Re: ath(4) testers needed: AR2413, AR5413, AR5424 and AR5212 11a mode

2007-01-09 Thread Travers Buda
Here's a dmesg from a machine with an AR2413. ifconfig -M works correctly, but 
it won't associate to an AP. 

Any update status on these chipsets?

OpenBSD 4.0-current (GENERIC) #1342: Sun Jan  7 23:55:37 MST 2007
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel Pentium III (GenuineIntel 686-class) 498 MHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE
real mem  = 167276544 (163356K)
avail mem = 144809984 (141416K)
using 2072 buffers containing 8486912 bytes (8288K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(75) BIOS, date 01/14/00, BIOS32 rev. 0 @ 0xfd840, 
SMBIOS rev. 2.3 @ 0xe3010 (49 entries)
bios0: Gateway Solo 9300 Pro
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
apm0: flags 30102 dobusy 0 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xfd840/0x7c0
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdef0/240 (13 entries)
pcibios0: PCI Interrupt Router at 000:07:0 (Intel 82371FB ISA rev 0x00)
pcibios0: PCI bus #3 is the last bus
bios0: ROM list: 0xc/0x1 0xe/0x4000!
acpi at mainbus0 not configured
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 Intel 82443BX AGP rev 0x03
ppb0 at pci0 dev 1 function 0 Intel 82443BX AGP rev 0x03
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 ATI Mobility 1 rev 0x64
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
pcib0 at pci0 dev 7 function 0 Intel 82371AB PIIX4 ISA rev 0x02
pciide0 at pci0 dev 7 function 1 Intel 82371AB IDE rev 0x01: DMA, channel 0 
wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: TOSHIBA MK6014MAP
wd0: 16-sector PIO, LBA, 5729MB, 11733120 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
atapiscsi0 at pciide0 channel 1 drive 1
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: TEAC, CD-224E, K.0B SCSI0 5/cdrom removable
cd0(pciide0:1:1): using PIO mode 4, DMA mode 2
uhci0 at pci0 dev 7 function 2 Intel 82371AB USB rev 0x01: irq 5
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
piixpm0 at pci0 dev 7 function 3 Intel 82371AB Power rev 0x03: SMI
iic0 at piixpm0
maestro0 at pci0 dev 8 function 0 ESS Maestro 2E rev 0x10: irq 5
maestro0: maestro_read_codec() RW_DONE timed out.
maestro0: resetting codec
ac97: codec id 0x83847644 (SigmaTel STAC9744/45)
ac97: codec features 18 bit DAC, 18 bit ADC, SigmaTel 3D
audio0 at maestro0
cbb0 at pci0 dev 10 function 0 TI PCI1450 CardBus rev 0x03: irq 9
cbb1 at pci0 dev 10 function 1 TI PCI1450 CardBus rev 0x03: irq 9
vendor 3Com, unknown product 0x1006 (class communications subclass 
miscellaneous, rev 0x00) at pci0 dev 12 function 0 not configured
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pms0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pms0 mux 0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: PC speaker
spkr0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
cardslot0 at cbb0 slot 0 flags 0
cardbus0 at cardslot0: bus 2 device 0 cacheline 0x0, lattimer 0x20
pcmcia0 at cardslot0
cardslot1 at cbb1 slot 1 flags 0
cardbus1 at cardslot1: bus 3 device 0 cacheline 0x0, lattimer 0x20
pcmcia1 at cardslot1
biomask ef65 netmask ef65 ttymask ffe7
pctr: 686-class user-level performance counters enabled
mtrr: Pentium Pro MTRR support
dkcsum: wd0 matches BIOS drive 0x80
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302
ath0 at cardbus0 dev 0 function 0 Atheros Communications, Inc., 
AR5001--, Wireless LAN Reference Card: irq 9
ath0: AR2413 7.8 phy 4.5 rf 5.6, WOR0W, address 00:11:50:d9:18:2c

Travers Buda



difference between macros and tables in pf

2007-01-09 Thread Artyom Goryainov
Is any difference when to use macros or tables if there is no need in
storing many adresses



Re: difference between macros and tables in pf

2007-01-09 Thread Joachim Schipper
On Tue, Jan 09, 2007 at 01:43:45PM +0500, Artyom Goryainov wrote:
 Is any difference when to use macros or tables if there is no need in
 storing many adresses

Yes, tables are faster even for small numbers of addresses, and more
importantly can be easily manipulated while pf is running.

On the other hand, you can put a lot more things in macros than you can
put in tables... you couldn't do the $ext_if trick using only tables.

Joachim



Re: greylisting

2007-01-09 Thread Stephen Schaff

do you mean the second rdr on the !spamd-white?

well, I'm going from the example found here:
http://undeadly.org/cgi?action=articlesid=20061108134508

There's a thread about that on that page. It's my understanding that  
the first rdr quickly handles everything on the blacklist which is a  
subset of the ! whitelist - but it's faster to narrow those ones  
first, then if they get past that rule, send everything not on the  
whitelist to spamd.


Stephen

On 8-Jan-07, at 9:41 PM, Chris Kuethe wrote:


On 1/8/07, Stephen Schaff [EMAIL PROTECTED] wrote:

rdr pass on $ext_if proto tcp from spamd to port smtp \
 - 127.0.0.1 port spamd
rdr pass on $ext_if proto tcp from !spamd-white to port smtp \
 - 127.0.0.1 port spamd


why pass there?

--
GDB has a 'break' feature; why doesn't it have 'fix' too?




But do they provide hardware docs?

2007-01-09 Thread Alexey Suslikov

Hello [EMAIL PROTECTED]


January 7, 2007, Nokia launches Developer Device Program.

Nokia is launching a Developer Device Program to provide open source
developers with Nokia N800 Internet Tablets at a discount. Maemo.org
will be providing 500 devices at a price of 99 euros per device to selected
open source developers. Eligible developers will be provided a discount
code to be used at the Nokia N800 online shop.


Cool thingy. But do they provide hardware docs?

Bye.

P.S. More info about Nokia N800 device can be found on
http://www.linuxdevices.com/news/NS9981902594.html



Re: difference between macros and tables in pf

2007-01-09 Thread Moritz Grimm

Artyom Goryainov wrote:

Is any difference when to use macros or tables if there is no need in
storing many adresses


My suggestion is that you use whatever is easier for you to maintain. 
The break-even point between tables and macros was somewhere around 5-8 
addresses, IIRC, where a small number of occurrences like this won't 
make up much of a performance difference.



Moritz

P.S.: The exact numbers are in the pf mailing list's archives, in a mail 
from [EMAIL PROTECTED]




Re: -current change affects video playback

2007-01-09 Thread Moritz Grimm

Christian Weisgerber wrote:

This is weird.
Some change to -current between ~Dec 22 and ~Jan 8 has caused video
playback (mplayer playing DivX with the xv driver) on my Thinkpad
X40 to become headache-inducingly jerky.  mplayer itself is not
aware of the problem, it doesn't report a low frame rate.

- It's in the kernel.  Simply going back to my old kernel (Dec 22)
  makes the problem go away.
- It isn't the sys/dev/pci/agp.c changes.

Does anybody else see this?


I see it as well, although the jerkyness is only noticable here, not 
headache-inducing (IMO, on an AMD 2600+ with a Geforce FX6600.)


Admittedly, I didn't look into this issue, so I can't comment further on 
the reason(s).



Moritz



Re: OT Re: 'database filesystems'

2007-01-09 Thread Brian Candler
On Mon, Jan 08, 2007 at 10:14:12PM +0100, chefren wrote:
 Firstly, it eliminates the choice that we currently have: say mysql versus
 Oracle versus BerkeleyDB versus pgsql etc.
 
 And why do you forget the single OpenBSD choice named: FFS?

Well, it's not the only one, although probably the best supported read/write
one:

# mount
mount  mount_ext2fs   mount_msdosmount_portal   mount_xfs
mount_ados mount_ffs  mount_nfs  mount_procfs   mountd
mount_cd9660   mount_mfs  mount_ntfs mount_udf

FFS implements standard Unix semantics and gives very good reliability for a
wide variety of common purposes.

If you want database semantics, you stick a database on top. This follows
the Unix principle of dividing functionality into modules which are combined
in useful ways, with the choice of substituting a more appropriate one for
your needs.

  Each application currently can
 choose an appropriate database given constraints of DB size, speed, 
 indexing
 algorithms, ease of administration etc. It sounds like you're proposing a
 one size fits all alternative.
 
 Yep, because you definitely want to be able to interchange data 
 between everything.

You also want to exchange files between Linux and OpenBSD; this doesn't mean
that both platforms *must* use the same filesystem natively.

Why did Oracle buy Sleepycat, giving them both Oracle DB and Berkeley DB in
their product portfolio? I'd say because these are tailored for two
completely different areas (enterprise databases and embedded systems).
OpenBSD is used in both these areas.

 I want to eliminate the need for Oracle or whatever other databases...

Then IMO you have impossible conflicting goals:

- something which is small and fast (as it is to be an integral part of
  the O/S)

- something which is huge and featureful (as it is going to supercede every
  other database out there)

There is only one good reason I can think of for integrating the database
into the O/S, which is that Microsoft eventually decided it was a bad idea
to do so:-)

Regards,

Brian.



ipsecctl giving error on syntax

2007-01-09 Thread Chris Bullock
We have been using isakmpd for VPN since about version 3.4.  We currently
wanted to start using the ipsecctl utility.  When we try to check the
contents of our working isakmpd.conf file it gives us a syntax error.

[EMAIL PROTECTED] :/home/cgb]$ sudo ipsecctl -vnf /etc/isakmpd/isakmpd.conf
Password:
Your mind just hasn't been the same since the electro-shock, has it?
Password:
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
/etc/isakmpd/isakmpd.conf: 0: syntax error
ipsecctl: Syntax error in config file: ipsec rules not loaded
[EMAIL PROTECTED] :/home/cgb]$

but:
[EMAIL PROTECTED] :/home/cgb]$ sudo ipsecctl -s all
FLOWS:
flow esp in from 192.168.111.0/24 to 172.24.0.0/24 peer xxx.xxx.xxx.xxx
flow esp out from 172.24.0.0/24 to 192.168.111.0/24 peer xxx.xxx.xxx.xxx
regards,
Chris



squid for OBSD 4.0

2007-01-09 Thread sonjaya

Dear all

I want create proxy server with OBSD 4.0 , what kind squid version support :

- mac Address acl
- delaypools

also how to tuning OBSD 4.0 for proxy server with squid .


-sonjaya-



Re: java on openbsd 4.0?

2007-01-09 Thread J.C. Roberts
On Monday 08 January 2007 17:38, bofh wrote:
 I tried installing the jdk I had built under 3.9, jdk-1.5.0p14, that
 installed without problems, however:

It has been said many, many times yet people still regularly make same 
the mistake which you have made: Packages (and ports) from one version 
of OpenBSD are not supported under other versions. 

You might think you and your FrankenSystem are somehow clever but more 
often than not, you are wasting your time. You are much better off 
doing things in the supported manner.



Re: squid for OBSD 4.0

2007-01-09 Thread Martin Schröder

2007/1/9, sonjaya [EMAIL PROTECTED]:

also how to tuning OBSD 4.0 for proxy server with squid .


I've had best results with tilting the server by 900.

Best
  Martin



squid for OBSD 4.0

2007-01-09 Thread sonjaya

Dear all

I want create proxy server with OBSD 4.0 , what kind squid version support :

- mac Address acl
- delaypools

also how to tuning OBSD 4.0 for proxy server with squid .


-sonjaya-


-
-sonjaya-



Re: squid for OBSD 4.0

2007-01-09 Thread Scott Radvan
On Tue, 9 Jan 2007 17:19:48 +0700
sonjaya [EMAIL PROTECTED] wrote:

 Dear all
 
 I want create proxy server with OBSD 4.0 , what kind squid version
 support :
 
 - mac Address acl
 - delaypools
 
 also how to tuning OBSD 4.0 for proxy server with squid .
 
 
 -sonjaya-
 


The following site will help, read it from beginning to end, you will
be much wiser:

http://www.kernel-panic.it/openbsd/proxy/


-- 
Scott Radvan



Re: backing up windows hosts to openbsd

2007-01-09 Thread J.C. Roberts
On Monday 08 January 2007 18:12, Greg Thomas wrote:
 I get a new harddrive from Dell, put a CD in, boot, choose the
 correct hardware and grab the correct image.  30 minutes later I run
 the appropriate diff file, name the machine, and add it to AD.  Let
 the user login (if they don't know how to set up their email I do so)
 and the login script takes care of printer mappings, etc.  The only
 thing the user is missing at this point is any special apps that they
 use.

 Greg

Greg,

Though totally off-topic for an OpenBSD mailing list, there are plenty 
of issues involved with imaging a MS-Windows system. One of the big 
ones is duplication of SID's (System IDentification). Supposedly 
there are even some security issues with having identical MS-Windows 
SID's on the same physical network but it is easy enough to fix the 
problem:

http://www.microsoft.com/technet/sysinternals/Utilities/NewSid.mspx

You should add SID changing to your image install process, or even 
better, convert all your desktops to OpenBSD. :-)

Kind Regards,
JCR



Re: squid for OBSD 4.0

2007-01-09 Thread Martin Schröder

2007/1/9, Scott Radvan [EMAIL PROTECTED]:

The following site will help, read it from beginning to end, you will
be much wiser:

http://www.kernel-panic.it/openbsd/proxy/


Information about pf for transparent proxies is missing. See also
http://www.benzedrine.cx/transquid.html

Best
  Martin



difference between macros and tables in pf

2007-01-09 Thread Artyom Goryainov
And when I write for example local_net=192.168.0.0/16 will it be expanded in
rules to individual addresses, or it will be processed another way?



Re: ipsecctl giving error on syntax

2007-01-09 Thread Mathieu Sauve-Frankel
On Mon, Jan 08, 2007 at 02:23:24PM -0500, Chris Bullock wrote:
 We have been using isakmpd for VPN since about version 3.4.  We currently
 wanted to start using the ipsecctl utility.  When we try to check the
 contents of our working isakmpd.conf file it gives us a syntax error.
 
 [EMAIL PROTECTED] :/home/cgb]$ sudo ipsecctl -vnf /etc/isakmpd/isakmpd.conf

...

OMG! running ipsecctl -f /etc/pf.conf doesn't work EITHER... 
maybe you should start by reading the documentation.

-- 
Mathieu Sauve-Frankel



disk space allocation from an existing slice

2007-01-09 Thread atstake atstake

I'm installing 4.0 on a 120GB HDD. If I, at a later stage, want to
allocate 2GB from my /usr partition to my /home partition will I be
able to do that given that I have 2GB free space available on my /usr
partition?

Thanks.



Re: squid for OBSD 4.0

2007-01-09 Thread sonjaya

thx have been respond quick

can i use diskd for cache , last time i use diskd for cache is more
speed-up squid and
if i using pkg-add  they don't support acl mac address .



On 1/9/07, Scott Radvan [EMAIL PROTECTED] wrote:

On Tue, 9 Jan 2007 17:19:48 +0700
sonjaya [EMAIL PROTECTED] wrote:

 Dear all

 I want create proxy server with OBSD 4.0 , what kind squid version
 support :

 - mac Address acl
 - delaypools

 also how to tuning OBSD 4.0 for proxy server with squid .


 -sonjaya-



The following site will help, read it from beginning to end, you will
be much wiser:

http://www.kernel-panic.it/openbsd/proxy/


--
Scott Radvan




--
-sonjaya-



small question regarding snapshots checksums

2007-01-09 Thread Peter Philipp
Hi,

I recently tested a new way of checking checksums of different mirrors, I 
call to an ISP in France (from Germany) in order to pull the MD5 and 
checksum files from a list of mirrors.  I then cross-check these with my 
ISP's openbsd mirror.  The process I can automate a little better but it 
seems to work.  

data:

-rw-r--r--  1 root  wheel  3775 Jan  9 12:10 129.128.5.191.cksums
-rw-r--r--  1 root  wheel  3775 Jan  9 12:10 130.237.237.229.cksums
-rw-r--r--  1 root  wheel  3777 Jan  9 12:10 131.188.40.91.cksums
-rw-r--r--  1 root  wheel  3777 Jan  9 12:10 192.43.244.161.cksums
-rw-r--r--  1 root  wheel  3648 Jan  9 12:10 200.32.4.56.cksums
-rw-r--r--  1 root  wheel  3648 Jan  9 12:10 203.16.234.85.cksums
-rw-r--r--  1 root  wheel  3648 Jan  9 12:10 203.16.234.86.cksums
-rw-r--r--  1 root  wheel  3648 Jan  9 12:10 203.8.116.111.cksums
-rw-r--r--  1 root  wheel  3777 Jan  9 12:10 204.152.184.203.cksums
-rw-r--r--  1 root  wheel  3777 Jan  9 12:10 209.242.32.10.cksums
-rw-r--r--  1 root  wheel  3648 Jan  9 12:10 62.116.6.182.cksums
-rw-r--r--  1 root  wheel  3778 Jan  9 11:54 ftp.freenet.de.cksums

At that point (if you look at the timestamp) it's been 4 hours since the 
OpenBSD main source did a change in the kernel versions and all the other 
mirrors hadn't picked up the changes.  So there was a checksum mismatch.  I 
was wondering whether a history file of checksums is a good thing to include on 
the main ftp site?  That way one can check whether older revisions of 
binaries are the right checksum?  Otherwise one would not know (and there 
would be no point of checksums then right?).  

Perhaps there is a better way to check checksums in a more secure way than 
FTP?  What way would this be, at best?  My calls to France hope to at least
find some out of band channel to cross-check binary checksums, but it's not
economical until I update my long-distance phone plan (I'm just testing the 
water right now).

Regards,

-peter

-- 
Here my ticker tape .signature  My name is Peter Philipp  lynx -dump 
http://en.wikipedia.org/w/index.php?title=Pufferfisholdid=20768394; | sed -n 
131,137p  http://centroid.eu  So long and thanks for all the fish!!!



Re: small question regarding snapshots checksums

2007-01-09 Thread Marcus Popp
On 2007-01-09T14:01, Peter Philipp wrote:
...
 At that point (if you look at the timestamp) it's been 4 hours since the 
 OpenBSD main source did a change in the kernel versions and all the other 
 mirrors hadn't picked up the changes.  So there was a checksum mismatch.  I 
 was wondering whether a history file of checksums is a good thing to include 
 on 
 the main ftp site?  That way one can check whether older revisions of 
 binaries are the right checksum?  Otherwise one would not know (and there 
 would be no point of checksums then right?).  

it would be simpler to sign all the tgz with gzsig (1) and verify the
tgz with a offical key. Of course this has to be done by the OpenBSD
devs.

so long,

Marcus.



Re: disk space allocation from an existing slice

2007-01-09 Thread Joachim Schipper
On Tue, Jan 09, 2007 at 10:51:34PM +1100, atstake atstake wrote:
 I'm installing 4.0 on a 120GB HDD. If I, at a later stage, want to
 allocate 2GB from my /usr partition to my /home partition will I be
 able to do that given that I have 2GB free space available on my /usr
 partition?

No, not without backing up at least one of those partitions and
re-disklabel(8)-ing.

You could, however, leave 2 GB of free space in between; you could then
use disklabel(8) to assign it to either partition, and growfs(8) to
enlarge either.

I presume that you'd need to use dd(1) to move the partition after the
empty space into the empty space after disklabel(8), or growfs(8)
probably won't find the (right) filesystem.

Note that all this is *dangerous*. In other news, I discovered yesterday
that sysutils/sleuthkit is, in fact, not the most efficient spam filter
ever discovered by mankind [1][2]. Who knew?

Joachim

[1] And that the best backup system can still fail if operated by a dumb
monkey. Not adding /var/mail to /etc/amanda/disklist, for instance, is
something only someone with my huge intellect could ever manage.

[2] Once I've polished my helper script(s), I'll try to place them
somewhere public. Might save someone else 30 minutes of coding.



Re: OT Re: 'database filesystems'

2007-01-09 Thread Richard P. Welty

Brian Candler wrote:

On Mon, Jan 08, 2007 at 10:14:12PM +0100, chefren wrote:



I want to eliminate the need for Oracle or whatever other databases...



Then IMO you have impossible conflicting goals:

- something which is small and fast (as it is to be an integral part of
  the O/S)



- something which is huge and featureful (as it is going to supercede every
  other database out there)


yes, it seems to me that the author of this proposal doesn't really
understand the huge gap between a conventional file system and
a full up RDBMS.

i don't think it's bridgeable in a useful or practical way. the purposes
and utilization are just too different. i also think you'll have trouble
finding even agreement in the RDBMS community over many things (which
explains what a hash SQL has become over the years, and i'm ignoring
object oriented databases, which are in an entirely different can with
many unique worms in it.)

let file systems be good file systems, and let the RDBMS or OO DBMS
be a good DBMS.

richard
--
Richard Welty[EMAIL PROTECTED]
1-866-MY-CELERY  518-269-8232 (cell)



Re: difference between macros and tables in pf

2007-01-09 Thread Gregory Edigarov

Artyom Goryainov wrote:

And when I write for example local_net=192.168.0.0/16 will it be expanded in
rules to individual addresses, or it will be processed another way?


  
well, if you ask such questions then i would seriously recommend to read 
something about how the  tcp/ip  stack works.




Re: java on openbsd 4.0?

2007-01-09 Thread bofh

On 1/9/07, J.C. Roberts [EMAIL PROTECTED] wrote:

On Monday 08 January 2007 17:38, bofh wrote:
 I tried installing the jdk I had built under 3.9, jdk-1.5.0p14, that
 installed without problems, however:

It has been said many, many times yet people still regularly make same
the mistake which you have made: Packages (and ports) from one version
of OpenBSD are not supported under other versions.

You might think you and your FrankenSystem are somehow clever but more
often than not, you are wasting your time. You are much better off
doing things in the supported manner.


Dude,
I *was* trying to set it up in the supported manner.  See the previous
parts of the email.  I was just testing it to see if it may work,
since the supported manner did not work.

Thanx.



ITIMER_REAL incorrect for process started _after_ a date change

2007-01-09 Thread Stefan Krah
Hello,

it seems that the interval timer is incorrect for a process that is
started _after_ a sudden date change. Could someone reproduce this
before I report it as a bug? System is OpenBSD 4.0-stable, i386.


Here are the steps (program below):


# ./timertest   
 
0  0  600  0
0  0  598  99
0  0  597  98
0  0  596  97
0  0  595  96
^C
# date
Tue Jan  9 15:18:23 CET 2007
# date 1522
Tue Jan  9 15:22:00 CET 2007
# 
# 
# ./timertest 
0  0  389  61
0  0  388  60
0  0  387  59
0  0  386  58


timertest.c
===
#include sys/time.h

#include stdio.h
#include stdlib.h
#include unistd.h


int main(void)
{

struct itimerval itimer = {{0, 0}, {600, 0}};


if (setitimer(ITIMER_REAL, itimer, (struct itimerval *)NULL)) {
puts(setting itimer failed\n);
exit(1);
}

while (1) {
getitimer(ITIMER_REAL, itimer);
printf( %ld  %ld  %ld  %ld\n, itimer.it_interval.tv_sec,
 itimer.it_interval.tv_usec, itimer.it_value.tv_sec,
 itimer.it_value.tv_usec );
sleep(1);
}

return 0;
}
===


Stefan Krah



4.0 and64 ogg123 Error: Cannot open device sun.

2007-01-09 Thread Siju George

Hi,

Just wondering how people on amd64 architecture are playing ogg files.

Mplayer plays but no sound output.
XMMS plays the file but the output is very fast and sounds llike caroon :-)
ogg123 gives this error while following
http://www.openbsd.org/faq/faq13.html#playaudio


$ ogg123 -d sun bsdtalk090.ogg

Audio Device:   Sun audio driver output

Playing: bsdtalk090.ogg
Ogg Vorbis stream: 1 channel, 44100 Hz
Error: Cannot open device sun.

$

Could someone please help me fix this?

Kind Regards

Siju



Re: java on openbsd 4.0?

2007-01-09 Thread J.C. Roberts
On Tuesday 09 January 2007 06:20, bofh wrote:
 On 1/9/07, J.C. Roberts [EMAIL PROTECTED] wrote:
  On Monday 08 January 2007 17:38, bofh wrote:
   I tried installing the jdk I had built under 3.9, jdk-1.5.0p14,
   that installed without problems, however:
 
  It has been said many, many times yet people still regularly make
  same the mistake which you have made: Packages (and ports) from one
  version of OpenBSD are not supported under other versions.
 
  You might think you and your FrankenSystem are somehow clever but
  more often than not, you are wasting your time. You are much better
  off doing things in the supported manner.

 Dude,
 I *was* trying to set it up in the supported manner.  See the
 previous parts of the email.  I was just testing it to see if it may
 work, since the supported manner did not work.

 Thanx.

I've been in no rush to build and install java, and in fact I've been 
dreading the idea for a couple months but since you're hitting 
problems, I decided to start on it after reading your post to see if I 
could help. 

In the handful of hours since my last reply, I've managed to download, 
build and install jdk 1.3 from ports and I've got 1.4 currently 
building while I type this. As you probably know, having a working JVM 
is a prerequisite for building 1.4 and 1.5. As soon as I get 1.4 built 
and installed, I'll start on 1.5

Like OpenOffice, building java seems to use a a lot of swap. How large 
is your swap partition/slice?

My limits are (far) more  conservative than yours:

$ ulimit -a
time(cpu-seconds)unlimited
file(blocks) unlimited
coredump(blocks) unlimited
data(kbytes) 524288
stack(kbytes)4096
lockedmem(kbytes)315906
memory(kbytes)   946192
nofiles(descriptors) 64
processes64
$

Lastly, as what user are you building the port?

Kind Regards,
JCR



Re: greylisting

2007-01-09 Thread Bob Beck
Sounds to me like your pf rules and/or bridge setup
are not set up correctly to allow the connections to be redirected.

-Bob


* Stephen Schaff [EMAIL PROTECTED] [2007-01-08 18:52]:
 tail -f /var/log/daemon shows:
 
 Jan  8 02:23:38 spamd spamd[4966]: listening for incoming connections.
 
 That's it.
 
 Stephen
 
 On 8-Jan-07, at 3:54 AM, edgarz wrote:
 
 They should be.
 tail -f /var/log/daemon
 there they are.
 
 Stephen Schaff wrote:
 I've set up spamd on a soekris bridge. It seems to be working for  
 the most part. However, when I used spamdb to view the database -  
 it only shows WHITE entries. It appears there are no GREY entries.  
 Have I configured things incorrectly?
 Also, if I try to send mail from a remote mail client, using the  
 mail server behind spamd, it won't allow the connection. I have to  
 use my shaw smtp server, or some other one to get the mail to  
 send. Any ideas on how to configure it so that I can use my main  
 mail server to send messages?
 Config files:
 pf.conf:
 ext_if=sis1
 mailserver=my mail server IP
 table spamd persist
 table spamd-white persist
 rdr pass on $ext_if proto tcp from spamd to port smtp \
 - 127.0.0.1 port spamd
 rdr pass on $ext_if proto tcp from !spamd-white to port smtp \
 - 127.0.0.1 port spamd
 # log so you can watch the connections getting trapped
 pass in log on $ext_if route-to lo0 inet proto tcp to 127.0.0.1  
 port spamd
 # log smtp sessions to and from the mailserver
 pass in log on $ext_if proto tcp to $mailserver port smtp keep state
 pass out log on $ext_if proto tcp from $mailserver to any port  
 smtp keep state
 rc.conf:
 spamd_flags=-v
 spamd_grey=YES
 spamlogd_flags=
 !DSPAM:45a2227782793355514740!
 

-- 
#!/usr/bin/perl
if ((not 0  not 1) !=  (! 0  ! 1)) {
   print Larry and Tom must smoke some really primo stuff...\n; 
}



Re: java on openbsd 4.0?

2007-01-09 Thread Gustavo Rios

Is it possible to build jdk;java directly from openbsd: I always
believed i had to install linux emulation first.

Thanks for the clarifications.

On 1/9/07, J.C. Roberts [EMAIL PROTECTED] wrote:

On Tuesday 09 January 2007 06:20, bofh wrote:
 On 1/9/07, J.C. Roberts [EMAIL PROTECTED] wrote:
  On Monday 08 January 2007 17:38, bofh wrote:
   I tried installing the jdk I had built under 3.9, jdk-1.5.0p14,
   that installed without problems, however:
 
  It has been said many, many times yet people still regularly make
  same the mistake which you have made: Packages (and ports) from one
  version of OpenBSD are not supported under other versions.
 
  You might think you and your FrankenSystem are somehow clever but
  more often than not, you are wasting your time. You are much better
  off doing things in the supported manner.

 Dude,
 I *was* trying to set it up in the supported manner.  See the
 previous parts of the email.  I was just testing it to see if it may
 work, since the supported manner did not work.

 Thanx.

I've been in no rush to build and install java, and in fact I've been
dreading the idea for a couple months but since you're hitting
problems, I decided to start on it after reading your post to see if I
could help.

In the handful of hours since my last reply, I've managed to download,
build and install jdk 1.3 from ports and I've got 1.4 currently
building while I type this. As you probably know, having a working JVM
is a prerequisite for building 1.4 and 1.5. As soon as I get 1.4 built
and installed, I'll start on 1.5

Like OpenOffice, building java seems to use a a lot of swap. How large
is your swap partition/slice?

My limits are (far) more  conservative than yours:

$ ulimit -a
time(cpu-seconds)unlimited
file(blocks) unlimited
coredump(blocks) unlimited
data(kbytes) 524288
stack(kbytes)4096
lockedmem(kbytes)315906
memory(kbytes)   946192
nofiles(descriptors) 64
processes64
$

Lastly, as what user are you building the port?

Kind Regards,
JCR




Re: backing up windows hosts to openbsd

2007-01-09 Thread Greg Thomas

On 1/9/07, J.C. Roberts [EMAIL PROTECTED] wrote:

On Monday 08 January 2007 18:12, Greg Thomas wrote:
 I get a new harddrive from Dell, put a CD in, boot, choose the
 correct hardware and grab the correct image. 30 minutes later I run
 the appropriate diff file, name the machine, and add it to AD. Let
 the user login (if they don't know how to set up their email I do so)
 and the login script takes care of printer mappings, etc. The only
 thing the user is missing at this point is any special apps that they
 use.

 Greg

Greg,

Though totally off-topic for an OpenBSD mailing list, there are plenty
of issues involved with imaging a MS-Windows system. One of the big
ones is duplication of SID's (System IDentification). Supposedly
there are even some security issues with having identical MS-Windows
SID's on the same physical network but it is easy enough to fix the
problem:

http://www.microsoft.com/technet/sysinternals/Utilities/NewSid.mspx

You should add SID changing to your image install process,


Yep, it's included in the post-install departmental diff scripts.


convert all your desktops to OpenBSD. :-)


Working on it man, working on it.

Greg



Re: 4.0 and64 ogg123 Error: Cannot open device sun.

2007-01-09 Thread steven mestdagh
Siju George [2007-01-09, 21:25:26]:
 Hi,
 
 Just wondering how people on amd64 architecture are playing ogg files.
 
 Mplayer plays but no sound output.
 XMMS plays the file but the output is very fast and sounds llike caroon :-)
 ogg123 gives this error while following
 http://www.openbsd.org/faq/faq13.html#playaudio
 
 
 $ ogg123 -d sun bsdtalk090.ogg
 
 Audio Device:   Sun audio driver output
 
 Playing: bsdtalk090.ogg
 Ogg Vorbis stream: 1 channel, 44100 Hz
 Error: Cannot open device sun.

maybe you can drop the -d sun from the above command?

providing a dmesg could be useful, as well as the output of 'mixerctl -a'.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm



Re: ODBC....

2007-01-09 Thread fschnittke
Hi All:

We're going to be using an OpenBSD 4.0 machine to collect employee 
Punch-in data and store that data in the form of a comma seperated file. 
We would then like to access that data from our mainframe via openbsd to 
retreive the records.

Would you be so kind as to lend your opinion as to the best package to 
install on the OpenBSD machine to provide that ODBC support?

Thanks in advance.



Fred



Re: 4.0 and64 ogg123 Error: Cannot open device sun.

2007-01-09 Thread Siju George

On 1/9/07, steven mestdagh [EMAIL PROTECTED] wrote:

Siju George [2007-01-09, 21:25:26]:
 Hi,

 Just wondering how people on amd64 architecture are playing ogg files.

 Mplayer plays but no sound output.
 XMMS plays the file but the output is very fast and sounds llike caroon :-)
 ogg123 gives this error while following
 http://www.openbsd.org/faq/faq13.html#playaudio


 $ ogg123 -d sun bsdtalk090.ogg

 Audio Device:   Sun audio driver output

 Playing: bsdtalk090.ogg
 Ogg Vorbis stream: 1 channel, 44100 Hz
 Error: Cannot open device sun.

maybe you can drop the -d sun from the above command?

providing a dmesg could be useful, as well as the output of 'mixerctl -a'.



Thankyou steven for the reply.

I tried it without sun first but same effect :-(

dmesg

and

mixerctl -a

below

!!!
$ ogg123 bsdtalk090.ogg

Audio Device:   Sun audio driver output

Playing: bsdtalk090.ogg
Ogg Vorbis stream: 1 channel, 44100 Hz
Error: Cannot open device sun.

$
!!

$ mixerctl -a
outputs.dac02.source=hdaudio
inputs.dac03.mute=off
inputs.dac03=123,123
inputs.dac04.mute=off
inputs.dac04=123,123
inputs.dac05.mute=off
inputs.dac05=123,123
outputs.mix09.mute=off
inputs.mix09.dac04.mut=off
inputs.mix09.dac05.mut=off
inputs.sel0a.source=mix07
inputs.sel0b.source=mix07
inputs.sel0c.source=dac04
inputs.sel0d.source=dac05
inputs.sel0e.source=mix08
inputs.sel0f.source=pink1f
outputs.sel0f=85,85
inputs.sel10.source=blue20
inputs.sel11.source=sel0f
inputs.sel12.source=sel11
outputs.sel12.mute=off
outputs.sel12=119,119
outputs.sel13.mute=off
outputs.sel13=123,123
outputs.sel14.mute=off
outputs.sel14=123
outputs.sel15.mute=off
outputs.sel15=123,123
outputs.sel16.mute=off
outputs.sel16=123,123
outputs.sel17.mute=off
outputs.sel17=123,123
inputs.sel18.source=beep19
outputs.sel18.mute=on
outputs.sel18=119
outputs.green1a.mute=off
outputs.green1a=123,123
outputs.green1a.boost=on
outputs.green1b.mute=off
outputs.green1b=255,255
outputs.green1b.boost=off
outputs.blue1c.mute=off
outputs.blue1c=123,123
outputs.blue1c.dir=output
outputs.pink1d.mute=off
outputs.pink1d=123,123
outputs.pink1d.dir=output
outputs.unknown1e.mute=off
outputs.unknown1e=123
outputs.pow26.source=mix07
inputs.usingdac=030405
!!
$ cat /var/run/dmesg.boot
OpenBSD 4.0 (GENERIC) #690: Sat Sep 16 20:26:25 MDT 2006
   [EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC
real mem = 469037056 (458044K)
avail mem = 389718016 (380584K)
using 11502 buffers containing 47112192 bytes (46008K) of memory
mainbus0 (root)
bios0 at mainbus0: SMBIOS rev. 2.3 @ 0xf0730 (54 entries)
bios0: ASUSTeK Computer INC. A8V-VM
cpu0 at mainbus0: (uniprocessor)
cpu0: AMD Athlon(tm) 64 Processor 3500+, 2200.37 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,SSE3,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW
cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB
64b/line 16-way L2 cache
cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative
cpu0: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative
pci0 at mainbus0 bus 0: configuration mode 1
pchb0 at pci0 dev 0 function 0 vendor VIA, unknown product 0x0336 rev 0x00
pchb1 at pci0 dev 0 function 1 vendor VIA, unknown product 0x1336 rev 0x00
pchb2 at pci0 dev 0 function 2 vendor VIA, unknown product 0x2336 rev 0x00
pchb3 at pci0 dev 0 function 3 vendor VIA, unknown product 0x3336 rev 0x00
pchb4 at pci0 dev 0 function 4 vendor VIA, unknown product 0x4336 rev 0x00
vendor VIA, unknown product 0x5336 (class system subclass interrupt,
rev 0x00) at pci0 dev 0 function 5 not configured
pchb5 at pci0 dev 0 function 6 vendor VIA, unknown product 0x6290 rev 0x00
pchb6 at pci0 dev 0 function 7 vendor VIA, unknown product 0x7336 rev 0x00
ppb0 at pci0 dev 1 function 0 VIA K8HTB AGP rev 0x00
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 vendor VIA, unknown product 0x3230 rev 0x01
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
pciide0 at pci0 dev 15 function 0 VIA VT8251 SATA rev 0x00: DMA
pciide0: using irq 5 for native-PCI interrupt
pciide1 at pci0 dev 15 function 1 VIA VT82C571 IDE rev 0x07: DMA,
channel 0 configured to compatibility, channel 1 configured to
compatibility
wd0 at pciide1 channel 0 drive 0: ST340014A
wd0: 16-sector PIO, LBA48, 38166MB, 78165360 sectors
wd0(pciide1:0:0): using PIO mode 4, DMA mode 2
atapiscsi0 at pciide1 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 

Re: ODBC repost...

2007-01-09 Thread fschnittke
Hi All:

Sorry, made a few mistakes in my original post...

We're going to be using an OpenBSD 4.0 machine to collect employee 
Punch-in data and store that data in a form similar to that of a Microsoft 
Access Database file. We would then like to access that data from our 
mainframe via ODBC to retreive the records.

Would you be so kind as to lend your opinion as to the best package(s) to 
install on the OpenBSD machine to provide that ODBC functionality?

Thanks in advance.



Fred



BRLCAD port to OpenBSD

2007-01-09 Thread Siju George

hi,

I wonder how much effort it would require to port the BRL-CAD for
FreeBSD to OpenBSD.
Since that is my primary desktop both at home and work I would love to
see a port for OpenBSD.
If none is corrently working on it i could try withmy limited
knowledge on porting.

thankyou so much Kind Regards

Siju



snort bpf file problems

2007-01-09 Thread Dan Farrell
I'm running Snort 2.4.5 (the pkg) on OpenBSD 4.0 and I use a bpf filter
file to have Snort ignore certain hosts altogether.

The command I'm using is 'snort  -D -i dc1 -F bpfile'

When I have the single line of-

not host 192.168.1.69

Snort runs fine. But when I lengthen the bpf filter file to-

not host 192.168.1.69
and not host 10.1.1.1
and not host 4.2.2.2
... 60 more addresses ...
and not host 6.6.6.6

Snort chokes with the following error-

snort: FATAL ERROR: OpenPcap() setfilter: BIOCSETF: Invalid
argument

The BPF file I'm using is one I pulled from another snort installation I
have running on -gasp- Fedora (I mention this because it has no problems
parsing the same file.) Is there a way to have multiple entries in the
BPF file that I'm missing... am I using the wrong syntax (is there an
alternative to 'and not host' that I need to use)?


Dan Farrell
Applied Innovations
[EMAIL PROTECTED]



Re: java on openbsd 4.0?

2007-01-09 Thread J.C. Roberts
On Tuesday 09 January 2007 08:37, Gustavo Rios wrote:
 Is it possible to build jdk;java directly from openbsd: I always
 believed i had to install linux emulation first.

 Thanks for the clarifications.

Hi Gustavo,

For building 1.4, you need the 1.3-linux port installed. The latter 
requires the kern.emul.linux sysctrl enabled in kernel as well as the 
redhat base port (6.2 or better). For building 1.5, you need to have 
1.4 installed. -The typical Sun chicken and egg problem.

The port dependencies are changing for the next release. According to 
what I read on ports@, if you follow -CURRENT, there have been some 
recent changes to the 1.5 jdk port which uses a different/lightweight 
jvm to prevent the Sun chicken-egg (and linux) problems.

Most of all, do not get your hopes up. Even if you only want to use 
java applications, the odds of them working correctly is not very good 
in spite of the supposed run anywhere crap that Sun states.

The painfully sad truth is if you're doing any serious development and 
testing in Java, you have to debug everywhere and you normally need to 
have ton of jre/jdk installations on each of your supported OS/hardware 
combinations. You really do need multiple systems as well as multiple 
installations of java on each system; versions, subversions and 
sub-subversion (1.4-01, 1.4-02, 1.4-03 and so on as well as 1.5-01, 
1.5-02 ... ad infinitum). It's a major pain in the ass. I truly hate it 
and I won't touch java unless someone is paying me really well to deal 
with such headaches.

Sun doesn't actually fix java bugs, instead they just move the bugs 
around so you never know where they are hiding. ;-)

kind regards,
jcr



Re: snort bpf file problems

2007-01-09 Thread J.C. Roberts
On Tuesday 09 January 2007 09:34, Dan Farrell wrote:
 I'm running Snort 2.4.5 (the pkg) on OpenBSD 4.0 and I use a bpf
 filter file to have Snort ignore certain hosts altogether.

Hey Dan,

It would be much appreciated if you would stop starting new messages by 
replying to an existing post. What you are doing screws up threading of 
messages because your mail client is putting in a In-Reply-To: and/or 
References: header pointing to back to the original post. 

If you use the new message or new email feature of your mail client 
and type in the misc@openbsd.org address when starting a new 
message/topic/thread, it will solve the problem.

thanks,
jcr



carp for one server?

2007-01-09 Thread John Brahy

I know carp is the way to go to provide address redundancy but I was
wondering if it's the best way to do it on one server? I've got two
interfaces and I'd like to only use one public ip address.
Is carp the way to go or is there a better way?

thanks!



Re: java on openbsd 4.0?

2007-01-09 Thread Kurt Miller
On Monday 08 January 2007 8:38 pm, bofh wrote:
 What am I doing wrong?  This is openbsd 4.0 on a DL145, dual opteron.
 Thanx for any pointers!

I've replied to your build problem on the ports@ list, but
just to clarify some things said in this thread:

Beginning with OpenBSD 4.0 devel/jdk/1.5 no longer
requires users to src build 1.3-linux and 1.4. It
uses an open-source jdk to bootstrap the build now.

-Kurt



snort bpf file problems

2007-01-09 Thread Dan Farrell
I'm reposting this as its own new post because J.C. Roberts pointed out
how my laziness screws up threads... 


I'm running Snort 2.4.5 (the pkg) on OpenBSD 4.0 and I use a bpf filter
file to have Snort ignore certain hosts altogether.

The command I'm using is 'snort  -D -i dc1 -F bpfile'

When I have the single line of-

not host 192.168.1.69

Snort runs fine. But when I lengthen the bpf filter file to-

not host 192.168.1.69
and not host 10.1.1.1
and not host 4.2.2.2
... 60 more addresses ...
and not host 6.6.6.6

Snort chokes with the following error-

snort: FATAL ERROR: OpenPcap() setfilter: BIOCSETF: Invalid
argument

The BPF file I'm using is one I pulled from another snort installation I
have running on -gasp- Fedora (I mention this because it has no problems
parsing the same file.) Is there a way to have multiple entries in the
BPF file that I'm missing... am I using the wrong syntax (is there an
alternative to 'and not host' that I need to use)?


Dan Farrell
Applied Innovations
[EMAIL PROTECTED]



Re: carp for one server?

2007-01-09 Thread Bret Lambert
On Tue, 2007-01-09 at 10:12 -0800, John Brahy wrote:
 I know carp is the way to go to provide address redundancy but I was
 wondering if it's the best way to do it on one server? I've got two
 interfaces and I'd like to only use one public ip address.
 Is carp the way to go or is there a better way?
 

Depending on your setup, trunk(4) in failover mode might be just
as useful.

-Bert

 thanks!



Re: java on openbsd 4.0?

2007-01-09 Thread J.C. Roberts
On Tuesday 09 January 2007 09:08, J.C. Roberts wrote:
  When I built 1.5 on openbsd 3.9-current, it didn't require building
  1.3 and 1.4.  It didn't look like 4.0 needed it either.  In fact,
  on amd64, it won't build jdk1.4

 Though people joke about the chicken-egg problem, you need a working
 JVM to build the jdk, so maybe you just didn't notice the use/install
 of a previous version (i.e. scrolled far off screen).


As for the dependencies in the jdk/1.5 port, it varies based on arch and 
port flavor you want to build. There was a post to the ports@ mailing 
list recently regarding changes in the dependencies. In general, you 
need a jvm to build one. In the case of the jdk/1.5 port on 4.0-STABLE, 
it tends to use kaffe rather than Sun on most flavors other than the 
native-bootstrap flavor.

BTW, if your goal is to have a working java plugin for mozilla/firefox I 
suggest you read /usr/ports/devel/jdk/1.5/pkg/MESSAGE-amd64

  NOTE: The plugin does not work on amd64 yet.

Well, the 1.4 port completed it's build, installed successfully and 
surprisingly enough, actually runs. ;-)

$ java -version
java version 1.4.2-p7
Java(TM) 2 Runtime Environment, Standard Edition (build 
1.4.2-p7-_09_jan_2007_05_58)
Java HotSpot(TM) Client VM (build 1.4.2-p7-_09_jan_2007_05_58, mixed 
mode)
$

I've hit a different problem than yours while trying to build jdk/1.5, 
well more accurately, trying to build the lang/kaffe dependency 
mentioned above.

Adding java source files from VM 
directory 
/usr/ports/lang/kaffe/w-kaffe-1.1.7p2/kaffe-1.1.7/libraries/javalib/vmspecific
Adding generated files in builddir '..'.
gmake[3]: *** No rule to make target 
`/usr/ports/lang/kaffe/w-kaffe-1.1.7p2/kaffe-1.1.7/libraries/javaoosowxuownonowmkwssxozuwo',
 
needed by `compile-classes'.  Stop.
gmake[3]: Leaving directory 
`/usr/ports/lang/kaffe/w-kaffe-1.1.7p2/build-i386/libraries/javalib/external/classpath/lib'
gmake[2]: *** [install-recursive] Error 1
gmake[2]: Leaving directory 
`/usr/ports/lang/kaffe/w-kaffe-1.1.7p2/build-i386/libraries/javalib/external/classpath'
gmake[1]: *** [install-recursive] Error 1
gmake[1]: Leaving directory 
`/usr/ports/lang/kaffe/w-kaffe-1.1.7p2/build-i386/libraries/javalib'
gmake: *** [install-recursive] Error 1
*** Error code 2

Stop in /usr/ports/lang/kaffe (line 1995 
of /usr/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /usr/ports/devel/jdk/1.5 (line 1431 
of /usr/ports/infrastructure/mk/bsd.port.mk).
$ 

give me a few and I might be able to get it sorted out...

jcr



Re: carp for one server?

2007-01-09 Thread John Brahy

perfect! thank you!

On 1/9/07, Bret Lambert [EMAIL PROTECTED] wrote:

On Tue, 2007-01-09 at 10:12 -0800, John Brahy wrote:
 I know carp is the way to go to provide address redundancy but I was
 wondering if it's the best way to do it on one server? I've got two
 interfaces and I'd like to only use one public ip address.
 Is carp the way to go or is there a better way?


Depending on your setup, trunk(4) in failover mode might be just
as useful.

-Bert

 thanks!




Re: java on openbsd 4.0?

2007-01-09 Thread Jeremy Huiskamp

On 9-Jan-07, at 12:42 PM, J.C. Roberts wrote:

The painfully sad truth is if you're doing any serious development and
testing in Java, you have to debug everywhere and you normally need to
have ton of jre/jdk installations on each of your supported OS/ 
hardware

combinations. You really do need multiple systems as well as multiple
installations of java on each system; versions, subversions and
sub-subversion (1.4-01, 1.4-02, 1.4-03 and so on as well as 1.5-01,
1.5-02 ... ad infinitum). It's a major pain in the ass. I truly  
hate it

and I won't touch java unless someone is paying me really well to deal
with such headaches.


Who fed you that load of silliness?  I could maybe understand having 1.4
and 1.5 but if you can't keep something stable across the small releases
you're doing something seriously stupid.



Re: ODBC repost...

2007-01-09 Thread Jim Razmus
* [EMAIL PROTECTED] [EMAIL PROTECTED] [070109 12:43]:
 Hi All:
 
 Sorry, made a few mistakes in my original post...
 
 We're going to be using an OpenBSD 4.0 machine to collect employee 
 Punch-in data and store that data in a form similar to that of a Microsoft 
 Access Database file. We would then like to access that data from our 
 mainframe via ODBC to retreive the records.
 
 Would you be so kind as to lend your opinion as to the best package(s) to 
 install on the OpenBSD machine to provide that ODBC functionality?
 
 Thanks in advance.
 
 
 
 Fred
 

Ah, this is a little different from your last post.  It's also more a
database question than an OpenBSD question.

Regardless...

What exactly is a form similar to that of a MSoft Access Database
file?  From memory I think an .mdb file is something a kin to ISAM.

If you truly need need concurrent atomic data access, run a real
database.  Postgresql is in the ports tree.  Teach the mainframe to
speak psql and your in business.

Also from memory, I think ODBC is an abstraction layer that rides on top
of database specific driver implementations.  I think it also is
primarily a Windows affliction.  Since only a mainframe and OpenBSD are
involved, why incur the overhead?

I stand by my first reply.  Without a better understanding of your
constraints and business drivers, I would keep it simple and periodically
ftp a text file to the mainframe for subsequent processing.

HTH,
Jim



Re: ODBC....

2007-01-09 Thread Jim Razmus
* [EMAIL PROTECTED] [EMAIL PROTECTED] [070109 12:12]:
 Hi All:
 
 We're going to be using an OpenBSD 4.0 machine to collect employee 
 Punch-in data and store that data in the form of a comma seperated file. 
 We would then like to access that data from our mainframe via openbsd to 
 retreive the records.
 
 Would you be so kind as to lend your opinion as to the best package to 
 install on the OpenBSD machine to provide that ODBC support?
 
 Thanks in advance.
 
 
 
 Fred
 

It's included in the base install.  ftp

I'm not being sarcastic here either.  Since it's a comma delimited file,
your likely not expecting it to act like an ACID database engine...

Without anymore information, that's the best answer I've got.

Jim



ifconfig commands for trunk0 to hostname.trunk0

2007-01-09 Thread John Brahy

How would I translate this into  /etc/hostname.trunk0?

ifconfig em0 up
ifconfig em1 up
ifconfig trunk0 trunkport em0 trunkport em1 xx.xx.xx.xx netmask 255.255.255.0

should it just be
!/sbin/ifconfig em0 up
!/sbin/ifconfig em1 up
!/sbin/ifconfig trunk0 trunkport em0 trunkport em1 xx.xx.xx.xx netmask
255.255.255.0

or is there a more syntactically correct way to to it?



Re: ifconfig commands for trunk0 to hostname.trunk0

2007-01-09 Thread Marco S Hyman
  is this the way that it always is for configuring /etc/hostname.if
  files? basically take the ifconfig command and put everything after
  the interface name into the /etc/hostname.if file?

Not quite.  The format is sometimes different.  There is a hostname.if(5)
man page that should describe the differences.

// marc



Re: greylisting

2007-01-09 Thread Craig Skinner
What is the output of ps? e.g, do you have spamlogd running:

$ ps ax | fgrep spam
23906 ??  Is  0:09.48 spamd: (pf spamd-white update) (spamd)
29836 ??  I   0:06.73 /usr/libexec/spamd -v -b 127.0.0.1 -S 60 -g
  778 ??  I   0:00.02 spamd: (/var/db/spamd update) (spamd)
25919 ??  Is  0:00.18 /usr/libexec/spamlogd

I've found a good check is to see the console messages as the box boots.

I once had spamd running in non-greylisting mode, changed my rules,
started spamlogd, but no action. Messed about for hours with rules, in
the end I rebooted with my 1st set of rules and it came up fine.

If you need an offsite shell account to telnet to port 25, (to see if
you are hitting spamd, or if you are being passed through to your mail
daemons) contact me seperately offlist.



Re: ifconfig commands for trunk0 to hostname.trunk0

2007-01-09 Thread Jim Razmus
* John Brahy [EMAIL PROTECTED] [070109 15:22]:
 On 1/9/07, John Brahy [EMAIL PROTECTED] wrote:
 How would I translate this into  /etc/hostname.trunk0?
 
 ifconfig em0 up
 ifconfig em1 up
 ifconfig trunk0 trunkport em0 trunkport em1 xx.xx.xx.xx netmask 
 255.255.255.0
 
 should it just be
 !/sbin/ifconfig em0 up
 !/sbin/ifconfig em1 up
 !/sbin/ifconfig trunk0 trunkport em0 trunkport em1 xx.xx.xx.xx netmask
 255.255.255.0
 
 or is there a more syntactically correct way to to it?
 
 
 ok, I figured it out:
 $ cat /etc/hostname.trunk0
 trunkproto loadbalance trunkport em0 trunkport em1 xx.xx.xx.xx 255.255.255.0
 
 and it works perfectly! OpenBSD rocks!
 
 is this the way that it always is for configuring /etc/hostname.if
 files? basically take the ifconfig command and put everything after
 the interface name into the /etc/hostname.if file?
 

Read /etc/netstart.  In your case, the main script invokes ifmstart
which in turn calls ifstart.  The shell script builds a command string
that is subsequently eval'd.

Also: man 5 hostname.if

Short answer to your question: no, it depends.  :)

Jim



Re: ifconfig commands for trunk0 to hostname.trunk0

2007-01-09 Thread Marius ROMAN

Please read : http://openbsd.org/faq/faq6.html and trunk(4) before
asking more questions.
Marius
--
GPG KeyID: 601CB35E
GPG Fingerprint: 17C7 BB76 DF3C 0E54 472E 6154 8AC9 FC1B 601C B35E

On 1/9/07, John Brahy [EMAIL PROTECTED] wrote:

On 1/9/07, John Brahy [EMAIL PROTECTED] wrote:
 How would I translate this into  /etc/hostname.trunk0?

 ifconfig em0 up
 ifconfig em1 up
 ifconfig trunk0 trunkport em0 trunkport em1 xx.xx.xx.xx netmask 255.255.255.0

 should it just be
 !/sbin/ifconfig em0 up
 !/sbin/ifconfig em1 up
 !/sbin/ifconfig trunk0 trunkport em0 trunkport em1 xx.xx.xx.xx netmask
 255.255.255.0

 or is there a more syntactically correct way to to it?


ok, I figured it out:
$ cat /etc/hostname.trunk0
trunkproto loadbalance trunkport em0 trunkport em1 xx.xx.xx.xx 255.255.255.0

and it works perfectly! OpenBSD rocks!

is this the way that it always is for configuring /etc/hostname.if
files? basically take the ifconfig command and put everything after
the interface name into the /etc/hostname.if file?




Re: snort bpf file problems

2007-01-09 Thread Can Erkin Acar
Dan Farrell wrote:
 I'm running Snort 2.4.5 (the pkg) on OpenBSD 4.0 and I use a bpf filter
 file to have Snort ignore certain hosts altogether.
 
 The command I'm using is 'snort  -D -i dc1 -F bpfile'

The kernel has a limit for the maximum number of filter
instructions. Currently it is set to 512. This is the
limit you are hitting with your filter definition.

Since the buffers are not allocated until you set a
filter, it seems safe to increase the limit
it is defined in src/sys/net/bpf.h
#define BPF_MAXINSNS 512
you will have to compile a new kernel

 When I have the single line of-
 
 not host 192.168.1.69
 
 Snort runs fine. But when I lengthen the bpf filter file to-
 
 not host 192.168.1.69
 and not host 10.1.1.1
 and not host 4.2.2.2
 ... 60 more addresses ...
 and not host 6.6.6.6
 
 Snort chokes with the following error-
 
 snort: FATAL ERROR: OpenPcap() setfilter: BIOCSETF: Invalid
 argument
 
 The BPF file I'm using is one I pulled from another snort installation I
 have running on -gasp- Fedora (I mention this because it has no problems
 parsing the same file.) Is there a way to have multiple entries in the
 BPF file that I'm missing... am I using the wrong syntax (is there an
 alternative to 'and not host' that I need to use)?
 
 
 Dan Farrell
 Applied Innovations
 [EMAIL PROTECTED]



Re: difference between macros and tables in pf

2007-01-09 Thread Almir Karic

it will be proccessed in ''another way''.

192.168.0.0/16 means ''any ip adress which has first 16 bits the same
as 192.168.0.0''. and first 16 bits in this case are ''192.162''.


On 1/9/07, Artyom Goryainov [EMAIL PROTECTED] wrote:

And when I write for example local_net=192.168.0.0/16 will it be expanded in
rules to individual addresses, or it will be processed another way?





--
almir



Re: java on openbsd 4.0?

2007-01-09 Thread Zoong PHAM
On Tuesday,  9 January 2007 at 13:37:37 -0300, Gustavo Rios wrote:
 Is it possible to build jdk;java directly from openbsd: I always
 believed i had to install linux emulation first.

No, I don't think so.

I just installed jdk-1.5.0p19
from the port: very much make; make install

After that, I could compile and run helloworld.java :-)

If you want the packages, email me privately.

HTH,
Zoong



How to install on *removable* USB drive

2007-01-09 Thread jepael

Hello,

I am having trouble installing OpenBSD 4.0 on a USB thumb drive, which 
represents itself as a removable drive.


The problem is, that the BIOS of my motherboard shows removable USB 
drives as floppy drives (bios drive 0x00) at bootstrap, and when 
installing OpenBSD, the kernel shows the same drive as hard drive sd0, 
so it will install the hard-drive specific boot files, and the first 
stage boot loader fails to load the second stage boot loader 
(Loading...; ERR M).


So the USB stick must boot the second phase and load the kernel like 
floppy (bios drive 0x00), but the kernel must use the same USB thumb 
drive as sd0 when mounting the root.


I have been reading that cross-device booting is not possible, but can I 
somehow use installboot/disklabel/whatever to put a floppy-alike boot 
sector to the USB device, so the boot sector can find the second phase 
boot loader (/boot/boot) and kernel (/bsd) on fd0, but make the kernel 
use sd0 as root device?


Or should I just ditch the idea, or use a USB thumb drive that is 
non-removable so my BIOS will show it as a hard drive? I know my memory 
card reader shows itself as non-removable, so it is bios drive 0x81 
(hd1), so I could try with it.
I do not know if this is normal BIOS behaviour, as I've never used 
OpenBSD on machines which could boot over USB. Nor I don't know if this 
is normal from the USB stick to say it is removable, or if other are 
non-removable.


BTW, this is way harder than making my FireBox router boot from hd0 (8MB 
flash device soldered on motherboard) and load the kernel from hd1 (real 
hard drive) and use that as root, as they are just hard drives.


Thank you for any comments, I'll appreciate them.

- Jani

__
Saunalahti Iso G - 50 Gigatavua nopeaa ja varmennettua verkkolevyd 
tiedostoillesi. Kokeile ilmaiseksi!
http://isog.pp.fi 



teamspeak server - webinterface

2007-01-09 Thread Marian Hettwer

Hi All,

I'm trying to get a teamspeak server (linux binary) running under 
OpenBSD 4.0
I already digged the archives and teamspeak forums and it looks like 
nobody got it running yet.
Well, my thought was: If it runs under FreeBSD's linux emulation, why 
shouldn't it run with OpenBSD's linux emulation?

Actually getting it to start is pretty straight forward.
But now it gets strange.
It opened the port 14534 for its webinterface, but I just can't get a 
connection.


tcpdump looks like that:

[EMAIL PROTECTED] /emul/linux/lib # tcpdump -vvv -i fxp0 port 14534
tcpdump: listening on fxp0, link-type EN10MB



21:01:16.648401 91.64.139.194.56966  81.169.171.191.14534: S [tcp sum 
ok] 3861700237:3861700237(0) win 65535 mss 1460,nop,wscale 
0,nop,nop,timestamp 1675052578 0,sackOK,eol (DF) (ttl 51, id 15498, len 64)
21:01:16.648478 81.169.171.191.14534  91.64.139.194.56966: S [tcp sum 
ok] 1066820290:1066820290(0) ack 3861700238 win 16384 mss 
1460,nop,nop,sackOK,nop,wscale 0,nop,nop,timestamp 3608973420 
1675052578 (DF) (ttl 64, id 50636, len 64)
21:01:16.681719 91.64.139.194.56966  81.169.171.191.14534: . [tcp sum 
ok] 1:1(0) ack 1 win 65535 nop,nop,timestamp 1675052578 3608973420 
(DF) (ttl 51, id 15499, len 52)
21:01:16.685012 91.64.139.194.56966  81.169.171.191.14534: P 1:252(251) 
ack 1 win 65535 nop,nop,timestamp 1675052578 3608973420 (DF) (ttl 51, 
id 15500, len 303)
21:01:16.884139 81.169.171.191.14534  91.64.139.194.56966: . [tcp sum 
ok] 1:1(0) ack 252 win 17125 nop,nop,timestamp 3608973421 1675052578 
(DF) (ttl 64, id 36313, len 52)


some packets are flying around but the connection doesn't get 
established at all.


I even gave ktrace a try, but I'm pretty much unable to interpret the 
output ;)
So if anybody wants to take a look, the ktrace (for using with kdump) is 
here: http://terrorteam.de/~rabauke/OpenBSD/ktrace.out-teamspeak


Any help is very much appreciated.
I can't see a reason at all why it's running under FreeBSD, but not 
under OpenBSD :-/


best regards,
Marian



Re: java on openbsd 4.0?

2007-01-09 Thread J.C. Roberts
On Tuesday 09 January 2007 12:26, Zoong PHAM wrote:
 On Tuesday,  9 January 2007 at 13:37:37 -0300, Gustavo Rios wrote:
  Is it possible to build jdk;java directly from openbsd: I always
  believed i had to install linux emulation first.

 No, I don't think so.

 I just installed jdk-1.5.0p19
 from the port: very much make; make install

 After that, I could compile and run helloworld.java :-)

 If you want the packages, email me privately.

 HTH,
 Zoong

Actually the answer depends on which sun java version you're trying to 
build.

The devel/jdk/1.4 port requires linux emulation so it can execute the 
java vm necessary to complete the build.

The devel/jdk/1.5 port depends on the lang/kaffe port for the java vm 
needed to complete the build (on most all of the 1.5 port flavors 
except the native-bootstrap flavor). 

JCR



Re: ath(4) testers needed: AR2413, AR5413, AR5424 and AR5212 11a mode

2007-01-09 Thread Travers Buda
Both the Belkin revision 5000 and 5100 product F5D7010 are AR2413's.

Travers Buda



Re: ifconfig commands for trunk0 to hostname.trunk0

2007-01-09 Thread Christopher Linn
On Tue, Jan 09, 2007 at 12:12:07PM -0800, John Brahy wrote:
 On 1/9/07, John Brahy [EMAIL PROTECTED] wrote:
 How would I translate this into  /etc/hostname.trunk0?
 
 ifconfig em0 up
 ifconfig em1 up
 ifconfig trunk0 trunkport em0 trunkport em1 xx.xx.xx.xx netmask 
 255.255.255.0
 
 should it just be
 !/sbin/ifconfig em0 up
 !/sbin/ifconfig em1 up
 !/sbin/ifconfig trunk0 trunkport em0 trunkport em1 xx.xx.xx.xx netmask
 255.255.255.0
 
 or is there a more syntactically correct way to to it?
 
 
 ok, I figured it out:
 $ cat /etc/hostname.trunk0
 trunkproto loadbalance trunkport em0 trunkport em1 xx.xx.xx.xx 255.255.255.0
 
 and it works perfectly! OpenBSD rocks!
 
 is this the way that it always is for configuring /etc/hostname.if
 files? basically take the ifconfig command and put everything after
 the interface name into the /etc/hostname.if file?

hostname.if(5)

-- 
Christopher Linn celinn at mtu.edu  | By no means shall either the CEC
System Administrator II   | or MTU be held in any way liable
  Center for Experimental Computation | for any opinions or conjecture I
Michigan Technological University | hold to or imply to hold herein.



Checking out ports

2007-01-09 Thread Andrey Shuvikov

Hi,

I've installed OBSD 4.0 in qemu and now trying to check out src and
ports. I don't have any problems with src but when I try to checkout
ports cvs seems to check out everything, then hangs for a while and
exits with the error:

...
cvs server: Updating xmris/pkg
cvs server: Updating xmris/scripts
Read from remote host anoncvs1.usa.openbsd.org: Connection reset by peer

I tried several times and with different mirrors. Can the reason be
that xmris directories are empty? How can I be sure that I really got
everything? cvs update gets me the same error as cvs checkout.

Thanks,
Andrey



Re: Help for diagnose

2007-01-09 Thread Joachim Schipper
On Mon, Jan 08, 2007 at 07:51:32AM +0100, nolan76 wrote:
 Hi everybody and Happy New Year,
 
 I have openbsd4 on my i386 workstation and i have some problem. The whole
 computer hang and i have to reset when i use firefox or rdesktop. But when i
 use vncviewer or konqueror everything is working right. I try different
 version of firefox, i try to update every package, but i am stuck now.  I am
 using only package and no ports.
 
 I don't know how to find clue to solve my problem, when the computer hang
 everything get stuck and there is no information in the log. I post here my
 dmesg if it can help.
 
 This workstation have been working very well for weeks at home, now i bring
 it at office it is hanging using firefox or rdesktop. I hope someone can
 help me to diagnose this problem.

it's worth noting that at least Firefox is very much more likely to
tickle memory or other hardware problems than vncviewer or konqueror, as
it uses lots of memory and other resources.

Run memtest86, or compile something large (like, update to -stable). If
that works, it's much less likely to be a memory problem.

Joachim



Re: snort bpf file problems

2007-01-09 Thread Stuart Henderson
On 2007/01/09 23:03, Can Erkin Acar wrote:
 Dan Farrell wrote:
  I'm running Snort 2.4.5 (the pkg) on OpenBSD 4.0 and I use a bpf filter
  file to have Snort ignore certain hosts altogether.
  
  The command I'm using is 'snort  -D -i dc1 -F bpfile'
 
 The kernel has a limit for the maximum number of filter
 instructions. Currently it is set to 512. This is the
 limit you are hitting with your filter definition.
 
 Since the buffers are not allocated until you set a
 filter, it seems safe to increase the limit
 it is defined in src/sys/net/bpf.h
 #define BPF_MAXINSNS 512
 you will have to compile a new kernel

Alexander Zatserkovniy sent me these patches to fix the support that
was already in snort to handle packets with pflog headers (snort didn't
update it after the header format last changed); this allows selection
via PF rules rather than BPF (and with the new clonable pflogNN you
can have a bunch of different options ready and choose from them).
As well as using them on the pflog interfaces directly you should
also be able to use them on files produced by pflogd.

I haven't tested myself but it may be useful...

diff -Naur snort-2.4.5/src/decode.c snort-2.4.5-patched/src/decode.c
--- src-orig/decode.c   Sat Sep 17 08:06:35 2005
+++ src/decode.cThu Dec 14 15:39:51 2006
@@ -1204,7 +1204,7 @@
 p-pfh = (PflogHdr *) pkt;
 
 /*  get the network type - should only be AF_INET or AF_INET6 */
-switch(ntohs(p-pfh-af))
+switch((unsigned short)p-pfh-af)
 {
 case AF_INET:   /* IPv4 */
 DEBUG_WRAP(DebugMessage(DEBUG_DECODE, IP datagram size calculated 
to be %lu 


diff -Naur snort-2.4.5/src/decode.h snort-2.4.5-patched/src/decode.h
--- src-orig/decode.h   Fri Sep  2 08:09:20 2005
+++ src/decode.hThu Dec 14 15:37:29 2006
@@ -724,7 +724,7 @@
 
 typedef struct _Pflog_hdr
 {
-int8_t  length;
+u_int8_t  length;
 sa_family_t af;
 u_int8_taction;
 u_int8_treason;
@@ -732,6 +732,10 @@
 charruleset[16];
 u_int32_t   rulenr;
 u_int32_t   subrulenr;
+uid_t   uid;
+pid_t   pid;
+uid_t   rule_uid;
+pid_t   rule_pid;
 u_int8_tdir;
 u_int8_tpad[3];
 } PflogHdr;



Re: ODBC....

2007-01-09 Thread Joachim Schipper
On Tue, Jan 09, 2007 at 01:48:55PM -0500, Jim Razmus wrote:
 * [EMAIL PROTECTED] [EMAIL PROTECTED] [070109 12:12]:
  Hi All:
  
  We're going to be using an OpenBSD 4.0 machine to collect employee 
  Punch-in data and store that data in the form of a comma seperated file. 
  We would then like to access that data from our mainframe via openbsd to 
  retreive the records.
  
  Would you be so kind as to lend your opinion as to the best package to 
  install on the OpenBSD machine to provide that ODBC support?
  
  Thanks in advance.
  
  
  
  Fred
  
 
 It's included in the base install.  ftp
 
 I'm not being sarcastic here either.  Since it's a comma delimited file,
 your likely not expecting it to act like an ACID database engine...
 
 Without anymore information, that's the best answer I've got.

I'd go with SSH, but the above answer is sound. Why would you want ODBC
for CSV, anyway?

Joachim



Re: ITIMER_REAL incorrect for process started _after_ a date change

2007-01-09 Thread Stefan Krah
Otto Moerbeek [EMAIL PROTECTED] wrote:
 On Tue, 9 Jan 2007, Stefan Krah wrote:
 
  Hello,
  
  it seems that the interval timer is incorrect for a process that is
  started _after_ a sudden date change. Could someone reproduce this
  before I report it as a bug? System is OpenBSD 4.0-stable, i386.
 
 You already reported it. This is a bug. Try this diff from art@

Tested it with several kinds of date changes and things work
as they should. Thanks for the quick fix!


Stefan


 
   -Otto
 
 Index: kern_time.c
 ===
 RCS file: /cvs/src/sys/kern/kern_time.c,v
 retrieving revision 1.60
 diff -u -r1.60 kern_time.c
 --- kern_time.c   30 Oct 2006 20:19:33 -  1.60
 +++ kern_time.c   9 Jan 2007 16:42:30 -
 @@ -550,7 +550,7 @@
   if (SCARG(uap, which) == ITIMER_REAL) {
   struct timeval now;
  
 - getmicrotime(now);
 + getmicrouptime(now);
   /*
* Convert from absolute to relative time in .it_value
* part of real time timer.  If time for real time timer
 
  
  
  Here are the steps (program below):
  
  
  # ./timertest   
   
  0  0  600  0
  0  0  598  99
  0  0  597  98
  0  0  596  97
  0  0  595  96
  ^C
  # date
  Tue Jan  9 15:18:23 CET 2007
  # date 1522
  Tue Jan  9 15:22:00 CET 2007
  # 
  # 
  # ./timertest 
  0  0  389  61
  0  0  388  60
  0  0  387  59
  0  0  386  58
  
  
  timertest.c
  ===
  #include sys/time.h
  
  #include stdio.h
  #include stdlib.h
  #include unistd.h
  
  
  int main(void)
  {
  
  struct itimerval itimer = {{0, 0}, {600, 0}};
  
  
  if (setitimer(ITIMER_REAL, itimer, (struct itimerval *)NULL)) {
  puts(setting itimer failed\n);
  exit(1);
  }
  
  while (1) {
  getitimer(ITIMER_REAL, itimer);
  printf( %ld  %ld  %ld  %ld\n, itimer.it_interval.tv_sec,
   itimer.it_interval.tv_usec, itimer.it_value.tv_sec,
   itimer.it_value.tv_usec );
  sleep(1);
  }
  
  return 0;
  }
  ===
  
  
  Stefan Krah



Re: OT Re: 'database filesystems'

2007-01-09 Thread chefren

On 1/9/07 10:17 PM, Tony Abernethy wrote:

chefren wrote:

On 1/9/07 1:22 PM, Richard P. Welty wrote:

..


yes, it seems to me that the author of this proposal doesn't really
understand the huge gap between a conventional file system and
a full up RDBMS.

I do.


You don't.


I do.


How do you handle physical defects in the storage media?


Not, hardware should work, it may handle defects itself and when it's 
defect you should drop it.



How do you store the RDMS inside the RDMS?


NOT!!!

You don't get the basic idea and seems to prefer inaccessible data blobs.


How do you bring up the RDMS from a cold start on the bare hardware?


What about using the bootsector like now?


How do you determine which attributes exist and how big each is?


Why is this a problem?


Once that is done, how do you add attributes or change their sizes?


Your brain is filed, why is this a problem, storing attributes is 
done perfectly by databases and BAD by files, since about only the 
program that stores them knows what are the attributes.


..


Then explain to me what a good file system is!


I can lose a sector without losing the entire disk.


That's no problem, I propose a database filesystem that has integrated 
versioning and replication. If a drive fails you can go on with a copy.



If the filesystem is damaged I can recover information from it.


Clumsy.


Not only that, but I can actually use a disk that is not 100% in a
production environment. (Disks have effectively been that way for a long
time)


Disks are approaching 1TB these days, your recovery should be there 
instantly or you are busy 1000x 1 minute to restore (from what???) and 
that's impossible if you don't have a replicated version of your data 
on a hot spare.




Filesystems need versioning and replication =build in=, you cannot
backup a 750G harddisk now and then, these days everything is on
line and you need continous copies on multiple locations.


How do you version the boot sector?


Childish



Restoring a 750GB disk (who has tapedrives to store 750G?) costs about
a minute a GB, clueless path.

With or without error recovery?



Without! If a disc is broken it's broken, throw it away!



And a filesystem with true versioning and replication is as close to a
database as you can get.


What is this true versioning?


That you can restore earlier versions of data.


How does it differ from whatever whoever happens to call versioning?
What is the granularity that distinguishes one version from the next?


Both versioning and replication need paramaters. You can wish to store 
every write and consider a write only done when it's fully replicated 
on another disk but laws of physics would make that a very dependable 
but relatively slow solution.


 Why?

One of the driving forces behind my wish for a database filesystem is 
that disk space is cheap but hard to backup and we are in need for a 
clear solution.


+++chefren



redundant firewalls with carp/pfsync single dsl connection? possible?

2007-01-09 Thread Aaron Martinez
I have been wondering this for some time now and haven't seen anyone 
pose the question so i figured it's time.


I have a single dsl connection coming in _not_ terminating on the normal 
cpe but going directly to my firewall (OBSD 4.0) via sangoma s518 dsl 
card.  I then have a few nics for routing to different lans, DMZ etc.
The question is, is it possible to create another firewall put a dsl 
card in the machine, split the phone line running  the same dsl signal 
into each box and use carp, on the dsl interface, to provide failover / 
redundancy or would i need to get a dedicated dsl router and then run 
the two machines into a hub connecting to the dsl router?  (which still 
leaves me with a single point of hardware failure)

Thanks in advance,

aaron



Re: OT Re: 'database filesystems'

2007-01-09 Thread Mathieu Sauve-Frankel
Could you guys please take this completely useless discussion off-list ?
It has absolutely zero value to anyone running or developing OpenBSD.

-- 
Mathieu Sauve-Frankel



Compaq Dual Cpu

2007-01-09 Thread unde find
Hello Misc. Very recently came into my hands a compaq 1U proliant DL360
server.
Openbsd runs just great on it!

I only have 1 problem. Openbsd only see's 1 of the 2 processors the server
has equiped.
I took a look but didnt find a special distro for dual proccessors or some
special kernel and so I used the i386 bsd.rd.
Does someone have relative experience with another machine or another same
compaq server to know why this happens ?

I run openbsd 4.0 generic. Dmesg follows below.

Thank you all in advance for your time and patience :)


OpenBSD 4.0-current (GENERIC) #1331: Wed Jan  3 09:48:30 MST 2007
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) III CPU family 1266MHz (GenuineIntel 686-class)
1.27
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MM
real mem  = 1073295360 (1048140K)
avail mem = 970924032 (948168K)
using 4256 buffers containing 53788672 bytes (52528K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(00) BIOS, date 12/31/99, BIOS32 rev. 0 @ 0xf,
SMB
bios0: Compaq ProLiant DL360
pcibios0 at bios0: rev 2.1 @ 0xf/0x2000
pcibios0: PCI BIOS has 6 Interrupt Routing table entries
pcibios0: PCI Interrupt Router at 000:15:0 (ServerWorks OSB4 rev 0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc/0x8000 0xc8000/0x4000! 0xe8000/0x6000
0xee000/0x2000!
acpi at mainbus0 not configured
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 ServerWorks CNB20LE Host rev 0x06
pchb1 at pci0 dev 0 function 1 ServerWorks CNB20LE Host rev 0x06
pci1 at pchb1 bus 3
fxp0 at pci1 dev 4 function 0 Intel 8255x rev 0x08, i82559: irq 5, address
00:
inphy0 at fxp0 phy 1: i82555 10/100 PHY, rev. 4
fxp1 at pci1 dev 5 function 0 Intel 8255x rev 0x08, i82559: irq 7, address
00:
inphy1 at fxp1 phy 1: i82555 10/100 PHY, rev. 4
cac0 at pci0 dev 1 function 0 Symbios Logic 53c1510 rev 0x02: irq 3 Compaq
Int
scsibus0 at cac0: 1 targets
sd0 at scsibus0 targ 0 lun 0: Compaq, RAID1 vol #00,  SCSI2 0/direct fixed
sd0: 8670MB, 8670 cyl, 64 head, 32 sec, 512 bytes/sec, 17756160 sec total
ATI Mach64 GV rev 0x7a at pci0 dev 3 function 0 not configured
Compaq Netelligent ASMC rev 0x00 at pci0 dev 4 function 0 not configured
ppb0 at pci0 dev 5 function 0 Intel i960 RP PCI-PCI rev 0x05
pci2 at ppb0 bus 1
vga1 at pci2 dev 0 function 0 ATI Mach64 GV rev 0x7a
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
Intel 80960RP ATU rev 0x05 at pci0 dev 5 function 1 not configured
piixpm0 at pci0 dev 15 function 0 ServerWorks OSB4 rev 0x51: SMBus
disabled
pciide0 at pci0 dev 15 function 1 ServerWorks OSB4 IDE rev 0x00: DMA
atapiscsi0 at pciide0 channel 1 drive 0
scsibus1 at atapiscsi0: 2 targets
cd0 at scsibus1 targ 0 lun 0: COMPAQ, CRN-8245B, 2.18 SCSI0 5/cdrom
removable
cd0(pciide0:1:0): using PIO mode 4, DMA mode 2
isa0 at mainbus0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pms0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pms0 mux 0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: PC speaker
spkr0 at pcppi0
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
biomask ef4d netmask efed ttymask ffef
pctr: 686-class user-level performance counters enabled
mtrr: Pentium Pro MTRR support
dkcsum: sd0 matches BIOS drive 0x80
root on sd0a
rootdev=0x400 rrootdev=0xd00 rawdev=0xd02



Re: Compaq Dual Cpu

2007-01-09 Thread Josh Keister

Hello, try OpenBSD/4.0/i386/bsd.mp
http://www.openbsd.org/faq/faq4.html#FilesNeeded

On 1/9/07, unde find [EMAIL PROTECTED] wrote:

Hello Misc. Very recently came into my hands a compaq 1U proliant DL360
server.
Openbsd runs just great on it!

I only have 1 problem. Openbsd only see's 1 of the 2 processors the server
has equiped.
I took a look but didnt find a special distro for dual proccessors or some
special kernel and so I used the i386 bsd.rd.
Does someone have relative experience with another machine or another same
compaq server to know why this happens ?

I run openbsd 4.0 generic. Dmesg follows below.

Thank you all in advance for your time and patience :)


OpenBSD 4.0-current (GENERIC) #1331: Wed Jan  3 09:48:30 MST 2007
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) III CPU family 1266MHz (GenuineIntel 686-class)
1.27
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MM
real mem  = 1073295360 (1048140K)
avail mem = 970924032 (948168K)
using 4256 buffers containing 53788672 bytes (52528K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(00) BIOS, date 12/31/99, BIOS32 rev. 0 @ 0xf,
SMB
bios0: Compaq ProLiant DL360
pcibios0 at bios0: rev 2.1 @ 0xf/0x2000
pcibios0: PCI BIOS has 6 Interrupt Routing table entries
pcibios0: PCI Interrupt Router at 000:15:0 (ServerWorks OSB4 rev 0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc/0x8000 0xc8000/0x4000! 0xe8000/0x6000
0xee000/0x2000!
acpi at mainbus0 not configured
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 ServerWorks CNB20LE Host rev 0x06
pchb1 at pci0 dev 0 function 1 ServerWorks CNB20LE Host rev 0x06
pci1 at pchb1 bus 3
fxp0 at pci1 dev 4 function 0 Intel 8255x rev 0x08, i82559: irq 5, address
00:
inphy0 at fxp0 phy 1: i82555 10/100 PHY, rev. 4
fxp1 at pci1 dev 5 function 0 Intel 8255x rev 0x08, i82559: irq 7, address
00:
inphy1 at fxp1 phy 1: i82555 10/100 PHY, rev. 4
cac0 at pci0 dev 1 function 0 Symbios Logic 53c1510 rev 0x02: irq 3 Compaq
Int
scsibus0 at cac0: 1 targets
sd0 at scsibus0 targ 0 lun 0: Compaq, RAID1 vol #00,  SCSI2 0/direct fixed
sd0: 8670MB, 8670 cyl, 64 head, 32 sec, 512 bytes/sec, 17756160 sec total
ATI Mach64 GV rev 0x7a at pci0 dev 3 function 0 not configured
Compaq Netelligent ASMC rev 0x00 at pci0 dev 4 function 0 not configured
ppb0 at pci0 dev 5 function 0 Intel i960 RP PCI-PCI rev 0x05
pci2 at ppb0 bus 1
vga1 at pci2 dev 0 function 0 ATI Mach64 GV rev 0x7a
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
Intel 80960RP ATU rev 0x05 at pci0 dev 5 function 1 not configured
piixpm0 at pci0 dev 15 function 0 ServerWorks OSB4 rev 0x51: SMBus
disabled
pciide0 at pci0 dev 15 function 1 ServerWorks OSB4 IDE rev 0x00: DMA
atapiscsi0 at pciide0 channel 1 drive 0
scsibus1 at atapiscsi0: 2 targets
cd0 at scsibus1 targ 0 lun 0: COMPAQ, CRN-8245B, 2.18 SCSI0 5/cdrom
removable
cd0(pciide0:1:0): using PIO mode 4, DMA mode 2
isa0 at mainbus0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pms0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pms0 mux 0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: PC speaker
spkr0 at pcppi0
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
biomask ef4d netmask efed ttymask ffef
pctr: 686-class user-level performance counters enabled
mtrr: Pentium Pro MTRR support
dkcsum: sd0 matches BIOS drive 0x80
root on sd0a
rootdev=0x400 rrootdev=0xd00 rawdev=0xd02




Re: ODBC repost...

2007-01-09 Thread Rogier Krieger

On 1/9/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote:

We would then like to access that data from our
mainframe via ODBC to retreive the records.


Since it's not really clear to me what you intend to so, I am assuming
the following:
+ Your mainframe runs a Windows platform
+ Your OpenBSD machine serves as a database server
+ You're going for PostgreSQL on your OpenBSD machine as your database choice

In that case: install the ODBC plugins available from postgresql.org
onto your Windows machine. Set up an ODBC link and retrieve the data
from PostgreSQL throuth that ODBC link.

You shouldn't need to install an ODBC package onto your OpenBSD
machine: installing on your Windows mainframe should suffice. All
you'd need to install onto your OpenBSD machine is the PostgreSQL
package.

Hope this helps,

Rogier

--
If you don't know where you're going, any road will get you there.



Re: greylisting

2007-01-09 Thread Stephen Schaff

That's what I'm starting to think...

hostname.sis0: (management interface)
inet xxx.xxx.xxx.xxx 255.255.255.0 NONE

hostname.sis1:
up

hostname.sis2:
up

bridgename.bridge0:
add sis1
add sis2
up

pf.conf: (as per http://undeadly.org/cgi? 
action=articlesid=20061108134508)

ext_if=sis1
mailserver=xxx.xxx.xxx.xxx

table spamd persist
table spamd-white persist

rdr pass on $ext_if proto tcp from spamd to port smtp \
- 127.0.0.1 port spamd
rdr pass on $ext_if proto tcp from !spamd-white to port smtp \
- 127.0.0.1 port spamd

# log so you can watch the connections getting trapped
pass in log on $ext_if route-to lo0 inet proto tcp to 127.0.0.1 port  
spamd


# log smtp sessions to and from the mailserver
pass in log on $ext_if proto tcp to $mailserver port smtp keep state
pass out log on $ext_if proto tcp from $mailserver to any port smtp  
keep state


rc.conf:
...
spamd_flags=-G 5:4:864 -v
spamd_grey=YES
spamlogd_flags=
...

syslog.conf:
!spamd
*.* /var/log/spamd


On 9-Jan-07, at 9:14 AM, Bob Beck wrote:



Sounds to me like your pf rules and/or bridge setup
are not set up correctly to allow the connections to be redirected.

-Bob


* Stephen Schaff [EMAIL PROTECTED] [2007-01-08 18:52]:

tail -f /var/log/daemon shows:

Jan  8 02:23:38 spamd spamd[4966]: listening for incoming  
connections.


That's it.

Stephen

On 8-Jan-07, at 3:54 AM, edgarz wrote:


They should be.
tail -f /var/log/daemon
there they are.

Stephen Schaff wrote:

I've set up spamd on a soekris bridge. It seems to be working for
the most part. However, when I used spamdb to view the database -
it only shows WHITE entries. It appears there are no GREY entries.
Have I configured things incorrectly?
Also, if I try to send mail from a remote mail client, using the
mail server behind spamd, it won't allow the connection. I have to
use my shaw smtp server, or some other one to get the mail to
send. Any ideas on how to configure it so that I can use my main
mail server to send messages?
Config files:
pf.conf:
ext_if=sis1
mailserver=my mail server IP
table spamd persist
table spamd-white persist
rdr pass on $ext_if proto tcp from spamd to port smtp \
   - 127.0.0.1 port spamd
rdr pass on $ext_if proto tcp from !spamd-white to port smtp \
   - 127.0.0.1 port spamd
# log so you can watch the connections getting trapped
pass in log on $ext_if route-to lo0 inet proto tcp to 127.0.0.1
port spamd
# log smtp sessions to and from the mailserver
pass in log on $ext_if proto tcp to $mailserver port smtp keep  
state

pass out log on $ext_if proto tcp from $mailserver to any port
smtp keep state
rc.conf:
spamd_flags=-v
spamd_grey=YES
spamlogd_flags=
!DSPAM:45a2227782793355514740!




--
#!/usr/bin/perl
if ((not 0  not 1) !=  (! 0  ! 1)) {
   print Larry and Tom must smoke some really primo stuff...\n;
}




Re: Compaq Dual Cpu

2007-01-09 Thread Steve Shockley

unde find wrote:

Hello Misc. Very recently came into my hands a compaq 1U proliant DL360
server.
Openbsd runs just great on it!

I only have 1 problem. Openbsd only see's 1 of the 2 processors the server
has equiped.


If bsd.mp doesn't fix your problem, download the Smartstart 5.5 ISO from 
HP (not Smartstart 7.x) and try reconfiguring what OS runs on your 
system.  (Assuming you have the tan DL360 G1.)




Re: java on openbsd 4.0?

2007-01-09 Thread steven mestdagh
Gustavo Rios [2007-01-09, 13:37:37]:
 Is it possible to build jdk;java directly from openbsd: I always
 believed i had to install linux emulation first.

if something is unclear about the section 'Building the Sun JDK' in
FAQ 8, please let us know what it is.

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm