OpenBSD kernel routing code has had ECMP for a little while, and in
4.3 ospfd started supporting it too.

You just need to enable multipath forwarding in /etc/sysctl.conf, 2 lines
below where you enable IP forwarding, and either reboot or manually set
the sysctl.

of course not. you disabled pf, then enabled it again. no ruleset

that is not the right way either. you disable pf, then load a new
ruleset and enable it again. the whole disable-enable dance it useless
and leaves a timeframe where no firewalling takes place, but traffic
flows. you just do pfctl -f /etc/pf.conf, it does the right thing for
you (load new ruleset, atomically switch to it, ditch old one)

--
Henning Brauer, hb@bsws.de, henning@openbsd.org
BS Web Services, http://bsws.de
Ful...

Hi,

I am trying to setup an active/active routing firewall setup with OSPF
so it load shares the traffic equally.

I am have created a test lab with IOS ASBR's that have
`default-information originate always` so I then can see 2 routes to
0.0.0.0/0.0.0.0 via 2 routes.

It seems there is a limitation with *bsd's kernels in that they do not
allow for ECMP routing. ie, they can have only one default route at one
time.

Does OpenOSPFd work around this (and I've just got my setup wrong) or
is the ...

Hum, so I should just ignore it! Well, at least it is now *reported*.

Thanks Marc and Stuart

-----Mensagem original-----
De: Stuart Henderson [mailto:stu@spacehopper.org]
Enviada: sexta-feira, 16 de Maio de 2008 13:43
Para: Pedro de Oliveira
Assunto: Re: Problems with apache vhosts

btw, it's fallout from the v6 support, I noticed it too.

One Laptop Per Child has been discussed on misc@ before, including decisions
made by the organization's technical leadership to sign NDAs for their
particular hardware choices on the XO laptop.

This slashdot posting:

http://tech.slashdot.org/article.pl?sid=08/05/15/2320243

references a New York Times article published today by Steve Lohr describing a
new agreement with Microsoft, to replace Linux in markets which prefer
Windows. The slashdot posting missed a couple of key points from the a...

Yes, the DocumentRoot ones I know that are because of the chroot.
But the VirtualHosts warnings shoulnt appear, and yes, it is working
correctly.

-----Mensagem original-----
De: owner-misc@openbsd.org [mailto:owner-misc@openbsd.org] Em nome de Stuart
Henderson
Enviada: sexta-feira, 16 de Maio de 2008 12:55
Para: misc@openbsd.org
Assunto: Re: Problems with apache vhosts

These are because of the chroot handling. You can just use the full path

These are probably bogus warnings, the vhosts alm...

yes, read the stuff posted earlier, it contains all relevant links. To
summarize, to silence a bogus valgrind warning, almost all seeding of
the PRNG used by openssl was removed.

-Otto

I think people are placing too much blame on valgrind. valgrind
doesn't tell you "Delete this line of code." It says "You are using
uninitialized memory here." The correct fix is to initialize the
memory, not delete the line of code. It's not about trusting or not
trusting the tool; it's about responding correctly.

I've seen innocuous valgrind reports, but never wrong ones. I also
saw a valgrind report ignored as innocuous because it didn't seem to
cause trouble, only to be the root cause of...

And now the social engineering fallout from it as well with all
the 'new SSL certificate'-style phishing that was in place before
this event...

--
Monty Brandenberg, Software Engineer MCB, Inc.
mcbinc@panix.com P.O. Box 426188
mcbinc@pobox.com Cambridge, MA 02142-0021
617.864.6907

On which version do you see this problem? Are you running -current? If

ok, can you please mail in private your full httpd configuration, so

http://blog.wired.com/defense/2008/05/air-force-mater.html

Then, when everyone will use OpenBSD, and have calmed down, the devs
will unhide a super-secret secretly hidden remote hole, and the
computers will turn into one big playground for the OpenBSD folks ;)

(just fooling around.. of course)...

Daniel

--
LEVAI Daniel
PGP key ID = 0x4AC0A4B1
Key fingerprint = D037 03B9 C12D D338 4412 2D83 1373 917A 4AC0 A4B1

Well, I can proudly say that I do own two business and one is 100%
OpenBSD only now for 10 years, and the second one only have 8 Solaris
servers left in it that sadly I can't switch to OpenBSD yet. The last
Microsoft server alive was kill a few years back, NT4.0 and we had a
party then. Never look back and sure never regret it either.

And we keep increasing the usage of OpenBSD as time allow us too and all
servers were replaced. Now it's slowly time for Cisco routers where
possible.

And ...

Depending on the origin and contents of the presentation you can :

1) Tell the originator to stop sending you MS docs
2) Load them in Google Docs (which should convert them)
3) Try OO.org conversion
4) Special case it
4a) Use your mac
4b) Use Windows in a QEMU image
4c) Use a not-connected windows machine + USB drive

Option 1) can be very effective, especially with the growing awareness
amongst Windows users (in corp- and govtland) of non-Windows users in
the rest of the w...

On Fri, 16 May 2008 22:35:00 +0200

I can almost second that except for the few cases in which we really
need to update stuff without fuzz, then we use Debian.

Don't you mean:
# attrib -h SuperSecretSecretlyHiddenRemoteHole

--
~michael
www.BSDqed.com

> I'm not sure that building the system from source is the primary target
man pages & faqs are amazing so it is quite impossible that things go wrong.
however there are no snapshots since 6 may and because many interesting things
were added to the tree building from the source was the only way to get in
my bad! my apologies! it will never happen!

Dear ,

We are in the development of Victoo - Free Tourism & Hospitality
Management Resources. I hope you like to join this online community at
www.victoo.com.

Below is our 3 market report documents of Victoo's Free Resources
Sharing:

Asia Resort Market Review A special report from Horwath HTL about Resort
Market Trends in Thailand, Philippine, Vietnam, Malaysia, Indonesia.

The Future Of The Hotel Industry "It doesn

The packages you built manually, assuming you used a virgin ports tree,
are no different from the distributed packages.

You can update safely from our tree. Things may fail if you run into
a package that's not distributed (java comes to mind), but it will fail
decently, and you can update the required packages manually, then proceed
with update.

You can also set FETCH_PACKAGES to Yes and update using the ports tree.

You can skip one release, the ports tree tools can deal with old stuff
wit...

It was finished fairly recently, and it's not 100% tested yet:

- it requires some cooperation between the ports tree and pkg_add:
if you run the ports tree from pkg_add, it means you already have a lock on
/var/db/pkg, so it requires -F nolock.

- it's also one of the reasons for stopping at the first PKG_PATH entry
that satisfies your request. SRC urls are a `last resort', when you can't
find the package and need to build it.

If you want to play with it, you can try adding an entry like:
s...

the problem is not in the user land.
the problem is in i386 pmap which abuses kmem_map that is there
for malloc(9)s use and allocates pv_entries from it.
this leads to enormous kmem_map fragmentation and unaccounted
allocations that does not show up in the vmstat and as well leads
to livelocks (sleeping on kmem_map) and out of space in kmem_map
panics as well. there is a number of measures to remediate the
situation proper
- convert pv_entries allocations to pool (i have a diff if you wanna)
- ba...

Can you please point me to where the diffs you refer to reside?

I'd definitely like to try them out.

Thank you,
Darrian

well, use a httpd that is better designed than apache. at least for the
static content that should be kinda easy with a couple of redirects and
a second IP. lighttpd is a good pick.

--
Henning Brauer, hb@bsws.de, henning@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting - Hamburg & Amsterdam

sure, they help. at least if you want to believe they do.

randomly pushing buttons you don't understand until it feels better is
going to help how?

btw, two of the three up there are completely unrelated to the problem
at hand and useless these days.

--
Henning Brauer, hb@bsws.de, henning@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting - Hamburg & Amsterdam