Re: Bridging OpenVPN and LAN

> On 05.09.2021., at 21:11, Kasak wrote: > I made a typo. Mask should be 255.255.255.0 > I highly recomend not just copying what i say but correcting it to match your > configuration Agreed! Fix'd the typo and the config works but yeah - I still can't get the router to do DHCP. Bummer. Than

Re: Bridging OpenVPN and LAN

> On 05.09.2021., at 15:58, kasak wrote: > I've should correct myself in last message. You actually may try to proxy > dhcp answers to vpn, adding option > > server-bridge > > to server config without pool definition. Please respond if it works. I'm > really curious about it. > > I use simi

Bridging OpenVPN and LAN

er cipher AES-256-CBC comp-lzo verb 3 The client connects OK, but it never gets a DHCP address from the router that's in charge for 10.70.0.0/24 and running the DHCP server. Is the issue in my OpenBSD configuration, OpenVPN, or on my router? I'm having trouble debugging this... Thank you, Andrei

Re: error creating ca cert for iked

Hi Markus, I've sent a diff to bugs@ yesterday which fixes this issue for me. Cheers, Andrei. On Mon, Mar 27, 2017, at 20:43, Markus Rosjat wrote: > hi there, > > maybe I did it wrong but I got the following error: > > $ doas ikectl ca ikectl.ca create > Generating RS

Re: Per cpu utilization & KERN_CPTIME2 support in sysctl(8)

270 kern.cp_time2.2=19828,0,162088,3621,28097441 kern.cp_time2.3=30500,0,271671,8023,27969406 -- Andrei. Index: src/sbin/sysctl/sysctl.c === RCS file: /cvs/src/sbin/sysctl/sysctl.c,v retrieving revision 1.211 diff -u -p -u -r1.211 sys

Re: Per cpu utilization & KERN_CPTIME2 support in sysctl(8)

n (and probably others) already use KERN_CPTIME2 so I thought it's the way to go. > > This should probably go to the tech@ list, by the way. I didn't want to spam tech@ with my small patch without any feedback first :) Thanks, Andrei.

Per cpu utilization & KERN_CPTIME2 support in sysctl(8)

: marc.info/?l=openbsd-misc&m=116655627129555&w=2 however I think having KERN_CPTIME2 support is good anyway. Is there anyone else who thinks this is needed/a good idea ? -- Andrei. Index: src/sbin/sysctl/sysctl.c === RCS file:

Re: Building libav/ffmpeg & x264 on 5.4

Hi Michael, Maybe it's not because of this, but did you try raising the data segment size limit for your user? ulimit -a should help. Best, Andrei Vrincianu On Tue, Mar 25, 2014 at 3:35 PM, Michael Lackner < michael.lack...@unileoben.ac.at> wrote: > Greetings! > > This

Urgent vila de vanzare complet finisata si mobilata

Vila de vanzare in cartierul Berceni, sector 4, Str. Mariuca. Contructie 2005, complet finisata si mobilata pe comanda. Vila este contruita pe 3 nivele open space, incluzand sala de fitness. In plus detine o crama de 18 mp la subsol. Suprafata totala construita a vilei este de 210 mp, cu un ter

Re: various openntpd things

On 10/22/2010 02:09 PM, Florin Andrei wrote: First off, see attachment for an updated version of the spec file for the portable version tarball. Apparently attachments are removed. Okay, here's an online copy: http://dl.dropbox.com/u/29966/openbsd/openntpd.spec.txt -- Florin Andrei

various openntpd things

logs? With ntp.org there are various tools that the user could run to get the current status. That's a requirement if you want to monitor the time sync status of your servers via Nagios or something like that. -- Florin Andrei http://florin.myip.org/ [demime 1.01d removed an attachment of t

Re: 4.5 - strange performance issue

> Try to enable EXA and play with Option "MigrationHeuristic" "greedy" > I can confirm this solved my X problem. And it was really really a slow X. I added Option "AccelMethod" "EXA" Option "MigrationHeuristic" "greedy" in Section "Device".

Re: Intel D945GCLF2

Hello I have a D945GCLF2 for almost 2 months, and it works well with OpenBSD 4.4. I use it with the stock fan disabled and with an 120mm Nexus RealSilent that covers almost the whole board. To make it fanless, I think the best solution is a bigger heatsink for the north bridge like [1], of course,

Re: apache 1.3.29 + PHP 5.2.6 on OpenBSD 4.4

Thanks to all of you for ideas. Trying to figure out what was different from a fresh install, I remembered that I mounted /var partition in memory, so I checked the flags and found it it was mounted with noexec, and disabling that fixed my problem. Thanks again for your time.

Re: apache 1.3.29 + PHP 5.2.6 on OpenBSD 4.4

>Is there a new line character at the end of this line: > >LoadModule php5_module /usr/local/lib/php/libphp5.so Removed the line, but still no luck, I get the same error.

Re: apache 1.3.29 + PHP 5.2.6 on OpenBSD 4.4

>Try the "httpd -u" switch to run it outside /var/www chroot. # httpd -u Syntax error on line 1 of /var/www/conf/modules/php5.conf: Cannot load /usr/local/lib/php/libphp5.so into server: Cannot load specified object Anyway, afaik the chroot is applied after loading the modules.

Re: apache 1.3.29 + PHP 5.2.6 on OpenBSD 4.4

1. Why does it say "Starting Pure-FTPd"? Have no ideea. Anyway, Pure-FTPd is already installed on the system, but don't know why it shows here. 2. Nothing in the httpd error log? # tail /var/www/logs/error_log [Sat Nov 15 00:19:04 2008] [error] [client 192.168.1.2] file permissions deny server e

apache 1.3.29 + PHP 5.2.6 on OpenBSD 4.4

Hello The problem I have is that default apache can't load PHP module. PHP was installed from packages (php5-core-5.2.6.tgz), so here is nothing custom made. The only error I have is when I try to start apache is when I make a configtest. # apachectl configtest Starting Pure-FTPd Processing con

in 4.4 kernel - in6.c defines same function twice ()

Anybody seen this before ? I just got my src via cvsup and recompiled my kernel. /usr/src/sys/netinet6/in6.c:1977: error: redefinition of `in6ifa_ifplocaladdr' /usr/src/sys/netinet6/in6.c:1952: error: `in6ifa_ifplocaladdr' previously defined here *** Error code 1

Re: Dual boot problem

Girish Venkatachalam-2 wrote: > > On 01:00:04 Apr 08, Andrei wrote: > >> Thanks Josh, this works fine. The reason I did not consider boot.conf at >> the >> beginning is that it concerns second-stage bootstrap, while I was trying >> to >> find a solution

Re: Dual boot problem

Josh Grosse wrote: > > On Mon, 7 Apr 2008 11:04:41 -0700 (PDT), Andrei wrote > >> I have PC with two OpenBSD 4.2 - bootable harddisks. Clearly I can >> boot from either of them by setting a boot sequence in BIOS or by >> typing "boot hdXa:/bsd" in the boot pr

Dual boot problem

using bootloader is better alternative, I would not mind much. Note that run everything in VMware, so I am not afraid to screw-up things. All suggestions are welcome. Andrei -- View this message in context: http://www.nabble.com/Dual-boot-problem-tp16538144p16538144.html Sent from the openbsd

Re: running mail server at home

I stumbled today upon this while following a different article, maybe it is helpful to you http://www.kernel-panic.it/openbsd/mail/ > I have a P3 box with 120GB HDD that's doing web, ssh and samba at the moment. > I > am planning setup sendmail, spamd, mimedefang, clamd and spam-as

Re: Great 4.2 song!

Jeremy C. Reed wrote: On Wed, 17 Oct 2007, Florin Andrei wrote: Anybody can put a .flac or even .wav.gz copy for me on a server somewhere? My CD is scratched about 2/3 into the song. :-( Not a flac or wav, but see http://www.openbsd.org/lyrics.html Well, I was hoping to rebuild the

Re: Great 4.2 song!

Matthias Pfeifer wrote: just received my openbsd 4.2 CD set. And THANKS for this great song. A kind of funky mixed with good old rock ;) Anybody can put a .flac or even .wav.gz copy for me on a server somewhere? My CD is scratched about 2/3 into the song. :-( -- Florin Andrei http

Re: SOLVED [was: firewall is very slow, something's wrong]

and netblast, please post it. I'm especially interested in generating lots of small packets, which is difficult. -- Florin Andrei http://florin.myip.org/

SOLVED [was: firewall is very slow, something's wrong]

Florin Andrei wrote: ## Huge performance improvements in the network stack, including: * In pf, store routing table ID, queue ID etc directly in the packet header mbuf instead of using mbuf tags (which use malloc'd memory). This yields a 100% improvement in pf perfor

Re: [side thread] security implcations of multiple kernel threads?

#x27;ll keep testing with 4.2 -- Florin Andrei http://florin.myip.org/

Re: firewall is very slow, something's wrong

Henning Brauer wrote: * Florin Andrei <[EMAIL PROTECTED]> [2007-10-09 19:34]: then, an i386 kernel should perform considerably better than amd64 for firewalling/routing/... That is surprising. What is the reason? we dunno really. it hasn't been benched in sometimesoit might not ev

Re: firewall is very slow, something's wrong

t have to use it. -- Florin Andrei http://florin.myip.org/

Re: firewall is very slow, something's wrong

whats the Mainbords bios rev? Tyan Transport GT24-B3992 BIOS Date: 03/06/07 09:36:13 Ver: 08.00.11 -- Florin Andrei http://florin.myip.org/

Re: firewall is very slow, something's wrong

port 0x2f8/8 irq 3: ns16550a, 16 byte fifo pckbc0 at isa0 port 0x60/5 pckbd0 at pckbc0 (kbd slot) pckbc0: using irq 1 for kbd slot wskbd0 at pckbd0: console keyboard, using wsdisplay0 pcppi0 at isa0 port 0x61 midi0 at pcppi0: spkr0 at pcppi0 dkcsum: wd0 matches BIOS drive 0x80 root on wd0a rootdev=0x0 rrootdev=0x300 rawdev=0x302 -- Florin Andrei http://florin.myip.org/

Re: firewall is very slow, something's wrong

Florin Andrei wrote: I expected OpenBSD 4.1 to do better. But the thing is, even without the UDP flood, the OpenBSD firewall is very slow. I am downloading a huge file through it, via HTTP, and all I get is 4 Mbyte / sec. With Linux I get 112 Mbyte / sec. Something's wrong. Or I&#x

Re: firewall is very slow, something's wrong

Stuart Henderson wrote: On 2007/10/04 17:48, Florin Andrei wrote: All firewall rules are written as stateless as possible - I don't need stateful filtering, the setup is very simple (allow HTTP inbound, allow a few ICMP types, and that's it). congestion

firewall is very slow, something's wrong

hard limit 1000 table-entries hard limit 10 OS FINGERPRINTS: 696 fingerprints loaded -- Florin Andrei http://florin.myip.org/

Re: Pendrive detecting and mount script

This is madness ! :) the mount_umass rocks, it's worth reading it. smonek wrote: Hello this is my script to auto mount pendrives / usbdrivs Script work ony with MSDOS fs Script detecting all partitions betewn a: and l: on sd0 ,sd1 ,sd2 ,sd3 First time you must run this script as a root or manu

max number of connections through the firewall

? -- Florin Andrei http://florin.myip.org/

Re: recommended hardware for Gigabit firewall?

Daniel Ouellet wrote: Florin Andrei wrote: I'm building several firewalls that need to be able to sustain 1000 Mbit throughput. We're using AMD64 processors a lot, so that's the kind of architecture I'm looking at right now. I will use OpenBSD 4.1 64 bit version. The

Re: hardware needed for network stack performance work

ready for production) -- Florin Andrei http://florin.myip.org/

recommended hardware for Gigabit firewall?

pecially the network cards and motherboards? Anything that I should avoid - hardware known to have issues with this kind of requirements? -- Florin Andrei http://florin.myip.org/

Problems with pf and max-src-conn-rate

Hello since last week I keep getting this weird traffic towards my webserver, traffic wich I can't understand. There are several connections per second from only one source IP. I created a rule to overload the brutforce table on my www port like this: pass log inet proto tcp from any to $

Problems with pf and max-src-conn

Hello since last week I keep getting this weird traffic towards my webserver, traffic wich I can't understand. There are several connections per second from only one source IP. I created a rule to overload the brutforce table on my www port like this: pass log inet proto tcp from any to $

Re: OpenBSD cartoons

http://www.tysemaka.com/openbsd.html Karel Kulhavy wrote: Who's drawing those OpenBSD cartoons like http://www.openbsd.org/images/openbsd41_cover.gif They are cool. Can Theo draw so well or does he employ an artist? CL<

Re: HTTP URL filtering?

I use mod_security for filtering. Take a look at http://www.modsecurity.org/ You can find it in the ports system undes www/mod_security Good luck Andrei GUDIU Xavier Mertens wrote: Hi *, I've a problem with an Apache web server hit by f*cking spammers... I would like to filter some

PF NAT and Hamachi VPN

Hello, I have an openbsd 4.0 server at work wich does nat for a laptop. The server has a public ip in the company class. On my laptop I am running hamachi, a vpn with my two desk neighbours. They also have laptops behind ipfw nat from freebsd. The problem is that the pf nat does not let hamachi

Re: syncing pf tables

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 You can take a look at pftabled. http://wolfermann.org/pftabled.html Regards, Andrei GUDIU Kian Mohageri wrote: > Hello, > > I was just curious if any of you sync pf tables between hosts, and how you > do it. I know it may be consid

Re: firefox 1.5.0.6 for openbsd

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 sorry :) use uname -r instead of sysctl and machine -a instead of machine... where was my head standing ?:) thx Antoine Jacoutot >Andrei GUDIU wrote: >in export PKG_PATH try using "uname -m" instead of "sysctl -n >kern.ver

Re: firefox 1.5.0.6 for openbsd

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 in export PKG_PATH try using "uname -m" instead of "sysctl -n kern.version" ;P my sysctl -n kern.version is OpenBSD 3.9 (INFERNO) #0: Tue May 2 17:25:30 EEST 2006 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/INFERNO Will Maier wrote: > On Th

Re: misterious network/all freezing.

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Try replacing the rl0 nic. I had similar problems. Random freezing of my server. After replacing the rl0 nic everyting went back to normal. Inigo Tejedor Arrondo wrote: > scene: home webserver (athlon 1,2Mz via chipset, lan realtek) dmesg at > the end

Re: Help to debug Openbsd freezes...

Ian Watts wrote: On Mon, 24 Jul 2006 12:10:53 +0200 (CEST) Xavier Mertens <[EMAIL PROTECTED]> spake: Hi Gurus, I'm facing a strange and frustrating problem... I run a box with OpenBSD without problem for a while (>2 years). It's still running 3.5 (ok, ok, don't shoot, it's an old one but upgr

Windows to "copy" open bsd

Hey did you hear that in Windows vista they implemented ASLR , somethink similar to the technology of random memory allocation in open bsd. So I gues Windows is copying bsd. Cool.