Re: Something hosing my msdos/FAT32 file system

2005-11-27 Thread Ted Unangst
On 11/27/05, Alexander Hall [EMAIL PROTECTED] wrote:
 I was wondering if this could cause a lot of other errors, like
 corrupted files and such. I am thinking about if I dare to mount and use
 msdos filesystems r/w again... But then again, if noone dares to do it,
 we'll never know if it works as it is supposed to, so maybe it's better
 to just backup regularly and go for it! :-)

it shouldn't.  you might get files landing in the wrong directory (i'm
not really sure this is possible either, but it's probably the worst
that could happen), but there shouldn't be any real disk corruption.



Re: Updated CCD Mirroring HOWTO

2005-11-27 Thread Daniel Ouellet

In all these:


I'm going to take this thread for what I think it is... the old guard
telling us youngin's that our efforts are appreciated, but we've got a
bit more to learn about how things work, and how to write good
documentation, before we're really ready to jump into these things the
way we have been lately.  I've noticed a decent drop in the number of
How do I get PPPoE working and How do I get Apache+MySQL+PHP working
questions on the list, which is what prompted Daniel to create
openbsdsupport in the first place, so in a way, we've been successful in
what we set out to do.  



I may seem overly critical in debate but I still believe the work of
Daniel Ouellet and the HOWTO writers has been a worthwhile experiment. 
Though it has opened the door for the blind leading blind, only by

experimenting with new ideas will one be able to prove or disprove their
validity and in the process, you might learn something unexpected.


or
quote Are you subscribed to newbies?  We don't do the bullshit like the
HOWTOs or openbsdsupport.org.  We teach you how to help yourself. The
answers come with learning, so you can be a better admin.

There is many sad facts and true factors from both sides. Users have to 
and should look for informations and the proper way of doing things. 
Hopefully the fact that they decide to switch their OS to OpenBSD may 
open the light a bit and may have become a bit more critical to security 
anyway, so one would think they wouldn't jump on the first document they 
find and just do cut and paste. But the fact of life is also that you 
can be sure some will for sure just do that!


Other may read some documents and see something in it that haven't seen 
before and pick their curiously to go look why that is and actually 
improve their learning. Not the majority I agree!


So, nothing is perfect and never will be!

Is it better to provide some help to some users to get them started, or 
does it hurt them for not forcing them to dig in vain to fine something 
they would get easier. Will the results favor the laziness, or the 
curiosity! I wish I knew that answer! Who are lazy, most likely will 
stay that way. Some that are incline to change, may well see it as 
useful and change, who are doing their homework will take it for what it 
is, an other source of information and grab anything, or nothing they 
see fit from it, and finally who ever know it all, will see it as a 
waist and not look at it, why should they anyway! So, where you fit, 
will dictate your point of view on the subject I guess.


Does it mean it shouldn't exists as a side track? I still don't know for 
sure yet...


But, I think the best way might be to provide the informations in a cons 
ice matter WITH reference (URL) to more details and ALWAYS warn the 
users NOT to do simply cut and paste as this hurt them for sure, but to 
seek the understanding of what is suggested in the documents. Not the 
stage of things now of almost all side documents at this time and may 
well be never either.


But who never start walking will never be running either!

So, it's like, providing knobs to a monkey and he will turn them, that's 
why OpenBSD doesn't have knobs like many other OS, or very few knobs 
anyway! Generic default is best, so how to provide more informations and 
make it easier for users that are not use to do their research and help 
them use a better system and at the same time try to trigger them to 
learn it without aliening them! I wish I knew the solution for that!


But, I do believe this however, if a brain dead user switch from a less 
secure OS ( take your pick of OS here ) and comes to OpenBSD for 
security, documentations, curiosity, stability, what ever else, and stop 
using the less secure OS, what ever that might be, and in the process 
use what some would call bullshit and stupid brain dead HOWTOs for 
monkeys, and never learn more about it, and in the process, may even 
hurt it's own setup and making it less secure in the process by using 
the brain dead HOWTOs, wouldn't the system in the end still be more 
secure then the same setup in any other OS? Don't forget the common 
factor here. Brain dead setup to start with, so very likely to be miss 
configure in the first place and joint many other less secure system on 
the Internet and continue to pollute it.


I guess that's really the questions isn't it?

Sadly there will always be brain dead users that cut and paste without 
thinking, or knowing, or even wanted to know or learn, what ever you 
want to describe it, in the end the resulting system in use by the same 
brain dead users is still more secure then an other system setup in the 
same matter by the same brain dead users, so the facts remain that in a 
small matter, the Internet at large become a bit safer for all of us!


Isn't it all what we wish it to be!?

With all aspect been equal and you can't change the world, or some brain 
dead users, they will setup servers no matter what and infect the 

Re: Updated CCD Mirroring HOWTO

2005-11-27 Thread J.C. Roberts
On Sun, 27 Nov 2005 01:58:04 +0100, frantisek holop [EMAIL PROTECTED]
wrote:

hmm, on Sat, Nov 26, 2005 at 09:34:39AM -0600, [EMAIL PROTECTED] said that
 Yes, OpenBSD is the _only_ operating system that takes security as
 seriously as it should be taken. Consider the why of OpenBSD's

this is a silly argument.
of course it is not the only system.  don't think nobody else
takes security seriously.  maybe you will be surprised, but
even companies like red hat take security seriously.  they
are just not that good at it.

but don't think openbsd invented security.

Pride [goeth] before destruction, and an haughty spirit before a fall.

-f

Hi frantisek,

It seems you misread Tonys' post, glanced over a few important words and
lost the meaning; particularly these words:

 as seriously as it should be taken.

Others may claim to take security seriously, and maybe they do in their
own way, but when the goal is not reached, then you can conclude they
have failed to take their goal seriously enough.

JCR



Re: group ownership of /var/mail

2005-11-27 Thread Rogier Krieger
On 11/27/05, J Moore [EMAIL PROTECTED] wrote:
 On Sun, Nov 27, 2005 at 01:16:27AM -0600, the unit calling itself Matthew 
 Weigel wrote:
snip
  You should probably look to
  http://www.openbsd.org/cgi-bin/man.cgi?query=popa3d first.

 Yep - I looked at it first... but IIRC it doesn't support POP via SSL

How about stunnel?

Cheers,

Rogier

--
If you don't know where you're going, any road will get you there.



Re: Updated CCD Mirroring HOWTO

2005-11-27 Thread Tony
Daniel Ouellet wrote:
 In all these:

 I'm going to take this thread for what I think it is... the old guard
 telling us youngin's that our efforts are appreciated, but we've got a
 bit more to learn about how things work, and how to write good
 documentation, before we're really ready to jump into these things the
 way we have been lately.  I've noticed a decent drop in the number of
 How do I get PPPoE working and How do I get Apache+MySQL+PHP working
 questions on the list, which is what prompted Daniel to create
 openbsdsupport in the first place, so in a way, we've been successful in
 what we set out to do.
 
 
  I may seem overly critical in debate but I still believe the work of
  Daniel Ouellet and the HOWTO writers has been a worthwhile experiment.
  Though it has opened the door for the blind leading blind, only by
  experimenting with new ideas will one be able to prove or disprove their
  validity and in the process, you might learn something unexpected.
 
 or
 quote Are you subscribed to newbies?  We don't do the bullshit like the
 HOWTOs or openbsdsupport.org.  We teach you how to help yourself. The
 answers come with learning, so you can be a better admin.

 There is many sad facts and true factors from both sides. Users have to
 and should look for informations and the proper way of doing things.
 Hopefully the fact that they decide to switch their OS to OpenBSD may
 open the light a bit and may have become a bit more critical to security
 anyway, so one would think they wouldn't jump on the first document they
 find and just do cut and paste. But the fact of life is also that you
 can be sure some will for sure just do that!

 Other may read some documents and see something in it that haven't seen
 before and pick their curiously to go look why that is and actually
 improve their learning. Not the majority I agree!

 So, nothing is perfect and never will be!

 Is it better to provide some help to some users to get them started, or
 does it hurt them for not forcing them to dig in vain to fine something
 they would get easier. Will the results favor the laziness, or the
 curiosity! I wish I knew that answer! Who are lazy, most likely will
 stay that way. Some that are incline to change, may well see it as
 useful and change, who are doing their homework will take it for what it
 is, an other source of information and grab anything, or nothing they
 see fit from it, and finally who ever know it all, will see it as a
 waist and not look at it, why should they anyway! So, where you fit,
 will dictate your point of view on the subject I guess.

 Does it mean it shouldn't exists as a side track? I still don't know for
 sure yet...

 But, I think the best way might be to provide the informations in a cons
 ice matter WITH reference (URL) to more details and ALWAYS warn the
 users NOT to do simply cut and paste as this hurt them for sure, but to
 seek the understanding of what is suggested in the documents. Not the
 stage of things now of almost all side documents at this time and may
 well be never either.

 But who never start walking will never be running either!

 So, it's like, providing knobs to a monkey and he will turn them, that's
 why OpenBSD doesn't have knobs like many other OS, or very few knobs
 anyway! Generic default is best, so how to provide more informations and
 make it easier for users that are not use to do their research and help
 them use a better system and at the same time try to trigger them to
 learn it without aliening them! I wish I knew the solution for that!

 But, I do believe this however, if a brain dead user switch from a less
 secure OS ( take your pick of OS here ) and comes to OpenBSD for
 security, documentations, curiosity, stability, what ever else, and stop
 using the less secure OS, what ever that might be, and in the process
 use what some would call bullshit and stupid brain dead HOWTOs for
 monkeys, and never learn more about it, and in the process, may even
 hurt it's own setup and making it less secure in the process by using
 the brain dead HOWTOs, wouldn't the system in the end still be more
 secure then the same setup in any other OS? Don't forget the common
 factor here. Brain dead setup to start with, so very likely to be miss
 configure in the first place and joint many other less secure system on
 the Internet and continue to pollute it.

 I guess that's really the questions isn't it?

 Sadly there will always be brain dead users that cut and paste without
 thinking, or knowing, or even wanted to know or learn, what ever you
 want to describe it, in the end the resulting system in use by the same
 brain dead users is still more secure then an other system setup in the
 same matter by the same brain dead users, so the facts remain that in a
 small matter, the Internet at large become a bit safer for all of us!

 Isn't it all what we wish it to be!?

 With all aspect been equal and you can't change the world, or some brain
 dead users, they 

Re: bios support for console redirection to the serial port

2005-11-27 Thread Stephan Tesch
Am Sonntag, 27. November 2005 00:47 schrieben Sie:

Hi Kevin,

 I'm in the market for a *tower-type* server box (or m/b to put in a
 tower) on which to run OBSD and a very important criteria for me is this
 one.  I'd also like at least two cpu sockets and more PCI slots than
 average but that's easy to find out before buying.  After googling for
 hours, I'm finding that this (redirection of textual VGA output to the
 serial port) is a little-advertised characteristic in server boards and
 boxes.

I'm using the (somewhat old) Tyan Tiger MP board which has a very nice console 
redirection, that also works with OpenBSD (handover to console redirection on 
the same port works).

Regards,
Stephan



Re: Newbie Q: freeBSD vs openBSD

2005-11-27 Thread Sanjay Arora
Roger, Kevin  List:

I think...I'll take your advise. Seems that all OS users are addicted to
their own and in Linux which I use...such a query as this is an
invitation to a disro war. In my search  of course your replies, the
community at BSD is much more containedthough I do not say that
there are not saneheads in Linux community...only that some are more
fanatic...maybe they are the reason for Linux's higher popularity.

Now, some quick question...which BSD flavour to try first...thrust is on
easy to install  learn for a newbie.

Second, which would be more suited to a production web/mail server with
djbdns, apache, php, perl  postgreSQL and qmail MTA (all with
respective web-GUI administration tools...if any), with most thrust on
security  minimal install issues. I admit here that all security is as
good as the person implementing  maintaining it...but nevertheless..

Third, which are the BSD projects for firewalling, WAN load-
sharing/link-failover and some links...more for a newbie...though have
downloaded the handbook  will read it thoroughly before starting.

Any links on BSD flavours user-groups?

My thanks  best regards.
Sanjay.



Re: Newbie Q: freeBSD vs openBSD

2005-11-27 Thread Sime Ramov
On 15:57 Sun 27 Nov, Sanjay Arora wrote:
 Now, some quick question...which BSD flavour to try first...thrust is on
 easy to install  learn for a newbie.

Try FreeBSD first. Than the others...

 Second, which would be more suited to a production web/mail server with
 djbdns, apache, php, perl  postgreSQL and qmail MTA (all with
 respective web-GUI administration tools...if any), with most thrust on
 security  minimal install issues.

OpenBSD.



Re: RELEASE BUG - ami0: timeout ccb 1

2005-11-27 Thread J.C. Roberts
On Sun, 27 Nov 2005 00:50:37 +, Stuart Henderson
[EMAIL PROTECTED] wrote:

fwiw, I didn't have any trouble with my cerc-ata on 3.8-release (now 
running a snap from a couple of weeks ago), it looks like Dell has BIOS 
and firmware newer than that on LSI's website, 
http://tinyurl.com/cpmjn, not sure if they can be flashed to an AMI 
card though.

I downloaded both the Dell CERC 661 and 667 (current) firmware images
and went poking around in them. A bytewise comparison between the Dell
v661 and AMI v661 images shows they are significantly different, and the
differences are still significant when synchronizing based known chunks
(group matching per se). This fact is not really a show stopper because
there are many possible reasons for the differences, and a lot of the
differences seem to reside in the two boot time configuration
applications.

My grasp of 80960 (i960) assembler and op codes is not adequate to do
anything realistic in the way of really analyzing the binaries in a
reasonable length of time.

None the less, I'm still half tempted to just go for it and see what
happens. Cats and I have this problem with curiosity. ;-)

Thanks for the info,
JCR



Re: RELEASE BUG - ami0: timeout ccb 1

2005-11-27 Thread David Coppa
On 11/27/05, J.C. Roberts [EMAIL PROTECTED] wrote:

- cut -

 My grasp of 80960 (i960) assembler and op codes is not adequate to do
 anything realistic in the way of really analyzing the binaries in a
 reasonable length of time.

 None the less, I'm still half tempted to just go for it and see what
 happens. Cats and I have this problem with curiosity. ;-)

Let us know if you will be killed :)



Re: RELEASE BUG - ami0: timeout ccb 1

2005-11-27 Thread J.C. Roberts
On Sun, 27 Nov 2005 12:31:54 +0100, David Coppa [EMAIL PROTECTED]
wrote:

On 11/27/05, J.C. Roberts [EMAIL PROTECTED] wrote:

- cut -

 My grasp of 80960 (i960) assembler and op codes is not adequate to do
 anything realistic in the way of really analyzing the binaries in a
 reasonable length of time.

 None the less, I'm still half tempted to just go for it and see what
 happens. Cats and I have this problem with curiosity. ;-)

Let us know if you will be killed :)

Unlike the cats, I have contingency plans; I've got another two i4 cards
on order.

The first thing I need to do is test patches for Marco. After we know
things work correctly with normal hardware and firmware, then I can
satisfy my curiosity and go mucking about with the firmware to see what
happens. If you see a puff of blue smoke coming from my place, cross
your fingers and hope that I still have a few more lives left. ;-)

JCR



Re: HOTO Write bad documentation

2005-11-27 Thread Jonathan Glaschke
On Sun, Nov 27, 2005 at 01:39:18PM +0100, frantisek holop wrote:
 hmm, on Sun, Nov 27, 2005 at 10:29:27AM +0100, Jonathan Glaschke said that
  The Web is against good design.  You can see this by looking at the most
  people's choice of browser.  Bad web browsers are the biggest problem in
  creating a good looking website.  I now nobody using CSS who takes care
  of ie 4 or older.  Nearly nobody is actually taking care of ie 5/5.5,
  too, but thats default in windows 2000.

 there are ways to get this (mostly) right.
 there are great pages which show perfectly in lynx/links
 and have maybe a couple of div's inside.

 css and xhtml does not exclude simplicity.
 one can make beautiful (eye pleasing) sites
 with using 4 div's (not nested too).

that would be great, but thats an exception.

 also, one cannot stick to the old technologies all the time.
 the project is overall bold in scratching old stuff (telnetd,
 rlogin and friends).  but with html, it's back in the 90's.

telned is no longer in source.

  So you have to get tricky - ever seen the new freebsd website:
 
  div id=CONTENT
div id=FRONTCONTAINER
  div id=FRONTMAIN
div id=FRONTFEATURECONTAINER
  div id=FRONTFEATURELEFT
div id=FRONTFEATURECONTENT

 so what if there are divs?  should be tables or what?
 the new site looks just great in links/lynx btw.
 and it looks (quite) good in modern browsers _also_
 so who is robbed of the precious info inside?

Do you think thats good code? That's just overkill because of broken
webbrowser. It's just pain in my eyes.

  What a lot of people forget is that having a good website means having
  content, not having a good design.

 yes, and what a lot of people forget is that having a good website means
 having nice layout too.

 so how about both?

 it's like saying a good book is only the good content.
 yeah, and try to read it if it's typeset in comic sans ms.

that depends on how you look at it.  Comic Sans MS looks good, a good
readable font doesn't look good, but is usefull.  That's exactly my
problem with modern design.  If you don't specify a font in a web page
then the result is a good readable and well sized font.


  So, we are talking about a better, fresh and modern design using XHTML
  and CSS.  We can't use XHTML 1.1 (which is the latest web standatrd)
  because most people's browser can't handle it, thats the first limitation

 where's your numbers?  what's most people?  most people on the web
 these days is some version of IE.  i thought ie supports xhtml.

XHTML 1.1 must be shipped as application/xhtml+xml.  IE can't handle this
and ask the user (or the idiot, as you signature says ;) where to save this
file.  That's not a real problem since you can use xhtml 1.0 but that
shows how broken things are.

  And if we talk about a new design - why don't we  talk about generating
  sites with a modern scripting language?  That's only the next step, but,
  who wants that?  Who needs that?  Who wants to implement it?

 could be, doesn't have to be.  certainly would save a lot time
 to the devs which could be used for something else.  couldn't
 cvs it directly though (the content).


  If there is only one person who has problems to view the content because
  of a new and tricky design, than the new design was a step in the wrong
  direction. Thats my opinion.

 well, good look serving all the people.
 come on, you know that you can't please everyone, don't you?
 _that_ is precisely what openbsd is about.  it never aimed
 pleasing _everyone_


 Theo is man of principles, i have seen that proven many times.
 but the site is somehow a sad exception to his principles.
 it's just not a priority and i can live with that.

  PS: If we change now to a modern design, how long would is last until
  the first person thinks about a flash movie on the starting page?

 i wish people would not be such extremist on this list..

 do not insult me with flash, earthling.

 -f
 --
 user: a technical term used by computer pros.  see idiot.


I'm not against xhtml, but like easy things. Putting 100 divs in one
file is no solution.

Jonathan

--
 | /\   ASCII Ribbon   | Jonathan Glaschke - Lorenz-Goertz-Stra_e 71,
 | \ / Campaign Against | 41238 Moenchengladbach, Germany;
 |  XHTML In Mail   | jabber: [EMAIL PROTECTED]
 | / \ And News | http://jonathan-glaschke.de/

[demime 1.01d removed an attachment of type application/pgp-signature]



Re: HOTO Write bad documentation

2005-11-27 Thread frantisek holop
hmm, on Sun, Nov 27, 2005 at 02:15:27PM +0100, Jonathan Glaschke said that
 XHTML 1.1 must be shipped as application/xhtml+xml.  IE can't handle this
 and ask the user (or the idiot, as you signature says ;) where to save this
 file.  That's not a real problem since you can use xhtml 1.0 but that
 shows how broken things are.

snip

 I'm not against xhtml, but like easy things. Putting 100 divs in one
 file is no solution.

just one more thing.  i didn't say, it _should_ be xhtml/css.
i said: make it validate, and a bit of css does not hurt.

css can be used with 4.01 w/o problems.  and making pages
that have css but also set things for non-css browsers (background)
is quite normal (at least until everybody catches up in year 3014).

make it at least 1998 ;-)

-f
-- 
honk if you love peace and quiet.



Re: HOTO Write bad documentation

2005-11-27 Thread Sime Ramov
On 14:55 Sun 27 Nov, frantisek holop wrote:
 your page is unreadable at 800x600

 :)

I know, it's personal site (well, just splash at this moment), and I
decided for 1024x768.

But I was talking about *code*. Offcourse that I would design OpenBSD
site totaly different... It's about code philosophy, I can make complex
layouts with few or no divs using advanced knowledge of CSS ;)
-- 
http://coastaldisturbance.com/



Re: HOTO Write bad documentation

2005-11-27 Thread Jason Dixon

On Nov 27, 2005, at 9:04 AM, Sime Ramov wrote:


On 14:55 Sun 27 Nov, frantisek holop wrote:

your page is unreadable at 800x600


 :)

I know, it's personal site (well, just splash at this moment), and I
decided for 1024x768.

But I was talking about *code*. Offcourse that I would design OpenBSD
site totaly different... It's about code philosophy, I can make  
complex

layouts with few or no divs using advanced knowledge of CSS ;)


You're free to submit diffs for everything in www/ (http:// 
www.openbsd.org/cgi-bin/cvsweb/www/).  Make sure the layout is  
consistent and meets the goals (http://www.openbsd.org/goals.html) of  
the project.



Thanks,

--
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net



Re: HOTO Write bad documentation

2005-11-27 Thread Simon Morgan
Sime Ramov hello at coastaldisturbance.com writes:
 I agree. Just look at the code of my site, now, OpenBSD needs exactly
 that! :) No, I'm not sarcastic, I'm serious, it would match OpenBSD
 perfectly.

Can you people please shut the fuck up about the website. It's been
stated numerous times before that it isn't going to be changed any
time soon. I have a sneaking suspicion that the only people who
keep raising this are i know what's best HTML programmers who
have nothing interesting or worthwhile to contribute or discuss but
feel the overwhelming need to nitpick, bitch and moan regardless.

 They write great C code (I beleive, heaven't looked yet)

Suspicion confirmed.



Re: HOTO Write bad documentation

2005-11-27 Thread Sime Ramov
On 14:46 Sun 27 Nov, Simon Morgan wrote:
 time soon. I have a sneaking suspicion that the only people who
 keep raising this are i know what's best HTML programmers who
 have nothing interesting or worthwhile to contribute or discuss but
 feel the overwhelming need to nitpick, bitch and moan regardless.

Hey there man, calm down.

Many programmers write code and think that it's the only thing that
matters. Well, web site of the product is also very important. Also,
*every* contribution is welcome, so in this case, you can shut the f*uck
up.
-- 
http://coastaldisturbance.com/



Re: OT: Transparent squid AND redirect_program possible?

2005-11-27 Thread Alexander Farber
Oops my problem were caused by

antispoof quick for lo

On 11/26/05, Alexander Farber [EMAIL PROTECTED] wrote:
http://www.benzedrine.cx/transquid.html
 together with any kind of a redirect_program?

 I've tried first using adzapper.sf.net and then just a hello world
 redirector from http://wiki.squid-cache.org/faq/redirectors and get a
 WARNING: Cannot run '/usr/local/bin/hello_redirect' process. in store.log
 and a telnet proxyhost port fails. I wonder how to get more debug info.



Re: HOTO Write bad documentation

2005-11-27 Thread Simon Morgan
Sime Ramov hello at coastaldisturbance.com writes:
 Many programmers write code and think that it's the only thing that
 matters. Well, web site of the product is also very important.

Matters to who? Idiots who can't read man pages and are constantly
polluting this mailing list with their idiotic ramblings? You sound
like one of those people so I guess it matters to you. That doesn't
mean it matters all that much to people who have a clue what they're
doing.

Hackers like interesting problems. Pretty HTML and a nice website
layout is not an interesting problem. Stop wasting peoples time
with it. The website has its purpose and does a perfectly good
job of serving it.

 Also, *every* contribution is welcome, so in this case, you can
 shut the f*uck up.

You're not contributing anything.



Re: HOTO Write bad documentation

2005-11-27 Thread Toomas Pelberg
 css can be used with 4.01 w/o problems.  and making pages
 that have css but also set things for non-css browsers (background)
 is quite normal (at least until everybody catches up in year 3014).

 make it at least 1998 ;-)

OpenBSD is known for it's progressive additude, if there's a new and a better 
way of doing something, that isn't compatible with the old way - there's no 
hesitation about going forward in that direction. That's the impression I've 
held so far. It's a good philosophy imho. There's no need to carry the burden 
of compatilibty with the old just because of the needs of others who do not 
share your goals. They're free to pursue their own goals, and should not be 
critisizing about yours. Certainly not demand anything for which they've 
given nothing.

And here, you're preaching for an exception in the case of html. XHTML + CSS 
are imho improvements to html 4.01 and should be therefore used instead.
If people have browsers that cannot handle it, it's quite their problem. If 
they still want to access the content but keep their backward browsers, let 
them submit an alternative layout and have a link to it. In this case, 
there's an alternative layout - the excisting one, so they're still getting 
something for nothing and therefore should not be complaining when XHTML + 
CSS is used, since they can still get to the content.

In practice of course, my ideas will be considered that of an 
shelfish/capitalistic who has no right to hold his opinions.. for they're no 
benefit for the common good.

Yet I've hope that OpenBSD movement will recongize that the progressive 
attitude is the right one, and one should not bear the burden of 
compatibility without a reason.



Re: HOTO Write bad documentation

2005-11-27 Thread Hannah Schroeter
Hello!

On Sun, Nov 27, 2005 at 03:04:11PM +0100, Sime Ramov wrote:
On 14:55 Sun 27 Nov, frantisek holop wrote:
 your page is unreadable at 800x600

 :)

I know, it's personal site (well, just splash at this moment), and I
decided for 1024x768.

Deciding for *any* resolution is *bad* design.

[...]

Kind regards,

Hannah.



Re: Theorical question on dual core vs single CPU in routing setup.

2005-11-27 Thread Henning Brauer
* Daniel Ouellet [EMAIL PROTECTED] [2005-11-26 08:57]:
 I was asking myself if I would actually benefit from a dual core 
 processor, or multi-processor system in a routing setup and more I think 
 about it, I would think not as the application is not multi-treads to 
 start with and there isn't must else running as well.

routing itself does not benefit from MP, currently. for pure 
forwarding performance a UP system could be faster than an MP system 
(with same parameters otherwise), except that we use the ioapics on MP 
systems and that gives some benefit... but that's a side-effect :)

 Looking at the code of bgpd/ospfs, I don't see it design as using 
 multiple treads ( doesn't mean I understand it fully either) so it 
 wouldn't benefit from a dual core server then, and as the routing table 
 basically is process by the kernel, I would think it would be useless to 
 have multi core no?


bgpd and ospfd are not threaded at all, on purpose.

however, they are multiple processes. in case of bgpd, the session 
engine and the parent process on one CPU and the RDE on the other 
should give performance benefits. and you're not only doing bgpd, you 
are also forwarding packets, so MP might really improve your 
total performance.



Re: HOTO Write bad documentation

2005-11-27 Thread Rene Rivera

Hannah Schroeter wrote:

On Sun, Nov 27, 2005 at 03:04:11PM +0100, Sime Ramov wrote:

On 14:55 Sun 27 Nov, frantisek holop wrote:



your page is unreadable at 800x600



I know, it's personal site (well, just splash at this moment), and I
decided for 1024x768.



Deciding for *any* resolution is *bad* design.


The current openbsd.org doesn't work at 640x480... Does that make it a 
bad design? And hence should be considered a bug to be fixed by a new 
design?




--
-- Grafik - Don't Assume Anything
-- Redshift Software, Inc. - http://redshift-software.com
-- rrivera/acm.org - grafik/redshift-software.com
-- 102708583/icq - grafikrobot/aim - Grafik/jabber.org



Help on booting from logical partition

2005-11-27 Thread PARAMVIR DHINDSA

27 Nov, 2005
  Dear Sir,
  
  I've installed OpenBSD on an Intel machine(Intel chipset GV) in a  logical 
partition. How can I boot that partition from a bootable floppy  i.e what 
should I type at the boot command line.
 Single? There's someone we'd like you to meet.
Lot's of someone's, actually. Yahoo! Personals



Clamd crapping-out?

2005-11-27 Thread Chris
Hello everyone.

I wanted to build an email server OBSD style.  I have never done this,
and it has been a while since I set one up (few years).  I wanted to
take advantage of many of the newer developments in the *nix email world.

I am using OBSD 3.8 with sendmail.  My machine is an 800mhz via c3 with
512mb of ram.  I am using sasl, imaps/pops (imap-uw) with tls, I am
using spam assassin, and I am using clamav through smtp-vilter. 
Everything works great --except one thing:

Clamd seems to crap out on large email messages.  I have sent several
test messages to my server with a 4mb attachment.  every time it tries
to come through, I get this in my maillog file:
---
Nov 27 12:54:37 mx1 sendmail[11426]: jARHriLC011426:
to=[EMAIL PROTECTED], delay=00:00:48, pri=5757331, stat=Please try
again later
Nov 27 12:57:14 mx1 sendmail[9374]: jARHuXIs009374:
from=[EMAIL PROTECTED], size=5727332, class=0, nrcpts=1,
msgid=[EMAIL PROTECTED], proto
=ESMTP, daemon=MTA, relay=sccrmhc11.comcast.net [63.240.77.81]
Nov 27 12:57:16 mx1 sendmail[9374]: jARHuXIs009374: Milter add: header:
X-SMTP-Vilter-Version: 1.1.9
Nov 27 17:57:26 mx1 smtp-vilter[29622]: clamd: no response from clamd
Nov 27 17:57:26 mx1 smtp-vilter[29622]: error during virus scan of file
/tmp/vilter.MFzDk29622
Nov 27 17:57:26 mx1 smtp-vilter[29622]: temporarily failing message
Nov 27 12:57:26 mx1 sendmail[9374]: jARHuXIs009374: Milter: data,
reject=451 4.3.2 Please try again later
---

I have monitored it with top, and when the message comes through, the
CPU usage for spikes to about 97% (nearly all of it attributable to
clamd). It bobbles from about 75% to 97% for about 40-50 seconds.  Then
it craps out with the above message in /var/log/maillog.  I have set the
readtimeout to 10 minutes... this did not help.

Small messages get through just fine, and clear their virus scan.

I know my users will be sending/receiving attachments this big and bigger. 
Can someone please assist?

Thank you!

Chris



Note:  I have also used maildroid, and I noticed, that out of the box,
the same thing happens!


Here is my clamd.conf:

--
LogFile /var/log/clamd.log
LogTime
TemporaryDirectory /var/tmp
FixStaleSocket
TCPSocket 3310
TCPAddr 127.0.0.1
ReadTimeout 600
User _vilter
ScanPE
ScanArchive






Here is my smtp-vilter.conf
---
user=_vilter
group=_vilter
chroot=/var/smtp-vilter
tmpfiles=g+r
tmpfiles=setgrp
backend=clamd
config-file=clamd:/etc/smtp-vilter/clamd.conf
virus-strategy=notify-recipient
recipient-notification=/etc/smtp-vilter/recipient-notification
spam-strategy=mark
spam-subject-prefix=* SPAM *
unwanted-strategy=mark
error-strategy=tempfail
port=unix:smtp-vilter.sock
tmpdir=/tmp
pidfile=/var/run/smtp-vilter.pid
log-facility=mail
logfile=/var/log/smtp-vilter.log
option=logvirus
option=logspam
option=logunwanted
option=markall
---




Here is my dmesg:
---
OpenBSD 3.8 (GENERIC) #138: Sat Sep 10 15:41:37 MDT 2005
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: VIA Samuel 2 (CentaurHauls 686-class) 800 MHz
cpu0: FPU,DE,TSC,MSR,MTRR,PGE,MMX
real mem  = 527998976 (515624K)
avail mem = 474857472 (463728K)
using 4278 buffers containing 26501120 bytes (25880K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(e1) BIOS, date 03/27/03, BIOS32 rev. 0 @ 0xfb150
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
apm0: flags 70102 dobusy 1 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xf/0xdf94
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdf20/112 (5 entries)
pcibios0: PCI Exclusive IRQs: 5 9 10 11
pcibios0: PCI Interrupt Router at 000:17:0 (VIA VT8231 ISA rev 0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc/0xc000
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 VIA VT8601 PCI rev 0x05
ppb0 at pci0 dev 1 function 0 VIA VT82C601 AGP rev 0x00
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 Trident CyberBlade i1 rev 0x6a
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
pcib0 at pci0 dev 17 function 0 VIA VT8231 ISA rev 0x10
pciide0 at pci0 dev 17 function 1 VIA VT82C571 IDE rev 0x06: ATA100,
channel 0 configured to compatibility, channel 1 configured to compatibility
wd0 at pciide0 channel 0 drive 0: Maxtor 6Y120P0
wd0: 16-sector PIO, LBA, 117246MB, 240121728 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
pciide0: channel 1 ignored (disabled)
uhci0 at 

Re: Mambo Server hacks

2005-11-27 Thread Fabien Germain
On 11/27/05, Bruno S. Delbono [EMAIL PROTECTED] wrote:

 Is there a secure php CMS that any of you might have had experience with
   (knowing full well that php and security are an oxymoron)

Did you try SPIP (http://www.spip.net) ? Several big french websites use it.

Fabien



Re: Updated CCD Mirroring HOWTO

2005-11-27 Thread Daniel Ouellet

[EMAIL PROTECTED] wrote:

OpenBSD claims to be done for the benefit of its developers and every
indication that I've seen says that they mean exactly what they say.


True and nothing wrong with that.


Concerns of users are secondary at best.


The developers will help you if you have something good to offer to 
them, but most users only wine for ever and ever!



What the developers have is their own operating system, where everything
is under their control and done according to their priorities.


And so it should be! They write it don't they?


They are the only ones on the planet who have such.


And is the only one on the planet with such a track records as well! (:


They will not give up that control to any outsiders.
Can't say I blame 'em.


Nor would I, as if they do that, the project would simply go dead and 
loose all of it's winning aspect now! And that bring the discussion in 
the full cycle now and close it as well. Users try to offer stuff as 
they say they have to, or know better, ( what ever really) then complain 
it's not taken seriously, ( what ever again), then they complain they 
don't have the docs they needs ( what ever again!), so you take them to 
their own words and say, here do it yourselves if you are so incline to 
do so and shut up ( what ever again) and what happened, well very few 
will offer some decent stuff and then nothing! So, that proof the point 
just to well! Just talks and not much progress and this tread is just an 
other example of it I guess. If the users would only do 1% of what they 
say, it would have so many docs of HOWTOs, that you would never have the 
time to read them all. ( Note, I haven't said anything about the quality 
of it here, that's a loaded subject by itself.)


In short give control to the users and it will go dead!


Part of the effect is that OpenBSD has a degree of clout much larger
than its user base would suggest.
Seriously, if it doesn't run OpenBSD, there's probably something
fundamentally wrong with it. (Not really fair, but it is effective;)


I couldn't agree with you more here with minor exceptions as there is 
always some, but in general OpenBSD does all that I need and it;'s a 
killer OS!




In order to benefit from OpenBSD, starting with something that used to be
OpenBSD, and then doing Windows on top of that, doesn't really work.
Further, I suspect that any such tends to give OpenBSD a bad name.


Why would you like to do it anyway?



Setting up an excellent and elaborate security system and then disposing
of old computers with hard drives intact, ...
Everything you don't know  --- matters.



What can I say anyway.

Daniel



Re: Help on booting from logical partition

2005-11-27 Thread Joachim Schipper
On Sun, Nov 27, 2005 at 10:14:50AM -0800, PARAMVIR DHINDSA wrote:
   
   27 Nov, 2005
   Dear Sir,
   
   I've installed OpenBSD on an Intel machine(Intel chipset GV) in a  logical 
 partition. How can I boot that partition from a bootable floppy  i.e what 
 should I type at the boot command line.
  Single? There's someone we'd like you to meet.
 Lot's of someone's, actually. Yahoo! Personals

It should be similar to

boot: com0 com1 fd0 wd0 mem[...]
boot boot wd0a:/bsd

Of course, the above is reproduced from memory and the topmost line is
likely to be inaccurate even on my own system, let alone yours.

That being said, OpenBSD's boot will tell you what hard disks it finds
(most likely wd or sd, but there are quite a few possibilities). A
variation on the above syntax will cause OpenBSD to go look at the
proper disk.

Joachim



Re: How to redirect packets by HTTP URL

2005-11-27 Thread Daniel Ouellet

Alejandro Valverde Molina wrote:

  I'm using pf to forwarding my dmz, but I need to forward a http subdomain to a
specific ip address, so is there a way to forward the package reading the http
url, like m$cr$s$ft isa server does?


In your httpd.conf file, you can make that do what ever you like!

See here for example:

http://marc.theaimsgroup.com/?l=openbsd-miscm=110745960831277w=2

Then read on it to adapt to your needs. Could be very powerful is use 
properly!


Daniel



Re: How to redirect packets by HTTP URL

2005-11-27 Thread knitti
On 11/27/05, Alejandro Valverde Molina [EMAIL PROTECTED] wrote:
   I'm using pf to forwarding my dmz, but I need to forward a http subdomain 
 to a
 specific ip address, so is there a way to forward the package reading the http
 url, like m$cr$s$ft isa server does?
I don't know exactly what you want to achieve, but unless I misunderstood you
you want route packets (network layer) based on http header information
(application layer)? i can't imagine one such thing which won't be a bad hack.
it will break.

use a proxy. apache makes a reasonable proxy, and it is in base.


--knitti



Re: HOTO Write bad documentation

2005-11-27 Thread Nick Holland
Rene Rivera wrote:
 Hannah Schroeter wrote:
...
 Deciding for *any* resolution is *bad* design.
 
 The current openbsd.org doesn't work at 640x480... Does that make it a 
 bad design? And hence should be considered a bug to be fixed by a new 
 design?

One of our star platforms, Zaurus, has only an 640x480 screen.  I
think it is reasonable to expect that the OpenBSD website can be usably
viewed on a Zaurus running OpenBSD.  Note the word usably -- the
Zaurus is a small machine, and has some restrictions due to its size.
So, some inconveniences are expected, all of the various index.html
pages won't fit without some scrolling.  But it should work for a
tolerant version of work.

Running my tests on OpenBSD/i386 -current, Firefox and Dillo running
with its window sized to 620x400 (yes, smaller than full Zaurus screen,
as I figure the point of having a windowing environment is NOT to have
everything full-screen!), I don't see any serious problems (well...other
than the idea of Firefox on a Zaurus... *shudder*  Unfortunately, I
don't have the browsers more likely to be used on a Zaurus on this
machine at the moment).

index.html needs a little side-to-side panning to view in 620x400, but
the main body text is very readable without additional horizontal
scrolling, and the entire blue navigation bar is visible without
horizontal scroll.  donations.html also needed side-to-side scrolling
when looking at the names, but that's actually very easy to read that way.

Spot-checking the FAQ indicated there were some lines of screen output
that caused problems (I need to fix that for other reasons), but for the
most part, the content seemed very readable to me on this small screen.

Adding CSS to the OpenBSD website because it's cool is pure bullshit,
but your claim (if true) is not.

So, where do you see a practical problem? I would like to see a list of
what pages you saw an unreasonable problem at 640x480 (or my more
stringent test).  Or are you just making noise?

Nick.



Fwd: What java port for konqueror?

2005-11-27 Thread Edd Barrett
On 27/11/05, Dave Feustel [EMAIL PROTECTED] wrote:
 On Saturday 26 November 2005 19:08, steven mestdagh wrote:
  On Sat, Nov 26, 2005 at 05:45:37PM -0500, Dave Feustel wrote:
   I finally need to activate Java support for Konqueror,
   but it appears that Java is not by default part of KDE
   or included in OpenBSD. What port/package(s) do I
   need for java  to work with konqueror on OpenBSD?
 
  You are in for some compile time and probably want to start reading
  this article:
  http://www.openbsd.org/faq/faq13.html#javaflash
 
  I don't use KDE and did not test konqueror. Note that the info on the
  KDE base package says you need to explicitly enable Java.
  Let us know if it works...

 Steve.

 Thanks very much for the URL. Reading it reminds me why I haven't
 tried to use Java on OpenBSD before. I have a slow 800MHz system
 so I'm not sure I want to even bother trying to build Java; I have a
 lot of other projects to work on that are likely to be more useful.

 Dave

 --
 Switch to Secure OpenBSD with a KDE desktop!!!
 NOW with Virtual PC OS support via QEMU and
 Beowulf clustering using PETSc and MPICH2!




You should be aware that the 1.5 jdk has no java plugin! Use 1.4 if you need it.

Regards

Edd



Re: HOTO Write bad documentation

2005-11-27 Thread Rene Rivera

Nick Holland wrote:

Rene Rivera wrote:

Hannah Schroeter wrote:



Deciding for *any* resolution is *bad* design.


The current openbsd.org doesn't work at 640x480... Does that make it a 
bad design? And hence should be considered a bug to be fixed by a new 
design?



So, where do you see a practical problem?


I don't see a problem at all...


I would like to see a list of
what pages you saw an unreasonable problem at 640x480 (or my more
stringent test).  Or are you just making noise?


I was pointing out the flawed argument by Hannah through the use of an 
example. That having a design that is tailored, or ideal, for some 
specific sizes or range of sizes, makes it a '*bad* design' (Hannah's 
words).




--
-- Grafik - Don't Assume Anything
-- Redshift Software, Inc. - http://redshift-software.com
-- rrivera/acm.org - grafik/redshift-software.com
-- 102708583/icq - grafikrobot/aim - Grafik/jabber.org



Re: Fwd: What java port for konqueror?

2005-11-27 Thread Josh Grosse
On Sun, Nov 27, 2005 at 01:41:01AM +, Edd Barrett wrote:
 ...You should be aware that the 1.5 jdk has no java plugin! Use 1.4 if you 
 need it.

True for -release and -stable.  But the plugin was added to -current cvs 4 
days ago.

http://www.openbsd.org/cgi-bin/cvsweb/ports/devel/jdk/1.5/



Re: HOTO Write bad documentation

2005-11-27 Thread frantisek holop
hmm, on Sun, Nov 27, 2005 at 04:04:02PM +, Simon Morgan said that
 Sime Ramov hello at coastaldisturbance.com writes:
  Many programmers write code and think that it's the only thing that
  matters. Well, web site of the product is also very important.
 
 Matters to who? Idiots who can't read man pages and are constantly
 polluting this mailing list with their idiotic ramblings? You sound

who decides what is idiotic?  you?

 Hackers like interesting problems. Pretty HTML and a nice website
 layout is not an interesting problem. Stop wasting peoples time
 with it. The website has its purpose and does a perfectly good
 job of serving it.

yeah, and as i said, that doesn't mean it has to hurt the eye.
making information nice and readable is not a sin.
pretty html and a nice website is maybe not interesting for
_you_ but nevertheless it is quite a challenge if you haven't
noticed.

  Also, *every* contribution is welcome, so in this case, you can
  shut the f*uck up.
 
 You're not contributing anything.

if you are sent away right at the beginning, what's the point?
expressing an opinion is still a contribution.  without that,
openbsd would be much poorer.


i realize this thread brings nothing really new and annoys
the hell out of the devs.  but i think it's important that
the more arty people here get these questions answered
and be in the archives.

and i still don't understand why we have to be ashamed of
the openbsd site.  it is not a commercial product, but that
still doesn't mean it has to be ugly.   or at least valid
ugly html.

-f
-- 
i am not a dictator.  it's just i have a grumpy face.



Re: HOTO Write bad documentation

2005-11-27 Thread frantisek holop
hmm, on Sun, Nov 27, 2005 at 05:34:49PM -0500, Nick Holland said that
 Rene Rivera wrote:
  Hannah Schroeter wrote:
 ...
  Deciding for *any* resolution is *bad* design.
  
  The current openbsd.org doesn't work at 640x480... Does that make it a 
  bad design? And hence should be considered a bug to be fixed by a new 
  design?

it doesn't even work at 800x600 without making the fonts smaller.
yes it is bad design.


 Adding CSS to the OpenBSD website because it's cool is pure bullshit,
 but your claim (if true) is not.

sigh  opposing css because it's cool isn't very professional
either.  sorry Nick, i don't agree with you on this one.  welcome
to the 21st century of web pages.  didn't keep telnetd, why not
step up the new (actually quite old) web standard?

-f
-- 
Introibo ad altare Dei.



Re: anyone tried bgpd vs. he.net/tunnelbroker.net

2005-11-27 Thread unixgeek
snip
your only workaround is to not send any capability it does not grok.
this is guesswork. you might want to try to not announce v4 unicast
capabilities...
snip

I was wondering exactly how this was specified in the bgpd.conf file?
Since I was trying to do the same thing to connect to he.net and try out
the new ipv6 capabilities of bgpd...
Thanks!
Glenn



Re: HOTO Write bad documentation

2005-11-27 Thread Ray Percival

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


On Nov 27, 2005, at 4:20 PM, frantisek holop wrote:


snip


You're not contributing anything.


if you are sent away right at the beginning, what's the point?
expressing an opinion is still a contribution.  without that,
openbsd would be much poorer.


i realize this thread brings nothing really new and annoys
the hell out of the devs.  but i think it's important that
the more arty people here get these questions answered
and be in the archives.

and i still don't understand why we have to be ashamed of
the openbsd site.  it is not a commercial product, but that
still doesn't mean it has to be ugly.   or at least valid
ugly html.
So *code* something. Put it up someplace. See if anybody thinks there  
is a reason to switch. Offer to put the time and effort into  
maintaining it. A big part of the problem here is people who keep  
whining but don't produce any code. It's all there in CVS make with  
the code and I think you'll find you get much more respect.


-f
--
i am not a dictator.  it's just i have a grumpy face.



- --
If you aren't solving your problems with violence, you aren't using  
enough.

iD8DBQFDilDQ+jjCYjWs3d0RAnDkAJ9LJU7R75Y6zn44aj1sWE6kbhWOKACdHBw9
kqHpiB/VCU6dCOXHaNjBLSk=
=jjcE
-END PGP SIGNATURE-



OpenBSD 3.8 remote installation script

2005-11-27 Thread Florian Mahlecke

Hi there,

Iam looking for a script which could used for an remote OpenBSD 3.8 
installtion on a dedicated server. Last time Ive dumped an image of 3.6 
on my box but Ive read something about an installation routine for 
OpenBSD 3.6 but I have forgotten the scriptname (but it wasnt the 
depenguinator) - maybe anyone can give a hint ?!



Regards
Florian



Re: Updated CCD Mirroring HOWTO

2005-11-27 Thread J.C. Roberts
On Sun, 27 Nov 2005 14:15:26 +0100, Robbert Haarman
[EMAIL PROTECTED] wrote:

Dear JCR,

 To the rest of list users; Please pardon another long email from me on
 this. Helping reasonable people like Robbert understand why many people
 consider HOWTO's to be harmful is hopefully worth the added noise and
 bandwidth.

If this is a concern, why don't we take the discussion off-list? Also, I 
don't want to waste anyone's time with this discussion, so if you are 
tired of this discussion, just tell me to stop it and I will.


Long posts and repeated back-and-forth on the list are things I prefer
to avoid, since every post we make on list does carry the associated
cost of many people, including a lot of the developers, reading and
scrutinizing it.

I find you, your opinions and the discussion itself interesting, but
moving it off list after this post will probably be best. I was
originally going to send this to you off list but Michael Quaintance
requested to continue the discussion in public. A tough call ether way
but capitulating with his request on one last lengthy volley into the
ether seems fairly reasonable.

I hope it seems like a reasonable plan to you.

  If end-users are lazy and want to take the easy way out, they should
  go back to using linux and MS-Windows. They are not welcome here.
 
 That's a pity. I personally think OpenBSD is the _only_ operating system 
 that takes security as seriously as it should be taken, and it would be 
 in everybody's (well, almost everybody's) best interest if they used it. 
 There is nothing wrong with the project not wanting certain users, but 
 it leaves these users with a choice among evils, which is a pity.
 
 
 The pity is not whether or not some users are welcome. The real pity is
 current technology has yet to produce a computer that the average user
 can, own, operate and maintain without either significant knowledge of
 their own or significant resources to pay professionals to do the dirty
 work.

I disagree. A Linux distro (forgive my blasphemy) 

Linux is not blasphemy. It's just one of the many a flavors of UNIXish
operating systems. The various flavors of UNIX are just like people; we
all have our own set of problems and personality quirks. Oddly enough,
there's a powered off RedHat8 box currently being used by my feet as a
footstool. Though I can't say I really support linux very much, I can
say linux supports my feet fairly well. ;-)

like Ubuntu is easy 
enough for computer illiterates to use and even maintain, since security 
patches are automatically announced and installed with a click of the 
mouse. 

I've never tried Ubuntu. Is it fun? -The reason why my only linux box is
an ancient RedHat8 is due that version being the only supported
version of linux for Cadence software suite. I have to test on it, as
well as SPARC-Solaris, PARISC-HPUX, POWER-AIX and others.

If only Ubuntu had the advanced security mechanisms of OpenBSD, 
it would be a very secure system, even if the users didn't know much 
about computers.

As it stands, OpenBSD is the only operating system I am aware of that
has had the full base system completely audited and has buffer overrun
and other protections enabled for all software on it. This, by itself,
makes it more secure than other systems, regardless of what users do
with it. Even in the worst case, where users actively degrade the
security of the system, I would imagine OpenBSD's security would at
least not be _worse_ than that of another system.


As you know, reducing the secure/insecure argument to absolutes of black
and white does not work but contrary to popular belief, trying to
differentiate based on shades of gray also fails miserably. There are
just too many possibilities, too much work and too many assumptions to
make any solid case based on particular shades of gray.

To put it a bit more directly, I believe you are grasping at straws with
this line of reasoning because we both know there's really no way to
prove or disprove whether your assumptions are correct or incorrect. On
the bright side, I think you deserve bonus points for a beautiful use of
rhetoric. ;-)

Adding security features tends to break existing software. It's just a
fact of life but on the flip side, it does allow new classes of bugs to
be found and fixed. When software refuses to compile or run due to some
new security feature, the result is increasing the level of expertise
required of normal users to do a normal tasks. What I'm saying is,
the Ubuntu/Windows approach of trying to make things easy for the
end-user is diametrically opposed to the addition of disruptive security
technology. Yes, in time, the bugs found by a new security feature get
fixed and the effect on required knowledge is reduced but in the mean
time, you've got a bunch of angry users out for blood because they can't
do their job.

Security itself is actually a myth because nothing is ever completely
secure. Calling it a relative term and playing the shades of gray game
is 

Re: HOTO Write bad documentation

2005-11-27 Thread Jeremy David
On 11/27/05, Simon Morgan [EMAIL PROTECTED] wrote:

 Hackers like interesting problems. Pretty HTML and a nice website
 layout is not an interesting problem. Stop wasting peoples time
 with it. The website has its purpose and does a perfectly good
 job of serving it.


I would have to disagree. I find that coming up with good visual layouts and
good, solid web design is a large challenge. Otherwise I wouldn't do it.

The OpenBSD website is functional for many people. However, it could be more
functional, and work to maximum effect on all users across all platforms.

I think there are a lot of misconceptions about what CSS is for. It's not
just about pretty pictures. CSS and solid XHTML, when used properly, make
your websites look great on the newest Mac and it makes them look and work
great on lynx running on a 386. That's what good web design is all about.
Right now, OpenBSD.org's layout and design relies on a lot of old hacks,
which break down for many users. I find that unacceptable, just as I find
the general attitude that something is good enough when it clearly could be
better with a little effort to be unacceptable.



Re: HOTO Write bad documentation

2005-11-27 Thread Ray Percival

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


On Nov 27, 2005, at 7:52 PM, Jeremy David wrote:


On 11/27/05, Simon Morgan [EMAIL PROTECTED] wrote:


Hackers like interesting problems. Pretty HTML and a nice website
layout is not an interesting problem. Stop wasting peoples time
with it. The website has its purpose and does a perfectly good
job of serving it.



I would have to disagree. I find that coming up with good visual  
layouts and
good, solid web design is a large challenge. Otherwise I wouldn't  
do it.


The OpenBSD website is functional for many people. However, it  
could be more
functional, and work to maximum effect on all users across all  
platforms.


I think there are a lot of misconceptions about what CSS is for.  
It's not
just about pretty pictures. CSS and solid XHTML, when used  
properly, make
your websites look great on the newest Mac and it makes them look  
and work
great on lynx running on a 386. That's what good web design is all  
about.
Right now, OpenBSD.org's layout and design relies on a lot of old  
hacks,
which break down for many users. I find that unacceptable, just as  
I find
the general attitude that something is good enough when it clearly  
could be

better with a little effort to be unacceptable.

Where is your diff?




- --
If you aren't solving your problems with violence, you aren't using  
enough.

iD8DBQFDioE9+jjCYjWs3d0RAlSXAJ0djmodweKg2XlpDxIu3mkY+sccUwCfb4+t
0yRldNZaeUt+5JhPG+k7MeE=
=4tbv
-END PGP SIGNATURE-



Re: openbsd web site design proposals (from HOTO write bad docs)

2005-11-27 Thread Nick Holland
frantisek holop wrote:
 dear list,
 
 before Theo brings up the (very) valid point of haven't
 been able to see any proposed design (even if rejected
 without looking) i would like to ask fellow designers
 or anyone who feels like to make an openbsd site design
 proposal just to show that actually there is interest
 in making the old pages retire after so many years of
 faithful serving.
 
 i am willing to host all the participants' efforts
 as a central repository, or even only links
 to these pages.
 
 make some noise people, so we can say at least we tried.
 
 -f

Like FreeBSD and NetBSD's redesign our web site contest.  Riiight..

No.
We've spent way too much time laughing at those already (both the
process and the results).

You can do what you want, but your work will be ignored.

OpenBSD is NOT a committee-run OS project.
I think a lot of people miss this.  If there is ONE THING that
distinguishes OpenBSD from most other OSs out there, it is the fact that
OpenBSD is the work of a small group of people following the lead of
*one* person.  There is no question of direction, there is no five
different products to accomplish same task, because we don't have the
guts to make a decision and endorse just one.

As has been pointed out repeatedly, OpenBSD developers develop the OS
for their own use.  If your uses are compatible with the developer's
goals, OpenBSD is for you.  If not, you quickly realize not to waste
your time.  You don't see OpenBSD flopping around without a clear
direction.  You don't end up wondering, will they change directions to
meet my goals, or will they abandon my goals?.

If or when Theo decides the web site should be restructured, it will be
restructured.  If/when that happens, I would be very surprised if
something other than one of two things were to happen:
  1) Theo rebuilds it and says, here's the new design.
  2) Theo hires/selects ONE PERSON to redesign it, and looks at the
result and says, here is the new design (or rips someone's head off).

Committee design is NOT what we are about.  You don't see contests for
CD designs or release themes.

Contrary to what some people think, we are not a web-design company.
Our product is not a super-cool website.  Our product is an OS we need
and use.  The website is just an information source about the product,
maintained by software developers and documenters.  When I write
material to help other people with similar interests use OpenBSD, I'm
not worried about if it uses the features of the best of the current
crop of browsers, I want to get the information across effectively.  I
measure my success based on the information conveyed, not how pretty it
is.  I have reason to believe I do a half-way decent job at this.  If
someone wishes to prove they can do a better job, go for it, I'm sure
Theo would love to have a more productive person doing what I do (and
what he would like me to do that I'll never have time for).  I won't
fight it.  I have not been bored in well over 20 years, I have NO
problem occupying my time.  BTW: quality of work will be judged on
content, not style.

Nick.



OpenBSD 3.8 remote installation script

2005-11-27 Thread Florian Mahlecke

Hi there,

Iam looking for a script which could used for an remote OpenBSD 3.8 
installation on a dedicated server. Last time Ive dumped an image of 3.6 
on my box but Ive read something about an installation routine for 
OpenBSD 3.6 but I have forgotten the scriptname (but it wasnt the 
depenguinator) - maybe anyone can give a hint ?!



Regards
Florian



Install fails on ACER Veriton 5100 at entry point at 0x100120

2005-11-27 Thread Uwe Dippel
... both for cd37 and cd38 in a similar way.

For 3.8 is says:

CD-ROM: AC
Loading /3.8/I386/CDBOOT
probing: pc0 com0 apm mem[635k 382M a20=on]
disk: fd0 hd0+* cd0
 OpenBSD /i386 CDBOOT 1.04
boot
booting cd0a: /3.8/i386/bsd.rd: 4369156+828044
[52+151072+137381]=0x53b600
entry point at 0x100120


... and this is the end. Here it gets stuck.

We have searched the archives and google; but need further advice to make
it work.

In principle, the box boots to Knoppix and we also but that dmesg here in
case it can help:

Linux version 2.6.11 ([EMAIL PROTECTED]) (gcc-Version 3.3.5 (Debian 
1:3.3.5-12)) #2 SMP Thu May 26 20:53:11 CEST 2005
BIOS-provided physical RAM map:
 BIOS-e820:  - 0009fc00 (usable)
 BIOS-e820: 0009fc00 - 000a (reserved)
 BIOS-e820: 000f - 0010 (reserved)
 BIOS-e820: 0010 - 17fd (usable)
 BIOS-e820: 17fd - 17fe (reserved)
 BIOS-e820: 17fe - 17fe8000 (ACPI data)
 BIOS-e820: 17fe8000 - 1800 (ACPI NVS)
 BIOS-e820: fff8 - 0001 (reserved)
0MB HIGHMEM available.
383MB LOWMEM available.
On node 0 totalpages: 98256
  DMA zone: 4096 pages, LIFO batch:1
  Normal zone: 94160 pages, LIFO batch:16
  HighMem zone: 0 pages, LIFO batch:1
DMI 2.3 present.
ACPI: RSDP (v000 ACER  ) @ 0x000fe030
ACPI: RSDT (v001 ACER   S58M 0x0001 ACER 0x) @ 0x17fe
ACPI: FADT (v001 ACER   S58M 0x0001 ACER 0x) @ 0x17fe0028
ACPI: DSDT (v001   Acer   S58M   0x1000 MSFT 0x010a) @ 0x
ACPI: BIOS age (2000) fails cutoff (2002), acpi=force is required to enable 
ACPIACPI: Disabling ACPI support
Allocating PCI resources starting at 1800 (gap: 1800:e7f8)
Built 1 zonelists
Kernel command line: ramdisk_size=10 init=/etc/init lang=us apm=power-off 
vga=791 initrd=minirt.gz nomce quiet BOOT_IMAGE=knoppix BOOT_IMAGE=linux
__iounmap: bad address c00fffd9
Local APIC disabled by BIOS -- you can enable it with lapic
mapped APIC to d000 (01402000)
Initializing CPU#0
PID hash table entries: 2048 (order: 11, 32768 bytes)
Detected 863.945 MHz processor.
Using tsc for high-res timesource
Console: colour dummy device 80x25
Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
Memory: 383544k/393024k available (1847k kernel code, 8768k reserved, 946k 
data, 292k init, 0k highmem)
Checking if this processor honours the WP bit even in supervisor mode... Ok.
Calibrating delay loop... 1703.93 BogoMIPS (lpj=851968)
Security Framework v1.0.0 initialized
SELinux:  Disabled at boot.
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
CPU: After generic identify, caps: 0383f9ff     
 
CPU: After vendor identify, caps: 0383f9ff     
 
CPU: L1 I cache: 16K, L1 D cache: 16K
CPU: L2 cache: 256K
CPU: After all inits, caps: 0383f9ff   0040  
 
Enabling fast FPU save and restore... done.
Enabling unmasked SIMD FPU exception support... done.
Checking 'hlt' instruction... OK.
Checking for popad bug... OK.
CPU0: Intel Pentium III (Coppermine) stepping 06
per-CPU timeslice cutoff: 731.62 usecs.
task migration cache decay timeout: 1 msecs.
SMP motherboard not detected.
Local APIC not detected. Using dummy APIC emulation.
Brought up 1 CPUs
CPU0 attaching sched-domain:
 domain 0: span 0001
  groups: 0001
checking if image is initramfs...it isn't (no cpio magic); looks like an initrd
Freeing initrd memory: 862k freed
NET: Registered protocol family 16
EISA bus registered
PCI: PCI BIOS revision 2.10 entry at 0xf0220, last bus=2
PCI: Using configuration type 1
mtrr: v2.0 (20020519)
ACPI: Subsystem revision 20050408
ACPI: Interpreter disabled.
Linux Plug and Play Support v0.97 (c) Adam Belay
pnp: PnP ACPI: disabled
PnPBIOS: Scanning system for PnP BIOS support...
PnPBIOS: Found PnP BIOS installation structure at 0xc00f6860
PnPBIOS: PnP BIOS version 1.0, entry 0xf82e0:0x0, dseg 0xf
PnPBIOS: 18 nodes reported by PnP BIOS; 18 recorded by driver
SCSI subsystem initialized
PCI: Probing PCI hardware
PCI: Probing PCI hardware (bus 00)
PCI: Transparent bridge - :00:1e.0
PCI: Using IRQ router PIIX/ICH [8086/2440] at :00:1f.0
pnp: 00:08: ioport range 0x400-0x47f has been reserved
pnp: 00:08: ioport range 0x480-0x4bf has been reserved
pnp: 00:08: ioport range 0xe00-0xe7f has been reserved
audit: initializing netlink socket (disabled)
audit(1133184008.326:0): initialized
Total HugeTLB memory allocated, 0
VFS: Disk quotas dquot_6.5.1
Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
Initializing Cryptographic API
vesafb: framebuffer at 0x8400, mapped to 0xd888, using 3072k, total 
32768k
vesafb: mode is 1024x768x16, linelength=2048, pages=0
vesafb: protected mode 

Re: openbsd web site design proposals (from HOTO write bad docs)

2005-11-27 Thread J Moore
Why don't you cut the guy some slack - or at least shut your yap on this 
(puh-l-e-e-e-ze)? I don't see *any* of what you're claiming to be 
OpenBSD policy stated on the website. In fact I see a statement 
(somewhat) to the contrary:

Be as politics-free as possible; solutions should be decided on the 
basis of technical merit. 

And if it's the one-man show you claim, why don't you let the man 
speak for himself? Or if you've been hired as the official OpenBSD 
bitch, please - let us know.

Jay



On Sun, Nov 27, 2005 at 11:03:19PM -0500, the unit calling itself Nick Holland 
wrote:
 frantisek holop wrote:
  dear list,
  
  before Theo brings up the (very) valid point of haven't
  been able to see any proposed design (even if rejected
  without looking) i would like to ask fellow designers
  or anyone who feels like to make an openbsd site design
  proposal just to show that actually there is interest
  in making the old pages retire after so many years of
  faithful serving.
  
  i am willing to host all the participants' efforts
  as a central repository, or even only links
  to these pages.
  
  make some noise people, so we can say at least we tried.
  
  -f
 
 Like FreeBSD and NetBSD's redesign our web site contest.  Riiight..
 
 No.
 We've spent way too much time laughing at those already (both the
 process and the results).
 
 You can do what you want, but your work will be ignored.
 
 OpenBSD is NOT a committee-run OS project.
 I think a lot of people miss this.  If there is ONE THING that
 distinguishes OpenBSD from most other OSs out there, it is the fact that
 OpenBSD is the work of a small group of people following the lead of
 *one* person.  There is no question of direction, there is no five
 different products to accomplish same task, because we don't have the
 guts to make a decision and endorse just one.
 
 As has been pointed out repeatedly, OpenBSD developers develop the OS
 for their own use.  If your uses are compatible with the developer's
 goals, OpenBSD is for you.  If not, you quickly realize not to waste
 your time.  You don't see OpenBSD flopping around without a clear
 direction.  You don't end up wondering, will they change directions to
 meet my goals, or will they abandon my goals?.
 
 If or when Theo decides the web site should be restructured, it will be
 restructured.  If/when that happens, I would be very surprised if
 something other than one of two things were to happen:
   1) Theo rebuilds it and says, here's the new design.
   2) Theo hires/selects ONE PERSON to redesign it, and looks at the
 result and says, here is the new design (or rips someone's head off).
 
 Committee design is NOT what we are about.  You don't see contests for
 CD designs or release themes.
 
 Contrary to what some people think, we are not a web-design company.
 Our product is not a super-cool website.  Our product is an OS we need
 and use.  The website is just an information source about the product,
 maintained by software developers and documenters.  When I write
 material to help other people with similar interests use OpenBSD, I'm
 not worried about if it uses the features of the best of the current
 crop of browsers, I want to get the information across effectively.  I
 measure my success based on the information conveyed, not how pretty it
 is.  I have reason to believe I do a half-way decent job at this.  If
 someone wishes to prove they can do a better job, go for it, I'm sure
 Theo would love to have a more productive person doing what I do (and
 what he would like me to do that I'll never have time for).  I won't
 fight it.  I have not been bored in well over 20 years, I have NO
 problem occupying my time.  BTW: quality of work will be judged on
 content, not style.
 
 Nick.



Re: openbsd web site design proposals (from HOTO write bad docs)

2005-11-27 Thread STeve Andre'
On Monday 28 November 2005 01:33, J Moore wrote:
 Why don't you cut the guy some slack - or at least shut your yap on this
 (puh-l-e-e-e-ze)? I don't see *any* of what you're claiming to be
 OpenBSD policy stated on the website. In fact I see a statement
 (somewhat) to the contrary:

 Be as politics-free as possible; solutions should be decided on the
 basis of technical merit.

 And if it's the one-man show you claim, why don't you let the man
 speak for himself? Or if you've been hired as the official OpenBSD
 bitch, please - let us know.

 Jay

Jay, I would think that the lack of response from Theo should say
something.

I agree with Nick; functionality over form *any* day.  The current
web site is quite reasonable I think.  Could it be improved?
Probably.  But the site is still very good, and I for one would
rather see the project move along the way it has been.

I know the person who posted the original question has the best
of intentions, but I don't think he quite understands how things
work.  And no, there probably isn't a statement of exactly how
things work.  Watching the mailing lists is the way to learn.  I
think that *is* stated on the site.

--STeve Andre'