Microsoft FAT Patent Upheld...

2006-01-12 Thread J.C. Roberts
As always, the US patent system obviously doesn't affect everyone using
OpenBSD but since the US tends to export it's nonsense, it's a good idea
to stay aware of what nonsense is going on over here.

The microsoft FAT patent was upheld during a ex parte (one sided)
reexamination by the US Patent and Trademark Office (USPTO). A decent
article is here:

http://www.internetnews.com/bus-news/article.php/3576896

More articles can be found here:
http://news.google.com/?ned=usncl=http://www.internetnews.com/bus-news/article.php/3576896hl=en

jcr



Re: Banking with OpenBSD

2006-01-12 Thread Craig Skinner
On Wed, Jan 11, 2006 at 07:29:58PM -0700, Austin Hook wrote:
 Here's a different kind of technical question -- who out there can
 recommend a Euro zone bank with Internet banking service which does a good
 job with OpenBSD and Mozilla-Firefox?
 
 North American banks generally work fine with Firefox and OpenBSD, but our
 current account with Bank of Ireland really requires Microsoft.
 
 Hopefully, also, it would be a bank that communicates well in either
 English or French, and is not the worst in the extra little charges and
 fees problem.
 

I've used the Bank of Scotland for years, not too bad...

http://www.bankofscotland.co.uk/

Apart from the web front end running on something hideous:

http://www.bankofscotlandhalifax.co.uk/online/default.asp

Smile is meant to be OK:

http://www.smile.co.uk

UK banks don't (yet) charge fees for personal accounts.

Craig.



Re: Banking with OpenBSD

2006-01-12 Thread Edd Barrett
 Hopefully, also, it would be a bank that communicates well in either

  English or French, and is not the worst in the extra little charges and
  fees problem.



Nationwide works great for me.  Only need a javascript enabled web browser.

Java is not required..

Regards

Edd



Re: mergemaster

2006-01-12 Thread Jacob Meuser
On Sun, Jan 08, 2006 at 02:46:51PM +, Christian Weisgerber wrote:
 Han Boetes [EMAIL PROTECTED] wrote:
 
Since gdiff isn't needed anymore, do you think mergemaster could be 
integrated in the base system one of those days,
  
   I'm considering this.
  
  Are you considering mergeslave as well?
 
 No, if only for the fact that I wasn't aware of its existence until
 you mentioned it just now.
 
 The questions is, what *do* people use for updating /etc?

cd ~/tmp/newroot
tar zxpvf /home/OpenBSD/snapshots/sgi/etc38.tgz
cd  etc
diff -ur /etc . | less
! cp -Rp ... /etc
q

-- 
[EMAIL PROTECTED]


 I've been using mergemaster for several years now, it's an essential
 tool for me.  But then again, I'm perfectly happy to just dump it
 into ~/bin on my boxes if there's no general interest.
 
 -- 
 Christian naddy Weisgerber  [EMAIL PROTECTED]



Becoming ITOK's Worldwide Well-positioned Partners Distributors for TrendEasy!

2006-01-12 Thread ITOK
[IMAGE]

Becoming ITOK!/s worldwide well-positioned partners and distributors to
represent our innovative and profitable product--- TrendEasy in your
region!!!

Dear Reseller,

We are pleased to invite you to be our business partner and develop
alliance in delivering quality services and solutions to our potential
customers worldwide.

ITOK Technologies Limited is a leading supplier of various network and
eMarketing applications in Hong Kong. We are experienced in product
distribution and eBusiness. Since establishment in September 1994, our
business has grown rapidly and consistently throughout these years.

To provide your worldwide customers a real-time and continuous view of
the performance and availability of network applications and web sites,
we continually seek out partnerships with best-of-breed software vendors
and marketing service providers to distribute our product---TrendEasy

TrendEasy monitors, alerts and analyzes the end-user experience of the
end-to-end performance and availability of network applications. It is
optimized for unattended operation under Windows 2000/NT/Me/98/XP
platforms. t consists of the TrendEasy Standard Console and the distinct
application modules, each providing a unique view of application
performance.

   nbs p;nb sp;   Keep a record and check your
Web's performance!   

[IMAGE]

To explore more in TrendEasy, get the FREE TrendEasy Standard 3.7 trial
version and FREE TrendEasy Live without any obligation by visiting
http://www.trendeasy.com or contact ITOK at [EMAIL PROTECTED]

If you find our products useful as a eMarketing solution to your clients
and interested in being our business partner, please feel free to contact
me for further discussion.

[IMAGE]  nb sp;n bsp;
nbsp; ;nbs p;nb sp;n
bsp; nbsp; [IMAGE]

 ITOK Technologies Ltd

 Rm 1011-13, 10/F., Tower 1, Millennium City 1, 388 Kwun Tong Road, Kwun
Tong, Hong Kong
 Tel: (852) 2566-5810 
 Fax: (852) 2566-5740
 Email: [EMAIL PROTECTED]
 Website: http://www.itok.com
 Price List: http://www.syseasy.com



Re: mergemaster

2006-01-12 Thread Alexander Hall

Christian Weisgerber wrote:

The questions is, what *do* people use for updating /etc?


I use a (originally) small shell script that, if all parts are available 
works as follows:


1. Back up stuff
2. Extract the last etcXX.tgz to some temporary directory (last)
3. Extract the new etcXX.tgz to some temporary directory (new)
4. Remove files from new if they are unmodified since last
   (This removes most files, at least for snapshot upgrading)
5. Install files from new where the currently installed file
   matches last (overwrites non-modified files)
6. Use mergemaster for the rest of new (usually none :)

(Seems to) work like a charm for me. Thus, I depend on mergemaster for 
this, although I have not used (or tested) mergeslave.


My 2 Swedish vre. (0.02 kronor)

/Alexander



Re: Banking with OpenBSD

2006-01-12 Thread Craig Skinner
On Thu, Jan 12, 2006 at 11:19:54AM +0100, Otto Moerbeek wrote:
 
 Austin was asking for a euro zone bank.

Last time I looked, the UK was on a map of Europe.

Many UK banks are multi-currency.



Re: Banking with OpenBSD

2006-01-12 Thread Stuart Henderson
On 2006/01/12 13:18, Craig Skinner wrote:
 On Thu, Jan 12, 2006 at 11:19:54AM +0100, Otto Moerbeek wrote:
  
  Austin was asking for a euro zone bank.
 
 Last time I looked, the UK was on a map of Europe.

euro zone != europe,
http://en.wikipedia.org/wiki/Eurozone



Re: Banking with OpenBSD

2006-01-12 Thread Rogier Krieger
On 1/12/06, Craig Skinner [EMAIL PROTECTED] wrote:
 On Thu, Jan 12, 2006 at 11:19:54AM +0100, Otto Moerbeek wrote:
 
  Austin was asking for a euro zone bank.

 Last time I looked, the UK was on a map of Europe.

 Many UK banks are multi-currency.

According to the EC regulation 2560/2001, cross-border transactions
within the community  take place at the same charges applicable for
transactions within a member state. Being part of the community, these
rules also apply to the UK. As of Jan. 1st, 2006, the applicable limit
to those transactions lies at 50.000 euro.

In other words: you'll want to stay away from expensive banking
countries such as Italy. A UK bank shouldn't pose any problems. In
fact, it may even be beneficial to stay in a multi-currency location.

Cheers,

Rogier

--
If you don't know where you're going, any road will get you there.



Re: RAID card recommendations

2006-01-12 Thread Marco Peereboom
It's in the email that was linked.  Read it.

On Thu, Jan 12, 2006 at 11:35:25AM +1100, Ioan Nemes wrote:
  C. Bensend [EMAIL PROTECTED] 12/01/2006 10:00:13 am 
  Wrong.
 
  When you set the machine up (or using bioctl) you label a drive as a
  hot spare.  When a failure happens, it automatically takes that
 drive
  over and does a rebuild.
 
  Shut down?  You don't get it.  We wrote all this code because we
 were
  tired of shutting down and doing the repairs in the BIOS.
 
 No, I understand that just fine.  I should have been more specific -
 if I have a failure, it does its thing, great.  But, I'd want to
 replace the failed drive so I'd have a hot spare again.
 
 That's the part I was asking about - you'd have to shutdown to
 replace that failed drive when it's convenient.  Right?  I've
 never touched a SATA anything in my life.
 
 
 If one of the drive fails in a RAID configuration, the system should
 automatically start using the hot spare, until you replace the failed
 drive.  Once the failed drive is replaced, the hot spare should be
 available again.  If your system can do hot-swap you are in business,
 if not a system stop and restart is needed.
 
 Ioan



AMD64 Hardware.

2006-01-12 Thread RV Tec
These days I'm using a MSI Master-F board with 2 Opteron 248. It works 
like a charm... Master-F has been replaced by Master-3, and this new board 
doesn't work when I boot MP (it locks up, or it just fuck things up, like 
the onboard Broadcom 5704C).


I'm looking for a reliable board, and I've read some good things about 
Tyan. The S2880, mentioned by Peereboom has been replaced by S2882. Does 
anyone know if this is still supported?


What about the Supermicro boards? Are they any good?

I'm planning on using a LSI MegaRAID 320-2E, so I guess I need a PCI-e 
slot. Any recommendations on a board that has this slot?


Also, on a related issue: any thoughts on SUN FIRE X4200?

Thanks!!

Best regards,
RV Tec



Re: Banking with OpenBSD (OT)

2006-01-12 Thread Dr Dominique Jacquel

Sorry for the off-topic posting but:

Although true in theory ... in practice banking with the euro zone from 
the UK is expensive. You either have to pay a premium to get a 
multi-currency account or be raped for every transaction requiring 
exchanging pounds -- euros.


An example comes to mind. I recently needed to pay 300 to a company in 
Holland. My UK bank proposed to charge me altogether #18 (that reaching 
10% of the 300) for the privilege. Paying the same amount from my 
personal French account cost me 3 in charges!! This is called rip-off 
Britain, I believe. Unless you *need* an account in #, I would 
recommend finding a bank within the euro zone.


If anybody finds a firefox friendly UK bank which allow cheap 
transactions with the euro zone, I'd be glad to hear about it :-)


Dom.

Rogier Krieger wrote:


According to the EC regulation 2560/2001, cross-border transactions
within the community  take place at the same charges applicable for
transactions within a member state. Being part of the community, these
rules also apply to the UK. As of Jan. 1st, 2006, the applicable limit
to those transactions lies at 50.000 euro.

In other words: you'll want to stay away from expensive banking
countries such as Italy. A UK bank shouldn't pose any problems. In
fact, it may even be beneficial to stay in a multi-currency location.

Cheers,

Rogier

--
If you don't know where you're going, any road will get you there.




Re: AMD64 Hardware.

2006-01-12 Thread Rogier Krieger
On 1/12/06, RV Tec [EMAIL PROTECTED] wrote:
 Tyan. The S2880, mentioned by Peereboom has been replaced by S2882. Does
 anyone know if this is still supported?

The S2882 and S2882-D work like a charm for me. Both in UP and MP
modes. Dmesg for the S2882-D is below (also sent to dmesg@). Where it
comes to the S2880, I can't say for certain. Yet, if it contains the
AMD chipset, I suspect you'll be fine with both 3.8 and -current.

Cheers,

Rogier


OpenBSD 3.8 (GENERIC.MP) #0: Thu Jan  5 12:29:23 CET 2006
[EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 2147086336 (2096764K)
avail mem = 1836417024 (1793376K)
using 22937 buffers containing 214917120 bytes (209880K) of memory
mainbus0 (root)
mainbus0: Intel MP Specification (Version 1.1) (TYAN S2882   )
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: AMD Opteron(tm) Processor 246, 1994.31 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,NXE,MMXX,LONG,3DNOW2,3DNOW
cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 1MB
64b/line 16-way L2 cache
cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu0: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu0: apic clock running at 199403650Hz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: AMD Opteron(tm) Processor 246, 1994.04 MHz
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,NXE,MMXX,LONG,3DNOW2,3DNOW
cpu1: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 1MB
64b/line 16-way L2 cache
cpu1: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu1: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative
mpbios: bus 0 is type PCI
mpbios: bus 1 is type PCI
mpbios: bus 2 is type PCI
mpbios: bus 3 is type PCI
mpbios: bus 4 is type ISA
ioapic0 at mainbus0 apid 2: pa 0x83743e24, version 11, 24 pins
ioapic1 at mainbus0 apid 3: pa 0x83743d24, version 11, 4 pins
ioapic2 at mainbus0 apid 4: pa 0x83743c24, version 11, 4 pins
pci0 at mainbus0 bus 0: configuration mode 1
ppb0 at pci0 dev 6 function 0 AMD 8111 PCI-PCI rev 0x07
pci1 at ppb0 bus 3
ohci0 at pci1 dev 0 function 0 AMD 8111 USB rev 0x0b: apic 2 int 19
(irq 10), version 1.0, legacy support
usb0 at ohci0: USB revision 1.0
uhub0 at usb0
uhub0: AMD OHCI root hub, rev 1.00/1.00, addr 1
uhub0: 3 ports with 3 removable, self powered
ohci1 at pci1 dev 0 function 1 AMD 8111 USB rev 0x0b: apic 2 int 19
(irq 10), version 1.0, legacy support
usb1 at ohci1: USB revision 1.0
uhub1 at usb1
uhub1: AMD OHCI root hub, rev 1.00/1.00, addr 1
uhub1: 3 ports with 3 removable, self powered
hifn0 at pci1 dev 4 function 0 Hifn 7955/7954 rev 0x00: LZS 3DES
ARC4 MD5 SHA1 RNG AES PK, 32KB dram, apic 2 int 16 (irq 9)
pciide0 at pci1 dev 5 function 0 CMD Technology SiI3114 SATA rev 0x02: DMA
pciide0: using apic 2 int 19 (irq 10) for native-PCI interrupt
pciide0: port 0: device present, speed: 1.5Gb/s
wd0 at pciide0 channel 0 drive 0: HDS722580VLSA80
wd0: 16-sector PIO, LBA48, 78533MB, 160836480 sectors
wd0(pciide0:0:0): using BIOS timings, Ultra-DMA mode 5
pciide0: port 1: device present, speed: 1.5Gb/s
vga1 at pci1 dev 6 function 0 ATI Rage XL rev 0x27
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
fxp0 at pci1 dev 8 function 0 Intel 82557 rev 0x10, i82551: apic 2
int 18 (irq 11), address 00:e0:81:2f:cd:bc
inphy0 at fxp0 phy 1: i82555 10/100 PHY, rev. 4
AMD AMD8111 LPC rev 0x05 at pci0 dev 7 function 0 not configured
pciide1 at pci0 dev 7 function 1 AMD 8111 IDE rev 0x03: DMA, channel
0 configured to compatibility, channel 1 configured to compatibility
atapiscsi0 at pciide1 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: _NEC, DVD_RW ND-2500A, 1.06 SCSI0
5/cdrom removable
cd0(pciide1:1:0): using PIO mode 4, Ultra-DMA mode 2
AMD 8111 SMBus rev 0x02 at pci0 dev 7 function 2 not configured
AMD 8111 ACPI rev 0x05 at pci0 dev 7 function 3 not configured
ppb1 at pci0 dev 10 function 0 AMD 8131 PCIX rev 0x12
pci2 at ppb1 bus 2
ami0 at pci2 dev 3 function 0 Symbios Logic MegaRAID rev 0x01: apic
3 int 3 (irq 10) LSI 523/64b/lhc
ami0: FW 713N, BIOS vG119, 64MB RAM
ami0: 1 channels, 0 FC loops, 1 logical drives
scsibus1 at ami0: 40 targets
sd0 at scsibus1 targ 0 lun 0: AMI, Host drive #00,  SCSI2 0/direct fixed
sd0: 455808MB, 58107 cyl, 255 head, 63 sec, 512 bytes/sec, 933494784 sec total
scsibus2 at ami0: 16 targets
bge0 at pci2 dev 9 function 0 Broadcom BCM5704C rev 0x03, BCM5704 A3
(0x2003): apic 3 int 0 (irq 9) address 00:e0:81:2f:cd:34
brgphy0 at bge0 phy 1: BCM5704 10/100/1000baseT PHY, rev. 0
bge1 at pci2 dev 9 function 1 Broadcom BCM5704C rev 0x03, BCM5704 A3
(0x2003): apic 3 int 1 (irq 5) address 00:e0:81:2f:cd:35
brgphy1 at bge1 phy 1: BCM5704 10/100/1000baseT PHY, rev. 0
aapic0 at pci0 dev 10 function 1 AMD 8131 PCIX 

isakmpd debug syntax query

2006-01-12 Thread nuffnough
Hi.

I need to log the output of isakmpd -DA=90 to a file, and I am at a loss as
to exactly what syntax to use.  I am using OpenBSD 3.8 default shell (ksh
now...) and trying stuff like

isakmpd -T -DA=90 21  logfile


which just gives me the reports for log levels but doens't actually show me
any actual debug log stuff:

173136.403277 Default log_debug_cmd: log level changed from 0 to 90 for
class [0-10] [priv]


I would appreciate anyone kind enough to correct my syntax.

TIA

nuff nough.



Re: Apple MacBook Pro support

2006-01-12 Thread Todd C. Miller
In message [EMAIL PROTECTED]
so spake Dries Schellekens (gwyllion):

 The final Intel Macs use EFI (Extensible Firmware Interface) instead of 
 the old BIOS. So a new boot loader is required. Maybe code can be 
 borrowed from FreeBSD ia64.

EFI has a legacy mode that is supposedly BIOS-compatible.  It's
really pointless to speculate until someone actually tries booting
OpenBSD on one of them.

 - todd



Re: isakmpd debug syntax query

2006-01-12 Thread Alexander Hall

nuffnough wrote:

Hi.

I need to log the output of isakmpd -DA=90 to a file, and I am at a loss as
to exactly what syntax to use.  I am using OpenBSD 3.8 default shell (ksh
now...) and trying stuff like

isakmpd -T -DA=90 21  logfile


This would redirect stderr to stdout (screen) and stdout to logfile.

You probably wanted
  isakmpd -T -DA=90  logfile 21
which redirects both stdout and stderr to logfile. The order is important.

/alexander



Re: Banking with OpenBSD (OT)

2006-01-12 Thread Fred Crowson

Dr Dominique Jacquel wrote:
For those who think I made no sens earlier I must explain that somewhere 
along the wire between me and the list ... all my euro signs  vanished 
and all my pound sterling signs turn into hash signs! I got to be more 
careful next time.


so the story was:
UK bank wanted to charge me 18 pounds sterling to make a 300 euros payment
French bank only charged 3 euros for the same transaction (that's 10 
times less)


Dom.


Hi Dom,

I knew what you meant - and I agree if you need euros don't bank in the UK.

http://www.smile.co.uk/ work well with firefox  OpenBSD but they don't 
do the cheap IBAN inter-european banking that they should :~{


Fred
--
http://www.bristolshotokan.org.uk/



EUSecWest papers and CanSecWest CFP

2006-01-12 Thread Dragos Ruiu
url: http://eusecwest.com
url: http://cansecwest.com
(CanSecWest Call For Papers attached below)

EUSecWest/core06 Conference 
---

Announcing the final selection of papers for the 
EUSecWest conference in London, U.K. on Feb. 20/21
at the Victoria Park Plaza Hotel. The following
topics will be covered:

   Javier Burroni  Carlos Sarraute - Core Security Technologies
   Analyzing OS fingerprints using Neural Networks and Statistical Machinery

   van Hauser - thc
   Attacking the IPv6 protocol suite

   Yuji Ukai - eeye 
   Exploiting Real-Time OS Based Embedded Systems Using the JTAG Emulator

   Nguyen Anh Quynh - Keio University
   XEBEK: A Next Generation Honeypot Monitoring System

   Fred Raynal - EADS
   Malicious Crypto

   Cesar Cerrudo - Argeniss
   Windows Local Shellcode Injection

   Andrew Cushman - Microsoft
   Microsoft Security Fundamentals

   Shreeraj Shahi - Net Square
   Advanced Web Hacking - Attacks  Defense

   Justin Clarke - Ernst  Young LLP
   Practical Automated Web Application Attack Techniques

   Andy Davis - IRM PLC
   ColdFusion Security

   Tim Hurman - Pentest Ltd.
   ARMed combat: the fight for personal security

   Raffael Marty - ArcSight
   A Visual Approach to Security Event Management

   Michael Boman - KPMG Singapore
   Network Security Monitoring: Theory and Practice

   Jim DeLeskie  Danny McPherson - Teleglobe, Arbor Networks
   Protecting the Infrastructure

   Andrea Barisani - Inverse Path
   Lessons in Open Source Security: The Tale of a 0-Day Incident

We would also like to announce the final list of Security
Masters Dojo courses that will be offered on February 16th
and 17th at the Victoria Park Plaza Hotel. Seats are
available for all courses, but course registration is
limited to only ten students each. We are considering
adding additional course sessions on Feb 23/24 if
demand warrants it. The hands-on courses offered
will be:

Gerardo Richarte - Core Security Technologies
Assembly for Exploit Writing

Marty Roesch - Sourcefire
Advanced IDS Deployment and Optimization

Maximillian Dornseif   Thorsten Holtz - Aachen University
Advanced Honeypot Tactics

Philippe Biondi - EADS
Mastering the Network with SCAPY

Renaud Deraison  Nicolas Pouvesle - Tenable Network Security
Vulnerability Scanning: Advanced Nessus Usage

Laurent Oudot  Nico Fischbach - rstack, COLT telecom
Applied network security and advanced anomaly detection using
   state-of-the art honeypots and netflow/NIDS

Cidric Blancher - EADS
Practical 802.11 WiFi (In)Security 

Adam Laurie  Martin Herfurt   Marcel Holtmann - trifinite
Bluetooth Technology Security


Vendors Presentations for the Elevator Focus Groups will
be announced shortly.

Registration:
---

Seats are available but limited for EUSecWest, and registration 
is open at: https://eusecwest.com/register.html

Security Masters Dojo/London registration is now open
at: https://eusecwest.com/courses.html

Contact [EMAIL PROTECTED] for registration support or
corporate sponsorship inquiries.

*

CanSecWest/core06 CALL FOR PAPERS 


VANCOUVER, Canada -- The seventh annual CanSecWest
applied technical security conference - where the
eminent figures in the international security
industry will get together share best practices
and technology - will be held in downtown Vancouver
at the the Mariott Renaissance Harbourside on
April 3-7, 2006.  The most significant new discoveries
about computer network hack attacks and defenses,
commercial security solutions, and pragmatic real
world security experience will be presented in 
a series of informative tutorials.

The CanSecWest meeting provides international researchers
a relaxed, comfortable environment to learn from informative
tutorials on key developments in security technology, and
collaborate and socialize with their peers in one of the 
world's most scenic cities - a short drive away
from one of North America's top skiing areas.

In addition to the usual one hour tutorials, panel sessions
and highly entertaining 5 minute lightning talks, this 
conference will also feature a new session called 
Elevator Focus Groups. Featuring several short 
sessions, these commercial presentations will showcase 
new, significantly used, or dramatically innovative 
new products in the information security realm.
Each selected vendor will have a short 10 minute 
presentation (elevator pitch), after which 10 minutes 
of audience QA and interactive discussion amongst 
the expert security practitioners attending will follow. 
In this session both the audience and the vendors can
get valuable feedback from world leading experts and
the attendees can get user evaluations and learn 
from sharing experiences and real world security 
applications about practical uses of the products - the 
focus group. Hence the name: Elevator Focus Groups.

The CanSecWest conference will also 

pf block overload

2006-01-12 Thread Chris Smith
Looking to do something like an overload to add systems to a table but 
with a block filter and not a pass filter.

Basically, at one account, file-sharing software is prohibited. But 
since most systems are user owned and not corporate owned, plus the 
fact that many of them are portable notebooks, there is little control, 
outside of access privileges, to stop such nonsense.

The popular products today seem to use ports 6346:6349. Maybe there's a 
possibility they do some port hopping beyond that. So the plan would be 
to block these ports (this is already being done), but then to add 
systems that attempt to use these ports to a table in order to 
completely block their net access. The users will then complain of 
connectivity issues and they can then be reminded that file sharing 
software is not allowed.

Is there a way, like overload, to have systems attempting to access 
blocked ports added to a table?

An awkward construct like a pass filter followed by a block filter 
probably wouldn't work either because max-src-conn must be greater than 
0 and the block filter would prevent any connections.

Thanks.

Chris



errata 001_perl.patch

2006-01-12 Thread Joerg Streckfuss
hi list.

last night i patched my openbsd-3.8
soekris-box. Everything went fine.
I've got another box for firewalling with
512MB-flash standard setup, but without any
compiler-suite installed. Of course i want to patch this
box as soon as possible. shoud i copy the complete
perl-files to this box? or is there a smarter way
to have an upgraded system?

Regards,

Joerg.


-- 
Dipl.-Ing. Joerg StreckfuC
fon:+49 40 - 41 11 66 86
cell:   +49 179 - 49 88 51 0
mail:   [EMAIL PROTECTED]



Re: errata 001_perl.patch

2006-01-12 Thread eric
On Thu, 2006-01-12 at 21:15:37 +0100, Joerg Streckfuss proclaimed...

 last night i patched my openbsd-3.8
 soekris-box. Everything went fine.
 I've got another box for firewalling with
 512MB-flash standard setup, but without any
 compiler-suite installed. Of course i want to patch this
 box as soon as possible. shoud i copy the complete
 perl-files to this box? or is there a smarter way
 to have an upgraded system?

Why don't you just rsync from the trusted build machine?

Maybe /usr/bin and /usr/lib and anything else that changed.



Samba VFS extd_audit failing on OpenBSD 3.8 with package samba-3.0.13p0

2006-01-12 Thread Elliot Foster

Hello,

I'm using OpenBSD 3.8 with the samba-3.0.13p0 package, trying to use VFS 
extended audit in order to track changes to files that are accessed via 
samba.


When I enable vfs extd_audit or audit on a share, any attempt to access 
that share (from any client) fails with the error:


[2006/01/12 12:18:13, 3] 
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/smbd/vfs.c:vfs_init_default(206)

 Initialising default vfs hooks
[2006/01/12 12:18:13, 3] 
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/smbd/vfs.c:vfs_init_custom(232)

 Initialising custom vfs hooks from [extd_audit]
/usr/local/libexec/smbd:/usr/local/lib/samba/vfs/extd_audit.so: 
undefined symbol 'DEBUGLEVEL_CLASS_ISSET'
/usr/local/libexec/smbd: /usr/local/lib/samba/vfs/extd_audit.so: can't 
resolve reference 'DEBUGLEVEL_CLASS_ISSET'
/usr/local/libexec/smbd:/usr/local/lib/samba/vfs/extd_audit.so: 
undefined symbol 'DEBUGLEVEL_CLASS'
/usr/local/libexec/smbd: /usr/local/lib/samba/vfs/extd_audit.so: can't 
resolve reference 'DEBUGLEVEL_CLASS'
/usr/local/libexec/smbd:/usr/local/lib/samba/vfs/extd_audit.so: 
undefined symbol 'smb_register_vfs'

lazy binding failed!
[2006/01/12 12:18:13, 0] 
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/lib/fault.c:fault_report(36)

 ===
[2006/01/12 12:18:13, 0] 
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/lib/fault.c:fault_report(37)

 INTERNAL ERROR: Signal 11 in pid 8919 (3.0.13)
 Please read the appendix Bugs of the Samba HOWTO collection
[2006/01/12 12:18:13, 0] 
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/lib/fault.c:fault_report(39)

 ===
[2006/01/12 12:18:13, 0] 
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/lib/util.c:smb_panic2(1495)

 PANIC: internal error
[2006/01/12 12:18:13, 3] 
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/smbd/vfs.c:vfs_init_default(206)

 Initialising default vfs hooks
[2006/01/12 12:18:13, 3] 
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/smbd/vfs.c:vfs_init_default(206)

 Initialising default vfs hooks
[2006/01/12 12:18:13, 3] 
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/smbd/vfs.c:vfs_init_custom(232)

 Initialising custom vfs hooks from [extd_audit]
/usr/local/libexec/smbd:/usr/local/lib/samba/vfs/extd_audit.so: 
undefined symbol 'DEBUGLEVEL_CLASS_ISSET'
/usr/local/libexec/smbd: /usr/local/lib/samba/vfs/extd_audit.so: can't 
resolve reference 'DEBUGLEVEL_CLASS_ISSET'
/usr/local/libexec/smbd:/usr/local/lib/samba/vfs/extd_audit.so: 
undefined symbol 'DEBUGLEVEL_CLASS'
/usr/local/libexec/smbd: /usr/local/lib/samba/vfs/extd_audit.so: can't 
resolve reference 'DEBUGLEVEL_CLASS'
/usr/local/libexec/smbd:/usr/local/lib/samba/vfs/extd_audit.so: 
undefined symbol 'smb_register_vfs'

lazy binding failed!
[2006/01/12 12:18:13, 0] 
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/lib/fault.c:fault_report(36)

 ===
[2006/01/12 12:18:13, 0] 
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/lib/fault.c:fault_report(37)

 INTERNAL ERROR: Signal 11 in pid 6268 (3.0.13)
 Please read the appendix Bugs of the Samba HOWTO collection
[2006/01/12 12:18:13, 0] 
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/lib/fault.c:fault_report(39)

 ===
[2006/01/12 12:18:13, 0] 
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/lib/util.c:smb_panic2(1495)

 PANIC: internal error

As a sanity check, I loaded the same config onto a debian box running 
samba 3.0.14 and it behaves as expected.  Am I missing something, or 
does no one use VFS audit with samba on OpenBSD?


package:   samba-3.0.13p0

/etc/samba/smb.conf:

[global]
  workgroup = WORKGROUP
  server string = Testing VFS Audit
  security = user
  hosts allow = 192.168.1. 127. 172.
  socket options = TCP_NODELAY
  dns proxy = no
  log level = vfs:10
  log file = /var/log/smbd
  max log size = 5000

[Home]
 comment = Testing VFS Audit
 #path = /space/users/%U
 path = /space/users/testing
 public = yes
 browseable = yes
 writable = yes
 create mask = 0775
 directory mask = 0775
 vfs objects = extd_audit
 #vfs objects = audit

dmesg, if that's applicable at all:

OpenBSD 3.8 (GENERIC) #138: Sat Sep 10 15:41:37 MDT 2005
   [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: VIA Samuel 2 (CentaurHauls 686-class) 601 MHz
cpu0: FPU,DE,TSC,MSR,MTRR,PGE,MMX
real mem  = 251179008 (245292K)
avail mem = 222314496 (217104K)
using 3091 buffers containing 12660736 bytes (12364K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(d9) BIOS, date 03/11/04, BIOS32 rev. 0 @ 0xface0
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
apm0: flags 70102 dobusy 1 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xf/0xdba4
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdb10/144 (7 entries)
pcibios0: PCI Exclusive IRQs: 5 10 11 12
pcibios0: PCI Interrupt Router at 000:17:0 (VIA VT82C596A 

Samba VFS extd_audit failing on OpenBSD 3.8 with package samba-3.0.13p0

2006-01-12 Thread Elliot Foster

Hello,

I'm using OpenBSD 3.8 with the samba-3.0.13p0 package, trying to use VFS
extended audit in order to track changes to files that are accessed via
samba.

When I enable vfs extd_audit or audit on a share, any attempt to access
that share (from any client) fails with the error:

[2006/01/12 12:18:13, 3]
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/smbd/vfs.c:vfs_init_default(206)
 Initialising default vfs hooks
[2006/01/12 12:18:13, 3]
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/smbd/vfs.c:vfs_init_custom(232)
 Initialising custom vfs hooks from [extd_audit]
/usr/local/libexec/smbd:/usr/local/lib/samba/vfs/extd_audit.so:
undefined symbol 'DEBUGLEVEL_CLASS_ISSET'
/usr/local/libexec/smbd: /usr/local/lib/samba/vfs/extd_audit.so: can't
resolve reference 'DEBUGLEVEL_CLASS_ISSET'
/usr/local/libexec/smbd:/usr/local/lib/samba/vfs/extd_audit.so:
undefined symbol 'DEBUGLEVEL_CLASS'
/usr/local/libexec/smbd: /usr/local/lib/samba/vfs/extd_audit.so: can't
resolve reference 'DEBUGLEVEL_CLASS'
/usr/local/libexec/smbd:/usr/local/lib/samba/vfs/extd_audit.so:
undefined symbol 'smb_register_vfs'
lazy binding failed!
[2006/01/12 12:18:13, 0]
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/lib/fault.c:fault_report(36)
 ===
[2006/01/12 12:18:13, 0]
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/lib/fault.c:fault_report(37)
 INTERNAL ERROR: Signal 11 in pid 8919 (3.0.13)
 Please read the appendix Bugs of the Samba HOWTO collection
[2006/01/12 12:18:13, 0]
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/lib/fault.c:fault_report(39)
 ===
[2006/01/12 12:18:13, 0]
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/lib/util.c:smb_panic2(1495)
 PANIC: internal error
[2006/01/12 12:18:13, 3]
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/smbd/vfs.c:vfs_init_default(206)
 Initialising default vfs hooks
[2006/01/12 12:18:13, 3]
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/smbd/vfs.c:vfs_init_default(206)
 Initialising default vfs hooks
[2006/01/12 12:18:13, 3]
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/smbd/vfs.c:vfs_init_custom(232)
 Initialising custom vfs hooks from [extd_audit]
/usr/local/libexec/smbd:/usr/local/lib/samba/vfs/extd_audit.so:
undefined symbol 'DEBUGLEVEL_CLASS_ISSET'
/usr/local/libexec/smbd: /usr/local/lib/samba/vfs/extd_audit.so: can't
resolve reference 'DEBUGLEVEL_CLASS_ISSET'
/usr/local/libexec/smbd:/usr/local/lib/samba/vfs/extd_audit.so:
undefined symbol 'DEBUGLEVEL_CLASS'
/usr/local/libexec/smbd: /usr/local/lib/samba/vfs/extd_audit.so: can't
resolve reference 'DEBUGLEVEL_CLASS'
/usr/local/libexec/smbd:/usr/local/lib/samba/vfs/extd_audit.so:
undefined symbol 'smb_register_vfs'
lazy binding failed!
[2006/01/12 12:18:13, 0]
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/lib/fault.c:fault_report(36)
 ===
[2006/01/12 12:18:13, 0]
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/lib/fault.c:fault_report(37)
 INTERNAL ERROR: Signal 11 in pid 6268 (3.0.13)
 Please read the appendix Bugs of the Samba HOWTO collection
[2006/01/12 12:18:13, 0]
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/lib/fault.c:fault_report(39)
 ===
[2006/01/12 12:18:13, 0]
/usr/obj/i386/samba-3.0.13p0/samba-3.0.13/source/lib/util.c:smb_panic2(1495)
 PANIC: internal error

As a sanity check, I loaded the same config onto a debian box running
samba 3.0.14 and it behaves as expected.  Am I missing something, or
does no one use VFS audit with samba on OpenBSD?

package:   samba-3.0.13p0

/etc/samba/smb.conf:

[global]
  workgroup = WORKGROUP
  server string = Testing VFS Audit
  security = user
  hosts allow = 192.168.1. 127. 172.
  socket options = TCP_NODELAY
  dns proxy = no
  log level = vfs:10
  log file = /var/log/smbd
  max log size = 5000

[Home]
 comment = Testing VFS Audit
 #path = /space/users/%U
 path = /space/users/testing
 public = yes
 browseable = yes
 writable = yes
 create mask = 0775
 directory mask = 0775
 vfs objects = extd_audit
 #vfs objects = audit

dmesg, if that's applicable at all:

OpenBSD 3.8 (GENERIC) #138: Sat Sep 10 15:41:37 MDT 2005
   [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: VIA Samuel 2 (CentaurHauls 686-class) 601 MHz
cpu0: FPU,DE,TSC,MSR,MTRR,PGE,MMX
real mem  = 251179008 (245292K)
avail mem = 222314496 (217104K)
using 3091 buffers containing 12660736 bytes (12364K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(d9) BIOS, date 03/11/04, BIOS32 rev. 0 @ 0xface0
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
apm0: flags 70102 dobusy 1 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xf/0xdba4
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdb10/144 (7 entries)
pcibios0: PCI Exclusive IRQs: 5 10 11 12
pcibios0: PCI Interrupt Router at 000:17:0 (VIA VT82C596A ISA rev 0x00)
pcibios0: PCI bus #1 is the last 

Re: errata 001_perl.patch

2006-01-12 Thread Han Boetes
I doubt you need perl at all on a box like that. You can also
consider to simply remove all the perl on that system.


# Han



Re: biography of a systems life (help::coding.question)

2006-01-12 Thread Joachim Schipper
On Thu, Jan 12, 2006 at 01:09:52PM -0500, Michael Steinfeld wrote:
 A brief description of what I am wanting to do...
 
 I want to write a script that records PID's start and stop time
 I want the script to record an instance of an applications life while
 incrementing the applications record db... I want to be able to keep
 track of  how often, how long running, and how frequent a command is
 executed and I am thinking I need to do that by monitoring pid's.
 
 can someone give me a list of manpages that would be helpful for this.
 
 Also, is there already a utility for this?

$ whatis acct
acct (2) - enable or disable process accounting
acct (5) - execution accounting file

It will do most of what you want. See acct(5) first, and follow the
references.

Joachim



Re: errata 001_perl.patch

2006-01-12 Thread Joachim Schipper
On Thu, Jan 12, 2006 at 09:15:37PM +0100, Joerg Streckfuss wrote:
 hi list.
 
 last night i patched my openbsd-3.8
 soekris-box. Everything went fine.
 I've got another box for firewalling with
 512MB-flash standard setup, but without any
 compiler-suite installed. Of course i want to patch this
 box as soon as possible. shoud i copy the complete
 perl-files to this box? or is there a smarter way
 to have an upgraded system?

See release(8)? It will yield you a base38.tgz which you can untar
anywhere. Don't forget the -p switch when using it to upgrade the base
system, though.

Joachim



Re: errata 001_perl.patch

2006-01-12 Thread Clint M. Sand
On Thu, Jan 12, 2006 at 09:38:07PM +0100, Han Boetes wrote:
 I doubt you need perl at all on a box like that. You can also
 consider to simply remove all the perl on that system.
 
 
 # Han

The pkg_* tools are perl. Even though its a firewall he may need to
install/remove/maintain pkg's of some sort.



Re: isakmpd debug syntax query

2006-01-12 Thread nuffnough
On 1/13/06, Alexander Hall [EMAIL PROTECTED] wrote:

 nuffnough wrote:
  Hi.
 
  I need to log the output of isakmpd -DA=90 to a file, and I am at a loss
 as
  to exactly what syntax to use.  I am using OpenBSD 3.8 default shell
 (ksh
  now...) and trying stuff like
 
  isakmpd -T -DA=90 21  logfile

 This would redirect stderr to stdout (screen) and stdout to logfile.

 You probably wanted
isakmpd -T -DA=90  logfile 21
 which redirects both stdout and stderr to logfile. The order is
 important.



Thanks for that info.  Unfortunately,  I am still getting the same result.
Here is the console of my attempts:

fw0:root:/etc/isakmpdisakmpd -T -DA=90  logfile 21
fw0:root:/etc/isakmpdls -al
logfile

-rw-r--r--  1 root  wheel  958 Jan 13 10:25 logfile
fw0:root:/etc/isakmpdcat
logfile

102531.115369 Default log_debug_cmd: log level changed from 0 to 90 for
class 0 [priv]
102531.115520 Default log_debug_cmd: log level changed from 0 to 90 for
class 1 [priv]
102531.115534 Default log_debug_cmd: log level changed from 0 to 90 for
class 2 [priv]
102531.115545 Default log_debug_cmd: log level changed from 0 to 90 for
class 3 [priv]
102531.11 Default log_debug_cmd: log level changed from 0 to 90 for
class 4 [priv]
102531.115564 Default log_debug_cmd: log level changed from 0 to 90 for
class 5 [priv]
102531.115574 Default log_debug_cmd: log level changed from 0 to 90 for
class 6 [priv]
102531.115583 Default log_debug_cmd: log level changed from 0 to 90 for
class 7 [priv]
102531.115593 Default log_debug_cmd: log level changed from 0 to 90 for
class 8 [priv]
102531.115602 Default log_debug_cmd: log level changed from 0 to 90 for
class 9 [priv]
102531.115612 Default log_debug_cmd: log level changed from 0 to 90 for
class 10 [priv]
fw0:root:/etc/isakmpdps auxw | grep isakmpd
_isakmpd 30752  0.0  1.2  2796  2988 ??  S 10:25AM0:01.17 isakmpd -T
-DA=90
root 29469  0.0  0.2   868   424 ??  Is10:25AM0:00.01 isakmpd:
monitor [priv] (isakmpd)
fw0:root:/etc/isakmpdls -al
logfile

-rw-r--r--  1 root  wheel  958 Jan 13 10:25 logfile
fw0:root:/etc/isakmpd

I know that I've done this in the past with no problems, and this is
confusing me.  (easy to do, I am a bit of a nuff nuff).

Thanks for your help,

nuffnough



Re: errata 001_perl.patch

2006-01-12 Thread Randal L. Schwartz
 Clint == Clint M Sand [EMAIL PROTECTED] writes:

Clint On Thu, Jan 12, 2006 at 09:38:07PM +0100, Han Boetes wrote:
 I doubt you need perl at all on a box like that. You can also
 consider to simply remove all the perl on that system.
 
 
 # Han

Clint The pkg_* tools are perl. Even though its a firewall he may need to
Clint install/remove/maintain pkg's of some sort.

If it's the bug I'm thinking of (the sprintf issue), only the /usr/bin/perl
binary is affected.  You can probably get away with copying only that.

-- 
Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095
merlyn@stonehenge.com URL:http://www.stonehenge.com/merlyn/
Perl/Unix/security consulting, Technical writing, Comedy, etc. etc.
See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training!



Re: errata 001_perl.patch

2006-01-12 Thread Han Boetes
Clint M. Sand wrote:
 On Thu, Jan 12, 2006 at 09:38:07PM +0100, Han Boetes wrote:
  I doubt you need perl at all on a box like that. You can also
  consider to simply remove all the perl on that system.

 The pkg_* tools are perl. Even though its a firewall he may need
 to install/remove/maintain pkg's of some sort.

Ever seen the contents of a package? You don't need perl for
maintaining that. Just a simple script can do the removing and
adding of packages.



# Han



Re: errata 001_perl.patch

2006-01-12 Thread Diana Eichert
On Thu, 12 Jan 2006, Randal L. Schwartz wrote:
SNIP
 Clint The pkg_* tools are perl. Even though its a firewall he may need to
 Clint install/remove/maintain pkg's of some sort.

 If it's the bug I'm thinking of (the sprintf issue), only the /usr/bin/perl
 binary is affected.  You can probably get away with copying only that.

I figured you might have some input on this, since you've been active in
the Perl community for quite some time.

Did you ever get your PF/OpenVPN issue resolved?

diana



Re: AMD64 Hardware.

2006-01-12 Thread Chris Cappuccio
RV Tec [EMAIL PROTECTED] wrote:
 
 What about the Supermicro boards? Are they any good?
 

the supermicro/serverworks board that i use works very well

-- 
Don Rumsfeld has been chewing on my ankles. -- Dick Cheney



Re: errata 001_perl.patch

2006-01-12 Thread Ted Unangst
if you're installing a package that's going to exploit a bug in perl,
why are you installing it?

On 1/12/06, Clint M. Sand [EMAIL PROTECTED] wrote:
 On Thu, Jan 12, 2006 at 09:38:07PM +0100, Han Boetes wrote:
  I doubt you need perl at all on a box like that. You can also
  consider to simply remove all the perl on that system.
 
 
  # Han

 The pkg_* tools are perl. Even though its a firewall he may need to
 install/remove/maintain pkg's of some sort.



Re: errata 001_perl.patch

2006-01-12 Thread Gerardo Santana Gómez Garrido
2006/1/12, Joerg Streckfuss [EMAIL PROTECTED]:
 hi list.

 last night i patched my openbsd-3.8
 soekris-box. Everything went fine.
 I've got another box for firewalling with
 512MB-flash standard setup, but without any
 compiler-suite installed. Of course i want to patch this
 box as soon as possible. shoud i copy the complete
 perl-files to this box? or is there a smarter way
 to have an upgraded system?


http://binpatch.openbsd.org.mx/

*if* you trust me.

--
Gerardo Santana
Between individuals, as between nations, respect for the rights of
others is peace - Don Benito Juarez
http://santanatechnotes.blogspot.com/



Re: errata 001_perl.patch

2006-01-12 Thread Randal L. Schwartz
 Diana == Diana Eichert [EMAIL PROTECTED] writes:

Diana Did you ever get your PF/OpenVPN issue resolved?

Commenting out the only line related to OpenVPN still fails to load
it, and I didn't yet have an opportunity to put stdout/stderr capture
on the /etc/rc load.  Oddly enough, I copied those same lines
to the end of my /etc/rc.local, and it works fine, so I'm not worried
for now, just puzzled.

-- 
Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095
merlyn@stonehenge.com URL:http://www.stonehenge.com/merlyn/
Perl/Unix/security consulting, Technical writing, Comedy, etc. etc.
See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training!



rc.conf.local question

2006-01-12 Thread Dave Feustel
I added the statement dchpd_flags=-d sis0 sis1 sis2 sis3 to rc.conf.local,
but dhcpd is not started at bootup. Is something else needed to get
dhcpd started automatically?

Thanks,
Dave Feustel
-- 
Lose, v., experience a loss, get rid of, lose the weight
Loose, adj., not tight, let go, free, loose clothing



Re: isakmpd debug syntax query

2006-01-12 Thread Alexander Hall

nuffnough wrote:

Hi.

I need to log the output of isakmpd -DA=90 to a file, and I am at a loss as
to exactly what syntax to use.  I am using OpenBSD 3.8 default shell (ksh
now...) and trying stuff like

isakmpd -T -DA=90 21  logfile


which just gives me the reports for log levels but doens't actually show me
any actual debug log stuff:

173136.403277 Default log_debug_cmd: log level changed from 0 to 90 for
class [0-10] [priv]


I would appreciate anyone kind enough to correct my syntax.


I think you are missing the '-d' switch, to make it run in the foreground.



Re: errata 001_perl.patch

2006-01-12 Thread eric
On Thu, 2006-01-12 at 16:13:23 -0800, Ted Unangst proclaimed...

 if you're installing a package that's going to exploit a bug in perl,
 why are you installing it?

So are you advocating that people not patch, or not install packages?



Re: rc.conf.local question

2006-01-12 Thread Jason Dixon

On Jan 12, 2006, at 7:52 PM, Dave Feustel wrote:

I added the statement dchpd_flags=-d sis0 sis1 sis2 sis3 to  
rc.conf.local,

but dhcpd is not started at bootup. Is something else needed to get
dhcpd started automatically?


Spelling it right would help.  :)

--
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net



Re: rc.conf.local question

2006-01-12 Thread Diana Eichert
On Thu, 12 Jan 2006, Dave Feustel wrote:

 I added the statement dchpd_flags=-d sis0 sis1 sis2 sis3 to rc.conf.local,
 but dhcpd is not started at bootup. Is something else needed to get
 dhcpd started automatically?

 Thanks,
 Dave Feustel

have you tried starting dhcpd with that command line?

I'm thinking your problem might be related to having it log to STDERR
instead of logging to syslog like it should be done when started at boot
time.

diana



Re: rc.conf.local question

2006-01-12 Thread Alexander Hall

Dave Feustel wrote:

I added the statement dchpd_flags=-d sis0 sis1 sis2 sis3 to rc.conf.local,
but dhcpd is not started at bootup. Is something else needed to get
dhcpd started automatically?


Why would you want the output to stderr when starting from /etc/rc? That 
could be your problem.


On a sidenote, set dhcpd_flags= and add your interfaces to 
/etc/dhcpd.interfaces. Magic will happen (see /etc/rc).


/Alexander



Re: errata 001_perl.patch

2006-01-12 Thread Clint M. Sand
On Thu, Jan 12, 2006 at 04:13:23PM -0800, Ted Unangst wrote:
 if you're installing a package that's going to exploit a bug in perl,
 why are you installing it?
 

my point is that if you want to install packages at all you need the
perl binary. That is in response so someone suggesting you do not need
perl at all. 

I think you are missinterpreting.

 On 1/12/06, Clint M. Sand [EMAIL PROTECTED] wrote:
  On Thu, Jan 12, 2006 at 09:38:07PM +0100, Han Boetes wrote:
   I doubt you need perl at all on a box like that. You can also
   consider to simply remove all the perl on that system.
  
  
   # Han
 
  The pkg_* tools are perl. Even though its a firewall he may need to
  install/remove/maintain pkg's of some sort.



i2c question

2006-01-12 Thread Diana Eichert
I've been following all the i2c work lately and have a question.  I have
some blade servers that use i2c as a control path between a master blade
and the child blades.  This is in addition to sensor info.

Has there been any thought towards supporting i2c control channel stuff,
or am I ahead of the development work, or perhaps I'm talking about a
corner case with limited usefulness?

FWIW they're RLX blade servers and they are no longer in the blade
server business.  At one point they had support for their control s/w for
FreeBSD, I think I even have a copy of it laying around.

diana



-current not building on macppc

2006-01-12 Thread Michael Steinfeld
HW: Mac Mini
I just cvs'd my src and attempted a 'make build'
here is the stop error, is there a fix for this?

ty.


installing a.out.h ar.h assert.h bitstring.h blf.h bm.h bsd_auth.h
cast.h cpio.h ctype.h curses.h db.h dbm.h des.h dirent.h disktab.h
dlfcn.h elf_abi.h err.h errno.h fnmatch.h fstab.h fts.h ftw.h getopt.h
glob.h grp.h ifaddrs.h inttypes.h iso646.h kvm.h langinfo.h libgen.h
limits.h locale.h login_cap.h malloc.h math.h md4.h md5.h memory.h
mpool.h ndbm.h netdb.h netgroup.h nlist.h nl_types.h ohash.h olf_abi.h
paths.h poll.h pwd.h ranlib.h re_comp.h readpassphrase.h regex.h
resolv.h rmd160.h search.h setjmp.h sgtty.h sha1.h sha2.h skipjack.h
signal.h stab.h stdbool.h stddef.h stdio.h stdlib.h string.h strings.h
struct.h sysexits.h tar.h time.h ttyent.h tzfile.h unistd.h utime.h
utmp.h vis.h wchar.h wctype.h link.h link_aout.h link_elf.h ieeefp.h
installing arpa protocols rpc rpcsvc
installing fcntl.h syslog.h termios.h stdarg.h stdint.h varargs.h
installing float.h frame.h
chown -R root:bin /usr/include
find /usr/include -type f -print0 |  xargs -0r chmod a=r
xargs: unknown option -- r
usage: xargs [-0opt] [-E eofstr] [-I replstr [-R replacements]] [-J replstr]
 [-L number] [-n number [-x]] [-P maxprocs] [-s size]
 [utility [argument ...]]
*** Error code 1

Stop in /usr/src/include (line 89 of Makefile).
*** Error code 1

Stop in /usr/src (line 73 of Makefile).



Re: errata 001_perl.patch

2006-01-12 Thread Stuart Henderson
On 2006/01/12 19:10, eric wrote:
 On Thu, 2006-01-12 at 16:13:23 -0800, Ted Unangst proclaimed...
  if you're installing a package that's going to exploit a bug in perl,
  why are you installing it?
 
 So are you advocating that people not patch, or not install packages?

Look at the situation and decide if the bug will affect you.
On a box with only trusted+clueful users, with some patches you might
decide there's no problem with waiting for the next binary release.



Re: -current not building on macppc

2006-01-12 Thread Stuart Henderson
On 2006/01/12 20:22, Michael Steinfeld wrote:
 HW: Mac Mini
 I just cvs'd my src and attempted a 'make build'
 here is the stop error, is there a fix for this?

First, install a snapshot.
If that doesn't help, clean your src tree.



Re: errata 001_perl.patch

2006-01-12 Thread Ted Unangst
On 1/12/06, eric [EMAIL PROTECTED] wrote:
 On Thu, 2006-01-12 at 16:13:23 -0800, Ted Unangst proclaimed...

  if you're installing a package that's going to exploit a bug in perl,
  why are you installing it?

 So are you advocating that people not patch, or not install packages?

i am advocating that people assess their exposure, their risk
tolerance, the difficulty of patching, and the impact of possible
workarounds, and then decide on an appropriate course of action.



Re: rc.conf.local question

2006-01-12 Thread Dave Feustel
On Thursday 12 January 2006 20:13, Jason Dixon wrote:
 On Jan 12, 2006, at 7:52 PM, Dave Feustel wrote:
 
  I added the statement dchpd_flags=-d sis0 sis1 sis2 sis3 to  
  rc.conf.local,
  but dhcpd is not started at bootup. Is something else needed to get
  dhcpd started automatically?
 
 Spelling it right would help.  :)

That's why I like cut and paste so much. :-) 
 --
 Jason Dixon
 DixonGroup Consulting
 http://www.dixongroup.net
 
 
 
 

-- 
Lose, v., experience a loss, get rid of, lose the weight
Loose, adj., not tight, let go, free, loose clothing



Re: -current not building on macppc

2006-01-12 Thread Tobias Ulmer
On Thu, Jan 12, 2006 at 08:22:12PM -0500, Michael Steinfeld wrote:
 HW: Mac Mini
 I just cvs'd my src and attempted a 'make build'
 here is the stop error, is there a fix for this?
 
 ty.
 
 
 installing a.out.h ar.h assert.h bitstring.h blf.h bm.h bsd_auth.h
 cast.h cpio.h ctype.h curses.h db.h dbm.h des.h dirent.h disktab.h
 dlfcn.h elf_abi.h err.h errno.h fnmatch.h fstab.h fts.h ftw.h getopt.h
 glob.h grp.h ifaddrs.h inttypes.h iso646.h kvm.h langinfo.h libgen.h
 limits.h locale.h login_cap.h malloc.h math.h md4.h md5.h memory.h
 mpool.h ndbm.h netdb.h netgroup.h nlist.h nl_types.h ohash.h olf_abi.h
 paths.h poll.h pwd.h ranlib.h re_comp.h readpassphrase.h regex.h
 resolv.h rmd160.h search.h setjmp.h sgtty.h sha1.h sha2.h skipjack.h
 signal.h stab.h stdbool.h stddef.h stdio.h stdlib.h string.h strings.h
 struct.h sysexits.h tar.h time.h ttyent.h tzfile.h unistd.h utime.h
 utmp.h vis.h wchar.h wctype.h link.h link_aout.h link_elf.h ieeefp.h
 installing arpa protocols rpc rpcsvc
 installing fcntl.h syslog.h termios.h stdarg.h stdint.h varargs.h
 installing float.h frame.h
 chown -R root:bin /usr/include
 find /usr/include -type f -print0 |  xargs -0r chmod a=r
 xargs: unknown option -- r
 usage: xargs [-0opt] [-E eofstr] [-I replstr [-R replacements]] [-J replstr]
  [-L number] [-n number [-x]] [-P maxprocs] [-s size]
  [utility [argument ...]]
 *** Error code 1
 
 Stop in /usr/src/include (line 89 of Makefile).
 *** Error code 1
 
 Stop in /usr/src (line 73 of Makefile).
 


I guess it has something to do with the instructions in this document:
http://openbsd.org/faq/current.html

Tobias ;) 



Re: errata 001_perl.patch

2006-01-12 Thread eric
On Fri, 2006-01-13 at 01:39:23 +, Stuart Henderson proclaimed...

 Look at the situation and decide if the bug will affect you.
 On a box with only trusted+clueful users, with some patches you might
 decide there's no problem with waiting for the next binary release.

Thanks, but the question wasn't directed towards you.



Re: rc.conf.local question

2006-01-12 Thread Diana Eichert
chuckle

I never even saw the typo



Re: rc.conf.local question

2006-01-12 Thread Dave Feustel
On Thursday 12 January 2006 20:28, Alexander Hall wrote:
 Dave Feustel wrote:
  I added the statement dchpd_flags=-d sis0 sis1 sis2 sis3 to rc.conf.local,
  but dhcpd is not started at bootup. Is something else needed to get
  dhcpd started automatically?
 
 Why would you want the output to stderr when starting from /etc/rc? That 
 could be your problem.

The -d flag for debugging when I was starting dhcpd manually while I was
getting it to work. Now it works and I want it to start automatically. I've
removed the -d flag.


 On a sidenote, set dhcpd_flags= and add your interfaces to 
 /etc/dhcpd.interfaces. Magic will happen (see /etc/rc).

I had added sis[0-3] to /etc/dhcpd.interfaces. Maybe the redundant specification
of the sis interfaces caused a problem with rc.conf startup of dhcpd.
I've made dhcpd= again for normal operation.

I also am using dhcp to get an ip address from verizon when I boot up.

 /Alexander
 

-- 
Lose, v., experience a loss, get rid of, lose the weight
Loose, adj., not tight, let go, free, loose clothing



Re: i2c question

2006-01-12 Thread Damien Miller
On Thu, 12 Jan 2006, Diana Eichert wrote:

 I've been following all the i2c work lately and have a question.  I have
 some blade servers that use i2c as a control path between a master blade
 and the child blades.  This is in addition to sensor info.
 
 Has there been any thought towards supporting i2c control channel stuff,
 or am I ahead of the development work, or perhaps I'm talking about a
 corner case with limited usefulness?

Right now the i2c work has been focussed on monitoring only - controlling
stuff is a fair bit more scary. The big problem with i2c is figuring out
what devices live on the bus - Theo has been writing heaps of delicate
code to probe and identify i2c sensors. This has to be done very
carefully as some devices will crash (or worse: corrupt themselves) if
they are prodded in the wrong way.

This is tricky for passive sensor devices, but it is very much worse for
control devices: typically these have a bunch of GPIO pins that could be 
hooked up to anything: an output could be hooked up to something as 
harmless as a LED or something far more scary and there is often no way 
to perform a software probe that identifies what is attached. 

To make matters worse, different vendors or models are likely to hook 
stuff up to these pins in completely different ways. There are probably 
some easier cases buried in the difficult ones though, adjusting fan 
speeds may be possible for instance.

 FWIW they're RLX blade servers and they are no longer in the blade
 server business.  At one point they had support for their control s/w for
 FreeBSD, I think I even have a copy of it laying around.

If the code is under a free license, then it will probably be useful 
(even if only as documentation).

-d



Re: error on ifconfig, bssid

2006-01-12 Thread Lucas Reddinger
 * Do you really want a bssid, or are you just looking for a network ID
 (nwid)?

in a previous e-mail to misc, i said:
there are three access points that i can pick up that have the same
ssid [nwid]. is there a way to specify the mac address [bssid]
of the access point i wish to use?

according to an off-list e-mail, wi(4) doesn't currently support
setting the bssid and the man page lied to me. is this the case,
or was the error a result of something else?

 * If you mean to set the bssid, are you sure your card is operating in
 BSS mode?

yes.

thanks,
lucas reddinger



Re: error on ifconfig, bssid

2006-01-12 Thread Jonathan Gray
On Fri, Jan 13, 2006 at 04:40:07AM +, Lucas Reddinger wrote:
  * Do you really want a bssid, or are you just looking for a network ID
  (nwid)?
 
 in a previous e-mail to misc, i said:
 there are three access points that i can pick up that have the same
 ssid [nwid]. is there a way to specify the mac address [bssid]
 of the access point i wish to use?
 
 according to an off-list e-mail, wi(4) doesn't currently support
 setting the bssid and the man page lied to me. is this the case,
 or was the error a result of something else?

Yes wi doesn't support the relevant ioctls for setting bssid
at this time, man page in -current has been updated to reflect this. 



Re: OT: server quality hardware; was: Re: RAID card recommendations

2006-01-12 Thread Chris Cappuccio
[EMAIL PROTECTED] [EMAIL PROTECTED] wrote:
 
 What motherboards are folks using that support these (64 bit) PCI
 slots?  Most consumer grade x86 motherboards only have 32-bit PCI
 slots.  I've seen very few motherboards (at least at newegg) that
 have 64-bit PCI, and they're very expensive.
 

I've just started using some supermicro opteron boards and they are
really nice, PCI-X, serverworks chipset, quality power regulation for
the CPU, $200-$400 price range depending on the features you want

If you are investing into raid then it only makes sense to get a decent
board.  The single cpu board is $200

-- 
Don Rumsfeld has been chewing on my ankles. -- Dick Cheney



Re: Linksys WMP55AG (ath0) Not Finding Wireless Network

2006-01-12 Thread Ray Lai
Some AR5212 chips seem to have problems, even though they are
detected by OpenBSD.  I read something about newer firmwares?  Try
searching the archives.  One person recently reported having success
by setting COUNTRYCODE to de and rebuilding his kernel; it didn't
work for me but I guess it's worth a shot.

Good luck.

As this is not a tech@ topic I've moved it back to [EMAIL PROTECTED]

-Ray-

On Thu, Jan 12, 2006 at 11:24:41PM -0500, [EMAIL PROTECTED] wrote:
 I apologize for the cross-post, but since this has gone unanswered on 
 misc@ for 3+ days, I figured that it was unlikely to ever get a 
 response there.
 
 
 
 Hello All,
 
 I've got a Linksys WMP55AG that's refusing to see my wireless network. While
 it's entirely possible that I've misconfigured it, given other somewhat 
 recent
 posts I've seen about problems with ath devices (i.e.
 http://marc.theaimsgroup.com/?l=openbsd-miscm=113166150212987w=2), I 
 figure
 it's also possible that there's some sort of a driver bug, which I'd like to
 help fix if it exists.
 
 My setup should be relatively straightforward: I've got a 3.7-stable system
 running a National Datacomm NCP130 as an access point. Its relevant info is:
 
 dmesg:
 wi0 at pci0 dev 12 function 0 National Datacomm Corp NCP130 Rev A2 
 rev 0x01: irq 9
 wi0: PRISM2 HWB3163 rev.B, Firmware 0.3.0 (primary), 1.7.1 (station), 
 address
 00:80:c6:e3:72:2c
 
 wicontrol wi0 output:
 NIC serial number:  [ 99SA0100 ]
 Station name:   [ WaveLAN/IEEE node ]
 SSID for IBSS creation: [ kirknet ]
 Current netname (SSID): [ kirknet ]
 Desired netname (SSID): [ kirknet ]
 Current BSSID:  [ 00:80:c6:e3:72:2c ]
 Channel list:   [ 2047 ]
 IBSS channel:   [ 3 ]
 Current channel:[ 3 ]
 Comms quality/signal/noise: [ 0 81 27 ]
 Promiscuous mode:   [ Off ]
 Process 802.11b Frame:  [ Off ]
 Port type (1=BSS, 3=ad-hoc, 6=Host AP): [ 6 ]
 MAC address:[ 00:80:c6:e3:72:2c ]
 TX rate (selection):[ 3 ]
 TX rate (actual speed): [ 2 ]
 Maximum data length:[ 2304 ]
 RTS/CTS handshake threshold:[ 2347 ]
 Create IBSS:[ Off ]
 Antenna diversity (0=auto,1=pri,2=aux): [ ]
 Microwave oven robustness:  [ On ]
 Roaming mode(1=firm,3=disable): [ 1 ]
 Access point density:   [ 1 ]
 Power Management:   [ Off ]
 Max sleep time: [ 100 ]
 Enhanced Security mode: [ 0 ]
 Intersil Prism2-based card: [ 1 ]
 Card info:  [ PRISM2 HWB3163 rev.B, 
 Firmware 1.7.1 ]
 Encryption: [ On ]
 Encryption algorithm:   [ Firmware WEP ]
 Authentication type
 (1=OpenSys, 2=Shared Key):  [ 2 ]
 TX encryption key:  [ 1 ]
 Encryption keys:[ not shown ][  ][  ][  ]
 
 ifconfig:
 wi0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
 address: 00:80:c6:e3:72:2c
 ieee80211: nwid kirknet nwkey not shown -11dBm (auto)
 media: IEEE802.11 autoselect hostap (DS2)
 status: active
 inet 192.168.1.42 netmask 0xff00 broadcast 192.168.1.255
 inet6 fe80::280:c6ff:fee3:722c%wi0 prefixlen 64 scopeid 0x3
 
 Several clients with different OSes connect to this AP without hassle, 
 including
 WinXP SP2, OS X 10.2.8, and Ubuntu's 5.10 release (a 2.6.12 Linux kernel), 
 so
 clearly the access point is working.
 
 My client with the Linksys card shows the following from dmesg:
 
 ath0 at pci1 dev 10 function 0 Atheros AR5212 rev 0x01: irq 11
 ath0: AR5213 5.6 phy 4.1 rf5111 1.7 rf2111 2.3, FCC1A, address 
 00:0c:41:16:cb:d4
 
 Going along with man ath, I figured I could just run ifconfig ath0 nwid
 kirknet nwkey my key and be good to go. After doing so, I can see that 
 the
 card has picked up the right AP and channel; unfortunately, however, it 
 thinks
 it's not connected to the network:
 
 ath0: flags=8863UP,BROADCAST,NOTRAILERS,RUNNING,SIMPLEX,MULTICAST mtu 1500
 lladdr 00:0c:41:16:cb:d4
 media: IEEE802.11 autoselect mode 11b (DS1 mode 11b)
 status: no network
 ieee80211: nwid kirknet chan 3 bssid 00:80:c6:e3:72:2c nwkey my 
 key
 inet 192.168.1.101 netmask 0xff00 broadcast 192.168.1.255
 inet6 fe80::20c:41ff:fe16:cbd4%ath0 prefixlen 64 scopeid 0x2
 
 What's particularly strange is the output of wicontrol wi0 -l on the 
 access point:
 
 00:04:23:4b:38:fd  asid=02d0, flags=3AUTH,ASSOC,
 caps=31ESS,PRIVACY,SHORT_PREAMBLE, rates=f1M,2M,5.5M,11M, sig=35/14
 00:30:65:11:35:b0  asid=0140, flags=3AUTH,ASSOC, caps=11ESS,PRIVACY,
 rates=f1M,2M,5.5M,11M, 

Re: Linksys WMP55AG (ath0) Not Finding Wireless Network

2006-01-12 Thread Theo de Raadt
 Some AR5212 chips seem to have problems, even though they are
 detected by OpenBSD.  I read something about newer firmwares?

The atheros chips do not use firmware.



Disklabel on Sun V100 comes back weird after reboot

2006-01-12 Thread Daniel Ouellet
I am still having issues with this. A few years ago I did asked about 
disklabel not showing up properly and I was told not to worry about, but 
now I need to increase the size of some partitions with unallocated 
space on my drive like Nick recommended to do. (:


But my disklabel don't look right to me, however all works fine, so how 
can I make sure that after a reboot if I just do a disklabel wd0, it 
would be fine and look OK. I am a bit nervous before making changes to 
the disklabel obviously.


So, after a reboot I get:

# disklabel wd0
# /dev/rwd0c:
type: ESDI
disk: ESDI/IDE disk
label: ST340015A
flags:
bytes/sector: 512
sectors/track: 63
tracks/cylinder: 16
sectors/cylinder: 1008
cylinders: 16383
total sectors: 16514064
rpm: 3600
interleave: 1
trackskew: 0
cylinderskew: 0
headswitch: 0   # microseconds
track-to-track seek: 0  # microseconds
drivedata: 0

16 partitions:
# sizeoffset  fstype [fsize bsize  cpg]
  a:524160 0  4.2BSD   2048 16384   16 # Cyl 0 
-   519
  b:   2097648524160swap   # Cyl   520 
-  2600
  c:  78165360 0  unused  0 0  # Cyl 0 
- 77544
  d:   2097648   2621808  4.2BSD   2048 16384   16 # Cyl  2601 
-  4681
  e:  10486224   4719456  4.2BSD   2048 16384   16 # Cyl  4682 
- 15084
  f:   2097648  15205680  4.2BSD   2048 16384   16 # Cyl 15085 
- 17165
  g:   1048320  17303328  4.2BSD   2048 16384   16 # Cyl 17166 
- 18205
  h:  10486224  18351648  4.2BSD   2048 16384   16 # Cyl 18206 
- 28608
  i:   2097648  28837872  4.2BSD   2048 16384   16 # Cyl 28609 
- 30689

disklabel: partition c: partition extends past end of unit
disklabel: partition f: partition extends past end of unit
disklabel: partition g: offset past end of unit
disklabel: partition g: partition extends past end of unit
disklabel: partition h: offset past end of unit
disklabel: partition h: partition extends past end of unit
disklabel: partition i: offset past end of unit
disklabel: partition i: partition extends past end of unit


=

Now, I do:

# disklabel -E wd0
This platform requires that partition offsets/sizes be on cylinder 
boundaries.
Partition offsets/sizes will be rounded to the nearest cylinder 
automatically.


Initial label editor (enter '?' for help at any prompt)
 g
[d]isk, [b]ios, or [u]ser geometry: [d] d
 w
 q
No label changes.

===

But then if I now do:

# disklabel wd0
# /dev/rwd0c:
type: ESDI
disk: ESDI/IDE disk
label: ST340015A
flags:
bytes/sector: 512
sectors/track: 63
tracks/cylinder: 16
sectors/cylinder: 1008
cylinders: 16383
total sectors: 78165360
rpm: 3600
interleave: 1
trackskew: 0
cylinderskew: 0
headswitch: 0   # microseconds
track-to-track seek: 0  # microseconds
drivedata: 0

16 partitions:
# sizeoffset  fstype [fsize bsize  cpg]
  a:524160 0  4.2BSD   2048 16384   16 # Cyl 0 
-   519
  b:   2097648524160swap   # Cyl   520 
-  2600
  c:  78165360 0  unused  0 0  # Cyl 0 
- 77544
  d:   2097648   2621808  4.2BSD   2048 16384   16 # Cyl  2601 
-  4681
  e:  10486224   4719456  4.2BSD   2048 16384   16 # Cyl  4682 
- 15084
  f:   2097648  15205680  4.2BSD   2048 16384   16 # Cyl 15085 
- 17165
  g:   1048320  17303328  4.2BSD   2048 16384   16 # Cyl 17166 
- 18205
  h:  10486224  18351648  4.2BSD   2048 16384   16 # Cyl 18206 
- 28608
  i:   2097648  28837872  4.2BSD   2048 16384   16 # Cyl 28609 
- 30689


=

All look fine.

But a reboot comes back again with the warning on top of this email.

So, I take that as all been fine and good, but isn't it a way to really 
not see this warning.


I don't play with disklabel very often, but when I do and see this, it 
always make me pause first before I do anything stupid.


Any thoughts on this.

I guess I most likely over react, but I like to be safe.

Plus I do write the disklabel ( I think I do anyway as above), so why 
doesn't it see it?


Thanks

Daniel