Problem with VLANs

2007-08-03 Thread Hugo van Niekerk
Firstly, Thank you Tim and Stuart for the great advice. Secondly, sorry for spamming the wrong tree. I find myself at another cross road, that is that I can not find the driver files under /usr/src/sys/dev/pci. Let me just admit that I havent searched hard enough yet, thought I'd post this

Re: pagedaemon: deadlock detected

2007-08-03 Thread Timo Schoeler
thus Chris Kuethe spake: On 8/2/07, Timo Schoeler [EMAIL PROTECTED] wrote: hi, i have an amd64 system running for about six months now flawlessly (however, due to following -current, not with uptimes 10 days). today it crashed twice when i had two torrents active (not very big ones, one

kernel pppoe issues

2007-08-03 Thread Chris Cohen
Hi, I've got some trouble with in-kernel pppoe and adsl. From time to time the connection just hangs up: # grep pppoe /var/log/messages [...] Jul 26 09:41:21 dslgw /bsd: pppoe0: LCP keepalive timeout Jul 26 10:34:51 dslgw /bsd: pppoe0: LCP keepalive timeout Jul 26 10:34:57 dslgw /bsd: pppoe0: pap

Re: ftp-proxy vs FTP over SSL

2007-08-03 Thread soulshepard
is there any other way of getting ftp+ssl to pass normally on a bsd box? soul. Die Gestalt wrote: All I can tell you is I had for a while a ftp + ssl server running (and yes ftp + ssl is useful in some scenarii) behind a pf machine and it all worked perfectly well. The problem is that

OpenBSD client to Microsoft ISA Server

2007-08-03 Thread Dmitrij Czarkoff
Is there any solution for connecting web via Microsoft ISA Server? I''ve got on at my office, and the only app successfuly comming through is Firefox, while all the rest can't. Setting HTTP_PROXY=http://username:[EMAIL PROTECTED]:8080 doesn't help. -- .0. ..0 000

pppoe getting limited to 150k/sec?

2007-08-03 Thread M. Parsons
Hello, Running Openbsd 4.1 i386 as a firewall/nat box. I have connected to it a 6 mbps DSL pppoe connection. The pppoe works fine, as do all machines behind the openbsd box, they all can max out the 6mbps. But, transfers directly on the openbsd box (wget, ftp, whatever) all are limited to

Re: ftp-proxy vs FTP over SSL

2007-08-03 Thread Die Gestalt
You mean with or without ftp-proxy? On 8/3/07, soulshepard [EMAIL PROTECTED] wrote: is there any other way of getting ftp+ssl to pass normally on a bsd box? soul. Die Gestalt wrote: All I can tell you is I had for a while a ftp + ssl server running (and yes ftp + ssl is useful in some

Re: pppoe getting limited to 150k/sec?

2007-08-03 Thread M. Parsons
On 8/3/07, Daniel Melameth [EMAIL PROTECTED] wrote: This is likely a BPD issue--see http://marc.info/?l=openbsd-miscm=111910098716125w=2 for details. Yep, that fixes it. Always someone better out there at searching than yourself. :-) Thank you. (and wow at the quickness!) :-) Mark

Re: pppoe getting limited to 150k/sec?

2007-08-03 Thread JD Bronson
just out of curiosity... did you try kernel pppoe? man 4 pppoe I found that to be much faster and more robust than userland pppoe, but still doesnt explain your issue... CPU usage dramatically dropped when using kernelmode pppoe. -JD At 08:42 AM 8/3/2007 -0400, M. Parsons wrote: Hello,

Re: OpenBSD client to Microsoft ISA Server

2007-08-03 Thread Mathias Reitinger
hi, On 03:22 03 Aug 07, Dmitrij Czarkoff wrote: Is there any solution for connecting web via Microsoft ISA Server? I''ve got on at my office, and the only app successfuly comming through is Firefox, while all the rest can't. Setting HTTP_PROXY=http://username:[EMAIL PROTECTED]:8080 doesn't

Re: Problem with VLANs

2007-08-03 Thread Stuart Henderson
On 2007/08/03 15:27, Hugo van Niekerk wrote: [...] pcn(4) can be persuaded to send frames large enough to hold vlan tags and a 1500-byte packet with the diff below, but on the vmware I just tried, I can't get it to receive frames that size. Then again, neither does em(4) with Ethernet0.virtualDev

Re: Support multiple pptp (GRE) Channels ?

2007-08-03 Thread Stuart Henderson
On 2007/08/03 15:45, Stuart Henderson wrote: On 2007/08/03 08:11, Michael Gale wrote: We are currently testing out OpenBSD 4.1 and have a requirement where we need to support multiple PPTP connections to a single server where the clients are behind a single NAT device.

Re: Support multiple pptp (GRE) Channels ?

2007-08-03 Thread Stuart Henderson
On 2007/08/03 08:11, Michael Gale wrote: We are currently testing out OpenBSD 4.1 and have a requirement where we need to support multiple PPTP connections to a single server where the clients are behind a single NAT device. http://sourceforge.net/projects/frickin/

Re: pppoe getting limited to 150k/sec?

2007-08-03 Thread M. Parsons
On 8/3/07, JD Bronson [EMAIL PROTECTED] wrote: just out of curiosity... did you try kernel pppoe? My fault for not saying I already am using kernel pppoe (and yes I find it to be very low on CPU usage) Clearing out pf doesnt seem to help either. Mark

Re: OpenBSD client to Microsoft ISA Server

2007-08-03 Thread Dmitrij Czarkoff
Well, looks like I was doing something wrong, 'cause now I'm connecting OK with http_proxy set to ISA Server (as well as to local ntlmaps). Still no connection avaliable on ICQ (the same configuration -- .0. ..0 000

Re: isakmpd active mode and phase 1 build-up

2007-08-03 Thread Sven Ulland
Hans-Joerg Hoexer wrote: On Thu, Aug 02, 2007 at 10:23:59PM +0200, Sven Ulland wrote: I'm very (that's putting it mildly) interested in the issues with 4.0 that you mention. Would you be able to shed some more light on which issues they were, or point me to references? It would be most

Re: OpenBSD client to Microsoft ISA Server

2007-08-03 Thread Huzeyfe ONAL
Hi, try Ntlmaps from http://ntlmaps.sourceforge.net/ Dmitrij Czarkoff wrote: Is there any solution for connecting web via Microsoft ISA Server? I''ve got on at my office, and the only app successfuly comming through is Firefox, while all the rest can't. Setting

Re: kernel pppoe issues

2007-08-03 Thread Chris Cohen
Sorry, I'm Running 4.1 (-STABLE from 1. March) on i386. On Friday 03 August 2007 10:10, Chris Cohen wrote: Hi, I've got some trouble with in-kernel pppoe and adsl. From time to time the connection just hangs up: # grep pppoe /var/log/messages [...] Jul 26 09:41:21 dslgw /bsd: pppoe0: LCP

Server Compatability List

2007-08-03 Thread Stefan Hoffmann
hello, i'm looking for a server compatability list. Does there exists an offical one? I only found http://www.armorlogic.com/openbsd_information_server_compatibility_list.html which only covers a few servers. mfG -- stefan --

OpenBSD 4.1 and 4.2-beta on Hp Proliant DL585 G2

2007-08-03 Thread patrik . bergamasco
hi all, i have this problem, on hp proliant dl585 g2 (is a server with 4 amd opteron dual core and 8gb ecc ram, the bios recognizing all ram) i try to run openbsd 4.1 and openbsd 4.2-beta but only recognize 2gb ram i try to run obsd without mp but the problem don't change... so i try the

Re: 4.1-release packages with 4.1-stable system ?

2007-08-03 Thread Nico Meijer
Hi Ronnie, Now i wonder if i still can use 4.1-release packages, from any mirror. Set up $PKG_PATH to point at your favo(u)rite mirror. Depending on your architecture, you get updated packages with `pkg_add -ui`. The answer, in short, is 'yes, but check for updates'. HTH... Nico

Re: Calling all isakmpd(8) users

2007-08-03 Thread Stuart Henderson
On 2007/07/31 22:01, Tom Cosgrove wrote: This diff fixes a long-standing interoperability issue between OpenBSD isakmpd and Cisco IOS (and possibly others). possibly others includes zyxel 662, and this fixes it.

4.1-release packages with 4.1-stable system ?

2007-08-03 Thread Ronnie Garcia
Hello, I was used to run only -release systems until yesterday. I updated to 4.1-stable, built a release, and installed other fresh 4.1-stable systems. Now i wonder if i still can use 4.1-release packages, from any mirror. Reading http://www.openbsd.org/faq/faq5.html#Flavors make me feel that

Re: kernel pppoe issues

2007-08-03 Thread Chris Cohen
On Friday 03 August 2007 10:38, you wrote: Hi Chris, * Chris Cohen wrote/schrieb: Would really like to provide a dmesg but the pppoe messages flooded away the boot messages. I can't really answer your question, but you can find the boot dmesg in /var/run/dmesg.boot Nope, It's also full

Support multiple pptp (GRE) Channels ?

2007-08-03 Thread Michael Gale
Hey, We are currently testing out OpenBSD 4.1 and have a requirement where we need to support multiple PPTP connections to a single server where the clients are behind a single NAT device. It does not look like OpenBSD can support this requirement, are my assumptions correct ? I came across

Re: ftp-proxy vs FTP over SSL

2007-08-03 Thread Adriaan
On 8/3/07, Die Gestalt [EMAIL PROTECTED] wrote: You mean with or without ftp-proxy? On 8/3/07, soulshepard [EMAIL PROTECTED] wrote: is there any other way of getting ftp+ssl to pass normally on a bsd box? [snip] A way to pass sslized ftp has been suggested in

Re: pppoe getting limited to 150k/sec?

2007-08-03 Thread Daniel Melameth
On 8/3/07, M. Parsons [EMAIL PROTECTED] wrote: Running Openbsd 4.1 i386 as a firewall/nat box. I have connected to it a 6 mbps DSL pppoe connection. The pppoe works fine, as do all machines behind the openbsd box, they all can max out the 6mbps. But, transfers directly on the openbsd box

Re: Support multiple pptp (GRE) Channels ?

2007-08-03 Thread Peter N. M. Hansteen
Michael Gale [EMAIL PROTECTED] writes: We are currently testing out OpenBSD 4.1 and have a requirement where we need to support multiple PPTP connections to a single server where the clients are behind a single NAT device. It does not look like OpenBSD can support this requirement, are

iBGP: losing routes after eBGP flap

2007-08-03 Thread Toni Mueller
Hi, I've got a setup on two i386 family PCs with 4.1-stable which includes the following: Internet 1 - p1 - r1 -- r2 - p2 - Internet 2 r1 and r2 have an iBGP session running, and the Internet connections go to different ISPs, running eBGP on each (r1-p1, r2-p2). I receive full

Source port allocation and named(8)

2007-08-03 Thread Darren Spruell
Has named(8) on OpenBSD ever used randomized source ports for DNS queries? I thought for some reason it had and noticed today that this probably was not right: 10.0.1.2.34140 192.35.51.30.53: 64395% [1au] ? sec1.apnic.net. (43) 10.0.1.2.34140 192.0.34.126.53: 50119% [1au] ?

Re: fsck Segmentation fault on 4.1

2007-08-03 Thread Tobias Ulmer
On Thu, Jul 19, 2007 at 08:09:58PM +0200, Otto Moerbeek wrote: [...] I misdiagnosed the problem. In the meantime I got another report with a dd of the partition which enabled me to diagnose the problem and make a fix for 4.1. Please test and report back. I'll be on vacation from Saturday, so

Re: iBGP: losing routes after eBGP flap

2007-08-03 Thread Claudio Jeker
On Fri, Aug 03, 2007 at 07:56:02PM +0200, Toni Mueller wrote: Hi, I've got a setup on two i386 family PCs with 4.1-stable which includes the following: Internet 1 - p1 - r1 -- r2 - p2 - Internet 2 r1 and r2 have an iBGP session running, and the Internet connections go to

Re: OpenBSD Berlin?

2007-08-03 Thread Vim Visual
for more info http://www.kneipen-suche.com/berlin-tuffstein-5160.html 2007/7/31, Gabriel Kihlman [EMAIL PROTECTED]: Dirk Fohrenkamm [EMAIL PROTECTED] writes: ok, to write something not that OT: time? date? location? (as you know I have quite a lot bars and restaurants around) I think we

spamd - 250 return text

2007-08-03 Thread Tom Bombadil
Hi all, Short of recompiling spamd, is there any undocumented way of changing the 250 responses from spamd? - 250 Hello, spam sender. Pleased to be wasting your time. - 250 You are about to try to deliver spam. Your time will be spent, for nothing. man spamd and a quick search in the ML

Re: spamd - 250 return text

2007-08-03 Thread Stuart Henderson
On 2007/08/03 13:59, Tom Bombadil wrote: Short of recompiling spamd, is there any undocumented way of changing the 250 responses from spamd? Editing the binary? (Is recompiling really so hard?) Sorry to bug you guys with this lame problem but in the financial world, people can be very touchy

Re: spamd - 250 return text

2007-08-03 Thread Lawrence Teo
Tom Bombadil wrote: Hi all, Short of recompiling spamd, is there any undocumented way of changing the 250 responses from spamd? - 250 Hello, spam sender. Pleased to be wasting your time. - 250 You are about to try to deliver spam. Your time will be spent, for nothing. man spamd and a quick

Re: spamd - 250 return text

2007-08-03 Thread Marcus Watts
writes Tom Bombadil [EMAIL PROTECTED] Subject: spamd - 250 return text ... Short of recompiling spamd, is there any undocumented way of changing the 250 responses from spamd? ... Sure. It's called bvi. -Marcus Watts

Re: spamd - 250 return text

2007-08-03 Thread Darren Spruell
On 8/3/07, Tom Bombadil [EMAIL PROTECTED] wrote: Hi all, Short of recompiling spamd, is there any undocumented way of changing the 250 responses from spamd? - 250 Hello, spam sender. Pleased to be wasting your time. - 250 You are about to try to deliver spam. Your time will be spent, for

Re: fsck Segmentation fault on 4.1

2007-08-03 Thread Marcos Laufer
So the patch works, and this problem seems serious and easy to encounter, i vote for moving it to stable. - Original Message - From: Tobias Ulmer [EMAIL PROTECTED] To: Otto Moerbeek [EMAIL PROTECTED] Cc: misc@openbsd.org Sent: Friday, August 03, 2007 3:37 PM Subject: Re: fsck

Re: Problem with VLANs

2007-08-03 Thread Chris Cappuccio
Stuart Henderson [EMAIL PROTECTED] wrote: case SIOCSIFMTU: - if (ifr-ifr_mtu ETHERMTU || ifr-ifr_mtu ETHERMIN) + if (ifr-ifr_mtu ETHERMTU + ETHER_VLAN_ENCAP_LEN || + ifr-ifr_mtu ETHERMIN) error = EINVAL;

How to track port updates in stable?

2007-08-03 Thread Todd Pytel
I don't spend as much time following OpenBSD as I used to, so perhaps I'm missing something. But there used to be a ports-security mailing list used for announcing updated ports. That list doesn't exist any more, or at least doesn't appear to have had anything posted to it in a very long time. Is

Re: Problem with VLANs

2007-08-03 Thread Stuart Henderson
On 2007/08/03 16:18, Chris Cappuccio wrote: Stuart Henderson [EMAIL PROTECTED] wrote: case SIOCSIFMTU: - if (ifr-ifr_mtu ETHERMTU || ifr-ifr_mtu ETHERMIN) + if (ifr-ifr_mtu ETHERMTU + ETHER_VLAN_ENCAP_LEN || + ifr-ifr_mtu ETHERMIN)

Re: How to track port updates in stable?

2007-08-03 Thread Will Maier
On Fri, Aug 03, 2007 at 06:35:51PM -0500, Todd Pytel wrote: I don't spend as much time following OpenBSD as I used to, so perhaps I'm missing something. But there used to be a ports-security mailing list used for announcing updated ports. That list doesn't exist any more, or at least doesn't

Re: How to track port updates in stable?

2007-08-03 Thread Stuart Henderson
On 2007/08/03 18:54, Will Maier wrote: On Fri, Aug 03, 2007 at 06:35:51PM -0500, Todd Pytel wrote: I don't spend as much time following OpenBSD as I used to, so perhaps I'm missing something. But there used to be a ports-security mailing list used for announcing updated ports. That list

Re: spamd - 250 return text

2007-08-03 Thread Tom Bombadil
Editing the binary? (Is recompiling really so hard?) Not hard, just changed it right now... But sometimes it pays to ask around to see if there is a simpler way that doesn't involve messing around with the original source code. Ah, you'll be looking for the OpenBSD Corporate Edition - with

Re: Seeking info for RAID 1 on OpenBSD

2007-08-03 Thread Joel Knight
--- Quoting HDC on 2007/08/02 at 20:26 -0300: Read this... http://www.packetmischief.ca/openbsd/doc/raidadmin/http://www.packetmischief .ca/openbsd/ I used to use raidframe and followed the procedures in that doc for doing so, but now there's no point. If the system requires any type of

Re: How to track port updates in stable?

2007-08-03 Thread James Turner
On Sat, Aug 04, 2007 at 01:10:24AM +0100, Stuart Henderson wrote: On 2007/08/03 18:54, Will Maier wrote: On Fri, Aug 03, 2007 at 06:35:51PM -0500, Todd Pytel wrote: I don't spend as much time following OpenBSD as I used to, so perhaps I'm missing something. But there used to be a

Proposed secure network using pre-existing infrastructure

2007-08-03 Thread Gadi Evron
Network Working Group J. Evers Internet-Draft Bantown Consulting, Inc. Intended status: Standards Track November 2006 Expires: May 5, 2007 A Standard for the Transmission of IP Datagrams

Re: How to track port updates in stable?

2007-08-03 Thread Todd Pytel
On Fri, 2007-08-03 at 18:35 -0500, Todd Pytel wrote: Is there some other official way to track changes to ports? Thanks for all the responses. I went with the tracking system on ports.openbsd.nu. While I understand and admire the whole follow the source approach of watching cvs, my servers are

Re: How to track port updates in stable?

2007-08-03 Thread Lawrence Teo
Todd Pytel wrote: On Fri, 2007-08-03 at 18:35 -0500, Todd Pytel wrote: Is there some other official way to track changes to ports? Thanks for all the responses. I went with the tracking system on ports.openbsd.nu. While I understand and admire the whole follow the source approach of watching

Re: How to track port updates in stable?

2007-08-03 Thread Clint M. Sand
On Fri, Aug 03, 2007 at 06:35:51PM -0500, Todd Pytel wrote: I don't spend as much time following OpenBSD as I used to, so perhaps I'm missing something. But there used to be a ports-security mailing list used for announcing updated ports. That list doesn't exist any more, or at least doesn't