2018-11-05 Thread Tony Sarendal

Hola,

Unrelated to wifi, I have seen a dramatic drop in forwarding performance in
6.4 and later.
I run some basic performance tests to verify the releases before we deploy
them.
For the same test on the same hardware I have this:

Release, pps
snapshot, 340k
6.4, 340k
6.3, 450k
6.2, 430k
6.1, 420k
6.0, 425k
5.9, 420k
5.8, 450k

In this case the OpenBSD boxes are deployed as firewall clusters, 4x IX in
a LACP trunk, with VLAN interfaces.
6.3 is faster than it looks, in tests like sessions/second it was a lot
faster than 6.2.

/T


OpenBSD 6.4-current (GENERIC.MP) #425: Sun Nov  4 21:32:53 MST 2018
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 34300891136 (32711MB)
avail mem = 33252069376 (31711MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xec170 (34 entries)
bios0: vendor American Megatrends Inc. version "3.0" date 04/24/2015
bios0: Supermicro X10SLD
acpi0 at bios0: rev 2
acpi0: sleep states S0 S4 S5
acpi0: tables DSDT FACP APIC FPDT FIDT SSDT SSDT MCFG PRAD HPET SSDT SSDT
SPMI DMAR EINJ ERST HEST BERT
acpi0: wakeup devices PEGP(S4) PEG0(S4) PEGP(S4) PEG1(S4) PEGP(S4) PEG2(S4)
PXSX(S4) RP01(S4) PXSX(S4) RP02(S4) PXSX(S4) RP03(S4) PXSX(S4) RP04(S4)
PXSX(S4) RP05(S4) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.64 MHz, 06-3c-03
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 99MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4, IBE
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.00 MHz, 06-3c-03
cpu1:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 0, core 1, package 0
cpu2 at mainbus0: apid 4 (application processor)
cpu2: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.00 MHz, 06-3c-03
cpu2:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu2: 256KB 64b/line 8-way L2 cache
cpu2: smt 0, core 2, package 0
cpu3 at mainbus0: apid 6 (application processor)
cpu3: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.00 MHz, 06-3c-03
cpu3:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,PERF,ITSC,FSGSBASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu3: 256KB 64b/line 8-way L2 cache
cpu3: smt 0, core 3, package 0
ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins
acpimcfg0 at acpi0
acpimcfg0: addr 0xf800, bus 0-63
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (PEG0)
acpiprt2 at acpi0: bus 2 (PEG1)
acpiprt3 at acpi0: bus -1 (PEG2)
acpiprt4 at acpi0: bus 3 (RP01)
acpiprt5 at acpi0: bus -1 (RP02)
acpiprt6 at acpi0: bus -1 (RP03)
acpiprt7 at acpi0: bus -1 (RP04)
acpiprt8 at acpi0: bus -1 (RP05)
acpiprt9 at acpi0: bus -1 (RP06)
acpiprt10 at acpi0: bus -1 (RP07)
acpiprt11 at acpi0: bus -1 (RP08)
acpiec0 at acpi0: not present
acpicpu0 at acpi0: C1(@1 halt!)
acpicpu1 at acpi0: C1(@1 halt!)
acpicpu2 at acpi0: C1(@1 halt!)
acpicpu3 at acpi0: C1(@1 halt!)
acpipwrres0 at acpi0: PG00, resource for PEG0
acpipwrres1 at acpi0: PG01, resource for PEG1
acpipwrres2 at acpi0: PG02, resource for PEG2
acpipwrres3 at acpi0: FN00, resource for FAN0
acpipwrres4 at acpi0: FN01, resource for FAN1
acpipwrres5 at acpi0: FN02, resource for FAN2
acpipwrres6 at acpi0: FN03, resource for FAN3
acpipwrres7 at acpi0:

Re: httpd rewiterules like apache

2018-11-01 Thread Tony Boston

You should definitely try the relayd(8) route here.

> On 1. Nov 2018, at 11:32, Markus Rosjat  wrote:
> 
> Hi all,
> 
> I was wondering if it is possible to do like a proxy rewrite like with Apache 
> rewrite mod?
> 
> RewriteRule ^(.*) http://some.tld/$1 [L,P]
> 
> So here the P Flag should preserver the original domain in the url and just 
> proxy the request to the other location (not on the same machine!)
> 
> Since there is redirection I can do this but then the url gets of course 
> replaced  in a block directive
> 
>  block return 301 "http://dome.tld$REQUEST_URI;
> 
> I read that there is rewrite support but as far as I figured it's just for 
> location on the filesystem ?
> 
> regards
> 
> --
> Markus Rosjatfon: +49 351 8107224mail: ros...@ghweb.de
> 
> G+H Webservice GbR Gorzolla, Herrmann
> Königsbrücker Str. 70, 01099 Dresden
> 
> http://www.ghweb.de
> fon: +49 351 8107220   fax: +49 351 8107227
> 
> Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt werden muss! Before you 
> print it, think about your responsibility and commitment to the ENVIRONMENT
> 

--
Tony

GPG-FP: 49CC8250 CDCF2183 6209C1AE 625677C1 F7783D5F
Threema: DN8PJX4Z






signature.asc
Description: Message signed with OpenPGP

35C3 - Chaos Communication Congress 2018

2018-10-27 Thread Tony Boston

Hello all,

I'd like to ask if somebody is going to the congress this year.
I attended last year too but I had to leave at the first day after 3
hours because I somehow got lost and didn't find a place "to be".

Are there any plans for an assembly or similar or at least an
openbsd-meetup where I could take part?

Any information or direct contact via email would be really
appreciated.


-- 
Tony

GPG-FP: 49CC8250 CDCF2183 6209C1AE 625677C1 F7783D5F
Threema: DN8PJX4Z

sympa and opensmtpd/httpd

2018-10-07 Thread Tony Boston

Hi,

has anyone running sympa with opensmtpd and httpd?

I can not figure out how to configure slowcgi correctly in
/etc/httpd.conf and if anybody is using this already, I'd really
appreciate any hint or config-insight :)
thanks

Tony
-- 
GPG-KEY: 0x5C5C239D81121B35
GPG-FP:  49CC8250 CDCF2183 6209C1AE 625677C1 F7783D5F

Re: Monitoring system

2018-10-04 Thread Tony Boston

I am using Icinga2 on all our machines - you'll find it in packages and
the newest version you'll get with OpenBSD 6.4

On 10/05/18 05:09, Tom Smyth wrote:
> Both of of the ones I emailed to you are in ports
> 
> also there is pmmact by the Legend paulo Lucende
> that can aggregate and convert multiple logs to different formats
> worth having a look at that also ...
> On Fri, 5 Oct 2018 at 04:08, Tom Smyth  wrote:
>>
>>
>> Librenms would be worth a look i believe it has email alerting
>> and snmp support needs php and mysql
>> Zabbix   ...havent used this one but it has monitoring functionality ...
>> If you are monitoring alot of systems, make sure your storage can
>> cope with alot of I/O or you will see annoying gaps in your graphs
>> so use SSDs and make sure that when formatting the system
>> that you align with 1MB offset ...  2048 sectors  (instead the default
>> 64 bytes)
>>
>> Peace
>> Tom Smyth
>>
>>
>> On Thu, 4 Oct 2018 at 23:57, flipchan  wrote:
>>>
>>> Greetings all,
>>>
>>> I need to install a monitoring system with email notifications, I have used 
>>> mmonit which is great but it's a little too pricey for personal use.
>>>
>>> Can anyone recommend a open source monitoring system that support email 
>>> notifications and monitoring of multiple hosts running openbsd.
>>>
>>>
>>> Something more modern then nagios would be great, I just need it to work so 
>>> as long as it supports email notifications and monitoring of more then one 
>>> host it's good
>>>
>>>
>>> Thanks in advance
>>>
>>>
>>>
>>> --
>>> Take Care Sincerely flipchan layerprox dev
>>
>>
>>
>> --
>> Kindest regards,
>> Tom Smyth
>>
>> Mobile: +353 87 6193172
>> The information contained in this E-mail is intended only for the
>> confidential use of the named recipient. If the reader of this message
>> is not the intended recipient or the person responsible for
>> delivering it to the recipient, you are hereby notified that you have
>> received this communication in error and that any review,
>> dissemination or copying of this communication is strictly prohibited.
>> If you have received this in error, please notify the sender
>> immediately by telephone at the number above and erase the message
>> You are requested to carry out your own virus check before
>> opening any attachment.
> 
> 
> 

-- 
GPG-KEY: 0x5C5C239D81121B35
GPG-FP:  49CC8250 CDCF2183 6209C1AE 625677C1 F7783D5F
Threema: DN8PJX4Z

Re: Integration between CARP and BGPD ?

2018-09-13 Thread Tony Sarendal

Or re-write next-hop to the carp address, so carp actually decides the
master firewall.

/T


Den tors 13 sep. 2018 kl 00:20 skrev Tim Jones <
b631093f-779b-4d67-9ffe-5f6d5b1d3...@protonmail.ch>:

>
> On Wednesday, 12 September 2018 20:49, Stuart Henderson <
> s...@spacehopper.org> wrote:
>
> > On 2018-09-11, Tim Jones
> b631093f-779b-4d67-9ffe-5f6d5b1d3...@protonmail.ch wrote:
> >
> > > I've had a quick look through the man pages and am still a bit
> unclear, perhaps I'm just overthinking this ?
> > > Let's say I've got two perimeter "firewalls" running OpenBSD, talking
> BGP to upstream routers.
> > > On the "LAN" side I'm thinking about CARP, which is active/passive,
> and the devices on "LAN" side will have the CARP set as their default
> gateway.
> > > If both BGP talkers advertise the "LAN" to the upstreams (i.e.
> "network 192.0.2.0/24" in bgpd.conf), how does that work in terms of
> reachability from the device that is currently CARP passive ?
> > > The man pages mention two CARP related configuration options for
> bgpd.conf but these don't seem to cater for the application I'm thinking of
> ?  (i.e. "demote" is more related to waiting until BGP is established, and
> "depend on" is related to staying in idle if CARP is passive, which is
> obviously not an attractive idea as I'd obviously like both upstreams BGP
> sessions active ? ).
> >
> > If both are advertising the same prefixes, packets could arrive at
> > either router, so to do this you'll need an IP address on the "carpdev
> > interface" i.e. the interface that carp is running over.
> >
> > PF does TCP sequence number checking, so to avoid problems there you'll
> > also need one of the following
> >
> > -   not use PF
> > -   use PF rules with "keep state (sloppy)"
> > -   use pfsync(4) with the "defer" flag
> >
> > Alternatively maybe you could control advertising the network by not
> > listing it in config, but use "bgpctl network" commands from
> ifstated or
> > similar, that way directing traffic towards the correct machine.
> Either
> > advertise with low localpref when you have carp backup and switch to
> > high localpref when you have master. Or (probably only really useful
> > within your own network) advertise the whole lan all the time, but
> also
> > advertise deaggregates from the machine with carp master.
> >
>
> Thank you Stuart !
>
> Based on your comments I've just spent in a bit of time with ifstated and
> it seems that was the missing link.  Fails over nicely now with both BGP
> instances advertising but changing prefs.
>
>

Re: Vultr hosting of OpenBSD

2018-09-08 Thread Tony Boston

On 08.09.18 02:55, Ken M wrote:
> This is related to my mail server thread, but in googling about openbsd on 
> vultr
> I have seen some comments here and there about issues with the default image 
> on
> vultr and to use a custom image or iso instead of what they have. Some of 
> these
> seem dated and related to older versions of openbsd. My questions are:
> 
> 1. Is it still current information that it would be better to use my own
> image/install/iso for openbsd on Vultr?
> 
> 2. Is vultr a good place to host an openbsd box? If not interested in hearing
> alternatives.
> 
> Also a side note question, is it possible to use VMD/VMM in an openbsd guest 
> on
> vultr. I was thinking probably not. I just ask as sometinmes I appreciate 
> using
> docker to test things, yeah I know. But the point is my dev workflow on my
> openbsd current laptop involves sometimes using alpine linux on vmm an using
> docker on that to spin up different things I want to check out.
> 
> Ken
> 

I am running a few instances at vultr - no problems at all with the
images they have.

-- 
Tony

GPG-FP: 913BBD25 8DA503C7 BAE0C0B6 8995E906 4FBAD580
Threema: DN8PJX4Z

Re: Python flask socket with httpd problems

2018-08-12 Thread Tony Boston

On 12.08.18 03:25, flipchan wrote:
> Hello all,
> 
> im trying to run a python flask application with httpd
> as a reverse proxy and im not getting it to work.
> 
> According to the python flask's online documentation, 
> i should be able to just create a fast-cgi socket that 
> should work with httpd, however i am only getting 500
> errors when i do this.
> Link: https://uwsgi-docs.readthedocs.io/en/latest/OpenBSDhttpd.html
> 
> 
> 
> curl output:
> * About to connect() to mywebsite.com port 8086 (#0)
> *   Trying myip...
> * connected
> * Connected to mywebsite.com (myip) port 8086 (#0)
> > GET /test HTTP/1.1
> > User-Agent: curl/7.26.0
> > Host: mywebsite.com:8086
> > Accept: */*
> > 
> * additional stuff not fine transfer.c:1037: 0 0
> * HTTP 1.0, assume close after body
> < HTTP/1.0 500 Internal Server Error
> < Date: Tue, 15 May 2018 15:40:40 GMT
> < Server: OpenBSD httpd
> < Connection: close
> < Content-Type: text/html
> < Content-Length: 451
> < 
> 
> 
> 
> 
> 500 Internal Server Error
> <!--
> body { background-color: white; color: black; font-family: 'Comic Sans MS', 
> 'Chalkboard SE', 'Comic Neue', sans-serif; }
> hr { border: 0; border-bottom: 1px dashed; }
> 
> -->
> 
> 
> 500 Internal Server Error
> 
> OpenBSD httpd
> 
> 
> * Closing connection #0
> 
> # cat /etc/httpd.conf
> # $OpenBSD: httpd.conf,v 1.16 2016/09/17 20:05:59 tj Exp $
> 
> # A minimal default server
> server "default" {
> listen on 0.0.0.0 port 8086
> 
> fastcgi socket "/var/www/run/pfweb.sock"
> }
> 
> 
> 
> 
> i also tried to have the python script manually create a 
> fast-cgi socket with the python library flup 
> ("https://pypi.python.org/pypi/flup/1.0.2;)
> 
> 
> 
> Have anyone gotten a python flask application to work with httpd 
> as a reverse proxy with a fast-cgi socket? cuz im really not 
> getting it to work.
> 
> 
> 
> Thanks in advanced
> -flipchan
> 
> -- 
> Take Care Sincerely flipchan layerprox dev

Since you're getting Error 500 - you should look at your webserver
logs - I don't see any in your email

-- 
Tony

GPG-FP: 913BBD25 8DA503C7 BAE0C0B6 8995E906 4FBAD580
Threema: DN8PJX4Z


signature.asc
Description: PGP signature

Re: stuck on spamd

2018-06-14 Thread Tony Boston

Am Mittwoch, den 13.06.2018, 22:05 +0200 schrieb Hasse Hansson:
> Hello and thank you for your answer.
> I've adjusted my settings according to your advice, but now it looks
> like
> it just directly whitelist every connection without greylisting.
> 
> smtp$ sudo spamdb | sort
> WHITE|104.47.1.210|||1528919648|1528919648|1532030048|1|0
> WHITE|104.47.6.201|||1528919611|1528919611|1532030011|1|0
> WHITE|185.234.216.189|||1528917936|1528917936|1532029991|1|3
> WHITE|185.234.216.204|||1528919598|1528919598|1532029998|1|0
> WHITE|209.85.213.46|||1528918933|1528918933|1532029333|1|0
> WHITE|209.85.213.53|||1528918873|1528918873|1532029273|1|0
> WHITE|40.92.67.106|||1528918696|1528918696|1532029096|1|0
> WHITE|40.92.68.98|||1528918725|1528918725|1532029125|1|0
> WHITE|59.70.207.21|||1528918455|1528918455|1532028855|1|0
> WHITE|91.121.119.198|||1528919326|1528919326|1532029726|1|0
> WHITE|91.136.10.81|||1528919583|1528919583|1532029983|1|0
> 
> This is how my files look like now. spamd.conf is the original one.
>  
> smtp$ sudo cat /etc/rc.conf.local
> httpd_flags=
> pkg_scripts=postfix dovecot saslauthd dbus_daemon avahi_daemon
> messagebus mysqld php70_fpm
> smtpd_flags=NO
> unbound_flags=
> spamd_flags="-v -G 2:4:864"
> spamd_grey=YES
> spamlogd_flags="-I"
> -
> smtp$ sudo cat /etc/pf.conf
> ext_if = "em0"
> int_if = "fxp0"
> localnet = $int_if:network
> tcp_services = "{ domain, ntp, imap, imaps, pop3, pop3s }"
> mail_services = "{ smtp, smtps, submission }"
> udp_services = "{ domain, ntp }"
> icmp_types = "echoreq"
> 
> table  { 0.0.0.0/8 10.0.0.0/8 127.0.0.0/8
> 169.254.0.0/16 \
>172.16.0.0/12 192.0.0.0/24 192.0.2.0/24
> 224.0.0.0/3 \
>192.168.0.0/16 198.18.0.0/15
> 198.51.100.0/24\
>203.0.113.0/24 }
> 
> table  persist
> table  persist file "/etc/abusers"
> table  persist
> table  persist file "/etc/mail/nospamd"
> 
> set block-policy drop
> set loginterface egress
> set skip on lo0
> 
> match in all scrub (no-df random-id max-mss 1440)
> match out on egress inet from !(egress:network) to any nat-to
> (egress:0)
> 
> antispoof quick for { egress $ext_if int_if }
> 
> block in quick on egress from  to any
> block return out quick on egress from any to 
> 
> block in quick log on egress from  to any label "abusers"
> 
> block all
> pass out quick inet
> 
> pass in on egress inet proto tcp from any to any port smtp \
> divert-to 127.0.0.1 port spamd
> pass in on egress proto tcp from  to any port smtp
> pass in log on egress proto tcp from  to any port smtp
> pass out log on egress proto tcp to any port smtp
> 
> pass in on { $ext_if } inet
> 
> pass log quick proto tcp from any to (egress) port ssh flags S/SA
> keep state \
> (max-src-conn 15, max-src-conn-rate 5/3, overload
>  flush global)
> 
> pass log quick proto tcp from any to (egress) port $tcp_services
> flags S/SA keep state \
> (max-src-conn 50, max-src-conn-rate 15/5, overload
>  flush global)
> 
> pass log quick proto tcp from any to (egress) port $mail_services
> flags S/SA keep state \
> (max-src-conn 50, max-src-conn-rate 25/5, overload
>  flush global)
> 
> pass in on egress inet proto tcp from any to (egress) port { 80 443 }
> 
> pass inet proto tcp from { self, $localnet }
> 
> pass quick inet proto tcp to port $tcp_services keep state
> pass quick inet proto tcp to port $mail_services keep state
> 
> pass quick inet proto udp to port $udp_services keep state
> pass out on $ext_if inet proto udp to port 33433 >< 33626
> pass inet proto icmp all icmp-type $icmp_types
> 
As far as my knowledge goes, since you say 'pass out quick inet' early
on in the ruleset, the other 'pass out rules' don't get a chance to be
triggered. Also, quick only makes sense if you put them at first, not
somewhere at the end of your ruleset.

--
Tony
 
GPG-FP: 913BBD25 8DA503C7 BAE0C0B6 8995E906 4FBAD580
Threema: DN8PJX4Z
XMPP: tb@bsd.services

Re: Can SSH report successful connections to pf?

2018-05-04 Thread Tony Boston

On 05/05/18 00:16, Luke Small wrote:
> Can SSH and possibly other programs more easily able to report successful
> connections so pf can make stricter bruteforce connection rejecting even
> better?
>

Hi,

could be just me but I didn't get what you want to achieve really.

Could you be more specific here?

-- 
Tony

GPG-FP: 913BBD25 8DA503C7 BAE0C0B6 8995E906 4FBAD580



signature.asc
Description: OpenPGP digital signature

Re: mail sign/encrypt

2018-05-04 Thread Tony Boston

On 05/03/18 10:30, Rudolf Sykora wrote:
> Hello misc,
> 
> I'd like to be able to optionally
> - sign my email,
> - encrypt the email.
> 
> I have a certificate in the .p12 form,
> containing my private key and two certificates,
> one of them mine.
> 
> I want to prepare mail locally, i.e. to use
> some simple locally installed MUA.
> 
> Is there a way with the default "mail" program,
> or do I have to install some more powerful MUA?
> 
> Thanks
> Ruda
> 

I'd suggest Thunderbird + Enigmail for that but that really depends on
what machine you're running on or if you want to go for CLI only

just my 2 cents

-- 
Tony

GPG-FP: 913BBD25 8DA503C7 BAE0C0B6 8995E906 4FBAD580



signature.asc
Description: OpenPGP digital signature

Re: pkg using "6.3" instead of "snapshots"

2018-03-24 Thread Tony Boston

> It's the point in time where -current is in release mode (after being
> -beta for a while) to prepare for the next release.

Ahh there we go, I guess I just missed that timeframe last time. Thanks
for explaining

-- 
Tony

GPG-FP: 913BBD25 8DA503C7 BAE0C0B6 8995E906 4FBAD580



signature.asc
Description: OpenPGP digital signature

Re: pkg using "6.3" instead of "snapshots"

2018-03-24 Thread Tony Boston

I have to add that I know I would use -Dsnap as a flag. It's just that I
didn't need to in the past. That's why I was wondering if something has
changed here

On 03/24/18 08:21, Tony Boston wrote:
> Hello list,
> 
>  am using -current on my x230 for a while now which was working okay
> since today. When I downloaded the new bsd.rd and did an upgrade, it
> said that it would download from /pub/OpenBSD/6.3/amd64 which I had to
> change to s/6.3/snaptshots here. The problem is, pkg now always uses
> "6.3" when I try to update packages or install new ones. Is there a
> switch I have to set? I didn't need to do anything like that before.
> 
> Cheers
> 

-- 
Tony

GPG-FP: 913BBD25 8DA503C7 BAE0C0B6 8995E906 4FBAD580



signature.asc
Description: OpenPGP digital signature

pkg using "6.3" instead of "snapshots"

2018-03-24 Thread Tony Boston

Hello list,

 am using -current on my x230 for a while now which was working okay
since today. When I downloaded the new bsd.rd and did an upgrade, it
said that it would download from /pub/OpenBSD/6.3/amd64 which I had to
change to s/6.3/snaptshots here. The problem is, pkg now always uses
"6.3" when I try to update packages or install new ones. Is there a
switch I have to set? I didn't need to do anything like that before.

Cheers
-- 
Tony

GPG-FP: 913BBD25 8DA503C7 BAE0C0B6 8995E906 4FBAD580



signature.asc
Description: OpenPGP digital signature

Re: testing cabling and NIC hardware with one machine

2017-10-25 Thread Tony Sarendal

Configure the interfaces into separate rdomains.

/T

2017-10-25 21:17 GMT+02:00 Christopher Paul :

> Hi Misc,
>
> I have been tasked with setting up a benchmark platform to test NICs and
> network cables. I'd like to do this on one PC. So I want to send packets of
> different protocols out of one interface and into the other, across/thru
> the NICs and whatever type/lengths of cabling I am using. The problem I am
> having is that if I configure two interfaces on the same server, either on
> the same network or not, the kernel is smart enough to know to not need to
> use the actual wire (ethernet cable) in order to transmit the packet from
> one interface to the other. Which I guess I was aware of, and of course it
> makes a lot of good sense for a normal situation, but in this case, is a
> block on my project.
>
> So I'm wondering is this sort of kernel-fooling I want to do possible with
> OpenBSD? Or for that matter, any OS?
>
> May be I need to set them up as a bridge? If I did that I could set it up
> with forwarding, yeah? Something like that I guess I will try next.
>
> Many thanks for those of you who read this and offer any ideas && Long
> Live OpenBSD,
>
> CP
>
>

ftp.eu.openbsd.org

2017-10-10 Thread Tony Sarendal

Not looking so good.

tonsar@jump0.swe1$ ftp ftp.eu.openbsd.org
Trying 193.156.26.18...
Connected to ftp.eu.openbsd.org (193.156.26.18).
220 jj-prod-obsdmirror.inet6.se FTP server ready.
Name (ftp.eu.openbsd.org:tonsar): ftp
331 Guest login ok, send your email address as password.
Password:
230 Guest login ok, access restrictions apply.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> dir
227 Entering Passive Mode (192,168,0,13,204,157)
^C

/T

Re: sendsyslog error 55

2017-09-26 Thread Tony Boston

Am 26. September 2017 09:37:54 MESZ schrieb Daniel Hartmeier 
<dan...@benzedrine.ch>:
>If you are running either milter-spamd or -regex, you can try the
>latest
>versions (from the source tarballs), which suppress noisy LOG_DEBUG
>messages by default now. Previously, you'd get one syslog message per
>mail body line, and I saw the "error 55" messages when large mails
>arrived. After only this change, I don't see them anymore. Sorry it
>took
>so long to trace.
>
>Daniel

Hey there Daniel, 

thanks for your response. Really appreciated. I'll check that with my boxes
-- 
Tony

Re: fd0 at fdc0 drive 0: density unknown

2017-09-08 Thread Tony Montana

> The old behavior was that the kernel would wait after the "fdc0 ..." line 
> until fd0 attaches. Now it does the waiting in the background and continues 
> booting. I agree that it's a bit ugly, but it makes booting about 5 seconds 
> faster.

It's not just a bit ugly... It's horrible. It has to go. I'm surprised
noone has reverted this crazy change yet.

Re: sendsyslog error 55

2017-08-12 Thread Tony Boston


> 
> Are you using the standard syslogd?
> 

yup

--
Tony



signature.asc
Description: OpenPGP digital signature

Re: sendsyslog error 55

2017-08-12 Thread Tony Boston

Am 12.08.2017 um 08:37 schrieb Mike Burns:
> On 2017-08-12 07.58.01 +0200, Tony Boston wrote:
>> Aug 12 07:49:03 srv01 sendsyslog: dropped 2 messages, error 55
>>
>> 1. how can I figure out what is generating all those messages and fix it
>> (thats what logs are for)
> 
> Good question. I did some digging and came up with this:
> 
>  [ENOBUFS]  The system was unable to allocate an internal
>  buffer.  The operation may succeed when buffers become available.
> 
> That's from the sendsyslog(2) man page. If you look in sys/sys/errno.h
> you can see the ENOBUFS is 55.
> 
> That specific message comes from sys/kern/subr_log.c [2]
> 
> Within there it's hard to guess, but sosend(9) might be the culprit[3].
> 
> Anyway, low memory?
> 
> [1] https://github.com/openbsd/src/blob/master/sys/sys/errno.h#L112
> [2] https://github.com/openbsd/src/blob/master/sys/kern/subr_log.c#L388-L391
> [3] https://github.com/openbsd/src/blob/master/sys/kern/uipc_socket.c#L384
> 

Hey Mike,

thanks for digging in.
Yeah I know what the error messages says.
AFAIK can't be low memory:
   real   virtual free
Active   634752    634752  6461648
All 1364904   1364904 14790512

Maybe a login.conf thing?

--
Tony



signature.asc
Description: OpenPGP digital signature

sendsyslog error 55

2017-08-11 Thread Tony Boston

Hello @misc,

I have an issue with syslog here.

Aug 12 07:49:03 srv01 last message repeated 2 times
Aug 12 07:49:03 srv01 sendsyslog: dropped 2 messages, error 55
Aug 12 07:49:03 srv01 sendsyslog: dropped 2 messages, error 55
Aug 12 07:49:03 srv01 sendsyslog: dropped 1 message, error 55
Aug 12 07:49:03 srv01 sendsyslog: dropped 2 messages, error 55
Aug 12 07:49:03 srv01 sendsyslog: dropped 1 message, error 55

I was searching the web for any help on that one but I all I could find
was other users having the same problem but not clue how to fix it.

I have two questions here.

1. how can I figure out what is generating all those messages and fix it
(thats what logs are for)
2. Is there a built in function to somehow get warned about those errors
right away or would one just check syslog on a regular basis

Thanks

--
Tony



signature.asc
Description: OpenPGP digital signature

Re: maximum number of interfaces

2017-04-02 Thread Tony Sarendal

Back in 2007 I tested with 4k VLAN interfaces, it wasn't fast, but it
worked.

/T


2017-04-03 5:46 GMT+02:00 Nick Holland :

> On 04/02/17 22:08, Edgar Pettijohn wrote:
> > Is there a maximum number of network interfaces that can be configured?
> > I looked around in /usr/include to see if I could find it #define(d)
> > somewhere, but couldn't.  I also globbed up my mail server so this is
> > also a test, but I would like to know.
>
> Some time ago (maybe in the 3.5 era), I put five 4-port dc(4) cards in
> one machine, plus a 3com xl(4) chip on the mobo.  Didn't actually DO
> anything with it, but they all counted out just fine.
>
> "lots" :)
>
> Nick.

USB and Intel Bay Trail

2016-07-16 Thread Tony Sarendal

Hola,

I got a pair of mini-pc's to play with for the summer vacation, small
fanless
thingies with 4xGE and wifi.

http://www.qotom.net/goods-129-QOTOM-Q190G4+4+LAN+Mini+PC.html

When testing with the latest snapshot USB wont play.
Any ideas ?

Regards Tony

# dmesg
OpenBSD 6.0-beta (GENERIC.MP) #2296: Thu Jul 14 20:12:36 MDT 2016
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 8477577216 (8084MB)
avail mem = 8216109056 (7835MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.8 @ 0xebea0 (51 entries)
bios0: vendor American Megatrends Inc. version "5.6.5" date 10/27/2015
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP APIC FPDT FIDT MCFG HPET SSDT SSDT SSDT UEFI
acpi0: wakeup devices XHC1(S4) EHC1(S4) PXSX(S4) PXSX(S4) PXSX(S4) PXSX(S4)
PWRB(S0)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Celeron(R) CPU J1900 @ 1.99GHz, 2000.46 MHz
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,MOVBE,POPCNT,DEADLINE,RDRAND,NXE,
LONG,LAHF,3DNOWP,PERF,ITSC,SMEP,ERMS,SENSOR,ARAT
cpu0: 1MB 64b/line 16-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
cpu0: apic clock running at 83MHz
cpu0: mwait min=64, max=64, C-substates=0.2.0.0.0.0.3.3, IBE
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Celeron(R) CPU J1900 @ 1.99GHz, 1999.99 MHz
cpu1:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,MOVBE,POPCNT,DEADLINE,RDRAND,NXE,
LONG,LAHF,3DNOWP,PERF,ITSC,SMEP,ERMS,SENSOR,ARAT
cpu1: 1MB 64b/line 16-way L2 cache
cpu1: smt 0, core 1, package 0
cpu2 at mainbus0: apid 4 (application processor)
cpu2: Intel(R) Celeron(R) CPU J1900 @ 1.99GHz, 1999.99 MHz
cpu2:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,MOVBE,POPCNT,DEADLINE,RDRAND,NXE,
LONG,LAHF,3DNOWP,PERF,ITSC,SMEP,ERMS,SENSOR,ARAT
cpu2: 1MB 64b/line 16-way L2 cache
cpu2: smt 0, core 2, package 0
cpu3 at mainbus0: apid 6 (application processor)
cpu3: Intel(R) Celeron(R) CPU J1900 @ 1.99GHz, 1999.99 MHz
cpu3:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,MOVBE,POPCNT,DEADLINE,RDRAND,NXE,
LONG,LAHF,3DNOWP,PERF,ITSC,SMEP,ERMS,SENSOR,ARAT
cpu3: 1MB 64b/line 16-way L2 cache
cpu3: smt 0, core 3, package 0
ioapic0 at mainbus0: apid 1 pa 0xfec0, version 20, 87 pins
acpimcfg0 at acpi0 addr 0xe000, bus 0-255
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (RP01)
acpiprt2 at acpi0: bus 2 (RP02)
acpiprt3 at acpi0: bus 3 (RP03)
acpiprt4 at acpi0: bus 4 (RP04)
acpiec0 at acpi0: not present
acpicpu0 at acpi0: C3(10@1500 mwait.1@0x52), C2(10@500 mwait.1@0x51),
C1(1000@1 mwait.1), PSS
acpicpu1 at acpi0: C3(10@1500 mwait.1@0x52), C2(10@500 mwait.1@0x51),
C1(1000@1 mwait.1), PSS
acpicpu2 at acpi0: C3(10@1500 mwait.1@0x52), C2(10@500 mwait.1@0x51),
C1(1000@1 mwait.1), PSS
acpicpu3 at acpi0: C3(10@1500 mwait.1@0x52), C2(10@500 mwait.1@0x51),
C1(1000@1 mwait.1), PSS
acpipwrres0 at acpi0: PLPE
acpipwrres1 at acpi0: PLPE
acpipwrres2 at acpi0: USBC, resource for EHC1, OTG1
"DMA0F28" at acpi0 not configured
acpibtn0 at acpi0: SLPB
"INT33BD" at acpi0 not configured
acpivideo0 at acpi0: GFX0
acpivout0 at acpivideo0: DD1F
cpu0: Enhanced SpeedStep 2000 MHz: speeds: 1993, 1992, 1909, 1826, 1743,
1660, 1577, 1494, 1411, 1328 MHz
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel Bay Trail Host" rev 0x0e
inteldrm0 at pci0 dev 2 function 0 "Intel Bay Trail Video" rev 0x0e
drm0 at inteldrm0
inteldrm0: msi
inteldrm0: 1920x1200
wsdisplay0 at inteldrm0 mux 1: console (std, vt100 emulation)
wsdisplay0: screen 1-5 added (std, vt100 emulation)
ahci0 at pci0 dev 19 function 0 "Intel Bay Trail AHCI" rev 0x0e: msi, AHCI
1.3
ahci0: port 0: 3.0Gb/s
scsibus1 at ahci0: 32 targets
sd0 at scsibus1 targ 0 lun 0: <ATA, SAMSUNG SSD PM83, CXM1> SCSI3 0/direct
fixed naa.5002538043584d30
sd0: 61057MB, 512 bytes/sector, 125045424 sectors, thin
"Intel Bay Trail TXE" rev 0x0e at pci0 dev 26 function 0 not configured
azalia0 at pci0 dev 27 function 0 "Intel Bay Trail HD Audio" rev 0x0e: msi
azalia0: no supported codecs
ppb0 at pci0 dev 28 function 0 "Intel Bay Trail I2C" rev 0x0e: msi
pci1 at ppb0

lots of states (5.8)

2016-05-23 Thread Tony Sarendal

Hola amigos,

I'm doing some testing in the lab at the moment and just though I'd share.

pf0.swe69# pfctl -si | grep current
  current entries 50239413
pf0.swe69# vmstat -m | tail -n 1
In use 22035659K, total allocated 5678936K; utilization 388.0%
pf0.swe69#

4 tcpbench sessions through it (450kpps under normal running) :

pf0.swe69# netstat -I trunk0 -w1
trunk in  trunk out  total in  total out
 packets  errs  packets  errs colls   packets  errs  packets  errs colls
28547079349 0 32372963420  2822 0  114224543321 4 101542519853
 6675 0
  407927 0   408373 0 0   1631255 0  1225979 0 0
  413105 0   414141 0 0   1652684 0  1242994 0 0
  404324 0   404859 0 0   1617350 0  1215559 0 0
  408613 0   409500 0 0   1634610 0  1229346 0 0
  406545 0   407357 0 0   1626177 0  1222868 0 0
  412529 0   413248 0 0   1649941 0  1240605 0 0
  406656 0   407405 0 0   1626810 0  1222997 0 0
  411297 0   412122 0 0   1645393 0  1237101 0 0

httperf can maintain a session rate of 650 sessions per second (12k+ under
normal running):

cloud8.swe69$ route -T2 exec httperf --server 10.96.2.24 --uri /1k.bin
--num-conns 25000 --rate 650
httperf --client=0/1 --server=10.96.2.24 --port=80 --uri=/1k.bin --rate=650
--send-buffer=4096 --recv-buffer=16384 --num-conns=25000 --num-calls=1
Maximum connect burst length: 2

Total: connections 25000 requests 25000 replies 25000 test-duration 44.214 s

Connection rate: 565.4 conn/s (1.8 ms/conn, <=381 concurrent connections)
Connection time [ms]: min 190.9 avg 261.3 max 6408.1 median 198.5 stddev
334.3
Connection time [ms]: connect 43.0
Connection length [replies/conn]: 1.000

Request rate: 565.4 req/s (1.8 ms/req)
Request size [B]: 69.0

Reply rate [replies/s]: min 473.8 avg 624.6 max 672.6 stddev 64.4 (8
samples)
Reply time [ms]: response 1.2 transfer 217.1
Reply size [B]: header 211.0 content 1024.0 footer 0.0 (total 1235.0)
Reply status: 1xx=0 2xx=25000 3xx=0 4xx=0 5xx=0

CPU time [s]: user 0.63 system 43.59 (user 1.4% system 98.6% total 100.0%)
Net I/O: 720.0 KB/s (5.9*10^6 bps)

Errors: total 0 client-timo 0 socket-timo 0 connrefused 0 connreset 0
Errors: fd-unavail 0 addrunavail 0 ftab-full 0 other 0



50M+ states and still standing, pretty good I think.

/T



OpenBSD 5.8-stable (GENERIC.MP) #103: Mon May  9 12:15:30 CEST 2016
root@ob2.swe69:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 34300891136 (32711MB)
avail mem = 33257451520 (31716MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xec170 (34 entries)
bios0: vendor American Megatrends Inc. version "3.0" date 04/24/2015
bios0: Supermicro X10SLD
acpi0 at bios0: rev 2
acpi0: sleep states S0 S4 S5
acpi0: tables DSDT FACP APIC FPDT FIDT SSDT SSDT SSDT SSDT MCFG PRAD HPET
SSDT SSDT SPMI DMAR EINJ ERST HEST BERT
acpi0: wakeup devices PEGP(S4) PEG0(S4) PEGP(S4) PEG1(S4) PEGP(S4) PEG2(S4)
PXSX(S4) RP01(S4) PXSX(S4) RP02(S4) PXSX(S4) RP03(S4) PXSX(S4) RP04(S4)
PXSX(S4) RP05(S4) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.61 MHz
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,SMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT
,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,PERF,ITSC,FSGSB
ASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,SENSOR,ARAT
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 99MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4, IBE
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.00 MHz
cpu1:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,SMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT
,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,PERF,ITSC,FSGSB
ASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,SENSOR,ARAT
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 0, core 1, package 0
cpu2 at mainbus0: apid 4 (application processor)
cpu2: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.00 MHz
cpu2:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,SMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT
,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,PERF,ITSC,FSGSB

Re: bgpd network connected

2016-03-09 Thread Tony Sarendal

2016-03-08 15:38 GMT+01:00 Matt Schwartz <matt.schwart...@gmail.com>:

> I did not even know it was broken?
>
> On Mar 8, 2016 1:26 AM, "Tony Sarendal" wrote:
> >
> > Is there any chance of getting "network inet connected" fixed to 5.9 ?
> >
> > Regards Tony
>
>

Adding a new vlan interface:

beer# cat /etc/bgpd.conf
AS 65001
network inet connected
beer# bgpctl show rib
flags: * = Valid, > = Selected, I = via IBGP, A = Announced, S = Stale
origin: i = IGP, e = EGP, ? = Incomplete

flags destination  gateway  lpref   med aspath origin
AI*>  172.29.1.0/240.0.0.0100 0 i
beer# ifconfig vlan69 create
beer# ifconfig vlan69 1.1.1.1/30 vlandev em0 vlan 69 up
beer# bgpctl show rib
flags: * = Valid, > = Selected, I = via IBGP, A = Announced, S = Stale
origin: i = IGP, e = EGP, ? = Incomplete

flags destination  gateway  lpref   med aspath origin
AI*>  172.29.1.0/240.0.0.0100 0 i
beer# /etc/rc.d/bgpd restart
beer# bgpctl show rib
flags: * = Valid, > = Selected, I = via IBGP, A = Announced, S = Stale
origin: i = IGP, e = EGP, ? = Incomplete

flags destination  gateway  lpref   med aspath origin
AI*>  1.1.1.0/30   0.0.0.0100 0 i
AI*>  172.29.1.0/240.0.0.0100 0 i
beer#


Regards Tony

bgpd network connected

2016-03-07 Thread Tony Sarendal

Is there any chance of getting "network inet connected" fixed to 5.9 ?

Regards Tony

Re: openbgpd puts wrong nexthop in FIB

2016-01-21 Thread Tony Sarendal

2016-01-21 11:16 GMT+01:00 Stuart Henderson <s...@spacehopper.org>:

> On 2016-01-20, Tony Sarendal <t...@polarcap.org> wrote:
> > network inet connected is broken in 5.6, 5.8 and -current.
> > Restarting bgpd is required when making interface changes.
>
> Ah, so it was fixed in 5.7 and broken again? Now the previous mail
> (http://permalink.gmane.org/gmane.os.openbsd.misc/227597) makes more
> sense.
>
>
That sums is up well. Serious a bug in a piece of routing software.

/T

Re: openbgpd puts wrong nexthop in FIB

2016-01-20 Thread Tony Sarendal

network inet connected is broken in 5.6, 5.8 and -current.
Restarting bgpd is required when making interface changes.

/T

2016-01-20 20:36 GMT+01:00 Denis Fondras :

> Hello,
>
> I'm using -current as a BGP router and "sometimes" it won't put the right
> nexthop in FIB. The only thing I played with is the interface that support
> IP
> 185.1.2.12 (ifconfig up/down/delete ip /add ip). Anybody can reproduce ?
>
> # bgpctl sh rib 185.22.131.1
> flags: * = Valid, > = Selected, I = via IBGP, A = Announced, S = Stale
> origin: i = IGP, e = EGP, ? = Incomplete
>
> flags destination  gateway  lpref   med aspath origin
> *>185.22.131.0/24  185.1.2.10 100 0 199881 i
>
> # bgpctl sh fib 185.22.131.1
> flags: * = valid, B = BGP, C = Connected, S = Static, D = Dynamic
>N = BGP Nexthop reachable via this route R = redistributed
>r = reject route, b = blackhole route
>
> flags prio destination  gateway
> *B  48 185.22.131.0/24  185.1.2.12
>
> Denis

5.8 bgpd, network connected behaves like 5.6

2015-12-17 Thread Tony Sarendal

"network inet connected" does not pick up new vlan interfaces, same problem
as 5.6.

bmr0.esp1# ifconfig vlan69 create
bmr0.esp1# ifconfig vlan69 vlandev trunk0 vlan 69 up
bmr0.esp1# ifconfig vlan69 1.1.1.1/30
bmr0.esp1# bgpctl show rib 1.1.1.1
flags: * = Valid, > = Selected, I = via IBGP, A = Announced, S = Stale
origin: i = IGP, e = EGP, ? = Incomplete

flags destination  gateway  lpref   med aspath origin
bmr0.esp1# bgpctl show int
Interface  Nexthop state  Flags  Link state
vlan69 ok UP Ethernet, active
vlan105ok UP Ethernet, active
vlan104ok UP Ethernet, active
gre0   ok UP unknown
pflog0 ok UP unknown
vlan103ok UP Ethernet, active
trunk0 ok UP Ethernet, active
lo1ok UP unknown
lo0ok UP unknown
enc0   invalid   active
ix1ok UP active, 10 GBit/s
ix0ok UP active, 10 GBit/s
bmr0.esp1#

As with 5.6, restarting bgpd fixes it:
bmr0.esp1# /etc/rc.d/bgpd restart
bgpd(ok)
bgpd(ok)
bmr0.esp1# bgpctl show rib 1.1.1.1
flags: * = Valid, > = Selected, I = via IBGP, A = Announced, S = Stale
origin: i = IGP, e = EGP, ? = Incomplete

flags destination  gateway  lpref   med aspath origin
AI*>  1.1.1.0/30   0.0.0.0100 0 i
bmr0.esp1#


Any chance of getting a fix into -stable 5.8 ?

/T

OpenBSD 5.8-stable (GENERIC.MP) #16: Tue Dec  8 10:44:35 CET 2015
r...@obc0.rad.unibet.com:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 34300891136 (32711MB)
avail mem = 33257451520 (31716MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xec170 (34 entries)
bios0: vendor American Megatrends Inc. version "3.0" date 04/24/2015
bios0: Supermicro X10SLD
acpi0 at bios0: rev 2
acpi0: sleep states S0 S4 S5
acpi0: tables DSDT FACP APIC FPDT FIDT SSDT SSDT SSDT SSDT SSDT MCFG PRAD
HPET SSDT SSDT SPMI DMAR EINJ ERST HEST BERT
acpi0: wakeup devices PEGP(S4) PEG0(S4) PEGP(S4) PEG1(S4) PEGP(S4) PEG2(S4)
PXSX(S4) RP01(S4) PXSX(S4) RP02(S4) PXSX(S4) RP03(S4) PXSX(S4) RP04(S4)
PXSX(S4) RP05(S4) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.42 MHz
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,SMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT
,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,PERF,ITSC,FSGSB
ASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,SENSOR,ARAT
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 100MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4, IBE
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.01 MHz
cpu1:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,SMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT
,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,PERF,ITSC,FSGSB
ASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,SENSOR,ARAT
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 0, core 1, package 0
cpu2 at mainbus0: apid 4 (application processor)
cpu2: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.01 MHz
cpu2:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,SMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT
,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,PERF,ITSC,FSGSB
ASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,SENSOR,ARAT
cpu2: 256KB 64b/line 8-way L2 cache
cpu2: smt 0, core 2, package 0
cpu3 at mainbus0: apid 6 (application processor)
cpu3: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.01 MHz
cpu3:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,SMX,EST,TM2,SSSE3,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT
,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,LONG,LAHF,ABM,PERF,ITSC,FSGSB
ASE,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,SENSOR,ARAT
cpu3: 256KB 64b/line 8-way L2 cache
cpu3: smt 0, core 3, package 0
cpu4 at mainbus0: apid 1 (application processor)
cpu4: Intel(R) Xeon(R) CPU E3-1241 v3 @ 3.50GHz, 3500.01 MHz
cpu4:

Re: 5.8 bgpd, network connected behaves like 5.6

2015-12-17 Thread Tony Sarendal

2015-12-17 10:29 GMT+01:00 Peter Hessler :

> 1) does "bgpctl reload" detect it?
>
> 2) does -current work as you expect?
>
>
>
1. bgpctl reload does not make any difference.

2. A quick test on my -current workstation (not the same hardware, no
trunk) also fails to work.
-current from the 14th.

/T

delorean# cat /etc/bgpd.conf
AS 65001
network inet connected
network inet static

delorean# bgpctl show rib
flags: * = Valid, > = Selected, I = via IBGP, A = Announced, S = Stale
origin: i = IGP, e = EGP, ? = Incomplete

flags destination  gateway  lpref   med aspath origin
AI*>  10.96.5.0/24 0.0.0.0100 0
delorean# bgpctl show int
Interface  Nexthop state  Flags  Link state
pflog0 ok UP unknown
lo0ok UP unknown
enc0   invalid   active
em0ok UP Ethernet, active, 1000 MBit/s
delorean#
delorean#
delorean# ifconfig vlan69 create
delorean# ifconfig vlan69 vlandev em0 vlan 69 up
delorean# ifconfig vlan69 1.1.1.1/30
delorean#
delorean# bgpctl show rib
flags: * = Valid, > = Selected, I = via IBGP, A = Announced, S = Stale
origin: i = IGP, e = EGP, ? = Incomplete

flags destination  gateway  lpref   med aspath origin
AI*>  10.96.5.0/24 0.0.0.0100 0 i
delorean# bgpctl show int
Interface  Nexthop state  Flags  Link state
vlan69 ok UP Ethernet, active, 1000 MBit/s
pflog0 ok UP unknown
lo0ok UP unknown
enc0   invalid   active
em0ok UP Ethernet, active, 1000 MBit/s
delorean#
delorean#
delorean#
delorean# bgpctl reload
reload request sent.
request processed
delorean# bgpctl show rib
flags: * = Valid, > = Selected, I = via IBGP, A = Announced, S = Stale
origin: i = IGP, e = EGP, ? = Incomplete

flags destination  gateway  lpref   med aspath origin
AI*>  10.96.5.0/24 0.0.0.0100 0 i
delorean# bgpctl show int
Interface  Nexthop state  Flags  Link state
vlan69 ok UP Ethernet, active, 1000 MBit/s
pflog0 ok UP unknown
lo0ok UP unknown
enc0   invalid   active
em0ok UP Ethernet, active, 1000 MBit/s
delorean#
delorean#
delorean#
delorean# /etc/rc.d/bgpd restart
bgpd(ok)
bgpd(ok)
delorean# bgpctl show rib
flags: * = Valid, > = Selected, I = via IBGP, A = Announced, S = Stale
origin: i = IGP, e = EGP, ? = Incomplete

flags destination  gateway  lpref   med aspath origin
AI*>  1.1.1.0/30   0.0.0.0100 0 i
AI*>  10.96.5.0/24 0.0.0.0100 0 i
delorean# bgpctl show int
Interface  Nexthop state  Flags  Link state
vlan69 ok UP Ethernet, active, 1000 MBit/s
pflog0 ok UP unknown
lo0ok UP unknown
enc0   invalid   active
em0ok UP Ethernet, active, 1000 MBit/s
delorean#

OpenBSD 5.8-current (GENERIC.MP) #13: Mon Dec 14 12:11:14 CET 2015
r...@delorean.rad.unibet.com:/usr/src/sys/arch/amd64/compile/GENERIC.MP
RTC BIOS diagnostic error d0
real mem = 4161183744 (3968MB)
avail mem = 4030943232 (3844MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xe87ec (85 entries)
bios0: vendor Hewlett-Packard version "J01 v02.15" date 11/10/2011
bios0: Hewlett-Packard HP Compaq 8200 Elite SFF PC
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP APIC SSDT MCFG HPET ASF! SSDT SLIC TCPA DMAR
acpi0: wakeup devices PS2K(S3) PS2M(S3) BR20(S4) EUSB(S3) USBE(S3) PEX0(S4)
PEX1(S4) PEX2(S4) PEX3(S4) PEX4(S4) PEX5(S4) PEX6(S4) PEX7(S4) GBE_(S4)
P0P1(S4) P0P2(S4) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM) i5-2500 CPU @ 3.30GHz, 3293.46 MHz
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,A
ES,XSAVE,AVX,NXE,LONG,LAHF,PERF,ITSC,SENSOR,ARAT
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 99MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.1, IBE
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Core(TM) i5-2500 CPU @ 3.30GHz, 3292.50 MHz
cpu1:

Re: Donation request for Network SMP development

2015-03-25 Thread Tony Sarendal

How is this going ?

/T


On Fri, Mar 20, 2015 at 8:57 PM, Martin Pieuchot m...@openbsd.org wrote:

 If you've been following my contributions to OpenBSD's kernel, you
 already know that in the past years I've been working on the Network
 Stack [1] to make it more SMP friendly [2].

 All the network hackers present at s2k15 agreed to volunteer me to work
 on the next step: properly integrate the pseudo-drivers (carp(4),
 vlan(4), trunk(4)...) in order to take ether_input() out of the kernel
 lock.

 But since I no longer have the support of a company, I don't have the
 correct toys to do this task.  That's why I'm looking for the following
 hardware, to build a crazy test  development CARP setup:

   -  A small managed switch (8+ ports) preferably with a CLI interface
  like HP Procurves 25xx.

   - Two small fanless MP amd64 machines with 3+ NIC and a serial console
 like PC Engines APU or Lanner LEC.

 I'm based in Europe, please contact me if you can help out.

 Thanks,
 Martin


 [1] http://www.openbsd.org/papers/tamingdragons.pdf
 [2] http://undeadly.org/cgi?action=articlesid=20150218085759

bgpd.conf macros on 5.5 and up

2014-12-19 Thread Tony Sarendal

From 5.5 and up it looks like bgpd macros are broken.

ton...@obc2.rad$ cat bgpd.conf
good={ 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8 }
AS 65001
deny from any prefix { $good }
ton...@obc2.rad$

On 5.4:
ton...@obc2.rad$ bgpd -f bgpd.conf
-n
configuration OK
ton...@obc2.rad$

On 5.5:
ton...@obc0.rad$ bgpd -f bgpd.conf -nv
good = { 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8 }
bgpd.conf:3: syntax error
ton...@obc0.rad$

On 5.6 snapshot:
tonsar@obc1$ uname -mrsv
OpenBSD 5.6 GENERIC.MP#701 amd64
tonsar@obc1$ bgpd -f bgpd.conf -nv
good = { 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8 }
bgpd.conf:3: syntax error
tonsar@obc1$


Also, the example from bgpd.conf man page fails on 5.4-5.6.
I haven't tested on 5.3 and lower.

On 5.6 snapshot:
tonsar@obc1$ uname -mrsv
OpenBSD 5.6 GENERIC.MP#701 amd64
tonsar@obc1$ cat bgpd.conf-2
good={ 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8 }
bad={ 224.0.0.0/4 prefixlen = 4, 240.0.0.0/4 prefixlen = 4 }
ugly={ 127.0.0.1/8, 169.254.0.0/16 }
# global configuration
AS 65001
deny from any prefix { $good $bad $ugly }
tonsar@obc1$ bgpd -f bgpd.conf-2 -nv
good = { 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8 }
bad = { 224.0.0.0/4 prefixlen = 4, 240.0.0.0/4 prefixlen = 4 }
ugly = { 127.0.0.1/8, 169.254.0.0/16 }
bgpd.conf-2:6: syntax error
tonsar@obc1$


Regards Tony

Re: 5.6 arrived

2014-10-29 Thread Tony Abernethy

Harald Dunkel wrote
Hopefully you agree that the file name snapshots/amd64/install56.iso
is misleading? Looking at the file name I had assumed/hoped there is some
kind of upgrade path from the install56.iso snapshot to the 5.6 release.

Who is being misled?

(from an outsider)
The overriding purpose of the snapshots and their files and the names of 
those files is to assist the OpenBSD folk in producing their semiannual
release
of the next stable release of OpenBSD.
Guessing games as to which snapshot and exactly how the developers 
proceed from snapshot to CD is unlikely to be productive. I expect the exact
path is never closely duplicated from one release to the next. 
Apparently sometimes the new will not even compile on the old.
OpenBSD is one of very few places not firmly committed to preserving old
mistakes.

Re: openbsdstore: enable javascript and buy something or gtfo

2014-10-06 Thread Tony Abernethy

Matti Karnaattu wrote
snip
How I can have you to be more relaxed? With beer?
Just what I need. Life support on drunk programs writ by drunk programmers.
Please.  You are a threat to my continued existence.

4k graphics and openbsd

2014-09-19 Thread Tony Sarendal

Good afternoon,

Friday question:
Does anyone have recommendation on graphics hardware to use for 4k screens
and OpenBSD ?

I'm thinking about improving my workstation. I run lots of terminal
windows, a web browser,
and the default window manager. As I like eye candy I may even do xsetroot
-solid black.

What I want is a stable work environment where I can reboot my workstation
every
6 months or so. This with a 4k screen. Doable ?

Cheers

/Tony

Re: 4k graphics and openbsd

2014-09-19 Thread Tony Sarendal

On Fri, Sep 19, 2014 at 6:07 PM, Jonathan Gray j...@jsg.id.au wrote:

 On Fri, Sep 19, 2014 at 02:22:49PM +0200, Tony Sarendal wrote:
  Good afternoon,
 
  Friday question:
  Does anyone have recommendation on graphics hardware to use for 4k
 screens
  and OpenBSD ?
 
  I'm thinking about improving my workstation. I run lots of terminal
  windows, a web browser,
  and the default window manager. As I like eye candy I may even do
 xsetroot
  -solid black.
 
  What I want is a stable work environment where I can reboot my
 workstation
  every
  6 months or so. This with a 4k screen. Doable ?

 The short version is it won't work yet, the longer version
 is you should carefully check what the graphics hardware, monitor
 and software support.

 For Intel the HDMI 4k at 30 Hz modes are only supported on Haswell,
 ie i[357]-4xxx.  On the AMD side HDMI 4k at 30 Hz modes are only
 supported on Southern Islands parts according to
 http://xorg.freedesktop.org/wiki/RadeonFeature/ which are
 Radeon HD = 77xx.  The Southern Islands parts are best avoided as
 xf86-video-ati only supports 2D acceleration via Glamor-EGL which on
 Southern Islands radeons requires a Mesa driver that has a hard
 requirement on LLVM, working EGL drm platform, and other things.
 And the kernel only knows about the initial round of Southern Islands
 parts, not all of those that were later released including
 the newer integrated graphics with Kaveri.  It seems it should
 be possible to use 4k modes with displayport on Northern Islands/HD6xxx
 if the screen was presented as two smaller screens via MST as
 Northern Islands radeons support displayport 1.2 and MST.
 This isn't an option for older Intel parts as ivybridge for
 example only supports displayport 1.1 with no MST.

 The HDMI 1.4 4k modes make use of a CEA vendor extension
 in the blob of data from the display that describes the
 modes (EDID).  Support for that was added in drm 3.12.

 Many of the 4k displays present themselves as multiple
 displayport displays/streams, support for that was added
 in drm 3.17.

 OpenBSD has roughly drm 3.8.13.28 at the moment.

 hdmi 1.4, drm 3.12
 3840x2160@30Hz
 3840x2160@25Hz
 3840x2160@24Hz

 hdmi 2.0
 4k @ 60Hz, drm ?

 displayport 1.2 4k 30Hz single stream transport (SST), drm 3.12?

 displayport 1.2 4k 60Hz multi stream transport (MST), drm 3.17

 displayport 1.? 4k 60Hz single stream transport (4K60 SST), drm ?

 displayport 1.? dell 5k 5120x2880@?, MST? drm ?



Thanks for taking the time, Jonathan.

Regards Tony

Re: packets logged by pf without log rule

2014-09-16 Thread Tony Sarendal

On Tue, Sep 16, 2014 at 12:20 AM, Alexander Salmin alexan...@salmin.biz
wrote:

 Did you see it in previous versions?
 I would compare the same ruleset with a fresh 5.5 and see if you
 experience the same and in that case continue compare the relevant
 sourcecode.


The behaviour is the same as far back as 5.4 at least.

I have another one. With the pass quick all rule-set. of I send:
09:34:28.490074 00:25:90:c1:f1:8c 01:00:5e:40:68:01 0800 1514:
10.69.48.14.5404  239.192.104.1.5405: udp 1473 (frag 49575:1480@0+) [ttl 1]
twice within 60s (frag timer ?)

I get:
Sep 16 09:34:28.490095 rule def/(match) pass in on em0: 10.69.48.14.5404 
239.192.104.1.5405: udp 1473 (frag 49575:1480@0+) [ttl 1]

I see this a lot in our production and test environment, but there it is
triggered without the duplicate packet.

Example from live firewall. Traffic:
pf0.swe1# tcpdump -n -i vlan57 host 10.69.48.14 and not tcp
tcpdump: listening on vlan57, link-type EN10MB
tcpdump: WARNING: compensating for unaligned libpcap packets
09:51:56.710780 10.69.48.14.5404  239.192.104.1.5405: udp 75 (DF) [ttl 1]
09:51:56.711161 10.69.48.14.5404  239.192.104.1.5405: udp 1473 (frag
27013:1480@0+) [ttl 1]
09:51:56.711163 10.69.48.14  239.192.104.1: (frag 27013:1@1480) [ttl 1]
09:51:56.711164 10.69.48.14.5404  239.192.104.1.5405: udp 1473 (frag
27014:1480@0+) [ttl 1]
09:51:56.711166 10.69.48.14  239.192.104.1: (frag 27014:1@1480) [ttl 1]
09:51:56.711167 10.69.48.14.5404  239.192.104.1.5405: udp 1473 (frag
27015:1480@0+) [ttl 1]
09:51:56.711168 10.69.48.14  239.192.104.1: (frag 27015:1@1480) [ttl 1]
09:51:56.711169 10.69.48.14.5404  239.192.104.1.5405: udp 1473 (frag
27016:1480@0+) [ttl 1]
09:51:56.711171 10.69.48.14  239.192.104.1: (frag 27016:1@1480) [ttl 1]
09:51:56.711172 10.69.48.14.5404  239.192.104.1.5405: udp 1473 (frag
27017:1480@0+) [ttl 1]
09:51:56.711173 10.69.48.14  239.192.104.1: (frag 27017:1@1480) [ttl 1]
09:51:56.711175 10.69.48.14.5404  239.192.104.1.5405: udp 617 (DF) [ttl 1]
09:51:56.713383 10.69.48.14.5404  239.192.104.1.5405: udp 753 (DF) [ttl 1]
09:51:56.724606 10.69.48.14.5404  239.192.104.1.5405: udp 1473 (frag
27018:1480@0+) [ttl 1]
09:51:56.724608 10.69.48.14  239.192.104.1: (frag 27018:1@1480) [ttl 1]
09:51:56.724609 10.69.48.14.5404  239.192.104.1.5405: udp 707 (DF) [ttl 1]
09:51:56.724986 10.69.48.14.5404  239.192.104.1.5405: udp 1412 (DF) [ttl 1]
09:51:56.730168 10.69.48.14.5404  239.192.104.1.5405: udp 650 (DF) [ttl 1]
^C


Log:
pf0.swe1# tcpdump -n -e -ttt -i pflog0 host 10.69.48.14
tcpdump: WARNING: snaplen raised from 116 to 160
tcpdump: listening on pflog0, link-type PFLOG
Sep 16 09:51:56.711185 rule def/(match) pass in on vlan57: 10.69.48.14.5404
 239.192.104.1.5405: udp 1473 (frag 27013:1480@0+) [ttl 1]
tcpdump: WARNING: compensating for unaligned libpcap packets
Sep 16 09:51:56.711190 rule def/(match) pass in on vlan57: 10.69.48.14.5404
 239.192.104.1.5405: udp 1473 (frag 27014:1480@0+) [ttl 1]
Sep 16 09:51:56.711194 rule def/(match) pass in on vlan57: 10.69.48.14.5404
 239.192.104.1.5405: udp 1473 (frag 27015:1480@0+) [ttl 1]
Sep 16 09:51:56.711198 rule def/(match) pass in on vlan57: 10.69.48.14.5404
 239.192.104.1.5405: udp 1473 (frag 27016:1480@0+) [ttl 1]
Sep 16 09:51:56.711202 rule def/(match) pass in on vlan57: 10.69.48.14.5404
 239.192.104.1.5405: udp 1473 (frag 27017:1480@0+) [ttl 1]
Sep 16 09:51:56.724622 rule def/(match) pass in on vlan57: 10.69.48.14.5404
 239.192.104.1.5405: udp 1473 (frag 27018:1480@0+) [ttl 1]
^C
20 packets received by filter
0 packets dropped by kernel
pf0.swe1#

There is no rule that should log this in the live firewalls.
Happens on 5.4 and 5.5, if memory serves me right I saw it on 5.3's also.

Assistance with understanding this would be appreciated.
I will use free time slots to look at the code, but due to limited
knowledge and skills it is quite time consuming.

Regards Tony

packets logged by pf without log rule

2014-09-15 Thread Tony Sarendal

I'm currently looking into some logging strangeness in we are seeing.
Does anyone know why this is logged ?

obc3.rad# cat /etc/pf.conf
pass quick all
obc3.rad# pfctl -sr
pass quick all flags S/SA
obc3.rad# tcpdump -n -e -ttt -i pflog0
tcpdump: WARNING: snaplen raised from 116 to 160
tcpdump: listening on pflog0, link-type PFLOG
Sep 15 16:07:31.276913 rule 0/(match) pass in on em0: 10.69.48.14 
239.192.104.1: igmp nreport 239.192.104.1 (DF) [tos 0xc0] [ttl 1]
Sep 15 16:07:31.278020 rule 0/(match) pass in on em0: 10.69.48.14 
239.192.104.1: igmp nreport 239.192.104.1 (DF) [tos 0xc0] [ttl 1]


obc3.rad# tcpdump -n -i em0 igmp
tcpdump: listening on em0, link-type EN10MB
tcpdump: WARNING: compensating for unaligned libpcap packets
16:07:31.276905 10.69.48.14  239.192.104.1: igmp nreport 239.192.104.1
(DF) [tos 0xc0] [ttl 1]
16:07:31.278014 10.69.48.14  239.192.104.1: igmp nreport 239.192.104.1
(DF) [tos 0xc0] [ttl 1]


Regards Tony


OpenBSD 5.6-current (GENERIC.MP) #0: Wed Sep 10 13:39:02 CEST 2014
r...@obc3.rad.unibet.com:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 8545173504 (8149MB)
avail mem = 8308969472 (7924MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xeb4c0 (54 entries)
bios0: vendor American Megatrends Inc. version 2.0a date 06/08/2012
bios0: Supermicro X9SCD
acpi0 at bios0: rev 2
acpi0: sleep states S0 S1 S4 S5
acpi0: tables DSDT FACP APIC FPDT MCFG HPET SSDT PRAD SPMI SSDT SPCR EINJ
ERST HEST BERT BGRT
acpi0: wakeup devices PS2K(S4) PS2M(S4) UAR1(S4) P0P1(S4) USB1(S4) USB2(S4)
USB3(S4) USB4(S4) USB5(S4) USB6(S4) USB7(S4) PXSX(S4) RP01(S4) PXSX(S4)
RP02(S4) PXSX(S4) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Xeon(R) CPU E3-1270 V2 @ 3.50GHz, 3500.49 MHz
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,A
ES,XSAVE,AVX,F16C,RDRAND,NXE,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 100MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.1.0, IBE
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Xeon(R) CPU E3-1270 V2 @ 3.50GHz, 3500.02 MHz
cpu1:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,A
ES,XSAVE,AVX,F16C,RDRAND,NXE,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 0, core 1, package 0
cpu2 at mainbus0: apid 4 (application processor)
cpu2: Intel(R) Xeon(R) CPU E3-1270 V2 @ 3.50GHz, 3500.02 MHz
cpu2:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,A
ES,XSAVE,AVX,F16C,RDRAND,NXE,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS
cpu2: 256KB 64b/line 8-way L2 cache
cpu2: smt 0, core 2, package 0
cpu3 at mainbus0: apid 6 (application processor)
cpu3: Intel(R) Xeon(R) CPU E3-1270 V2 @ 3.50GHz, 3500.02 MHz
cpu3:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,A
ES,XSAVE,AVX,F16C,RDRAND,NXE,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS
cpu3: 256KB 64b/line 8-way L2 cache
cpu3: smt 0, core 3, package 0
cpu4 at mainbus0: apid 1 (application processor)
cpu4: Intel(R) Xeon(R) CPU E3-1270 V2 @ 3.50GHz, 3500.02 MHz
cpu4:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,A
ES,XSAVE,AVX,F16C,RDRAND,NXE,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS
cpu4: 256KB 64b/line 8-way L2 cache
cpu4: smt 1, core 0, package 0
cpu5 at mainbus0: apid 3 (application processor)
cpu5: Intel(R) Xeon(R) CPU E3-1270 V2 @ 3.50GHz, 3500.02 MHz
cpu5:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX
,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,A
ES,XSAVE,AVX,F16C,RDRAND,NXE,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS
cpu5: 256KB 64b/line 8-way L2 cache
cpu5: smt 1, core 1, package 0
cpu6 at mainbus0: apid 5 (application processor)
cpu6: Intel(R) Xeon(R) CPU E3-1270 V2 @ 3.50GHz, 3500.02 MHz
cpu6:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA

Re: bgpctl show advertisements?

2014-09-14 Thread Tony Sarendal

bgpctl show rib nei neighbor out


On Mon, Sep 15, 2014 at 3:55 AM, Adam Thompson athom...@athompso.net
wrote:

 Is there any functionality in bgpctl(8) that will show me precisely what
 I'm advertising to a neighbor?
 If not, is there any easier way - assuming I don't have access to my
 neighbor's router, and they don't run a looking-glass - to find that out,
 short of packet sniffing?

 --
 -Adam Thompson
  athom...@athompso.net

Re: pfsync and trunk

2014-09-13 Thread Tony Sarendal

On Sat, Sep 13, 2014 at 10:17 AM, Henning Brauer hb-open...@ml.bsws.de
wrote:

 * Tony Sarendal t...@polarcap.org [2014-09-03 06:48]:
  The initial request disappearing and the firewalls staying demoted
  forever are independent issues.

 sure about that? the demotion counter for the interface group pfsyncX
 is part of (usually carp) is kept raised until the bulk transfer
 finishes.


Looks like separate issues.

I have done more testing since, using 5.5. In all cases the demote
counter restores after the bulk transfer completes, or after pfsync
gives up after 12 retries. I have a few 5.4 where I can't explain the
33 demote counter, but I can't replicate it when testing.

I could replicate the problem with the initial request disappearing when
using trunk.
The sleep solves it, I can live with that.

On our heavier firewalls bulk transfer never completes, but carp restores
after
the 12 retries, close to 29h after reboot.

/T

Re: pfsync and trunk

2014-09-02 Thread Tony Sarendal

As Chuck pointed out this has nothing to do with pfsense or freebsd.

While I dig deeper I'm running with the following config to get around the
problem:
pf1.swe1# cat /etc/hostname.pfsync0
! sleep 10
! ifconfig $1 syncdev vlan44 syncpeer 10.240.252.77 up

pf1.swe1#

I see the request for the bulk transfer now, and the bulk transfer starting.
Although bulk transfer performance looks like a problem, but that is for
another thread.

/T



On Sat, Aug 30, 2014 at 9:31 PM, System Administrator ad...@bitwise.net
wrote:

 And what does OP's message have to do with pfSense ??? (especially
 since he's clearly indicating currently supported OpenBSD versions 5.4
 and 5.5 near the bottom...)

 On 30 Aug 2014 at 14:22, Chuck Burns wrote:

  On Saturday, August 30, 2014 8:27:24 AM Tony Sarendal wrote:
   Good morning,
  
   I'm having issues with pfsync on trunk interfaces, although I suspect
   it to
  snip
   Running on pfsync on trunk(4) that initial request never shows up, and
   the bulk update never starts/finishes. I would like to run pfsync on
   trunk(4) lacp link, but as it looks now I have firewalls with carp
   demote counter 33 forever.
  snip
 
  pfSense is FreeBSD-based. not OpenBSD-based...
 
  different versions of pf between OpenBSD and FreeBSD
 
  --
  Chuck Burns
  Audemus Jura Nostra Defendere

Re: pfsync and trunk

2014-09-02 Thread Tony Sarendal

Final email in this thread, for correctness.

The initial request disappearing and the firewalls staying demoted
forever are independent issues.
A new request for bulk transfer is sent after 2h+. Due to bulk transfer
performance the transfers
never finish. I see on average 3kpps of pfsync on this cluster, looking at
pfsync this is what I find:

12:02:45.778145 10.240.252.78  10.240.252.77: PFSYNCv6 len 36
act UPD ST REQ count 1
id:  creatorid: 

12:02:45.778153 10.240.252.77  10.240.252.78: PFSYNCv6 len 1412
act BULK UPD STAT count 1
creatorid: b33d7f45 age: 00:00:00 status: start

14:16:09.689102 10.240.252.78  10.240.252.77: PFSYNCv6 len 1264
act UPD ST REQ count 1
id:  creatorid: 

14:16:09.689114 10.240.252.77  10.240.252.78: PFSYNCv6 len 124
act BULK UPD STAT count 1
creatorid: b33d7f45 age: 00:00:00 status: start

16:29:33.604110 10.240.252.78  10.240.252.77: PFSYNCv6 len 36
act UPD ST REQ count 1
id:  creatorid: 

16:29:33.604120 10.240.252.77  10.240.252.78: PFSYNCv6 len 544
act BULK UPD STAT count 1
creatorid: b33d7f45 age: 00:00:00 status: start

18:42:57.518630 10.240.252.78  10.240.252.77: PFSYNCv6 len 124
act UPD ST REQ count 1
id:  creatorid: 

18:42:57.518634 10.240.252.77  10.240.252.78: PFSYNCv6 len 1384
act BULK UPD STAT count 1
creatorid: b33d7f45 age: 00:00:00 status: start

20:56:21.433270 10.240.252.78  10.240.252.77: PFSYNCv6 len 208
act UPD ST REQ count 1
id:  creatorid: 

20:56:21.433283 10.240.252.77  10.240.252.78: PFSYNCv6 len 628
act BULK UPD STAT count 1
creatorid: b33d7f45 age: 00:00:00 status: start

23:09:45.347531 10.240.252.78  10.240.252.77: PFSYNCv6 len 36
act UPD ST REQ count 1
id:  creatorid: 

23:09:45.347534 10.240.252.77  10.240.252.78: PFSYNCv6 len 292
act BULK UPD STAT count 1
creatorid: b33d7f45 age: 00:00:00 status: start

01:23:09.262083 10.240.252.78  10.240.252.77: PFSYNCv6 len 36
act UPD ST REQ count 1
id:  creatorid: 

01:23:09.262093 10.240.252.77  10.240.252.78: PFSYNCv6 len 712
act BULK UPD STAT count 1
creatorid: b33d7f45 age: 00:00:00 status: start

03:36:33.176294 10.240.252.78  10.240.252.77: PFSYNCv6 len 616
act UPD ST REQ count 1
id:  creatorid: 

03:36:33.176300 10.240.252.77  10.240.252.78: PFSYNCv6 len 628
act BULK UPD STAT count 1
creatorid: b33d7f45 age: 00:00:00 status: start

05:49:57.090125 10.240.252.78  10.240.252.77: PFSYNCv6 len 124
act UPD ST REQ count 1
id:  creatorid: 

05:49:57.090130 10.240.252.77  10.240.252.78: PFSYNCv6 len 1132
act BULK UPD STAT count 1
creatorid: b33d7f45 age: 00:00:00 status: start


/T





On Tue, Sep 2, 2014 at 12:07 PM, Tony Sarendal t...@polarcap.org wrote:

 As Chuck pointed out this has nothing to do with pfsense or freebsd.

 While I dig deeper I'm running with the following config to get around the
 problem:
 pf1.swe1# cat /etc/hostname.pfsync0
 ! sleep 10
 ! ifconfig $1 syncdev vlan44 syncpeer 10.240.252.77 up

 pf1.swe1#

 I see the request for the bulk transfer now, and the bulk transfer
 starting.
 Although bulk transfer performance looks like a problem, but that is for
 another thread.

 /T



 On Sat, Aug 30, 2014 at 9:31 PM, System Administrator ad...@bitwise.net
 wrote:

 And what does OP's message have to do with pfSense ??? (especially
 since he's clearly indicating currently supported OpenBSD versions 5.4
 and 5.5 near the bottom...)

 On 30 Aug 2014 at 14:22, Chuck Burns wrote:

  On Saturday, August 30, 2014 8:27:24 AM Tony Sarendal wrote:
   Good morning,
  
   I'm having issues with pfsync on trunk interfaces, although I suspect
   it to
  snip
   Running on pfsync on trunk(4) that initial request never shows up, and
   the bulk update never starts/finishes. I would like to run pfsync on
   trunk(4) lacp link, but as it looks now I have firewalls with carp
   demote counter 33 forever.
  snip
 
  pfSense is FreeBSD-based. not OpenBSD-based...
 
  different versions of pf between OpenBSD and FreeBSD
 
  --
  Chuck Burns
  Audemus Jura Nostra Defendere

pfsync and trunk

2014-08-30 Thread Tony Sarendal

Good morning,

I'm having issues with pfsync on trunk interfaces, although I suspect it to
be
any interface that is slow to start. When I run pfsync on a vlan interface
on a trunk(4),
the pfsync bulk transfer never completes.

Running pfsync on an interface that starts quickly I see:
07:41:45.982402 arp who-has 10.240.252.2 tell 10.240.252.2
07:41:45.982517 10.240.252.2: PFSYNCv6 len 36
act UPD ST REQ count 1
id:  creatorid: 
 (DF) [tos 0x10]
07:41:45.982606 10.240.252.1: PFSYNCv6 len 36
act BULK UPD STAT count 1
creatorid: e9bd40d6 age: 00:00:00 status: start
 (DF) [tos 0x10]
...snip...
07:41:46.062065 10.240.252.1: PFSYNCv6 len 304
act BULK UPD STAT count 1
creatorid: e9bd40d6 age: 00:00:01 status: end
act UPD ST count 1
...
 (DF) [tos 0x10]


Running on pfsync on trunk(4) that initial request never shows up, and the
bulk update never starts/finishes. I would like to run pfsync on trunk(4)
lacp link, but as it looks now I have firewalls with carp demote counter 33
forever.

Anyone else having problems with this ? Anything I can do to improve the
situation ?

Tested with 5.4 and 5.5, real and virtual machines, failover and lacp
trunk(4).

Regards Tony

Re: Does OpenBGPd suffer collateral damage with this?

2014-08-18 Thread Tony Sarendal

What a horrible article. I thought the kebab I just had for lunch ruined my
day, reading that was worse.


On Mon, Aug 18, 2014 at 2:27 AM, Rod Whitworth glis...@witworx.com wrote:

 http://www.smh.com.au/technology/technology-news/how-flakey-is-the-inter
 net-20140816-104t8p.html

 I would love to hear that our beloved BGP routers are the only ones
 that don't get screwed or at least we are one of the few.

 I haven't heard any noises from the hosting site that I look after.


 *** NOTE *** Please DO NOT CC me. I am subscribed to the list.
 Mail to the sender address that does not originate at the list server is
 tarpitted. The reply-to: address is provided for those who feel compelled
 to reply off list. Thankyou.

 Rod/
 ---
 This life is not the real thing.
 It is not even in Beta.
 If it was, then OpenBSD would already have a man page for it.

Re: Does OpenBGPd suffer collateral damage with this?

2014-08-18 Thread Tony Sarendal

Let me clarify the reason I thought the article was horrible. Highlights:

...
There are very few experts in this. It really is the deep magic,
...
Unfortunately, as well as the 4.2 billion IP address limit, the internet is
bound by another arbitrary restriction: the 512,000 slots in the BGP grid.
...
To fix it, they need to reboot the routers, and lots of them will be old
machines that have never been rebooted before, and sometimes when you
reboot something like that it doesn't switch back on again,
...


Regards T




On Mon, Aug 18, 2014 at 1:26 PM, Matthias Appel appel.matth...@gmail.com
wrote:

  -UrsprÃ¼ngliche Nachricht-
  Von: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] Im
  Auftrag von Tony Sarendal
  Gesendet: Montag, 18. August 2014 12:55
  An: misc
  Betreff: Re: Does OpenBGPd suffer collateral damage with this?
 
  What a horrible article. I thought the kebab I just had for lunch ruined
 my
  day, reading that was worse.
 

 If this ruined your day, please refrain from reading further articles about
 BGP.

 If you want to experience _real_ pain, read
 http://www.bgpmon.net/chinese-isp-hijacked-10-of-the-internet/

 BR,

 Matthias

Re: unlink utility

2014-03-26 Thread Tony Abernethy

Ted Unangst wrote
 Sometimes I think refusing to implement stupid standards is the only
 way to fight back.

Thank you.
For such as this I lurk on this list, 
not for help with OpenBSD, 
but for help with everything else.

Something OpenBSD does get right.
Good Stuff is not made from more of Bad Stuff.

Re: OPENBSD FUNDING SOLUTION -- COME AND PARTICIPATE

2014-01-20 Thread Tony Sidaway

On 20 Jan 2014 06:16, noah pugsley noah.pugs...@gmail.com wrote:

 Just saw this on slashdot:

http://www.thedrinkingrecord.com/2014/01/19/romanian-billionaire-saves-openbsd/

 Any idea if it's true?


Treat as rumour, unconfirmed. I'm seeing a lot of people going off
half-cocked in this, which is basically just an IRC transcript of a guy
purporting to have become a sponsor to OpenBSD. Next thing he asks who he
should contact at OpenBSD, so obviously he hasn't actually set up any
actual deal.

Re: Security

2014-01-10 Thread Tony Abernethy

Harry Callahan: A man's GOT to know his limitations.

-Original Message-
From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of 
agrquinonez
Sent: Friday, January 10, 2014 10:20 AM
To: misc@openbsd.org
Subject: Re: Security

On 01/10/2014 04:44 AM, Nick Holland wrote:
 On 01/10/14 01:36, agrquinonez wrote:
 ...
 [compromised box]
 ...
 Ideas are going to be really appreciated, because i am not a technical
guy.

 ok, this is the unpopular answer, but here it is anyway:
 Stop.  You should not be running your own web and mail server.

popular/unpopular it is a dhycotomy without any value!

 Years ago, I used to say that I could make a good case that anyone
 running a mail server or DNS server should require a license, for much
 the same reason as one should have a driver's license to drive on public
 roads: to indicate you have some minimum level of skill so you don't
 hurt others on the road.  (NOT that I would in any way welcome more
 government involvement in the Internet).

I do not care about this comment!

 (I've run mail servers for around 35,000 users and maybe a hundred
 domains, and DNS for hundreds of domains...I'd consider myself BARELY
 sufficiently skilled to pass my hypothetical license requirement.  I'm
 also probably better than 80+% of the people running DNS and e-mail
 systems in the Corporate World.  Be scared.)

it seems good for you, i do not care about it!

 I exempted running a webserver because I felt that your average website
 was safe to other people...kinda like painting your own car -- you may
 do a lousy job, but no one has to look at your car/site.  Well, these
 days of web applications pretty much means I was wrong, and yes, they
 are just as able to harm others on the Internet as mail and dns servers
 -- maybe even more so these days.

Oops, are talking tongues? what is the relation between feeling and
objectivity?

 If you don't know how to track down what happened -- and more
 importantly, don't know how to KEEP it from happening in the first place
 -- you should not be running services on the Internet.  Using OpenBSD
 does not render your system unbreakable, any more than putting a five
 year old behind the wheel of a safe car makes them or the world safe.

Correction, if i do not know yet, how to deal with this situation; then
i should learn, no? and how do you think genius, that one can learn;
If it is not reading and testing?

 As for what happened in your case, with a total lack of facts from you,
 I'm going to say you left a guessable password on an account.  Someone
 then threw a list of a few thousand username and password combinations
 at it, succeeded, and moved in, probably within 24 hours of your setup.
  If you think your password was really clever, that was almost CERTAINLY
 your problem, I've seen these lists, they are funny -- you can just
 imagine people patting themselves on the back over how clever their
 password is...and there it is on the list to be tried on thousands of
 boxes an hour.

You are really interesting; have you read about .php?
I think, that the breach came from php on the web server; it could be
because the wrong httpd.conf vhost, or directly to web pages, or to
sendmail; which do not really seems the case.

 The key thing to know is that Internet attacks are not a oh, I was
 unlucky here thing -- if you expose a service, you are under CONSTANT
 attack, if you have any kind of vulnerability, it WILL be exploited, and
 rather soon.

 Nick.

I do not share your way to see the life Nick, I am a responsible man!
Thanks for your comments.

agrquinonez.

PS:
Tito:
i only have the mentioned services running.
ZE:
I downloaded it from http://ftp.Openbsd.org; yes, it was checked;
DokuWiki came from pkg_add; password is never used; i do ssh-copy-id and
then ssh key + pass-phrase.
Ville:
No, i did not disabled chroot for www

Thanks to all.

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]

Re: OpenBSD for mobile

2013-11-26 Thread Tony Sidaway

On 26 Nov 2013 19:05, Alexander Hall alexan...@beard.se wrote:

 On 11/26/13 17:08, openda...@hushmail.com wrote:

 Hi,

 Are there any plans to make somelike like http://www.ubuntu.com/phonefor 
 OpenBSD?


 Not that I know of, and I can't imagine the platforms being open enough.

Yes, that's it. This is the reason why you'll find OpenBSD for open
hardware such as Beagle/Panda but not for Raspberry Pie. In general,
drivers are difficult to write and maintain unless the hardware is properly
documented. Hardly any smartphone hardware us adequately documented or
unencumbered by non-disclosure requirements.

For Google+ users: BSD community

2013-11-18 Thread Tony Sidaway

If you're using Google+, this community brings together all BSD systems and
BSD projects such as pf, OpenSSH and ZFS. I started it so I could keep in
touch with what's going on in other BSDs while I happily use OpenBSD, and
that's pretty much how it works out.

It's spam-free and 100% on topic, and mostly consists of announcements and
links to news items from the different communities. OpenBSD is well
represented.

https://plus.google.com/communities/100298923022265155991

Re: For Google+ users: BSD community

2013-11-18 Thread Tony Sidaway

Join both! Breen Ouellette's community is best for a focus on OpenBSD.

Re: cvsync, rsync

2013-09-17 Thread Tony Abernethy

INSUFFICIENT DATA

-Original Message-
From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of 
hru...@gmail.com
Sent: Tuesday, September 17, 2013 10:28 AM
To: misc@openbsd.org
Subject: Re: cvsync, rsync

Marc Espie es...@nerim.net wrote:

  You have strings A and B, and you know only that hash(A)=hash(B): what
  is the probability that A=B? 2^-160?  

 No, that's never the problem.

 You have a *given*  string A, and another string B.

O.K. You have string A in the client with hash(A)=n. You find string
B in the server also with hash(B)=n. What is the probability that
A=B?

Rodrigo.

Re: php sending mail via sendmail

2013-09-06 Thread Tony Berth

I did the tcpdump and I think the following should be the reason?

---
500 5.5.1 Command unrecognized: AUTH LOGIN..
---

it tries to open the session with:

---
250-mydomain Hello www@mydomain [x.x.x.x], pleased to meet
you..250-ENHANCEDSTATUSCODES..250-PIPELINING..250-8BITMIME..250-SIZE..250-DSN..250-ETRN..250-DELIVERBY..250HELP..
---


On Thu, Sep 5, 2013 at 2:18 PM, Stuart Henderson s...@spacehopper.orgwrote:

 On 2013-09-02, Tony Berth tonybe...@googlemail.com wrote:
  well the script does talk to google mail correctly so somehow it should
  work.

 If the script is talking to google mail, it is going to be making
 SMTP connections directly itself. Given the log entry you showed, I would
 probably try sniffing the TCP connection (maybe something like
 tcpdump -A -s 1500 -i lo0 port 25 will do).

  I think all these open source php based solutions use the same way to

  send e-mails.

 No, they don't.

 Sending mail from PHP is a right mess, there is the mail() function
 but it's rather limited (on unix, it just pipes to a program and can't
 do smtp-auth), also some server hosts disable it, so in practice most
 larger PHP apps have another way of sending mail where they either
 execute sendmail, or handle the socket connections themselves, or use a
 library (phpmailer etc).
 @owner ${DRUPAL_OWNER}

php sending mail via sendmail

2013-09-02 Thread Tony Berth

Dear group,

when trying different php based open source packages on a chrooted 5.2 box,
I was faced with the problem not being able to send email from their php
script. All the times I get following entry in the maillog:

 w...@example.com [x.x.x.x] did not issue MAIL/EXPN/VRFY/ETRN during
connection to MTA

Any help is much appreciated.

Thanks

Re: php sending mail via sendmail

2013-09-02 Thread Tony Berth

did install both. Now, what are the settings in order to make them work?

Found following for femail:

http://rilk.com/en/doc/node/48

but these changes didn't have any effect. I still get the same error.

Thanks

On Mon, Sep 2, 2013 at 9:11 PM, Stefan Sperling s...@openbsd.org wrote:

 On Mon, Sep 02, 2013 at 02:53:09PM -0400, Scott McEachern wrote:
  The problem there is that femail-chroot requires putting a shell
  into that chroot, which is something I personally avoid.

 Well, whether you need a shell depends on how scripts run external
 programs. E.g. PHPMailer uses popen(), which requires a shell.

 I would argue that if you already have php in there, a shell
 doesn't really make things much worse :)

Re: php sending mail via sendmail

2013-09-02 Thread Tony Berth

I already have these settings implemented but I still get the same error!
Please note that /var/www/bin and /var/www/usr belong to the daemon group.
I don't know if that should be changed to the www one?

Where should I check in the PHP application in order to find the reason of
the problem? Also, what about the pear-Mail package? Is there something I
should adapt?

Thanks for your help

On Mon, Sep 2, 2013 at 11:58 PM, Stefan Sperling s...@openbsd.org wrote:

 On Mon, Sep 02, 2013 at 09:23:46PM +0200, Tony Berth wrote:
  did install both. Now, what are the settings in order to make them work?

 Depends on your php application. It will probably try to run
 /usr/sbin/sendmail, in which case you should ensure that exists
 in the chroot. In my case I had to copy /var/www/bin/femail
 to /var/www/usr/sbin/sendmail, and copy /bin/sh to /var/www/bin/sh
 to make PHPmailer happy.

 You'll also need /var/www/usr/libexec/ld.so, copied from
 /usr/libexec/ld.so.

Re: php sending mail via sendmail

2013-09-02 Thread Tony Berth

well the script does talk to google mail correctly so somehow it should
work. I think all these open source php based solutions use the same way to
send e-mails. The question is how!? Where should I look inside the php
script?

I was trying the oxwall s/w and this is generating this error. But others
like statusnet are doing the same too. I have to say that vtiger crm is
working fine though!

Thanks


On Tue, Sep 3, 2013 at 1:22 AM, Stefan Sperling s...@openbsd.org wrote:

 On Tue, Sep 03, 2013 at 12:19:14AM +0200, Tony Berth wrote:
  I already have these settings implemented but I still get the same error!
  Please note that /var/www/bin and /var/www/usr belong to the daemon
 group.
  I don't know if that should be changed to the www one?
 
  Where should I check in the PHP application in order to find the reason
 of
  the problem? Also, what about the pear-Mail package? Is there something I
  should adapt?
 

 The log message you showed earlier seems to be from sendmail
 complaining that someone trying to relay mail is not doing smtp
 correctly. It comes from the function smtp() in sendmail, see
 /usr/src/gnu/usr.sbin/sendmail/sendmail/srvrsmtp.c but aaah my eyes!

 Perhaps the scripts are not even using the sendmail binaries?
 Perhaps a script is trying to shove mail into an smtp server
 without actually talking smtp?

Re: Two primary OBSD partitions on a HDD

2013-08-25 Thread Tony Abernethy

josef.win...@email.de wrote

I read fdisk(8) carefully (At least I think so), but I repeatedly failed to
install two OBSDS on two primary partitions of a HDD.

The idea was to realize a multiboot by toogleing the boot-flag to the primary
partition of the particular OBSD system I want to boot.

However, I think that the install process always chooses the same primary
OBSD partition for installation (the first that appears in the table?) 
and I have no control.

/jo


##-
I'm sure Nick Holland will explain it better, but
OpenBSD works from THE (singular) disklabel on the physical disk
Other than keeping other OS's out, and a bit of help booting,
the fdisk partitions are actually completely irrelevant.

Re: VirtualBox+chive+mysql

2013-08-15 Thread Tony Berth

On Wed, Aug 14, 2013 at 4:48 PM, Bruno Flueckiger inform...@gmx.net wrote:

 On 14.08.2013 14:21, Tony Berth wrote:

 Dear group,

 I have following configuration:

 - latest Ubuntu amd64 server
 - VirtualBox running on the above Ubuntu server
 - openbsd 5.3 (amd64) with mysql and chive installed and running inside
 VirtualBox

 when I try to connect to the openbsd mysql server from mysql workbench
 installed in Ubuntu, everything works fine.
 When I try the same but calling chive from the openbsd installation, I get
 'CDbConnection failed to open the DB connection'. What is the difference?

 Thanks



 Hi,

 I don't have any knowledge about mysql workbench or chive. The usual
 suspects
 would be:

 - Wrong hostname
 - Missing DNS entry for hostname
 - Wrong DNS config on the OpenBSD VM
 - Wrong username
 - Wrong password

 It's hard to tell where the problem if you don't provide us with more
 details.

 Regards,
 Bruno



I provide exact the same credentials regardless if I connect from mysql
workbench or the browser by calling chive. I tried the dynamic IP provided
by VirtualBox , the domain (as listed in /etc/hosts), localhost or
127.0.0.1 and all of them failed. Using mysql workbench, was able to
connect via the dynamic IP.

What do you mean by 'Wrong DNS config on the OpenBSD VM'? In VirtualBox I
have a 'Bridged Adapter' network setting and I'm able to access the web
server from the Ubuntu box by calling the assigned dynamic IP.


Thanks

VirtualBox+chive+mysql

2013-08-14 Thread Tony Berth

Dear group,

I have following configuration:

- latest Ubuntu amd64 server
- VirtualBox running on the above Ubuntu server
- openbsd 5.3 (amd64) with mysql and chive installed and running inside
VirtualBox

when I try to connect to the openbsd mysql server from mysql workbench
installed in Ubuntu, everything works fine.
When I try the same but calling chive from the openbsd installation, I get
'CDbConnection failed to open the DB connection'. What is the difference?

Thanks

yacy on openbsd

2013-08-04 Thread Tony Berth

Dear group,

is anyone running yacy on a openbsd box?

I tested the latest one yacy on a 5.3 amd64 but didn't succeed. The only
resource I found was:

http://ventejuy.es/cgi-bin/post?p=11051522005289 (in Spanish!)

but was unable to connect to localhost:8090

Thanks

Re: goaccess 0.5

2013-07-12 Thread Tony Berth

did export CPPFLAGS and LDFLAGS and did follow in '
http://goaccess.prosoftcorp.com/faq' the section 'How to build GoAccess
0.4.2 on OpenBSD 4.8-current'. I did the modification in 'parser.c' but in
'util.c', 'sys/socket.h' was already included. Probably a change in version
0.5?
Unfortunately, 'configure' gives the same error. Should I send you the
config.log too?

Thanks


On Wed, Jul 10, 2013 at 1:31 AM, Juan Francisco Cantero Hurtado 
i...@juanfra.info wrote:

 On Wed, Jul 10, 2013 at 12:01:11AM +0300, Tony Berth wrote:
  is anyone using goaccess 0.5 with 5.2 or 5.3?
 
  When running './configure' I get:
 
  checking for a BSD-compatible install... /usr/bin/install -c
  checking whether build environment is sane... yes
  checking for a thread-safe mkdir -p... ./install-sh -c -d
  checking for gawk... no
  checking for mawk... no
  checking for nawk... no
  checking for awk... awk
  checking whether make sets $(MAKE)... yes
  checking for gcc... gcc
  checking for C compiler default output file name... a.out
  checking whether the C compiler works... yes
  checking whether we are cross compiling... no
  checking for suffix of executables...
  checking for suffix of object files... o
  checking whether we are using the GNU C compiler... yes
  checking whether gcc accepts -g... yes
  checking for gcc option to accept ISO C89... none needed
  checking for style of include used by make... GNU
  checking dependency style of gcc... gcc3
  checking for pkg-config... /usr/bin/pkg-config
  checking pkg-config is at least version 0.9.0... yes
  checking for GLIB2... yes
  checking for refresh in -lncurses... yes
  checking for new_menu in -lmenu... yes
  checking for g_free in -lglib-2.0... no
  configure: error: glib-2.x is missing

 CPPFLAGS=-I/usr/local/include LDFLAGS=-L/usr/local/lib ./configure

 --
 Juan Francisco Cantero Hurtado http://juanfra.info

goaccess 0.5

2013-07-09 Thread Tony Berth

is anyone using goaccess 0.5 with 5.2 or 5.3?

When running './configure' I get:

checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... ./install-sh -c -d
checking for gawk... no
checking for mawk... no
checking for nawk... no
checking for awk... awk
checking whether make sets $(MAKE)... yes
checking for gcc... gcc
checking for C compiler default output file name... a.out
checking whether the C compiler works... yes
checking whether we are cross compiling... no
checking for suffix of executables...
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ISO C89... none needed
checking for style of include used by make... GNU
checking dependency style of gcc... gcc3
checking for pkg-config... /usr/bin/pkg-config
checking pkg-config is at least version 0.9.0... yes
checking for GLIB2... yes
checking for refresh in -lncurses... yes
checking for new_menu in -lmenu... yes
checking for g_free in -lglib-2.0... no
configure: error: glib-2.x is missing

Re: softraid: adding volumes, CPU requirements, RAID5

2013-07-05 Thread Tony Abernethy

It works.
Translation:
It has worked (mostly) for me. (A few times)

(Seems like Theo has a good quote about gcc)

Boris Goldberg wrote:
Hello guys,

Thursday, July 4, 2013, 12:40:50 PM, Nick Holland wrote:

   If the softraid is so raw yet, why the old good RAIDFrame was removed
 starting the 5.2? It works just fine for me. Big volumes rebuilds take a
 long while, but it's something working.

NH That's quite a leap from RAID 5 is not ready for use to softraid is
NH so raw.  RAID5 is one discipline of several that isn't complete.  RAID0
NH is ready for use, RAID1 is ready for use, crypto is ready for use.

  I've tried to use the nicer word. Not fully functional and raw are
synonyms.

NH It is also quite a leap to call old RAIDframe good.
NH It was horribly old, unmaintained code, which wasn't well loved by
NH developers when it was fresh and current.

NH Your assumptions are wrong.

  I am not assuming, I'm talking from experience. It works. I can install
to it (after a small tweak in the script). I boot from it (after a small
tweak in the code to pick up swap on raid). It continues to work if one
disk fails. It repairs (automatically if you replace the disk and boot -
doing much better job than md from Linux). In other words - it's fully
functional with some flaws. Fully functional is the key expression here.

  Is the RAIDFrame old? Yes, but old isn't necessary bad if it's working.
  Did it need a replacement? Yes if no one was willing to maintain it.
  Did you need to kill it *before* the replacement is ready? Definitely no.

  Could you, please, return the RAIDframe support until the softraid is
ready?

-- 
Best regards,
 Borismailto:bo...@twopoint.com

routes stuck in bgpd after ifconfig destroy

2013-06-29 Thread Tony Sarendal

Tested on 5.2 and current.
routes get stuck in bgpd after ifconfig destroy.

titan# cat /etc/bgpd.conf


AS 65001
router-id 10.1.1.1
network inet connected
network inet static

titan# bgpctl show rib

flags: * = Valid,  = Selected, I = via IBGP, A = Announced, S = Stale
origin: i = IGP, e = EGP, ? = Incomplete

flags destination  gateway  lpref   med aspath origin
AI*  10.1.1.0/24  0.0.0.0100 0 i
AI*  172.29.1.0/240.0.0.0100 0 i
titan# ifconfig vlan102 create

titan# ifconfig vlan102 vlandev em1 vlan 102 up

titan# ifconfig vlan102 192.168.1.1/24

titan# route add 192.0.2.1/32 192.168.1.100
add host 192.0.2.1/32: gateway 192.168.1.100
titan# bgpctl show rib

flags: * = Valid,  = Selected, I = via IBGP, A = Announced, S = Stale
origin: i = IGP, e = EGP, ? = Incomplete

flags destination  gateway  lpref   med aspath origin
AI*  10.1.1.0/24  0.0.0.0100 0 i
AI*  172.29.1.0/240.0.0.0100 0 i
AI*  192.0.2.1/32 0.0.0.0100 0 i
AI*  192.168.1.0/24   0.0.0.0100 0 i
titan# ifconfig vlan102 destroy

titan# bgpctl show rib
flags: * = Valid,  = Selected, I = via IBGP, A = Announced, S = Stale
origin: i = IGP, e = EGP, ? = Incomplete

flags destination  gateway  lpref   med aspath origin
AI*  10.1.1.0/24  0.0.0.0100 0 i
AI*  172.29.1.0/240.0.0.0100 0 i
AI*  192.0.2.1/32 0.0.0.0100 0 i
titan# bgpctl show fib | grep 192.0.2.1
*S   8 192.0.2.1/32 192.168.1.100
titan# netstat -rn | grep 192.0.2.1
titan#

/T

max RAM

2013-06-15 Thread Tony Berth

Dear group,

what is the max RAM the current release can support?

Thanks

Tony

Re: max RAM

2013-06-15 Thread Tony Berth

on a amd64 server. I don't know if the 4GB limit is still in place.


Thanks

Tony


On Sat, Jun 15, 2013 at 8:07 PM, Zé Loff zel...@zeloff.org wrote:

 On your Zaurus or on your old mac or on your 386 or on your amd64 server
 or on your VAX or on your sparc64 or...?

 On 15/06/2013, at 18:37, Tony Berth tonybe...@googlemail.com wrote:

  Dear group,
 
  what is the max RAM the current release can support?
 
  Thanks
 
  Tony

Re: max RAM [solved]

2013-06-15 Thread Tony Berth

Thanks


On Sat, Jun 15, 2013 at 9:02 PM, Stuart Henderson s...@spacehopper.orgwrote:

 On 2013-06-15, Tony Berth tonybe...@googlemail.com wrote:
  on a amd64 server. I don't know if the 4GB limit is still in place.

 4.9 is the last release which was limited to 4GB on amd64.

 http://www.openbsd.org/50.html

remote management

2013-05-13 Thread Tony Berth

Dear Group,

I would like to know what kind of environment you use for remote management
of one or more openbsd servers. Which KVM over IP solution would you
recomend.

Thanks

Tony

Re: remote management

2013-05-13 Thread Tony Berth

thanks for the prompt replies. Any recommendation for IPMI cards and KVM
over IP switches that work well with openbsd?

Tony


On Tue, May 14, 2013 at 12:07 AM, Nick Holland
n...@holland-consulting.netwrote:

 On 05/13/2013 03:24 PM, Tony Berth wrote:

 Dear Group,

 I would like to know what kind of environment you use for remote
 management
 of one or more openbsd servers. Which KVM over IP solution would you
 recomend.


 Oh, I remember those.

 Last IP KVM switch I used worked BETTER for OpenBSD than it did for
 Windows...  Seriously.  Windows desktop was a garbled mess, looked like a
 badly tuned TV set (for those that remember when you could and needed to
 tune TVs), but running OpenBSD with X, it Just Worked.  Go figure.
  Getting the client software to run was another matter all together, as I
 recall, it was a horribly Windows/IE dependent.

 Really, though.  If it's in a data center, usually I just use the remote
 access controller on most servers these days or a serial console.

 Just remember...  if you got a big *** lock on the data center door (you
 should), make sure your remote console (however you do it) is comparably
 secure.  Putting your remote access on the same network as all your users
 is similar to removing the locks on the data center door. Not changing the
 default RAC password and/or IDs is like putting a Welcome mat under the
 (unlocked) door of the data center.

 And ask yourself...why do you run OpenBSD?  Maybe because of the security.
  What OS do you think is at the base of your IP KVM?  Probably not OpenBSD.
  Strength of a chain is the weakest link and all that -- if someone can
 knock over your KVM, they own your box.  Don't compromise your machine with
 a bad remote console.

 Nick.

Re: sendmail config [solved]

2013-04-13 Thread Tony Berth

Thanks for all the prompt replies. The MUA is indeed the place to do the
modifications.
Just for the records, in SqurrelMail I had to modify the file
'class/deliver/Deliver.class.php'

Tony


On Fri, Apr 12, 2013 at 11:06 AM, James Griffin j...@kontrol.kode5.netwrote:

 Fri 12.Apr'13 at  9:27:14 +0300 Tony Berth
  I want to display the IP of the mail server only, as client IPs isn't a
  relevant info for the 'outside world'. The same applies to the
 'User-Agent'
  field.
 
  Concerning the 'References', It was just an idea but still I want to have
  that option regardless how I could ever use it.
 
  Thanks
 
  Tony

 That information is added by the MUA: References:, User-Agent:, etc. The
 MTA only adds relevant information about the client, during the smtp
 transaction. All MTA's do that. There's not really any benefit in trying
 to hide it. Your domain information can be obtained by others means anyway
 if people want it, thus it's a pointless task.

 Configure your MUA to exclude bits if you really need to. It's not a MTA
 issue.

 --
 James Griffin:  jmz at kontrol.kode5.net
 jmzgriffin at gmail.com

 A4B9 E875 A18C 6E11 F46D  B788 BEE6 1251 1D31 DC38

Re: sendmail config

2013-04-12 Thread Tony Berth

I want to display the IP of the mail server only, as client IPs isn't a
relevant info for the 'outside world'. The same applies to the 'User-Agent'
field.

Concerning the 'References', It was just an idea but still I want to have
that option regardless how I could ever use it.

Thanks

Tony


On Fri, Apr 12, 2013 at 9:21 AM, Philip Guenther guent...@gmail.com wrote:

 On Thu, Apr 11, 2013 at 10:57 PM, Tony Berth tonybe...@googlemail.com
 wrote:
  I'm running a 386 5.2 OpenBSD box with sendmail and would like to strip
  following headers from the outgoing e-mails:
 
  *Received:* from x.x.x.x
   (SquirrelMail authenticated user user)
   by new.host.name with HTTP;
   Thu, 11 Apr 2013 14:31:59 +0300
  [from the above I would like to strip the IP address of the webclient,
 the
  MUA as well as the logged-in user]
 
  *References:* e253a79261e44ce227bbc166a9adaf84.squir...@new.host.name
   a369eabe7962808743d2de3a4134d0c9.squir...@new.host.name
   32410656f1b0057d8966ea544f68f1dd.squir...@new.host.name
   db43aa23cdc95bb7218fa33c8aa18efa.squir...@new.host.name
  [from the above I would like to strip the history of the refes]
 
  *User-Agent:* SquirrelMail/1.4.22
  [from the above I would like to remove the MUA]

 There's no way to do that inside sendmail itself.

 What problem are you trying solve by making those changes?

 (Changing References is particularly rude: Hi, I want to make it
 harder for people to follow email conversations and make my users look
 like idiots!)


 Philip Guenther

Re: sendmail config

2013-04-12 Thread Tony Berth

good point indeed. I tried with conf.pl but didn't have any effect. For
example, I turned version info off but still, sendmail propagates the
complete info.

Thanks

Tony


On Fri, Apr 12, 2013 at 9:36 AM, Ted Unangst t...@tedunangst.com wrote:

 On Fri, Apr 12, 2013 at 09:27, Tony Berth wrote:
  I want to display the IP of the mail server only, as client IPs isn't a
  relevant info for the 'outside world'. The same applies to the
 'User-Agent'
  field.

 Wouldn't a more reasonable approach be to fix the squirrel mail config to
 do what you want?

sendmail config

2013-04-11 Thread Tony Berth

Dear group,

I'm running a 386 5.2 OpenBSD box with sendmail and would like to strip
following headers from the outgoing e-mails:

*Received:* from x.x.x.x
 (SquirrelMail authenticated user user)
 by new.host.name with HTTP;
 Thu, 11 Apr 2013 14:31:59 +0300
[from the above I would like to strip the IP address of the webclient, the
MUA as well as the logged-in user]

*References:* e253a79261e44ce227bbc166a9adaf84.squir...@new.host.name
 a369eabe7962808743d2de3a4134d0c9.squir...@new.host.name
 32410656f1b0057d8966ea544f68f1dd.squir...@new.host.name
 db43aa23cdc95bb7218fa33c8aa18efa.squir...@new.host.name
[from the above I would like to strip the history of the refes]

*User-Agent:* SquirrelMail/1.4.22
[from the above I would like to remove the MUA]

Thanks

Tony

Re: PRIMERGY RX200 S2 installation problems

2012-12-06 Thread Tony Berth

now I got the installation log of current trying the amd64 distro:

-
CD-ROM: 9F
Loading /5.2/AMD64/CDBOOT
probing: pc0 mem[620K 2046M a20=on]
disk: hd0+* cd0
 OpenBSD/amd64 CDBOOT 3.19
boot
booting cd0a:/5.2/amd64/bsd.rd: 3046708
8]=0xb8eb78
entry point at 0x1001e0 [7205c766, 3404, 24448b12, c638a304]
Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California. All rights reserved.
Copyright (c) 19995-2012 OpenBSD. All rights reserved.
http://www.OpenBSD.org
OpenBSD 5.2-current (RAMDISK_CD) #96: Sun Dec 2 13:12:01 MST 2012
der...@amd64.openbsd.org:/usr/src/sys/sys/arch/amd64/compile/RAMDISK_CD
real mem = 2145845248 (2046MB)
avail mem = 2068709376 (1972MB)
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.33 @ 0xdc010 (58 entries)
bios0: vendor FSC version 6.0 Rev. R04A5F1.1790 date 09/16/2005
bios0: FUJITSU SIEMENES PRIMERGY RX200S2
acpi0 at bios0: rev 0
acpi0: sleep states S0 S1 S4 S5
acpi0: tables DSDT FACP MCFC SPCR APIC BOOY SSDT
acpimadt0 at acpi0 addt 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Xeon(TM) CPU 3.00 GHz, 3000.53 NHz
cpu0: FPU, VME, DE, PSE, TSC, MSR, PAE, MCE, CX8, APIC, SEP, MTRR, PGE,MCA,
CMOV, PAT, PSE36, CF
LUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,CNXT-ID,
CX16,xTPR,NXE,LONG,PERF
cpu0: 2MB 64b/line 8-way L2 cache
cpu0: apic clock running at 200MHz
cpu at mainbus0: not configured
cpu at mainbus0: not configured
cpu at mainbus0: not configured
ioacpi0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
ioacpi1 at mainbus0: apid 3 pa 0xfec8, version 20, 24 pins
ioacpi2 at mainbus0: apid 4 pa 0xfec80400, version 20, 24 pins
acpiprt0 at acpi0: bus 2 (P2P3)
acpiprt1 at acpi0: bus 3 (P2P4)
acpiprt2 at acpi0: bus 0 (PCI0)
acpiprt3 at acpi0: bus 4 (PCIB)
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 Intel E7520 Host rev 0x09
Intel E7520 Error Reporting rev 0x09 at pci0 dev 0 function 1 not
configured
ppb0 at pci0 dev 2 function 0 Intel E7520 PCIE rev 0x09
pci1 at ppb0 bus 1
ppb1 at pci1 dev 0 function 0 Intel 6700PXH PCIE-PCIX rev 0x09
pci2 at ppb1 bus 2
Intel IOxAPIC rev 0x09 at pci1 dev 0 function 1 not configured
ppb2 at pci1 dev 0 function 2 Intel 6700PXH PCIE-PCIX rev 0x09
pci3 at ppb2 bus 3
em0 at pci3 dev 3 function 0 Intel PRO/1000MT (82545CM) rev 0x04: apic 2
int1
6, address 00:04:23:c4:01:16
mpi0 at pci3 dev 5 function 0 Symbios Logic 53c1030 rev 0x07: msi
scsibus0 at mpi0: 16 targets, initiator 7
sd0 at scsibus0 targ 1 lun 0: LSILOGIC, 1030 IM, 1000 SCSI2 0/direct fixed
sd0: 34700MB, 512 bytes/sector, 71065600 sectors
mpi0: timeout
mpi0: timeout
mpi0: timeout
mpi0: timeout
mpi0: timeout
mpi0: timeout
mpi0: phys disk Async at 0 MHz width 8bit offset 0 QAS 0 DT 0 IU 0
em1 at pci3 dev 6 function 0 Intel PRO/100MT (82546GB) rev 0x03: apic 2
int 1
6, address 00:0a:e4:80:5c:4c
em2 at pci3 dev 6 function 1 Intel PRO/1000MT (82545GB) rev 0x03: apic 2
int1
7, address 00:0a:e4:80:5c:4d
Intel IOxAPIC rev 0x09 at pci1 dev 0 function 1 not configured
uhci0 at pci0 dev 29 function 0 Intel 82801EB/ER USB rev 0x02: apic 2 int
16
uhci1 at pci0 dev 29 function 1 Intel 82801EB/ER USB rev 0x02: apic 2 int
19
ehci0 at pci0 dev 29 function 7 Intel 82801EB/ER USB2 rev 0x02: apic 2
int 23
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 Intel EHCI root hub rev. 2.00/1.00 addr 1
ppb3 at pci0 dev 30 function 0 Intel 82801BA Hub-to-PCI rev 0xc2
pci4 at ppb3 bus 4
vga1 at pci4 dev 1 function 0 ATI Rage XL rev 0x27
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
Intel 82801EB/ER LPC rev 0x02 at pci0 dev 31 function 0 not configured
pciide0 at pci0 dev 31 function 1 Intel 82801EB/ER IDE rev 0x02: DMA,
channel
0 configured to compatibility, channel 1 configured to compatibility
atapiscsi0 at pciide0 channel 0 drive 0
scsibus1 at atapiscsi0: 2 targets
cd0 at scsibus1 targ 0 lun 0: HL-DT-ST, CD-ROM GCR-8240N, 1.01 ATAPI
5/cdrom r
emovable
cd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
pciide0: channel 1 ignored (disabled)
Intel 82801EB/ER SMBus rev 0x02 at pci0 dev 31 function 3 not configured
usb1 at uhci0: USB revision 1.0
uhub1 at usb1 Intel UHCI root hub rev 1.00/1.00 addr 1
usb2 at uhci1: USB revision 1.0
uhub2 at usb2 Intel UHCI root hub rev 1.00/1.00 addr 1
isa0 at mainbus0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
panic: attempt to execute user address 0x0 in supervisor mode
The operating system has halted
Please press any key to reboot
--

Thanks

Re: PRIMERGY RX200 S2 installation problems

2012-12-03 Thread Tony Berth

here is the installation dmesg when trying to install the 5.2 i386 snapshot:

-
LSI Logic Corp. MPT IME  BIOS
Copyright 1995-2005 LSI Logic Corp.
MPTBIOS-IME-5.13.08

CD-ROM: 9F
Loading /5.2/I386/CDBOOT
probing: pc0 apm pci mem[616K 2046M a20=on]
disk: hd0+* cd0
 OpenBSD/i386 CDBOOT 3.17
boot
booting cd0a:/5.2/i386/bsd.rd: 5973772+958284 [52+229744+218028]=0x709d1c
entry point at 0x200128
Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California. All rights reserved.
Copyright (c) 19995-2012 OpenBSD. All rights reserved.
http://www.OpenBSD.org
OpenBSD 5.2 (RAMDISK_CD) #287: Wed Aug 1 10:19:00 MDT 2012
der...@i386.openbsd.org:/usr/src/sys/sys/arch/i386/compile/RAMDISK_CD
cpu0: Intel(R) Xeon(TM) CPU 3.00 GHz (GenuineIntel 686-class)
cpu0: FPU, V86, DE, PSE, TSC, MSR, PAE, MCE, CX8, APIC, SEP, MTRR, PGE,MCA,
CMOV, PAT, PSE36, CF
LUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM.SBF,NXE,LONG,SSE3,MWAIT,DS-CPL,CNXT-
ID,
CX16,xTPR
real mem = 2146414592 (2046MB)
avail mem = 2183640064 (2006MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 09/16/85, BIOS32 rev. 0 @ 0xfd418,
SMBIOS
rev. 2.33 @ 0xdc010 (58 entries)
bios0: vendor FSC version 6.8 Rev. R04A5F1.1790 date 09/16/2005
bios0: FUJITSU SIEMENES PRIMERGY RX200S2
acpi0 at bios0: rev 0
acpi0: sleep states S0 S1 S4 S5
acpi0: tables DSDT FACP MCFC SPCR APIC BOOY SSDT
acpimadt0 at acpi0 addt 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 200MHz
cpu at mainbus0: not configured
cpu at mainbus0: not configured
cpu at mainbus0: not configured
ioacpi0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
ioacpi1 at mainbus0: apid 3 pa 0xfec8, version 20, 24 pins
ioacpi2 at mainbus0: apid 4 pa 0xfec80400, version 20, 24 pins
acpiprt0 at acpi0: bus 2 (P2P3)
acpiprt1 at acpi0: bus 3 (P2P4)
acpiprt2 at acpi0: bus 0 (PCI0)
acpiprt3 at acpi0: bus 4 (PCIB)
bios0: ROM list: 0xc/0x8000 0xc8000/0x4000 0xdc000/0x4000!
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Intel E7520 Host rev 0x09
Intel E7520 Error Reporting rev 0x09 at pci0 dev 0 function 1 not
configured
ppb0 at pci0 dev 2 function 0 Intel E7520 PCIE rev 0x09
pci1 at ppb0 bus 1
ppb1 at pci1 dev 0 function 0 Intel 6700PXH PCIE-PCIX rev 0x09
pci2 at ppb1 bus 2
Intel IOxAPIC rev 0x09 at pci1 dev 0 function 1 not configured
ppb2 at pci1 dev 0 function 2 Intel 6700PXH PCIE-PCIX rev 0x09
pci3 at ppb2 bus 3
em0 at pci3 dev 3 function 0 Intel PRO/1000MT (82545CM) rev 0x04: apic 2
int1
6, address 00:04:23:c4:01:16
mpi0 at pci3 dev 5 function 0 Symbios Logic 53c1030 rev 0x07: msi
scsibus0 at mpi0: 16 targets, initiator 7
sd0 at scsibus0 targ 1 lun 0: LSILOGIC, 1030 IM, 1000 SCSI2 0/direct fixed
sd0: 34700MB, 512 bytes/sector, 71065600 sectors
mpi0: timeout
mpi0: timeout
mpi0: timeout
mpi0: timeout
mpi0: timeout
mpi0: timeout
mpi0: phys disk Async at 0 MHz width 8bit offset 0 QAS 0 DT 0 IU 0
em1 at pci3 dev 6 function 0 Intel PRO/100MT (82546GB) rev 0x03: apic 2
int 1
6uvm_fault (0xd07f31d8, 0x0, 0, 1) - e
fatal page fault (6) in supervisor mode
trap type 6 code 0 eip 0 cs 50 eflags 10282 cr2 0 cpl 50
panic: trap type 6, code=0, pc=0
The operating system has halted
Please press any key to reboot
---

Thanks

On Thu, Nov 29, 2012 at 2:25 PM, Nick Holland
n...@holland-consulting.netwrote:

 On 11/29/12 06:42, Tony Berth wrote:
  Thanks
 
  Both i386 and amd64 fail! But, are that many differences between stable
 and
  current?

 You caught us, nothing has changed in OpenBSD since 1995, we just drink
 beer and increment the version number every six months.
 /sarcasm

 The most significant changes tend to take place just AFTER unlocking of
 a new version of OpenBSD -- i.e., BEFORE the CDs ship.  So yes, -current
 is significantly different than the most recent release.

 Now, step away from the ! key, and lets see if we can help you help us
 help you.

 Here's the situation... apparently, no one has been installing OpenBSD
 on this particular machine before.  Never heard of it myself, whatever
 that means.  A quick google showed me a lot of PDF files I don't wish to
 look at, but apparently it is a rack-mount server.

 There's apparently a problem between this machine and OpenBSD.

 You have three choices I see:
 1) provide one or two of these machines to developers.
 2) provide useful information to developers
 3) give up, as without either 1 or 2, we aren't going to be able to help
 you.

 I'm going to guess you don't have the spare money/machine to provide a
 few machines to the project.

 The first piece of useful information we could use would be a COMPLETE
 dmesg, collected via a serial port as an install kernel boots.  So, grab
 a null modem cable and another computer, and gather that for us...then
 maybe we can give you some suggestions.  The dmesg tells us what is in
 your machine, how it is connected, and sometimes, an idea of what went
 wrong.

 Nick.





  On Thu, Nov 29, 2012 at 11:20

Re: PRIMERGY RX200 S2 installation problems

2012-12-03 Thread Tony Berth

it is the current one (2012-12-02)

Thanks

On Mon, Dec 3, 2012 at 6:52 PM, Kenneth R Westerback kwesterb...@rogers.com
 wrote:

 On Mon, Dec 03, 2012 at 06:08:34PM +0200, Tony Berth wrote:
  here is the installation dmesg when trying to install the 5.2 i386
 snapshot:

 And the installation dmesg from a -current snapshot would be even
 more useful.

  Ken

 
  -
  LSI Logic Corp. MPT IME  BIOS
  Copyright 1995-2005 LSI Logic Corp.
  MPTBIOS-IME-5.13.08
 
  CD-ROM: 9F
  Loading /5.2/I386/CDBOOT
  probing: pc0 apm pci mem[616K 2046M a20=on]
  disk: hd0+* cd0
   OpenBSD/i386 CDBOOT 3.17
  boot
  booting cd0a:/5.2/i386/bsd.rd: 5973772+958284 [52+229744+218028]=0x709d1c
  entry point at 0x200128
  Copyright (c) 1982, 1986, 1989, 1991, 1993
  The Regents of the University of California. All rights reserved.
  Copyright (c) 19995-2012 OpenBSD. All rights reserved.
  http://www.OpenBSD.org
  OpenBSD 5.2 (RAMDISK_CD) #287: Wed Aug 1 10:19:00 MDT 2012
  der...@i386.openbsd.org:/usr/src/sys/sys/arch/i386/compile/RAMDISK_CD
  cpu0: Intel(R) Xeon(TM) CPU 3.00 GHz (GenuineIntel 686-class)
  cpu0: FPU, V86, DE, PSE, TSC, MSR, PAE, MCE, CX8, APIC, SEP, MTRR,
 PGE,MCA,
  CMOV, PAT, PSE36, CF
 
 LUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM.SBF,NXE,LONG,SSE3,MWAIT,DS-CPL,CNXT-
  ID,
  CX16,xTPR
  real mem = 2146414592 (2046MB)
  avail mem = 2183640064 (2006MB)
  mainbus0 at root
  bios0 at mainbus0: AT/286+ BIOS, date 09/16/85, BIOS32 rev. 0 @ 0xfd418,
  SMBIOS
  rev. 2.33 @ 0xdc010 (58 entries)
  bios0: vendor FSC version 6.8 Rev. R04A5F1.1790 date 09/16/2005
  bios0: FUJITSU SIEMENES PRIMERGY RX200S2
  acpi0 at bios0: rev 0
  acpi0: sleep states S0 S1 S4 S5
  acpi0: tables DSDT FACP MCFC SPCR APIC BOOY SSDT
  acpimadt0 at acpi0 addt 0xfee0: PC-AT compat
  cpu0 at mainbus0: apid 0 (boot processor)
  cpu0: apic clock running at 200MHz
  cpu at mainbus0: not configured
  cpu at mainbus0: not configured
  cpu at mainbus0: not configured
  ioacpi0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
  ioacpi1 at mainbus0: apid 3 pa 0xfec8, version 20, 24 pins
  ioacpi2 at mainbus0: apid 4 pa 0xfec80400, version 20, 24 pins
  acpiprt0 at acpi0: bus 2 (P2P3)
  acpiprt1 at acpi0: bus 3 (P2P4)
  acpiprt2 at acpi0: bus 0 (PCI0)
  acpiprt3 at acpi0: bus 4 (PCIB)
  bios0: ROM list: 0xc/0x8000 0xc8000/0x4000 0xdc000/0x4000!
  pci0 at mainbus0 bus 0: configuration mode 1 (bios)
  pchb0 at pci0 dev 0 function 0 Intel E7520 Host rev 0x09
  Intel E7520 Error Reporting rev 0x09 at pci0 dev 0 function 1 not
  configured
  ppb0 at pci0 dev 2 function 0 Intel E7520 PCIE rev 0x09
  pci1 at ppb0 bus 1
  ppb1 at pci1 dev 0 function 0 Intel 6700PXH PCIE-PCIX rev 0x09
  pci2 at ppb1 bus 2
  Intel IOxAPIC rev 0x09 at pci1 dev 0 function 1 not configured
  ppb2 at pci1 dev 0 function 2 Intel 6700PXH PCIE-PCIX rev 0x09
  pci3 at ppb2 bus 3
  em0 at pci3 dev 3 function 0 Intel PRO/1000MT (82545CM) rev 0x04: apic
 2
  int1
  6, address 00:04:23:c4:01:16
  mpi0 at pci3 dev 5 function 0 Symbios Logic 53c1030 rev 0x07: msi
  scsibus0 at mpi0: 16 targets, initiator 7
  sd0 at scsibus0 targ 1 lun 0: LSILOGIC, 1030 IM, 1000 SCSI2 0/direct
 fixed
  sd0: 34700MB, 512 bytes/sector, 71065600 sectors
  mpi0: timeout
  mpi0: timeout
  mpi0: timeout
  mpi0: timeout
  mpi0: timeout
  mpi0: timeout
  mpi0: phys disk Async at 0 MHz width 8bit offset 0 QAS 0 DT 0 IU 0
  em1 at pci3 dev 6 function 0 Intel PRO/100MT (82546GB) rev 0x03: apic 2
  int 1
  6uvm_fault (0xd07f31d8, 0x0, 0, 1) - e
  fatal page fault (6) in supervisor mode
  trap type 6 code 0 eip 0 cs 50 eflags 10282 cr2 0 cpl 50
  panic: trap type 6, code=0, pc=0
  The operating system has halted
  Please press any key to reboot
  ---
 
  Thanks
 
  On Thu, Nov 29, 2012 at 2:25 PM, Nick Holland
  n...@holland-consulting.netwrote:
 
   On 11/29/12 06:42, Tony Berth wrote:
Thanks
   
Both i386 and amd64 fail! But, are that many differences between
 stable
   and
current?
  
   You caught us, nothing has changed in OpenBSD since 1995, we just drink
   beer and increment the version number every six months.
   /sarcasm
  
   The most significant changes tend to take place just AFTER unlocking of
   a new version of OpenBSD -- i.e., BEFORE the CDs ship.  So yes,
 -current
   is significantly different than the most recent release.
  
   Now, step away from the ! key, and lets see if we can help you help
 us
   help you.
  
   Here's the situation... apparently, no one has been installing OpenBSD
   on this particular machine before.  Never heard of it myself, whatever
   that means.  A quick google showed me a lot of PDF files I don't wish
 to
   look at, but apparently it is a rack-mount server.
  
   There's apparently a problem between this machine and OpenBSD.
  
   You have three choices I see:
   1) provide one or two of these machines to developers.
   2) provide useful information to developers
   3) give up, as without either 1 or 2, we aren't going to be able

Re: PRIMERGY RX200 S2 installation problems

2012-12-03 Thread Tony Berth

indeed. Looks like the mixed it up. As long as I get the 'current' log I'll
send it to the list.

Thanks

On Mon, Dec 3, 2012 at 6:23 PM, Sebastian Reitenbach 
sebas...@l00-bugdead-prods.de wrote:


 Am Montag, 03. Dezember 2012 17:57 CET, Tony Berth 
 tonybe...@googlemail.com schrieb:

  it is the current one (2012-12-02)


   OpenBSD 5.2 (RAMDISK_CD) #287: Wed Aug 1 10:19:00 MDT 2012
   der...@i386.openbsd.org:/usr/src/sys/sys/arch/i386/compile/RAMDISK_CD

 but dmesg says its not so current like you think it is.

 Sebastian

 
  Thanks
 
  On Mon, Dec 3, 2012 at 6:52 PM, Kenneth R Westerback 
 kwesterb...@rogers.com
   wrote:
 
   On Mon, Dec 03, 2012 at 06:08:34PM +0200, Tony Berth wrote:
here is the installation dmesg when trying to install the 5.2 i386
   snapshot:
  
   And the installation dmesg from a -current snapshot would be even
   more useful.
  
    Ken
  
   
-
LSI Logic Corp. MPT IME  BIOS
Copyright 1995-2005 LSI Logic Corp.
MPTBIOS-IME-5.13.08
   
CD-ROM: 9F
Loading /5.2/I386/CDBOOT
probing: pc0 apm pci mem[616K 2046M a20=on]
disk: hd0+* cd0
 OpenBSD/i386 CDBOOT 3.17
boot
booting cd0a:/5.2/i386/bsd.rd: 5973772+958284
 [52+229744+218028]=0x709d1c
entry point at 0x200128
Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California. All rights reserved.
Copyright (c) 19995-2012 OpenBSD. All rights reserved.
http://www.OpenBSD.org
OpenBSD 5.2 (RAMDISK_CD) #287: Wed Aug 1 10:19:00 MDT 2012
der...@i386.openbsd.org:
 /usr/src/sys/sys/arch/i386/compile/RAMDISK_CD
cpu0: Intel(R) Xeon(TM) CPU 3.00 GHz (GenuineIntel 686-class)
cpu0: FPU, V86, DE, PSE, TSC, MSR, PAE, MCE, CX8, APIC, SEP, MTRR,
   PGE,MCA,
CMOV, PAT, PSE36, CF
   
  
 LUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM.SBF,NXE,LONG,SSE3,MWAIT,DS-CPL,CNXT-
ID,
CX16,xTPR
real mem = 2146414592 (2046MB)
avail mem = 2183640064 (2006MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 09/16/85, BIOS32 rev. 0 @
 0xfd418,
SMBIOS
rev. 2.33 @ 0xdc010 (58 entries)
bios0: vendor FSC version 6.8 Rev. R04A5F1.1790 date 09/16/2005
bios0: FUJITSU SIEMENES PRIMERGY RX200S2
acpi0 at bios0: rev 0
acpi0: sleep states S0 S1 S4 S5
acpi0: tables DSDT FACP MCFC SPCR APIC BOOY SSDT
acpimadt0 at acpi0 addt 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 200MHz
cpu at mainbus0: not configured
cpu at mainbus0: not configured
cpu at mainbus0: not configured
ioacpi0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
ioacpi1 at mainbus0: apid 3 pa 0xfec8, version 20, 24 pins
ioacpi2 at mainbus0: apid 4 pa 0xfec80400, version 20, 24 pins
acpiprt0 at acpi0: bus 2 (P2P3)
acpiprt1 at acpi0: bus 3 (P2P4)
acpiprt2 at acpi0: bus 0 (PCI0)
acpiprt3 at acpi0: bus 4 (PCIB)
bios0: ROM list: 0xc/0x8000 0xc8000/0x4000 0xdc000/0x4000!
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Intel E7520 Host rev 0x09
Intel E7520 Error Reporting rev 0x09 at pci0 dev 0 function 1 not
configured
ppb0 at pci0 dev 2 function 0 Intel E7520 PCIE rev 0x09
pci1 at ppb0 bus 1
ppb1 at pci1 dev 0 function 0 Intel 6700PXH PCIE-PCIX rev 0x09
pci2 at ppb1 bus 2
Intel IOxAPIC rev 0x09 at pci1 dev 0 function 1 not configured
ppb2 at pci1 dev 0 function 2 Intel 6700PXH PCIE-PCIX rev 0x09
pci3 at ppb2 bus 3
em0 at pci3 dev 3 function 0 Intel PRO/1000MT (82545CM) rev 0x04:
 apic
   2
int1
6, address 00:04:23:c4:01:16
mpi0 at pci3 dev 5 function 0 Symbios Logic 53c1030 rev 0x07: msi
scsibus0 at mpi0: 16 targets, initiator 7
sd0 at scsibus0 targ 1 lun 0: LSILOGIC, 1030 IM, 1000 SCSI2
 0/direct
   fixed
sd0: 34700MB, 512 bytes/sector, 71065600 sectors
mpi0: timeout
mpi0: timeout
mpi0: timeout
mpi0: timeout
mpi0: timeout
mpi0: timeout
mpi0: phys disk Async at 0 MHz width 8bit offset 0 QAS 0 DT 0 IU 0
em1 at pci3 dev 6 function 0 Intel PRO/100MT (82546GB) rev 0x03:
 apic 2
int 1
6uvm_fault (0xd07f31d8, 0x0, 0, 1) - e
fatal page fault (6) in supervisor mode
trap type 6 code 0 eip 0 cs 50 eflags 10282 cr2 0 cpl 50
panic: trap type 6, code=0, pc=0
The operating system has halted
Please press any key to reboot
---
   
Thanks
   
On Thu, Nov 29, 2012 at 2:25 PM, Nick Holland
n...@holland-consulting.netwrote:
   
 On 11/29/12 06:42, Tony Berth wrote:
  Thanks
 
  Both i386 and amd64 fail! But, are that many differences between
   stable
 and
  current?

 You caught us, nothing has changed in OpenBSD since 1995, we just
 drink
 beer and increment the version number every six months.
 /sarcasm

 The most significant changes tend to take place just AFTER
 unlocking of
 a new version of OpenBSD -- i.e

Re: PRIMERGY RX200 S2 installation problems

2012-11-29 Thread Tony Berth

this is a fresh install! I couldn't find a CD image for current or did I
miss something?

The machine is right now somehow 'isolated' and doesn't have any floppy or
serial console attached :(

I don't know if its a way to capture the dmesg other than the ones
described in:

http://openbsd.org/faq/faq4.html#getdmesg

The output I included was handed over to me by a colleague of mine and was
handwritten! I can include the messages before the 'mpi0 timeout' entry but
not everything as I will miss the messages of the first 'screen'!


Thanks

On Wed, Nov 28, 2012 at 8:31 PM, Tomas Bodzar tomas.bod...@gmail.comwrote:

 On Wed, Nov 28, 2012 at 6:55 PM, Tony Berth tonybe...@googlemail.com
 wrote:
  Dear group,
 
  I was trying to install OBSD 5.2 on a Fujitsu-Siemens PRIMERGY RX200 S2
  (dual CPU) and I get following errors:

 By any chance ability to try current?

 
  
  mpi0: timeout
  mpi0: phys disk Async at 0 MHz width 8bit offset 0 QAS 0 DT 0 IU 0
  em1 at pci3 dev 6 function 0 Intel PRO/100MT (82546GB) rev 0x03: apic 2
  int 16uvm_fault (0xd07f31d8, 0x0, 0, 1) - e
  fatal page fault (6) in supervisor mode
  trap type 6 code 0 eip 0 cs 50 eflags 10282 cr2 0 cpl 50
  panic: trap type 6, code=0, pc=0
  The operating system has halted
  Please press any key to reboot

 Is there a way for you to get full report?
 http://www.openbsd.org/faq/faq2.html#Bugs

  ---
 
  I aslo saw that the bsd.rd kernel was used during the boot process.
 Meaning
  that the smp mode is not used?
 
  Thanks
 
  Tony

Re: PRIMERGY RX200 S2 installation problems

2012-11-29 Thread Tony Berth

Thanks

Both i386 and amd64 fail! But, are that many differences between stable and
current?



On Thu, Nov 29, 2012 at 11:20 AM, MichaÅ Markowski
markows...@gmail.comwrote:

 2012/11/29 Tony Berth tonybe...@googlemail.com:
  s a fresh install! I couldn't find a CD image for current or did I
  miss something?

 Try latest snapshot, e.g.
 http://ftp.icm.edu.pl/pub/OpenBSD/snapshots/i386/ (or amd64, you
 didn't specify)

 --
 MichaÅ Markowski

PRIMERGY RX200 S2 installation problems

2012-11-28 Thread Tony Berth

Dear group,

I was trying to install OBSD 5.2 on a Fujitsu-Siemens PRIMERGY RX200 S2
(dual CPU) and I get following errors:


mpi0: timeout
mpi0: phys disk Async at 0 MHz width 8bit offset 0 QAS 0 DT 0 IU 0
em1 at pci3 dev 6 function 0 Intel PRO/100MT (82546GB) rev 0x03: apic 2
int 16uvm_fault (0xd07f31d8, 0x0, 0, 1) - e
fatal page fault (6) in supervisor mode
trap type 6 code 0 eip 0 cs 50 eflags 10282 cr2 0 cpl 50
panic: trap type 6, code=0, pc=0
The operating system has halted
Please press any key to reboot
---

I aslo saw that the bsd.rd kernel was used during the boot process. Meaning
that the smp mode is not used?

Thanks

Tony

Re: Unified BSD?

2012-11-12 Thread Tony

On Mon, Nov 12, 2012 at 9:37 PM, Robin Björklin
robin.bjork...@gmail.comwrote:


 Am I bat crap crazy for thinking it could be good to merge the four largest
 BSD variants out there, take the best bits and pieces out of each and
 create a Unified BSD?


Ain't that what OpenBSD is though - the best from all worlds?

Tony
http://soundcloud.com/abletony84

phpMyAdmin

2012-10-25 Thread Tony Berth

Dear group,

I'm trying to run phpMyAdmin on a 5.1 box (i386) with MySQL 5.1.60
installed from the OpenBSD packages.

When I try to login I get:

#2002 Cannot log in to the MySQL server

Please note that the same mysql user is able to login remotely via the
MySQL GUI workbench!

Now, I came across the following posting:

http://marc.info/?l=openbsd-miscm=116902953505548w=2

and did apply the suggested solution but didn't work!

I also have to mention that my sock file is located in:

/var/run/mysql/mysql.sock

could that be a problem with the chrooted apache?

Thanks

T

Re: phpMyAdmin

2012-10-25 Thread Tony Berth

On Thu, Oct 25, 2012 at 10:40 PM, Richard Toohey 
richardtoo...@paradise.net.nz wrote:

 On 10/26/12 09:35, Tony Berth wrote:

 Dear group,

 I'm trying to run phpMyAdmin on a 5.1 box (i386) with MySQL 5.1.60
 installed from the OpenBSD packages.

 When I try to login I get:

 #2002 Cannot log in to the MySQL server

 Please note that the same mysql user is able to login remotely via the
 MySQL GUI workbench!

 Now, I came across the following posting:

 http://marc.info/?l=openbsd-**miscm=116902953505548w=2http://marc.info/?l=openbsd-miscm=116902953505548w=2

 and did apply the suggested solution but didn't work!

 I also have to mention that my sock file is located in:

 /var/run/mysql/mysql.sock

 could that be a problem with the chrooted apache?

 Thanks

 T


  chrooted Apache might not be able to resolve localhost, so you can try
 fixing that, or use 127.0.0.1 instead of localhost.  You *may* also have to
 grant privileges to the user@127.0.0.1, but first just try changing the
 phpMyAdmin to point to 127.0.0.1.

 Not replying to the list because I haven't got my asbestos pants on today.



correct! That indeed was the problem. Replacing localhost with 127.0.0.1
did work.

Thanks a lot

T

Re: !!!!

2012-09-05 Thread Tony Abernethy

Eric Furman wrote:
A very simple addition to the FAQ would not be a problem.
WOW! This question seems to be asked a lot!
A simple addition to the FAQ does not seem to be a problem, Nick.
Yes, I know , a very stupid question asked many times.
A simplele FUCJ IR

Perhaps because it is a FAQ not a FASQ.
Seems like stupid questions tend to produce stupid answers.
Seems like users BELIEVING in signatures would make for a much
  more easily crackable system.
I always want my enemy to feel secure in quick and easy fixes.

Re: More sensible and consistent rc.conf.local

2012-08-29 Thread Tony Abernethy

Mikkel Bang wrote:

I'm just thinking that from a layman's perspective named_flags=
doesn't make as much sense as named=YES if all you want to do is start
named.

The way it is right now seems more like monkey patching from the days
before OpenBSD became popular. I acknowledge the whole it's been like
this for ages, but it's 2012 - it's time to make some power moves.

If OpenBSD was on Git / at GitHub, youngins like me would have patched
this baby up a long time ago.

Mikkel

named_flags=NO  gives ONE way of NOT starting named.
Why should there only be ONE way to start named?
Power Moves is to limit named to NO command line parameters???

OpenBSD on GitHub

2012-08-04 Thread Tony

Hey!

Guys, what do you think about putting OpenBSD on GitHub? I see you guys
already have an account there so I just thought I'd ask:
https://github.com/openbsd

Will it attract more followers? Will it make life easier for developers?

Personally I'd love to make a fork and contribute back a ton of pull
requests, mostly on the documentation side though.

Tony

1 2 3 4 5 6 7 >

1 - 100 of 672 matches

Mail list logo