login
Header Space

 
 

openbsd-misc mailing list

FromSubjectsort iconDate
Lord Sporkton
ospfd fib vs database
I have ospf running between OpenBSD 4.2 GENERIC.MP#304 i386 and a 1721 Cisco running c1700-k9o3sy7-mz.123-23.bin. "ospfctl show fib ospf" shows 2 networks, the loopbacks and the gre link however "ospfctl show database area 0.0.0.0" shows only the loopbacks, why doesn't the database show the gre link, and how is there an ospf route in the fib when its not in the database? Thank you for any help # ospfctl show data area 0.0.0.0 Router Link States (Area 0.0.0.0) Link ID ...
Nov 16, 6:45 pm 2007
Sevan / Venture37
Re: Ion3 port is obsolete
why cygwin & not uwin or sfu?? cygwin is such a poor performer _________________________________________________________________ Get free emoticon packs and customisation from Windows Live. http://www.pimpmylive.co.uk
Nov 16, 4:50 pm 2007
Mattieu Baptiste
IPsec and 4.2
Hi all, I try since a few days to setting up IPsec for my wireless network. The internet gateway has a ral(4) device : mattieu@meule: ~ $ ifconfig ral0 ral0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 lladdr 00:18:f8:a5:f3:34 description: WLAN Link groups: wlan media: IEEE802.11 autoselect hostap (autoselect mode 11b hostap) status: active ieee80211: nwid NUFNUFNUF chan 11 bssid 00:18:f8:a5:f3:34 100dBm inet6 fe80:...
Nov 16, 4:17 pm 2007
Juan Miscaro
securing OpenBSD wireless network
Hi gang, So I'm setting up my first wireless network for a small business with OpenBSD acting as internet gateway. I am familiar with OpenBSD as gateway but not in the wireless context. I picked myself up a card that the docs say is supported (Linksys WMP54G) and will be installing 4.2 from my CD this evening. At this point I'm asking myself the obvious question. How do I secure my network? I see the authpf is used a lot but is there anything else I can do? What of VPN? If so, what impleme...
Nov 16, 3:39 pm 2007
Chris Cameron
Helping with Softraid testing
I'm in a good position to test Softraid on an AMD and an UltraSPARC, however I've realized I don't know a lot about it (what -exactly- it's working to accomplish, and commands to use). Is there an overview of Softraid to get me started so I can be of some use? Chris
Nov 16, 2:29 pm 2007
Marco Peereboom
Re: Helping with Softraid testing
I'll take this as the documentation isn't good enough. Can you point me to the area that isn't clear?
Nov 16, 2:34 pm 2007
Chris Cameron
Re: Helping with Softraid testing
I thought the manpage was just covering things that worked well, and in the code itself were things waiting to be tested better. It shows a "3 chunk raid 1" setup, but doesn't mention anything about hot standby. I'm not aware of 3 disk RAID 1 otherwise. Also, for some reason (I think past misc@ posts) I was under the impression that this would be similar to Vinum. From what I'm hearing back it's actually a RAIDFrame replacement. The manpage doesn't really go over it's final goal. Testing r...
Nov 16, 4:26 pm 2007
Marco Peereboom
Re: Helping with Softraid testing
Current goal is to get to a functional raid 1 and then we'll move on to It does a little. Some drivers are more reliable than other under failure conditions. The crappy part is that there is only so much we
Nov 16, 4:21 pm 2007
Nick Guenther
Re: Helping with Softraid testing
RAID lets you cat disks together in a variety of ways: for redundancy, for extending the sizes, &c. softraid is a new feature just released in 4.2 that supports on of these ways: 'mirroring'. Mirroring writes every piece of data to multiple disks, so that if any of them fail the data is not lost, and the disk can be replaced more or less transparently. You'll need to get a bunch of harddrives of different and the same sizes, and plug them all in. Then follow the instructions here: [ message continues ]
" title="http://www...">http://www...
Nov 16, 2:39 pm 2007
Christian Weisgerber
Re: Performance problem with CF card on AMD CS5536 IDE
I've started playing with a CF in a bigger machine, and the results are rather disappointing. wd1 at pciide2 channel 0 drive 0: <TRANSCEND> wd1: 1-sector PIO, LBA, 7775MB, 15924384 sectors wd1(pciide2:0:0): using PIO mode 4, Ultra-DMA mode 4 This is a new "266x" CF. Write performance is in the 200..300 kB/s range. It takes six hours or so to copy the OpenBSD CVS repository on that drive. Sequential read performance tops out at about 2300 kB/s. Random access read throughput--running C...
Nov 16, 12:02 pm 2007
Jan Stary
Re: Performance problem with CF card on AMD CS5536 IDE
In my reply to Stefan, it's a SanDisk Extreme III (2GB). Jan
Nov 16, 3:16 pm 2007
Paul de Weerd
Re: Performance problem with CF card on AMD CS5536 IDE
I have a SanDisk Extreme III 2GB (at least I think it's III) in my Soekris net5501 : [weerd@tuna] $ dd if=/dev/zero of=nulls bs=65536 count=1600 1600+0 records in 1600+0 records out 104857600 bytes transferred in 8.604 secs (12186647 bytes/sec) [weerd@tuna] $ dd if=nulls of=/dev/null bs=65536 1600+0 records in 1600+0 records out 104857600 bytes transferred in 9.118 secs (11499110 bytes/sec) [weerd@tuna] $ dmesg | grep SanDisk wd0 at pciide0 channel 0 drive 0: <SanDisk SDCFX3-2048> [weerd...
Nov 16, 3:07 pm 2007
Jan Stary
Re: Performance problem with CF card on AMD CS5536 IDE
... and here it is running the same commands as Paul, on an ALIX.1C Jan $ dd if=/dev/zero of=nulls bs=65536 count=1600 1600+0 records in 1600+0 records out 104857600 bytes transferred in 7.678 secs (13655702 bytes/sec) $ dd if=nulls of=/dev/null bs=65536 1600+0 records in 1600+0 records out 104857600 bytes transferred in 11.862 secs (8839294 bytes/sec) $ dd if=nulls of=/dev/null bs=65536 1600+0 records in 1600+0 records out 104857600 bytes transferred in 11.596 secs (9042519 bytes...
Nov 16, 3:34 pm 2007
Stuart Henderson
Re: Performance problem with CF card on AMD CS5536 IDE
My sandisks are quite fast (8MB/s or more, though I just had to throw a fairly new SDCFJ-1024 out with read errors?!) - I have a newish kingston which is slow (1.5MB/s "elite pro cf/1GB-S 50x") - and a bunch of assorted old 32-64MB cards, the majority of which are reasonably quick (fujifilm, sandisk and pqi come to mind)
Nov 16, 3:52 pm 2007
Christoph Leser
isakmpd: lost vpn connection
I have a problem with ipsec/isakmpd. I have setup about 20 vpn's to various other sites, all using tunnel mode ( active ). All but one are working fine. One connection exhibits the following behaviour: After isakmpd starts, the vpn starts correctly, main and quick mode are successfully negotiated and I can ping or ssh the remote site. I can see the route with netstat -rnf encap and the SA and FLOW corresponding to this vpn in ipsecctl -s output. When I leave the connection idle for some t...
Nov 16, 10:32 am 2007
Stefan Klein
Re: Performance problem with CF card on AMD CS5536 IDE
Hi Jan, Sorry for the delay, I overlooked your reply.... If I use exactly the same commands / mount options as you I get less than 1MB/s.... I know that I cannot expect a "good" performance with the CF card, but 5MB/s would just be fine :-) What else can I try? Greetings Stefan My config: fstab: /dev/rd0a / ffs rw,noatime 0 0 # kernel rd/rootfs /dev/svnd0a /usr ffs noauto,ro,noatime,nodev 0 0 /dev/svnd1a /usr/local/sepp ffs noaut...
Nov 16, 9:10 am 2007
Stuart Henderson
Re: Performance problem with CF card on AMD CS5536 IDE
You can expect very good performance in some circumstances A different card .. I just tried with two different random cards from my desk, one is 3x the speed of the other. It's not a CF, but by far the slowest flash device I have is an industrial DOM. Really painfully slow - untarring baseXX.tgz takes getting on for an hour. You might do better with consumer cards ..
Nov 16, 9:39 am 2007
mvdeventer
Re: Please send email directly to misc@openBSD.org (no cc p...
-----Original Message----- From: owner-misc@openbsd.org [mailto:owner-misc@openbsd.org] On Behalf Of Weldon Goree Sent: 16 November 2007 08:20 AM To: Piet Slaghekke Cc: misc@openbsd.org Subject: Re: Please send email directly to misc@openBSD.org (no cc please) I would like the moon to move closer to the Earth please, so I can study it more effectively. Why did the Apollo guys not think of this? Think of the fuel savings!
Nov 16, 5:12 am 2007
Piet Slaghekke
Re: Please send email directly to misc@openBSD.org (no cc p...
(-: Ok, Ok I love the responses to this request and I get the point (-: Not such a good request. I have listed the responses here (-: (note: classifications are the sole opinion of this writer and may or may not be shared by others) thanks everyone for the help on the "removing a list users" questions, I greatly appreciate it! (-: Helpful (thanks Han & Tonnere!) "I've been struggling with this as well, and you really can't ask all those people to comply with your wishes. ...
Nov 16, 10:10 am 2007
frantisek holop
nptd regression in 4.2
hi there, i have upgraded to 4.2 and because i am frequently without net access i see the following: at startup time ntpd just hangs indefinitely and must be terminated. /etc/rc.conf.local: ntpd_flags="-s" /etc/hostname.rl0: dhcp NONE NONE NONE otherwise a stock 4.2 install. could someone test this before i submit a bug report? -f -- so you think you can tell heaven from hell.
Nov 16, 6:43 am 2007
Otto Moerbeek
Re: nptd regression in 4.2
I can reproduce. If there's no active network interface, the poll() in main() generates a POLLOUT event (because there's a request to send out), but msgbuf_write() returns 0, so the outgoing request stays in the buffer, causing a loop, because the next poll will generate a POLLOUT event. Are you sure this did not happen before? I'll think about a diff. -Otto
Nov 16, 7:38 am 2007
Alexander Hall
Re: nptd regression in 4.2
I'm quite certain that this issue has indeed existed for a while now, though I cannot say since when exactly. Has beaten me a few times, for example when using a local nameserver in dhclient.conf ("supersede domain-name-server 127.0.0.1"), but forgetting to enable named in rc.conf.local... For now, I'm using rdate (for the big leap) + ntpd. /Alexander
Nov 16, 10:52 am 2007
Otto Moerbeek
Re: nptd regression in 4.2
This analysis is not completely correct (the send acually succeeds).
Nov 16, 8:00 am 2007
Toni Mueller
Re: nptd regression in 4.2
Hi, I've removed the '-s' flag for this reason, although I would very much prefer to have it in place in the case that I have net access. I don't know whether it would be feasible for ntpd to see whether there's an appropriate route, and whether the relevant interfaces are up. Best, --Toni++
Nov 16, 7:30 am 2007
Henning Brauer
Re: nptd regression in 4.2
the problem is the dns lookup that blocks the parent process. i have an idea how to solve that, but as usual, short of time. -- Henning Brauer, hb@bsws.de, henning@openbsd.org BS Web Services, http://bsws.de Full-Service ISP - Secure Hosting, Mail and DNS Services Dedicated Servers, Rootservers, Application Hosting - Hamburg & Amsterdam
Nov 16, 11:25 am 2007
Otto Moerbeek
Re: nptd regression in 4.2
In my test case dns is not the real problem, the dns requests are failing as they should. See the diff I sent earlier. -Otto
Nov 16, 12:48 pm 2007
frantisek holop
Re: nptd regression in 4.2
it definitely worked in 4.1 even with "-s". -f -- so crowded in here, i must go outside to change my mind!
Nov 16, 7:40 am 2007
Otto Moerbeek
Re: nptd regression in 4.2
It is this commit, which manages to keep the outging buffer full. http://www.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/ntpd/client.c.diff?r1=1.75&r2=1... Reverting it makes the problem go away. Still thinking how to solve this. -Otto
Nov 16, 8:13 am 2007
Otto Moerbeek
Re: nptd regression in 4.2
This seems to work for me, -Otto Index: client.c =================================================================== RCS file: /cvs/src/usr.sbin/ntpd/client.c,v retrieving revision 1.76 diff -u -p -r1.76 client.c --- client.c 1 May 2007 07:40:45 -0000 1.76 +++ client.c 16 Nov 2007 12:37:25 -0000 @@ -123,7 +123,8 @@ client_query(struct ntp_peer *p) int tos = IPTOS_LOWDELAY; if (p->addr == NULL && client_nextaddr(p) == -1) { - set_next(p, scale_interval(INTERVAL_QUERY_AGG...
Nov 16, 8:39 am 2007
Edd Barrett
Softraid Experimentation
Hi there, I am playing with softraid. So far it seems very good. I have a 3 disk volume. If I remove one disk from the machine and boot it up, this is the result: ---8<--- # dmesg | grep softraid0 softraid0 at root softraid0: not assembling partial disk that used to be volume 0 # bioctl softraid0 # ---8<--- Is this correct behavior or is that part not implemented yet? Ideally the volume should continue to function but in some "degraded" state? Is that right? Thanks -- Bes...
Nov 16, 6:42 am 2007
Marco Peereboom
Re: Softraid Experimentation
This is a feature I have not implemented yet. It is part of the rebuild strategy that I am working out. Surprisingly this is one of the hardest
Nov 16, 1:49 pm 2007
Nick Guenther
Re: Softraid Experimentation
Hijacking the thread a bit: Do all your disks need to be the same size to use softraid? softraid(4) and bioctl(8) do not mention anything about that. -Nick
Nov 16, 12:01 pm 2007
Marco Peereboom
Re: Softraid Experimentation
No you don't. Softraid will complain about asymmetric disks on creation
Nov 16, 1:50 pm 2007
Nick Guenther
Re: Softraid Experimentation
So what happens in that case? If data is written to the end of the larger disk, is it just silently not mirrored on the smaller? -Nick
Nov 16, 2:34 pm 2007
Marco Peereboom
Re: Softraid Experimentation
Oh I guess I should elaborate on that :-) What happens is that the larger disks gets coerced into a smaller size. So you lose the excess capacity at the end of the disk. I am actually working on a raid concat that you can use to claim all unused space and make it into a larger disk but my first priority is getting softraid up to snuff so that we can get it enabled. When that happens we can move forward with new raid types and other neat features.
Nov 16, 3:03 pm 2007
Edd Barrett
Re: Softraid Experimentation
I assume so. I could not work out a way of rebuilding inconsistent volumes either, but what I see so far looks very promising compared to raidframe. For what it is worth, here are my tests: http://vext01.blogspot.com/2007/11/playing-with-new-softraid-driver-in.html -- Best Regards Edd --------------------------------------------------- http://students.dec.bournemouth.ac.uk/ebarrett
Nov 16, 12:45 pm 2007
Marco Peereboom
Re: Softraid Experimentation
Neat but I think your expectations of RAID are slightly off. When you corrupt the disk from underneath softraid it can not detect that at runtime. The only hope you have is that the metadata got corrupt so that at least you get warned that something went severely wrong. You did find a bug; that is removing the disk and rebooting it and then reinserting it. I am not sure how you did it but it should have complained that your raid set is only partially there. Can you
Nov 16, 2:00 pm 2007
Edd Barrett
Re: Softraid Experimentation
Well I did this in qemu, so I just halted the VM and booted it again with one disk absent. This should be the same as physically detaching the disk in a real system. Does this help? Thanks for the great work. I'll be around to test if I am needed. -- Best Regards Edd --------------------------------------------------- http://students.dec.bournemouth.ac.uk/ebarrett
Nov 16, 3:51 pm 2007
Piet Slaghekke
Please send email directly to misc@openBSD.org (no cc please)
I like to filter my openBSD emails and the only way I can do it is if everyone send their email with misc@openBSD.org in the " To " field. Please send email To misc@openBSD.org and do not CC it to this address. Thanks!
Nov 16, 1:28 am 2007
Frank Bax
Re: Please send email directly to misc@openBSD.org (no cc p...
Why has no-one mentioned filtering on X-Loop tag? It works for me.
Nov 16, 11:21 am 2007
Han Boetes
Re: Please send email directly to misc@openBSD.org (no cc p...
I've been struggeling with this as well, and you really can't ask all those people to comply with your wishes. You should use a mailfilter, for example like this with maildrop: R='/home/han/Mail' # Drop all messages to misc@ in their own specific mailbox. if (/^Sender:.*misc.*@openbsd.org$/) to $R/openbsd-misc # You don't want to miss you are CC-ed after all. You just don't # want them in your maildir. if ( /^(Cc|To).*(openbsd|misc|tech|bugs|gnats|source-changes)@/) { to $...
Nov 16, 8:55 am 2007
Piet Slaghekke
Re: Please send email directly to misc@openBSD.org (no cc pl...
(-: OK, OK, I love the responses to this request and I get the point (-: Not such a good request. I have listed the responses here (-: *(note: classifications are the sole opinion of this writer and may or may not be shared by others)* ** *thanks everyone for the help on the **"removing a list users" questions, I greatly appreciate it! (-:* *Helpful (thanks Han & Tonnere!)* "I've been struggling with this as well, and you really can't ask all those people to comply with you...
Nov 16, 10:56 am 2007
Nick Holland
Re: Please send email directly to misc@openBSD.org (no cc p...
wow. You ask one novice question and you become an expert on mail list etiquette? You have the nerve to dictate how people help you for free? You can't imagine how offensive that is. I've got a really interesting idea for a filter... Nick.
Nov 16, 8:00 am 2007
Weldon Goree
Re: Please send email directly to misc@openBSD.org (no cc p...
If only there were mail clients that allowed one to filter on To: or Cc:...
Nov 16, 2:20 am 2007
Richard Toohey
Re: Please send email directly to misc@openBSD.org (no cc p...
And automatically added <sarcasm> dripping </sarcasm> tags?
Nov 16, 4:26 am 2007
Karl Sjodahl - dunceor
Re: Please send email directly to misc@openBSD.org (no cc pl...
Can people please only mail stuff to misc that I'm interested in? Doh.
Nov 16, 4:26 am 2007
Tonnerre LOMBARD
Re: Please send email directly to misc@openBSD.org (no cc p...
Salut, What about fixing your filter instead? If you use e.g. procmail, you just need to use the TO spec. Tonnerre [demime 1.01d removed an attachment of type application/pgp-signature]
Nov 16, 2:15 am 2007
Jonathan Stewart
Using CBQ with variable upload bandwidth
Is it possible to use CBQ as a weighted round robin queue when the upload bandwidth is highly variable? This is on FreeBSD RELENG_7 which I believe uses pf from OpenBSD 4.1 Example queue idea: Root Queue (1Mbps) big_spenders (500Kbps, priority 5, borrow) normal_folk (500Kbps, priority 3, borrow) Based on my reading of the FAQ it would seem that if your actual upload is less than the queue is configured for the queue would always be congested. ""Queues with a higher priority are prefe...
Nov 15, 9:56 pm 2007
Calomel
Re: Using CBQ with variable upload bandwidth
Jonathan, HFSC will do what you want. You could setup a queue using the "realtime" directive to guarantee bandwidth to the big_spenders. Lets say 60% of the total connection speed. Then assign 20% to the normal_folk. Both queues can borrow from each other, but will always guarantee the amount of bandwidth specified by "realtime". See if this link helps you out. Hierarchical Fair Service Curve (HFSC) of OpenBSD http://calomel.org/pf_hfsc.html -- Calomel @ http://calomel.org Open Source Rese...
Nov 16, 12:19 am 2007
Jonathan Stewart
Re: Using CBQ with variable upload bandwidth
I though about doing something like that but the usable upload is so variable that 60% could completely knock the normal_folk off when it gets congested. I have 256kbit up right now and get anywhere from as low as 64kbit to 160kbit+ actual throughput depending on how busy the system is. If PF had a weighted round robin queuing system that would be almost perfect because then it would scale with the amount of bandwidth available. Ideally something that says if one queue has priority 5 and another...
Nov 16, 1:00 am 2007
previous daytodaynext day
November 15, 2007November 16, 2007November 17, 2007
speck-geostationary