Re: npppd / pppoe server troubles

2013-10-18 Thread Gruel Bruno
Le 18-10-2013 6:18, YASUOKA Masahiko a écrit : Hi, On Wed, 16 Oct 2013 21:10:25 +0200 Gruel Bruno b.gr...@sdnet.info wrote: As i thought that it's doesn't read my users file i changed the username password but nothing else. Yes, the log shows the session is terminated because the passwords

Re: new queueing subsystem

2013-10-18 Thread Henning Brauer
* Johan Beisser j...@caustic.org [2013-10-16 21:09]: Right. I guess if I want to define multiple queues for matching traffic, I need to either redo the filter rules to use tagging*, or simply do it per outbound bit of traffic. let's make that outright clear: defining queues is for bandwidth

Re: new queueing subsystem

2013-10-18 Thread Henning Brauer
* Boris Goldberg bo...@twopoint.com [2013-10-17 15:59]: You probably need to mention that the new queuing is using hfsc model and what hfsc model is. I don't think anyone should have to care what algorithm is being used under the hood. I extensively use cbq and very confused by the

Re: porter's handbook - pkg-readmes

2013-10-18 Thread Stuart Henderson
On 2013-10-18, Gabriel Guzman g...@guzman-nunez.com wrote: +h3Does my package need a readme?/h3 +A package may require special instructions to run on OpenBSD, or +additional files may need to be downloaded before the port will work +properly, or your port may rely on additional packages to

Re: ntfs with big files

2013-10-18 Thread Paolo Aglialoro
Just a thought: now that fuse support is enabled what about ntfs-3g? Il 17/ott/2013 23:36 David Vasek va...@fido.cz ha scritto: On Fri, 11 Oct 2013, Joel Sing wrote: On Thu, 10 Oct 2013, Manuel Giraud wrote: Hi, I have a ntfs partition with rather large (about 3GB) files on it. When I

Re: Experiences with OpenBSD RAID5

2013-10-18 Thread Stuart Henderson
On 2013-10-18, Scott McEachern sc...@blackstaff.ca wrote: Circumstances change, and I might be able to redeploy those HDDs as a RAID5 array. This, at least in theory, would allow the 18TB total to be realized as 15TB as RAID5, gaining me 6TB. even if softraid would rebuild raid5, I'd worry

Re: ntfs with big files

2013-10-18 Thread David Coppa
On Fri, Oct 18, 2013 at 1:32 PM, Paolo Aglialoro paol...@gmail.com wrote: Just a thought: now that fuse support is enabled what about ntfs-3g? ntfs-3g is in ports (sysutils/ntfs-3g). It's fuse support that, as of now, it's not enabled. Ciao, David

Re: Experiences with OpenBSD RAID5

2013-10-18 Thread Scott McEachern
On 10/18/13 07:31, Stuart Henderson wrote: On 2013-10-18, Scott McEachern sc...@blackstaff.ca wrote: Circumstances change, and I might be able to redeploy those HDDs as a RAID5 array. This, at least in theory, would allow the 18TB total to be realized as 15TB as RAID5, gaining me 6TB. even if

Re: porter's handbook - pkg-readmes

2013-10-18 Thread Marc Espie
On Fri, Oct 18, 2013 at 11:28:44AM +, Stuart Henderson wrote: On 2013-10-18, Gabriel Guzman g...@guzman-nunez.com wrote: +h3Does my package need a readme?/h3 +A package may require special instructions to run on OpenBSD, or +additional files may need to be downloaded before the port

Re: ntfs with big files

2013-10-18 Thread David Vasek
On Thu, 17 Oct 2013, David Vasek wrote: On Fri, 11 Oct 2013, Joel Sing wrote: On Thu, 10 Oct 2013, Manuel Giraud wrote: Hi, I have a ntfs partition with rather large (about 3GB) files on it. When I copy these files on a ffs partition they are corrupted. When I try to checksum them directly

BGP CARP - suggestions?

2013-10-18 Thread Adam Thompson
I've got two OpenBSD boxes acting as my border router[s], talking BGP to a small # (~4) of peers. At the moment, I've got them using carp(4) on every interface, and bgpd.conf has for each neighbor{} stanza, a depend on carpX line. This works, more or less, but failover is anything but

AX88179 usb gigabit ethernet

2013-10-18 Thread man Chan
Hello, I recently brought a pci usb gigabit ethernet with chipset AX88179 and update the source to 5.4.  After the making the 5.4 new kernel, I found out that I still can't use the usb gigabit enternet.  Is there anyone using the usb gigabit ethernet under 5.4  ?  Any idea to solve the problem ?

Re: AX88179 usb gigabit ethernet

2013-10-18 Thread Jonathan Gray
There is a driver in development in -current that is not yet enabled, axen(4). It is not part of 5.4. On Fri, Oct 18, 2013 at 10:29:27PM +0800, man Chan wrote: Hello, I recently brought a pci usb gigabit ethernet with chipset AX88179 and update the source to 5.4.? After the making the 5.4

Kernel TCP recv / send buffer auto scaling

2013-10-18 Thread Frederic URBAN
Hello guys, Since 4.9, there is a auto-scaling tcp buffer size, good functionnality but i've a question. I'm using a pair of OpenBSD servers as squid proxies. Our internet bandwidth is 1Gb/s so we are able to download @ 90 Mbytes /s if needed. When I was using OpenBSD 4.8, i was tuning

Re: Kernel TCP recv / send buffer auto scaling

2013-10-18 Thread Sebastian Reitenbach
On Friday, October 18, 2013 16:53 CEST, Frederic URBAN frederic.ur...@ircad.fr wrote: Hello guys, Since 4.9, there is a auto-scaling tcp buffer size, good functionnality but i've a question. I'm using a pair of OpenBSD servers as squid proxies. Our internet bandwidth is 1Gb/s so we are

Re: new queueing subsystem

2013-10-18 Thread Boris Goldberg
Hello Henning, Friday, October 18, 2013, 5:37:23 AM, you wrote: I extensively use cbq and very confused by the current queuing manual. It seems that actual speed will be somewhere between min and max (and wont be equal to bandwidth), but how to get an idea where? HB bandwidth is the target

Re: new queueing subsystem

2013-10-18 Thread Andy Lemin
I think he did answer your question, if you read between the lines.. A session cannot be 'pushed' to max! It needs to demand the bandwidth in the first place. Try reading this; http://trash.net/~kaber/hfsc/SIGCOM97.pdf This along side /many/ other Internet pages allowed us to fully implement

Re: dump(8) and permissions

2013-10-18 Thread Alexander Hall
On 10/11/13 15:38, Rodolfo Gouveia wrote: On Fri, Oct 11, 2013 at 09:04:16AM -0400, Jiri B wrote: Try `su' to your user on that system and try to `ls -lR' those dirs, I suppose he won't be able to do that. j. Thanks Jiri. Indeed he can't. I've looked at this closer and I found out that on

Blocking facebook.com: PF or squid?

2013-10-18 Thread Stefan Wollny
Hi there, having a personal dislike of Facebook (and the MeeToo-systems alike) for their impertinent sniffing for private data I tried on my laptop to block facebook.com via hosts-file. Interestingly this failed: Calling http://www.facebook.com; always resulted in a lookup for

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Andres Genovez
Regards, The way it gets blocked (but not all for a wise kid) properly is via CDIR and block DNS via OpenDNS services Greetings. 2013/10/18 Stefan Wollny stefan.wol...@web.de Hi there, having a personal dislike of Facebook (and the MeeToo-systems alike) for their impertinent sniffing for

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Eric Johnson
On Sat, 19 Oct 2013, Stefan Wollny wrote: Hi there, having a personal dislike of Facebook (and the MeeToo-systems alike) for their impertinent sniffing for private data I tried on my laptop to block facebook.com via hosts-file. Interestingly this failed: Calling http://www.facebook.com;

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Marios Makassikis
On 19 October 2013 00:27, Stefan Wollny stefan.wol...@web.de wrote: Hi there, having a personal dislike of Facebook (and the MeeToo-systems alike) for their impertinent sniffing for private data I tried on my laptop to block facebook.com via hosts-file. Interestingly this failed: Calling

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Stefan Wollny
Hi Andres, yes - I have read about OpenDNS' services and that many out there are really happy with them. But I try to do my homework first before relying on s.o. else: I _do_ have this OpenBSD-based squid-server - why not use it to it's full potential? Might not be a big deal traffic-wise, but

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Brian McCafferty
On 10/18/13 18:27, Stefan Wollny wrote: Hi there, having a personal dislike of Facebook (and the MeeToo-systems alike) for their impertinent sniffing for private data I tried on my laptop to block facebook.com via hosts-file. Interestingly this failed: Calling http://www.facebook.com;

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Stefan Wollny
Am Fri, 18 Oct 2013 19:21:44 -0400 schrieb Brian McCafferty br...@mccafferty.ca: [ ... ] If you use dhclient on your laptop, I think you need to make sure to specify lookup file bind (the search order) to have the hosts file checked before DNS server. ie- in resolv.conf.tail bind file is the

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Stefan Wollny
Am Fri, 18 Oct 2013 19:33:11 -0400 schrieb mia kmiy...@comcast.net: [ ... ] If you're handling DHCP for all of the traffic for your site, why not just set up a dns server, point your dhcp clients to this DNS server and create an authoritative zone for facebook.com that points to somewhere

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Stefan Wollny
Am Sat, 19 Oct 2013 01:02:58 +0200 schrieb Marios Makassikis mmakassi...@gmail.com: Hi Marios! [ ... ] Anyway: I think I finally managed to block all their IPs via PF and on this laptop I now feel a little less 'observed'. [Yes, I know - this is just today's snapshot of IPs!] Did

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread mia
On 10/18/13 18:27, Stefan Wollny wrote: Hi there, having a personal dislike of Facebook (and the MeeToo-systems alike) for their impertinent sniffing for private data I tried on my laptop to block facebook.com via hosts-file. Interestingly this failed: Calling http://www.facebook.com; always

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Stefan Wollny
Am Fri, 18 Oct 2013 18:02:55 -0500 (CDT) schrieb Eric Johnson eri...@mathlab.gruver.net: On Sat, 19 Oct 2013, Stefan Wollny wrote: Hi there, having a personal dislike of Facebook (and the MeeToo-systems alike) for their impertinent sniffing for private data I tried on my laptop to

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Clint Pachl
mia wrote, On 10/18/13 16:33: If you're handling DHCP for all of the traffic for your site, why not just set up a dns server, point your dhcp clients to this DNS server and create an authoritative zone for facebook.com that points to somewhere other than facebook? Running your own own DNS

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Mike.
On 10/19/2013 at 12:27 AM Stefan Wollny wrote: |Hi there, |[snip] | |My question is on the squid-server I have running at home: What |would make more sense - blocking facebook.com via pf.conf alike or are |there reasons to use squid's ACL instead? Performance? Being |ultra-paranoid and

Re: Blocking facebook.com: PF or squid?

2013-10-18 Thread Chris Cappuccio
i'd imagine that putting 'www.facebook.com' in your hosts file will do it, unless the browser ignores /etc/hosts you could always use the url filtering mechanism of relayd combined with pf redirects, but if people really want to bypass it, they'll do proxyies (via ssh even) or remote desktop or

Re: SSDs in RAID and bio(4)

2013-10-18 Thread Chris Cappuccio
Darren Spruell [phatbuck...@gmail.com] wrote: I don't have a great deal of experience with SSD disks but was spec'ing some systems to use them. We'd be doing RAID on the hosts and I'd prefer to have something supported by bio(4) for volume management. Do SSDs have any impact on ability to do

Re: Experiences with OpenBSD RAID5

2013-10-18 Thread Scott McEachern
List, I'm bringing you into the middle of an off-list conversation where I'm setting up a RAID10 array. Well, I'm using two RAID1 arrays as the drives for a RAID0 array. All relevant information follows. Any clue to why I'm ending up with an array 1/4 the size I'm expecting? On 10/18/13