Re: OpenBSD isakmpd and OS X El Capitan client

2016-07-11 Thread dewey hylton
Evgeniy Sudyr gmail.com> writes: > > I'm trying to establish IPSEC tunnel (for future usage with npppd > L2TP) between -snapshot and OS X El Captain 10.11.5 and have issues > when establishing phase1. > > I searched in archives and suggestions doesn't work for me. I tried > main/quick combinati

pf / queuing / multiple ISP

2016-06-30 Thread Dewey Hylton
hi all. queueing question here ... what i have is an openbsd 5.9 firewall with one physical external interface and one physical internal interface. i have two vlans on the external interface, each connecting to a different ISP. each ISP provides different bandwidth. in an attempt to provide a bit

Re: ipsec between three networks

2016-01-28 Thread Dewey Hylton
us in this configuration. On Thu, Jan 28, 2016 at 2:30 AM, mxb wrote: > OSPF is not right protocol if you scale to more than 3 sites and want > influence routing. > BGP will do a better job in this situation. > > On 27 jan. 2016, at 03:39, Dewey Hylton wrote: > > my current working

Re: ipsec between three networks

2016-01-26 Thread Dewey Hylton
lilit-aibolit mail.ru> writes: > Suppose I have third endpoint in the Internet > with public IP z.z.z.z and network 192.168.3.0/24. > What is the way to establish extra tunnel with third endpoint? > I need to be able to reach $net1 and $net2 networks from > $net3 with is 192.168.3.0/24 and vice

Re: Working on lpd,etc

2016-01-26 Thread Dewey Hylton
Chris Bennett bennettconstruction.us> writes: > > Is anyone still using a printer connected to a serial port or is that now > removable? > > Chris Bennett We're still using zebra serial printers ...

Re: compulab fitlet, non-working intel i211 ethernet, help requested

2015-11-02 Thread Dewey Hylton
On Sat, Oct 31, 2015 at 11:20 AM, Dewey Hylton wrote: > 2015-10-31 10:56 GMT-04:00 Dewey Hylton : > >> On Sat, Oct 31, 2015 at 12:49 AM, Jonathan Gray wrote: >> >>> On Fri, Oct 30, 2015 at 11:32:16AM -0400, Dewey Hylton wrote: >>> > > >>> >

Re: compulab fitlet, non-working intel i211 ethernet, help requested

2015-10-31 Thread Dewey Hylton
2015-10-31 10:56 GMT-04:00 Dewey Hylton : > On Sat, Oct 31, 2015 at 12:49 AM, Jonathan Gray wrote: > >> On Fri, Oct 30, 2015 at 11:32:16AM -0400, Dewey Hylton wrote: >> > > >> > didn't have -current onhand, but was able to perform this function on a &g

Re: compulab fitlet, non-working intel i211 ethernet, help requested

2015-10-31 Thread Dewey Hylton
On Sat, Oct 31, 2015 at 12:49 AM, Jonathan Gray wrote: > On Fri, Oct 30, 2015 at 11:32:16AM -0400, Dewey Hylton wrote: > > > > > didn't have -current onhand, but was able to perform this function on a > 5.8 > > system ... i have 3 of these devices i'd re

Re: compulab fitlet, non-working intel i211 ethernet, help requested

2015-10-30 Thread Dewey Hylton
Jonathan Gray jsg.id.au> writes: > > > If you can get the dmesg output of a kernel built with the following > > > diff it should indicate where the problem is: > > > > > > Index: sys/dev/pci/if_em_osdep.h > > > === > > > RCS file: /c

Re: compulab fitlet, non-working intel i211 ethernet, help requested

2015-10-30 Thread Dewey Hylton
On Thu, Oct 29, 2015 at 10:15 AM, Dewey Hylton wrote: > > > On Wed, Oct 28, 2015 at 11:35 PM, Jonathan Gray wrote: > >> On Wed, Oct 28, 2015 at 10:18:26PM -0400, Dewey Hylton wrote: >> > i like these little boxes; they are silent and stable and perfect for >>

Re: compulab fitlet, non-working intel i211 ethernet, help requested

2015-10-29 Thread Dewey Hylton
On Wed, Oct 28, 2015 at 11:35 PM, Jonathan Gray wrote: > On Wed, Oct 28, 2015 at 10:18:26PM -0400, Dewey Hylton wrote: > > i like these little boxes; they are silent and stable and perfect for > plenty > > of my projects. this new version promises to be better than

compulab fitlet, non-working intel i211 ethernet, help requested

2015-10-28 Thread Dewey Hylton
i like these little boxes; they are silent and stable and perfect for plenty of my projects. this new version promises to be better than the several fit2 machines i have scattered around customer sites, affording more cores and memory. the man page for em shows the i211 to be supported. this machi

Re: requesting help working around boot failures with supermicro atom board

2015-10-08 Thread Dewey Hylton
ah, well thanks for taking a look. On Thu, Oct 8, 2015 at 3:09 PM, Mike Larkin wrote: > On Wed, Oct 07, 2015 at 11:17:25PM -0400, Dewey Hylton wrote: > > you missed my update which followed that post. it did not survive the > night > > - even with lm disabled in the kern

Re: requesting help working around boot failures with supermicro atom board

2015-10-07 Thread Dewey Hylton
ng to acpi? -- Forwarded message -- From: Dewey Hylton To: misc@openbsd.org Cc: Date: Tue, 15 Sep 2015 19:19:10 + (UTC) Subject: Re: requesting help working around boot failures with supermicro atom board Dewey Hylton gmail.com> writes: > > Mark Kettenis xs4

Re: requesting help working around boot failures with supermicro atom board

2015-09-17 Thread Dewey Hylton
Dewey Hylton gmail.com> writes: > > Mike Larkin azathoth.net> writes: > > > > > On Tue, Sep 15, 2015 at 07:16:40PM +, Dewey Hylton wrote: > > > Dewey Hylton gmail.com> writes: > > > > > > > > > > > Mike Larkin

Re: requesting help working around boot failures with supermicro atom board

2015-09-15 Thread Dewey Hylton
Mike Larkin azathoth.net> writes: > > On Tue, Sep 15, 2015 at 07:16:40PM +0000, Dewey Hylton wrote: > > Dewey Hylton gmail.com> writes: > > > > > > > > Mike Larkin azathoth.net> writes: > > > > > > acpidump please. > > &

Re: requesting help working around boot failures with supermicro atom board

2015-09-15 Thread Dewey Hylton
Dewey Hylton gmail.com> writes: > > Mark Kettenis xs4all.nl> writes: > > Oh that is interesting. Can you try disabling the lm(4) driver in > > your kernel? You can do: > > > > # config -ef /bsd > > ... > > ukc> disable lm > > 2

Re: requesting help working around boot failures with supermicro atom board

2015-09-15 Thread Dewey Hylton
Dewey Hylton gmail.com> writes: > > Mike Larkin azathoth.net> writes: > > acpidump please. > > my pleasure: > > [demime removed a uuencoded section named supermicro-X7SPE-HF-D525-acpidump.tgz which was 276 lines] > > alright ... so this didn&#

Re: requesting help working around boot failures with supermicro atom board

2015-09-14 Thread Dewey Hylton
Mark Kettenis xs4all.nl> writes: > > > # sysctl -a|grep 'sensors.*temp' > > hw.sensors.cpu0.temp0=30.00 degC > > hw.sensors.lm1.temp0=0.00 degC > > hw.sensors.lm1.temp1=14.00 degC > > hw.sensors.lm1.temp2=14.00 degC > > # reboot > > > > BEEEP! > > Oh that is interesting. Can you t

Re: requesting help working around boot failures with supermicro atom board

2015-09-14 Thread Dewey Hylton
Dewey Hylton gmail.com> writes: > # sysctl -a|grep 'sensors.*temp' > hw.sensors.cpu0.temp0=31.00 degC > hw.sensors.lm1.temp0=48.00 degC > hw.sensors.lm1.temp1=52.50 degC > hw.sensors.lm1.temp2=36.00 degC > # reboot > > and meet with success ... if i wait

Re: requesting help working around boot failures with supermicro atom board

2015-09-14 Thread Dewey Hylton
Kurt Mosiejczuk se.rit.edu> writes: > > On Mon, Sep 14, 2015 at 05:15:01PM +0000, Dewey Hylton wrote: > > > > I've had this issue with the same systems. Never guessed it would > > > be OpenBSD specific. What I've found to make it stop happening is >

Re: requesting help working around boot failures with supermicro atom board

2015-09-14 Thread Dewey Hylton
Mike Larkin azathoth.net> writes: > > On Fri, Sep 11, 2015 at 06:38:23PM -0400, dewey.hylton gmail.com wrote: > > hi all. i???m having difficulty with this board: > > > > Supermicro X7SPE-HD-D525 rev1 > > > > i have several similar systems, each running an older version of OpenBSD for a few y

Re: requesting help working around boot failures with supermicro atom board

2015-09-14 Thread Dewey Hylton
Patrick Dohman comcast.net> writes: > > Any thermal settings in the bios? CPU performance, Fan Speed etc.. > > Does the fan idle correctly? Often intel chipsets will throttle the fan during a bios test. > > Perhaps ACPI is not routing an interrupt?? Not much is available to be tweaked in this

Re: requesting help working around boot failures with supermicro atom board

2015-09-14 Thread Dewey Hylton
Kurt Mosiejczuk se.rit.edu> writes: > > On Sat, Sep 12, 2015 at 03:51:36PM +0000, Dewey Hylton wrote: > > > the only real differences i see are: > > 1) bios revision > > 2) secondary disk attached to different sata port > > 3) sensors only present on work

Re: requesting help working around boot failures with supermicro atom board

2015-09-13 Thread Dewey Hylton
Sonic gmail.com> writes: > On Sun, Sep 13, 2015 at 10:15 AM, Sonic gmail.com> wrote: > > I also have this issue with OpenBSD on this box. Every time I reboot > > after updating a snapshot I need to power cycle to eliminate the long > > beep error. For some reason I kept thinking it was due to my

Re: requesting help working around boot failures with supermicro atom board

2015-09-12 Thread Dewey Hylton
wrant.com> writes: > > > Whether they are identical or not, showing us a dmesg diff with a known > > working release booted from both a working and the non-working system > > could also be helpful. > > Another Supermicro X7SPA-HF-D525 board (same chipset/CPU combination) > has been having the

Re: requesting help working around boot failures with supermicro atom board

2015-09-12 Thread Dewey Hylton
Richard Laysell xiphosura.co.uk> writes: > > On Fri, 11 Sep 2015 18:38:23 -0400 (EDT) > "dewey.hylton gmail.com" gmail.com> wrote: > > > hi all. i’m having difficulty with this board: > > > > Supermicro X7SPE-HD-D525 rev1 > > > > i have several similar systems, each running an older version

Re: requesting help working around boot failures with supermicro atom board

2015-09-12 Thread Dewey Hylton
Dewey Hylton gmail.com> writes: > > Whether they are identical or not, showing us a dmesg diff with a known > > working release booted from both a working and the non-working system > > could also be helpful. > > i'll post the diff below. the only real differenc

Re: requesting help working around boot failures with supermicro atom board

2015-09-12 Thread Dewey Hylton
John E.P. Hynes hytronix.com> writes: > > Try booting the SP kernel and see if that works. If it does, you might > be running into a variant of an issie I've had on my SuperMicro boxen... > > -John john, i tried this (5.4 bsd.sp) and i'm seeing the same result. it didn't occur to me to try th

Re: requesting help working around boot failures with supermicro atom board

2015-09-12 Thread Dewey Hylton
Benny Lofgren lofgren.biz> writes: > > Hi Dewey, > > On 2015-09-12 00:38, dewey.hylton gmail.com wrote: > > hi all. i’m having difficulty with this board: > > I noticed your mail somehow got posted twice, but I'm commenting on the > first incarnation of it because the second had some characte

requesting help working around boot failures with supermicro atom board

2015-09-11 Thread Dewey Hylton
hi all. i’m having difficulty with OpenBSD on this board: Supermicro X7SPE-HD-D525 rev1 i have several similar systems, each running an older version of OpenBSD for a few years without incident. except this one … running OpenBSD 5.7 i386 as well as latest amd64 snapshot, from cold start it b

relayd, sshd, carp

2015-03-18 Thread Dewey Hylton
i have a pair of openbsd boxes, each running a secondary sshd service on alternate port on their primary ip addresses. in addition to the primary address, they also share a carp address. the secondary sshd service listens on the primary address, and alternate port (10022). secondary sshd configura

Re: pf/queue questions

2014-09-24 Thread Dewey Hylton
> From: "Daniel Melameth" > Subject: Re: pf/queue questions > > On Tue, Sep 23, 2014 at 9:39 AM, Dewey Hylton wrote: > > i have a site-to-site vpn setup across a 40Mbps wan link (average ~30ms > > latency). one of its uses is for san replication, but of

pf/queue questions

2014-09-23 Thread Dewey Hylton
i have a site-to-site vpn setup across a 40Mbps wan link (average ~30ms latency). one of its uses is for san replication, but of course management traffic (ssh sessions, etc.) have to cross the link as well. without using queues, at times the replication traffic is such that management traffic

pf/queue questions

2014-09-23 Thread Dewey Hylton
i have a site-to-site vpn setup across a 40Mbps wan link (average ~30ms latency). one of its uses is for san replication, but of course management traffic (ssh sessions, etc.) have to cross the link as well. without using queues, at times the replication traffic is such that management traffic suff

Re: 5.5 bsd.rd fails to boot on alix

2014-06-30 Thread Dewey Hylton
Christian Weisgerber: > > > I vaguely remember that at some point there was a change that > > > requires a new boot(8), otherwise a serial console won't be set > > > correctly with a new kernel. > > > > hmmm ... would this affect both pxe and locally booting bsd.rd? > > It affects both pxeboot(8

Re: 5.5 bsd.rd fails to boot on alix

2014-06-29 Thread Dewey Hylton
> From: "Christian Weisgerber" > To: "dewey hylton" > Sent: Sunday, June 29, 2014 10:10:35 AM > Subject: Re: 5.5 bsd.rd fails to boot on alix > > [This message has also been posted to list.openbsd.misc.] > On 2014-06-29, Dewey Hylton wrote: > &g

5.5 bsd.rd fails to boot on alix

2014-06-29 Thread Dewey Hylton
i have 3 alix 2d13 machines, all currently running something between 5.1 and 5.3. each of these fails to boot the 5.5 bsd.rd (i386). bsd.rd checksums match. each time i attempt to boot the 5.5 bsd.rd on any of these 3 machines, i see the following two lines: booting tftp:bsd.rd: entry

Re: getting apps en masse

2013-01-26 Thread Dewey Hylton
wget does the trick nicely for me ... VER=5.2 ARCH=i386 BASE=ftp://ftp.openbsd.org/pub/OpenBSD/$VER ARGS="--passive-ftp -r -N -nH" wget $ARGS -l inf $BASE/packages/$ARCH/ >From: John Newton yahoo.com> >Subject: getting apps en masse >Date: 2013-01-25 01:30:19 GMT (2 days, 1 hour and 12 minutes

remote out-of-band management / intel vpro

2012-11-02 Thread Dewey Hylton
for some of my remote customers, as well as my own office, i'm looking for an out-of-band management solution that's cheaper than iLO or DRAC. remote power management would be nice, but network KVM is a must. i read about intel vpro / amt recently and just started looking into it; it seems to be

ipsec / ospf / multihoming - looking for recommendations

2012-09-22 Thread Dewey Hylton
hi all. i'm currently using two openbsd boxes to provide redundant site-to-site vpn connectivity between two geographically distant sites. each has both private (mpls ethernet handoff) and public (standard internet) connectivity. i have a pair of gif tunnels, one over each network, ospf to decid

Re: Manual IPsec setup with ipsec.conf

2012-04-05 Thread Dewey Hylton
- Original Message - > From: "Girish Venkatachalam" > To: "OpenBSD general usage list" > Sent: Wednesday, April 4, 2012 8:23:27 PM > Subject: Manual IPsec setup with ipsec.conf > > Dear all, > > Such a silly thing is not documented anywhere, no vpn(8) man page and > not on the Internet

Re: openbsd / ipsec / hardware

2012-04-03 Thread Dewey Hylton
- Original Message - > From: "Ted Unangst" > To: "Stuart Henderson" > Cc: misc@openbsd.org > Sent: Monday, April 2, 2012 7:42:01 PM > Subject: Re: openbsd / ipsec / hardware > > On Mon, Apr 02, 2012, Stuart Henderson wrote: > >> i'm using a simple scp of a 100MB file. scp reports its > >

Re: openbsd / ipsec / hardware

2012-04-02 Thread Dewey Hylton
>From: Stuart Henderson spacehopper.org> >Subject: Re: openbsd / ipsec / hardware >Newsgroups: gmane.os.openbsd.misc >Date: 2012-03-31 21:39:14 GMT (1 day, 22 hours and 53 minutes ago) >On 2012-03-30, Dewey Hylton gmail.com> wrote: >> i'm getting ready to imple

Re: openbsd / ipsec / hardware

2012-04-02 Thread Dewey Hylton
- Original Message - > From: "James Shupe" > To: "Dewey Hylton" > Sent: Friday, March 30, 2012 4:40:23 PM > Subject: Re: openbsd / ipsec / hardware > > On 03/30/2012 03:16 PM, Dewey Hylton wrote: > > i'm getting ready to implement a few n

openbsd / ipsec / hardware

2012-03-30 Thread Dewey Hylton
i'm getting ready to implement a few new site-to-site vpns using openbsd, and am on the hunt for appropriate hardware. i have several alix (geode) and lanner (intel atom) boxes working wonderfully as firewalls and routers, but neither type are able to provide enough throughput when ipsec is adde

Re: Failover VPN tunnels

2012-03-13 Thread Dewey Hylton
- Original Message - > From: "Jeff Simmons" > To: misc@openbsd.org > Sent: Monday, March 12, 2012 8:27:51 PM > Subject: Failover VPN tunnels > > I've got a setup with a central VPN gateway running a couple dozen > IPSEC > tunnels to remote locations. All the gateways are running current,

Re: ethernet-to-serial support

2012-02-24 Thread Dewey Hylton
- Original Message - > From: "Henning Brauer" > To: misc@openbsd.org > Sent: Thursday, February 23, 2012 10:45:52 AM > Subject: Re: ethernet-to-serial support > > * Dewey Hylton [2012-02-23 15:21]: > > i used the digi equipment over a decade ago with

ethernet-to-serial support

2012-02-23 Thread Dewey Hylton
i've been using usb-to-serial adapters to deal with equipment such as serial-console openbsd boxes and cisco devices. i'd like to move toward something like the digi or perle console servers. i used the digi equipment over a decade ago with both hpux and aix with success. i'd really like to ac

Re: looking for hardware recommendations, x86 or otherwise.

2012-01-30 Thread Dewey Hylton
- Original Message - > From: "corey clingo" > To: misc@openbsd.org > Sent: Sunday, January 29, 2012 7:05:17 PM > Subject: Re: looking for hardware recommendations, x86 or otherwise. > > On Sun, Jan 29, 2012 at 4:06 PM, Dewey Hylton > wrote: > > if

Re: looking for hardware recommendations, x86 or otherwise.

2012-01-30 Thread Dewey Hylton
- Original Message - > From: "Theo de Raadt" > To: "Dewey Hylton" > Cc: misc@openbsd.org > Sent: Sunday, January 29, 2012 6:32:21 PM > Subject: Re: looking for hardware recommendations, x86 or otherwise. > > > i'm hoping the raspberryp

looking for hardware recommendations, x86 or otherwise.

2012-01-29 Thread Dewey Hylton
if you feel this is a tired and worn-out question, then please just move along. two systems on which i'm happily running openbsd on are: alix and mac mini. alix for firewalls/thin clients, and the mac mini can handle pretty much anything i throw at it. both are relatively cheap (new alix and us

Re: roundcubemail packet

2011-12-05 Thread Dewey Hylton
- Original Message - > From: "Wesley M." > To: misc@openbsd.org > Sent: Monday, December 5, 2011 3:03:25 AM > Subject: roundcubemail packet > > Hi, > > I have the following error : > > Check DB config > DSN (write): NOT OK(MDB2 Error: connect failed) > Make sure that the configured dat

Re: Daily digest, Issue 1989 (27 messages)

2010-12-05 Thread Dewey Hylton
> From: shweg...@gmail.com > Date: December 3, 2010 6:28:19 AM EST > To: misc@openbsd.org > Subject: soekris + openbsd server buy question > > Hello, I'm considering buying a Soekris net5501-70 and install OpenBSD on it to make myself a small server and use it as a proxy (ssh tunnel), it might serv

Re: Force passwordcheck in login.conf

2010-10-17 Thread Dewey Hylton
sorry for the subject goof ... On Oct 17, 2010, at 11:51 AM, Dewey Hylton wrote: >> >> -Original Message- >> From: Brad Tilley [mailto:b...@16systems.com] >> Sent: den 14 oktober 2010 13:36 >> To: Leif Blixt; openbsd-misc >> Subject: Re: Force password

Re: Daily digest, Issue 1944 (42 messages)

2010-10-17 Thread Dewey Hylton
> -Original Message- > From: Brad Tilley [mailto:b...@16systems.com] > Sent: den 14 oktober 2010 13:36 > To: Leif Blixt; openbsd-misc > Subject: Re: Force passwordcheck in login.conf > > Leif Blixt wrote: >> >> We are currently being reviewed for PCI DSS compliance, and the big > problems >

gre over ipsec - mtu issues?

2009-12-21 Thread Dewey Hylton
hi all. implemented ospf routing between two gre-over-ipsec segments. failover finally works beautifully. having comms issues where connecting to standard web services across gre/ipsec seem to timeout, when connecting to tomcat apps work fine. any clues where i should be looking for the problem? do

Re: ipsec / trunk / failover

2009-12-18 Thread Dewey Hylton
h > as ospfd. > > As far as 2# is concerned, you _might_ get away with two gif(4) encapsulated > and encrypted tunnels, then trunk(4)ing the gif(4) interface pairs. I never > tried that nor heard of anybody doing that. > > Mitja > >> -Original Message- >>

ipsec / trunk / failover

2009-12-11 Thread Dewey Hylton
hi all. i have two sites connected by a slow mpls connection, each having faster connections to the internet. both are viewed as untrusted, so site-to-site traffic flowing over either mpls or internet needs to be encrypted. 1) my minimum requirement at this point is for an encrypted connection ove