Re: Guidance for booting NanoPi R6S?

2024-04-21 Thread Stephan Somogyi
On Sun, Apr 21, 2024 at 9:20 AM Mihai Dragan wrote: > You need to follow a few additional steps to get R6S image to boot after > flashing the initial image: > On an OpenBSD desktop system, install "u-boot-rk3588" package. The one I > tested with is u-boot-rk3588-2024.01rc3p1. > Insert the

Guidance for booting NanoPi R6S?

2024-04-16 Thread Stephan Somogyi
Given that it appears that R6S https://www.mail-archive.com/ports@openbsd.org/msg123717.html and R6C support https://www.mail-archive.com/ports@openbsd.org/msg124138.html are in the ports version of uboot, I was interested in trying to make it work. Unfortunately, I'm not having any luck via

Re: Thinkpad x260 not connecting to network

2023-12-02 Thread Stephan, Corey J
or, unofficially, c) my blog post on configuring the X270, subsection #wifi: https://www.coreystephan.com/openbsd-thinkpad/#wifi Cheers, Corey -- Corey Stephan, Ph.D. coreystephan.com

ETA for 7.4 packages-stable for aarch64?

2023-10-17 Thread Stephan Somogyi
aarch64 packages-stable has historically been available; for 7.4 it's populated for only for amd64, i386, and sparc64 on cdn.openbsd.org and assorted mirrors. Is there an ETA for 7.4 aarch64 packages-stable? Thanks.

Re: Weird pf NAT failure on apu2

2023-06-25 Thread Stephan Neuhaus
On 6/24/23 13:14, Stuart Henderson wrote: On 2023-06-24, Stephan Neuhaus wrote: I now think that either the documentation is wrong, or pf is wrong. At any rate, there seems to be a rather serious disconnect between the two. The FAQ clearly says: When a packet is selected by a match rule

Re: Weird pf NAT failure on apu2

2023-06-24 Thread Stephan Neuhaus
e, see https://marc.info/?l=openbsd-tech=168714686620055=2 Should I be taking this to another mailing list? Should I be submitting a bug report? Or am I just really really dense and am just too stupid to read the documentation correctly? Cheers Stephan

Re: Weird pf NAT failure on apu2

2023-06-23 Thread Stephan Neuhaus
On 6/23/23 18:29, Zack Newman wrote: On 6/23/23 11:19, Stephan Neuhaus wrote: # Rule 5 match out log on em0 from athn0:network to any nat-to (em0) # Rule 6 pass out log on em0 from athn0:network to any Rule 5 replaces the source IP address with the IP address assigned to em0-as well

Re: Weird pf NAT failure on apu2

2023-06-23 Thread Stephan Neuhaus
On 6/23/23 13:19, Stephan Neuhaus wrote: [...] Some people have replied to this post off-list and have made the entirely reasonable conjecture that the packet changes its effective source address the moment the match rule matches. With the changed source address, the pass rule no longer

Re: Weird pf NAT failure on apu2

2023-06-23 Thread Stephan Neuhaus
On 6/23/23 13:19, Stephan Neuhaus wrote: Hi list [...] In other words, now the same packets that weren't passed using the match/pass combo are not passed when the nat-to is part of the pass rule. That should have been "...combo are NOW passed...". Sorry. Cheers Stephan

Weird pf NAT failure on apu2

2023-06-23 Thread Stephan Neuhaus
ot passed when the nat-to is part of the pass rule. No matter how I read the docs, there is no way I can explain what's happening. Yet my setup is so simple that I MUST be doing something wrong, right? Can you help me see what's going on? Cheers Stephan PS: I didn't want to make this message

Possible typo in pf NAT FAQ

2023-06-18 Thread Stephan Neuhaus
ms. This makes much more sense and is consistent with all the other documentation that I've seen. So could it be a typo in the docs? Or have I missed some things? Thanks in advance Stephan

Re: Reference/Citation Manager -- Zotero or JabRef? (+ compilation of Zotero?)

2023-04-13 Thread Stephan, Corey J
leaving almost all OSes behind in hope that they might redirect some attention to portability: https://github.com/JabRef/jabref/issues/9745 (Very) old versions of JabRef (3.8.2 and earlier) should still run with OpenJDK 8 (jdk-1.8.0). - Deus vos benedicat, Corey Stephan, Ph.D. coreystephan.com

Re: Cron running at 99% CPU for seemingly no reason

2022-06-19 Thread Stephan Mending
rn /kern_timeout.c:681] end trace frame: 0x0, count: -3 ddb{0}> call db_show_rtentry(fd807a4e0620, 0, 0) Symbol not found I'd love to know whats going wrong here. Best regards, Stephan

Re: Cron running at 99% CPU for seemingly no reason

2022-05-28 Thread Stephan Mending
>From l...@md5collisions.eu Thu May 26 19:51:47 2022 Date: Thu, 26 May 2022 19:51:47 +0200 From: Stephan Mending To: misc@openbsd.org Subject: Re: Cron running at 99% CPU for seemingly no reason Message-ID: Mail-Followup-To: Stephan Mending , misc@openbsd.org References: MIME-Version:

Cron running at 99% CPU for seemingly no reason

2022-05-15 Thread Stephan Mending
rom giving it a go by recompiling cron and using gdb) ? Best regards, Stephan

Re: TLS library problme: tlsv1 alert protocol

2022-04-09 Thread Stephan Mending
lib/libssl/tls13_lib.c:150: postfix/smtpd[97536]: lost connection after STARTTLS from mout.web.de[212.227.17.12]:52515 postfix/smtpd[97536]: disconnect from mout.web.de[212.227.17.12]:52515 ehlo=1 starttls=0/1 commands=1/2 Best regards, Stephan On Wed, Apr 06, 2022 at 11:41:41PM

TLS library problme: tlsv1 alert protocol

2022-04-06 Thread Stephan Mending
, Stephan

Re: pkg_add and an authenticating proxy

2021-02-11 Thread Stephan Mending
127.0.0.1:/; && pkg_add -nu > > > Hi, > > I was wondering if there was any way on how to allow pkg_add to use an > > authenticating http-proxy ? Unluckily I cannot > > find any documentation on the matter. > > > > Thanks alot so far. > >

pkg_add and an authenticating proxy

2021-02-10 Thread Stephan Mending
Hi, I was wondering if there was any way on how to allow pkg_add to use an authenticating http-proxy ? Unluckily I cannot find any documentation on the matter. Thanks alot so far. Best regards, Stephan

Iked <-> Strongswan

2020-07-29 Thread Stephan Mending
add rightsourceip= fragmentation=yes I'd appreciate it SO MUCH if you could help me in any way. Best regards, Stephan

sysupgrade is constantly failing

2020-04-04 Thread Stephan Mending
! Best regards, Stephan signature.asc Description: PGP signature

Re: thunderbird core-dumps on amd64-current latest with 'pledge "stdio", syscall 87'

2019-10-27 Thread Stephan
On Sun, 27 Oct 2019 19:09:25 +0100 "Stefan Wollny" wrote: > Hello! > > I just updated the system and the packages to the latest versions > available on 'ftp.hostserver.de' on two different laptops > (Schenker/clavo and Lenovo Thinkpad T450S). > > Here are the infos from the Schenker: > > $

Re: Cloud-Storage & OpenBSD

2018-09-04 Thread Dr. Stephan Schindel
Hey there, I personally use restic     https://restic.net/ together with Wasabi     https://wasabi.com/ with their S3 API. Give it a try, it's super cheap and reliable. It's also in the ports tree, although I take the latest version from the Homepage. Regards, Stephan On 9/2/18 4:43

Re: CUPS USB Madness

2015-01-26 Thread Stephan Schindel
on my OpenBSD installation, yeehaw :) Cheers, Stephan On 01/26/15 11:43, Martin Pieuchot wrote: On 26/01/15(Mon) 11:02, Stephan Schindel wrote: Hey, First off: I'm new to OpenBSD :). I'm running 5.6-STABLE with stable 5.6 ports tree. I've updated my CUPS installation which had some USB patches

CUPS USB Madness

2015-01-26 Thread Stephan Schindel
Not sure if it's related to dnssd, so I hope somebody of you could help me :) Cheers, Stephan

Pour Noël offrez une Vidéo à votre site Internet

2010-12-12 Thread stephan comelli
Formulaire. Nous vous souhaitons une bonne visite et sommes ` votre icoute pour tous vos projets Trhs Cordialement Stephan Comelli Mon Agence de Pub.TV Til 04 67 20 48 68 Mob 06 12 300 600 Pour Vos Parutions dans les Pages Jaunes Cliquez ICI et dicouvrez nos PACKS Pages Jaunes

problems with login after xlock in OpenBSD release 4.7

2010-10-23 Thread Stephan Andreas
My xclient run under openbsd 4.7 and the server is cygwin on windows on my local LAN. Everything works fine, but when I do an xlock or kdesktop_lock it's very hard to relogin because top show me that xlock or kdesktop_lock use the whole cpu. Has somebody the same problem? Stephan OpenBSD

Re: Free PF ruleset 4.7

2010-06-07 Thread Stephan Huiser
On 06/07/2010 08:36 PM, FRLinux wrote: On Mon, Jun 7, 2010 at 7:18 AM,open...@e-solutions.re wrote: I'm writing (in French) a guide about how to protect Company using OpenBSD and PF. Here a sample : http://mouedine.net/ruleset47.aspx If you have advices ... Yes, more like a troll

Re: what's wrong with ipsec ?

2010-06-01 Thread Stephan A. Rickauer
On Tue, 1 Jun 2010 17:44:41 +0300 Gregory Edigarov g...@bestnet.kharkov.ua wrote: On Tue, 1 Jun 2010 15:14:58 +0100 Sevan / Venture37 ventur...@gmail.com wrote: from 47.html Two bugs in IPsec/HMAC-SHA2 were fixed, resulting in an incompatibility with the HMAC-SHA-256/384/512 hash

Re: Backup and monitoring

2010-03-24 Thread Stephan Andreas
Am Wednesday 24 March 2010 11:15:36 schrieb axl melkhov: Hello Community I'm new to OpenBSD, I want to write a script for backup and monitoring changes all files on the disk. Shell: ksh Utilities: dump, restore Input data: /etc/fstab ,/etc/dumpdates Output data: backup files, text file -

Is there a mapper for ALSA in OpenBSD

2010-01-04 Thread Stephan Andreas
Hi OpenBSD members and users, I know that there is no alsa for openbsd, but is there a mapper that uses the normal driver so that the userland software can use in an alsa way? Thanks Stephan

Stephan* Comelli souhaite vous ajouter à ses contacts

2009-10-06 Thread Stephan* Comelli
J'aimerais vous voir rejoindre mon riseau professionnel sur Viadeo. Merci Stephan* PS : l'outil prend tout son sens lorsque l'on invite ` son tour ses contacts.Accepter l'invitation de Stephan

Re: OpenBSD as MX server

2009-09-30 Thread Stephan A. Rickauer
On Wed, 2009-09-30 at 13:30 +0700, sonjaya wrote: it will be helpful if want share tutorial . man smtpd || man sendmail man spamd

HP ProLiant ML350 G5

2009-09-24 Thread Stephan A. Rickauer
If someone happens to run 4.6 or -current on an HP ProLiant ML350 G5, it would be nice to see a dmesg. Thanks.

Re: 4.6 postponed to Nov 1

2009-09-18 Thread Stephan A. Rickauer
On Fri, 2009-09-18 at 11:09 +0200, Alexander Hall wrote: Theo de Raadt wrote: The 4.6 release will be postponed to Nov 1. Heh. I just cannot help being a little amused by this, since we are expecting our second kid with an ETA of Nov 1, and I thought it would have been a fun coincidence to

Re: Defending OpenBSD Performance

2009-09-17 Thread Stephan A. Rickauer
On Wed, 2009-09-16 at 20:59 +0100, Cian Brennan wrote: OpenBSD's a wonderful OS, but it's lack of easy upgradability is a *disadvantage, not something to be proud of. And yes, there are good Our Institute moved away from Linux servers always everwhere, just *because* of updates are unreliable.

Re: Defending OpenBSD Performance

2009-09-15 Thread Stephan A. Rickauer
performance issue. How do others defend OpenBSD in these conversations? I I don't defend. Just let everyone use what they want.

Re: binding services on carp

2009-05-27 Thread Stephan A. Rickauer
On Tue, 2009-05-26 at 16:18 -0400, uday wrote: Hey guys, A quick question, is there a way to bind services to the carp interface ? You see I have an ftp-proxy running and I wanted to use carp since I'm already doing fail-over with PF. FTP client -- Redundant Firewall w/ftp-proxy --

Re: spamd question

2009-05-27 Thread Stephan A. Rickauer
On Fri, 2009-05-22 at 15:53 -0400, Jim Razmus wrote: beck@ created the greyscanner Perl script to address the issues you've highlighted. It does deeper inspection of grey listed senders before they are white listed. It validates the DNS setup of the sending server, the validity of the

Re: Live OpenBSD Bootable i386 CD

2009-04-20 Thread Stephan A. Rickauer
and re-use the kernels repeatedly. They are based on GENERIC, but with: config bsd root on cd0a This is no longer needed in 4.5. Stephan -- --- StarTek - secure by design Tel ++41 44 500 111-0 Postfach 19

Re: Live OpenBSD Bootable i386 CD

2009-04-20 Thread Stephan A. Rickauer
in 4.4 is a bit outdated (hence the script isn't that nice). 4.5 will be available soon. The build.sh in branches/stephan is probably a better start. Of course, we do some customizations but you can easily strip them off in build.sh. Ideally, I'd have one or two knobs to build.sh which would either

sendmail: cannot open /var/spool/mqueue

2009-04-20 Thread Stephan A. Rickauer
Has anyone seen this before in /var/log/maillog? Apr 20 08:37:51 srv1 sm-mta[10664]: n3K6bpjJ010664: SYSERR(root): gatherq: cannot open /var/spool/mqueue: No such file or directory Apr 20 08:38:52 srv1 sm-mta[15383]: filesys_update failed: No such file or directory, fs=., avail=-1, blocksize=3

Re: sendmail: cannot open /var/spool/mqueue

2009-04-20 Thread Stephan A. Rickauer
if this date was more recent. :) Ehm ja, only did a baseXX upgrade ... Thanks a lot, Nick. Stephan -- --- StarTek - secure by design Tel ++41 44 500 111-0 Postfach 19 Fax ++41 44 500 111-2 CH-8118

Re: spamd handling multiple sending servers

2009-03-23 Thread Stephan A. Rickauer
the smtp dialog as soon as the sender enters the DATA phase. No time for reading anything like the message ID or other stuff of the email since the connection is aborted ways earlier. Cheers, Stephan -- --- StarTek - secure by design

Re: might be slightly OT: `probability in PF'

2009-03-23 Thread Stephan A. Rickauer
On Sat, 2009-03-21 at 12:14 +0100, Henning Brauer wrote: * jmc j...@cosmicnetworks.net [2009-03-11 15:05]: so anyway, how are _you_ using probability? it's high on my list of useless features in pf I'd rather remove. if anybody is actually using it, I'd like to hear about it. Once in a

PKG_CACHE

2009-03-23 Thread Stephan A. Rickauer
What magic do I miss to cache packages in PKG_CACHE? Must be really obvious, but I can't spot it. # PKG_CACHE=/tmp # echo $PKG_CACHE /tmp # pkg_add -x nano Adding nano-2.0.7 # ls -l /tmp/ (empty) Thanks.

Re: spamd handling multiple sending servers

2009-03-23 Thread Stephan A. Rickauer
;) -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52 Winterthurerstrasse 190 Fax +41 44 635 30 53 CH-8057 Zurich

Re: PKG_CACHE

2009-03-23 Thread Stephan A. Rickauer
export thanks, Paul. On Mon, 2009-03-23 at 16:49 +0100, Stephan A. Rickauer wrote: What magic do I miss to cache packages in PKG_CACHE? Must be really obvious, but I can't spot it. # PKG_CACHE=/tmp # echo $PKG_CACHE /tmp # pkg_add -x nano Adding nano-2.0.7 # ls -l /tmp

Re: OpenVPN server refuses connections

2009-03-04 Thread Stephan A. Rickauer
/etc/openvpn/server.conf: local 192.168.0.1 /etc/openvpn/client.conf remote 66.66.66.66 1194 ? -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41

Re: How do I monitor my PF based firewall?

2009-03-04 Thread Stephan A. Rickauer
- stable and the included snmpd). Can you please give me a hint into the right direction? As far as I remember, including a 'PF-MIB' into opensnmpd is on reyk@'s ever growing todo list already. -- Stephan A. Rickauer --- Institute

Re: How do I monitor my PF based firewall?

2009-03-04 Thread Stephan A. Rickauer
On Wed, 2009-03-04 at 11:33 +0100, Falk Brockerhoff - smartTERRA GmbH wrote: Am 04.03.2009 um 11:23 schrieb Lars Noodin: It's probably simplest to start with pftop. After a first quick look pftop is a great tool for debugging und manually monitoring firewall activity. But it seems that I

Re: Kernel static map entries and kernel options

2009-02-21 Thread Stephan A. Rickauer
On Thu, 2009-02-19 at 15:07 +1100, Linden Varley wrote: Recently on some apache reverse proxy servers we have encountered the dreaded This has occurred on OpenBSD 3.9 i386 and OpenBSD 4.0 amd64. I am unsure If you experience problems that have 'recently' occured on 3.9 and 4.0 your problems'

Re: pfsync vs contrackd

2009-02-19 Thread Stephan A. Rickauer
On Thu, 2009-02-19 at 13:10 +0100, Mikel Jimenez wrote: What are the limitations of contrackd? When I looked into it some moons ago, contrackd would only sync established tcp connections. -- Stephan A. Rickauer --- Institute

set skip ignores interface group

2009-02-17 Thread Stephan A. Rickauer
, -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52 Winterthurerstrasse 190 Fax +41 44 635 30 53 CH-8057 Zurich

Re: Pflow and ifconfig

2008-12-28 Thread Stephan A. Rickauer
current version on openbsd. My question is how do I bring my installation up to the newest stable release? Check out the FAQ: http://www.openbsd.org/faq/faq5.html#Flavors Cheers, -- Stephan A. Rickauer --- Institute

Re: CARP under heavy load

2008-12-23 Thread Stephan A. Rickauer
On Tue, 2008-12-23 at 08:13 +0100, Claudio Jeker wrote: There is some initial code in -current that tries to avoid the system entering livelock for extended times. It needs a lot of testing so maybe you should try it out and report back. sure. Just send me the diffs... -- Stephan

Re: CARP under heavy load

2008-12-23 Thread Stephan A. Rickauer
On Tue, 2008-12-23 at 09:15 +0100, Stephan A. Rickauer wrote: On Tue, 2008-12-23 at 08:13 +0100, Claudio Jeker wrote: There is some initial code in -current that tries to avoid the system entering livelock for extended times. It needs a lot of testing so maybe you should try it out

Re: ipv6/pf/relayd/totd

2008-12-19 Thread Stephan A. Rickauer
if the situation merits. Hope this provides some useful pointers! Well, at least my pf.conf is fixed now! Thanks again. But I still struggle with relayd. I'll try to setup this case at home on my much simpler environment over christmess. Maybe that'll work. Cheers, -- Stephan A. Rickauer

Re: ipv6/pf/relayd/totd

2008-12-19 Thread Stephan A. Rickauer
that. I'm still convinced the pf.conf is the problem, redirect to a global scope IPv6 address and I suspect you'll be much better off. Yes, that fixed it. Thanks again. I owe you a pint, well ... two pints ;) Cheers, -- Stephan A. Rickauer

Re: synproxy issue

2008-12-17 Thread Stephan A. Rickauer
to port http modulate state I have no doubt that disabling synproxy fixes the issue. My question was rather raised to understand *why* it wouldn't work. Nobody has been able to answer it so far. -- Stephan A. Rickauer --- Institute

Re: ipv6/pf/relayd/totd

2008-12-17 Thread Stephan A. Rickauer
behind an ipv4-to ipv6 relay (I know that we could just simply nat more private ipv4 addresses, but that is not an option right now). For sure OpenBSD brings all you need to do it - it's just that I am stuck at the moment and can't see why... but maybe I'll figure it out today! -- Stephan

Re: Going OT Re: ipv6/pf/relayd/totd

2008-12-17 Thread Stephan A. Rickauer
On Wed, 2008-12-17 at 06:54 -0700, Diana Eichert wrote: On Wed, 17 Dec 2008, Jeroen Massar wrote: Stephan A. Rickauer wrote: If you knew something about the political structures of SWITCH and of UZH you wouldn't recommend kicking the network administrator. If you would have read

Re: ipv6/pf/relayd/totd

2008-12-17 Thread Stephan A. Rickauer
On Wed, 2008-12-17 at 11:11 +0100, Jeroen Massar wrote: You are trying to solve the wrong problem with the wrong hammer. I need to go the bus station. Do you know the way? If I were you, I wouldn't start from here. Sorry, but relayd is _exactly_ what can fix this issue, without being a hammer

Re: Soekris equivalent

2008-12-17 Thread Stephan A. Rickauer
On Wed, 2008-12-17 at 20:56 +0100, Marc Balmer wrote: ALIX boards serve me well. See www.pcengines.ch. I can second that. Alix boards have served me as a robust drop-in replacement for Soekris while being cheaper at the same time (maybe not for non-Swiss customers, though).

Re: OpenBSD 4.4 amd64 bsd.mp can't detect 4GB memory

2008-12-17 Thread Stephan A. Rickauer
On Wed, 2008-12-17 at 14:52 -0500, Ted Unangst wrote: On Tue, Dec 16, 2008 at 7:43 AM, C. Soragan Ong sora...@guox.net wrote: so let say put set bigmem=1 into /etc/boot.conf will activate the bigmem? correct me if i am wrong, i am new with openbsd :) the only permanent way to set that is

Re: CARP under heavy load

2008-12-16 Thread Stephan A. Rickauer
. Depending on how the hash function works out, trunking might not help there. What isn't clear yet is whether the problem is caused by the *link* being overloaded, or the *firewalls* being overloaded. Stephan, it might be interesting to run systat vm .2 on an active firewall while the big TSM

ipv6/pf/relayd/totd

2008-12-16 Thread Stephan A. Rickauer
shed some light on my dark spots? -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52 Winterthurerstrasse 190 Fax +41 44 635 30

Re: ipv6/pf/relayd/totd

2008-12-16 Thread Stephan A. Rickauer
On Tue, 2008-12-16 at 16:32 +0100, Dirk Mast wrote: Hi, have you already seen this great post on undeadly? Yes, I have. Without it, I wouldn't have come so far ;)

Re: OpenBSD 4.4 amd64 bsd.mp can't detect 4GB memory

2008-12-16 Thread Stephan A. Rickauer
On Mon, 2008-12-15 at 07:39 -0800, Chris Kuethe wrote: no. the config program can do this without a recompile. I also would like to learn how to do that since we have a couple of 'big' amd64 machines I could test on. Cheers, -- Stephan A. Rickauer

CARP under heavy load

2008-12-12 Thread Stephan A. Rickauer
) any comments welcome. ;) -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52 Winterthurerstrasse 190 Fax +41 44 635 30 53

Re: CARP under heavy load

2008-12-12 Thread Stephan A. Rickauer
the other CARP interfaces? We do have a dedicated link for pfsync, though. -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52

Re: CARP under heavy load

2008-12-12 Thread Stephan A. Rickauer
one use the same 'carppeer ded.ica.ted.ip' statement for all carp interfaces altogether (and the other dedicated peer IP on the other)? This would come in handy. -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41

Re: OT: Granting access from DMZ servers to iSCSI network

2008-12-12 Thread Stephan A. Rickauer
and iSCSI servers .. Sounds reasonable. Don't know about the snort part, but you can also use pf on that bridge ... -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich

Re: CARP under heavy load

2008-12-12 Thread Stephan A. Rickauer
On Fri, 2008-12-12 at 17:32 +0100, Felipe Alfaro Solana wrote: What's the point on using CARP to send advertisements over a dedicated link? The dedicated link is typically a cross-over cable (i.e. used for pfsync) and hence, in case of a switch port failure (or cable failure), CARP won't be

Re: OT, .. but eCommerce?

2008-12-12 Thread Stephan A. Rickauer
On Fri, 2008-12-12 at 09:33 -0600, L. V. Lammert wrote: A friend of mine is trying to get a small cCommece site up on one of our 4.4 servers, .. he is trying to get eCommerce Templates running but is having problems with curl it looks like others are ahead. This seems that is something from

Re: XenServer 5 with OpenBSD

2008-12-09 Thread Stephan A. Rickauer
On Mon, 2008-12-08 at 14:27 -0600, Adam Douglas wrote: The biggest question is OpenBSD on XenServer 5 Enterprise consider production ready even if the errors cannot be resolved? OpenBSD is, Xen isn't.

synproxy issue

2008-12-03 Thread Stephan A. Rickauer
into two individual tcpdump files that might be investigated further, if that's helpful: https://www.ini.uzh.ch/~stephan/out.synproxy https://www.ini.uzh.ch/~stephan/out.modulate Of course I tried to search the archives but I could only find old or irrelevant posts. Switching synproxy off

OpenBSD and XenSource

2008-12-01 Thread Stephan A. Rickauer
Those of you interested in running OpenBSD as a Xen guest in XenEnterprise might want to use this opportunity to raise their voice: http://forums.citrix.com/thread.jspa?threadID=151525 (Please note I have no intention to discus the boon and bane of virtualization...) Cheers, Stephan

lenovo thinkcentre m57 hangs while booting bsd.rd 4.4

2008-11-03 Thread Stephan Andreas
Thinkcentre M57 SFF, 6072-BGG Chipset Intel Q35 Intel GMA 3100 Onboard Graphics 1. I want install 4.4/i386 via cd it hangs after rd0 is initialized (I have tested to disable/enable apm/acpi ) 2. I install 4.2/i386 it runs but some hardware is not supported. 3. I load a bsd.rd current

Re: New tcp stack attack

2008-10-01 Thread Stephan A. Rickauer
closer to the ground A little bit less vage info can be found here http://tinyurl.com/3hv3kf -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635

4.4-current on XenServer 5

2008-09-22 Thread Stephan A. Rickauer
to look at it. Cheers, Stephan OpenBSD 4.4-current (RAMDISK_CD) #883: Wed Sep 17 13:17:23 MDT 2008 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/RAMDISK_CD cpu0: Intel(R) Xeon(R) CPU E5410 @ 2.33GHz (GenuineIntel 686-class) 2.33 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR

Re: 4.4-current on XenServer 5

2008-09-22 Thread Stephan A. Rickauer
Stupid me, the disk is there and OpenBSD runs just fine on it. Sorry for the noise. On Mon, 2008-09-22 at 12:24 +0200, Stephan A. Rickauer wrote: In know virtualization is not one of the primary targets of OpenBSD. However, in case someone is interested, here's a dmesg of 4.4-current booting

Re: pf visualization

2008-08-29 Thread Stephan A. Rickauer
On Thu, 2008-08-28 at 11:52 -0400, Jason Dixon wrote: Thanks for any ideas beyond pftop, tcpdump, hatched, darkstat and ntop ;) If I ever get off my lazy ass and finish/package it up, maybe this? http://www.netflowdashboard.com/demo/ http://www.netflowdashboard.com/download/ is down

Re: pf visualization

2008-08-29 Thread Stephan A. Rickauer
On Thu, 2008-08-28 at 16:03 +, Stuart Henderson wrote: Thanks for any ideas beyond pftop, tcpdump, hatched, darkstat and ntop ;) the nfdump/nfprofile tools (also in ports) are interesting too, there's a web interface NfSen which is yet to be ported but can be manually installed

pf visualization

2008-08-28 Thread Stephan A. Rickauer
like protocol and port distribution, IP based stats and whatnot. Thanks for any ideas beyond pftop, tcpdump, hatched, darkstat and ntop ;) Stephan

spamdb with '0' as pass

2008-08-14 Thread Stephan A. Rickauer
it is WHITE, how can pass be 0? Puzzled, Stephan

Re: Purpose of spamd-setup in greylisting mode?

2008-08-12 Thread Stephan A. Rickauer
that helps, -- Stephan A. Rickauer --- Institute of Neuroinformatics Tel +41 44 635 30 50 University / ETH Zurich Sec +41 44 635 30 52 Winterthurerstrasse 190 Fax +41 44 635 30 53 CH-8057 Zurich

Re: CARP node crashing reproducibly (4.3-stable)

2008-07-23 Thread Stephan A. Rickauer
are right. The leak we've seen is due to a kernel build we must have introduced by using an unclean source tree. Problem solved. However, the patch you've implemented in 1.610 of pf.c does fix the crashes we've seen before. Thanks a lot! -- Stephan A. Rickauer

Re: CARP node crashing reproducibly (4.3-stable)

2008-07-14 Thread Stephan A. Rickauer
after reboot. Because of the line wrapping in this email, I've also put the output of netstat and vmstat online) http://www.ini.uzh.ch/~stephan/vmstat+netstat.txt # vmstat -m Memory statistics by bucket size Size In Use Free Requests HighWater Couldfree 16 3549 10275

CARP node crashing reproducibly (4.3-stable)

2008-07-11 Thread Stephan A. Rickauer
897 1 0 1 1 0 81 plimitpl 152 6600 647 1 0 1 1 0 80 inpcbpl 216 1480120 147993 3 0 3 3 0 81 In use 20068K, total allocated 23264K; utilization 86.3% -- Stephan A. Rickauer

Re: CARP node crashing reproducibly (4.3-stable)

2008-07-11 Thread Stephan A. Rickauer
On Fri, 2008-07-11 at 17:09 +0200, Reyk Floeter wrote: hi stephan! o;?That was quick! Hi Reyk. can you also show your carp configuration? Sure (just x'ed out the external IPs as well as passwords). We have a simple master/backup system: carp0: LAN carp1: DMZ carp2: WLAN carp3: Internet

Re: CARP node crashing reproducibly (4.3-stable)

2008-07-11 Thread Stephan A. Rickauer
On Fri, 2008-07-11 at 21:32 +0200, Henning Brauer wrote: * Stephan A. Rickauer [EMAIL PROTECTED] [2008-07-11 16:59]: Here's all data I was able to get off our crashing machine, the backup node of our CARP cluster, that used to run flawlessly since 3.7. We can reproduce the problem

setting PKG_CACHE stopps pkg_add

2008-06-27 Thread Stephan A. Rickauer
-20071211p3:sdl-1.2.13p0 . . . (no hang, normal installation). In other words: As soon as I set PKG_CACHE, even when not including it in PKG_PATH, I see pkg_add stopping. Any insights are welcome. Maybe I just overlooked something in the archives or man pages? Thanks, Stephan

Re: Net-SNMP segfaults under OpenBSD 4.3

2008-06-27 Thread Stephan A. Rickauer
of the port will work. Stephan

Qlogic shipped one adapter, finally

2008-06-06 Thread Stephan A. Rickauer
Update: Qlogic finally managed to donate one iSCSI HBA to the OpenBSD project. I'd like to thank everybody who participated in emailing Qlogic - this step applied the required pressure so they finally kept their promise. Stephan. On Mon, 2008-04-21 at 20:52 +0200, Stephan A. Rickauer wrote

Bridge Firewall

2008-05-23 Thread Stephan Andreas
I'm using an OpenBSD Firewall to protect my Windows 2003 VPN Server (pptp). The problem is: The Windows 2003 VPN Server is in a subnet with some clients the vpn connection works with my firewall. The clients from the internet don't get a connection. Because gre packets will be filtered. But I

Re: Thinkpad T42 + OpenBSD 4.3 Freeze

2008-05-08 Thread Stephan Andre'
On Thursday 08 May 2008 08:59:22 Gonzalo Lionel Rodriguez wrote: Hi, everyone, i have a problem with my IBM Thinkpad T42 2373 and OpenBSD 4.3 (stable and current), with 512mb of ram (default) works fine, when i add 1gb (kingston) the system works fine a few minutes, and then freeze without

saslauthd and rimap

2008-05-07 Thread Stephan A. Rickauer
If someone happens to run saslauthd 2.1.22 on OpenBSD and uses rimap as authmech against a cyrus server, please try to authenticate using a password with double-quotes. I think we've found a bug here and it would be neat to have a confirmation. Thanks, -- Stephan A. Rickauer

Re: Editing C with...

2008-05-03 Thread Stephan Andre'
On Saturday 03 May 2008 21:20:29 Douglas A. Tutty wrote: On Sat, May 03, 2008 at 03:48:36PM -0600, Alvaro Mantilla Gimenez wrote: Real men use.whatever editor is comfortable for them. Vi, vim, emacs, xwpe, anjuta, kdevelop, joe, ed, etcused by a stupid guy does not produce quality

QLogic lies: now it's up to you

2008-04-21 Thread Stephan A. Rickauer
, product manager iSCSI HBAs: http://www.ini.uzh.ch/~stephan/qlogic-lies.txt After you have read this page, please send an email to the following people, cite this conversation and request (politely) shipping of the promised hardware. Do not cite any developer names, QLogic very well knows who we

  1   2   3   >