Re: softraid not bootable in 5.4 after visiting 5.5

2014-08-06 Thread Raimo Niskanen
On Wed, Aug 06, 2014 at 01:04:23AM +1000, Joel Sing wrote: On Tue, 5 Aug 2014, Raimo Niskanen wrote: On Thu, Jul 31, 2014 at 06:12:49PM +0200, Raimo Niskanen wrote: Hello misc@ I once created an USB stick (uSDHC card with reader, actually) using OpenBSD 5.4 (might have been an

Re: Relationship Between VLANs and Physical Interfaces in PF

2014-08-06 Thread Henning Brauer
* Andy a...@brandwatch.com [2014-08-05 18:06]: Correct me if I'm wrong here Henning, but we have always used the approach of only ever assigning queues to the physical interface (whether it has VLANs or not), as this means that both the physical interfaces untagged network, plus all the tagged

Re: Relationship Between VLANs and Physical Interfaces in PF

2014-08-06 Thread Henning Brauer
* Giancarlo Razzolini grazzol...@gmail.com [2014-08-05 18:36]: On 05-08-2014 03:36, Henning Brauer wrote: the 90s are over. Yep, I know Henning. Vlan's are pretty secure. But they add complexity and if you use physical separation you can mitigate problems caused by misconfiguration. Either

Re: unbound on ~ last 2-3 snapshots

2014-08-06 Thread Stuart Henderson
On 2014-08-06, Todd Zimmermann toddo.zimmerm...@gmail.com wrote: What eliminated the weirdness was binding to the wildcard addy: unbound.conf interface: 0.0.0.0 Careful with this, it is usually a bad idea because it means that you generate reply packets with the source address

Re: IPSEC with redundant remote peer address

2014-08-06 Thread Stuart Henderson
On 2014-08-05, David Dahlberg david.dahlb...@fkie.fraunhofer.de wrote: I do not know enough of Cisco to be able to tell you whether or not one may cluster their routers/VPN gateways. But you have multiple options to emulate the fallback behaviour that you described above. 1) Just configure

Re: Access Point Section of the faq

2014-08-06 Thread Stuart Henderson
On 2014-08-01, Mike Larkin mlar...@azathoth.net wrote: I know other people have said that hostap mode is not stable but on this machine it's been rock solid. Historically there have been problems where a setup could be completely stable, then move it to a different environment

Re: Routing tables and pf rules with using 2 DHCP WAN interfaces ...

2014-08-06 Thread Stuart Henderson
On 2014-08-04, Christophe t...@stuxnet.org wrote: Second question : I used to write route-to and reply-to rules in pf.conf in a static context. As far as I've seen, there are modifiers on interface specifications like :network or :peer. But is there a :gateway or something similar telling pf

Re: softraid not bootable in 5.4 after visiting 5.5

2014-08-06 Thread Joel Sing
On Wed, 6 Aug 2014, Raimo Niskanen wrote: On Wed, Aug 06, 2014 at 01:04:23AM +1000, Joel Sing wrote: On Tue, 5 Aug 2014, Raimo Niskanen wrote: On Thu, Jul 31, 2014 at 06:12:49PM +0200, Raimo Niskanen wrote: Hello misc@ I once created an USB stick (uSDHC card with reader,

Re: Relationship Between VLANs and Physical Interfaces in PF

2014-08-06 Thread David Dahlberg
Am Dienstag, den 05.08.2014, 17:05 +0100 schrieb Andy: Considering all this, there should never be a good reason to apply queues to the VLAN interfaces at all? Well, there may be. For example a VLAN may indeed just represent a port on a switch elsewhere. Where a certain policy applies (e.g.

Re: softraid not bootable in 5.4 after visiting 5.5

2014-08-06 Thread Raimo Niskanen
On Wed, Aug 06, 2014 at 11:43:37PM +1000, Joel Sing wrote: On Wed, 6 Aug 2014, Raimo Niskanen wrote: On Wed, Aug 06, 2014 at 01:04:23AM +1000, Joel Sing wrote: On Tue, 5 Aug 2014, Raimo Niskanen wrote: : : : : My guess is that if there has been a metadata format change in softraid it

Re: Access Point Section of the faq

2014-08-06 Thread Kevin Chadwick
previously on this list Stuart Henderson contributed: on this machine it's been rock solid. Historically there have been problems where a setup could be completely stable, then move it to a different environment (different clients around? different other APs? I'm not sure) and it would

Re: Access Point Section of the faq

2014-08-06 Thread Stefan Sperling
On Wed, Aug 06, 2014 at 01:06:54PM +, Stuart Henderson wrote: On 2014-08-01, Mike Larkin mlar...@azathoth.net wrote: I know other people have said that hostap mode is not stable but on this machine it's been rock solid. Historically there have been problems where a

Re: Relationship Between VLANs and Physical Interfaces in PF

2014-08-06 Thread Giancarlo Razzolini
On 06-08-2014 05:34, Henning Brauer wrote: Your preferences are your preferences, you're free to do that - just like you're free to stab a knife in your eye. Not sure I'd go with this analogy. Here in my country things are a little different. Not always the networks are correctly configured.

Re: Access Point Section of the faq

2014-08-06 Thread Giancarlo Razzolini
On 01-08-2014 15:47, Kevin Chadwick wrote: I wonder if a short list of access mode capable devices or chipsets that are known to work well for atleast 24 hours or maybe 60 days would be a good addition to the access point section of the faq (6.13) especially with OpenBSD being such a good

Re: Relationship Between VLANs and Physical Interfaces in PF

2014-08-06 Thread Stuart Henderson
On 2014-08-04, Eric Dilmore ericdilm...@gmail.com wrote: I just set up a new OpenBSD 5.5 gateway for a small nonprofit. The gateway has one external interface and one internal, with the internal network split into several VLANs: one for secure traffic, one for guests, one for internal phones,

pf new queue resolution (was Relationship Between VLANs and Physical Interfaces in PF)

2014-08-06 Thread Daniel Melameth
On Wed, Aug 6, 2014 at 2:38 PM, Stuart Henderson s...@spacehopper.org wrote: In my (admittedly very limited) testing with the new queueing system, it hasn't done very well with low bandwidth queues (ADSL type speeds) that used to work OK with altq (symptom, packets being assigned to queues as

'ifconfigre bridge add' adding more than 256 ports

2014-08-06 Thread Raimundo Santos
Hello, I am testing (playing with it, too) bridge capabilities in OpenBSD and with this sequence of commands: ifconfig bridge0 add et1 for i in `jot - 0 500 1`; do ifconfig vether$i create; ifconfig vether$i up; ifconfig bridge0 add vether$i; done ifconfig vether500 192.168.1.1/24 ifconfig

www/56.html: fix version numbers of less and perl

2014-08-06 Thread Theo Buehler
The version numbers of less and perl in 56.html are incorrect. Here are the links to the commit messages: for perl: http://marc.info/?l=openbsd-cvsm=139567356426747w=2 for less: http://marc.info/?l=openbsd-cvsm=139843312032453w=2 Index: 56.html

Re: unbound on ~ last 2-3 snapshots

2014-08-06 Thread Todd Zimmermann
Hi Stuart, Appreciate the feedback. On Wed, Aug 6, 2014 at 8:57 AM, Stuart Henderson s...@spacehopper.org wrote: On 2014-08-06, Todd Zimmermann toddo.zimmerm...@gmail.com wrote: What eliminated the weirdness was binding to the wildcard addy: unbound.conf interface: 0.0.0.0 Careful

hp proliant dl 320e gen 8 for openbsd 5.5 64 bit ?

2014-08-06 Thread Indunil Jayasooriya
Dear OpenBSD users, We have a new hp proliant dl 320e gen 8 server with 2 x 1TB Hard disks. When we are going to install Open BSD 5.5 64 bit, Openbsd can't detect These 2 Hard disks ( 2 x 1 TB) These are 2 hard disks of 7.2 K SATA 1 TB It asks which is the Hard disk with this sign ? ' It does

Re: hp proliant dl 320e gen 8 for openbsd 5.5 64 bit ?

2014-08-06 Thread Jonathan Gray
That machine apparently ships with Dynamic Smart Array B120i which has a vendor specific software RAID mode. Looks like it only works on Linux with a closed source 'hpvsa' driver https://access.redhat.com/articles/118133 See if you can switch it to a standard AHCI/SATA mode in the bios. On Thu,