[cryptography export] OpenBSD solution for usage within EAR/CRF defined rouge states.

2016-07-07 Thread Per Engelbrecht
Hi misc@ I have been assinged a task with an extremely short timeline. The objective is to produce a EAR/CRF compliant laptop based workplace solution with as much bells and whistles as possible (anything from vpn, mta, LibraOffice to SAPgui and more) on non-us produced OS and hardware.  I have

Could someone please tell Mark Kettenis that ..

2006-11-14 Thread Per Engelbrecht
Hi all, Could someone close to Mark Kettenis please tell Mark to get in touch with me directly/off-list, thank you. The best to you all, /per [EMAIL PROTECTED] -- The most worth-while thing is to try to put happiness into the lives of others. - Sir Robert Baden-Powell

Syskonnect [msk] problem

2006-10-09 Thread Per Engelbrecht
Hi all, i386 / 4.0 (Aug. 28 2006 23:10 snap) dmesg below. I am replacing a couple of high-traffic routers in our datacenter and have just received (among others) a bunch of Syskonnect SK-9X22 dual Gbit server adapters for the job. These nic's should be supported by the 'msk' driver from

Re: OT Media-Converters, was Re: BGP router now running desp. low on mem.

2006-09-21 Thread Per Engelbrecht
Siegbert Marschall wrote: Hi, ## Physical connection: # ## We are terminating with this carrier in a FE port but due to the distance between them and us at the datacenter location, a FDDI connection was placed in between like: [our

Re: OT Media-Converters, was Re: BGP router now running desp. low on mem.

2006-09-21 Thread Per Engelbrecht
Diana Eichert wrote: Just wanted to throw in my US$.02 worth on the media converter issue. At my place of employment a facility design decision was taken a few years ago mandating all fiber buildings. It was pretty obvious they were clueless about commodity h/w so now we have this huge

Re: BGP router now running desperately low on memory [epilogue]

2006-09-20 Thread Per Engelbrecht
Hi all, Just to make sure nobody's sitting and wondering what happened with this thread, then here's a final mail with a short description of what's cooking right now and what was boiling back then. Below you'll find: - case - situation - conclusion - physical connection - hardware - a few

Re: BGP router now running desperately low on memory [epilogue]

2006-09-20 Thread Per Engelbrecht
Stuart Henderson wrote: On 2006/09/20 17:05, Per Engelbrecht wrote: The BGP box I have (OpenBSD 3.9 -stable / amd64 / bsd.mp) is a serverworks based box with 2GB of ram per cpu, Intel PRO/1000MT dual and quard server nic's, U320 SCSI etc., etc. - i.e. this is not about exhaustion due

BGP router running low on memory with 4GB of RAM ..!

2006-08-31 Thread Per Engelbrecht
Hi all, - OpenBSD 4.0 (build on snap from aug. 28 2006 23:10) - i386 - 'netstat -m', 'top' and 'dmesg' below. I've just rebuild one of my BGP routers and I'm having a real bad memory/performance issue with this box. (yes, Im running -current in production due to a Intel Pro/1000GT Quard card

Re: BGP router running low on memory with 4GB of RAM ..!

2006-08-31 Thread Per Engelbrecht
Henning Brauer wrote: * Per Engelbrecht [EMAIL PROTECTED] [2006-08-31 11:55]: Hi all, - OpenBSD 4.0 (build on snap from aug. 28 2006 23:10) - i386 - 'netstat -m', 'top' and 'dmesg' below. I've just rebuild one of my BGP routers and I'm having a real bad memory/performance issue

Re: BGP router running low on memory with 4GB of RAM ..!

2006-08-31 Thread Per Engelbrecht
Henning Brauer wrote: * Per Engelbrecht [EMAIL PROTECTED] [2006-08-31 13:45]: The kern.maxclusters are currently 6144 (standard) on the box. If I raise it to e.g. 16384 or 12288 I get a: sysctl: top level name 16384 is invalid - what would be a correct stepwise increasement of the state

Re: AS path prepending [OpenBGPD]

2006-08-18 Thread Per Engelbrecht
Claudio Jeker wrote: On Fri, Aug 18, 2006 at 07:25:17AM +0200, Per Engelbrecht wrote: Claudio Jeker wrote: On Thu, Aug 17, 2006 at 05:32:52PM +0200, Per Engelbrecht wrote: Hi all, (obsd3.8 / i386) So fare I've used 'weight' and 'localpref' between our peers in order to put

AS path prepending [OpenBGPD]

2006-08-17 Thread Per Engelbrecht
Hi all, (obsd3.8 / i386) So fare I've used 'weight' and 'localpref' between our peers in order to put one in favour of the other (mainly for pricing). Now I'm adding third peer and wan't to use AS path prepending in ordet to compensate for one of my old peer's inappropriate peering

Re: AS path prepending [OpenBGPD]

2006-08-17 Thread Per Engelbrecht
Claudio Jeker wrote: On Thu, Aug 17, 2006 at 05:32:52PM +0200, Per Engelbrecht wrote: Hi all, (obsd3.8 / i386) So fare I've used 'weight' and 'localpref' between our peers in order to put one in favour of the other (mainly for pricing). Now I'm adding third peer and wan't to use AS path

Intel pro/1000GT quad adapter [not working]

2006-08-03 Thread Per Engelbrecht
Hi all, (obsd3.9 / i386) I'm beefing up two of our bgp routers i.e. replacing Intel Pro/1000MT dual port server adapters with Intel Pro/1000GT quad-port server adapters. The GT card is the MT cards successor and should be backwards compatible, but my vanilla 3.9 installation 'no habla GT'.

Re: Intel pro/1000GT quad adapter [not working]

2006-08-03 Thread Per Engelbrecht
Stuart Henderson wrote: On 2006/08/03 15:54, Per Engelbrecht wrote: I'm beefing up two of our bgp routers i.e. replacing Intel Pro/1000MT dual port server adapters with Intel Pro/1000GT quad-port server adapters. The GT card is the MT cards successor and should be backwards compatible

Re: x.org

2006-06-15 Thread Per Engelbrecht
[EMAIL PROTECTED] wrote: Strange problem which appeared in 3.8 and appears in 3.9. When I type startx it does nothing. After waiting for half a minute i press cancel and only then it begins to do something but fails to start. When I open another tty and type there startx it starts normally. The

Re: erratic networking problem

2005-12-26 Thread per engelbrecht
Han Boetes wrote: Ted Unangst wrote: On 12/22/05, Han Boetes [EMAIL PROTECTED] wrote: This problem has been bugging me for month now. It started happening a month after 3.8 got tagged. At least, that's when I started noticing it. So it might be anything. But I suspect the OpenBSD side the

Re: erratic networking problem

2005-12-26 Thread per engelbrecht
Han Boetes wrote: per engelbrecht wrote: recently had a problem with a NFS server. Lousy performance when getting data (not putting) from most clients (but not all) until they discovered diffs in size of the transmit/receive bufferes. When fixed users felt like going from walking to flying

Re: ccd on active disks?

2005-11-18 Thread per engelbrecht
Markus Wernig wrote: Hi misc Is anybody aware of a document that describes how to ccd all slices (including /) after installation? I've installed 3.8 generic using just one of two identical disks. Now I need to mirror that disk onto the other one. I copied the disklabel from the active disk

Re: OpenBGPD and eBGP nexthop

2005-11-09 Thread per engelbrecht
Henning Brauer wrote: * per engelbrecht [EMAIL PROTECTED] [2005-11-07 19:01]: #neighbors and peers neighbor $peer0 { remote-as 6 descr eBGP local-address aaa.aaa.aaa.163 set nexthop aaa.aaa.aaa.161 multihop 10 set localpref 100 set weight 45 announce self } i highly

OpenBGPD and eBGP nexthop

2005-11-07 Thread per engelbrecht
Hi All [20051019 snap i386] Last night I switched from our old BGP setup (fbsd/zebra) to our new obsd/openbgpd. All but a single eBGP session to one of our peers was established. The eBGP peer switched between 'active' and 'connected' and I could ping both nexthop IP and peer IP but still no

Re: smartmontools (smartd) kills system [trace/gdb]

2005-11-06 Thread per engelbrecht
Kenneth R Westerback wrote: On Fri, Nov 04, 2005 at 03:22:33PM +0100, per engelbrecht wrote: Kenneth R Westerback wrote: On Fri, Nov 04, 2005 at 07:14:05AM +0100, per engelbrecht wrote: K WESTERBACK wrote: I'm interested. Ken Hi again Ken If you find anything of value

Re: bgpd.conf md5sig, iBGP and redistributing routes to/from ospf

2005-11-03 Thread per engelbrecht
Jesper Louis Andersen wrote: per engelbrecht wrote: Q: setting up iBGP I've used our own AS as 'remote-as' but can't find a 'no synchronization' option for this connection. Do I need it at all. Been poking around in /usr/src/usr.sbin/bgpd without solving it, but it's needed in zebra and Cisco

smartmontools (smartd) kills system

2005-11-03 Thread per engelbrecht
Hi all [20051019 snap i386] Running smartd on a SCSI/U320 based single-disk system kills the system at once! - dmesg further down. (sysctl hw.disknames=sd0,cd0,fd0) Snip of /etc/smartd.conf [...] #DEVICESCAN /dev/sd0c /dev/sd0c -m [EMAIL PROTECTED] -M test /dev/sd0c -d scsi -H -l error -l

smartmontools (smartd) kills system [trace/gdb]

2005-11-03 Thread per engelbrecht
Hi again Followup on first mail with only trace/gdb info: GNU gdb 6.3 Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type show copying to

Re: bgpd.conf md5sig, iBGP and redistributing routes to/from ospf [forgot to sign it]

2005-11-02 Thread per engelbrecht
Claudio Jeker wrote: On Wed, Nov 02, 2005 at 12:34:29AM +0100, per engelbrecht wrote: Hi all [20051019 snap i386] I've made a setup with two identical bgp routers. On each router there's 3 peers (BGP and eBGP), one failover (carp/iBGP/ospf) interconnecting these routers and finally pipes

bgpd.conf md5sig, iBGP and redistributing routes to/from ospf

2005-11-01 Thread per engelbrecht
Hi all [20051019 snap i386] I've made a setup with two identical bgp routers. On each router there's 3 peers (BGP and eBGP), one failover (carp/iBGP/ospf) interconnecting these routers and finally pipes backwards to the internal nets. Part of bgpd.conf further down. I'm replacing a single

bgpd.conf md5sig, iBGP and redistributing routes to/from ospf [forgot to sign it]

2005-11-01 Thread per engelbrecht
Hi all [20051019 snap i386] I've made a setup with two identical bgp routers. On each router there's 3 peers (BGP and eBGP), one failover (carp/iBGP/ospf) interconnecting these routers and finally pipes backwards to the internal nets. Part of bgpd.conf further down. I'm replacing a single

Re: ipmi(4)

2005-10-23 Thread per engelbrecht
Marco Peereboom wrote: Folks who keep track of cvs changes might have noticed a barrage of commits regarding ipmi(4). The driver is functionally complete but needs wide testing on both amd64 and i386 architectures. Jordan Hargrave (jordan@) wrote most of the code. Let's talk a bit about

Re: congrats on OpenBSD SAN... one little question

2005-10-21 Thread per engelbrecht
Nick Holland wrote: Jason Dixon wrote: On Oct 20, 2005, at 1:49 PM, Joe Advisor wrote: Congrats on the cool OpenBSD SAN installation. I was wondering how you are dealing with the relatively large filesystem. By default, if you lose power to the server, OpenBSD will do a rather long fsck

Re: iptables vs pf

2005-10-19 Thread per engelbrecht
Edy Purnomo wrote: i suggested to my friend to replace his linux box to openbsd. he uses mailnly for internet gateway : pf + squid proxy after 2 weeks later he switched it back linux and said : linux much faster to respond the http requests (he had a same configuration on openbsd, pf + squid

Re: pf and ospf

2005-10-18 Thread per engelbrecht
Claudio Jeker wrote: On Mon, Oct 17, 2005 at 04:32:26PM -0400, stan wrote: What ports do I need to open up on a pf firewall to allow it to send/recieve ospf? pass proto ospf Hm, that's very short (but parsing the rule work). Actually I'm building an OpenBSD/OpenBGPD/OSPF/PF [3.8

Re: pf and ospf

2005-10-18 Thread per engelbrecht
Henning Brauer wrote: * per engelbrecht [EMAIL PROTECTED] [2005-10-18 14:36]: Claudio Jeker wrote: On Mon, Oct 17, 2005 at 04:32:26PM -0400, stan wrote: What ports do I need to open up on a pf firewall to allow it to send/recieve ospf? pass proto ospf Hm, that's very short

Re: OpenBSD's 10th birthday

2005-10-18 Thread per engelbrecht
On 10/18/05, Theo de Raadt [EMAIL PROTECTED] wrote: Now it is really OpenBSD's 10th birthday ;) Greetings from Denmark and thank you all for OpenBSD (The TAO of Operatingsystems) and anything related. /per [EMAIL PROTECTED]

Re: OpenBGPD sizing

2005-09-30 Thread per engelbrecht
Claudio Jeker wrote: On Thu, Sep 29, 2005 at 02:39:15AM +0200, per engelbrecht wrote: per engelbrecht wrote: Stuart Henderson wrote: How much RAM might I want in order to accept full views from 2-3 peers? Thanks. Running 3 peers, full table (170.097 prefixes) uses 317MB ram all

Re: OpenBGPD sizing

2005-09-28 Thread per engelbrecht
per engelbrecht wrote: Stuart Henderson wrote: How much RAM might I want in order to accept full views from 2-3 peers? Thanks. Running 3 peers, full table (170.097 prefixes) uses 317MB ram all included. Just to avoid any misinterpretation, that is for the BGP part only. (.. ram all

Re: OpenBGPD sizing

2005-09-28 Thread per engelbrecht
Stuart Henderson wrote: How much RAM might I want in order to accept full views from 2-3 peers? Thanks. Running 3 peers, full table (170.097 prefixes) uses 317MB ram all included. /per [EMAIL PROTECTED]

Re: Nmap -O... will it be fixed some day?

2005-09-16 Thread per engelbrecht
Lukasz Sztachanski wrote: [...] doesn't think so; try to disable pf ;) Probably it's a matter of pf`s traffic normalization. [...] Or use; pass in quick on $xxx all allow-opts on int used specific(!) for nmap, snort et al. /per [EMAIL PROTECTED]

Re: ARP Poisoning

2005-08-08 Thread per engelbrecht
Artur Grabowski wrote: Miroslav Kubik [EMAIL PROTECTED] writes: Hello In our intranet is an attacker who flooding OpenBSD router by ARP requests. Due to this we have trouble with internet connection. Is there a way how to protect server against ARP poisoning attack? Excuse me? You have

Re: PHP or Mysql problem?

2005-06-16 Thread Per Engelbrecht
James Strandboge wrote: On Wed, 2005-06-15 at 11:30 +0200, Nico Meijer wrote: Hi Kiraly, mysql error: Can't create/write to file '/tmp/ #sql_4c99_0.MYD' (Errcode: 9) MySQL problem. Simple suggestions, not idiot-proof: I prefer this on OpenBSD 3.6 (should be same on 3.7): Add to

Re: MySQL issues

2005-06-09 Thread Per Engelbrecht
John Tate wrote: Right, I created a hardlink of the socket into /var/www/mysql/mysql.sock and changed this directive in php.ini to the following... mysql.default_socket = /var/www/mysql/mysql.sock I however could not find the my.cnf file, where is it on OpenBSD 3.6, I did a find / | grep

Re: MySQL upgrade to 4.1.12 packages files

2005-05-27 Thread Per Engelbrecht
Daniel Ouellet wrote: datasize, maxproc and openfiles values should then be ... ? Value really varies for your setup. But you can't run the full tests, or benchmark test with the default value. You can however run individual tests and they will terminate well, but the run-full-test will

Re: MySQL upgrade to 4.1.12 packages files

2005-05-26 Thread Per Engelbrecht
Daniel Ouellet wrote: Hi, [...] So, here is my first port to bring the in tree MySQL version to the latest stable recommended version 4.1.12. All works on AMD64 and I386. I also added one more package for the benchmark as well as I use that too to test my port. It's complete then :)

Re: Linuxwochen Vienna 2005, May 24 - 27, 2005, Vienna, Austria.

2005-05-25 Thread Per Engelbrecht
Wim Vandeputte wrote: Hey, I'm on my way to Vienna now for the Linuxwochen, May 24 - 27, 2005 Reinhard and me will be in the MuseumsQuartier from Wednesday 25 to answer your questions or just meet people for a chat and drinks Wim. Hi Wim A little off topic and for whatever it's worth;

Re: OBSD 3.7 ports -- mysql

2005-05-25 Thread Per Engelbrecht
Daniel Ouellet wrote: Just FYI. I am finishing up a port that hopefully will be put in for MySQL 4.1.12, their latest recommended stable version. Hi Daniel That's brilliant! So far all works well and pass all the tests suites stuff, with the exception that I have to create three hard

Re: OBSD 3.7 ports -- mysql

2005-05-25 Thread Per Engelbrecht
Daniel Ouellet wrote: Per Engelbrecht wrote: I'm about to launche a [3.7 AMD64 GENERIC.MP] mysql server (mysql backend for a lot of servers / production environment) and would like to test and use the new MySQL 4.1.12 I have the packages for i386 and amd64 ready for all clients

Re: apache2, webdav

2005-05-17 Thread Per Engelbrecht
Mike Gould wrote: Hi Has anyone got any advice for installing apache2 on openbsd 3.6 (stable). There seems to be a port for freebsd but nothing for openbsd. If I start from the apache source what kinds of things will I need to change? Hi Mike httpd on OpenBSD will get you all the way. It's

OpenBSD 3.7 and 'tcpdump' problems [amd64]

2005-05-09 Thread Per Engelbrecht
Hi all I'm having a peculiar problem with 'tcpdump' on a OpenBSD 3.7 (20050404 snap) amd64. ('dmesg, + 'sysctl' + 'fstab' are below) tcpdump with 0-2 flags = output. tcpdump with 3-x flags = no output. tcpdump with x flags and '-w' = non written at all. When 'tcpdump' is stopped I recive normal