Re: 3.9 sightings :: ot

2006-04-25 Thread Greg Thomas
On 4/24/06, Karsten McMinn [EMAIL PROTECTED] wrote:
 the partys starting over here in the west (usa). props if
 you can recognize my first server getting the honors.
 my thanks and my raised glass to Theo and the team.


Mine arrived on Friday safely wrapped in my favorite t-shirt, the 2.9
Secret Service shirt.

Greg



Re: Problem Compiling Stevens' Socket Source Code

2006-04-25 Thread Tobias Ulmer
On Mon, Apr 24, 2006 at 08:33:39PM -0401, Ray Lai wrote:
 On Tue, Apr 25, 2006 at 12:10:14AM +0200, Tobias Ulmer wrote:
  Here's a patch that removes all(?) warnings/errors from the
  intro chapter if you followed the instructions in the readme...
  
   
  diff -ru unpv13e.orig/intro/byteorder.c unpv13e/intro/byteorder.c
  --- unpv13e.orig/intro/byteorder.c  Thu Nov 14 04:33:33 2002
  +++ unpv13e/intro/byteorder.c   Tue Apr 18 04:39:40 2006
  @@ -18,7 +18,7 @@
  else
  printf(unknown\n);
  } else
  -   printf(sizeof(short) = %d\n, sizeof(short));
  +   printf(sizeof(short) = %zd\n, sizeof(short));
 
 Use %zu for sizeof(), since it returns size_t, an unsigned type.
 
 -Ray-
 


My mistake, thanks Ray :)

Tobias 



Re: 3.7: weird IP address problem

2006-04-25 Thread Toni Mueller
Hello,

On Mon, 24.04.2006 at 15:30:55 -0400, Matthew Closson [EMAIL PROTECTED] wrote:
  [ wrong IP address ]
 What could that be, and why can't I see this address anywhere?
 
 I'd rather not reboot only to make a change in IP numbers effective...

 Can you send us the output of ifconfig ifname0 for example if you had an 
 fxp card then:

unfortunately, I can't.


But there were two IP addresse on there:

The remaining, correct IPv4 address, and some IPv6 address. I've now
also deleted that IPv6 address, but it's still no-go.

 Also did you do this?
 
 ifconfig ifname delete inet alias aaa.bbb.ccc.ddd

I did:

ifconfig ifname inet aaa.bbb.ccc.ddd -alias

and:

ifconfig ifname inet aaa.bbb.ccc.eee

which looks similar according to the manual. At least, the latter
should overwrite any remnants of the original assignment.

Trying to delete the already non-listed address yields:

ifconfig: SIOCDIFADDR: Can't assign requested address


I wasn't trying to delete an alias, but instead change the main address
to the (former) alias, and then delete the original address.

 route add default gw aaa.bbb.ccc.ddd

What? The default gateway is already set, but to a quite different
machine.

As for the 'arp' and 'route' suggestions:

 * No suspicious information turns up there. I only see remote machines
   in these displays anyway.

 * The problem now persists for several weeks. Enough time for arp to
   time out in any case.


Best,
--Toni++



Re: advantages/disadvantages of kernel pppoe(4) vs userland pppoe(8)?

2006-04-25 Thread holger glaess
-Urspr|ngliche Nachricht-
Von: Bihlmaier Andreas [EMAIL PROTECTED]
Gesendet: 24.04.06 17:16:44
An: misc@openbsd.org
Betreff: Re: advantages/disadvantages of kernel pppoe(4) vs userland pppoe(8)?


On Mon, Apr 24, 2006 at 11:44:25AM +0200, holger glaess wrote:
 Jonathan Thornburg wrote:

huge snip

 hi
 i also customer of arcor and an wrap embedded router ( take a look at 
 www.pcengines.ch )
 your laptop should be powerful enough for router / dhcp server / caching dns 
 server and
 dyndns client too .
   
 i use the kernel pppoe right now and at the past the userland pppoe.
 
 from my feeling are the kernel pppoe faster an more lightweight as the 
 userland pppoe.
 just you have to care about mtu/mss size at the firewall-code  and by sysctl 
 for the fullspeed.

What exactly do you mean by and by sysctl for the fullspeed?
I'm running kernel pppoe myself on an old pIII box. Of course I had to
take care of the mtu issue, but never touched any sysctl variable.

Please enlighten me.

hi

sorry i talk about this ( not mtu )

net.inet.tcp.mssdflt=1440

this sysctl have to the same value like this at firewall rule

scrub on $ext_if all max-mss 1440

you need both !
if don4t setup this you get trouble with connection to some websites and some 
other services

this are more confortable with the userland pppoe

holger



 ( i think this is the biggest diffrence to the userland pppoe ) 
 
 i work with this setup since months with any kind of trouble.
 
 holger

Regards,
ahb



Re: 3.7: weird IP address problem

2006-04-25 Thread Toni Mueller
Hello Ste,

On Mon, 24.04.2006 at 22:49:48 +0100, Ste Jones [EMAIL PROTECTED] wrote:
 I've noticed the same thing before with aliases. Down and upping the
 interface combined with a route flush  sh /etc/netstart should fix
 the problem

I am glad that you can confirm the problem. I'm sure a reboot would fix
it, too, but I'd rather get at the root cause of it, and eliminate it
there. To preserve the status quo, I abstained from rebooting the box,
so I can conduct some further testing if anyone has good suggestions on
what else to try.

 probably wouldn't do this over ssh though.

That's part of the problem. ;-)


Best,
--Toni++



Re: 3.7: weird IP address problem

2006-04-25 Thread Toni Mueller
Hi,

On Mon, 24.04.2006 at 15:39:36 -0400, Brian A. Seklecki [EMAIL PROTECTED] 
wrote:
 Also, is it still ARP'ing for the old address (tcpdump(8) will show).

no ARP. It's going straight to the target machine, but with the wrong
sender IP (so it doesn't ever get any replies for packets it
originated).


Best,
--Toni++



Re: 3.7: weird IP address problem

2006-04-25 Thread Tony
Toni Mueller  wrote:

 Hello,

 On Mon, 24.04.2006 at 15:30:55 -0400, Matthew Closson
 [EMAIL PROTECTED] wrote:
   [ wrong IP address ]
  What could that be, and why can't I see this address anywhere?
  
  I'd rather not reboot only to make a change in IP numbers effective...

  Can you send us the output of ifconfig ifname0 for example if
 you had an
  fxp card then:

 unfortunately, I can't.


 But there were two IP addresse on there:

 The remaining, correct IPv4 address, and some IPv6 address. I've now
 also deleted that IPv6 address, but it's still no-go.

  Also did you do this?
 
  ifconfig ifname delete inet alias aaa.bbb.ccc.ddd

 I did:

 ifconfig ifname inet aaa.bbb.ccc.ddd -alias

 and:

 ifconfig ifname inet aaa.bbb.ccc.eee

 which looks similar according to the manual. At least, the latter
 should overwrite any remnants of the original assignment.

 Trying to delete the already non-listed address yields:

 ifconfig: SIOCDIFADDR: Can't assign requested address


 I wasn't trying to delete an alias, but instead change the main address
 to the (former) alias, and then delete the original address.

  route add default gw aaa.bbb.ccc.ddd

 What? The default gateway is already set, but to a quite different
 machine.

U, bit outa my league, but seems like in order to get to
a gateway on another machine, you must first go through an interface
(ie gateway) on your own machine. At least there seems to be something
of that nature in any routing tables I've seen.
Most likely in order to go anywhere you must first go through your
non-existent IP address.
I think that default gateway makes more than one entry in the routing
tables.


 As for the 'arp' and 'route' suggestions:

  * No suspicious information turns up there. I only see remote machines
in these displays anyway.

  * The problem now persists for several weeks. Enough time for arp to
time out in any case.


 Best,
 --Toni++



Congress readies broad new digital copyright bill

2006-04-25 Thread Alexey E. Suslikov

Congress readies broad new digital copyright bill
by Declan McCullagh

http://news.com.com/Congress+readies+broad+new+digital+copyright+bill/2100-1028_3-6064016.html

Quote:

For the last few years, a coalition of technology companies, academics and
computer programmers has been trying to persuade Congress to scale back the
Digital Millennium Copyright Act.

Now Congress is preparing to do precisely the opposite. A proposed copyright
law seen by CNET News.com would expand the DMCA's restrictions on software
that can bypass copy protections and grant federal police more wiretapping
and enforcement powers.

...



Re: 3.7: weird IP address problem

2006-04-25 Thread Otto Moerbeek
On Mon, 24 Apr 2006, Toni Mueller wrote:

 Hello,
 
 I have a box that once had two IP addresses on one interface. I
 deconfigured one of them using ifconfig -alias.
 
 Now, when I want to use any (?) program on that box to go over this
 interface, it wants to use the addresses which is no longer present. I
 double-checked to ensure that there is no NAT in the way, and also used
 all netstat and ifconfig otions I know to convince myself that the old
 address is gone. I also tried to 'ifconfig ifname inet
 the-one-and-only-address' just in case there would be a different
 handling of addresses assigned with and without using -alias, but to no
 avail.
 
 What could that be, and why can't I see this address anywhere?
 
 I'd rather not reboot only to make a change in IP numbers effective...

Does it work when you force the source address to the desired address?
With ping, use -I address, with ssh use -b address.

3.7 contains some route caching that might play a role. Forcing a
source address might have the effect of clearing that cache.

Also, double check the routing table with route -n show, to rule out
wrong reverse lookups and remaining route entries for the old address.

-Otto



Re: 3.7: weird IP address problem

2006-04-25 Thread Toni Mueller
Hello Otto,

On Tue, 25.04.2006 at 10:46:37 +0200, Otto Moerbeek [EMAIL PROTECTED] wrote:
 Does it work when you force the source address to the desired address?
 With ping, use -I address, with ssh use -b address.

yes, it does work when I specify the correct address with ping, but
doesn't when I don't specify an address.

 3.7 contains some route caching that might play a role. Forcing a
 source address might have the effect of clearing that cache.

Nope. I did it in this sequence:

 1. ping with forced source address - success
 2. ping without forced source address - failure

Some important programs don't have an option to specify a source
address...

 Also, double check the routing table with route -n show, to rule out
 wrong reverse lookups and remaining route entries for the old address.

I always use -n because I don't have DNS on that network anyway, and it
goes faster, and is more true, too.

The routing table does not show any appearance of the wrong address,
only some mac addresses for hosts, and some link#n entries for
directly attached networks.


Best,
--Toni++



Re: 3.7: weird IP address problem

2006-04-25 Thread Otto Moerbeek
On Tue, 25 Apr 2006, Toni Mueller wrote:

 Hello Otto,
 
 On Tue, 25.04.2006 at 10:46:37 +0200, Otto Moerbeek [EMAIL PROTECTED] wrote:
  Does it work when you force the source address to the desired address?
  With ping, use -I address, with ssh use -b address.
 
 yes, it does work when I specify the correct address with ping, but
 doesn't when I don't specify an address.
 
  3.7 contains some route caching that might play a role. Forcing a
  source address might have the effect of clearing that cache.
 
 Nope. I did it in this sequence:
 
  1. ping with forced source address - success
  2. ping without forced source address - failure
 
 Some important programs don't have an option to specify a source
 address...

Indeed, I looked up what changed and that was a case of caching a
route used with forwarding, which does not apply here.

 
  Also, double check the routing table with route -n show, to rule out
  wrong reverse lookups and remaining route entries for the old address.
 
 I always use -n because I don't have DNS on that network anyway, and it
 goes faster, and is more true, too.
 
 The routing table does not show any appearance of the wrong address,
 only some mac addresses for hosts, and some link#n entries for
 directly attached networks.

I'm out of suggestions.

-Otto



Re: 3.7: weird IP address problem

2006-04-25 Thread Claudio Jeker
On Tue, Apr 25, 2006 at 12:25:26PM +0200, Otto Moerbeek wrote:
 On Tue, 25 Apr 2006, Toni Mueller wrote:
 
  Hello Otto,
  
  On Tue, 25.04.2006 at 10:46:37 +0200, Otto Moerbeek [EMAIL PROTECTED] 
  wrote:
   Does it work when you force the source address to the desired address?
   With ping, use -I address, with ssh use -b address.
  
  yes, it does work when I specify the correct address with ping, but
  doesn't when I don't specify an address.
  
   3.7 contains some route caching that might play a role. Forcing a
   source address might have the effect of clearing that cache.
  
  Nope. I did it in this sequence:
  
   1. ping with forced source address - success
   2. ping without forced source address - failure
  
  Some important programs don't have an option to specify a source
  address...
 
 Indeed, I looked up what changed and that was a case of caching a
 route used with forwarding, which does not apply here.
 
  
   Also, double check the routing table with route -n show, to rule out
   wrong reverse lookups and remaining route entries for the old address.
  
  I always use -n because I don't have DNS on that network anyway, and it
  goes faster, and is more true, too.
  
  The routing table does not show any appearance of the wrong address,
  only some mac addresses for hosts, and some link#n entries for
  directly attached networks.
 
 I'm out of suggestions.
 

Upgrade from 3.7 to 3.9. It may be fixed in 3.9 (I remember stuff that was
fixed where packets where sent out with the wrong source address if you
had more than one network configured (alias with a different network than
the main address)).

-- 
:wq Claudio



How will OpenBSD Defend against Virtual Rootkits?

2006-04-25 Thread Dave Feustel
This question comes to mind as a result of my reading just now 

VM Rootkits: The Next Big Threat? 
By Ryan Naraine 
March 10, 2006

http://www.eweek.com/article2/0,1895,193,00.asp

Dave Feustel
-- 
Lose, v., experience a loss, get rid of, lose the weight
Loose, adj., not tight, let go, free, loose clothing



Anyone using ATI Radeon XPRESS 200 Graphics Chipset on 3.8 ?

2006-04-25 Thread Siju George
Hi,

Is ATI Radeon XPRESS 200 Graphics Chipset fully supported on 3.8?
Anyone using it successfully?

My Motherboard is

http://www.directron.com/rs482m4ild.html

amd64 athlon processor.

Actually it was taken to replace a Debian Backupserver. Sarge amd64
did not detect the 120GB SATA Hard disks. NetBSD 3.0 also did not
detectthe disks. OpenBSD 3.8 Detected it without Problems :-)

But finding it difficult to configure X to get Color Depth of 24 :-(

Any pointers to get X running fine is highly appreciated :-)

Thankyou so much

Kind Regards

Siju



REPOST: console on 3.9-current question

2006-04-25 Thread J.D. Bronson
I was surprised that no one replied on this list about this 
issue...so I wanted to repost it ONE time. Someone out there must 
also be seeing this and if its normal..I would like to know...(and if 
its normal..why)


REPOST:

After further testing, its not only the console, but also over SSH.
(on the same LAN segment) - so that would eliminate a few possibilities.

I noticed this awhile back on 3.9-current and it is still there in 
the latest snapshot I tried (4/22)...I am hoping someone has seen this..


I installed from the snapshot and didnt customize a thing. When the 
machine is done loading (IBM rack server)...I simply logged in (as 
root at the moment).


I am not running serial or headless. I have a normal monitor/keyboard 
(PS2) plugged in.


When I type at the console to begin to setup the machine, the 
characters do not follow me in real time as I type. Its like I am on 
an overseas long distance 300 baud dialup line.


There is quite a delay and sometimes I can type several words and 
then a few seconds later - they show up.


This does not happen on the same machine if I install 3.8.

I have (4) identical machines (make/model/ram/cpu/hard drives) and 
they all work fine with 3.8 - it is only past 3.8 that I noticed this.


Any thoughts?

-JD



Re: Anyone using ATI Radeon XPRESS 200 Graphics Chipset on 3.8 ?

2006-04-25 Thread Siju George
On 4/25/06, Siju George [EMAIL PROTECTED] wrote:
 Hi,

 Is ATI Radeon XPRESS 200 Graphics Chipset fully supported on 3.8?
 Anyone using it successfully?

 My Motherboard is

 http://www.directron.com/rs482m4ild.html

 amd64 athlon processor.

 Actually it was taken to replace a Debian Backupserver. Sarge amd64
 did not detect the 120GB SATA Hard disks. NetBSD 3.0 also did not
 detectthe disks. OpenBSD 3.8 Detected it without Problems :-)

 But finding it difficult to configure X to get Color Depth of 24 :-(

 Any pointers to get X running fine is highly appreciated :-)


Sorry I missed the dmesg :-(

--
OpenBSD 3.8 (GENERIC) #247: Sat Sep 10 15:53:26 MDT 2005
[EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC
real mem = 1039593472 (1015228K)
avail mem = 879919104 (859296K)
using 22937 buffers containing 104165376 bytes (101724K) of memory
mainbus0 (root)
cpu0 at mainbus0: (uniprocessor)
cpu0: AMD Athlon(tm) 64 Processor 3400+, 2193.98 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,SSE3,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW
cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB
64b/line 16-way L2 cache
cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu0: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative
pci0 at mainbus0 bus 0: configuration mode 1
pchb0 at pci0 dev 0 function 0 ATI RS480 Host rev 0x10
ppb0 at pci0 dev 1 function 0 ATI RS480 PCIE rev 0x00
pci1 at ppb0 bus 1
vga1 at pci1 dev 5 function 0 ATI Radeon XPRESS 200 rev 0x00
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
pciide0 at pci0 dev 17 function 0 ATI IXP400 SATA rev 0x80: DMA
pciide0: using irq 11 for native-PCI interrupt
pciide0: port 0: device present, speed: 1.5Gb/s
wd0 at pciide0 channel 0 drive 0: ST3120827AS
wd0: 16-sector PIO, LBA48, 114473MB, 234441648 sectors
wd0(pciide0:0:0): using BIOS timings, Ultra-DMA mode 6
pciide0: port 1: device present, speed: 1.5Gb/s
wd1 at pciide0 channel 1 drive 0: ST3120827AS
wd1: 16-sector PIO, LBA48, 114473MB, 234441648 sectors
wd1(pciide0:1:0): using BIOS timings, Ultra-DMA mode 6
pciide1 at pci0 dev 18 function 0 ATI IXP400 SATA rev 0x80: DMA
pciide1: using irq 5 for native-PCI interrupt
ohci0 at pci0 dev 19 function 0 ATI IXP400 USB rev 0x80: irq 4,
version 1.0, legacy support
usb0 at ohci0: USB revision 1.0
uhub0 at usb0
uhub0: ATI OHCI root hub, rev 1.00/1.00, addr 1
uhub0: 4 ports with 4 removable, self powered
ohci1 at pci0 dev 19 function 1 ATI IXP400 USB rev 0x80: irq 4,
version 1.0, legacy support
usb1 at ohci1: USB revision 1.0
uhub1 at usb1
uhub1: ATI OHCI root hub, rev 1.00/1.00, addr 1
uhub1: 4 ports with 4 removable, self powered
ehci0 at pci0 dev 19 function 2 ATI IXP400 USB2 rev 0x80: irq 4
usb2 at ehci0: USB revision 2.0
uhub2 at usb2
uhub2: ATI EHCI root hub, rev 2.00/1.00, addr 1
uhub2: 8 ports with 8 removable, self powered
ATI IXP400 SMBus rev 0x81 at pci0 dev 20 function 0 not configured
pciide2 at pci0 dev 20 function 1 ATI IXP400 IDE rev 0x80: DMA
(unsupported), channel 0 configured to compatibility, channel 1
configured to compatibility
atapiscsi0 at pciide2 channel 0 drive 1
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: SONY, CD-RW CRX230E, QYS1 SCSI0
5/cdrom removable
pciide2: channel 1 ignored (not responding; disabled or no drives?)
vendor ATI, unknown product 0x437b (class multimedia unknown
subclass 0x03, rev 0x01) at pci0 dev 20 function 2 not configured
ATI IXP400 ISA rev 0x80 at pci0 dev 20 function 3 not configured
ppb1 at pci0 dev 20 function 4 ATI IXP400 PCI rev 0x80
pci2 at ppb1 bus 2
skc0 at pci2 dev 0 function 0 D-Link Systems DGE-530T rev 0x11: irq 5
skc0: Marvell Yukon (0x1)
sk0 at skc0 port A: address 00:0f:3d:88:9e:d4
eephy0 at sk0 phy 0: Marvell 88E1011 Gigabit PHY, rev. 3
re0 at pci2 dev 3 function 0 Realtek 8169 rev 0x10: irq 5, address
00:16:17:20:2a:a6
rgephy0 at re0 phy 7: RTL8169S/8110S PHY, rev. 2
pchb1 at pci0 dev 24 function 0 AMD AMD64 HyperTransport rev 0x00
pchb2 at pci0 dev 24 function 1 AMD AMD64 Address Map rev 0x00
pchb3 at pci0 dev 24 function 2 AMD AMD64 DRAM Cfg rev 0x00
pchb4 at pci0 dev 24 function 3 AMD AMD64 Misc Cfg rev 0x00
isa0 at mainbus0
com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pmsi0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pmsi0 mux 0
pcppi0 at isa0 port 0x61
spkr0 at pcppi0
sysbeep0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
dkcsum: wd0 matches BIOS drive 0x80
dkcsum: wd1 matches BIOS drive 0x81
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302

---


 Thankyou so much

 Kind Regards

 Siju



--
Siju Oommen George, Network Consultant. HiFX IT  MEDIA SERVICES PVT.
LTD. 

Re: 3.9 sightings :: ot

2006-04-25 Thread Gordon Grieder
On Mon, Apr 24, 2006 at 08:45:15PM -0700, Karsten McMinn wrote:
 the partys starting over here in the west (usa). props if
 you can recognize my first server getting the honors.
 my thanks and my raised glass to Theo and the team.

My personal one arrived yesterday wrapped in a nice Stop Blob T here in
Winnipeg, MB, Canada. (still waiting for this fiscal's budget to go
through at work for the work sets... grrr.)

When I see the white packages every 6 months in the mail box, I shake
it and listen for the sounds of broken tabs. Not a single one this
time! ;)

Thanks to the whole OpenBSD team!

 G



Re: How will OpenBSD Defend against Virtual Rootkits?

2006-04-25 Thread Nick Holland
On Tue, Apr 25, 2006 at 07:32:41AM -0500, Dave Feustel wrote:
 This question comes to mind as a result of my reading just now 
 
 VM Rootkits: The Next Big Threat? 
 By Ryan Naraine 
 March 10, 2006
 
 http://www.eweek.com/article2/0,1895,193,00.asp
 
Not much that can be done.
As has always been said, if someone has physical access to the box, Game
Over.  VMs just give someone a new way to have physical access to the
box.

Now, if only we could do away with the myth that an OS can really find
problems within itself (such as malware scanners that claim to fix
problems on infested machines).  Since that won't go away, I guess it
isn't surprising that people expect that a guest OS can detect or deal
with a problem on the host OS.

Nick.



[OT] Re: How will OpenBSD Defend against Virtual Rootkits?

2006-04-25 Thread Stoyan Genov

Dave Feustel wrote:
This question comes to mind as a result of my reading just now 

VM Rootkits: The Next Big Threat? 
By Ryan Naraine 
March 10, 2006


http://www.eweek.com/article2/0,1895,193,00.asp

Dave Feustel


http://en.wikipedia.org/wiki/SEP_field

;-)

--sdg



Ethereal Problems

2006-04-25 Thread Will H. Backman
From http://www.incidents.org/

Yes, if you use Ethereal, it is time to upgrade. According an advisory
posted by Frsirt, 28 vulnerabilities has been identified in Ethereal
which could be exploited by remote attackers to compromise a vulnerable
system or cause a denial of service.

Thanks for removing it from ports a long time ago.

-- Will



Re: How will OpenBSD Defend against Virtual Rootkits?

2006-04-25 Thread Otto Moerbeek
On Tue, 25 Apr 2006, Nick Holland wrote:

 On Tue, Apr 25, 2006 at 07:32:41AM -0500, Dave Feustel wrote:
  This question comes to mind as a result of my reading just now 
  
  VM Rootkits: The Next Big Threat? 
  By Ryan Naraine 
  March 10, 2006
  
  http://www.eweek.com/article2/0,1895,193,00.asp
  
 Not much that can be done.
 As has always been said, if someone has physical access to the box, Game
 Over.  VMs just give someone a new way to have physical access to the
 box.
 
 Now, if only we could do away with the myth that an OS can really find
 problems within itself (such as malware scanners that claim to fix
 problems on infested machines).  Since that won't go away, I guess it
 isn't surprising that people expect that a guest OS can detect or deal
 with a problem on the host OS.

Yeah, it's sad but true. A related myth is that running an OS inside
a VM increases security. I would argue to opposite:

Instead of having the potential to exploit bugs in hardware, os and
userland code, I get the extra oppurtunity to exploit bugs in the VM
layer as well! 

-Otto



OT - Get off the computer! ;)

2006-04-25 Thread Terry
My 3.9 CDs came in Saturday but I can't get my 3yo son off the
computer long enough to do the upgrade. :/

http://tyson.homeunix.org/pics/bjet_1.jpg
http://tyson.homeunix.org/pics/bjet_2.jpg

II Joshua 24:15
Choose you this day what OS you will use; whether the OS of the free,
functional, and secure, or the OS of the Blobs in whose land ye dwell:
but as for me and my house, we will use OpenBSD.

Thanks OpenBSD
-- 
Terry
http://tyson.homeunix.org



Re: OT - Get off the computer! ;)

2006-04-25 Thread Stuart Henderson
On 2006/04/25 08:31, Terry wrote:
 My 3.9 CDs came in Saturday but I can't get my 3yo son off the
 computer long enough to do the upgrade. :/
 
 http://tyson.homeunix.org/pics/bjet_1.jpg
 http://tyson.homeunix.org/pics/bjet_2.jpg

My 2.75yo has an old summit48 (not quite working right) and a handful
of patch leads that proves a reasonably good distraction, though the
FC array I've got formatting on the kitchen table seems to interest
him more for some reason...



Re: REPOST: console on 3.9-current question

2006-04-25 Thread Darrin Chandler
On Tue, Apr 25, 2006 at 06:41:58AM -0500, J.D. Bronson wrote:
 I was surprised that no one replied on this list about this 
 issue...so I wanted to repost it ONE time. Someone out there must 
 also be seeing this and if its normal..I would like to know...(and if 
 its normal..why)

I just got my CDs last night and haven't yet upgraded anything. We still
have a while before the official release. Now there are plenty of people
running current and testing, but still not nearly as many as are running
release or stable. I'm pretty sure if the devs were working at 300 baud
they would have done something about it. Ditto if reports of same were
flooding in. So maybe at this time it's just you and maybe a couple of
others who haven't said anything on the lists.

In the meantime, perhaps you could try to debug a bit. Since you have
identical machines you've got a nice opportunity to compare 3.8 and 3.9
behavior. Start with comparing simple stuff like all the nice numbers in
top (interrupts?). Is the whole machine sluggish, or just console
interaction? Check plus39.html and see if anything jumps out at you as
possibly causing this problem. Compare dmesg between versions to see if
anything significant went missing or appeared. In other words, poke
around.

I'll be upgrading to 3.9 soon on a small variety of hardware, and if I
see anything similar I'll try to figure it out and post here...

-- 
Darrin Chandler|  Phoenix BSD Users Group
[EMAIL PROTECTED]   |  http://bsd.phoenix.az.us/
http://www.stilyagin.com/  |



tape,seagate,trouble

2006-04-25 Thread Mats
Hello
I have some trouble with a seagate tapebackup (Seagate STTM20).
It's an ide type.
With OpenBSD mt gives the ouput:
ioctl MTIOCGET: ivalid argument

mt rewind works fine.
When i try mt status under NetBSD it says:
SCSI tape drive, residual=0
ds=3Mounted
er=0
blocksize: 512 (0, 0, 0, 0)
density: 0 (0, 0, 0, 0)
current file number: 0
current block number: 0

Under NetBSD dump/restore works fine, but not under OpenBSD. The
bios on the motherboard doesn't find the seagate, it says not
detected. I have tried pnp and not pnp in bios without any differents.

My dmesg says:
iide1 at pci0 dev 15 function 1 VIA VT82C571 IDE rev 0x06: ATA133, channel 0 
configured to compatibility, channel 1 configured to compatibility
wd0 at pciide1 channel 0 drive 0: ST340014A
wd0: 16-sector PIO, LBA48, 38166MB, 78165360 sectors
wd0(pciide1:0:0): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide1 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: _NEC, DVD_RW ND-3550A, 1.04 SCSI0 5/cdrom 
removable
atapiscsi1 at pciide1 channel 1 drive 1
scsibus1 at atapiscsi1: 2 targets
st0 at scsibus1 targ 0 lun 0: Seagate, STT2A, 8A51 SCSI2 1/sequential 
removable
st0: drive empty or not ready
cd0(pciide1:1:0): using PIO mode 4, Ultra-DMA mode 2
st0(pciide1:1:1): using PIO mode 4, DMA mode 2
uhci0 at pci0 dev 16 function 0 VIA VT83C572 USB rev 0x81: irq 11
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: VIA UHCI root hub, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1 at pci0 dev 16 function 1 VIA VT83C572 USB rev 0x81: irq 11
usb1 at uhci1: USB revision 1.0
uhub1 at usb1
uhub1: VIA UHCI root hub, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2 at pci0 dev 16 function 2 VIA VT83C572 USB rev 0x81: irq 10
usb2 at uhci2: USB revision 1.0
uhub2 at usb2
uhub2: VIA UHCI root hub, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
uhci3 at pci0 dev 16 function 3 VIA VT83C572 USB rev 0x81: irq 10
usb3 at uhci3: USB revision 1.0
uhub3 at usb3
uhub3: VIA UHCI root hub, rev 1.00/1.00, addr 1
uhub3: 2 ports with 2 removable, self powered
pcib0 at pci0 dev 17 function 0 VIA VT8237 ISA rev 0x00
vr0 at pci0 dev 18 function 0 VIA RhineII-2 rev 0x78: irq 11 address 
00:11:2f:b4:14:99
rlphy0 at vr0 phy 1: RTL8201L 10/100 PHY, rev. 1
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: PC speaker
spkr0 at pcppi0
sysbeep0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
lm0 at isa0 port 0x290/8: W83627THF
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
biomask ff6d netmask ff6d ttymask ffef
pctr: user-level cycle counter enabled
dkcsum: wd0 matches BIOS drive 0x80
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302
syncing disks... 
OpenBSD 3.8-stable (ORION) #0: Sat Apr 22 23:58:14 CEST 2006
[EMAIL PROTECTED]:/usr/local/src/sys/arch/i386/compile/ORION
cpu0: Intel(R) Celeron(R) CPU 2.26GHz (GenuineIntel 686-class) 2.27 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,CNXT-ID
real mem  = 535601152 (523048K)
avail mem = 481816576 (470524K)
using 4278 buffers containing 26882048 bytes (26252K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(00) BIOS, date 09/26/05, BIOS32 rev. 0 @ 0xf0010
pcibios0 at bios0: rev 2.1 @ 0xf/0x1
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf5a50/192 (10 entries)
pcibios0: no compatible PCI ICU found: ICU vendor 0x1106 product 0x3227
pcibios0: Warning, unable to fix up PCI interrupt routing
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc/0xf400 0xcf800/0x1800
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 vendor VIA, unknown product 0x3168 rev 0x82
ppb0 at pci0 dev 1 function 0 VIA VT8377 PCI-PCI rev 0x00
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 Nvidia GeForce4 MX 420 rev 0xa3
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
pciide0 at pci0 dev 15 function 0 VIA VT8237 SATA rev 0x80: DMA
pciide0: using irq 10 for native-PCI interrupt
pciide1 at pci0 dev 15 function 1 VIA VT82C571 IDE rev 0x06: ATA133, channel 
0 configured to compatibility, channel 1 configured to compatibility
wd0 at pciide1 channel 0 drive 0: ST340014A
wd0: 16-sector PIO, LBA48, 38166MB, 78165360 sectors
wd0(pciide1:0:0): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide1 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: _NEC, DVD_RW ND-3550A, 1.04 SCSI0 5/cdrom 
removable
atapiscsi1 at pciide1 channel 1 drive 1
scsibus1 at atapiscsi1: 2 targets
st0 at scsibus1 targ 0 lun 0: 

Re: firewall pf rules multiple dhcp servers

2006-04-25 Thread Chris Smith
On Monday 24 April 2006 19:19, [EMAIL PROTECTED] wrote:
 i have a firewall hook up to my cable modem
 my external interface has a dynamic address from the dhcp server at
 my isp i have a dhcp server on the firewall for two subnets
 subnet a local network
 subnet b wireless network
 i need the external interface to request and recieve offers from the
 dhcp server at the isp and the local and wireless network to request
 and recieve offers from the dhcp server on the firewall when a
 request is made from the local network both the internal and the
 external dhcp server responds

 my pf rules

I don't think the pf rules are useful as I read something about dhcp 
working at the bpf level and not pf.
It looks like you simply need to configure your dhcp server correctly to 
listen on only the internal and wireless networks.
Your external nic would then get it's info from your ISP, and the others 
from your local server (their requests wouldn't get forwarded to your 
ISP without running a relay).

Chris



Re: firewall pf rules multiple dhcp servers

2006-04-25 Thread Chris Smith
On Tuesday 25 April 2006 13:04, Chris Smith wrote:
 nic would then get it's info from your

ugly grammar error
should be its instead of it's, sorry for that



Re: 3.9 sightings :: ot

2006-04-25 Thread Greg Thomas
On 4/25/06, Gordon Grieder [EMAIL PROTECTED] wrote:
 On Mon, Apr 24, 2006 at 08:45:15PM -0700, Karsten McMinn wrote:
  the partys starting over here in the west (usa). props if
  you can recognize my first server getting the honors.
  my thanks and my raised glass to Theo and the team.

 My personal one arrived yesterday wrapped in a nice Stop Blob T here in
 Winnipeg, MB, Canada. (still waiting for this fiscal's budget to go
 through at work for the work sets... grrr.)

 When I see the white packages every 6 months in the mail box, I shake
 it and listen for the sounds of broken tabs. Not a single one this
 time! ;)


I hadn't had a broken tab until 3.8 when just about everyone was
broken, and they were even wrapped in a tshirt.  But these sets are
fine again.  Whew.

Greg



Re: tape,seagate,trouble

2006-04-25 Thread Juha Erkkila
On Tue, Apr 25, 2006 at 06:00:51PM +0200, Mats wrote:
 Under NetBSD dump/restore works fine, but not under OpenBSD. The
 bios on the motherboard doesn't find the seagate, it says not
 detected. I have tried pnp and not pnp in bios without any differents.

this is probably the atapi tape drive bug that was fixed during the
3.9 development cycle.  wait for 3.9 and upgrade (or ask me for a
patch if you absolutely cannot wait)

Juha



Re: 3.7: weird IP address problem

2006-04-25 Thread D. E. Evans
   Upgrade from 3.7 to 3.9. It may be fixed in 3.9 (I remember stuff that was

For the sake of clarity, upgrade to 3.8 first, *then* 3.9.



Re: Congress readies broad new digital copyright bill

2006-04-25 Thread hoax xoah
yo texnika, where are you from in ukraine? I don't believe you should worry
about that stupid DMCA shit... As far as I know things are actually pretty
loose when it comes to copyright  in  Ukraine! No offense, but I think
you're crazy!

On 4/25/06, Alexey E. Suslikov [EMAIL PROTECTED] wrote:

 Congress readies broad new digital copyright bill
 by Declan McCullagh



http://news.com.com/Congress+readies+broad+new+digital+copyright+bill/2100-10
28_3-6064016.html

 Quote:

 For the last few years, a coalition of technology companies, academics and
 computer programmers has been trying to persuade Congress to scale back
 the
 Digital Millennium Copyright Act.

 Now Congress is preparing to do precisely the opposite. A proposed
 copyright
 law seen by CNET News.com would expand the DMCA's restrictions on software
 that can bypass copy protections and grant federal police more wiretapping
 and enforcement powers.

 ...



Re: advantages/disadvantages of kernel pppoe(4) vs userland pppoe(8)?

2006-04-25 Thread Gabriel M. Wachman
 Hi,
 
 I'm about to setup up ADSL at home for the first time, using the
 following network topology:
 
 ADSL+---+  +--+ +--+
 to  - |  DSL  |--- | firewall | - | ethernet |
 ISP | modem |  pppoe   | + router | |  switch  |
  +---+  | + nat| +--+
 +--+  |   ||
   V   VV
to other computers
 
 The firewall/router/nat box is (will be when I get this setup)
 an old 486 laptop with 2 pcmcia ethernet cards, running 3.9-stable.
 (Yes, I've ordered a CD; until it arrives I'm using 3.8-stable.)
 
 I already have the (external) DSL modem, and from talking to other
 Unix-savvy customers of my ISP (arcor.de), their setup is that the
 DSL modem talks pppoe to me (in this case to my firewall/router/nat
 box).  From looking at the FAQ section 6, it seems I have two basic
 options available doing this in OpenBSD: pppoe(4) in the kernal, and
 pppoe(8) in userland.  My question is, what are the relative
 advantages/disadvantages of these?
 
 The obvious tradeoff is performance: I expect pppoe(8) to be slower
 due to the extra kernel/user-space crossings for each packet.  My
 ADSL is 6M bits/sec downstream, 0.5M upstream.
 
 But are there other significant differences in
 * support for pppoe features?
 * ease of configuration?
 * reliability?

I haven't been using pppoe(4) or pppoe(8) for very long, but I ended up
going with pppoe(8) because it will automatically populate
/etc/resolv.conf. I don't know of a trivial way to get pppoe(4) to do
this. See this thread, for instance:
http://groups.google.com/group/lucky.openbsd.misc/browse_thread/thread/8e91d354b340cb1c/334c6880e7cf3a38?lnk=stq=openbsd++pppoe+resolv.confrnum=15hl=en#334c6880e7cf3a38



Re: Anyone using ATI Radeon XPRESS 200 Graphics Chipset on 3.8 ?

2006-04-25 Thread pedro la peu
 Is ATI Radeon XPRESS 200 Graphics Chipset fully supported on 3.8?

No, not if I remember correctly.

 Anyone using it successfully?

For about a year...

 But finding it difficult to configure X to get Color Depth of 24 :-(

 Any pointers to get X running fine is highly appreciated :-)

I had to hack on radeon(4) in X.Org 6.8.2 to add support for the GPU 
(and fix a nasty cache flush bug). I could dig out the patch if you 
feel adventurous...

3.9 (X.Org 6.9.0) works fine with the XPRESS 200 chipset. Have you 
ordered your CD's yet? :-)



Re: tape,seagate,trouble

2006-04-25 Thread Joachim Schipper
On Tue, Apr 25, 2006 at 06:00:51PM +0200, Mats wrote:
 Hello
 I have some trouble with a seagate tapebackup (Seagate STTM20).
 It's an ide type.
 With OpenBSD mt gives the ouput:
 ioctl MTIOCGET: ivalid argument
 
 mt rewind works fine.
 When i try mt status under NetBSD it says:
 SCSI tape drive, residual=0
 ds=3Mounted
 er=0
 blocksize: 512 (0, 0, 0, 0)
 density: 0 (0, 0, 0, 0)
 current file number: 0
 current block number: 0
 
 Under NetBSD dump/restore works fine, but not under OpenBSD. The
 bios on the motherboard doesn't find the seagate, it says not
 detected. I have tried pnp and not pnp in bios without any differents.
 
 My dmesg says:

 st0 at scsibus1 targ 0 lun 0: Seagate, STT2A, 8A51 SCSI2 1/sequential 
 removable
 st0: drive empty or not ready
 cd0(pciide1:1:0): using PIO mode 4, Ultra-DMA mode 2
 st0(pciide1:1:1): using PIO mode 4, DMA mode 2

Hmm, since you typo'ed the command that doesn't work, debugging might be
difficult. Are you sure you are not trying anything strange, and that
$TAPE is either unset or set to something appropriate?

Joachim



Re: Tape drive DLT VS160

2006-04-25 Thread Planck
 Yea it would normally be mt comp on or mt compress on

Yes, but probably on FreeBSD not OpenBSD :( Any other sugestions ?

Regards,
Darek



Re: tape,seagate,trouble

2006-04-25 Thread Mats
On Tue, Apr 25, 2006 at 09:24:57PM +0300, Juha Erkkila wrote:
 On Tue, Apr 25, 2006 at 06:00:51PM +0200, Mats wrote:
  Under NetBSD dump/restore works fine, but not under OpenBSD. The
  bios on the motherboard doesn't find the seagate, it says not
  detected. I have tried pnp and not pnp in bios without any differents.
 
 this is probably the atapi tape drive bug that was fixed during the
 3.9 development cycle.  wait for 3.9 and upgrade (or ask me for a
 patch if you absolutely cannot wait)

Thanks a lot Juha. It's ok for me to wait for the 3.9 release.
Even if it takes a little more time to get it here in Sweden.

// Regards 



Re: tape,seagate,trouble

2006-04-25 Thread Mats
On Tue, Apr 25, 2006 at 11:14:50PM +0200, Joachim Schipper wrote:
 On Tue, Apr 25, 2006 at 06:00:51PM +0200, Mats wrote:
  Hello
  I have some trouble with a seagate tapebackup (Seagate STTM20).
  It's an ide type.
  With OpenBSD mt gives the ouput:
  ioctl MTIOCGET: ivalid argument

 Hmm, since you typo'ed the command that doesn't work, debugging might be
 difficult. Are you sure you are not trying anything strange, and that
 $TAPE is either unset or set to something appropriate?

$TAPE is unset. The tape is winding so I have contact. I will try
again when I have the 3.9 release. But thanks for your
suggestions anyway (and excuse eventually bad english).

// Regards from Sweden



Re: firewall pf rules multiple dhcp servers

2006-04-25 Thread jacek
who cares :)


On 4/25/06, Chris Smith [EMAIL PROTECTED] wrote:

 On Tuesday 25 April 2006 13:04, Chris Smith wrote:
  nic would then get it's info from your

 ugly grammar error
 should be its instead of it's, sorry for that



Re: Verizon PC5740 card (Curitel Communications) wireless WAN card

2006-04-25 Thread Chris Paul
On Mon, 24 Apr 2006 22:59:32 -0400
Ray Lai [EMAIL PROTECTED] wrote:

  It works quite well now except that almost everytime I pull out the card, 
  OpenBSD freezes. I guiltily admit that this may be due to me using an 
  instable window manager (fvwm 2.5). I supposed I could try killing the 
  window manager next time.
 
 Try doing that in console mode instead of X, you'll probably get a
 kernel panic.  Follow the instructions.

(I should know better).

OK I did that but since I'm out of town right now I don't have a serial cable 
and am way too lazy go to Fry's right now or to type out trace and ps 
output... but here is the fault itself. I will capture the trace and ps when I 
get back home.


Apr 25 17:29:12 pollen /bsd: umodem0: at uhub4 port 1 (addr 2) disconnected
Apr 25 17:29:12 pollen /bsd: ucom0 detached
Apr 25 17:29:12 pollen /bsd: umodem0 detached
Apr 25 17:29:12 pollen /bsd: uhub4 detached
Apr 25 17:29:12 pollen /bsd: usb4 detached
Apr 25 17:29:12 pollen /bsd: ohci1: 1 scheduling overruns
Apr 25 17:29:12 pollen /bsd: ohci1: resume detect
Apr 25 17:29:12 pollen /bsd: ohci1: unrecoverable error, controller halted
Apr 25 17:29:12 pollen /bsd: ohci1: blocking intrs 0x18
ohci0 detached
uhub6: at usb5 (addr 1) disconnected
uhub6 detached
uvm_vault(0xd060e200, 0xdeadc000, 0, 1) - d
kernel: page fault trap, code=0
Stopped at usbd_do_request_flags_pipe+0xe: mov0x254(%eax),%eax


CP
-- 
Chris Paul   

Sentinare Messaging Solutions
106 Maywood Drive, Boulder Creek, CA 95006
web: http://www.sentinare.com
phone: +1 (877) 727-9786

The information transmitted is intended only for the person or entity to
which it is addressed and may contain confidential and/or privileged
material.  Any review, retransmission, dissemination or other use of, or
taking of any action in reliance upon, this information by persons or
entities other than the intended recipient is prohibited.
Sentinare Messaging Solutions, Inc. is a California Corporation.



Re: tape,seagate,trouble

2006-04-25 Thread Fred Crowson

Mats wrote:

On Tue, Apr 25, 2006 at 09:24:57PM +0300, Juha Erkkila wrote:

On Tue, Apr 25, 2006 at 06:00:51PM +0200, Mats wrote:

Under NetBSD dump/restore works fine, but not under OpenBSD. The
bios on the motherboard doesn't find the seagate, it says not
detected. I have tried pnp and not pnp in bios without any differents.

this is probably the atapi tape drive bug that was fixed during the
3.9 development cycle.  wait for 3.9 and upgrade (or ask me for a
patch if you absolutely cannot wait)


Thanks a lot Juha. It's ok for me to wait for the 3.9 release.
Even if it takes a little more time to get it here in Sweden.

// Regards 


if you order now from:
https://https.openbsd.org/cgi-bin/order.eu
you might get your 3.9 CD's before release date :~)
It's worth it.
Fred
--
https://https.openbsd.org/cgi-bin/order



Finally got my 3.9 CDs... Congratz to the artists for the artwork

2006-04-25 Thread Jean-Daniel Beaubien
I was beginning to think that us up in Canada had been forgotten, but 
then yesterday I got my CDs.


I just wanted to say thanks for another great release.

I have 2 more things to say:

   1) for the first time the little pins holding the CDs were all 
intact on delivery...WOOT
   2) the artwork is REALLY nice I find (the CD covers  case cover), 
and the song is pretty cool too.  Congratz to whoever did those.


Jean-Daniel



Re: REPOST: console on 3.9-current question

2006-04-25 Thread Adriaan Misc
On 4/25/06, J.D. Bronson [EMAIL PROTECTED] wrote:
 I was surprised that no one replied on this list about this
 issue...so I wanted to repost it ONE time. Someone out there must
 also be seeing this and if its normal..I would like to know...(and if
 its normal..why)

 REPOST:

 After further testing, its not only the console, but also over SSH.
 (on the same LAN segment) - so that would eliminate a few possibilities.

 I noticed this awhile back on 3.9-current and it is still there in
 the latest snapshot I tried (4/22)...I am hoping someone has seen this..

 I installed from the snapshot and didnt customize a thing. When the
 machine is done loading (IBM rack server)...I simply logged in (as
 root at the moment).

 I am not running serial or headless. I have a normal monitor/keyboard
 (PS2) plugged in.

 When I type at the console to begin to setup the machine, the
 characters do not follow me in real time as I type. Its like I am on
 an overseas long distance 300 baud dialup line.

 There is quite a delay and sometimes I can type several words and
 then a few seconds later - they show up.

 This does not happen on the same machine if I install 3.8.

 I have (4) identical machines (make/model/ram/cpu/hard drives) and
 they all work fine with 3.8 - it is only past 3.8 that I noticed this.

 Any thoughts?

 -JD

From http://openbsd.unixtech.be/report.html:
[quote]

Current version problem reports

If your problem is with the current source tree rather than a release
or stable tree,

   1. Test the problem at least twice, with source updated a few days apart.

[endquote]
Or try a new current snapshot.. You now even have the choice between
non-PAE and very-close-to-PAE ones ;)

==Adriaan==



nfe0: tx v1 error 0x6001

2006-04-25 Thread Bob Bostwick \(Lists\)
Anyone else get these errors with the nfe driver?  Not really sure what
to do to troubleshoot the problem.  This seems to happen during heavy
traffic times.

nfe0: tx v1 error 0x6001
nfe0: watchdog timeout
nfe0: tx v1 error 0x6001
nfe0: tx v1 error 0x6001

Here's my dmesg if it helps...

dmesg
OpenBSD 3.9-current (GENERIC) #695: Mon Apr 17 14:37:08 MDT 2006
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: AMD Athlon(tm) XP 2600+ (AuthenticAMD 686-class, 256KB L2 cache)
2.09 GHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,
MMX,FXSR,SSE
real mem  = 536375296 (523804K)
avail mem = 482394112 (471088K)
using 4278 buffers containing 26923008 bytes (26292K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(23) BIOS, date 05/14/03, BIOS32 rev. 0 @
0xfb490
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
apm0: flags 70102 dobusy 1 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xf/0xdf84
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdeb0/208 (11 entries)
pcibios0: PCI Exclusive IRQs: 5 11
pcibios0: no compatible PCI ICU found
pcibios0: Warning, unable to fix up PCI interrupt routing
pcibios0: PCI bus #2 is the last bus
bios0: ROM list: 0xc/0xa000 0xcc000/0x4000! 0xd/0x1800
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 NVIDIA nForce2 PCI rev 0xa2
NVIDIA nForce2 rev 0xa2 at pci0 dev 0 function 1 not configured
NVIDIA nForce2 rev 0xa2 at pci0 dev 0 function 2 not configured
NVIDIA nForce2 rev 0xa2 at pci0 dev 0 function 3 not configured
NVIDIA nForce2 rev 0xa2 at pci0 dev 0 function 4 not configured
NVIDIA nForce2 rev 0xa2 at pci0 dev 0 function 5 not configured
pcib0 at pci0 dev 1 function 0 NVIDIA nForce2 ISA rev 0xa3
nviic0 at pci0 dev 1 function 1 NVIDIA nForce2 SMBus rev 0xa2
iic0 at nviic0
iic1 at nviic0
asbtm0 at iic1 addr 0x2d
wbenv0 at iic1 addr 0x2e: W83L784TS-L
ohci0 at pci0 dev 2 function 0 NVIDIA nForce2 USB rev 0xa3: irq 11,
version 1.0, legacy support
usb0 at ohci0: USB revision 1.0
uhub0 at usb0
uhub0: NVIDIA OHCI root hub, rev 1.00/1.00, addr 1
uhub0: 3 ports with 3 removable, self powered
ohci1 at pci0 dev 2 function 1 NVIDIA nForce2 USB rev 0xa3: irq 5,
version 1.0, legacy support
usb1 at ohci1: USB revision 1.0
uhub1 at usb1
uhub1: NVIDIA OHCI root hub, rev 1.00/1.00, addr 1
uhub1: 3 ports with 3 removable, self powered
ehci0 at pci0 dev 2 function 2 NVIDIA nForce2 USB rev 0xa3: irq 11
usb2 at ehci0: USB revision 2.0
uhub2 at usb2
uhub2: NVIDIA EHCI root hub, rev 2.00/1.00, addr 1
uhub2: 6 ports with 6 removable, self powered
nfe0 at pci0 dev 4 function 0 NVIDIA nForce2 LAN rev 0xa1: irq 11,
address 00:e0:18:db:d5:96
rlphy0 at nfe0 phy 1: RTL8201L 10/100 PHY, rev. 1
auich0 at pci0 dev 6 function 0 NVIDIA nForce2 AC97 rev 0xa1: irq 5,
nForce2 AC97
ac97: codec id 0x414c4720 (Avance Logic ALC650)
ac97: codec features 20 bit DAC, 18 bit ADC, Realtek 3D
audio0 at auich0
ppb0 at pci0 dev 8 function 0 NVIDIA nForce2 PCI-PCI rev 0xa3
pci1 at ppb0 bus 1
dc0 at pci1 dev 6 function 0 Lite-On PNIC rev 0x20: irq 11, address
00:a0:cc:22:cd:f6
mtdphy0 at dc0 phy 1: MTD972 10/100 PHY, rev. 8
em0 at pci1 dev 7 function 0 Intel PRO/1000 (82542) rev 0x03: irq 5,
address 00:03:47:08:f1:b5
ral0 at pci1 dev 8 function 0 Ralink RT2560 rev 0x01: irq 11, address
00:14:85:b6:5c:8e
ral0: MAC/BBP RT2560 (rev 0x04), RF RT2525
xl0 at pci1 dev 9 function 0 3Com 3c905B 100Base-TX rev 0x24: irq 5,
address 00:50:04:05:44:be
exphy0 at xl0 phy 24: 3Com internal media interface
fxp0 at pci1 dev 10 function 0 Intel 8255x rev 0x02, i82557: irq 11,
address 00:a0:c9:d8:1c:f1
inphy0 at fxp0 phy 1: i82555 10/100 PHY, rev. 0
pciide0 at pci0 dev 9 function 0 NVIDIA nForce2 IDE rev 0xa2: DMA,
channel 0 configured to compatibility, channel 1 configured to
compatibility
wd0 at pciide0 channel 0 drive 0: WDC WD400BB-00CAA0
wd0: 16-sector PIO, LBA, 38166MB, 78165360 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: MITSUMI, CD-ROM FX54++W, U01L SCSI0
5/cdrom removable
cd0(pciide0:1:0): using PIO mode 0
ppb1 at pci0 dev 30 function 0 NVIDIA nForce2 AGP rev 0xa2
pci2 at ppb1 bus 2
vga1 at pci2 dev 0 function 0 NVIDIA GeForce2 MX rev 0xa1
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: PC speaker
spkr0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
biomask ff65 netmask ff65 ttymask 

pppoe(4) chap/md5 vs. chap/microsoft: SOLVED (kinda)

2006-04-25 Thread Yuri Spirin
Ladies and gentlemen, nevermind.

Finally, I used ppp(8) with pppoe(8) and it works fine with MS-CHAP.

Sorry for the noise.

Best regards,
Yuri Spirin



 Hello, misc.

 I  have  a connection to ISP that requires PPPoE. No hardware like DSL
 modem/router,  just  Ethernet cable from ISP. I setting up PPPoE on my
 3.8-release router using pppoe(4).

 # ifconfig pppoe0 create
 # cat /etc/hostname.pppoe0
 pppoedev fxp2
 !/sbin/ifconfig fxp2 up
 !/usr/sbin/spppcontrol \$if \
  myauthproto=chap \
  myauthname=mylogin \
  myauthkey=mypassword
 !/sbin/ifconfig \$if inet 0.0.0.0 0.0.0.1 netmask 0x
 !/sbin/route add default 0.0.0.1
 up

 All the way like in man 4 pppoe.

 # sh /etc/netstart
 # spppcontrol pppoe0
 pppoe0:  phase=establish
 myauthproto=chap myauthname=mylogin
 hisauthproto=chap hisauthname=

 And connection is never up, just hangs on 'establish' phase.

 # tcpdump -neti fxp2//0:a0:c9:8c:75:67 is my MAC,
 //0:13:7f:8d:e5:1a is ISP server MAC

 0:a0:c9:8c:75:67 ff:ff:ff:ff:ff:ff 8863 32: PPPoE-Discovery
 code Initiation, version 1, type 1, id 0x, length 12
 tag Service-Name, length 0
 tag Host-Uniq, length 4 \000~\227o
 0:13:7f:8d:e5:1a 0:a0:c9:8c:75:67 8863 60: PPPoE-Discovery
 code Offer, version 1, type 1, id 0x, length 40
 tag Service-Name, length 0
 tag Host-Uniq, length 4 \000~\227o
 tag AC-Name, length 4 k7-1
 tag AC-Cookie, length 16 I'p[:eC E\221z\025\221+pk
 0:a0:c9:8c:75:67 0:13:7f:8d:e5:1a 8863 52: PPPoE-Discovery
 code Request, version 1, type 1, id 0x, length 32
 tag Service-Name, length 0
 tag AC-Cookie, length 16 I'p[:eC E\221z\025\221+pk
 tag Host-Uniq, length 4 \000~\227o
 0:13:7f:8d:e5:1a 0:a0:c9:8c:75:67 8863 60: PPPoE-Discovery
 code Confirm, version 1, type 1, id 0xf6aa, length 32
 tag Service-Name, length 0
 tag AC-Cookie, length 16 I'p[:eC E\221z\025\221+pk
 tag Host-Uniq, length 4 \000~\227o
 0:a0:c9:8c:75:67 0:13:7f:8d:e5:1a 8864 32: PPPoE-Session
 code Session, version 1, type 1, id 0xf6aa, length 12
 LCP: Configure-Request, Magic-Number=204725418, Vendor-Ext
 0:13:7f:8d:e5:1a 0:a0:c9:8c:75:67 8864 60: PPPoE-Session
 code Session, version 1, type 1, id 0xf6aa, length 21
 LCP: Configure-Request, Max-Rx-Unit=1492, Auth-Prot CHAP/Microsoft,
 Magic-Number=-421802100, Vendor-Ext
 0:a0:c9:8c:75:67 0:13:7f:8d:e5:1a 8864 31: PPPoE-Session
 code Session, version 1, type 1, id 0xf6aa, length 11
 LCP: Configure-Reject, Auth-Prot CHAP/MD5, Vendor-Ext
 0:13:7f:8d:e5:1a 0:a0:c9:8c:75:67 8864 60: PPPoE-Session
 code Session, version 1, type 1, id 0xf6aa, length 12
 LCP: Configure-Ack, Magic-Number=204725418, Vendor-Ext
 0:13:7f:8d:e5:1a 0:a0:c9:8c:75:67 8864 60: PPPoE-Session
 code Session, version 1, type 1, id 0xf6aa, length 21
 LCP: Configure-Request, Max-Rx-Unit=1492, Auth-Prot CHAP/Microsoft,
 Magic-Number=-421802100, Vendor-Ext
 0:a0:c9:8c:75:67 0:13:7f:8d:e5:1a 8864 31: PPPoE-Session
 code Session, version 1, type 1, id 0xf6aa, length 11
 LCP: Configure-Reject, Auth-Prot CHAP/MD5, Vendor-Ext
 0:13:7f:8d:e5:1a 0:a0:c9:8c:75:67 8864 60: PPPoE-Session
 code Session, version 1, type 1, id 0xf6aa, length 21
 LCP: Configure-Request, Max-Rx-Unit=1492, Auth-Prot CHAP/Microsoft,
 Magic-Number=-421802100, Vendor-Ext
 0:a0:c9:8c:75:67 0:13:7f:8d:e5:1a 8864 31: PPPoE-Session
 code Session, version 1, type 1, id 0xf6aa, length 11
 LCP: Configure-Reject, Auth-Prot CHAP/MD5
 0:13:7f:8d:e5:1a 0:a0:c9:8c:75:67 8864 60: PPPoE-Session
 code Session, version 1, type 1, id 0xf6aa, length 21
 LCP: Configure-Request, Max-Rx-Unit=1492, Auth-Prot CHAP/Microsoft,
 Magic-Number=-421802100, Vendor-Ext
 0:a0:c9:8c:75:67 0:13:7f:8d:e5:1a 8864 31: PPPoE-Session
 code Session, version 1, type 1, id 0xf6aa, length 11
 LCP: Configure-Reject, Auth-Prot CHAP/MD5
 0:13:7f:8d:e5:1a 0:a0:c9:8c:75:67 8864 60: PPPoE-Session
 code Session, version 1, type 1, id 0xf6aa, length 21
 LCP: Configure-Request, Max-Rx-Unit=1492, Auth-Prot CHAP/Microsoft,
 Magic-Number=-421802100, Vendor-Ext
 0:a0:c9:8c:75:67 0:13:7f:8d:e5:1a 8864 31: PPPoE-Session
 code Session, version 1, type 1, id 0xf6aa, length 11
 LCP: Configure-Reject, Auth-Prot CHAP/MD5, Vendor-Ext
 0:13:7f:8d:e5:1a 0:a0:c9:8c:75:67 8864 60: PPPoE-Session
 code Session, version 1, type 1, id 0xf6aa, length 21
 LCP: Configure-Request, Max-Rx-Unit=1492, Auth-Prot CHAP/Microsoft,
 Magic-Number=-421802100, Vendor-Ext
 0:a0:c9:8c:75:67 0:13:7f:8d:e5:1a 8864 31: PPPoE-Session
 code Session, version 1, type 1, id 0xf6aa, length 11
 LCP: Configure-Reject, Auth-Prot CHAP/MD5, Vendor-Ext
 0:13:7f:8d:e5:1a 0:a0:c9:8c:75:67 

Re: nfe0: tx v1 error 0x6001

2006-04-25 Thread Andreas Bartelt
Hi,

Bob Bostwick (Lists) wrote:
 Anyone else get these errors with the nfe driver?  Not really sure what
 to do to troubleshoot the problem.  This seems to happen during heavy
 traffic times.
 
 nfe0: tx v1 error 0x6001
 nfe0: watchdog timeout
 nfe0: tx v1 error 0x6001
 nfe0: tx v1 error 0x6001
 

yes, I get similar messages with nfe(4). In my case it's a couple of 
times watchdog timeout followed by a single tx v1 error 0x6001 line. 
I get these messages always right after booting my machine. The nfe(4) 
interface begins working about 20 seconds after the initial login prompt 
appears (after or short before the tx v1 error 0x6001 line is shown), 
but after this deferred interface startup, all problems are gone.

Just in case anybody wants to debug this issue, my dmesg is attached.

regards,
Andreas
OpenBSD 3.9-current (GENERIC) #0: Mon Apr 24 18:35:45 CEST 2006
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: AMD Athlon(tm) XP 2600+ (AuthenticAMD 686-class, 512KB L2 cache) 1.93 
GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE
real mem  = 536375296 (523804K)
avail mem = 482365440 (471060K)
using 4278 buffers containing 26923008 bytes (26292K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(6e) BIOS, date 07/17/03, BIOS32 rev. 0 @ 0xfb990
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
apm0: flags 70102 dobusy 1 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xf/0xd8e4
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfd820/192 (10 entries)
pcibios0: PCI Exclusive IRQs: 3 5 10 11
pcibios0: no compatible PCI ICU found
pcibios0: Warning, unable to fix up PCI interrupt routing
pcibios0: PCI bus #2 is the last bus
bios0: ROM list: 0xc/0xd000 0xd/0x1800
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 NVIDIA nForce2 PCI rev 0xc1
NVIDIA nForce2 rev 0xc1 at pci0 dev 0 function 1 not configured
NVIDIA nForce2 rev 0xc1 at pci0 dev 0 function 2 not configured
NVIDIA nForce2 rev 0xc1 at pci0 dev 0 function 3 not configured
NVIDIA nForce2 rev 0xc1 at pci0 dev 0 function 4 not configured
NVIDIA nForce2 rev 0xc1 at pci0 dev 0 function 5 not configured
pcib0 at pci0 dev 1 function 0 NVIDIA nForce2 ISA rev 0xa3
nviic0 at pci0 dev 1 function 1 NVIDIA nForce2 SMBus rev 0xa2
iic0 at nviic0
iic0: addr 0x2f 04=00 06=02 07=00 0c=00 0d=07 0e=84 0f=00 10=ca 11=10 12=00 
13=60 14=14 15=62 16=01 17=06
iic1 at nviic0
ohci0 at pci0 dev 2 function 0 NVIDIA nForce2 USB rev 0xa3: irq 11, version 
1.0, legacy support
usb0 at ohci0: USB revision 1.0
uhub0 at usb0
uhub0: NVIDIA OHCI root hub, rev 1.00/1.00, addr 1
uhub0: 3 ports with 3 removable, self powered
ohci1 at pci0 dev 2 function 1 NVIDIA nForce2 USB rev 0xa3: irq 3, version 
1.0, legacy support
usb1 at ohci1: USB revision 1.0
uhub1 at usb1
uhub1: NVIDIA OHCI root hub, rev 1.00/1.00, addr 1
uhub1: 3 ports with 3 removable, self powered
ehci0 at pci0 dev 2 function 2 NVIDIA nForce2 USB rev 0xa3: irq 5
usb2 at ehci0: USB revision 2.0
uhub2 at usb2
uhub2: NVIDIA EHCI root hub, rev 2.00/1.00, addr 1
uhub2: 6 ports with 6 removable, self powered
nfe0 at pci0 dev 4 function 0 NVIDIA nForce2 LAN rev 0xa1: irq 11, address 
00:0c:76:ff:b6:f0
icsphy0 at nfe0 phy 1: ICS1893 10/100 PHY, rev. 1
ppb0 at pci0 dev 8 function 0 NVIDIA nForce2 PCI-PCI rev 0xa3
pci1 at ppb0 bus 1
emu0 at pci1 dev 9 function 0 Creative Labs SoundBlaster Live rev 0x05: irq 10
ac97: codec id 0x83847609 (SigmaTel STAC9721/23)
ac97: codec features 18 bit DAC, 18 bit ADC, SigmaTel 3D
audio0 at emu0
Creative Labs PCI Gameport Joystick rev 0x05 at pci1 dev 9 function 1 not 
configured
pciide0 at pci0 dev 9 function 0 NVIDIA nForce2 IDE rev 0xa2: DMA, channel 0 
configured to compatibility, channel 1 configured to compatibility
wd0 at pciide0 channel 0 drive 0: SAMSUNG SV1203N
wd0: 16-sector PIO, LBA48, 114498MB, 234493056 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
pciide0: channel 1 disabled (no drives)
ppb1 at pci0 dev 30 function 0 NVIDIA nForce2 AGP rev 0xc1
pci2 at ppb1 bus 2
vga1 at pci2 dev 0 function 0 ATI Radeon 9600 Pro rev 0x00
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
ATI Radeon 9600 Pro Sec rev 0x00 at pci2 dev 0 function 1 not configured
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pmsi0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pmsi0 mux 0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: PC speaker
spkr0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
lm0 at isa0 port 0x290/8: W83627HF
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
biomask eb6d netmask eb6d ttymask fbef
pctr: user-level cycle 

Re: firewall pf rules multiple dhcp servers

2006-04-25 Thread Nick Guenther
On 4/25/06, jacek [EMAIL PROTECTED] wrote:

 On 4/25/06, Chris Smith [EMAIL PROTECTED] wrote:
 
  On Tuesday 25 April 2006 13:04, Chris Smith wrote:
   nic would then get it's info from your
 
  ugly grammar error
  should be its instead of it's, sorry for that

 who cares :)

The programmer in me says it should be it's and to hell with
'standard english'. So there.