Re: minipci wifi card for an ap, suggestions?

2012-10-02 Thread Aaron Mason
On Wed, Oct 3, 2012 at 4:43 PM, David Diggles wrote: > On Wed, Oct 03, 2012 at 07:29:42AM +0059, Jason McIntyre wrote: >> On Wed, Oct 03, 2012 at 04:04:14PM +1000, David Diggles wrote: >> > I am looking for a minipci wifi card I can use to run as >> > Host AP. >> > >> > After reading ath(4) man pa

Re: minipci wifi card for an ap, suggestions?

2012-10-02 Thread David Diggles
On Wed, Oct 03, 2012 at 07:29:42AM +0059, Jason McIntyre wrote: > On Wed, Oct 03, 2012 at 04:04:14PM +1000, David Diggles wrote: > > I am looking for a minipci wifi card I can use to run as > > Host AP. > > > > After reading ath(4) man page I bought a: > > Wistron CM9 AR5212 Mini PCI a/b/g > > >

Re: minipci wifi card for an ap, suggestions?

2012-10-02 Thread Jason McIntyre
On Wed, Oct 03, 2012 at 04:04:14PM +1000, David Diggles wrote: > I am looking for a minipci wifi card I can use to run as > Host AP. > > After reading ath(4) man page I bought a: > Wistron CM9 AR5212 Mini PCI a/b/g > > Unfortunately the machine will not boot with it plugged in. > > Can anyone su

Re: fopen.3

2012-10-02 Thread Jason McIntyre
On Wed, Oct 03, 2012 at 04:20:14AM +0300, Artturi Alm wrote: > Hi, > > Diff below would make fopen.3 description more consistent, i think. > while it's more repetitive, it does get rid of 'create text file'. > > > -Artturi > it does read better this way. just committed your suggestion, jmc >

minipci wifi card for an ap, suggestions?

2012-10-02 Thread David Diggles
I am looking for a minipci wifi card I can use to run as Host AP. After reading ath(4) man page I bought a: Wistron CM9 AR5212 Mini PCI a/b/g Unfortunately the machine will not boot with it plugged in. Can anyone suggest a minipci wifi card that will work as Host AP?

Re: Suspend stuff on TOSHIBA laptop.

2012-10-02 Thread Aaron Mason
On Wed, Oct 3, 2012 at 12:42 PM, Aaron Mason wrote: > On Tue, Oct 2, 2012 at 10:55 PM, Mo Libden wrote: >> Tue, 04 Sep 2012 03:36:50 -0400 от Ted Unangst : >>> On Tue, Sep 04, 2012 at 16:23, David Walker wrote: >>> > I've set the options in wsconsctl.conf to blank the screen which also >>> > work

Re: AMD64 on a W500 Thinkpad seems sluggish

2012-10-02 Thread Ted Unangst
On Mon, Oct 01, 2012 at 15:13, STeve Andre' wrote: > I have one rather annoying problem however, which is that I'm running > about 25+% slower than in i386 mode. A kernel compile used to take > about 3:20 under i386 mode, and now takes about about 4:10 or so. > There are also random freezes of a

Re: Suspend stuff on TOSHIBA laptop.

2012-10-02 Thread Aaron Mason
On Tue, Oct 2, 2012 at 10:55 PM, Mo Libden wrote: > Tue, 04 Sep 2012 03:36:50 -0400 от Ted Unangst : >> On Tue, Sep 04, 2012 at 16:23, David Walker wrote: >> > I've set the options in wsconsctl.conf to blank the screen which also >> > works but this thing has I think what's called "a backlight" wh

misc@openbsd.org , Sua Oportunidade

2012-10-02 Thread contato
Prezado(a) misc@openbsd.org , voce foi convidado , para participar do Programa de vantagens Cielo. [IMAGE] Rodrigo Faro - (Campanha Publicitária) [IMAGE] Caso não esteja vendo as imagens desse e-mail, clique aqui 2264722647

fopen.3

2012-10-02 Thread Artturi Alm
Hi, Diff below would make fopen.3 description more consistent, i think. while it's more repetitive, it does get rid of 'create text file'. -Artturi Index: fopen.3 === RCS file: /cvs/src/lib/libc/stdio/fopen.3,v retrieving revision

Re: kern.maxclusters vs syn proxy

2012-10-02 Thread Ted Unangst
On Tue, Oct 02, 2012 at 09:30, Tyler Morgan wrote: > I would vote no based on: > > http://www.openbsd.org/faq/pf/example1.html > > "For an added bit of safety, we'll make use of the TCP SYN Proxy to > further protect the web server." > > which links to: http://www.openbsd.org/faq/pf/filter.html#

Re: CARP and transit network to ISP

2012-10-02 Thread Jason Healy
On Oct 1, 2012, at 7:42 PM, Henning Brauer wrote: > that is some time ago? Yes, it was. We were probably still running 4.3 (or so) when we made the change to having the ISP hand everything off to a single address. Jason -- Jason Healy|jhe...@logn.net| http://www.logn.net/

Re: kern.maxclusters vs syn proxy

2012-10-02 Thread Tyler Morgan
I would vote no based on: http://www.openbsd.org/faq/pf/example1.html "For an added bit of safety, we'll make use of the TCP SYN Proxy to further protect the web server." which links to: http://www.openbsd.org/faq/pf/filter.html#synproxy which gets far from saying what Henning said. On 10/2

Re: OpenBSD does not initiate ipsec connection

2012-10-02 Thread Christoph Leser
Please forget about my last response. I didn't read the original message properly. The original post states clearly that the VPN tunnel works, when it is initiated from the remote side, but does not get initiated from the obsd side when needed ( by a ping packet for instance ). This somehow sugg

Re: kern.maxclusters vs syn proxy

2012-10-02 Thread David Diggles
I think when a lot of newbies read the pf manual, they think oh... synproxy looks like it does good things, and without really understanding it, enable it by default? On Tue, Oct 02, 2012 at 02:33:11PM +0200, Henning Brauer wrote: > * David Diggles [2012-10-02 13:51]: > > but is this clear for ne

Re[2]: Suspend stuff on TOSHIBA laptop.

2012-10-02 Thread Mo Libden
Tue, 04 Sep 2012 03:36:50 -0400 от Ted Unangst : > On Tue, Sep 04, 2012 at 16:23, David Walker wrote: > > I've set the options in wsconsctl.conf to blank the screen which also > > works but this thing has I think what's called "a backlight" which > > means the screen constantly glows. I'm planning

Re: OpenBSD does not initiate ipsec connection

2012-10-02 Thread Christoph Leser
Do a ping -I as Janne advised and take a on the enc0 device and on your external interface ( both with ip host a.b.102.219 parameter ). You should see the icmp packet on enc0 and some esp paket at the same time on the external interface. If one or both are missing, you may have a problem with you

Re: kern.maxclusters vs syn proxy

2012-10-02 Thread Henning Brauer
* David Diggles [2012-10-02 13:51]: > but is this clear for newbies who read all the faqs? > On Tue, Oct 02, 2012 at 01:17:03PM +0200, Henning Brauer wrote: > > it once again comes down to "think before pushing random buttons". this basic principle SHOULD not need documentation :) quite serious

Re: kern.maxclusters vs syn proxy

2012-10-02 Thread Otto Moerbeek
On Tue, Oct 02, 2012 at 09:50:36PM +1000, David Diggles wrote: > but is this clear for newbies who read all the faqs? Well, it's not default. And almost often that is a sign the option is not desirable for a typical setup.OB -0tto > > On Tue, Oct 02, 2012 at 01:17:03PM +0200, Henning B

Réussissez vos appels d'offres publics

2012-10-02 Thread LCF
Pour consulter les programmes de formation et s'inscrire cliquez sur les liens suivants: Programme Passation/exécution Programme Dématérialisation Bulletin d'inscription en dernière page des documentsVoir la version en ligne Pour ne plus faire partie de la liste de diffusion de notre service : annu

Re: kern.maxclusters vs syn proxy

2012-10-02 Thread David Diggles
but is this clear for newbies who read all the faqs? On Tue, Oct 02, 2012 at 01:17:03PM +0200, Henning Brauer wrote: > * ?? [2012-08-23 08:44]: > > 2012/8/23 Claudio Jeker > > > On Thu, Aug 23, 2012 at 12:17:04AM +0600, ??? wrote: > > > > why syn proxy is not enable

Re: IPSEC VPN performance

2012-10-02 Thread Reyk Floeter
On Tue, Oct 2, 2012 at 9:59 AM, Christiano F. Haesbaert wrote: > Why not using tcpbench where you can actually specify the parameters > and know what is going on :). > > Play with buffer sizes and you'll see a big difference, using -u will > give you the actual PPS. > I agree, I stopped using Ipe

Re: kern.maxclusters vs syn proxy

2012-10-02 Thread Henning Brauer
* Илья Шипицин [2012-08-23 08:44]: > 2012/8/23 Claudio Jeker > > On Thu, Aug 23, 2012 at 12:17:04AM +0600, ??? wrote: > > > why syn proxy is not enabled by default ? > > Because it has bad side-effects. Like accepting a connection before the > > actual server accepted it. So it is hard t

Re: IPSEC VPN performance

2012-10-02 Thread Ryan McBride
On Tue, Oct 02, 2012 at 09:59:05AM +0200, Christiano F. Haesbaert wrote: > Why not using tcpbench where you can actually specify the parameters > and know what is going on :). > > Play with buffer sizes and you'll see a big difference, using -u will > give you the actual PPS. I agree with this.

Re: OpenBSD does not initiate ipsec connection

2012-10-02 Thread Janne Johansson
2012/10/1 Erwin Schliske : > Hello, > > I've set up an OpenBSD box as vpn gateway. The tunnel I have to establish is > with a Cisco ASA 5505, which is not under my administration. > > Here is the ipsec.conf > > ike esp from { 172.30.77.0/24, 10.70.0.0/24, 10.83.0.0/24, 10.77.4.0/24 } to { > 172.16.

Re: OpenBSD does not initiate ipsec connection

2012-10-02 Thread Otto Moerbeek
On Tue, Oct 02, 2012 at 09:52:28AM +0200, mxb wrote: > You probably get "NO_PROPOSAL_CHOSEN" error? > >From the info you gave, looks like Cisco-sides tries to talk AES_CBC > but your local side talks 3DES_CBC in Phase 1. Nah, it seems the cisco offers two and OpenBSD picks the second for phase 1.

Re: IPSEC VPN performance

2012-10-02 Thread Christiano F. Haesbaert
On 2 October 2012 08:57, David Coppa wrote: > On Mon, Oct 1, 2012 at 5:55 PM, Russell Garrison > wrote: >> Is iPerf running threaded? What about dd to null and a loopback listener? > > Beware: only -current (since Tue Sep 25) net/iperf port has threading enabled. > > ciao, > David > Why not usin

Re: OpenBSD does not initiate ipsec connection

2012-10-02 Thread mxb
You probably get "NO_PROPOSAL_CHOSEN" error? >From the info you gave, looks like Cisco-sides tries to talk AES_CBC but your local side talks 3DES_CBC in Phase 1. //mxb On 10/01/2012 09:21 PM, Erwin Schliske wrote: > Hello, > > I've set up an OpenBSD box as vpn gateway. The tunnel I have to esta

Habilidades Gerenciales de Alto Impacto

2012-10-02 Thread Lic. Kelvin Ruiz
Habilidades Gerenciales de Alto Impacto 10 al 12 de octubre de 2012 QUALITY TRAINING, presenta un extraordinario seminario que se llevará a cabo en la ciudad de PANAMA ¡No se pierda uno de los eventos más interesantes en el mundo gerencial actual! APROVECHE LA PRE VENTA ¡¡CUPO ESTRICTAMENTE LIMIT

Re: IPSEC VPN performance

2012-10-02 Thread David Coppa
On Mon, Oct 1, 2012 at 5:55 PM, Russell Garrison wrote: > Is iPerf running threaded? What about dd to null and a loopback listener? Beware: only -current (since Tue Sep 25) net/iperf port has threading enabled. ciao, David