Re: Questions: Upgrade + Port Tree

2007-08-27 Thread Joachim Schipper
On Sun, Aug 26, 2007 at 04:17:57PM -0500, Sean Darby wrote: 1. Would it be possible to address the issue of new port tree in some more detail after system upgrade in the FAQ? I suppose it would be, but you're the first to ask this. (Somewhat surprisingly.) I have followed the steps provided

Re: IPsec on IPv6

2007-08-27 Thread Joachim Schipper
On Mon, Aug 27, 2007 at 09:09:33AM +1000, Leon yendor wrote: There does not seem to be much mention of the combination in man pages etc in 4.1. Is it really just like IPsec over IPv4 or ? On a user-interface level, yes. (On a protocol level, not exactly - IPv6 has built-in support for IPsec

Re: Backport drivers from 4.1 to 4.0

2007-08-27 Thread Kevin Cheng
Joachim and Nick, Thanks for the advice. I was just think about how to minimize the impact for production boxes based on previous release (4.0, 4.1...). Kevin -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joachim Schipper Sent: Monday, August

Re: Another qemu + OpenBSD host + networking + pf

2007-08-27 Thread Denny White
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, Aug 26, 2007 at 08:30:19PM -0700, Allie Daneman spake forth: Ok...first off I apologize for wasting bandwidth this morning looking for help...blame it on Sunday morning laziness. After googling and trying things I got my qemu working w/XP

Re: VPN Connection from 4.1 to WatchGuard

2007-08-27 Thread Claer
On Thu, Aug 23 2007 at 58:21, James Lepthien wrote: Hi again, Hi, just for your information and if anybody runs into the same problem. I found outr that there are a lot of sysctl values for IPSec which can be changed so that it is possible for me to not use the default timeout of 86400.

openssl: digital envelope routines:EVP_DecryptFinal:bad decrypt

2007-08-27 Thread Craig Skinner - Sun Microsystems - Linlithgow - Scotland
Hi lads, Having a wee bit of bother decrypting a dump before a restore following a 4.0 - 4.1 migration on i386. Different box, same hardware apart from a bigger disk. I've decrypted and restored successfully before and not had any probs, but was on the same 4.0 box. Could host keys be the

Re: nat ipv6 - ipv4 using pf

2007-08-27 Thread Brian Candler
On Sun, Aug 26, 2007 at 12:48:06PM +0200, alwin wrote: i have a webserver and i'm using ipv6 and ipv4 addresses. the apache server in openbsd does not support ipv6 so i tought i will use pf to nat the ipv6 address to the ipv4 address for port 80. but pf for some reason does not support this.

Re: nat ipv6 - ipv4 using pf

2007-08-27 Thread Olivier Mehani
Hello, On Sun, Aug 26, 2007 at 12:48:06PM +0200, alwin wrote: i have a webserver and i'm using ipv6 and ipv4 addresses. the apache server in openbsd does not support ipv6 so i tought i will use pf to nat the ipv6 address to the ipv4 address for port 80. but pf for some reason does not support

Scaling DNS with CARP + pf (+ hoststated ?)

2007-08-27 Thread reje
Hi there, I'm wondering is there a way to scale DNS service using OpenBSD's CARP and loadbalancing/pool features of pf ? How about hoststated(8) ? (as I know hoststated(8) doesn't support UDP right now) Here is the lab setup I tried but ran into problems: 1) setup two OpenBSD 4.1 servers with

Re: Radeon X1300 mobile + WXGA - out of luck?

2007-08-27 Thread Eric Elena
Le dimanche 26 aoC;t 2007 C 22:10 +0200, Joachim Schipper a C)crit : On Sun, Aug 26, 2007 at 06:39:13PM +0200, Joachim Schipper wrote: On Sun, Aug 26, 2007 at 03:38:47PM +0200, Eric Elena wrote: Le samedi 25 aoC;t 2007 C 22:41 +0200, Joachim Schipper a C)crit : I just got a laptop

Re: Scaling DNS with CARP + pf (+ hoststated ?)

2007-08-27 Thread Jason Dixon
On Mon, 27 Aug 2007 05:03:40 -0700 (PDT), reje [EMAIL PROTECTED] wrote: Hi there, I'm wondering is there a way to scale DNS service using OpenBSD's CARP and loadbalancing/pool features of pf ? How about hoststated(8) ? (as I know hoststated(8) doesn't support UDP right now) Is it really

Re: Scaling DNS with CARP + pf (+ hoststated ?)

2007-08-27 Thread Craig Skinner - Sun Microsystems - Linlithgow - Scotland
reje wrote: Hi there, I'm wondering is there a way to scale DNS service using OpenBSD's CARP and loadbalancing/pool features Don't ever load balance DNS in anyway. Read the DNS BIND book. -- Craig Skinner [EMAIL

Re: Software freedom

2007-08-27 Thread Artur Grabowski
Theo de Raadt [EMAIL PROTECTED] writes: If anyone had any doubt that our insistance on freedom was important, just read this. http://mail-index.netbsd.org/source-changes/2007/08/24/0027.html What is even more astounding is the incestious love-in these other groups have, with their

Re: Backport drivers from 4.1 to 4.0

2007-08-27 Thread Artur Grabowski
Kevin Cheng [EMAIL PROTECTED] writes: Hi Darrin, Thanks for reply. The reason is that we have bunch of files integrated with 4.0 and it would take us months to upgrade to 4.2 again. we just finished from 3.3 to 4.0 of upgrade few months ago, plus months of test to stabilize our 4.0 based

Re: Software freedom

2007-08-27 Thread bsdusr
rest of the kernel uses it to store the value of curlwp. Sam won't recompile the HAL for us (fair enough), and we can't modify the HAL to use another register because doing so could put us in breach of the license (v. crappy). So, do a save/set/restore on %s7 in KernIntr() How hard is it to

Re: Scaling DNS with CARP + pf (+ hoststated ?)

2007-08-27 Thread Craig Skinner - Sun Microsystems - Linlithgow - Scotland
reje wrote: Please take a look at this Cisco document regarding Scaling DNS services and CSM: http://www.cisco.com/application/pdf/en/us/guest/netsol/ns377/c649/cdccont_0900aecd800eb95d.pdf It a while since I had such a good laugh. The cisco doc above requires more than one device, but as

Re: nat ipv6 - ipv4 using pf

2007-08-27 Thread alwin
On Mon, Aug 27, 2007 at 01:32:20PM +0100, Brian Candler wrote: On Sun, Aug 26, 2007 at 12:48:06PM +0200, alwin wrote: i have a webserver and i'm using ipv6 and ipv4 addresses. the apache Brian. hmm yes, the ipv6 address wont fit in the ipv4 space, the other way around would work but it will

Re: Scaling DNS with CARP + pf (+ hoststated ?)

2007-08-27 Thread reje
Yes, we have that much DNS requests hiting our servers (we are not experiencing any DoS but from legitimate user requests :-) Furthermore, the DNS infrastructure tiemouts are unacceptable in our scenario. Registering additinal NS records is also unacceptable. FYI: our primary DNS experiences

Re: Software freedom

2007-08-27 Thread Theo de Raadt
rest of the kernel uses it to store the value of curlwp. Sam won't recompile the HAL for us (fair enough), and we can't modify the HAL to use another register because doing so could put us in breach of the license (v. crappy). So, do a save/set/restore on %s7 in KernIntr() How hard is

Support for soundblaster audigy SE ?

2007-08-27 Thread Nicolas Letellier
Hello, is anyone could confirm to me that this sound card is supported by OpenBSD (4.1) ? I couldn't see it in this page http://openbsd.com/i386.html But, this sound card could use same driver than other soundblaster cards ? Thanks for the information ! :-) Nicolas -- Nicolas Letellier,

Re: Scaling DNS with CARP + pf (+ hoststated ?)

2007-08-27 Thread reje
Please take a look at this Cisco document regarding Scaling DNS services and CSM: http://www.cisco.com/application/pdf/en/us/guest/netsol/ns377/c649/cdccont_0900aecd800eb95d.pdf p.s.- long ago read DNS BIND but this book assumes tolerance to DNS timeouts and availability of more than two DNS IP

148 Units for sale in Fort Smith, AR

2007-08-27 Thread CRRC Listings
148 units for sale in Fort Smith, Arkansas Brad James CRRC One West Mountain Suite 102 Fayetteville, AR 72701 (479) 739-4480 [EMAIL PROTECTED] To be removed send an email to [EMAIL PROTECTED] with unsubscribe in the subject line [demime 1.01d removed an attachment of type image/gif which

Re: Scaling DNS with CARP + pf (+ hoststated ?)

2007-08-27 Thread Craig Skinner - Sun Microsystems - Linlithgow - Scotland
reje wrote: Yes, we have that much DNS requests hiting our servers (we are not experiencing any DoS but from legitimate user requests :-) Furthermore, the DNS infrastructure tiemouts are unacceptable in our scenario. Registering additinal NS records is also unacceptable. FYI: our primary DNS

Fetch files on an intermitent connection.

2007-08-27 Thread Mayuresh Kathe
Hello, I'm on an OpenBSD 4.0 machine only intermitently connected to the Internet. I needed to get the Java port working on it. Is there any way to get the dependent files downloaded only while I have a connection, to be compiled later. Best, ~Mayuresh

Re: nat ipv6 - ipv4 using pf

2007-08-27 Thread Christian Weisgerber
alwin [EMAIL PROTECTED] wrote: anyway, thanks for the good suggestions, i will have a look at apache2 (since i'm running svn too, this might be a good idea), or else i will simply drop ipv6 for the http Alternatively, use a different server program. bozohttpd, lighttpd, and thttpd are in the

openbsd instead of cisco vpn client

2007-08-27 Thread Paolo Supino
Hi I came across the following situation: there's network where several employees have access to a client of theirs using Cisco VPN clients. To centralize and ease administration I want to put in place an OpenBSD box that will create a single VPN. The client is so bearucratic that by the time

Re: openbsd instead of cisco vpn client

2007-08-27 Thread Darren Spruell
On 8/27/07, Paolo Supino [EMAIL PROTECTED] wrote: Hi I came across the following situation: there's network where several employees have access to a client of theirs using Cisco VPN clients. To centralize and ease administration I want to put in place an OpenBSD box that will create a

Re: Support for soundblaster audigy SE ?

2007-08-27 Thread Alexandre Ratchov
On Mon, Aug 27, 2007 at 04:53:14PM +0200, Nicolas Letellier wrote: Hello, is anyone could confirm to me that this sound card is supported by OpenBSD (4.1) ? I couldn't see it in this page http://openbsd.com/i386.html But, this sound card could use same driver than other soundblaster cards

Re: Backport drivers from 4.1 to 4.0

2007-08-27 Thread Kevin Cheng
Artur, Thanks, Upgrade code based on release of obsd is easy, but it would a big job to maintain early released of products based on previous version of obsd. For example, we would maintain 8 version of products from 3.3 to 4.0 if codes are upgraded every half years. Kevin you would need

maybe OT 3 year anniversay of Chuck Yerkes death

2007-08-27 Thread ACP
I don't think it's off topic but others might. I'm writing this post to remember Chuck Yerkes, a long time contributor to the [EMAIL PROTECTED] list. http://www.sage.org/about/yerkes.html Chuck died 3 years ago this past weekend while riding his motorcycle.

Re: nat ipv6 - ipv4 using pf

2007-08-27 Thread Brian Candler
On Mon, Aug 27, 2007 at 04:36:06PM +0200, alwin wrote: the faithd daemon als looks quit cool, although it maps the other way around, it will be usefull when you have an ipv6 only network. When faithd receives TCPv6 traffic, faithd will relay the TCPv6 traffic to TCPv4. Hmm, sounds

Re: Backport drivers from 4.1 to 4.0

2007-08-27 Thread Darren Spruell
On 8/27/07, Kevin Cheng [EMAIL PROTECTED] wrote: Artur, Thanks, Upgrade code based on release of obsd is easy, but it would a big job to maintain early released of products based on previous version of obsd. For example, we would maintain 8 version of products from 3.3 to 4.0 if codes are

Re: maybe OT 3 year anniversay of Chuck Yerkes death

2007-08-27 Thread Kit Halsted
Thanks for reminding us, Diana. Chuck died 20 days after my first motorcycle lesson; I had been meaning to send him an email telling him I was learning to ride. Here's one more pint glass being raised in Chuck's memory tonight. -Kit At 1:08 PM -0600 8/27/07, ACP wrote: I don't think it's

Re: Questions: Upgrade + Port Tree

2007-08-27 Thread Sean Darby
Thank you to all for the excellent input. I'm now officially upgraded. It feels good, nice and... fresh! I've started reading/learning about CVS. Again, thank you all! Sean Joachim Schipper wrote: On Sun, Aug 26, 2007 at 04:17:57PM -0500, Sean Darby wrote: 1. Would it be possible to

Re: Backport drivers from 4.1 to 4.0

2007-08-27 Thread Steve Shockley
Kevin Cheng wrote: Upgrade code based on release of obsd is easy, but it would a big job to maintain early released of products based on previous version of obsd. For example, we would maintain 8 version of products from 3.3 to 4.0 if codes are upgraded every half years. Why? If you do an

FOSS Open Hardware Documentation

2007-08-27 Thread João Salvatti
http://blogs.sun.com/webmink/entry/open_chips_wiki_open http://wikis.sun.com/display/FOSSdocs/Home -- Joco Salvatti Undergraduating in Computer Science Federal University of Para - UFPA web: http://www.openbsd-pa.org e-mail: [EMAIL PROTECTED]

Re: OpenBSd or HP-UX?

2007-08-27 Thread Alvaro Mantilla Gimenez
Travers Buda wrote: *snip* Just tell him that OpenBSD in the stead of HP-UX will be cheaper, faster to setup, and easier to maintain (because of your experience with Open.) Both OpenBSD and HP-UX can do LDAP, yes, but it's yourself that makes the difference here. Oh, and you have much more

Re: OpenBSd or HP-UX?

2007-08-27 Thread Alvaro Mantilla Gimenez
Marc Balmer wrote: We run an OpenLDAP installation on OpenBSD that is fully synchronized on two servers (one master, one slave) for the public schools here. ~15'000 accounts and all important systems (email, fileserver, even the ~80 firewalls, login, etc.) pull their data from it. Can you

Re: OpenBSd or HP-UX?

2007-08-27 Thread Jacob Yocom-Piatt
Alvaro Mantilla Gimenez wrote: Travers Buda wrote: *snip* Just tell him that OpenBSD in the stead of HP-UX will be cheaper, faster to setup, and easier to maintain (because of your experience with Open.) Both OpenBSD and HP-UX can do LDAP, yes, but it's yourself that makes the difference

Re: OpenBSd or HP-UX?

2007-08-27 Thread Alvaro Mantilla Gimenez
Jacob Yocom-Piatt wrote: tried to take a bit of a side adventure and get HP-UX going on a PA-RISC machine and it's no walk in the park. for cost, support, compatibility and simplicity reasons i've abandoned the project and decided to use other OSes instead. How was your adventure?? Can

Re: OpenBSd or HP-UX?

2007-08-27 Thread Jason Dixon
On Aug 27, 2007, at 8:57 PM, Jacob Yocom-Piatt wrote: Alvaro Mantilla Gimenez wrote: Travers Buda wrote: *snip* Just tell him that OpenBSD in the stead of HP-UX will be cheaper, faster to setup, and easier to maintain (because of your experience with Open.) Both OpenBSD and HP-UX can do

Re: OpenBSd or HP-UX?

2007-08-27 Thread Alvaro Mantilla Gimenez
J.C. Roberts wrote: The reasoning for HP-UX is brand name recognition, vendor support, and of course job security -when something goes wrong, your boss can blame the brand name vendor in hopes of saving his own ass. And this is, i think, the main point for my boss and his not understanding

Re: OpenBSd or HP-UX?

2007-08-27 Thread J.C. Roberts
On Monday 27 August 2007, Alvaro Mantilla Gimenez wrote: J.C. Roberts wrote: The reasoning for HP-UX is brand name recognition, vendor support, and of course job security -when something goes wrong, your boss can blame the brand name vendor in hopes of saving his own ass. And this is, i

syskonnect SK-9E22

2007-08-27 Thread Tom Bombadil
Greetings all... We bought a SK-9S22 (pci-x) card a while ago, and even though 'man msk' listed it as working on 4.0, it actually didn't work. So, now we are thinking about a SK-9E22 (pci-e) for another box, and we think we should ask if this model is working on 4.1 before actually spending any

Re: OpenBSd or HP-UX?

2007-08-27 Thread Darren Spruell
On 8/27/07, Alvaro Mantilla Gimenez [EMAIL PROTECTED] wrote: Travers Buda wrote: *snip* Just tell him that OpenBSD in the stead of HP-UX will be cheaper, faster to setup, and easier to maintain (because of your experience with Open.) Both OpenBSD and HP-UX can do LDAP, yes, but it's

Re: Software freedom

2007-08-27 Thread Damien Miller
On Mon, 27 Aug 2007, [EMAIL PROTECTED] wrote: rest of the kernel uses it to store the value of curlwp. Sam won't recompile the HAL for us (fair enough), and we can't modify the HAL to use another register because doing so could put us in breach of the license (v. crappy). So, do a

Re: FOSS Open Hardware Documentation

2007-08-27 Thread Karl Sjödahl - dunceor
On 8/27/07, JoC#o Salvatti [EMAIL PROTECTED] wrote: http://blogs.sun.com/webmink/entry/open_chips_wiki_open http://wikis.sun.com/display/FOSSdocs/Home -- Joco Salvatti Undergraduating in Computer Science Federal University of Para - UFPA web: http://www.openbsd-pa.org e-mail: [EMAIL