Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Greg Thomas
On 6/10/05, Sascha Ramin <[EMAIL PROTECTED]> wrote:
> On Fri, 10 Jun 2005, R.Payne wrote:
> 
> > "We are the woorrrld.  We are the childrennn..."
> >
> > Put a sock in it already.
> 
> 
> could someone? its clear that people feel differently about this, and
> discussing it is proving to be  completly counter productive as its just
> creating more clutter that we had hoped to avoid.
> 
> there are two facts,
> 
> #1 people say misc@ is unfriendly.
> 
> #2 people say misc@ is friendly.
> 

Yes.  And those who say misc@ is unfriendly are welcome to leave and
spare us this pap.

Greg



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Sparc Urani
why are people being hard to accept facts like these. yes, people has
different views to everything most especially the discussions (and
sometimes somebody is asking for helps) being thrown to the [EMAIL PROTECTED]

since OpenBSD should always be the point of discussions always at
misc@, we should not limit it for the beginners who are willing to
learn on the OS. they someday will be the other batch to advocate it
and spread the word that "OpenBSD is the most secure OS on the planet.
unless the developers are trying to keep the system distributed to
limited number of users?

people say it is unfriendly because beginners were mis-treated the way
they expected. you have two options for this, if you think you can
help then throw your line, otherwise ignore the message. others say it
is friendly because the discussions were tough enough that experts in
this list are willing to participate.

no one can stop and change the way the OpenBSD team work on the
development and improvement of the system. they are more knowledgable
than us, no questions ask.

cheers,
-Sparc


On 6/11/05, Sascha Ramin <[EMAIL PROTECTED]> wrote:
> On Fri, 10 Jun 2005, R.Payne wrote:
> 
> > "We are the woorrrld.  We are the childrennn..."
> >
> > Put a sock in it already.
> 
> 
> could someone? its clear that people feel differently about this, and
> discussing it is proving to be  completly counter productive as its just
> creating more clutter that we had hoped to avoid.
> 
> there are two facts,
> 
> #1 people say misc@ is unfriendly.
> 
> #2 people say misc@ is friendly.
> 
> we can therefor come to the conclusion that people say a lot fo things.
> 
> but i hardly think this is the right place to discuss all of them,
> instead OpenBSD should be the topic of discussion.
> 
> end of story, thread etc.
> 
> sbr.
> 
> >
> > -f wrote:
> >> hello Rick, and others,
> >>
> >>
> >> i just wanted to say, that you almost enteriley missed
> >> my point.  i never said leave the young in a bubble,
> >> but 40 people yelling at you and calling names is
> >> not funny either.  i didn't realize all the people here
> >> were so strong personalities in their teens, my mistake.
> >>
> >> only a sith deals in absolutes, to quote a very bad movie.
> >>
> >> i did not suggest let's make misc into a linux-newbie
> >> style lounge.  i just wanted to point out that you
> >> never know what damage you make.  just keep in mind.
> >>
> >>
> >> anyway, have a nice weekend.
> >>
> >> -f
> >>
> >> ps.  yeah, and all of you ask your dad how many stupid
> >> questions/minute you asked him when you were young...
> >> did he just slap you: "it's scary bad world out there
> >> you fscking idiot!  now shut up and code!" ?
> >>
> >> pps. i just realized my mail could depict me as the
> >> local christian from your mall.  i am not.
> >>
> >> ppps. by popular demand i hereby promise i will not
> >> teach, none of your kids at least.  also i wouldn't
> >> let mine near you, probably.



Weird ifconfig issue

2005-06-10 Thread Michael Erdely
Hi, Everybody,

An admin that works with me was trying to remove an alias from an
interface and ended up causing network connectivity on the server to
cease.

I was wondering if the following scenario was standard behavior:
$ ifconfig xl0
xl0: flags=8843 mtu 1500
lladdr 00:10:5a:a9:ed:be
media: Ethernet 100baseTX full-duplex
status: active
inet6 fe80::210:5aff:fea9:edbe%xl0 prefixlen 64 scopeid 0x1
inet 192.168.25.20 netmask 0xff00 broadcast 192.168.25.255
$ sudo ifconfig xl0 inet alias 192.168.25.49 \
netmask 255.255.255.255 broadcast 192.168.25.49
$ ifconfig xl0
xl0: flags=8843 mtu 1500
lladdr 00:10:5a:a9:ed:be
media: Ethernet 100baseTX full-duplex
status: active
inet6 fe80::210:5aff:fea9:edbe%xl0 prefixlen 64 scopeid 0x1
inet 192.168.25.20 netmask 0xff00 broadcast 192.168.25.255
inet 192.168.25.49 netmask 0x broadcast 192.168.25.49
$ sudo ifconfig xl0 inet -alias 192.168.25.49 \
netmask 255.255.255.255 broadcast 192.168.25.49
$ ifconfig xl0
xl0: flags=8843 mtu 1500
lladdr 00:10:5a:a9:ed:be
media: Ethernet 100baseTX full-duplex
status: active
inet6 fe80::210:5aff:fea9:edbe%xl0 prefixlen 64 scopeid 0x1
inet 192.168.25.20 netmask 0x broadcast 192.168.25.49

As you can see from the above example, the computer would no longer be
able to communicate on the network.  The fix is:
$ sudo ifconfig xl0 inet alias 192.168.25.20 \
netmask 255.255.255.0 broadcast 192.168.25.255
$ sudo route -n delete default
$ sudo route -n add default 192.168.25.1

Then, network connectivity is restored.  Generally, I remove aliases
with just "ifconfig xl0 inet -alias 192.168.25.49", but I think it's
reasonable for an admin to try the example above.

So... is this expected behavior?

-ME

-- 
http://erdelynet.com/

Support OpenBSD! http://www.openbsd.org/orders.html



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Sascha Ramin

On Fri, 10 Jun 2005, R.Payne wrote:


"We are the woorrrld.  We are the childrennn..."

Put a sock in it already.



could someone? its clear that people feel differently about this, and 
discussing it is proving to be  completly counter productive as its just 
creating more clutter that we had hoped to avoid.


there are two facts,

#1 people say misc@ is unfriendly.

#2 people say misc@ is friendly.

we can therefor come to the conclusion that people say a lot fo things.

but i hardly think this is the right place to discuss all of them, 
instead OpenBSD should be the topic of discussion.


end of story, thread etc.

sbr.



-f wrote:

hello Rick, and others,


i just wanted to say, that you almost enteriley missed
my point.  i never said leave the young in a bubble,
but 40 people yelling at you and calling names is
not funny either.  i didn't realize all the people here
were so strong personalities in their teens, my mistake.

only a sith deals in absolutes, to quote a very bad movie.

i did not suggest let's make misc into a linux-newbie
style lounge.  i just wanted to point out that you
never know what damage you make.  just keep in mind.


anyway, have a nice weekend.

-f

ps.  yeah, and all of you ask your dad how many stupid
questions/minute you asked him when you were young...
did he just slap you: "it's scary bad world out there
you fscking idiot!  now shut up and code!" ?

pps. i just realized my mail could depict me as the
local christian from your mall.  i am not.

ppps. by popular demand i hereby promise i will not
teach, none of your kids at least.  also i wouldn't
let mine near you, probably.




Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread R.Payne
"We are the woorrrld.  We are the childrennn..."

Put a sock in it already.

-f wrote:
> hello Rick, and others,
> 
> 
> i just wanted to say, that you almost enteriley missed
> my point.  i never said leave the young in a bubble,
> but 40 people yelling at you and calling names is
> not funny either.  i didn't realize all the people here
> were so strong personalities in their teens, my mistake.
> 
> only a sith deals in absolutes, to quote a very bad movie.
> 
> i did not suggest let's make misc into a linux-newbie
> style lounge.  i just wanted to point out that you
> never know what damage you make.  just keep in mind.
> 
> 
> anyway, have a nice weekend.
> 
> -f
> 
> ps.  yeah, and all of you ask your dad how many stupid
> questions/minute you asked him when you were young...
> did he just slap you: "it's scary bad world out there
> you fscking idiot!  now shut up and code!" ?
> 
> pps. i just realized my mail could depict me as the
> local christian from your mall.  i am not.
> 
> ppps. by popular demand i hereby promise i will not
> teach, none of your kids at least.  also i wouldn't
> let mine near you, probably.



Re: Help with CPAN error "...does not contain a Line-Count header" after OpenBSD 3.7 CD installation

2005-06-10 Thread Uwe Dippel
On Fri, 10 Jun 2005 13:59:00 -0700, Matt Phillips wrote:

> I'm having a problem installing modules using CPAN on a fresh 3.7 
> install.  I have re-run 'o conf init' twice and popped all of my mirrors 
> and tried new ones to no avail.  This problem first came up in Jan2004 
> here: http://www.monkey.org/openbsd/archive/misc/0401/msg00801.html.  
> The solution posted here 
> http://www.monkey.org/openbsd/archive/misc/0401/msg00806.html indicates 
> that OpenBSD's gzip has a different exit code than GNU gzip when run on 
> things like gzip: /root/.cpan/sources/modules/03modlist.data.  A patch 
> was submitted that appeared to solve their problem.
> 
> My error is:
> 
>  >cpan install Bundle::CPAN
> 
> Going to read /root/.cpan/sources/authors/01.mailrc.txt.gz
> Going to read /root/.cpan/sources/modules/02packages.details.gz
> Warning: Your /root/.cpan/sources/modules/02packages.details.txt.gz does 
> not contain a Line-Count header.
> Please check the validity of the index file by comparing it to more than 
> one CPAN mirror. I'll continue but problems seem likely to happen.
> Warning: Your /root/.cpan/sources/modules/02packages.details.txt.gz does 
> not contain a Line-Count header.
> Please check the validity of the index file by comparing it to more than 
> one CPAN mirror. I'll continue but problems seem likely to happen.

Thanks for the confirmation; this had been discussed a few days back;
without any solution yet.

It seems you have to use packages or - in case you have the time - debug
it yourself.

Uwe



Re: STABLE to go

2005-06-10 Thread Jason Crawford
Something that I do (on a local network, not across the internet) is
build stable on a fast machine using make release (man 8 release),
then push it to an ftp server, and do ftp upgrades. I find that a lot
easier than walking around the lab with a cd. Especially if you can do
the updates remotely via ftp, but that'd be more of a custom-style
bsd.rd, and therefore not supported officially. If you or your clients
don't have a fast connection, CDs for them may be easier though.
Definetly read the release(8) manpage.

On 6/10/05, Romero Leite <[EMAIL PROTECTED]> wrote:
> Hi misc@,
> 
> I would like to find an easy and fast way to bring client machines (same
> arch) STABLE without any compilation (if fastest).
> 
> I thought of using a fast machine where I would keep STABLE. Then,
> Whenever needed I would burn a CD with a copy of the stable kernel and a
> .tgz of the /usr/obj, take this to the client's site, untar everything
> there and then (or even) use make build. Would these steps be enough?
> Would there be a better (=faster) way?
> 
> Thank4s a lot.
> 
> Romero
> --
>   Romero Leite
>   [EMAIL PROTECTED]



artsd segfaults on MP3s

2005-06-10 Thread Kirk Strauser
I'm running a newly-installed OpenBSD 3.7 system on a K6-3 laptop with
the GENERIC kernel and quite a few packages.  I recently discovered that
almost everything in KDE seems to be working, but artsd segfaults every
time I try to play an MP3:

$ ktrace artsd
unix_connect: can't connect to server
(unix:/tmp/mcop-kirk/woozle_honeypot_net-0dd7-42aa3e66)
There are already artsd objects registered, looking if they are active...
... cleaned 5 unused mcop global references.

artsd:/usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: undefined symbol
'_ZN13DecoderPlugin5closeEv'
artsd: /usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: can't resolve reference
'_ZN13DecoderPlugin5closeEv'
artsd:/usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: undefined symbol
'_ZN13DecoderPlugin5pauseEv'
artsd: /usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: can't resolve reference
'_ZN13DecoderPlugin5pauseEv'
artsd:/usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: undefined symbol
'_ZN13DecoderPlugin4playEv'
artsd: /usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: can't resolve reference
'_ZN13DecoderPlugin4playEv'
artsd:/usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: undefined symbol
'_ZN13DecoderPlugin4seekEi'
artsd: /usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: can't resolve reference
'_ZN13DecoderPlugin4seekEi'
artsd:/usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: undefined symbol
'_ZN13DecoderPlugin15setOutputPluginEP12Ou
tputStream'
artsd: /usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: can't resolve reference
'_ZN13DecoderPlugin15setOutputPlug
inEP12OutputStream'
artsd:/usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: undefined symbol
'_ZN13DecoderPlugin14setInputPluginEP11Inp utStream'
artsd: /usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: can't resolve reference
'_ZN13DecoderPlugin14setInputPlugi nEP11InputStream'
artsd:/usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: undefined symbol
'_ZN10NukePlugin6configEPKcS1_Pv'
artsd: /usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: can't resolve reference
'_ZN10NukePlugin6configEPKcS1_Pv'
artsd:/usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: undefined symbol
'_ZN13DecoderPlugin14getStreamStateEv'
artsd: /usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: can't resolve reference
'_ZN13DecoderPlugin14getStreamStat eEv'
artsd:/usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: undefined symbol
'_ZN13DecoderPlugin14getTotalLengthEv'
artsd: /usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: can't resolve reference
'_ZN13DecoderPlugin14getTotalLengt hEv'
artsd:/usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: undefined symbol
'_ZN13DecoderPlugin9seek_implEi'
artsd: /usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: can't resolve reference
'_ZN13DecoderPlugin9seek_implEi'
artsd:/usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: undefined symbol
'_ZN10NukePlugin12decoder_loopEv'
artsd: /usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: can't resolve reference
'_ZN10NukePlugin12decoder_loopEv'
artsd:/usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: undefined symbol
'_ZN13DecoderPlugin20processThreadCommandE P7Command'
artsd: /usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: can't resolve reference
'_ZN13DecoderPlugin20processThread CommandEP7Command'
artsd:/usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: undefined symbol
'_ZTI10NukePlugin'
artsd: /usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: can't resolve reference
'_ZTI10NukePlugin'
artsd:/usr/local/lib/libarts_mpeglib-0.3.0.so.0.3: undefined symbol
'_ZN16ArtsOutputStreamC1EPFvPvE'
lazy binding failed!
zsh: segmentation fault (core dumped)  ktrace artsd

It looks like someone else had similar problems on their AMD64 system last
year, but I didn't find any followups:

http://www.monkey.org/openbsd/archive2/ports/200410/msg00097.html

Can anyone else confirm that artsd works on their system, or is this a more
general problem?
--
Kirk Strauser

[demime 1.01d removed an attachment of type application/pgp-signature]



Re: Who sells Zaurus in the US?

2005-06-10 Thread Phil
I bought mine 2 days ago at www.dynamism.com and received it today (I
live in Canada). They answered to all my questions very quickly and
did not kept me waiting on the line to talk to a technician.

The item was well packages, can't tell for the rest yet, it's still
charging for now... The unit seems fine.

Phil

On 6/4/05, Dave Feustel <[EMAIL PROTECTED]> wrote:
> Are there any USA dealers recommended?
> 
> Thanks,
> Dave Feustel



Re: Tuning gigabit bridging firewall for better performance

2005-06-10 Thread nate
Tony Sarendal said:

> Now about netstat on your openbsd box ?
> netstat -I  -w10

results:

(netstat -I em1 -w1)
  em1 inem1 out  total in  total out
 packets  errs  packets  errs colls   packets  errs  packets  errs colls
   45461 023878 0 0138684 0   138680 0 0
   48678 025173 0 0147717 0   147720 0 0
   46782 02 0 0142449 0   142439 0 0
   43420 022977 0 0132808 0   132806 0 0
   43880 023109 0 0133964 0   133961 0 0
   47932 024928 0 0145733 0   145731 0 0
   48065 024938 0 0146007 0   146003 0 0
   44539 022644 0 0134363 0   134365 0 0


I tried one more thing, changing the bridges so they all land on
the same IRQs, I thought the dual and quads would have 1 irq per
card but doesn't seem like the case:

em0 at pci3 dev 4 function 0 "Intel PRO/1000MF QP (82546EB)" rev 0x01: irq
5, address: 00:04:23:45:d9:20
em1 at pci3 dev 4 function 1 "Intel PRO/1000MF QP (82546EB)" rev 0x01: irq
10, address: 00:04:23:45:d9:21
em2 at pci3 dev 6 function 0 "Intel PRO/1000MF QP (82546EB)" rev 0x01: irq
3, address: 00:04:23:45:d9:22
em3 at pci3 dev 6 function 1 "Intel PRO/1000MF QP (82546EB)" rev 0x01: irq
11, address: 00:04:23:45:d9:23
em4 at pci4 dev 2 function 0 "Intel PRO/1000MT DP (82546EB)" rev 0x03: irq
3, address: 00:30:48:74:e0:86
em5 at pci4 dev 2 function 1 "Intel PRO/1000MT DP (82546EB)" rev 0x03: irq
11, address: 00:30:48:74:e0:87
em6 at pci7 dev 1 function 0 "Intel PRO/1000MT DP (82546EB)" rev 0x03: irq
5, address: 00:04:23:b3:d6:8e
em7 at pci7 dev 1 function 1 "Intel PRO/1000MT DP (82546EB)" rev 0x03: irq
10, address: 00:04:23:b3:d6:8f


doing this had no noticable impact on throughput or cpu time
spend servicing interrupts.

thanks

nate



Re: Can't find package!!!

2005-06-10 Thread the scorched gremlin
On 6/11/05, Joco Salvatti <[EMAIL PROTECTED]> wrote:

> Hi all,
> 
> I'd recorded all the packages from the OpenBSD's 3.7 repository into four CDs
> and copied the files to my computer, at home. The first wired thing I've
> noticed was that all the file names were uppercase. Does anyone know why?
> Second, I had a problem when I ran pkg_add . It displayed the
> error message: "Can't find package". What was the problem?
> 
> Thanks for now!
> --
> Joco Salvatti
> Undergraduating in Computer Science
> Federal University of Para - UFPA
> web: http://salvatti.expert.com.br
> e-mail: [EMAIL PROTECTED]
> 
> 

hola Joco,

STFW for cdrecord and TRANS.TBL. 

I guess you're still studying. So, some hints:

#1 buy the CDs instead of downloading all the packages you don't need
-- this saves network bandwidth, and will also get you ISO CDs
correctly set up with TRANS.TBL or whatever else your cd writer
software forgot to add for you.

#2 pay close attention to the RTFM, STFW, and the FAQs. particularly these ones:
http://www.openbsd.org/faq/faq1.html
http://www.openbsd.org/faq/faq3.html
http://www.trumpetpower.com/OpenBSD/Meta-FAQ

#3 get used to doing a little more homework -- OpenBSD is rewarding,
well-documented and maybe even fun .. perhaps this says it best:

 Monkeys cause me to be both angry and happy.
It is much like a piece of metal stuck in your eye.
You like the metal because it is shiny,
but you also hate it because it is causing you a great deal of pain.

http://www.monkey.org/FAQ/#all_why

cheers, scorch
--
mailto:[EMAIL PROTECTED]
out of the frying pan into the fire



Re: Can't find package!!!

2005-06-10 Thread Stephen Marley
On Fri, Jun 10, 2005 at 07:40:17PM -0300, Joco Salvatti wrote:
> Hi all,
> 
> I'd recorded all the packages from the OpenBSD's 3.7 repository into four CDs
> and copied the files to my computer, at home. The first wired thing I've
> noticed was that all the file names were uppercase. Does anyone know why?
> Second, I had a problem when I ran pkg_add . It displayed the
> error message: "Can't find package". What was the problem?

Your technique for compiling the cd is flawed. Build a .iso using
mkhybrid with the correct options (-L -J for example) or find some other
way to keep stuff lowercase.

-- 
stephen



Re: STABLE to go

2005-06-10 Thread Stephen Marley
On Fri, Jun 10, 2005 at 03:40:05PM -0700, Romero Leite wrote:
> Hi misc@,
> 
> I would like to find an easy and fast way to bring client machines (same
> arch) STABLE without any compilation (if fastest).
> 
> I thought of using a fast machine where I would keep STABLE. Then,
> Whenever needed I would burn a CD with a copy of the stable kernel and a
> .tgz of the /usr/obj, take this to the client's site, untar everything
> there and then (or even) use make build. Would these steps be enough?
> Would there be a better (=faster) way?

Build -stable on a fast machine then cut a cd from the end result of
using release(8). Just tar xpf xxx.tgz on the root of each client
machine. You could also use rsync (with an an appropriate exclude list)
to do it over a network.

-- 
stephen



Re: A Business Case for integrating OpenBSD into IT Infrastructures

2005-06-10 Thread Steve Shockley

mdff wrote:

our favourite was/is HP's DLxxx series, but mickey@ is
working on the ciss-port for their storage controllers and
we don't know when it's stable for production use...


I usually wind up using older Compaq and HP servers for OpenBSD, where 
they used either Megaraid, old Adaptec or Smart/2 RAID, and they work 
fine in OpenBSD.  I haven't tried them, but I understand the HP DL145s 
work well, but they're not RAID or hot-swap.


The Dell PERC 4e/Si seems to be an LSI RAID controller, so it's possibly 
well-supported.  That seems to be the built-in RAID on the PowerEdge 
1850 and others.


I've heard Suns v20z servers are good, but if you search the archives I 
think you can find out the company that OEMs them if you don't need the 
support.  I dunno what's inside.


I think IBM's RAID controllers are unsupported.



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Rick Pettit
These threads truly hurt the list, and make everyone suffer.

Please stop.

-Rick

On Fri, Jun 10, 2005 at 01:54:46PM -0700, [EMAIL PROTECTED] wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> >Not true.  I have spoken my mind many times in-person and at work,
> to
> >managers and presidents.  I have never been fired for anything I've
> >said because I don't attack people personally.  I would gladly
> have a
> >discussion in real-life with anyone on this list.  Only a fool or
> >someone as immature as you would actually get so defensive.
> Rational
> >people can disagree cannot they not?  They can argue points without
> >breaking into a fist-fight, can't they?  Maybe you don't understand
> >the difference between arguing a point and just arguing.
> 
> Uh, last time I checked he was accusing you of calling people names
> and acting like an asshole. That is a lot different that simply
> having a difference of opinion. And I would have to agree with him.
> You would get fired most places for talking the way a lot of people
> do on this list.
> 
> This is all besides the point though. People are ignorant. People
> over react. This really needs not be discussed any further as
> neither side will change very much if at all. Let's drop this
> pointless babble and continue on with the help that the list was
> setup for in the first place.
> 
> On Fri, 10 Jun 2005 12:58:59 -0700 Rick Barter
> <[EMAIL PROTECTED]> wrote:
> >dereck wrote:
> >>>Look, I don't 'act all tough on the net'.  I just
> >>>refuse to sit idly
> >>>by while mamby pamby whiners are spouting crap.
> >>>And, in real life,
> >>>I'd say the same thing to him.
> >>
> >> On this I'll have to draw the line - that is plainly
> >> Bullshit.  You would not say anything like this to his
> >> or her face, because you are a coward hiding behind
> >> your keyboard.  In the "real world" no one would take
> >> what you dish on this list, and that is the plain
> >> fact.  No company or government job would put up with
> >> it.  We have to because it is a public list.  But you
> >> are so full of it that it is painful to watch.  You
> >> would not say these things and stay gainfully
> >> employed.
> >
> >Not true.  I have spoken my mind many times in-person and at work,
> >to
> >managers and presidents.  I have never been fired for anything
> >I've
> >said because I don't attack people personally.  I would gladly
> >have a
> >discussion in real-life with anyone on this list.  Only a fool or
> >someone as immature as you would actually get so defensive.
> >Rational
> >people can disagree cannot they not?  They can argue points
> >without
> >breaking into a fist-fight, can't they?  Maybe you don't
> >understand
> >the difference between arguing a point and just arguing.
> >
> >> You are driving people away from trying and using
> >> OBSD, and I (for one) hope that you are at least proud
> >> of yourself.  This is the MISC list, for crissakes,
> >> and we should be more helpful to newbies.  As a
> >> technical project, Linux is a mess; but it continues
> >> to grow not in small part to the esprit de corps that
> >> the users openly encourage.  Newbie questions on Linux
> >> lists are not discouraged, and a "keep at it - it'll
> >> come" encouragement is not at all unusual.  They are
> >> even proud of getting their grandmothers to use it!
> >
> >Never once during this thread have I advocated NOT helping new
> >people.
> >  Please re-read my response to the original post.  I have
> >never
> >once discouraged someone from participating on this list and have
> >helped whenever and wherever I can.
> >
> >> We, by contrast, have to put up with the "better than
> >> you" attitude from the vocal minority on this list
> >> which reminds one unpleasantly of Jerry Fallwell,
> >> Osama bin Liden, and other wacko religious crowds.
> >
> >> Put a sock in it, Rick.  Almost everyone met your type
> >> in grade school.  Small boys who pick fights with
> >> younger girls, or kick the neighbor's dog, are not
> >> uncommon.  You are not "keeping it real," or "setting
> >> the story straight," or "protecting us from assholes."
> >>  You ARE the asshole.
> >
> >Hahaha are you saying I'm a wacko, a terrorist?  Why, because I
> >have
> >an opinion I feel strongly about, tried to make a point, and am
> >defending my assertions?  This is what I'm talking about.  The
> >world
> >is being conditioned such that if you argue with someone, you're
> >the
> >enemy.  Grow up.  Oh, and thanks for calling me an asshole.  You
> >made
> >my day.
> >
> >> If you will stop "protecting us" maybe the user base
> >> will expand. [And yes, I'll be glad to answer
> >> questions and help - with money, time, and anything
> >> else.]
> >
> >Haha.  Who cares if the user base expands.  The OpenBSD team
> >doesn't.
> >  Go read some documentation.  They code this stuff for their own
> >pleasure/use.  I happen to like the system and come along for the
> >ride.
> >
> >And if anyone wants to come to my 

Re: tftp:bsd.rd RLX

2005-06-10 Thread Diana Eichert
On Fri, 10 Jun 2005, Rob Foster wrote:

> found this about some tyan motherboard, which is not what we have in
> the blade but..
> 
> > One of my mail to the support:
> > But I try three things:
> > 1) redirect BIOS to serial port: OK
> > 2) redirect kernel to serial port: OK
> > 3) redirect both BIOS and kernel to serial port: problem.
> >
> > In the case 3) I get all the message from the BIOS, I can manage it,
> > but when the kernel boots, the kernel sends nothing to the serial port
> > if the serial port was already used by the BIOS.
> > So I suppose that the BIOS does not release the serial port, before
> > the kernel boots.
> > The answer from TYAN:
> > I used Red Hat 9 and was able to redirect both the BIOS and RH 9 at
> > the same
> > time. 
> 
> 
> is this true? how can I work around this?

Just for you I rebooted one of my OpenBSD RLX blades, hit F2 at the RAM
test.  Here is the screenshot of my serial console:

+--+
|   Console Redirection  |   Item Specific Help|
|+-|
||
|
|   Local Console: [On]  | Turn ON local console   |
|   Baud Rate  [9600]| redirection for video   |
|   Console Type   [VT100]   | output to local serial  |
|   Flow Control   [None]| port.
|
|   Continue C.R. after POST:  [On]  | Turn OFF to disable
|
|| this feature.
|
|   Remote Console Role:   [Client]  |
|
|  Remote Console: [On]  | WARNING:  Turn OFF
|
|| console redirection
|
|| prevents you from
|
|| viewing video output|
|| for navigation during   |
|| boot process or BIOS|
|| setup.
|
||
|
||
|
+--+
  F1   Help   ^v  Select Item   -/+Change Values   F9   Setup Defaults
  Esc  Exit   <   Select Menu   Enter  Select > Sub-Menu   F10  Save and Exit


And I verified that I'm runnint a non-standard boot loader, notice the
"set ktty" variable.  However since you've set ever thing in boot.conf 
it should work. 

Using drive 0, partition 3.
Loading...
probing: pc0 com0 apm mem[618K 1022M a20=on]
disk: hd0+ hd1+*
>> OpenBSD/i386 BOOT 2.06
Sat Jun 11 22:57:55 2005

com0: 9600 baud
kernel console will be com0
boot> set
>> OpenBSD/i386 BOOT 2.06
addr 0x0
howto
device   hd0a
tty  pc0
ktty com0
image/obsd
timeout  6
boot> m



STABLE to go

2005-06-10 Thread Romero Leite
Hi misc@,

I would like to find an easy and fast way to bring client machines (same
arch) STABLE without any compilation (if fastest).

I thought of using a fast machine where I would keep STABLE. Then,
Whenever needed I would burn a CD with a copy of the stable kernel and a
.tgz of the /usr/obj, take this to the client's site, untar everything
there and then (or even) use make build. Would these steps be enough?
Would there be a better (=faster) way?

Thank4s a lot.

Romero
-- 
  Romero Leite
  [EMAIL PROTECTED]

-- 
http://www.fastmail.fm - Does exactly what it says on the tin



Re: A Business Case for integrating OpenBSD into IT Infrastructures

2005-06-10 Thread nate
mdff said:
> hi misc@,
>
> which hardware r u talking about for example? we'd like
> to use such "real" servers, but we can't decide what vendor
> to choose. we definitely do not want to "build" our own
> server (taking the raid controller from vendor x and the
> disks from vendor y, having an overkill xeon mabo from z
> and so on). we'd like to have on-site hw-support at least
> next day (being in austria this is not possible with all
> the big "server-sellers")

for my new firewalls I am using servers from a company called
ASA Computers in california. They work well, I told them
I wanted an openbsd firewall with specs and they supplied
some good ones(raid card required a firmware upgrade)


Supermicro 3U chassis with triple redundant power
supplies(hot swap of course)
Dual Xeon motherboard with 1 3.4Ghz EM64T CPU
2GB memory
4x36GB U320 SCSI disks in hardware raid 10
ICP Vortex raid card 128MB cache
Hot swap drive bays
cdrom
floppy
lots of big fans
8 network interfaces
$4100
(price from 1/25/2005)

>
> our favourite was/is HP's DLxxx series, but mickey@ is
> working on the ciss-port for their storage controllers and
> we don't know when it's stable for production use...

I tried openbsd 3.6 I think in a DL360G3 and it did not
boot. I recently moved my company away from HP servers
on the front end for cost and reliability issues(though
the onsite support was handy, I've had to get a ton
of system boards replaced from DL360G3s). My new systems
from ASA are about $2300/unit cheaper(after discounts
from both sides).

I have 2 of them with a 3rd cold spare. they will be
running in bridigng mode in active-active configuration.
redundancy is handled by ospf in my core switches, makes
some folks here feel better that if the cheap solution
(vs checkpoint was the other option) falls over then
the big expensive switches re-route the trafic to the
other firewall.

> any experience values which vendor to choose servers from?
> and of course, where the newer hardware is fully supported
> by openbsd?

I prefer to use a vendor that actually has experience with
openbsd. HP does not I think. when I bought redhat from them
they basically sent my company's order to redhat and redhat
sent me the CDs and stuff.  maybe if you get a big enough
order or support services it is different. There are quite
a few small(er) resellers like ASA that have experience with
openbsd.

>> Avoid relying on cheap hardware to make your cost point.  OpenBSD runs
>> well on "real", modern servers.  Managers at mid/large companies aren't
>> going to want to hear about how you pulled machines out of the trash and
>> now the business depends on them, even if they're 4x redundant.

don't confuse cheap hardware with crap hardware. you can buy
bottom of the barrel crap or pull it out of the trash, not to
be confused with something that is of high quality but 30-50%
cheaper then a tier 1 name brand provides.

I thought this quote was cute, saw it on an email from one
of the guys at the vendor:
"We make a good (almost generic) machine from brand name parts,
 whereas Dell makes a good (brand name) machine from generic parts."

I also like the smaller vendors because they tend to burn
their systems in before sending them out. About 50% of my
failures on the HP gear I have gotten have been detected
in the first 20-30 minutes of use, basically just by
installing the OS and rebooting. Once the systems are running
for a while they tend to be fairly solid.

note openbsd is really only on my firewalls, 85% of the rest of
the systems are redhat enterprise 2.1/3, some win2k, a few HPUX,
some debian(my preferred choice).

nate



Can't find package!!!

2005-06-10 Thread João Salvatti
Hi all,

I'd recorded all the packages from the OpenBSD's 3.7 repository into four CDs
and copied the files to my computer, at home. The first wired thing I've
noticed was that all the file names were uppercase. Does anyone know why?
Second, I had a problem when I ran pkg_add . It displayed the
error message: "Can't find package". What was the problem?

Thanks for now!
-- 
Joco Salvatti
Undergraduating in Computer Science
Federal University of Para - UFPA
web: http://salvatti.expert.com.br 
e-mail: [EMAIL PROTECTED]



Re: tftp:bsd.rd RLX

2005-06-10 Thread Diana Eichert
On Fri, 10 Jun 2005, Rob Foster wrote:
SNIP
> > Are you setting serial console redirect in the BIOS?
> 
> I'm not sure, how to I get into the bios config on these things?

hmmm, are you directly connected to the blade serial interface from a
PeeCee?  If so try hitting F2 while the memory check is counting off, I
think I had to set term emulation to ansi or vt100.  Dunno for sure
because I now connect to my RLX blades via serial console servers.

diana



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread auto275911
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

>Not true.  I have spoken my mind many times in-person and at work,
to
>managers and presidents.  I have never been fired for anything I've
>said because I don't attack people personally.  I would gladly
have a
>discussion in real-life with anyone on this list.  Only a fool or
>someone as immature as you would actually get so defensive.
Rational
>people can disagree cannot they not?  They can argue points without
>breaking into a fist-fight, can't they?  Maybe you don't understand
>the difference between arguing a point and just arguing.

Uh, last time I checked he was accusing you of calling people names
and acting like an asshole. That is a lot different that simply
having a difference of opinion. And I would have to agree with him.
You would get fired most places for talking the way a lot of people
do on this list.

This is all besides the point though. People are ignorant. People
over react. This really needs not be discussed any further as
neither side will change very much if at all. Let's drop this
pointless babble and continue on with the help that the list was
setup for in the first place.

On Fri, 10 Jun 2005 12:58:59 -0700 Rick Barter
<[EMAIL PROTECTED]> wrote:
>dereck wrote:
>>>Look, I don't 'act all tough on the net'.  I just
>>>refuse to sit idly
>>>by while mamby pamby whiners are spouting crap.
>>>And, in real life,
>>>I'd say the same thing to him.
>>
>> On this I'll have to draw the line - that is plainly
>> Bullshit.  You would not say anything like this to his
>> or her face, because you are a coward hiding behind
>> your keyboard.  In the "real world" no one would take
>> what you dish on this list, and that is the plain
>> fact.  No company or government job would put up with
>> it.  We have to because it is a public list.  But you
>> are so full of it that it is painful to watch.  You
>> would not say these things and stay gainfully
>> employed.
>
>Not true.  I have spoken my mind many times in-person and at work,
>to
>managers and presidents.  I have never been fired for anything
>I've
>said because I don't attack people personally.  I would gladly
>have a
>discussion in real-life with anyone on this list.  Only a fool or
>someone as immature as you would actually get so defensive.
>Rational
>people can disagree cannot they not?  They can argue points
>without
>breaking into a fist-fight, can't they?  Maybe you don't
>understand
>the difference between arguing a point and just arguing.
>
>> You are driving people away from trying and using
>> OBSD, and I (for one) hope that you are at least proud
>> of yourself.  This is the MISC list, for crissakes,
>> and we should be more helpful to newbies.  As a
>> technical project, Linux is a mess; but it continues
>> to grow not in small part to the esprit de corps that
>> the users openly encourage.  Newbie questions on Linux
>> lists are not discouraged, and a "keep at it - it'll
>> come" encouragement is not at all unusual.  They are
>> even proud of getting their grandmothers to use it!
>
>Never once during this thread have I advocated NOT helping new
>people.
>  Please re-read my response to the original post.  I have
>never
>once discouraged someone from participating on this list and have
>helped whenever and wherever I can.
>
>> We, by contrast, have to put up with the "better than
>> you" attitude from the vocal minority on this list
>> which reminds one unpleasantly of Jerry Fallwell,
>> Osama bin Liden, and other wacko religious crowds.
>
>> Put a sock in it, Rick.  Almost everyone met your type
>> in grade school.  Small boys who pick fights with
>> younger girls, or kick the neighbor's dog, are not
>> uncommon.  You are not "keeping it real," or "setting
>> the story straight," or "protecting us from assholes."
>>  You ARE the asshole.
>
>Hahaha are you saying I'm a wacko, a terrorist?  Why, because I
>have
>an opinion I feel strongly about, tried to make a point, and am
>defending my assertions?  This is what I'm talking about.  The
>world
>is being conditioned such that if you argue with someone, you're
>the
>enemy.  Grow up.  Oh, and thanks for calling me an asshole.  You
>made
>my day.
>
>> If you will stop "protecting us" maybe the user base
>> will expand. [And yes, I'll be glad to answer
>> questions and help - with money, time, and anything
>> else.]
>
>Haha.  Who cares if the user base expands.  The OpenBSD team
>doesn't.
>  Go read some documentation.  They code this stuff for their own
>pleasure/use.  I happen to like the system and come along for the
>ride.
>
>And if anyone wants to come to my house and discuss it over tea or
>
>coffee or anything let me know and I'll give you my address.
>
>rvb
-BEGIN PGP SIGNATURE-
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 2.4

wkYEARECAAYFAkKp/fwACgkQSNwPY+UhpH+E/QCgmrow2QTEapio714bUuWUb4bJTagA
nilM97xllwpEWiCjISELay1oStWP
=DPKI
-END PGP SIGNATURE-




Concerned about yo

Unable to initialize the hardware with em hardware

2005-06-10 Thread Harford, Colin
>From the em driver:

 The em driver provides support for PCI Gigabit Ethernet adapters
based on
 the Intel 82540, 82541ER, 82541PI, 82542, 82543, 82544, 82545,
82546,
 82546EB, 82546GB and 82547 Ethernet controller chips.  


...



The card is an Intel Pro 1000MT DP on a PCI-Express riser with a 82546GB
chipset, it does detect them as em0 and em1, but it fails when it tries
to initalize them. (Full dmesg below:)


ppb2 at pci1 dev 0 function 2 "Intel IOP331 Channel 1" rev 0x06
pci3 at ppb2 bus 3
ppb3 at pci0 dev 4 function 0 "Intel E7710 MCH PCIE" rev 0x09
pci4 at ppb3 bus 4
ppb4 at pci4 dev 0 function 0 vendor "Intel", unknown product 0x0340 rev
0x09
pci5 at ppb4 bus 5
em0 at pci5 dev 4 function 0 "Intel PRO/1000MT DP (82546GB)" rev
0x03em0: Unknown MAC Type
: irq 11em0: The EEPROM Checksum Is Not Valid
em0: Unable to initialize the hardware
em1 at pci5 dev 4 function 1 "Intel PRO/1000MT DP (82546GB)" rev
0x03em1: Unknown MAC Type
: irq 3em1: The EEPROM Checksum Is Not Valid
em1: Unable to initialize the hardware


Any ideas have to get around this?



CH




OpenBSD 3.7 (GENERIC) #31: Sun Mar 20 00:42:28 MST 2005
[EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC
real mem = 1073086464 (1047936K)
avail mem = 909189120 (887880K)
using 22937 buffers containing 107515904 bytes (104996K) of memory
mainbus0 (root) cpu0 at mainbus0: (uniprocessor)
cpu0: Intel(R) Xeon(TM) CPU 3.00GHz, 2993.08 MHz
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,
CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,NXE,LONG
cpu0: 1MB 64b/line 8-way L2 cache
pci0 at mainbus0 bus 0: configuration mode 1 pchb0 at pci0 dev 0
function 0 "Intel E7710 SMCH" rev 0x09 ppb0 at pci0 dev 2 function 0
"Intel E7710 MCH PCIE" rev 0x09
pci1 at ppb0 bus 1
ppb1 at pci1 dev 0 function 0 "Intel IOP331 Channel 0" rev 0x06
pci2 at ppb1 bus 2
ami0 at pci2 dev 14 function 0 "Dell PERC 4e/Di" rev 0x06: irq 7 Dell
16c/32b
ami0: FW 516A, BIOS vH418, 256MB RAM
ami0: 1 channels, 0 FC loops, 1 logical drives scsibus0 at ami0: 40
targets sd0 at scsibus0 targ 0 lun 0:  SCSI2
0/direct fixed
sd0: 69880MB, 8908 cyl, 255 head, 63 sec, 512 bytes/sec, 143114240 sec
total
ppb2 at pci1 dev 0 function 2 "Intel IOP331 Channel 1" rev 0x06
pci3 at ppb2 bus 3
ppb3 at pci0 dev 4 function 0 "Intel E7710 MCH PCIE" rev 0x09
pci4 at ppb3 bus 4
ppb4 at pci0 dev 5 function 0 "Intel E7710 MCH PCIE" rev 0x09
pci5 at ppb4 bus 5
ppb5 at pci5 dev 0 function 0 "Intel PCIE-PCIE" rev 0x09
pci6 at ppb5 bus 6
em0 at pci6 dev 7 function 0 "Intel PRO/1000MT (82541EI)" rev 0x05: irq
11, address: 00:11:43:e4:bd:b7
ppb6 at pci5 dev 0 function 2 "Intel PCIE-PCIE" rev 0x09
pci7 at ppb6 bus 7
em1 at pci7 dev 8 function 0 "Intel PRO/1000MT (82541EI)" rev 0x05: irq
3, address: 00:11:43:e4:bd:b8
ppb7 at pci0 dev 6 function 0 "Intel E7710 MCH PCIE" rev 0x09
pci8 at ppb7 bus 8
uhci0 at pci0 dev 29 function 0 "Intel 82801EB/ER USB" rev 0x02: irq 11
usb0 at uhci0: USB revision 1.0 uhub0 at usb0
uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1 at pci0 dev 29 function 1 "Intel 82801EB/ER USB" rev 0x02: irq 10
usb1 at uhci1: USB revision 1.0
uhub1 at usb1
uhub1: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2 at pci0 dev 29 function 2 "Intel 82801EB/ER USB" rev 0x02: irq 7
usb2 at uhci2: USB revision 1.0
uhub2 at usb2
uhub2: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered ehci0 at pci0 dev 29
function 7 "Intel 82801EB/ER USB" rev 0x02: irq 5
ehci0: EHCI version 1.0
ehci0: companion controllers, 2 ports each: uhci0 uhci1 uhci2
usb3 at ehci0: USB revision 2.0
uhub3 at usb3
uhub3: Intel EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub3: single transaction translator
uhub3: 6 ports with 6 removable, self powered
ppb8 at pci0 dev 30 function 0 "Intel 82801BA AGP" rev 0xc2
pci9 at ppb8 bus 9
vga1 at pci9 dev 13 function 0 "ATI Radeon VE QY" rev 0x00 wsdisplay0 at
vga1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation) "Intel 82801EB/ER
LPC" rev 0x02 at pci0 dev 31 function 0 not configured pciide0 at pci0
dev 31 function 1 "Intel 82801EB/ER IDE" rev 0x02: DMA, channel 0
configured to compatibility, channel 1 configured to compatibility
atapiscsi0 at pciide0 channel 0 drive 0
scsibus1 at atapiscsi0: 2 targets
cd0 at scsibus1 targ 0 lun 0:  SCSI0
5/cdrom removable
cd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
pciide0: channel 1 disabled (no drives)
isa0 at mainbus0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo pckbc0 at isa0
port 0x60/5 pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0 (mux 1 ignored for console): console keyboard, using
wsdisplay0 pcppi0 at isa0 port 0x61 sysbeep0 at pcppi0
uhub4 at uhub3 port 3
uhub4: Dell product 0xa001, class 9/0, rev 2.00/0.00, addr 2
uhub4: multiple transaction translators
u

pf pfffffft pfft *) problem

2005-06-10 Thread Fafa Hafiz Krantz
hey!

pf blocks me from ftp'ing out from my workstation (behind my pf box) and i 
don't know why.
it only blocks, however, the ftp's i've been downloading a lot from during the 
past few days.
ftp'ing out *from* my pf box works just nicely.

some of my users report not being able to ssh in, too.

# tcpdump -n -e -ttt -i pflog0
#
24. 001750 rule 0/0(match): block in on rl0: IP 217.31.174.134:2200 > 
213.187.181.23 : FP 0:34(34) ack 1 win 5840

heeelp! :D

i didn't change my working configuration.
it's been working for months. until now ...

# cat /etc/pf.conf
#
int_if="ep0"
ext_if="rl0"

set block-policy drop
scrub   in all

nat on $ext_if from $int_if:network to any -> ($ext_if)
rdr on $int_if proto tcp from any to any \
port 21 -> 127.0.0.1 port 8021

block   drop log all
passquick on { lo0 $int_if }

passout on $ext_if inet proto { tcp, udp, icmp } \
from any to any keep state

passin on $ext_if inet proto { tcp, udp } \
from any to ($ext_if) port 53
passout on $ext_if inet proto { tcp, udp } \
from any port 53 to any

passout on $ext_if inet proto udp \
from any to any port 123 keep state

passin on $ext_if inet proto tcp \
from any to ($ext_if) port { 22, 25, 80, 110, 113, 143 } \
flags S/SA keep state

passin on $ext_if inet proto tcp \
from any port 20 to ($ext_if) user proxy flags S/SA keep state

passin on $ext_if proto tcp \
from any to any port 31337 keep state
passin on $ext_if proto tcp \
from any to any port 5:5

--

Fafa Hafiz Krantz
  Research Designer @ http://www.home.no/barbershop
  Enlightened @ http://www.home.no/barbershop/smart/sharon.pdf


-- 
___
Sign-up for Ads Free at Mail.com
http://promo.mail.com/adsfreejump.htm



Help with CPAN error "...does not contain a Line-Count header" after OpenBSD 3.7 CD installation

2005-06-10 Thread Matt Phillips

Hi,

I'm having a problem installing modules using CPAN on a fresh 3.7 
install.  I have re-run 'o conf init' twice and popped all of my mirrors 
and tried new ones to no avail.  This problem first came up in Jan2004 
here: http://www.monkey.org/openbsd/archive/misc/0401/msg00801.html.  
The solution posted here 
http://www.monkey.org/openbsd/archive/misc/0401/msg00806.html indicates 
that OpenBSD's gzip has a different exit code than GNU gzip when run on 
things like gzip: /root/.cpan/sources/modules/03modlist.data.  A patch 
was submitted that appeared to solve their problem.


My error is:

>cpan install Bundle::CPAN

Going to read /root/.cpan/sources/authors/01.mailrc.txt.gz
Going to read /root/.cpan/sources/modules/02packages.details.gz
Warning: Your /root/.cpan/sources/modules/02packages.details.txt.gz does 
not contain a Line-Count header.
Please check the validity of the index file by comparing it to more than 
one CPAN mirror. I'll continue but problems seem likely to happen.
Warning: Your /root/.cpan/sources/modules/02packages.details.txt.gz does 
not contain a Line-Count header.
Please check the validity of the index file by comparing it to more than 
one CPAN mirror. I'll continue but problems seem likely to happen.

..
(more errors like the one below but they scroll by too fast for me to catch)
a ton of "Use of uninitialized value in pattern match (m//) at 
/usr/libdata/perl5/CPAN.pm line 3195,  line 1445.


Any ideas would be greatly appreciated.  Thanks,

- Matt

(dmesg follows)

OpenBSD 3.7 (GENERIC) #0: Tue May 31 20:56:03 PDT 2005
   [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel Pentium II ("GenuineIntel" 686-class, 512KB L2 cache) 332 MHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR

real mem  = 167354368 (163432K)
avail mem = 145965056 (142544K)
using 2068 buffers containing 8470528 bytes (8272K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(c8) BIOS, date 04/14/98, BIOS32 rev. 0 @ 0xec700
pcibios0 at bios0: rev 2.1 @ 0xec700/0x3900
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf69e0/176 (9 entries)
pcibios0: PCI Interrupt Router at 000:20:0 ("Intel 82371AB PIIX4 ISA" 
rev 0x00)

pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc/0x8000 0xc8000/0x800 0xe/0x8000!
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel 82443BX AGP" rev 0x02
ppb0 at pci0 dev 1 function 0 "Intel 82443BX AGP" rev 0x02
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 "ATI Mach64 GD" rev 0x5c
wsdisplay0 at vga1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
fxp0 at pci0 dev 13 function 0 "Intel 82557" rev 0x05, i82558: irq 11, 
address 00:08:c7:45:02:ce

inphy0 at fxp0 phy 1: i82555 10/100 PHY, rev. 0
dc0 at pci0 dev 14 function 0 "ADMtek AN983" rev 0x11: irq 11, address 
00:06:25:48:b1:96

ukphy0 at dc0 phy 1: Generic IEEE 802.3u media interface
ukphy0: OUI 0x000749, model 0x0001, rev. 1
vendor "US Robotics", unknown product 0x1007 (class communications 
subclass miscellaneous, rev 0x00) at pci0 dev 15 function 0 not configured

pcib0 at pci0 dev 20 function 0 "Intel 82371AB PIIX4 ISA" rev 0x02
pciide0 at pci0 dev 20 function 1 "Intel 82371AB IDE" rev 0x01: DMA, 
channel 0 wired to compatibility, channel 1 wired to compatibility

wd0 at pciide0 channel 0 drive 0: 
wd0: 32-sector PIO, LBA, 3098MB, 6346368 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
wd1 at pciide0 channel 1 drive 0: 
wd1: 16-sector PIO, LBA, 78167MB, 160086528 sectors
atapiscsi0 at pciide0 channel 1 drive 1
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: <, 56X CD-ROM, 4.18> SCSI0 5/cdrom removable
wd1(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
cd0(pciide0:1:1): using PIO mode 4, Ultra-DMA mode 2
uhci0 at pci0 dev 20 function 2 "Intel 82371AB USB" rev 0x01: irq 11
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
"Intel 82371AB Power Mgmt" rev 0x02 at pci0 dev 20 function 3 not configured
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0 (mux 1 ignored for console): console keyboard, using 
wsdisplay0

pmsi0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pmsi0 mux 0
sb0 at isa0 port 0x220/24 irq 5 drq 1: dsp v3.01
midi0 at sb0: 
audio0 at sb0
opl0 at sb0: model OPL3
midi1 at opl0: 
pcppi0 at isa0 port 0x61
midi2 at pcppi0: 
sysbeep0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
biomask ef45 netmask ef45 ttymask ffc7
pctr: 686-class user-level performance counters enabled
mtrr: Penti

Re: A Business Case for integrating OpenBSD into IT Infrastructures

2005-06-10 Thread Kevin
On 6/10/05, mdff <[EMAIL PROTECTED]> wrote:
> : Steve Shockley writes:
>> Avoid relying on cheap hardware to make your cost point.
>> OpenBSD runs well on "real", modern servers.  
>
> any experience values which vendor to choose servers from?
> and of course, where the newer hardware is fully supported
> by openbsd?

I'm facing the same issues -- I need to be able to specify a model
from a reputable vendor for rackmount servers when presenting
projects to management.  Where raw network throughput is not
an issue I will deploy Sun hardware with OpenBSD/Sparc64, but
am starting to get the feeling Sparc64 isn't a high-priority platform
for OpenBSD developers (Do I need to switch to AMD64?).

It's easiest (politically) for me to purchase Dell products,
but this is where "fully supported by OpenBSD" is a concern.


> we'd like to have on-site hw-support at least next day
> (being in austria this is not possible with all the big "server-sellers")

http://www.openbsd.org/support.html#Austria


Kevin Kadow



Authpf Explained

2005-06-10 Thread Brandon Mercer
Hello,
I've got authpf authenticating users and forwarding ports through our
firewall.  Since I've done this configuration in several steps I don't
think the implementation is consistant.  I've got a few users who are
setup, working and the ports forward to the proper server.  There are
other users who are setup the same way who are authenticating ok, but
still can't hit the server.  Everyone is using the same
/etc/authpf/authpf.rules, their /etc/passwd and /etc/master.passwd
entries look the same, so I'm wondering where the other pieces of this
puzzle lay.  After reading adduser, chsh, chpass, authpf and the like I
still can't see where the difference is.  I've got them added to
/etc/group, and an entry in /etc/login.conf for authpf.  Can anyone
point me towards some light?  Thanks guys.
Brandon



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Aaron Glenn
On 6/10/05, -f <[EMAIL PROTECTED]> wrote:
> dear list,
>
> peace,
> -f

All these words and yet nothing is being said. Paragraphs upon heated
paragraphs to reach but a few simple conclusions:

o "People associated with OpenBSD do not have time to help those who
cannot help themselves" is a fair and accurate generalization
o Human nature is human nature

aaron.glenn



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Tony
OpenBSD has an annoying habit of being right.
Perhaps if OpenBSD can be civilized into not speaking their minds,
OpenBSD won't be so annoying (by not being so right).
That seems to be the implicit thrust of these thingees.
Flames invited if I've misread the situation.



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
Rick Barter
Sent: Friday, June 10, 2005 2:59 PM
To: OpenBSD-Misc
Subject: Re: heal the world, and misc@ [strictly coffeetime reading]


dereck wrote:
>>Look, I don't 'act all tough on the net'.  I just
>>refuse to sit idly 
>>by while mamby pamby whiners are spouting crap. 
>>And, in real life, 
>>I'd say the same thing to him.
> 
> On this I'll have to draw the line - that is plainly
> Bullshit.  You would not say anything like this to his
> or her face, because you are a coward hiding behind
> your keyboard.  In the "real world" no one would take
> what you dish on this list, and that is the plain
> fact.  No company or government job would put up with
> it.  We have to because it is a public list.  But you
> are so full of it that it is painful to watch.  You
> would not say these things and stay gainfully
> employed.

Not true.  I have spoken my mind many times in-person and at work, to 
managers and presidents.  I have never been fired for anything I've 
said because I don't attack people personally.  I would gladly have a 
discussion in real-life with anyone on this list.  Only a fool or 
someone as immature as you would actually get so defensive.  Rational 
people can disagree cannot they not?  They can argue points without 
breaking into a fist-fight, can't they?  Maybe you don't understand 
the difference between arguing a point and just arguing.

> You are driving people away from trying and using
> OBSD, and I (for one) hope that you are at least proud
> of yourself.  This is the MISC list, for crissakes,
> and we should be more helpful to newbies.  As a
> technical project, Linux is a mess; but it continues
> to grow not in small part to the esprit de corps that
> the users openly encourage.  Newbie questions on Linux
> lists are not discouraged, and a "keep at it - it'll
> come" encouragement is not at all unusual.  They are
> even proud of getting their grandmothers to use it!  

Never once during this thread have I advocated NOT helping new people. 
  Please re-read my response to the original post.  I have never 
once discouraged someone from participating on this list and have 
helped whenever and wherever I can.

> We, by contrast, have to put up with the "better than
> you" attitude from the vocal minority on this list
> which reminds one unpleasantly of Jerry Fallwell,
> Osama bin Liden, and other wacko religious crowds.

> Put a sock in it, Rick.  Almost everyone met your type
> in grade school.  Small boys who pick fights with
> younger girls, or kick the neighbor's dog, are not
> uncommon.  You are not "keeping it real," or "setting
> the story straight," or "protecting us from assholes."
>  You ARE the asshole.  

Hahaha are you saying I'm a wacko, a terrorist?  Why, because I have 
an opinion I feel strongly about, tried to make a point, and am 
defending my assertions?  This is what I'm talking about.  The world 
is being conditioned such that if you argue with someone, you're the 
enemy.  Grow up.  Oh, and thanks for calling me an asshole.  You made 
my day.

> If you will stop "protecting us" maybe the user base
> will expand. [And yes, I'll be glad to answer
> questions and help - with money, time, and anything
> else.]

Haha.  Who cares if the user base expands.  The OpenBSD team doesn't. 
  Go read some documentation.  They code this stuff for their own 
pleasure/use.  I happen to like the system and come along for the ride.

And if anyone wants to come to my house and discuss it over tea or 
coffee or anything let me know and I'll give you my address.

rvb



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Tony
Some people on this list seem to have some anger management issues.
Some people not on this list seem to have some anger management issues.
Both statements true and both statements approximately equally relevant.

Overall, this list seems quite a friendly place, and if anything
is surprising, it is the reticence of many of the regulars.

A degree in "teaching computer science".
This is very good for teachers who know some computer science to teach
a lot of people something about computer science. In which case it is
probably beneficial that this big mass of humanity, who will never even
begin to understand the stuff, feel good about themselves.
This list cannot serve that purpose. That much is obvious, even if I
weren't lurking on the list. Whatever OpenBSD's goals or achievements,
mediocrity isn't in the list. Whatever they have achieved, they have
achieved with limited resources and according to their own priorities.
They are not so stupid as to let some outsiders set their priorities or
to tell them how they should behave.

Bluntly, at the low to mediocre end, how well the teacher teaches is what
matters. At the high end, it's strictly how well the teacher knows the
subject that matters. If you are after the high end, you tend to listen
to the best teacher, experience, which to the best of my knowledge, has
none of the finer social graces. Seems like OpenBSD, quite correctly,
caters to the high end. There are plenty of other avenues for the rest.

As for anger being expressed, I've seen too many times when the only way
that things do get fixed is when somebody gets mad enough to actually do
something about it. If a bit leaks around the fringes, seems like a very
small price to pay. Certainly nothing that an outsider (myself included)
has any right to complain about.

During my education I have been probably more fortunate than most in having
had a few good teachers. Looking back, seems like the only thing these good
teachers had in common was some kind of intensity or drive or belief in
what they were teaching. I find the same kind of stuff here, so I lurk here.



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
Roy Morris
Sent: Friday, June 10, 2005 11:38 AM
To: [EMAIL PROTECTED]
Cc: -f; OpenBSD
Subject: Re: heal the world, and misc@ [strictly coffeetime reading]


Bram Van Dam wrote:

>
> I particularly agree with this bit. Some people on this list seem to
> have some anger management issues.


damn it!! we don't! we can contain ourselves!!! .. got it !! huh!!!

lol



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Sigfred Håversen

Rick Barter wrote:
[snip snappy stuff]


I didn't say that he wasn't a teacher because he's not actively 
teaching.  I was eluding to him not being a teacher because he is afraid 
of the responsibility that goes along with the act of teaching. 
 Everyone is a teacher whether they know it or not.


Word twister.

/Sigfred



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Rick Barter

dereck wrote:

Look, I don't 'act all tough on the net'.  I just
refuse to sit idly 
by while mamby pamby whiners are spouting crap. 
And, in real life, 
I'd say the same thing to him.


On this I'll have to draw the line - that is plainly
Bullshit.  You would not say anything like this to his
or her face, because you are a coward hiding behind
your keyboard.  In the "real world" no one would take
what you dish on this list, and that is the plain
fact.  No company or government job would put up with
it.  We have to because it is a public list.  But you
are so full of it that it is painful to watch.  You
would not say these things and stay gainfully
employed.


Not true.  I have spoken my mind many times in-person and at work, to 
managers and presidents.  I have never been fired for anything I've 
said because I don't attack people personally.  I would gladly have a 
discussion in real-life with anyone on this list.  Only a fool or 
someone as immature as you would actually get so defensive.  Rational 
people can disagree cannot they not?  They can argue points without 
breaking into a fist-fight, can't they?  Maybe you don't understand 
the difference between arguing a point and just arguing.



You are driving people away from trying and using
OBSD, and I (for one) hope that you are at least proud
of yourself.  This is the MISC list, for crissakes,
and we should be more helpful to newbies.  As a
technical project, Linux is a mess; but it continues
to grow not in small part to the esprit de corps that
the users openly encourage.  Newbie questions on Linux
lists are not discouraged, and a "keep at it - it'll
come" encouragement is not at all unusual.  They are
even proud of getting their grandmothers to use it!  


Never once during this thread have I advocated NOT helping new people. 
 Please re-read my response to the original post.  I have never 
once discouraged someone from participating on this list and have 
helped whenever and wherever I can.



We, by contrast, have to put up with the "better than
you" attitude from the vocal minority on this list
which reminds one unpleasantly of Jerry Fallwell,
Osama bin Liden, and other wacko religious crowds.



Put a sock in it, Rick.  Almost everyone met your type
in grade school.  Small boys who pick fights with
younger girls, or kick the neighbor's dog, are not
uncommon.  You are not "keeping it real," or "setting
the story straight," or "protecting us from assholes."
 You ARE the asshole.  


Hahaha are you saying I'm a wacko, a terrorist?  Why, because I have 
an opinion I feel strongly about, tried to make a point, and am 
defending my assertions?  This is what I'm talking about.  The world 
is being conditioned such that if you argue with someone, you're the 
enemy.  Grow up.  Oh, and thanks for calling me an asshole.  You made 
my day.



If you will stop "protecting us" maybe the user base
will expand. [And yes, I'll be glad to answer
questions and help - with money, time, and anything
else.]


Haha.  Who cares if the user base expands.  The OpenBSD team doesn't. 
 Go read some documentation.  They code this stuff for their own 
pleasure/use.  I happen to like the system and come along for the ride.


And if anyone wants to come to my house and discuss it over tea or 
coffee or anything let me know and I'll give you my address.


rvb



Re: tftp:bsd.rd RLX

2005-06-10 Thread Rob Foster
found this about some tyan motherboard, which is not what we have in
the blade but..

> One of my mail to the support:
> But I try three things:
> 1) redirect BIOS to serial port: OK
> 2) redirect kernel to serial port: OK
> 3) redirect both BIOS and kernel to serial port: problem.
>
> In the case 3) I get all the message from the BIOS, I can manage it,
> but when the kernel boots, the kernel sends nothing to the serial port
> if the serial port was already used by the BIOS.
> So I suppose that the BIOS does not release the serial port, before
> the kernel boots.
> The answer from TYAN:
> I used Red Hat 9 and was able to redirect both the BIOS and RH 9 at
> the same
> time. 


is this true? how can I work around this?

On 6/10/05, Rob Foster <[EMAIL PROTECTED]> wrote:
> > The reason why the first way doesn't work is because the boot loader uses
> > BIOS routines to write to the BIOS console, so console output stops once
> > the kernel gets loaded.
> 
> can i get the kernel to write using bios routines to the bios console too?
> 
> > The second version "should" work by looking at it.  I just went and tried
> > to locate my working pxeboot environment but I realized the Linux master
> > in that blade rack was shutdown due to security issues.
> >
> > Hmmm, on further thought I remembered I'm not using a standard pxeboot
> > loader.  I'm using an experimental one a developer gave me to try out,
> > which allowed you to set the boot loader console and kernel console
> > separately.  However your second method should still work.
> >
> > Are you setting serial console redirect in the BIOS?
> 
> I'm not sure, how to I get into the bios config on these things?
> 
> >
> > diana



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Jason Crawford
I've taught quite a few children, ranging from the 5 - 17 year range
(I've taught adults too, but has nothing to do with this discussion) a
lot, and I agree with Rick on his views. If a kid can't learn how to
cope with being wrong, and being told to actually read something, well
then we'll end up with a bunch of whimps. Mind you, what I was
teaching to kids had nothing to do with computers in any way, but the
same concepts still apply. And their parents thought I was one of the
best teachers they've seen (many told me to my face).

Jason

On 6/10/05, Sigfred Heversen <[EMAIL PROTECTED]> wrote:
> Rick Barter wrote:
> [snippy snap stuff]
> 
> Your experience with theaching are not that extensive, I gather?
> 
> /Sigfred



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Rick Barter

Sigfred Heversen wrote:

Rick Barter wrote:
[snippy snap stuff]

Your experience with theaching are not that extensive, I gather?

/Sigfred


What makes you say that?  Please elaborate.  If you have a point, make 
it.  And before you go getting all high and mighty, run your next 
email through a spelling checker.


rvb



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Sigfred Håversen

Rick Barter wrote:
[snippy snap stuff]

Your experience with theaching are not that extensive, I gather?

/Sigfred



Re: tftp:bsd.rd RLX

2005-06-10 Thread Rob Foster
> The reason why the first way doesn't work is because the boot loader uses
> BIOS routines to write to the BIOS console, so console output stops once
> the kernel gets loaded.

can i get the kernel to write using bios routines to the bios console too?

> The second version "should" work by looking at it.  I just went and tried
> to locate my working pxeboot environment but I realized the Linux master
> in that blade rack was shutdown due to security issues.
> 
> Hmmm, on further thought I remembered I'm not using a standard pxeboot
> loader.  I'm using an experimental one a developer gave me to try out,
> which allowed you to set the boot loader console and kernel console
> separately.  However your second method should still work.
> 
> Are you setting serial console redirect in the BIOS?

I'm not sure, how to I get into the bios config on these things?

> 
> diana



Re: wireless bridge router/firewall

2005-06-10 Thread Dimitri Georganas

*Bridged*:
The easiest, unfirewalled

Get a switch and a wireless bridge (Like senao /engenius sl2511)

Connect the bridge to the wireless router and to the switch and you're done.

Cost: 100 euro

Or:

Get an openbsd box with ethernet and wireless card, bridge both interfaces
and connect the wireless interface to the wireless router. Connect the wired
interface to the switch where you also connect the rest of your equipment.

Here you could set up a bridged firewall with pf.
*
Routed
*
Get an openbsd box with ethernet and wireless card, instead of bridging, 
configure
NAT between the two interfaces, connect the wireless card to the 
wireless router
in client mode. Connect the wired interface to the switch togheter with 
your equipment.


Things to read:

pf manual
man ifconfig
man brconfig
man hostname.if
and some more...

If you know how to do it it's five minutes work. If you don't, it's some 
homework.




Zen Lunatic wrote:


I recently got cable. The modem is installed on the third floor of the
house. We have a wireless router which allows me to connect my laptop,
and we have an xp machine and a ps2 hooked wired to two of the four
wired ports on the router.

I wanted to build my own router/firewall but the modem is in someone
elses room and they don't want to have a machine sitting in there.

What I want to do is somehow build a box that is a router/firewall but
connects to the internet using the wireless signal, so I can set up my
own router in my room in the basement and connect a bunch of wired
computers so I don't have to buy wireless cards for everything plus so
I can have my own dedicated firewall. This is basically a standard or
bsd dedicated router/firewall box, but which uses the wireless to get
to the internet instead of a second network card. Can this be done?

I looked into these wireless bridge things but I was wondering if I
could do something like I've described with a bsd or gnu/linux box
with wireless card and a network card which is plugged into a switch
like a normal bsd or gnu/linux router.

I searched and didn't find anything on this topic.

I know this isn't the most ideal setup for a home network, but its all
I got for now. At least my part of the network will be firewalled off
from the windows side. Thanks.




Re: Tweaks for spamd

2005-06-10 Thread Tobias Weingartner
On Thursday, June 9, Tim Hoddy wrote:
> 
> I use the "-n" switch to spamd to change the default banner to a
> sendmail-like one.  That appears to prevent early disconnects from
> semi-intelligent mailers.

Personally, hurting spammers is nice and good, but I'd rather that they
just go away.  If they see the spamd banner, and run to the hills, all
the better.

--Toby.



Re: wireless bridge router/firewall

2005-06-10 Thread josh
Zen Lunatic wrote:
> I recently got cable 
> ...We have a wireless router...
> I wanted to build my own router/firewall but the modem is in someone
> elses room and they don't want to have a machine sitting in there.
> 
> What I want to do is somehow build a box that is a router/firewall but
> connects to the internet using the wireless signal, so I can set up my
> own router

Most of the consumer NAT routers (Linksys, DLink, etc.) offer a feature to 
fully expose one static ip address.  They usually term this "DMZ" since 
that is common jargon for a partially or completely exposed subnet.  See
the router's manual. 

You could turn your laptop into a router, and use PF, if 1) you wanted to
use your laptop as a router, and if 2) it has a wire NIC as well.  Any
bsd platform can act as a router in this instance, as long as there are at
least 2 NICs.

Dru Levigne's "BSD Hacks" book has an example of using obsd as a wireless
router to a wired network; yours would be similar.  And in addition,
Michael Lucas's "Absolute OpenBSD" discusses setting up DMZs with two 
firewalls, 
which is also similar to what you need.



Re: tftp:bsd.rd RLX

2005-06-10 Thread Diana Eichert
PLEASE Don't cross post to misc@ and [EMAIL PROTECTED]

On Fri, 10 Jun 2005, Rob Foster wrote:

> I'm having trouble getting some RLXs to boot openbsd. 
> 
> pxeboot works, but when i try to load "boot tftp:bsd.rd" (which is in
> the tftp server's root) it stops.
> 
> ++
>  |
> |
>  |
> |
>  | CPU Type: Pentium(R) III   
> |
>  | CPU Speed   : 800 MHz  
> |
>  |
> |
>  | BIOS Date   : 02/26/02  System ROM  : E956 -   
> |
>  | System Memory   : 640 KBCOM Ports   : 03F8 02F8
> |
>  | Extended Memory : 1048511 KBLPT Ports   : None 
> |
>  | Shadow Ram  : 64960 KB  PS/2 Mouse  : Not Installed
> |
>  |
> |
>  | Hard Disk 0 : 80026MB   MAC Addr (Pub)  : 00.42.52.00.49.F4
> |
>  | Hard Disk 1 : None  MAC Addr (Priv) : 00.42.52.00.49.F5
> |
>  | Hard Disk 2 : 80026MB   MAC Addr (Mgmt) : 00.42.52.00.49.F6
> |
>  | Hard Disk 3 : None 
> |
>  
> ++
> 
> Intel(R) Boot Agent Version 4.0.17
> Copyright (C) 1997-2001, Intel Corporation
> 
> Intel Base-Code, PXE-2.0 (build 083)
> Copyright (C) 1997-2001, Intel Corporation
> 
> CLIENT MAC ADDR: 00 42 52 00 49 F6
> CLIENT IP: 10.0.0.14  MASK: 255.255.255.0  DHCP IP: 172.1.1.254
> probing: pc0 com0 apm pxe![2.1] mem[618K 1022M a20=on]
> disk: hd0+* hd1+*
> net: mac 00:42:52:00:49:f6, ip 10.0.0.14, server 10.0.0.1
> >> OpenBSD/i386 PXEBOOT 1.02
> boot> set timeout 0
> boot> boot tftp:bsd.rd
> booting tftp:bsd.rd: 4302596/
> 
> 
> what do i do?
> 
> this doesn't work either:
> /var/tftp/etc/boot.conf
> stty 38400 com0
> set tty com0
> boot tftp:bsd.rd

I have netbooted RLX blades with OpenBSD in the past, in fact I have
several running OpenBSD right now.

The reason why the first way doesn't work is because the boot loader uses
BIOS routines to write to the BIOS console, so console output stops once
the kernel gets loaded.

The second version "should" work by looking at it.  I just went and tried
to locate my working pxeboot environment but I realized the Linux master
in that blade rack was shutdown due to security issues.

Hmmm, on further thought I remembered I'm not using a standard pxeboot
loader.  I'm using an experimental one a developer gave me to try out,
which allowed you to set the boot loader console and kernel console
separately.  However your second method should still work.

Are you setting serial console redirect in the BIOS?

diana



Re: blah Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Steve Davis
Their soap box is here instead of the Mall or the street corner . Thats why !

On 6/10/05, Gordon Grieder <[EMAIL PROTECTED]> wrote:
> Why are some people starting off replies to this thread with a
> statement to the effect of "I am a christian" as if it's a badge of
> honour? It labels them as kooks, no different that someone reading tea
> leaves, practicing astrology or believing in Nostradamus' quatrains.
> 
> And, like my reply, it has nothing to do with OpenBSD.



can't mount ipod shuffle any more

2005-06-10 Thread Jolan Luff
hi,

i used to be able to mount my ipod shuffle and use it with audio/gtkpod.
i tried to do so yesterday, and it no longer works.

the most suspicious thing is that previously, sd0i existed without me
having to do any manual intervention, but this doesn't seem to be the
case anymore:

disklabel: warning, DOS partition table with no valid OpenBSD partition
# /dev/rsd0c:
type: SCSI
disk: SCSI disk
label: iPod
flags:
bytes/sector: 512
sectors/track: 63
tracks/cylinder: 255
sectors/cylinder: 16065
cylinders: 62
total sectors: 996030
rpm: 211
interleave: 1
trackskew: 0
cylinderskew: 0
headswitch: 0   # microseconds
track-to-track seek: 0  # microseconds
drivedata: 0 

16 partitions:
# sizeoffset  fstype [fsize bsize  cpg]
  c:996030 0  unused  0 0  # Cyl 0 -61 

there is definitely a fat partition according to fdisk:

fdisk: sysctl(machdep.bios.diskinfo): Device not configured
Disk: sd0   geometry: 62/255/63 [996030 Sectors]
Offset: 0   Signature: 0xAA55
 Starting   Ending   LBA Info:
 #: idC   H  S -C   H  S [   start:  size   ]

*0: 0B0   0 46 -   62 228 36 [  45: 1010385 ] Win95 FAT-32
 1: 000   0  0 -0   0  0 [   0:   0 ] unused  
 2: 000   0  0 -0   0  0 [   0:   0 ] unused  
 3: 000   0  0 -0   0  0 [   0:   0 ] unused

if i add sd0i:

# sizeoffset  fstype [fsize bsize  cpg]
  c:996030 0  unused  0 0  # Cyl 0 -61 
  i:99596763   MSDOS   # Cyl 0*-61 

i still cannot mount my ipod shuffle:

$ sudo mount /dev/sd0i /mnt/ipod
mount_msdos: /dev/sd0i on /mnt/ipod: Inappropriate file type or format

$ sudo fsck_msdos /dev/sd0i
** /dev/sd0i
Invalid signature in boot block: 

ok, weird but it mounts just fine under both mac osx and windows, so i
don't think it is a case of a corrupted fat partition.

i noticed a lot of changes to usb and scsi made during the hackathon, so
i've tried kernels from 3.7, apr 15 (when my ipod shuffle last worked),
pre-hackathon, etc. and continue to have the same problem.  the fact
that it works fine under macosx and windows makes me think that i am
either missing something obvious or that i've become slow and can't
downgrade kernels properly.

i've made a dump of the drive via dd if=/dev/sd0c which is available
here:

http://protection.cx/~jolan/ipod.dump.gz

dmesg below.  i'm at a loss since i can't regress to where it worked
before and gradually step up to find the brekage so i'm wondering if
anyone has any suggestions.

thanks,
- jolan


OpenBSD 3.7-current (GENERIC) #0: Thu Jun  9 14:03:28 CDT 2005
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) M processor 1.40GHz ("GenuineIntel" 686-class) 1.40 
GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,SBF,EST,TM2
cpu0: Enhanced SpeedStep 1400 MHz (1116 mV): speeds: 1400, 1300, 1200, 1100, 
1000, 900, 800, 600 MHz
real mem  = 795320320 (776680K)
avail mem = 718475264 (701636K)
using 4278 buffers containing 39870464 bytes (38936K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(64) BIOS, date 01/07/05, BIOS32 rev. 0 @ 0xfd740
apm0 at bios0: Power Management spec V1.2
apm0: battery life expectancy 99%
apm0: AC on, battery charge high
apm0: flags 30102 dobusy 0 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xfd6d0/0x930
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdeb0/256 (14 entries)
pcibios0: PCI Interrupt Router at 000:31:0 ("Intel 82371FB ISA" rev 0x00)
pcibios0: PCI bus #2 is the last bus
bios0: ROM list: 0xc/0xc800! 0xcc800/0x1000 0xcd800/0x1000 0xdc000/0x4000! 
0xe/0x1
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel 82852GM Hub-PCI" rev 0x02
"Intel 82852GM Memory" rev 0x02 at pci0 dev 0 function 1 not configured
"Intel 82852GM Configuration" rev 0x02 at pci0 dev 0 function 3 not configured
vga1 at pci0 dev 2 function 0 "Intel 82852GM AGP" rev 0x02: aperture at 
0xe000, size 0x800
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
"Intel 82852GM AGP" rev 0x02 at pci0 dev 2 function 1 not configured
uhci0 at pci0 dev 29 function 0 "Intel 82801DB USB" rev 0x01: irq 11
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1 at pci0 dev 29 function 1 "Intel 82801DB USB" rev 0x01: irq 11
usb1 at uhci1: USB revision 1.0
uhub1 at usb1
uhub1: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2 at pci0 dev 29 function 2 "Intel 82801DB USB" rev 0x01: irq 11
usb2 at u

tftp:bsd.rd RLX

2005-06-10 Thread Rob Foster
I'm having trouble getting some RLXs to boot openbsd. 

pxeboot works, but when i try to load "boot tftp:bsd.rd" (which is in
the tftp server's root) it stops.

++
 ||
 ||
 | CPU Type: Pentium(R) III   |
 | CPU Speed   : 800 MHz  |
 ||
 | BIOS Date   : 02/26/02  System ROM  : E956 -   |
 | System Memory   : 640 KBCOM Ports   : 03F8 02F8|
 | Extended Memory : 1048511 KBLPT Ports   : None |
 | Shadow Ram  : 64960 KB  PS/2 Mouse  : Not Installed|
 ||
 | Hard Disk 0 : 80026MB   MAC Addr (Pub)  : 00.42.52.00.49.F4|
 | Hard Disk 1 : None  MAC Addr (Priv) : 00.42.52.00.49.F5|
 | Hard Disk 2 : 80026MB   MAC Addr (Mgmt) : 00.42.52.00.49.F6|
 | Hard Disk 3 : None |
 ++

Intel(R) Boot Agent Version 4.0.17
Copyright (C) 1997-2001, Intel Corporation

Intel Base-Code, PXE-2.0 (build 083)
Copyright (C) 1997-2001, Intel Corporation

CLIENT MAC ADDR: 00 42 52 00 49 F6
CLIENT IP: 10.0.0.14  MASK: 255.255.255.0  DHCP IP: 172.1.1.254
probing: pc0 com0 apm pxe![2.1] mem[618K 1022M a20=on]
disk: hd0+* hd1+*
net: mac 00:42:52:00:49:f6, ip 10.0.0.14, server 10.0.0.1
>> OpenBSD/i386 PXEBOOT 1.02
boot> set timeout 0
boot> boot tftp:bsd.rd
booting tftp:bsd.rd: 4302596/


what do i do?

this doesn't work either:
/var/tftp/etc/boot.conf
stty 38400 com0
set tty com0
boot tftp:bsd.rd



wireless bridge router/firewall

2005-06-10 Thread Zen Lunatic
I recently got cable. The modem is installed on the third floor of the
house. We have a wireless router which allows me to connect my laptop,
and we have an xp machine and a ps2 hooked wired to two of the four
wired ports on the router.

I wanted to build my own router/firewall but the modem is in someone
elses room and they don't want to have a machine sitting in there.

What I want to do is somehow build a box that is a router/firewall but
connects to the internet using the wireless signal, so I can set up my
own router in my room in the basement and connect a bunch of wired
computers so I don't have to buy wireless cards for everything plus so
I can have my own dedicated firewall. This is basically a standard or
bsd dedicated router/firewall box, but which uses the wireless to get
to the internet instead of a second network card. Can this be done?

I looked into these wireless bridge things but I was wondering if I
could do something like I've described with a bsd or gnu/linux box
with wireless card and a network card which is plugged into a switch
like a normal bsd or gnu/linux router.

I searched and didn't find anything on this topic.

I know this isn't the most ideal setup for a home network, but its all
I got for now. At least my part of the network will be firewalled off
from the windows side. Thanks.



Re: Sad boot problem - SOLVED

2005-06-10 Thread Luciano ES
After some more thinking and extensive tests, it seems that my problem is
gone for good. It was a very silly problem. Because I am a silly silly
man...  :-(

The problem is that I am booting with Grub, The Great. And I have Windows
in a slice. And OpenBSD now lives in a slice where a second (back-up)
Windows installation used to live. And you can't have more than one visible
Windows partitions at the same time. Need I say more?

Well, actually, it was more like that:

- I had these three primary partitions: Windows, Windows then NetBSD.

- All that Grub needed to boot NetBSD (hd0,2) was chainloader +1. So I
didn't change that because it should be enough to boot OpenBSD too.

- But Grub had to hide the second Windows (hd0,1) to boot the first one
(hd0,0):

hide (hd0,1)
unhide (hd0,0)
rootnoverify (hd0,0)
makeactive
chainloader +1

- When I decided to try OpenBSD, I deleted (hd0,1) and (hd0,2) and made one
single slice for it. OpenBSD thus became (hd0,1). And the Windows boot on
(hd0,0) was set to *hide* (hd0,1). So that slice was simply hidden every
time I booted into Windows.

Duh!

The help I received here actually helped because I had this idea after
re-reading Stuart's words:

"Are you loading the OpenBSD boot directly from MBR, or is there some other
bootmanager in the way? Any chance some program might have decided that the
OpenBSD partition is bogus because it doesn't know the type, and decides to
change it?"

Thank you all for the time and attention given to my silly problem. Now, if
you'll excuse me, I have to kick myself...

-- 
Luciano ES
Santos, SP - Brasil
>
<-quote-> **
On 09/06/05 at 19:00, Tobias Weingartner wrote in 2K:

>Something is overwriting it.  Where does your 'a' slice begin?
>What is the output of 'disklabel wd0'?

* END OF ORIGINAL MESSAGE *



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Karsten McMinn
On 6/10/05, -f <[EMAIL PROTECTED]> wrote:
> a nice cup of coffee in front of me, and as a big fan of
> robert x., let me reflect a bit on the phenomenon called
> "misc@openbsd.org"...  will try to keep it short.
> 

habemus fidei defensor!

why do people feel the need to try to make things which are
truly free, into religions?



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Rick Barter

Bram Van Dam wrote:

-f wrote:


2. if a mail makes you angry, in 85% of all cases, you should
   just delete it, and forget about it.  i am quite amazed
   how hard it is for people to ignore stuff.  you must exercise
   your ignore muscle.  saves awful lot of time and energy.
   (i know, this mail is the opposite of this advice, but i slept
   on it ;-)



I particularly agree with this bit. Some people on this list seem to 
have some anger management issues. It's probably not real anger -- in 
real life they'd probably just look around the room for a bit and wonder 
what to say, either that or their voice would crack in the middle of 
their tirade --, but still. People have feelings. Just because you're 
typing at a screen in your room (even if you own the bloody mailing 
list) doesn't magically give you the right to be a cunt. Nor does it 
somehow erase emotions and emotional implications from the list.


If you're one of those people who acts all tough on the net (wahey! I'm 
a really mean guy on [EMAIL PROTECTED] better watch out for me!) then you're 
the one who needs psychological help, rather than the aforementioned 
(think it was by Rick and Jason) 13 year old fragile minds.


Look, I don't 'act all tough on the net'.  I just refuse to sit idly 
by while mamby pamby whiners are spouting crap.  And, in real life, 
I'd say the same thing to him.


You need to think before you talk (not doing so is like wiping your arse 
before you shit). Think something along the lines of "if this person 
were saying this to my face, how would I react?". I'm pretty damned sure 
that you wouldn't start screaming and insulting them for all you're 
worth. If you do, again, you're the one who needs the help.


I'm neither screaming nor insulting anyone.

I quite frankly don't give a rat's arse about how frustrated some of you 
are by seeing n00bs post on the list. So what if someone didn't read man 
page XYZ? At least tell them to read it. The only thing more disgusting 
than people not willing to learn, is people not willing to help others 
learn. Share the knowledge. Either that, or shut your trap.


Um...everyone who's ever shared knowledge with me intentionally has 
done so because I tried and showed effort.  I've gotten flamed on 
misc@ before too.  I asked a stupid question, didn't do my homework, 
and got spanked for it.  No big deal.  I apologized, learned to not be 
a dumb ass and went about my business.  I suggest you do the same.


I think our teacher -f makes some good points. And that fact that some 
of you say he's not a teacher because he's not actively teaching, only 
shows how correct he is. Next thing you'll say that the only real doctor 
is the kind with a stethoscope around his neck.. Now, excuse me whilst I 
go roll my eyes for a bit.


I didn't say that he wasn't a teacher because he's not actively 
teaching.  I was eluding to him not being a teacher because he is 
afraid of the responsibility that goes along with the act of teaching. 
 Everyone is a teacher whether they know it or not.


rvb



blah Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Gordon Grieder
Why are some people starting off replies to this thread with a
statement to the effect of "I am a christian" as if it's a badge of
honour? It labels them as kooks, no different that someone reading tea
leaves, practicing astrology or believing in Nostradamus' quatrains.

And, like my reply, it has nothing to do with OpenBSD.



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Roy Morris

Bram Van Dam wrote:



I particularly agree with this bit. Some people on this list seem to 
have some anger management issues.



damn it!! we don't! we can contain ourselves!!! .. got it !! huh!!!

lol



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Dan Bond
Firstly, i am a christian but can totally understand how some people
might be put off by the style of evangelism of some christians,
typified by those who stand in malls or on street corners and shout.
Only takes a few individuals to make people assume everyone is the
same. Anyway

I've been lurking on this list for a month or two now and have seen
many very intelligent people offer excellent advice and give their
time for free to help others. I've also seen the reaction to some
questions being angry, and some might consider rude, however the
longer i spend here the more i end up agreeing with the annoyance. It
becomes quickly obvious that _everything_ has been said 100x before,
and often the answer is in the FAQ. I would say that sometimes people
need to remember that the answer to a question might not be quite so
obvious to someone else, and that simply directing someone to a man
page can avoid lots of agro on all sides. I think if everyone relaxed
a little more and waited a little longer before shouting it would be
good, but sometimes it's entirely the correct response to a question
where someone hasn't even tried to work it out for themselves.

Dan



Re: Vsftpd compile error

2005-06-10 Thread Alexandre Anriot
> > >>> I'm trying to compile vsftpd 2.03 with tcpwrappers and SSL support
> > >>> on OpenBSD 3.7. I've edited the builddefs.h per the readme.ssl file

Here is an update for vsftpd port:

- enabling SSL support by default
- new flavor to build vsftpd with TCP Wrappers support


Some advises by robert@

Please, we continue the thread on [EMAIL PROTECTED]

-- 

Alexandre Anriot
[EMAIL PROTECTED]
diff -urN /usr/ports/net/vsftpd/Makefile net/vsftpd/Makefile
--- /usr/ports/net/vsftpd/Makefile  Fri Jun 10 09:00:31 2005
+++ net/vsftpd/Makefile Fri Jun 10 17:50:49 2005
@@ -24,8 +24,16 @@
 MAKE_FLAGS=CC="${CC}" CFLAGS="${CFLAGS} -Wall -W -Wshadow"
 
 SAMPLEDIR= ${PREFIX}/share/examples/vsftpd
-NO_REGRESS=Yes
 
+FLAVORS=   tcpwrappers
+FLAVOR?=
+
+.if ${FLAVOR:L:Mtcpwrappers}
+pre-build:
+   @perl -pi -e "s,#undef VSF_BUILD_TCPWRAPPERS,#define 
VSF_BUILD_TCPWRAPPERS," \
+   ${WRKSRC}/builddefs.h
+.endif
+
 do-configure:
@perl -pi -e "s,%%SYSCONFDIR%%,${SYSCONFDIR}," ${WRKSRC}/defs.h
 
@@ -36,5 +44,7 @@
${INSTALL_DATA_DIR} ${SAMPLEDIR}
@cp -r ${WRKSRC}/EXAMPLE/* ${SAMPLEDIR}
${INSTALL_DATA} ${WRKSRC}/vsftpd.conf ${SAMPLEDIR}
+
+NO_REGRESS=Yes
 
 .include 
diff -urN /usr/ports/net/vsftpd/patches/patch-builddefs_h 
net/vsftpd/patches/patch-builddefs_h
--- /usr/ports/net/vsftpd/patches/patch-builddefs_h Thu Jan  1 01:00:00 1970
+++ net/vsftpd/patches/patch-builddefs_hFri Jun 10 17:50:59 2005
@@ -0,0 +1,14 @@
+$OpenBSD$
+--- builddefs.h.orig   Sat Mar 19 18:50:20 2005
 builddefs.hFri Jun 10 17:50:56 2005
+@@ -2,8 +2,8 @@
+ #define VSF_BUILDDEFS_H
+ 
+ #undef VSF_BUILD_TCPWRAPPERS
+-#define VSF_BUILD_PAM
+-#undef VSF_BUILD_SSL
++#undef VSF_BUILD_PAM
++#define VSF_BUILD_SSL
+ 
+ #endif /* VSF_BUILDDEFS_H */
+ 
diff -urN /usr/ports/net/vsftpd/patches/patch-tcpwrap_c 
net/vsftpd/patches/patch-tcpwrap_c
--- /usr/ports/net/vsftpd/patches/patch-tcpwrap_c   Thu Jan  1 01:00:00 1970
+++ net/vsftpd/patches/patch-tcpwrap_c  Fri Jun 10 10:08:53 2005
@@ -0,0 +1,11 @@
+$OpenBSD$
+--- tcpwrap.c.orig Fri Jun 10 10:08:18 2005
 tcpwrap.c  Fri Jun 10 10:08:32 2005
+@@ -10,6 +10,7 @@
+ #include "tcpwrap.h"
+ #include "builddefs.h"
+ #include "utility.h"
++#include 
+ 
+ #ifdef VSF_BUILD_TCPWRAPPERS
+   #include 
diff -urN /usr/ports/net/vsftpd/pkg/DESCR net/vsftpd/pkg/DESCR
--- /usr/ports/net/vsftpd/pkg/DESCR Mon Dec 15 22:55:13 2003
+++ net/vsftpd/pkg/DESCRFri Jun 10 17:49:11 2005
@@ -5,3 +5,8 @@
 Recent evidence shows that vsftpd is also extremely fast and scalable.
 vsftpd has achieved ~4000 concurrent users on a single machine, in a
 production environment.
+
+Flavor:
+
+* ssl - build the  SSL support
+* tcpwrappers - build the TCP wrappers support
diff -urN /usr/ports/net/vsftpd/pkg/MESSAGE net/vsftpd/pkg/MESSAGE
--- /usr/ports/net/vsftpd/pkg/MESSAGE   Thu Apr  7 20:59:46 2005
+++ net/vsftpd/pkg/MESSAGE  Fri Jun 10 10:11:45 2005
@@ -1,14 +1,16 @@
-You can run vsftpd in standalone mode:
+You can run vsftpd in standalone mode from the shell or through inetd:
 
-$ sudo vsftpd &
+* in vsftpd.conf: listen=NO
 
-Or through inetd:
-
-- in vstftp.conf: listen=NO
-
-- in inetd.conf:
-  # normal mode
+* in inetd.conf with normal mode:
   "ftp stream tcp nowait root ${PREFIX}/sbin/vsftpd vsftpd"
 
-  # or with tcp-wrappers (see tcpd(8))
+  or with tcp-wrappers (see tcpd(8))
   "ftp stream tcp nowait root /usr/libexec/tcpd ${PREFIX}/sbin/vsftpd"
+
+
+If you have built the port with SSL support, you have to add:
+
+* in vsftpd.conf: ssl_enable=YES
+
+* a ssl key in /usr/share/ssl/certs/vsftpd.pem



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Shane J Pearson

On 11/06/2005, at 1:29 AM, Bram Van Dam wrote:

I quite frankly don't give a rat's arse about how frustrated some  
of you are by seeing n00bs post on the list. So what if someone  
didn't read man page XYZ?


Do you and -f need to be reminded, that the "n00b" in question made
disparaging claims about OpenBSD developers and their intentions?

Claiming them to be arrogant and their stance to be "an unobjective
evasion"? He claimed that the problems with GCC optimizations were due
to OpenBSD and that it is easy for people to blame GCC when they had
"no idea what was wrong".

Is it any wonder a thread like that gets heated?



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Walter Goulet

Bram Van Dam wrote:
I quite frankly don't give a rat's arse about how frustrated some of you 
are by seeing n00bs post on the list. So what if someone didn't read man 
page XYZ? At least tell them to read it. The only thing more disgusting 
than people not willing to learn, is people not willing to help others 
learn. Share the knowledge. Either that, or shut your trap.




You missed my point entirely. I too am a new OpenBSD user. My point is 
that people who attempt to perform installations which directly 
contradict published OpenBSD guidelines (use GENERIC), then complain 
about the problems they encountered aren't helping new users. If 
anything, they are teaching new users bad habits. If you don't follow 
the instructions, you deserve to get yelled at because:

1) You waste developers time and piss them off
2) You are not providing useful information to new users.

I'm glad that you obtain some entertainment value from the list, but new 
users don't come to misc for entertainment, we come for useful 
information to solve our issues and identify new issues that haven't 
been encountered before.


Walter



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Terry
On Fri, Jun 10, 2005 at 05:17:41PM +0200, -f wrote:

snip

> pps. i just realized my mail could depict me as the
> local christian from your mall.  i am not.

I am a christian and I agree with Rick alot more than I agree with
you.

--
Terry



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Walter Goulet
Hate to keep this thread going, but I have to strongly disagree with the 
original poster's assertion on the attitude of the list. I have been 
treated well on the list. Additionally, I've been very happy at how 
receptive the developers are to discussing issues if you simply do your 
homework and provide patches to indicate you've really thought about the 
issue.


My only complaint is that the signal to noise ratio is getting more and 
more out of hand. As a new OpenBSD user, I have to wade through all the 
useless complaints about how 'newbies' are treated and pointless 
'feature requests' to find the answers I need.


Can't your pointless 'heal the world' rants be taken to another list? 
You're not changing anything, just pissing off overburdened developers 
and frustrating new users.


- walter

Rick Barter wrote:

-f wrote:


dear list,

a nice cup of coffee in front of me, and as a big fan of
robert x., let me reflect a bit on the phenomenon called
"misc@openbsd.org"...  will try to keep it short.



You failed to keep it short.


a couple of days ago, there was a quite big thread about optimized
kernel builds.  the caller had a point (all of us do, no matter how
insignificant) but some of the answers were rude, childish and much
more trollish than the actual post itself.  that thread made
me quite disgusted of misc@, the way people treat each other here.

i am a teacher.  i have a degree in "teaching computer science".
when you learn to be a teacher, you must sign up to basic
psychology classes.  obviously.  teachers are role models.
obviously.  i don't teach at the moment, and i am not sure
i will.



Then you're not a teacher.


i have found the fact that some of the kids will
form habits, opinions, god-knows-what-else based on my
personality quite scary and too big a responsibility.
for now anyway.



Please don't ever teach.  If this is a legitimate fear for you, you'll 
do much more harm than good if you actually try to educate anyone. 
Everyone is a role model.  If you don't think kids have already formed 
 habits and opinions based on your personality, you're mistaken.



but i am also what some might call nerd/geek (blech) and am
very familiar with the social implications of that.


 >


what people here mostly fail to realize is, how impersonal
the internet really is. 99% of you don't know how old i am, how do i 
look like, what's my life like.  same is true from

my side towards you.



Exactly.  It doesn't matter who you are, how old or young you are, how 
you look.  So why bring it up?




my point is, that you could be affecting(flaming) a developing
personality, a 13 year old kid who just happens to be very
intelligent, just installed the system and hurries off to the
mailing list to satisfy his knowledge hunger without realizing
all the mailing list nuances we see everyday (top posting,
long signatures, not reading the documentation beforehand,
posting the "taboo" questions).  you just never know.
(well, except darren reed ;-)




You know what?  This is the number one problem with the world today; 
people like you trying to protect the young, innocent, whatever from 
themselves and others.  Since when is it *MY* job to police everyone 
else's kids and feelings?  I hope I do affect developing personalities.  
I hope they learn that the world doesn't revolve around them and that if 
you ask a stupid question, you get a stupid answer.  And, if posting to 
misc@ and getting flamed makes them cry, they had better develop a 
thicker skin than that because the world is a big, scary place.



it's all about experience.  there is a baby born every second,
and no one was born wise.



Right.  So?  Who gives a crap.  How do you think experience is gained? 
 By being handed information and never getting yelled at?  No.  Most 
experience is gained through failure and disappointment.  Don't sell 
people short.  Let them take a few hard knocks in life.  They'll be 
better people for it.  It builds character.



everyone who uses email for more than 5 years knows just how
elusive this form of communication is.  how easy it is to
misunderstand, misinterpret even a clearly worded email.


1. if a mail makes you angry, never respond rightaway.
   in the best case, sleep on it.  in the worst case, go do
   something else, come back in an hour, read it again carefully
   and then respond.

2. if a mail makes you angry, in 85% of all cases, you should
   just delete it, and forget about it.  i am quite amazed
   how hard it is for people to ignore stuff.  you must exercise
   your ignore muscle.  saves awful lot of time and energy.
   (i know, this mail is the opposite of this advice, but i slept
   on it ;-)



Fuck you.  Get angry.  More people should get angry about things. Lack 
of anger and isolation from adversity are the things that are killing 
the world.  If someone was beating you with a stick, would you just 
ignore it?  If someone is making laws taking away our freedom, should we 
just ignore

Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Bram Van Dam

-f wrote:

2. if a mail makes you angry, in 85% of all cases, you should
   just delete it, and forget about it.  i am quite amazed
   how hard it is for people to ignore stuff.  you must exercise
   your ignore muscle.  saves awful lot of time and energy.
   (i know, this mail is the opposite of this advice, but i slept
   on it ;-)


I particularly agree with this bit. Some people on this list seem to 
have some anger management issues. It's probably not real anger -- in 
real life they'd probably just look around the room for a bit and wonder 
what to say, either that or their voice would crack in the middle of 
their tirade --, but still. People have feelings. Just because you're 
typing at a screen in your room (even if you own the bloody mailing 
list) doesn't magically give you the right to be a cunt. Nor does it 
somehow erase emotions and emotional implications from the list.


If you're one of those people who acts all tough on the net (wahey! I'm 
a really mean guy on [EMAIL PROTECTED] better watch out for me!) then you're 
the one who needs psychological help, rather than the aforementioned 
(think it was by Rick and Jason) 13 year old fragile minds.


You need to think before you talk (not doing so is like wiping your arse 
before you shit). Think something along the lines of "if this person 
were saying this to my face, how would I react?". I'm pretty damned sure 
that you wouldn't start screaming and insulting them for all you're 
worth. If you do, again, you're the one who needs the help.


I quite frankly don't give a rat's arse about how frustrated some of you 
are by seeing n00bs post on the list. So what if someone didn't read man 
page XYZ? At least tell them to read it. The only thing more disgusting 
than people not willing to learn, is people not willing to help others 
learn. Share the knowledge. Either that, or shut your trap.


I think our teacher -f makes some good points. And that fact that some 
of you say he's not a teacher because he's not actively teaching, only 
shows how correct he is. Next thing you'll say that the only real doctor 
is the kind with a stethoscope around his neck.. Now, excuse me whilst I 
go roll my eyes for a bit.


This list entertains me.

 - Bram



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread -f
hello Rick, and others,


i just wanted to say, that you almost enteriley missed
my point.  i never said leave the young in a bubble,
but 40 people yelling at you and calling names is
not funny either.  i didn't realize all the people here
were so strong personalities in their teens, my mistake.

only a sith deals in absolutes, to quote a very bad movie.

i did not suggest let's make misc into a linux-newbie
style lounge.  i just wanted to point out that you
never know what damage you make.  just keep in mind.


anyway, have a nice weekend.

-f

ps.  yeah, and all of you ask your dad how many stupid
questions/minute you asked him when you were young...
did he just slap you: "it's scary bad world out there
you fscking idiot!  now shut up and code!" ?

pps. i just realized my mail could depict me as the
local christian from your mall.  i am not.

ppps. by popular demand i hereby promise i will not
teach, none of your kids at least.  also i wouldn't
let mine near you, probably.
-- 
computers run on smoke. if it leaks out they won't work.



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread francisco

what people here mostly fail to realize is, how impersonal
the internet really is. 99% of you don't know how old i am,
how do i look like, what's my life like.  same is true from
my side towards you.


That's because we haven't googled the right queries.






If advice were followed (e.g. http://www.openbsd.org/mail.html), your post 
wouldn't be necessary.  Since advice isn't followed, your post isn't 
necessary.




-f


If nothing else, i agree with your signature.  ;-)

-f
http://www.blackant.net/



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Jason Crawford
On 6/10/05, -f <[EMAIL PROTECTED]> wrote:
> dear list,
> 
> a nice cup of coffee in front of me, and as a big fan of
> robert x., let me reflect a bit on the phenomenon called
> "misc@openbsd.org"...  will try to keep it short.
> 
> 
> a couple of days ago, there was a quite big thread about optimized
> kernel builds.  the caller had a point (all of us do, no matter how
> insignificant) but some of the answers were rude, childish and much
> more trollish than the actual post itself.  that thread made
> me quite disgusted of misc@, the way people treat each other here.
> 

I've been treated pretty damn good on this list. Maybe it's because I
read docs and list archives, and other things that OpenBSD requests
you do before posting to THEIR list. If you break the rules, you will
be punished. Ask a stupid question, get a stupid answer, etc...

> 
> i am a teacher.  i have a degree in "teaching computer science".
> when you learn to be a teacher, you must sign up to basic
> psychology classes.  obviously.  teachers are role models.
> obviously.  i don't teach at the moment, and i am not sure
> i will.  i have found the fact that some of the kids will
> form habits, opinions, god-knows-what-else based on my
> personality quite scary and too big a responsibility.
> for now anyway.

Please never teach. If you feel that kids will not become better
people when you teach, make sure you never do (I wish more teachers
did this).

> 
> but i am also what some might call nerd/geek (blech) and am
> very familiar with the social implications of that.
> 

What social implications of that? I've probaby been called a nerd/geek
by many people, however I wouldn't say my social life is lacking in
any way, and I'm very happy with where my life is going. Don't let
other people's stereo-types affect how you feel about yourself. Again,
don't teach ever.

> 
> 
> what people here mostly fail to realize is, how impersonal
> the internet really is. 99% of you don't know how old i am,
> how do i look like, what's my life like.  same is true from
> my side towards you.
> 

I think almost everyone here realizes that, because it was never
personal. It's just that, well, it's blatently obvious, so no one
feels the need to even talk about it...

> 
> 
> my point is, that you could be affecting(flaming) a developing
> personality, a 13 year old kid who just happens to be very
> intelligent, just installed the system and hurries off to the
> mailing list to satisfy his knowledge hunger without realizing
> all the mailing list nuances we see everyday (top posting,
> long signatures, not reading the documentation beforehand,
> posting the "taboo" questions).  you just never know.
> (well, except darren reed ;-)
> 

If a 13yo kid is so fragile that some random, unknown person who
he/she has never seen, said something that upset him/her, and it
stiffles his/her thirst for knowledge, then he/she has other issues
that need to be solved, asap. It's not my job to protect their fragile
minds.

> 
> it's all about experience.  there is a baby born every second,
> and no one was born wise.

Again, blantently obvious, so why the hell did you even feel the need
to mention it? However there are many wise people, and they got where
they are today through a lot of tought times I'm sure. I've been told
I was stupid so many times, didn't stop me from learning. On the
contrary, it made me want to learn more, read more, etc... I didn't go
crying to mommy every time someone told me something I didn't like.
That's life, get used to it.

> 
> everyone who uses email for more than 5 years knows just how
> elusive this form of communication is.  how easy it is to
> misunderstand, misinterpret even a clearly worded email.
> 
> 
> 1. if a mail makes you angry, never respond rightaway.
>in the best case, sleep on it.  in the worst case, go do
>something else, come back in an hour, read it again carefully
>and then respond.

Acting too quickly on some things can be dangerous yes, however for
this mailing list specifically, all these stupid questions people ask
have been asked so many times before, so now the OpenBSD guys know
exactly what to say, as each time they say it, the answer gets a
little better. Read please, just freakin' read the docs, that's what
they're there for.

> 
> 2. if a mail makes you angry, in 85% of all cases, you should
>just delete it, and forget about it.  i am quite amazed
>how hard it is for people to ignore stuff.  you must exercise
>your ignore muscle.  saves awful lot of time and energy.
>(i know, this mail is the opposite of this advice, but i slept
>on it ;-)

Sounds like, don't feed the trolls. Are you saying that these kids
asking stupid questions repeatedly are trolls? That's not what you
were saying before.

> 
> 3. never assume that you are writing to an intelligent adult
>person.

If someone asks a stupid question that's been asked sooo many times, I
definetly wouldn't assume that.

> 
> 4. remember

Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Tor Houghton
On Fri, Jun 10, 2005 at 10:13:13AM -0400, Rick Barter wrote:
>
> [snip]
> 
> You know what?  This is the number one problem with the world today; 
> people like you trying to protect the young, innocent, whatever from 
> themselves and others.  Since when is it *MY* job to police everyone 
> else's kids and feelings?  I hope I do affect developing 
> personalities.  I hope they learn that the world doesn't revolve 
> around them and that if you ask a stupid question, you get a stupid 
> answer.  And, if posting to misc@ and getting flamed makes them cry, 
> they had better develop a thicker skin than that because the world is 
> a big, scary place.
> 
> [snip]

hear, hear.

(but count to 10 first.)

Tor



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Rick Barter

-f wrote:

dear list,

a nice cup of coffee in front of me, and as a big fan of
robert x., let me reflect a bit on the phenomenon called
"misc@openbsd.org"...  will try to keep it short.


You failed to keep it short.


a couple of days ago, there was a quite big thread about optimized
kernel builds.  the caller had a point (all of us do, no matter how
insignificant) but some of the answers were rude, childish and much
more trollish than the actual post itself.  that thread made
me quite disgusted of misc@, the way people treat each other here.

i am a teacher.  i have a degree in "teaching computer science".
when you learn to be a teacher, you must sign up to basic
psychology classes.  obviously.  teachers are role models.
obviously.  i don't teach at the moment, and i am not sure
i will.


Then you're not a teacher.


i have found the fact that some of the kids will
form habits, opinions, god-knows-what-else based on my
personality quite scary and too big a responsibility.
for now anyway.


Please don't ever teach.  If this is a legitimate fear for you, you'll 
do much more harm than good if you actually try to educate anyone. 
Everyone is a role model.  If you don't think kids have already formed 
 habits and opinions based on your personality, you're mistaken.



but i am also what some might call nerd/geek (blech) and am
very familiar with the social implications of that.

>

what people here mostly fail to realize is, how impersonal
the internet really is. 99% of you don't know how old i am, 
how do i look like, what's my life like.  same is true from

my side towards you.


Exactly.  It doesn't matter who you are, how old or young you are, how 
you look.  So why bring it up?




my point is, that you could be affecting(flaming) a developing
personality, a 13 year old kid who just happens to be very
intelligent, just installed the system and hurries off to the
mailing list to satisfy his knowledge hunger without realizing
all the mailing list nuances we see everyday (top posting,
long signatures, not reading the documentation beforehand,
posting the "taboo" questions).  you just never know.
(well, except darren reed ;-)



You know what?  This is the number one problem with the world today; 
people like you trying to protect the young, innocent, whatever from 
themselves and others.  Since when is it *MY* job to police everyone 
else's kids and feelings?  I hope I do affect developing 
personalities.  I hope they learn that the world doesn't revolve 
around them and that if you ask a stupid question, you get a stupid 
answer.  And, if posting to misc@ and getting flamed makes them cry, 
they had better develop a thicker skin than that because the world is 
a big, scary place.



it's all about experience.  there is a baby born every second,
and no one was born wise.


Right.  So?  Who gives a crap.  How do you think experience is gained? 
 By being handed information and never getting yelled at?  No.  Most 
experience is gained through failure and disappointment.  Don't sell 
people short.  Let them take a few hard knocks in life.  They'll be 
better people for it.  It builds character.



everyone who uses email for more than 5 years knows just how
elusive this form of communication is.  how easy it is to
misunderstand, misinterpret even a clearly worded email.


1. if a mail makes you angry, never respond rightaway.
   in the best case, sleep on it.  in the worst case, go do
   something else, come back in an hour, read it again carefully
   and then respond.

2. if a mail makes you angry, in 85% of all cases, you should
   just delete it, and forget about it.  i am quite amazed
   how hard it is for people to ignore stuff.  you must exercise
   your ignore muscle.  saves awful lot of time and energy.
   (i know, this mail is the opposite of this advice, but i slept
   on it ;-)


Fuck you.  Get angry.  More people should get angry about things. 
Lack of anger and isolation from adversity are the things that are 
killing the world.  If someone was beating you with a stick, would you 
just ignore it?  If someone is making laws taking away our freedom, 
should we just ignore it?  No.  Get angry.  Get pissed.  Don't 
tolerate complacence.



3. never assume that you are writing to an intelligent adult
   person.


I never assume this.  Especially in this case.  But, if you're not 
intelligent that's your problem.  Not mine.



4. remember that email is archived and one day you might read
   what you wrote years ago.  you know, shame and stuff.



5. a whole planet could be reading what you wrote.  you represent
   your family, upbringing, country, etc, and last but not least
   yourself.


Good.  I hope the whole planet is reading this.  If you're ashamed of 
your opinions or anything else you write, that's your problem.  I 
don't really give a crap if anyone reads anything I write.  I'm not 
ashamed of myself or my opinions.  And, if my family, country, or 
anyone else is embarrassed by the things I

Re: Is /dev on mfs possible?

2005-06-10 Thread Jason Crawford
Yes, it is possible to have /dev on mfs, however that would mean you'd
have to run MAKEDEV on every boot after mounting the /dev memory file
system. Really, with the way flash cards are nowadays, putting the
noatime option in /etc/fstab is more than enough (and not running a
busy caching proxy of some kind). /dev is the least of your worries
with flash cards I would think anyways, I'd be more worried about /var
or /home, depending on who can login to this system and how busy the
logs are.

Jason

On 6/10/05, Alexey E. Suslikov <[EMAIL PROTECTED]> wrote:
> Hello misc@openbsd.org,
> 
>   how actively flash memory used while changing devices'
>   permissions? is /dev on mfs possible?
> 
> Thanks.



Re: rdr for outgoing packets

2005-06-10 Thread Jason Crawford
It's very simple, try reading the ftp-proxy man page, as it has an
example for exactly what you're doing, something like:
rdr on $int_if inet proto tcp from $int_net to any port ftp ->
127.0.0.1 port 8021

I believe pf.conf man page also has examples for this too. Really,
read the docs, because you might even learn something you weren't
intending to.

Jason

On 6/10/05, Denis Doroshenko <[EMAIL PROTECTED]> wrote:
> hello,
> 
> is there possibility to catch outgoing packets on an interface?
> while the question seems dumb, i seem to be stuck and
> no man page/PF faq/web searches help me. it seems
> that PF rdr-s only incoming packets. is this a correct
> statement? is there any thoughts of extending PF
> functionality to cover outgoing packet case (like
> "rdr [in|out] on..." with "in" as default) or this sounds
> unacceptable?
> 
> thanks in advance.
> 
> p.s.
> what i am trying to do. i have a proggie on 127.0.0.1:port
> (via inetd) which wants to receive a connection via PF's rdr,
> lookup state table and then act as transparent proxy.
> while this will work for routed connections (i.e. OpenBSD
> box routes/NATs packets from others), but not for
> connections originated from the OpenBSD box itself.



Re: Is /dev on mfs possible?

2005-06-10 Thread francisco

how actively flash memory used while changing devices'
permissions?


I'm not sure what you mean by this.



is /dev on mfs possible?


Yes:

$ df -hi /dev
Filesystem SizeUsed   Avail Capacity iused   ifree  %iused  Mounted on
mfs:27131  239K   33.0K195K14%1316 60269%   /dev
$ uname -a
OpenBSD catequil.blackant.net 3.7 GENERIC#31 i386
$ grep dev\ mfs /etc/fstab
swap /dev mfs rw,-s1024,-i256,-P/root/storage/dev/ 0 0

You can make yours larger and avoid specifying more inodes, but i haven't 
encountered any problems this way.





Thanks.



You're very welcome,

-f
http://www.blackant.net/



Re: Is /dev on mfs possible?

2005-06-10 Thread Mike Wolman

Yup eg:

swap /dev mfs rw,-s=2048,-i=128,nosuid 0 0

Mike.

On Fri, 10 Jun 2005, Alexey E. Suslikov wrote:


Hello misc@openbsd.org,

how actively flash memory used while changing devices'
permissions? is /dev on mfs possible?

Thanks.




Re: OT, but maybe??? Need an Alarm Beacon

2005-06-10 Thread MikeM
On 6/9/2005 at 5:01 PM L. V. Lammert wrote:

|It would be nice to have a simple way to trip an external flashing
alarm 
|beacon when attention is needed, .. no operator is normally at this
system.
|
|Has anyone run across a simple way to trip an external beacon? USB?
Adding 
|a I/O card seems pretty overkill, especially as external relays
require a 
|four slot minimum, .. the parallel port is already tied up with a
printer.
 =

If you can do serial port i/o, consider

http://www.smarthome.com/1135.html



Re: Low power, 1U devices

2005-06-10 Thread Stephen Hassard
Antec has a 1U case, but has only 1 front 5.25" bay. I've found the 
Antec rackmounted cases to be of good quality, and have had good support 
from Antec's technical support.


http://www.antec.com/us/productDetails.php?ProdID=94100

Steven Bowers wrote:

Is anyone familiar with a company that sells a generic 1U case with
one or two front, 5.25" bays? I've looked at calpc.com, and gtweb.net.
The latter has a nice case, but only has a single 5.25" bay and their
others have a combination of 3.5" and 5.25" bays.

Alternatively has anyone tried to mod a Symantec VPN box and replaced
its innards with something like a VIA board?




Is /dev on mfs possible?

2005-06-10 Thread Alexey E. Suslikov

Hello misc@openbsd.org,

 how actively flash memory used while changing devices'
 permissions? is /dev on mfs possible?

Thanks.



Re: heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread Marius Van Deventer - Umzimkulu
Hear hear.

> -Original Message-
> From: -f [mailto:[EMAIL PROTECTED] 
> Sent: 10 June 2005 02:50 PM
> To: OpenBSD
> Subject: heal the world, and misc@ [strictly coffeetime reading]
> 
> 
> dear list,
> 
> a nice cup of coffee in front of me, and as a big fan of
> robert x., let me reflect a bit on the phenomenon called
> "misc@openbsd.org"...  will try to keep it short.
> 
> 
> a couple of days ago, there was a quite big thread about optimized
> kernel builds.  the caller had a point (all of us do, no matter how
> insignificant) but some of the answers were rude, childish and much
> more trollish than the actual post itself.  that thread made
> me quite disgusted of misc@, the way people treat each other here.
> 
> 
> i am a teacher.  i have a degree in "teaching computer science".
> when you learn to be a teacher, you must sign up to basic
> psychology classes.  obviously.  teachers are role models.
> obviously.  i don't teach at the moment, and i am not sure
> i will.  i have found the fact that some of the kids will
> form habits, opinions, god-knows-what-else based on my
> personality quite scary and too big a responsibility.
> for now anyway.
> 
> but i am also what some might call nerd/geek (blech) and am
> very familiar with the social implications of that.
> 
> 
> 
> what people here mostly fail to realize is, how impersonal
> the internet really is. 99% of you don't know how old i am, 
> how do i look like, what's my life like.  same is true from
> my side towards you.
> 
> 
> 
> my point is, that you could be affecting(flaming) a developing
> personality, a 13 year old kid who just happens to be very
> intelligent, just installed the system and hurries off to the
> mailing list to satisfy his knowledge hunger without realizing
> all the mailing list nuances we see everyday (top posting,
> long signatures, not reading the documentation beforehand,
> posting the "taboo" questions).  you just never know.
> (well, except darren reed ;-)
> 
> 
> it's all about experience.  there is a baby born every second,
> and no one was born wise.
> 
> everyone who uses email for more than 5 years knows just how
> elusive this form of communication is.  how easy it is to
> misunderstand, misinterpret even a clearly worded email.
> 
> 
> 1. if a mail makes you angry, never respond rightaway.
>in the best case, sleep on it.  in the worst case, go do
>something else, come back in an hour, read it again carefully
>and then respond.
> 
> 2. if a mail makes you angry, in 85% of all cases, you should
>just delete it, and forget about it.  i am quite amazed
>how hard it is for people to ignore stuff.  you must exercise
>your ignore muscle.  saves awful lot of time and energy.
>(i know, this mail is the opposite of this advice, but i slept
>on it ;-)
> 
> 3. never assume that you are writing to an intelligent adult
>person.
> 
> 4. remember that email is archived and one day you might read
>what you wrote years ago.  you know, shame and stuff.
> 
> 5. a whole planet could be reading what you wrote.  you represent
>your family, upbringing, country, etc, and last but not least
>yourself.
> 
> 6. chill out and relax.  as one of my taglines say:
>"good words cost no more than bad."
> 
> 
> peace,
> -f
> 
> ps. musical background for this mail provided by two lone 
> swordsman and arovane
> -- 
> en taro adun



Tweaks for spamd

2005-06-10 Thread Tim Hoddy
I've been tweaking the options for spamd in an attempt to both prevent
spam to my network and up the pain levels to the spammers.

In particular, grey-trapping works very well indeed and appears to cut
out a good deal of spam.

I use the "-n" switch to spamd to change the default banner to a
sendmail-like one.  That appears to prevent early disconnects from
semi-intelligent mailers.

I use the "-s" switch to set a delay to 9 seconds.  This appears to
work well.  Has anyone any experience of using even longer delays.  Is
it worth it?

Any other tips for using spamd to reduce spam and making life
difficult for the spammers?

Tim



Re: A Business Case for integrating OpenBSD into IT Infrastructures

2005-06-10 Thread Mark Uemura
Hi Steve,

I was happy to get your comments and was not offended by anything you
said.  I'm very happy to learn from anyone, especially if it is going
to improve the presentation.  You made some good points that I will use
going forward  :)  My objective is really to prove by example & experience
the myriad of benefits gained by integrating OpenBSD into corporate IT
Infrastructures.  Of course, smaller companies would benefit just as much
and would probably appreciate the savings even more so.  I'm just here 
spreading the word :)

Thanks once again.

Cheers,

Mark Uemura
OpenBSD Support Japan Inc.
www.openbsd-support.com

On Wed, Jun 08, 2005 at 11:35:52AM -0400, [EMAIL PROTECTED] wrote:
> Just so you know, aside from my criticisms (which were misdirected since I
> completely misunderstood the purpose of your talk) I thought you put
> together an excellent presentation.  That probably didn't come through in
> my email.  Please keep up the good work.



heal the world, and misc@ [strictly coffeetime reading]

2005-06-10 Thread -f
dear list,

a nice cup of coffee in front of me, and as a big fan of
robert x., let me reflect a bit on the phenomenon called
"misc@openbsd.org"...  will try to keep it short.


a couple of days ago, there was a quite big thread about optimized
kernel builds.  the caller had a point (all of us do, no matter how
insignificant) but some of the answers were rude, childish and much
more trollish than the actual post itself.  that thread made
me quite disgusted of misc@, the way people treat each other here.


i am a teacher.  i have a degree in "teaching computer science".
when you learn to be a teacher, you must sign up to basic
psychology classes.  obviously.  teachers are role models.
obviously.  i don't teach at the moment, and i am not sure
i will.  i have found the fact that some of the kids will
form habits, opinions, god-knows-what-else based on my
personality quite scary and too big a responsibility.
for now anyway.

but i am also what some might call nerd/geek (blech) and am
very familiar with the social implications of that.



what people here mostly fail to realize is, how impersonal
the internet really is. 99% of you don't know how old i am, 
how do i look like, what's my life like.  same is true from
my side towards you.



my point is, that you could be affecting(flaming) a developing
personality, a 13 year old kid who just happens to be very
intelligent, just installed the system and hurries off to the
mailing list to satisfy his knowledge hunger without realizing
all the mailing list nuances we see everyday (top posting,
long signatures, not reading the documentation beforehand,
posting the "taboo" questions).  you just never know.
(well, except darren reed ;-)


it's all about experience.  there is a baby born every second,
and no one was born wise.

everyone who uses email for more than 5 years knows just how
elusive this form of communication is.  how easy it is to
misunderstand, misinterpret even a clearly worded email.


1. if a mail makes you angry, never respond rightaway.
   in the best case, sleep on it.  in the worst case, go do
   something else, come back in an hour, read it again carefully
   and then respond.

2. if a mail makes you angry, in 85% of all cases, you should
   just delete it, and forget about it.  i am quite amazed
   how hard it is for people to ignore stuff.  you must exercise
   your ignore muscle.  saves awful lot of time and energy.
   (i know, this mail is the opposite of this advice, but i slept
   on it ;-)

3. never assume that you are writing to an intelligent adult
   person.

4. remember that email is archived and one day you might read
   what you wrote years ago.  you know, shame and stuff.

5. a whole planet could be reading what you wrote.  you represent
   your family, upbringing, country, etc, and last but not least
   yourself.

6. chill out and relax.  as one of my taglines say:
   "good words cost no more than bad."


peace,
-f

ps. musical background for this mail provided by two lone swordsman and arovane
-- 
en taro adun



rdr for outgoing packets

2005-06-10 Thread Denis Doroshenko
hello,

is there possibility to catch outgoing packets on an interface?
while the question seems dumb, i seem to be stuck and
no man page/PF faq/web searches help me. it seems
that PF rdr-s only incoming packets. is this a correct
statement? is there any thoughts of extending PF
functionality to cover outgoing packet case (like
"rdr [in|out] on..." with "in" as default) or this sounds
unacceptable?

thanks in advance.

p.s.
what i am trying to do. i have a proggie on 127.0.0.1:port
(via inetd) which wants to receive a connection via PF's rdr,
lookup state table and then act as transparent proxy.
while this will work for routed connections (i.e. OpenBSD
box routes/NATs packets from others), but not for
connections originated from the OpenBSD box itself.



Re: A Business Case for integrating OpenBSD into IT Infrastructures

2005-06-10 Thread mdff
hi misc@,

which hardware r u talking about for example? we'd like
to use such "real" servers, but we can't decide what vendor
to choose. we definitely do not want to "build" our own
server (taking the raid controller from vendor x and the
disks from vendor y, having an overkill xeon mabo from z
and so on). we'd like to have on-site hw-support at least
next day (being in austria this is not possible with all
the big "server-sellers")

our favourite was/is HP's DLxxx series, but mickey@ is
working on the ciss-port for their storage controllers and
we don't know when it's stable for production use...

any experience values which vendor to choose servers from?
and of course, where the newer hardware is fully supported
by openbsd?

> Avoid relying on cheap hardware to make your cost point.  OpenBSD runs 
> well on "real", modern servers.  Managers at mid/large companies aren't 
> going to want to hear about how you pulled machines out of the trash and 
> now the business depends on them, even if they're 4x redundant.



Re: Sad boot problem (boot.conf: invalid argument)

2005-06-10 Thread Stuart Henderson

--On 09 June 2005 19:00 -0600, Tobias Weingartner wrote:


On Thursday, June 9, "Luciano ES" wrote:

Hello, Stuart. The answers to your latest questions:

On 09/06/05 at 12:11, Stuart Henderson wrote in 7K:

> How does 'fdisk wd0' look?

- The second slice (offset 63) was marked as unknown. Then I fixed
it with OpenBSD's fdisk. Now it is marked as OpenBSD. The problem is
that I have done that many times. The OpenBSD gets lost
mysteriously. Often, between two reboots of OpenBSD (without booting
any other system).


Something is overwriting it.  Where does your 'a' slice begin?
What is the output of 'disklabel wd0'?


Email from o.p. with URLs to text files with the information doesnbt
seem to have made it to the list, Ibll include it below for reference
and paste in the disklabels for ease of use;

# /dev/rwd0c:
type: ESDI
disk: ESDI/IDE disk
label: ST3120022A
flags:
bytes/sector: 512
sectors/track: 63
tracks/cylinder: 16
sectors/cylinder: 1008
cylinders: 16383
total sectors: 234441648
rpm: 3600
interleave: 1
trackskew: 0
cylinderskew: 0
headswitch: 0# microseconds
track-to-track seek: 0# microseconds
drivedata: 0

16 partitions:
# sizeoffset  fstype [fsize bsize  cpg]
 a:   102406563  4.2BSD   2048 16384  328 # Cyl 
0*-  1015
 b:   1024128   1024128swap   # Cyl  1016 
-  2031
 c: 234441648 0  unused  0 0  # Cyl 0 
-232580
 d:   1024128   2048256  4.2BSD   2048 16384  328 # Cyl  2032 
-  3047
 e:   9625392   3072384  4.2BSD   2048 16384  328 # Cyl  3048 
- 12596
 f:204624  12697776  4.2BSD   2048 16384  204 # Cyl 12597 
- 12799
 g:   2054115  12902400  4.2BSD   2048 16384  328 # Cyl 12800 
- 14837*
 i:   1847475  14956515   MSDOS   # Cyl 
14837*- 16670*
 j: 32004  16804116  ext2fs   # Cyl 
16670*- 16702*
 k:   2618532  16836183 unknown   # Cyl 
16702*- 19300*
 l:  10361862  19454778  ext2fs   # Cyl 
19300*- 29579
 m:  10361862  29816703  ext2fs   # Cyl 
29580*- 39859*
 n:  10329732  40178628  ext2fs   # Cyl 
39859*- 50107*
 o:  31535532  50508423   MSDOS   # Cyl 
50107*- 81392*
 p:  25189857  82044018   MSDOS   # Cyl 
81392*-106382*


[and from bsd.rd with broken MBR partition table]
 c: 234441648 0  unused  0 0  # Cyl 0 
-232580
 i:   1847475  14956515   MSDOS   # Cyl 
14837*- 16670*
 j:  1495645263 unknown   # Cyl 
0*- 14837*
 k: 32004  16804116  ext2fs   # Cyl 
16670*- 16702*
 l:   2618532  16836183 unknown   # Cyl 
16702*- 19300*
 m:  10361862  19454778  ext2fs   # Cyl 
19300*- 29579
 n:  10361862  29816703  ext2fs   # Cyl 
29580*- 39859*
 o:  10329732  40178628  ext2fs   # Cyl 
39859*- 50107*
 p:  31535532  50508423   MSDOS   # Cyl 
50107*- 81392*


 Forwarded Message 
Date: 09 June 2005 00:42 -0300
From: Luciano ES <[EMAIL PROTECTED]>
To: Stuart Henderson <[EMAIL PROTECTED]>
Cc: misc@openbsd.org
Subject: Re: Sad boot problem (boot.conf: invalid argument)

Hello, Stuart.  Thanks for sending  me a  copy of your  reply. I
don't  know if  anyone else  has added  anything to  this thread
because I subscribe in digest mode.  So here is all the info you
told me to post, with comments.

First off, the boot error message:

http://tinyurl.com/8qexk

So I booted with the CD and used the (S)hell. Here is dmesg:

http://tinyurl.com/7wwdg

And here is the first attempt at disklabel:

http://tinyurl.com/8ezsx

That's weird, isn't it? OpenBSD has disappeared completely. So I
ran fdisk and saw that the slice was marked "unknown" instead of
"OpenBSD".  Hmmm...  That reminds  me  of  a  page I  read  that
actually complains about problems with OpenBSD's fdisk:

http://geodsoft.com/howto/dualboot/

This tutorial  makes several  complaints about  OpenBSD's fdisk.
And, in my own experience, it  was clearly difficult not to lose
the slice's  ID every  now and  then with  no apparent  cause. I
found myself fixing the OpenBSD slice's  ID all the time. And it
only happens with OpenBSD. If I boot into Linux and run fdisk, I
see that slice  correctly identified as OpenBSD. Then  I go back
to OpenBSD and it still won't  boot. It still will see the slice
as "unknown". And it does not accept IDs set with Linux's fdisk.
It really must be done by OpenBSD's fdisk. Grrr...

So I did  it again: changed the ID with  OpenBSD's fdisk and ran
disklabel again:

http://tinyurl.com/bowlc

Ha! There it is now. So  I recorded another dmesg, but there was
no difference. So I removed the CD and rebooted. Yay! It worked!
OpenBSD is booting off the hard disk again.

But

Re: Tuning gigabit bridging firewall for better performance

2005-06-10 Thread nate
Tony Sarendal said:

> Now about netstat on your openbsd box ?
> netstat -I  -w10

I will try that tomorrow, thanks!

also any opinions whether or not the amd64 port of
openbsd may perform better ? even though I'm running
a cheap hack of the amd64 platform(EM64T). I wanted
to go full opteron though my vendor could not
find a SCSI raid card that ran stable under openbsd
on opteron, so I went with Xeons for these firewalls.

nate