Re: Viewing IPS in authusers table

2007-03-02 Thread Nick Holland
maxracks wrote:
> Hello,
> I am trying to view the IP's listed in the authusers table and the
> authpf_users.
> Does anyone know the command to show this? im sure this is an easy one.

It's just a table, do as you do any other table...
  # pfctl -t authpf_users -T show
 68.43.117.34

But this is also interesting (I think it is, at least):
  $ ps -ax|grep authp[f]

Nick.



Re: pf rules

2007-03-02 Thread Bryan Irvine

On 3/2/07, Pedro Drimel Neto <[EMAIL PROTECTED]> wrote:

In a rule:

 pass in  on dc0 from 192.168.0.0/24 to any port www

If a webserver is running on firewall box, the network 192.168.0.0/24 will
access it. Is there another way to introduce this rule? Cause I don't want
that the network access the webserver on firewall box.


I think I understand.

You want to pass web traffic EXCEPT to the one on the firewall?

something like:
pass in on dc0 from 192.168.0.0/24 to !dc0 port 



Thanks and sorry if isn't in this list to talk about pf rules...

it is, but there's also a pf mailing list just google for that.

--Bryan



Re: Max amount of RAM

2007-03-02 Thread Jason George
>> Hello folks, 
>> 
>> I was curious about the maximum amount of RAM an OpenBSD system will 
>> recognize.  Is there any way at all to get it to recognize more?  Kernel 
>> recompile?  Sysctl options? 
>> 
>> I've browsed through the archives here a bit and have found a few answers 
>> relating to my question, but there were older.  For instance, someone was 
>> saying back in '03 that the maximum amount of RAM the OS would recognize is 
>> 2GB.  I happen to know that my amd64 system recognizes 4GB nowadays.  But 
>> the machine has 8GB of RAM. 
>> 
>> Some other answers said it would never go higher than 2GB b/c it would 
>> require an entire rewrite of the VM subcomponent (or something to that 
>> effect).  But again, my system currently recognizes 4GB, so it seems there 
>> has been some progress. 
>> 
>> Any definitive word on this?  Thanks.
>
>Well, if you want to get support for all that ram, well, the devs
>are going to need access to such a system.  They don't have that
>stuff lying around.
>
>From want.html An amd64 with more than 4 GB RAM for hacking on large
>memory support in i386 and amd64, needed in London, UK.  Contact
>[EMAIL PROTECTED]

OpenBSD recognized and booted on amd64 with >4GB of RAM nearly 2 years ago.  
The work was done principally at the 2005 Hackathon by various developers 
including weingart@, jason@ and [EMAIL PROTECTED]  

Doing anything useful with that memory is another issue...which is the point 
of the donation request.

>From my mail archive when testing said patches on the machine that made this 
happen back in 2005...

[snip]
boot> boot bsd.mp
booting hd0a:bsd.mp: 3216516+613831+511136+0+549936
[80+273360+165344]=0x916930
entry point at 0x1001e0 [7205c766, 3404, 24448b12, eb20a304[ using
439552 bytes of bsd ELF symbol table ]
Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California.  All rights reserved.
Copyright (c) 1995-2005 OpenBSD. All rights reserved.
http://www.OpenBSD.org

OpenBSD 3.7-current (GENERIC.MP) #5: Mon May 30 11:24:16 MDT 2005
[EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 16565170176 (16176924K)
avail mem = 14381322240 (14044260K)
using 22937 buffers containing 1503199232 bytes (1467968K) of memory
mainbus0 (root)
mainbus0: Intel MP Specification (Version 1.4) (SUN  SunFire V40z)
[snip]



Viewing IPS in authusers table

2007-03-02 Thread maxracks
Hello,
I am trying to view the IP's listed in the authusers table and the
authpf_users.
Does anyone know the command to show this? im sure this is an easy one.
-- 
View this message in context: 
http://www.nabble.com/Viewing-IPS-in-authusers-table-tf3337112.html#a9281117
Sent from the openbsd user - misc mailing list archive at Nabble.com.



Re: X package sets not listed in MD5

2007-03-02 Thread Antti Harri

On Fri, 2 Mar 2007, Stuart Henderson wrote:


MD5 is built as part of the main OS release (/usr/src/etc/Makefile);
X is built separately.


I know but appending the information to the existing files would
be great. Or even with separate files as Matthew suggested.
Another possibility is to have different files for both
and have the usual checksum files generated by putting
these together.

--
Antti Harri



Re: Mounting ext2 in a loopback device

2007-03-02 Thread Hannah Schroeter
Hello!

On Fri, Mar 02, 2007 at 08:40:37PM +0100, Henning Brauer wrote:
>* Lars D. Nood??n <[EMAIL PROTECTED]> [2007-03-02 20:28]:
>> On Fri, 2 Mar 2007, [EMAIL PROTECTED] wrote:
>> > A "See fstab(5) for types of supported filesystems" in the already
>> > excellent man page would have been helpful. Or is this seen as
>> > already overly obvious?

>> It was one of the first things I checked.  From fstab's man page:
>> "ext2fs  A local Linux compatible ext2fs filesystem."

>> So, it is, in principle, supported.  But maybe there is a package missing?
>> See the context below in which newfs gives the error.

>>   $ newfs -t ext2fs -f 1440 /dev/svnd0c
>>   newfs: newfs_ext2fs not found: No such file or directory

>you can mount ext2 file systems, but not create new ones.

Wouldn't the package e2fsprogs (from ports/sysutils/e2fsprogs) help?

Kind regards,

Hannah.



Re: pf rules

2007-03-02 Thread Fred Crowson

Pedro Drimel Neto wrote:

In a rule:

 pass in  on dc0 from 192.168.0.0/24 to any port www

If a webserver is running on firewall box, the network 192.168.0.0/24 will
access it. Is there another way to introduce this rule? Cause I don't want
that the network access the webserver on firewall box.

Is there some way of rule like FORWARD of netfilter?

Thanks and sorry if isn't in this list to talk about pf rules...



Do you mean something like:

so2:fred /var/log> sudo grep www /etc/pf.conf
pass log on $ext_if proto tcp from any to $webserver port { www, https } 
keep state


Or do you mean that you do not want 192.168.0.0/24 to access the 
webserver on the firewall?


--
http://www.crowsons.net/puters/x41.php



Re: failover default route with ospf

2007-03-02 Thread Stuart Henderson
On 2007/03/02 15:18, Chris Black wrote:
> I have ospfd running on the machines and all the routers are talking to
> eachother and seeing eachother as evidenced by output of various ospfctl
> commands. My main problem is that ospf does not seem to be changing my
> default route for the internal routers.
> 
> ***
> How do I get ospf to correctly change routes (including default route)?

ospfd won't change an existing static route (including the default route).

You would need to remove the default route on your internal routers (i.e.
route delete default;rm /etc/mygate) and just have them learn a default
from OSPF.

> router-id 0.0.0.10 (.20 for other internal machine)

It's normal (though not a requirement) to use an IP address here.

> area 10.254.0.0 {
> area 10.6.0.0 {

You're missing the backbone (area 0.0.0.0); for this setup I don't see
the point in having >1 area, you should be able to merge it all down into
0.0.0.0.

In order to track carp state, you should be using the carp interfaces
and not the physical ("carpdev") interfaces.

As with bgpd (and dhcpd and others), the ospfd manual page describes
the implementation without going into detail about the protocol; if you
haven't found them yet, routergod.com's articles about OSPF aren't bad
as an introduction; http://www.routergod.com/sevenofnine/ and
http://routergod.com/sevenofnine/ospf_part_2.html



Re: Migrate to OpenBSD + OpenBGP

2007-03-02 Thread Dan Farrell
If you are new to OpenBSD and OpenBGP then I would-

a) setup a test box not in your production path
b) request your providers set up second peer sessions each, with each
'second session' going to the test box
c) get comfy with OpenBSD and OpenBGP with those two full tables from
your peers, just like you will in future production.

d) throw a second test box in the mix, migrate one of the 'second
sessions' to that box.
e) mess around with CARP on the inside connections of these boxes to
your LAN

The nice thing about this path is the flexibility and non-intrusion into
your current production network while you get over your own learning
curve.

One possibility on your topology- consider a front-end router to each
provider (can be whatever type) and then put your two OBGPD boxes behind
them in a CARP setup and have your providers multihop their sessions to
that CARP address... now you can have BGP redundancy! Then continue
CARPing on the back end... now you have no single point of failure (in
that part of the topology.)

We've been testing that very setup (and actually placing the two OBGPD
route servers in two separate locations connected by Metro Ethernet) and
it has worked in testing flawlessly. We actually let the edge routers
peer (via IBGP obviously) with the CARP BGP address for next hop
forwarding (some of our edge routers have more than one upstream
connection)... each edge router gets one table from one inside peer,
making it's configuration/maintenance much simpler. You just make the
BGP config changes on the OBGPD box, and you don't have to change
anything in the edge routers...

Anyone else doing this or something similar?

Danno

Danno.appliedi.net/drupal/

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of [EMAIL PROTECTED]
Sent: Friday, March 02, 2007 3:16 AM
To: OpenBSD misc
Subject: Migrate to OpenBSD + OpenBGP

Hello to everyone in the list,
I run small ISP. Currently I use Debian + Quagga Box for my BGP
sessions.
It is a single box with tow full feeds (approximately 200K prefixes)
from tow ISPs and tow sessions from the same ISPs with local prefixes
(approximately 2,5K prefixes). The same box is doing traffic shaping,
firewall and so on for DMZ and clients. The clients are only connected
by Metro Ethernet links.
If I do not describe the current situation well please let me know, I
will give more details.
I plan to change this setup with OpenBSD + OpenBGP boxes, one for each
ISP with IBGP between them and third box for firewall and client
connections, possibly the third box would be duplicated by another box
with CARP. I am looking for the best redundancy I could get.
However I may be wrong in my plan...
As I am absolute beginner with OpenBSD I would be very happy for any
ideas, advises or practical examples.
Thank you very much,
Ivo



failover default route with ospf

2007-03-02 Thread Chris Black
I have four router/firewalls that are all interconnected (each one to
every other with a direct crossover link). Two of these are
external-facing and have interfaces connected to the internet and our
DMZ. The other two are internal-facing and have connections to our
internal networks. I am already using carp to handle failover to each of
these networks. The remaining issue is handling failover routes between
the internal routers and external routers. I posted to the list awhile
ago with a few alternative approaches for this and am now experimenting
with ospf. Unfortunately I am new to ospf and was unable to find any
docs talking about this type of situation or even really explaining all
the various options available in ospfd.conf.
I have ospfd running on the machines and all the routers are talking to
eachother and seeing eachother as evidenced by output of various ospfctl
commands. My main problem is that ospf does not seem to be changing my
default route for the internal routers.

***
How do I get ospf to correctly change routes (including default route)?
Or is ospf a really silly way to solve this problem in the first place?
***

Here is how I have set up ospf on the internal machines:
uplink0if="bge0"
uplink1if="bge1"

router-id 0.0.0.10 (.20 for other internal machine)
fib-update yes
redistribute connected

area 10.254.0.0 {
interface $uplink0if {
auth-type none
}
interface $uplink1if {
auth-type none
   metric 100
}
}

area 10.6.0.0 {
interface em0 {
   passive
}
interface em1 {
   passive
}
interface em3 {
   passive
}
}

ospf for external machines:
inlink0if="bge0"
inlink1if="bge1"

router-id 0.0.0.30 (.40 for other internal machine)
fib-update yes
redistribute connected
redistribute default

area 10.254.0.0 {
interface $inlink0if {
   auth-type none
}
interface $inlink1if {
   auth-type none
   metric 100
}
}

area 10.6.0.0 {
interface em0 {
passive
}
interface em1 {
passive
}
interface em2 {
passive
}
interface em3 {
passive
}
}



Re: [OpenBSD] DST patch for OpenBSD 3.5

2007-03-02 Thread MH
On Fri, Mar 02, 2007 at 09:14:28AM -0800, bruce bres wrote:
> Is there a timezone.patch  available for OpenBSD 3.5 to fix the DST dates for 
> 2007? I have looked on http://openbsd.org/errata35.html but find nothing.
> I really do not want to upgrade the server to 4.0 right now.
> 
> 
> thanks
> 
>

Hi Bruce,

You can download the new data files 
(ftp://elsie.nci.nih.gov/pub/tzdata2007c.tar.gz)
Then run zic to compile the files (zic -d /path/tmpdir/zonefiles northamerica)
Then copy the new files to /usr/share/zoneinfo.
Check by running zdump -v /etc/localtime and verify that the change for 2007+ 
looks alright.
I would recommend bouncing the server prior to the actual DST change on 
03/11/07.

Hope this helps,
Mike



Re: usb serial port

2007-03-02 Thread Greg Thomas

On 3/2/07, Bryan Irvine <[EMAIL PROTECTED]> wrote:

OK someone smack me with a cluestick because I cannot find the answer
for this anywhere.

I've got a usb -> serial adapter and cannot figure out what port to
tell minicom to use.





Keyspans aren't supported.  Check the archives for some suggestions
for others that work great.


bmtphy0 at gem0 phy 0: BCM5201 10/100 PHY, rev. 2
ugen0 at uhub1 port 1
ugen0: Keyspan USA-19QI serial, rev 1.00/80.01, addr 2



Greg



Re: X package sets not listed in MD5

2007-03-02 Thread Matthew R. Dempsky
On Fri, Mar 02, 2007 at 01:01:22PM -0600, Matthew R. Dempsky wrote:
> What about a patch like this?  (Just a proof of concept; completely
> untested.)

Sorry, copy/paste mangled the tabs in that.  It also occured to me the
sort invocations are probably unnecessary.

Index: Makefile
===
RCS file: /cvs/XF4/Makefile,v
retrieving revision 1.54
diff -u -r1.54 Makefile
--- Makefile12 Aug 2006 16:48:52 -  1.54
+++ Makefile2 Mar 2007 19:47:18 -
@@ -149,6 +149,8 @@
cd distrib/sets && \
env MACHINE=${MACHINE} ksh ./maketars ${OSrev} ${OSREV} && \
(env MACHINE=${MACHINE} ksh ./checkflist ${OSREV} || true)
+   -cd ${RELEASEDIR} && md5 x*.tgz > MD5.XF4
+   -cd ${RELEASEDIR} && cksum x*.tgz > CKSUM.XF4
 
 install: install-xc install-xc-old install-extra install-distrib
 .ifndef NOFONTS



Re: usb serial port

2007-03-02 Thread Nick !

On 3/2/07, Bryan Irvine <[EMAIL PROTECTED]> wrote:

OK someone smack me with a cluestick because I cannot find the answer
for this anywhere.

I've got a usb -> serial adapter and cannot figure out what port to
tell minicom to use.




ugen0 at uhub1 port 1
ugen0: Keyspan USA-19QI serial, rev 1.00/80.01, addr 2


ugen means "usb generic". It looks like your adaptor is not supported
on OpenBSD. If it was, you would have seen a line after this listing
the ucom0 port as available.

-Nick



Re: usb serial port

2007-03-02 Thread Otto Moerbeek
On Fri, 2 Mar 2007, Bryan Irvine wrote:

> OK someone smack me with a cluestick because I cannot find the answer
> for this anywhere.
> 
> I've got a usb -> serial adapter and cannot figure out what port to
> tell minicom to use.

> ugen0 at uhub1 port 1
> ugen0: Keyspan USA-19QI serial, rev 1.00/80.01, addr 2

The keyspan serial adapter is one of the few that are not supported.

-Otto



Re: Mounting ext2 in a loopback device

2007-03-02 Thread Henning Brauer
* Lars D. Nood??n <[EMAIL PROTECTED]> [2007-03-02 20:28]:
> On Fri, 2 Mar 2007, [EMAIL PROTECTED] wrote:
> > A "See fstab(5) for types of supported filesystems" in the already
> > excellent man page would have been helpful. Or is this seen as
> > already overly obvious?
> 
> It was one of the first things I checked.  From fstab's man page:
> "ext2fs  A local Linux compatible ext2fs filesystem."
> 
> So, it is, in principle, supported.  But maybe there is a package missing?
> See the context below in which newfs gives the error.
> 
>   $ newfs -t ext2fs -f 1440 /dev/svnd0c
>   newfs: newfs_ext2fs not found: No such file or directory

you can mount ext2 file systems, but not create new ones.

-- 
Henning Brauer, [EMAIL PROTECTED], [EMAIL PROTECTED]
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting - Hamburg & Amsterdam



pf rules

2007-03-02 Thread Pedro Drimel Neto
In a rule:

 pass in  on dc0 from 192.168.0.0/24 to any port www

If a webserver is running on firewall box, the network 192.168.0.0/24 will
access it. Is there another way to introduce this rule? Cause I don't want
that the network access the webserver on firewall box.

Is there some way of rule like FORWARD of netfilter?

Thanks and sorry if isn't in this list to talk about pf rules...



Re: Mounting ext2 in a loopback device

2007-03-02 Thread Miod Vallat
> It was one of the first things I checked.  From fstab's man page:
> "ext2fs  A local Linux compatible ext2fs filesystem."
> 
> So, it is, in principle, supported.  But maybe there is a package missing?
> See the context below in which newfs gives the error.

Well, do you want to mount the image or newfs it? OpenBSD does not ship
with anything able to create ext2fs filesystems, you'll need to create
the filesystem with another operating system.

Miod



usb serial port

2007-03-02 Thread Bryan Irvine

OK someone smack me with a cluestick because I cannot find the answer
for this anywhere.

I've got a usb -> serial adapter and cannot figure out what port to
tell minicom to use.



Dmesg:
[ using 357380 bytes of bsd ELF symbol table ]
console out [ATY,RageM3pA]console in [keyboard] ADB found
using parent ATY,RageM3pParent:: memaddr a400 size 400, :
consaddr a4008000, : ioaddr a002, size 2: memtag 8000, iotag
8000: width 1024 linebytes 1024 height 768 depth 8
Copyright (c) 1982, 1986, 1989, 1991, 1993
   The Regents of the University of California.  All rights reserved.
Copyright (c) 1995-2006 OpenBSD. All rights reserved.  http://www.OpenBSD.org

OpenBSD 4.0 (GENERIC) #1056: Sat Sep 16 21:21:14 MDT 2006
   [EMAIL PROTECTED]:/usr/src/sys/arch/macppc/compile/GENERIC
real mem = 134217728 (131072K)
avail mem = 112705536 (110064K)
using 1254 buffers containing 6709248 bytes (6552K) of memory
mainbus0 (root): model PowerBook3,1
cpu0 at mainbus0: 750 (Revision 0x8300): 400 MHz: 1MB backside cache
memc0 at mainbus0: uni-n
ki2c0 at memc0 offset 0xf8001000
iic0 at ki2c0
mpcpcibr0 at mainbus0 pci: uni-north, Revision 0xff
pci0 at mpcpcibr0 bus 0
pchb0 at pci0 dev 11 function 0 "Apple Uni-N AGP" rev 0x00
vgafb0 at pci0 dev 16 function 0 "ATI Mobility M3" rev 0x02, mmio
wsdisplay0 at vgafb0 mux 1: console (std, vt100 emulation)
mpcpcibr1 at mainbus0 pci: uni-north, Revision 0x0
pci1 at mpcpcibr1 bus 0
pchb1 at pci1 dev 11 function 0 "Apple Uni-N" rev 0x00
macobio0 at pci1 dev 23 function 0 "Apple Keylargo" rev 0x02
openpic0 at macobio0 offset 0x4: version 0x4614
macgpio0 at macobio0 offset 0x50
macgpio1 at macgpio0 irq 47
"programmer-switch" at macgpio0 not configured
"escc-legacy" at macobio0 offset 0x12000 not configured
zsc0 at macobio0 offset 0x13000: irq 22,23
zstty0 at zsc0 channel 0
zstty1 at zsc0 channel 1
awacs0 at macobio0 offset 0x14000: irq 24,9,10 speaker
audio0 at awacs0
"timer" at macobio0 offset 0x15000 not configured
adb0 at macobio0 offset 0x16000 irq 25: via-pmu, 3 targets
akbd0 at adb0 addr 2: PowerBook G4 keyboard (Inverted T)
wskbd0 at akbd0: console keyboard, using wsdisplay0
ams0 at adb0 addr 3: EMP trackpad  2-button, 400 dpi
wsmouse0 at ams0 mux 0
abtn0 at adb0 addr 7: brightness/volume/eject buttons
apm0 at adb0: battery flags 0x5, 100% charged
"battery" at macobio0 offset 0x0 not configured
"backlight" at macobio0 offset 0xf300 not configured
ki2c1 at macobio0 offset 0x18000
iic1 at ki2c1
wdc0 at macobio0 offset 0x1f000 irq 19: DMA
wd0 at wdc0 channel 0 drive 0: 
wd0: 16-sector PIO, LBA, 5729MB, 11733120 sectors
wd0(wdc0:0:0): using PIO mode 4, DMA mode 2, Ultra-DMA mode 4
mediabay0 at macobio0 offset 0x34 irq 16
wdc1 at mediabay0 offset 0x2 irq 20: DMA
wdc2 at macobio0 offset 0x21000 irq 21: DMA
ohci0 at pci1 dev 24 function 0 "Apple USB" rev 0x00: irq 27, version 1.0
usb0 at ohci0: USB revision 1.0
uhub0 at usb0
uhub0: Apple OHCI root hub, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
ohci1 at pci1 dev 25 function 0 "Apple USB" rev 0x00: irq 28, version 1.0
usb1 at ohci1: USB revision 1.0
uhub1 at usb1
uhub1: Apple OHCI root hub, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
cbb0 at pci1 dev 26 function 0 "TI PCI1211 CardBus" rev 0x00: irq 58
cardslot0 at cbb0 slot 0 flags 0
cardbus0 at cardslot0: bus 1 device 0 cacheline 0x8, lattimer 0x20
pcmcia0 at cardslot0
mpcpcibr2 at mainbus0 pci: uni-north, Revision 0x16
pci2 at mpcpcibr2 bus 0
pchb2 at pci2 dev 11 function 0 "Apple Uni-N Eth" rev 0x00
"Apple Uni-N Eth Firewire" rev 0x01 at pci2 dev 14 function 0 not configured
gem0 at pci2 dev 15 function 0 "Apple Uni-N GMAC" rev 0x01: irq 41,
address 00:30:65:46:8f:60
bmtphy0 at gem0 phy 0: BCM5201 10/100 PHY, rev. 2
ugen0 at uhub1 port 1
ugen0: Keyspan USA-19QI serial, rev 1.00/80.01, addr 2
bootpath: '/[EMAIL PROTECTED]/[EMAIL PROTECTED]/[EMAIL PROTECTED]/[EMAIL 
PROTECTED]/bsd'
boot device: wd0.
root on wd0a
rootdev=0x0 rrootdev=0xb00 rawdev=0xb02
WARNING: clock lost 12195 days, using FS time -- CHECK AND RESET THE DATE!



Re: Mounting ext2 in a loopback device

2007-03-02 Thread Lars D . Noodén
On Fri, 2 Mar 2007, [EMAIL PROTECTED] wrote:
> A "See fstab(5) for types of supported filesystems" in the already
> excellent man page would have been helpful. Or is this seen as
> already overly obvious?

It was one of the first things I checked.  From fstab's man page:
"ext2fs  A local Linux compatible ext2fs filesystem."

So, it is, in principle, supported.  But maybe there is a package missing?
See the context below in which newfs gives the error.

  $ dd if=/dev/zero of=floppy.img bs=512 count=2880
  $ vnconfig svnd0 floppy.img
  $ vnconfig -l
  vnd0: covering floppy.img on wd0h, inode 41221
  vnd1: not in use
  vnd2: not in use
  vnd3: not in use
  $ newfs -t ext2 -f 1440 /dev/svnd0c
  newfs: newfs_ext2 not found: No such file or directory
  $ newfs -t ext2fs -f 1440 /dev/svnd0c
  newfs: newfs_ext2fs not found: No such file or directory

-Lars

Lars NoodC)n ([EMAIL PROTECTED])
 Ensure access to your data now and in the future
 http://opendocumentfellowship.org/about_us/contribute



Re: Mounting ext2 in a loopback device

2007-03-02 Thread Lars D . Noodén
On Fri, 2 Mar 2007, Paul de Weerd wrote:

> [snip] You might want to check out chapter 9 of the very nice FAQ
> OpenBSD has, find it on http://www.openbsd.org/faq/faq9.html ... [snip]

Thanks.  It's useful, but neither ch 9 nor ch 14 explicitly show an
OpenBSD analog to this from the other system:

sudo mount -o loop debian.dmg debdir;

> How is the debian.img formatted ?

Ext3.  Here is the exact sequence.  Only the last line, which provides the
content, is important as I am trying to migrate a few things to sysjail.

dd if=/dev/zero of=debian.dmg bs=512k count=500; #
mkfs.ext3 debian.dmg;
mkdir debdir;
sudo mount -o loop debian.dmg debdir;
sudo debootstrap etch debdir http://ftp.de.debian.org/debian/;

> Was it originally partitioned ?

No.  I am all thumbs with fdisk.  (Can follow recipes, though)
How essential is partitioning in this case?

For my part, it's probably not so important how or where the disk image is
made, only that I would prefer a disk image that can be mounted and used
on OpenBSD, Debian || Ubuntu and OS X.

It is, however, intended primarily for use in sysjail on OpenBSD.

> Note that the linux partitions (stored in MBR and so on) are different
> from the OpenBSD partitions (stored in a disklabel, see the manpage to
> the program of the same name) [snip]

Regards,
-Lars

PS.  disklabel and fdisk output below

disklabel svnd0
# /dev/rsvnd0c:
type: SCSI
disk: vnd device
label: fictitious
flags:
bytes/sector: 512
sectors/track: 100
tracks/cylinder: 1
sectors/cylinder: 100
cylinders: 5120
total sectors: 512000
rpm: 3600
interleave: 1
trackskew: 0
cylinderskew: 0
headswitch: 0   # microseconds
track-to-track seek: 0  # microseconds
drivedata: 0

16 partitions:
# sizeoffset  fstype [fsize bsize  cpg]
   c:512000 0  unused  0 0  # Cyl 0 -
5119



disk svnd0
fdisk: sysctl(machdep.bios.diskinfo): Device not configured
Disk: svnd0 geometry: 5120/1/100 [512000 Sectors]
Offset: 0   Signature: 0x0
  Starting   Ending   LBA Info:
  #: idC   H  S -C   H  S [   start:  size   ]

  0: 000   0  0 -0   0  0 [   0:   0 ] unused
  1: 000   0  0 -0   0  0 [   0:   0 ] unused
  2: 000   0  0 -0   0  0 [   0:   0 ] unused
  3: 000   0  0 -0   0  0 [   0:   0 ] unused



Lars NoodC)n ([EMAIL PROTECTED])
 Ensure access to your data now and in the future
 http://opendocumentfellowship.org/about_us/contribute



Re: DST patch for OpenBSD 3.5

2007-03-02 Thread Mike Lockhart
Correction, I applied the patch to the 4.0 timezone files, then ran a
diff between the 4.0 timezone files and the 3.2 timezone files to create
patches for 3.2, applied the patches, and built accordingly.

Regards,
Mike Lockhart

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Mike Lockhart[Systems Engineering & Operations]
mailto: [EMAIL PROTECTED]
GPG: 8714 6F73 3FC8 E0A4 0663  3AFF 9F5C 888D 0767 1550
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of Mike Lockhart
Sent: Friday, March 02, 2007 1:55 PM
To: David Terrell; bruce bres
Cc: misc@openbsd.org
Subject: Re: DST patch for OpenBSD 3.5

Using the 4.0 patches, I did a diff on 3.2 timezone files (/usr/src),
then used the provided Makefile to create updated timezone files.
Worked like a champ.

Regards,
Mike Lockhart

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Mike Lockhart[Systems Engineering & Operations]
mailto: [EMAIL PROTECTED]
GPG: 8714 6F73 3FC8 E0A4 0663  3AFF 9F5C 888D 0767 1550
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of David Terrell
Sent: Friday, March 02, 2007 1:37 PM
To: bruce bres
Cc: misc@openbsd.org
Subject: Re: DST patch for OpenBSD 3.5

On Fri, Mar 02, 2007 at 09:14:28AM -0800, bruce bres wrote:
> Is there a timezone.patch  available for OpenBSD 3.5 to fix the DST
dates for 2007? I have looked on http://openbsd.org/errata35.html but
find nothing.
> I really do not want to upgrade the server to 4.0 right now.

Stable releases stop being updated two minor revisions later.  Once
3.7 came out, 3.5 was end-of-lifed.

The TZ data itself is stored in /usr/share/zoneinfo.  You can try
installing 4.0-stable (4.0 release does NOT have up to date TZ info,
so you'll need to cvs update to _4_0 and rebuild), making a tarball
of /usr/share/zoneinfo and replacing that directory on your 3.5 box.
No warranty expressed or implied.  YMMV.  HTH.  HAND.

--
David Terrell
[EMAIL PROTECTED]
((meatspace)) http://meat.net/



Re: X package sets not listed in MD5

2007-03-02 Thread Matthew R. Dempsky
On Fri, Mar 02, 2007 at 02:55:25PM +, Stuart Henderson wrote:
> MD5 is built as part of the main OS release (/usr/src/etc/Makefile);
> X is built separately.

What about a patch like this?  (Just a proof of concept; completely
untested.)


Index: Makefile
===
RCS file: /cvs/XF4/Makefile,v
retrieving revision 1.54
diff -u -r1.54 Makefile
--- Makefile12 Aug 2006 16:48:52 -  1.54
+++ Makefile2 Mar 2007 18:57:42 -
@@ -149,6 +149,11 @@
cd distrib/sets && \
env MACHINE=${MACHINE} ksh ./maketars ${OSrev} ${OSREV} && \
(env MACHINE=${MACHINE} ksh ./checkflist ${OSREV} || true)
+   -cd ${RELEASEDIR}; md5 x*.tgz > MD5.XF4
+   -cd ${RELEASEDIR}; cksum x*.tgz > CKSUM.XF4
+   -cd ${RELEASEDIR} && sort -o MD5.XF4 MD5.XF4
+   -cd ${RELEASEDIR} && sort -o CKSUM.XF4 -k 3 CKSUM.XF4
+

 install: install-xc install-xc-old install-extra install-distrib
 .ifndef NOFONTS



Re: DST patch for OpenBSD 3.5

2007-03-02 Thread Mike Lockhart
Using the 4.0 patches, I did a diff on 3.2 timezone files (/usr/src),
then used the provided Makefile to create updated timezone files.
Worked like a champ.

Regards,
Mike Lockhart

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Mike Lockhart[Systems Engineering & Operations]
mailto: [EMAIL PROTECTED]
GPG: 8714 6F73 3FC8 E0A4 0663  3AFF 9F5C 888D 0767 1550
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of David Terrell
Sent: Friday, March 02, 2007 1:37 PM
To: bruce bres
Cc: misc@openbsd.org
Subject: Re: DST patch for OpenBSD 3.5

On Fri, Mar 02, 2007 at 09:14:28AM -0800, bruce bres wrote:
> Is there a timezone.patch  available for OpenBSD 3.5 to fix the DST
dates for 2007? I have looked on http://openbsd.org/errata35.html but
find nothing.
> I really do not want to upgrade the server to 4.0 right now.

Stable releases stop being updated two minor revisions later.  Once
3.7 came out, 3.5 was end-of-lifed.

The TZ data itself is stored in /usr/share/zoneinfo.  You can try
installing 4.0-stable (4.0 release does NOT have up to date TZ info,
so you'll need to cvs update to _4_0 and rebuild), making a tarball
of /usr/share/zoneinfo and replacing that directory on your 3.5 box.
No warranty expressed or implied.  YMMV.  HTH.  HAND.

--
David Terrell
[EMAIL PROTECTED]
((meatspace)) http://meat.net/



Re: DST patch for OpenBSD 3.5

2007-03-02 Thread David Terrell
On Fri, Mar 02, 2007 at 09:14:28AM -0800, bruce bres wrote:
> Is there a timezone.patch  available for OpenBSD 3.5 to fix the DST dates for 
> 2007? I have looked on http://openbsd.org/errata35.html but find nothing.
> I really do not want to upgrade the server to 4.0 right now.

Stable releases stop being updated two minor revisions later.  Once
3.7 came out, 3.5 was end-of-lifed.

The TZ data itself is stored in /usr/share/zoneinfo.  You can try
installing 4.0-stable (4.0 release does NOT have up to date TZ info,
so you'll need to cvs update to _4_0 and rebuild), making a tarball
of /usr/share/zoneinfo and replacing that directory on your 3.5 box.
No warranty expressed or implied.  YMMV.  HTH.  HAND.

-- 
David Terrell
[EMAIL PROTECTED]
((meatspace)) http://meat.net/



Re: Mounting ext2 in a loopback device

2007-03-02 Thread ericfurman
On Fri, 2 Mar 2007 17:59:03 +, "Miod Vallat" <[EMAIL PROTECTED]> said:
> >   $ sudo mount -t ext2 /dev/svnd0c debian
> >   mount: no mount helper program found for ext2: No such file or directory
> 
> Use ``-t ext2fs''.
> 
> Miod
> 

A "See fstab(5) for types of supported filesystems" in the already
excellent man page would have been helpful. Or is this seen as 
already overly obvious?



DST patch for OpenBSD 3.5

2007-03-02 Thread bruce bres
Is there a timezone.patch  available for OpenBSD 3.5 to fix the DST dates for 
2007? I have looked on http://openbsd.org/errata35.html but find nothing.
I really do not want to upgrade the server to 4.0 right now.


thanks


 
-
Sucker-punch spam with award-winning protection.
 Try the free Yahoo! Mail Beta.



Re: Mounting ext2 in a loopback device

2007-03-02 Thread Paul de Weerd
Hi Lars,

On Fri, Mar 02, 2007 at 11:37:38AM -0500, Lars D. Nood??n wrote:
| How does OpenBSD handle mounting ext2 filesystems?
| What's wrong or missing from the attempt below?
|
|   $ sudo vnconfig svnd0 debian.img
|   $ sudo vnconfig -l
|   vnd0: covering debian.dmg on wd0h, inode 41670
|   vnd1: not in use
|   vnd2: not in use
|   vnd3: not in use
|   $ mkdir debian
|   $ sudo mount -t ext2 /dev/svnd0c debian
|   mount: no mount helper program found for ext2: No such file or directory

How is the debian.img formatted ? Was it originally partitioned ? Note
that the linux partitions (stored in MBR and so on) are different from
the OpenBSD partitions (stored in a disklabel, see the manpage to the
program of the same name).

You might want to check out chapter 9 of the very nice FAQ OpenBSD
has, find it on http://www.openbsd.org/faq/faq9.html .. especially
paragraph 9.5 - Accessing your Linux files from OpenBSD should help.
(this is actually a pointer to 14.16, but you'll see that yourself).

If you need more help, try sending a dmesg, the output of `disklabel
svnd0` and `fdisk svnd0` etc.

On a final note, I think you want -t ext2fs (see mount(8) and
mount_ext2fs(8)).

Cheers,

Paul 'WEiRD' de Weerd

--
>[<++>-]<+++.>+++[<-->-]<.>+++[<+
+++>-]<.>++[<>-]<+.--.[-]
 http://www.weirdnet.nl/

[demime 1.01d removed an attachment of type application/pgp-signature]



Re: How to uninstall fvwm with obsd4.0?

2007-03-02 Thread Peter Hessler
No need to uninstall the older version, just install the new one via 
ports.  At the end, it will spit out a message to add 
'exec /usr/local/bin/fvwm2' to your .xinitrc or .xsession file.  That 
will Do The Right Thing.



On 2007 Mar 02 (Fri) at 19:24:58 +0800 (+0800), ronald jiang wrote:
:I want to install a newer one.
:


--
Uncle Ed's Rule of Thumb:
Never use your thumb for a rule.  You'll either hit it with a
hammer or get a splinter in it.



Re: Mounting ext2 in a loopback device

2007-03-02 Thread Miod Vallat
>   $ sudo mount -t ext2 /dev/svnd0c debian
>   mount: no mount helper program found for ext2: No such file or directory

Use ``-t ext2fs''.

Miod



Mounting ext2 in a loopback device

2007-03-02 Thread Lars D . Noodén
How does OpenBSD handle mounting ext2 filesystems?
What's wrong or missing from the attempt below?

  $ sudo vnconfig svnd0 debian.img
  $ sudo vnconfig -l
  vnd0: covering debian.dmg on wd0h, inode 41670
  vnd1: not in use
  vnd2: not in use
  vnd3: not in use
  $ mkdir debian
  $ sudo mount -t ext2 /dev/svnd0c debian
  mount: no mount helper program found for ext2: No such file or directory


Lars NoodC)n ([EMAIL PROTECTED])
 Ensure access to your data now and in the future
 http://opendocumentfellowship.org/about_us/contribute



Re: mlock for non-root on i386

2007-03-02 Thread Tobias Ulmer
On Fri, Mar 02, 2007 at 11:25:11AM +0100, Mechiel Lukkien wrote:
> Hi all,
> 
> It seems mlock does not work on OpenBSD/i386 for non-root users.  On other
> archs it might work as non-root (looking at the code), but I don't have
> a machine to test.  It seems this has existed for a long time:
> 
>   http://marc.theaimsgroup.com/?l=openbsd-misc&m=93761396111587&w=2
> 
> Mlock fails and sets EPERM, which is not specified in the manual page.
> It should probably be listed.
> 
> I tested with this program, perhaps I am using mlock incorrectly ("it
> works on another OS" probably isn't a good argument ;-)):
> 
>   http://www.xs4all.nl/~mechiel/tmp/memlock.c
> 
> There seems to be a system-wide limit to prevent abuse by random users,
> so that probably isn't the reason to not allow mlock...  Does anyone
> know why mlock should not work?
> 
> Regards,
> Mechiel
> 
> 

>From http://www.opengroup.org/onlinepubs/009695399/functions/mlock.html

"The appropriate privilege is required to lock process memory with
mlock()"

So getting an EPERM is the norm if your're a normal user on most OS.

You didn't ask for it, but let me guess. You want to protect some super
secret data from being swaped out to disk. OpenBSD does have encrypted
swap enabled by default.

Tobias



Re: X package sets not listed in MD5

2007-03-02 Thread Flying Walrus
Please feel free to flame me over this, but...

Is there a good reason not to have the X build generate checksums? in a 
seperate file?

Ben

On Fri, 2 Mar 2007 14:55:25 +, Stuart Henderson <[EMAIL PROTECTED]> wrote:
> On 2007/03/02 11:42, Andris wrote:
>> AFAIK, it isn't answered yet in the FAQ, I'am suggesting that.
> 
> MD5 is built as part of the main OS release (/usr/src/etc/Makefile);
> X is built separately.
---
Ben Calvert
Flying Walrus Communications



Re: vmware: detecting real interfaces?

2007-03-02 Thread bofh

On 3/2/07, Joseph C. Bender <[EMAIL PROTECTED]> wrote:

If you can't or don't want to change the original hardware, just turn
the XP firewall on.  It'll give you about as much protection.


Man, I would use something like comodo, and forget about screwing with
a VM firewall.  Use the right tool for the job, etc etc.



Re: vmware: detecting real interfaces?

2007-03-02 Thread Joseph C. Bender

Jacob Yocom-Piatt wrote:

Nick Holland wrote:

exactly.
This idea of using VMware (or similar) to host a firewall that
protects the host operating system is something I find somewhere
between amusing (because its silly) and scary (because it indicates
people don't really understand, and think that a "firewall" works
magic, and these people might be protecting our personal data).

  


this goes without saying since any solution involving windows is, IMO,
turd polishing. however, i am forced to use the turd (, luke?) and would
rather have it wrapped in tinfoil than paper, not unlike a burrito.


While I normally agree with Nick, it all depends on implementation.  
*grin*

If you can't or don't want to change the original hardware, just turn
the XP firewall on.  It'll give you about as much protection.

There is an option that not many people are aware of, however.  If you
have a USB/Ethernet adapter, you can have it attach as a native *USB*
device to the VM.  I don't recall what the checkbox is under Player (I
use Server these days for just about everything, and it's a lot more
versatile), but it'll "pull" the device from windows and remap the USB
I/O through to the VM.  I've used it with USB wireless and wired
adapters with some success, even including my EVDO data card, which
enumerates as a USB device/modem to the host system (really wierd
CardBus implementation).

Anyway, the big caveat that I've found is not all USB network devices
like having this process happen to them.  The other caveat is that your
performance won't be as good as it would be, as there's a few layers of
I/O redirection that have to take place.  Bottom line is, there's a
method for doing it, it just might not work as well as you want it to.
Figured it was worth a mention anyway.



--
Joseph Bender
Bendorius Consulting
jcbender at bendorius com



Re: jails in openbsd

2007-03-02 Thread michael hamerski
On 3/2/07, Chris Cappuccio <[EMAIL PROTECTED]> wrote:
>
> openbsd supposedly runs great under xen 3 with hardware virtualization.
>
> i'll let you know after i get xen 3 installed on a pentium d 920 with
> some piece of shit OS running dom0.
>
> I had -current running under Debian/kvm off a file a few weeks ago on a
> Turion. I think I actually managed to install it with xen but for some
> reason it wouldn't boot afterwards, this is not OpenBSD specific, perhaps
> just AMD/HVM support in xen is newer. Installing with qemu or kvm and then
> running with xen seems to work ok, although to be fair my image file was
> corrupt last time. Apparently, Dom0 was not that far away when I last
> checked.



cheers,

mike



Re: How to uninstall fvwm with obsd4.0?

2007-03-02 Thread Stuart Henderson
On 2007/03/02 10:02, Nick ! wrote:
> On 3/2/07, Stuart Henderson <[EMAIL PROTECTED]> wrote:
> >On 2007/03/02 09:34, Nick ! wrote:
> >> However, I *think* you should just be able to install the new
> >> fvwm--which presumably means compiling and that means manually copying
> >> the new fvwm over the old
> >
> >ugh. install the new one under /usr/local/...
> >
> 
> Oh, sorry. Yes that is better. I was worrying about assuaging the OP's
> intuitive fear of having the old one interfere; I should have been
> careful to understand his thinking but not take it myself.

:)  to the OP; just specify the full path in .xsession or wherever else
you start fvwm; if you remove/overwrite the original in /usr/X11R6/bin you
may fix things in the short time but store problems for upgrade time.



Re: How to uninstall fvwm with obsd4.0?

2007-03-02 Thread Nick !

On 3/2/07, Stuart Henderson <[EMAIL PROTECTED]> wrote:

On 2007/03/02 09:34, Nick ! wrote:
> However, I *think* you should just be able to install the new
> fvwm--which presumably means compiling and that means manually copying
> the new fvwm over the old

ugh. install the new one under /usr/local/...



Oh, sorry. Yes that is better. I was worrying about assuaging the OP's
intuitive fear of having the old one interfere; I should have been
careful to understand his thinking but not take it myself.

-Nick



Re: X package sets not listed in MD5

2007-03-02 Thread Stuart Henderson
On 2007/03/02 11:42, Andris wrote:
> AFAIK, it isn't answered yet in the FAQ, I'am suggesting that.

MD5 is built as part of the main OS release (/usr/src/etc/Makefile);
X is built separately.



Re: How to uninstall fvwm with obsd4.0?

2007-03-02 Thread Stuart Henderson
On 2007/03/02 09:34, Nick ! wrote:
> However, I *think* you should just be able to install the new
> fvwm--which presumably means compiling and that means manually copying
> the new fvwm over the old

ugh. install the new one under /usr/local/...



Re: X package sets not listed in MD5

2007-03-02 Thread Andrés

AFAIK, it isn't answered yet in the FAQ, I'am suggesting that.

On 3/2/07, Antti Harri <[EMAIL PROTECTED]> wrote:

On Fri, 2 Mar 2007, Andris wrote:

> IMHO, this should be answered in the FAQ.
>
> On 3/2/07, Antti Harri <[EMAIL PROTECTED]> wrote:

>> What's the reason for not providing MD5 sums
>> of X*.tgz sets in the MD5-file of release directories?

Hi,

I guess my googling and other searching skills sucks
then. Can you point me to the entry? Wasn't able to find
the answer with "search" of openbsd.org, nor from ftp.html
or Package FAQ.

--
Antti Harri





--
AndrC)s Delfino



Re: How to uninstall fvwm with obsd4.0?

2007-03-02 Thread Nick !

On 3/2/07, z0mbix <[EMAIL PROTECTED]> wrote:

On 02/03/07, ronald jiang <[EMAIL PROTECTED]> wrote:
> I want to install a newer one.

http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_delete&sektion=1&manpath=OpenBSD+4.0


fvwm isn't a package.

However, I *think* you should just be able to install the new
fvwm--which presumably means compiling and that means manually copying
the new fvwm over the old, and moving any man pages and stuff to their
proper places--and it won't conflict (this isn't Windows).

-Nick



Re: X package sets not listed in MD5

2007-03-02 Thread Antti Harri
On Fri, 2 Mar 2007, Andris wrote:

> IMHO, this should be answered in the FAQ.
>
> On 3/2/07, Antti Harri <[EMAIL PROTECTED]> wrote:

>> What's the reason for not providing MD5 sums
>> of X*.tgz sets in the MD5-file of release directories?

Hi,

I guess my googling and other searching skills sucks
then. Can you point me to the entry? Wasn't able to find
the answer with "search" of openbsd.org, nor from ftp.html
or Package FAQ.

--
Antti Harri



Re: X package sets not listed in MD5

2007-03-02 Thread Andrés

IMHO, this should be answered in the FAQ.

On 3/2/07, Antti Harri <[EMAIL PROTECTED]> wrote:

Hello,

What's the reason for not providing MD5 sums
of X*.tgz sets in the MD5-file of release directories?

I found only one thread [1] regarding this question
from the archives and it didn't answer it
really.

I want to be able to see if the file has been
transferred correctly and I also want to see
if a file that has been transferred earlier
is up to date. I don't want to use other tools than
what is provided in base sets to do this (no
regular packages)

[1] http://marc.theaimsgroup.com/?l=openbsd-misc&m=113230911219069&w=2

--
Antti Harri





--
AndrC)s Delfino



Re: jails in openbsd

2007-03-02 Thread Andrew Pantyukhin

On 3/2/07, Lars D. NoodC)n <[EMAIL PROTECTED]> wrote:

Yes.  I want to run several separate instances of Debian under OpenBSD.

I've started looking at sysjail


I'm not sure about sysjail, but in FreeBSD you can
set up a chroot/jail using any popular Linux distro
through the binary compatibility layer. Should not
be a problem with systrace, I think.


and can look at qemu.  Would there be any
special reasons to choose qemu over others, besides that it's available in
ports?


What others? Bochs has slowed down a bit and there's
not many alternative solutions right now.



Re: How to uninstall fvwm with obsd4.0?

2007-03-02 Thread z0mbix

On 02/03/07, ronald jiang <[EMAIL PROTECTED]> wrote:

I want to install a newer one.


http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_delete&sektion=1&manpath=OpenBSD+4.0



Re: Migrate to OpenBSD + OpenBGP

2007-03-02 Thread Stuart Henderson
On 2007/03/02 13:22, Falk Brockerhoff wrote:
> This works fine apart of one bug in the
> ospf-daemon when the carp-state changes and the local routes have to be
> updated. But I'm confident that this will be fixed soon.

from http://archives.neohapsis.com/archives/openbsd/2007-02/1155.html,
it doesn't look like you are listing the carp interface in ospfd.conf,
but you use 'redistribute connected' instead.

I'm not sure ospfd knows to track carp status in that case; my
preference would be to lose the redist connected and explicitly list
the interfaces you want announced. 'interface carpXX { passive }'
worked nicely for me last time I tested the failover.



Re: Migrate to OpenBSD + OpenBGP

2007-03-02 Thread Falk Brockerhoff
Hello,

actualy I'm using some Cisco equipment and one OpenBGPd Box to connect
the eBGP-Upstreams to my network. I want to replace this setup in the
next couple of month by two OpenBSD boxes. I planned to do it this way:

I want to connect some eBGP session to both boxes and an direct iBGP
link between the two servers. That's it on the world's side. To my
LAN-side I want to use vlans and above on them I want to run Carp for
failover. The internal routes to the VLANs I want do redistribute via
OSPF between the two boxes. This works fine apart of one bug in the
ospf-daemon when the carp-state changes and the local routes have to be
updated. But I'm confident that this will be fixed soon.

When this setup works fine and is tested well, I will configure pf in
combination with pfsync on the two boxes. For pfsync I want to user the
direct link, which runs iBGP und OSPF too.

I hope my thoughts will show you one possible setup. If there are better
and more gentle scenario to do the job, I would be glad if we can
discuss it here. I'm still learning :)

Regards

Falk



Re: Migrate to OpenBSD + OpenBGP

2007-03-02 Thread Henning Brauer
* [EMAIL PROTECTED] <[EMAIL PROTECTED]> [2007-03-02 09:25]:
> Hello to everyone in the list,
> I run small ISP. Currently I use Debian + Quagga Box for my BGP sessions.
> It is a single box with tow full feeds (approximately 200K prefixes) 
> from tow ISPs and tow sessions from the same ISPs with local prefixes 
> (approximately 2,5K prefixes). The same box is doing traffic shaping, 
> firewall and so on for DMZ and clients. The clients are only connected 
> by Metro Ethernet links.
> If I do not describe the current situation well please let me know, I 
> will give more details.
> I plan to change this setup with OpenBSD + OpenBGP boxes, one for each 
> ISP with IBGP between them and third box for firewall and client 
> connections, possibly the third box would be duplicated by another box 
> with CARP. I am looking for the best redundancy I could get.
> However I may be wrong in my plan...
> As I am absolute beginner with OpenBSD I would be very happy for any 
> ideas, advises or practical examples.

well, optimally, you have your two outside OpenBGPD boxes speak to both 
your upstreams each, and just use carp on the insider interface.

-- 
Henning Brauer, [EMAIL PROTECTED], [EMAIL PROTECTED]
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting - Hamburg & Amsterdam



RTorrent and memory leak

2007-03-02 Thread Dolphy
Hi!

I'm using a freshly installed OpenBSD 4.0 on a P4 3.2Ghz.

Well i set every datasize to 128M: in /etc/login.conf, but
rtorrent (or anyother torrent client does the same)
eats all the memory. Even if it is limited in login.conf.

 rtorrent & vmstat -c 20
[1] 21891
 procs   memorypagedisk traps cpu
 r b wavmfre   flt  re  pi  po  fr  sr wd0  int   sys   cs us sy id
 0 2 0 331472   2680  1120   0   2   2   0 944 144 1633  1757  429  3  5 91
 0 3 0 332784   1324  1115   0   0   1   0 516 145 1722  3095  501  2  7 91
 0 1 0 332372604  1165   0  10   0   0 512 150 1831  3972  415  1  6 93
 0 2 0 330564   2364   678   0   4   3   0  131 2753  4040  616  2  5 94
 0 1 0 332272   1256  1399   0   1   1   0 1109 214 2366  3025  558  2  7 91
 0 1 0 332152   1856  2167   0   4   4   0 2231 316 2550  3185  644  2  9 90
 0 1 0 331548   2080  2358   0   2   5   0 2180 309 2889  4343  785  2 13 85
 0 1 0 331488   1496  1294   0   3   6   0 1146 198 1799  1680  370  2  6 92
 0 1 0 333448568  1354   3   2   2   0 1113 214 2066  2239  461  2  5 93
 0 1 0 331548   1432  1479   0   7   2   0 1653 284 2535  2780  536  2  6 91
 0 1 0 332052   2036  1601   6   1   1   0 1628 221 2467  3335  646  5  5 89
 0 2 0 332436   1608  3454  16   0   7   0 3348 460 3147  5342 1105  8 12 81
 0 1 0 331708   2524  1409  17   0   5   0 1603 230 1818  1385  298  2  9 90
 0 2 0 332996768  2118  23   8   5   0 1690 327 1857  1669  422  2 12 86
 0 2 0 332976   1248  2632  22   6   0   0 2730 373 2790  4373  795  5 11 84
 0 1 0 332776   1608  1565  20   1   2   0 1585 260 2042  1788  373  3  6 91
 0 2 0 331056   2156  1621   9   2   4   0 1677 244 1773  1348  333  4  5 91
 0 1 0 333040   1000   854   1   5   0   0 555 191 1682  1054  215  0  3 97
 0 1 0 332824   1800  1557   9   0   4   0 1638 202 2226  2397  459  1  7 92
 0 2 0 332248   1744  1899  17  19   7   0 1602 274 2623  3713  692  2  9 88

[1]+  Stopped rtorrent

ulimit -a
core file size  (blocks, -c) unlimited
data seg size   (kbytes, -d) 131072
file size   (blocks, -f) unlimited
max locked memory   (kbytes, -l) 131072
max memory size (kbytes, -m) 131072
open files  (-n) 64
pipe size(512 bytes, -p) 1
stack size  (kbytes, -s) 4096
cpu time   (seconds, -t) unlimited
max user processes  (-u) 128
virtual memory  (kbytes, -v) 135168

After rtorrent starts on a freshly rebooted system memory disapearing
/50M every second, till <1M.

I dont really get it what can be the problem, maybe some kernel bug?

 uname -psr
OpenBSD 4.0 Genuine Intel(R) CPU 3.20GHz ("GenuineIntel" 686-class)

Any ideas?

Thx,
-DpH-



How to uninstall fvwm with obsd4.0?

2007-03-02 Thread ronald jiang

I want to install a newer one.



Re: RTorrent and memory leak

2007-03-02 Thread Dolphy
Dolphy wrote:

> Well i set every datasize to 128M: in /etc/login.conf, but
> rtorrent (or anyother torrent client does the same)
> eats all the memory. Even if it is limited in login.conf.

[...]

Sorry for the duplicated post.
Author of the origin bugreport was Balazs MOLNAR.

-DpH-



mlock for non-root on i386

2007-03-02 Thread Mechiel Lukkien
Hi all,

It seems mlock does not work on OpenBSD/i386 for non-root users.  On other
archs it might work as non-root (looking at the code), but I don't have
a machine to test.  It seems this has existed for a long time:

http://marc.theaimsgroup.com/?l=openbsd-misc&m=93761396111587&w=2

Mlock fails and sets EPERM, which is not specified in the manual page.
It should probably be listed.

I tested with this program, perhaps I am using mlock incorrectly ("it
works on another OS" probably isn't a good argument ;-)):

http://www.xs4all.nl/~mechiel/tmp/memlock.c

There seems to be a system-wide limit to prevent abuse by random users,
so that probably isn't the reason to not allow mlock...  Does anyone
know why mlock should not work?

Regards,
Mechiel



Re: same version upgrade i386 to amd64 gotchas?

2007-03-02 Thread Paul Pruett

The fix was just to remove PAE support from the i386 kernel (until the
bug is found).  So, try copying the latest snapshot kernel to /bsd and
reboot.  Just grab it from the snapshots/i386 directory on the ftp server.


Agreed, I did not see a easy one line change to kernel compile
to remove PAE for openbsd 4.0 stable. So I did as suggested.

I copied a current i386 kernel from this week , and
it rebooted okay on the athlon64 platform.
To test I did a make for /usr/ports/sytutils/cdrtools
and it did not complain, so thats a small warm fuzzy.
Now I wait a week and see if it freezes/hangs


If the 4.1 kernel solves your problem (it probably will) then you
should wait for a 4.1 cd and do a proper upgrade when you have
the time and have gone over the documentation.  Better yet,
after you've decided how you want to handle the upgrade,
try doing it on another machine first, unless this 
one is experimental.


I been testing the i386 snapshots on 32bit athlons, and
some of the portpackages I desire are not making yet,
but it's a lot closer.

Agreed, I unboxed my emergency spare power supply to put 
together a experiment computer with AMD K8 cpu to test with,

and DOH, it had a 20pin not 24pin as marked.
... :(  so yep, more power supplies are on order,
and next time I'll open and verify the spares to before shelving.


Thanks for the clarifications,
now I know to google "pae openbsd"
I see the notes in

http://www.openbsd.org/plus40.html
"Implemented separate pmap for PAE i386 machines, allows for support for 
machines with more than 4G RAM. Not enabled by default."



http://www.openbsd.org/plus.html
"Revert PAE pmap for now, stops freezes commonly seen on amd64 machines 
running in i386 mode."




Re: invisible line on sparc64

2007-03-02 Thread Miod Vallat

When system is booting and kernel's recognizing video card:

vgafb0 at pci0 dev 1 function 0 "ATI Radeon VE QY" rev 0x00

my screen goes one line up, and I can't see top line of text.


This happens because the vgafb driver is too optimistic thinking it
can drive your card, while it can't. This is being worked on, so that
by the 4.1 release, there will be minimal support for these cards.

In the meantime, you will need to use a serial console.

Miod



Re: IBM ServeRAID 6i

2007-03-02 Thread Danny Kjærgaard
yeah, there is a online array on the discs.


-Original Message-
From: Alexander Yurchenko [mailto:[EMAIL PROTECTED]
Sent: Fri 3/2/2007 11:36 AM
To: Danny Kjfrgaard
Cc: misc@openbsd.org
Subject: Re: IBM ServeRAID 6i

On Fri, Mar 02, 2007 at 10:38:05AM +0100, Danny Kj?rgaard wrote:
> Hi...
>
>
> I have a IBM x225 that i would love to install openbsd on. I did a try with
> the snapshot from 3/1/07 and it boots but cant find the scsi drives. I
threw
> in a ide disk and did the install on this one. I know that the ips driver
is
> being implemented for the 4.1 release, but since the cvs got locked i
thought
> the snapshot would contain a fullt working ips driver. Is it the driver or
me
> ? And what could someone do to make this work ?

the ips driver is still experimental, don't expect much from it.
have you configured an array using the serveraid management cd?

>
> This is the dmesg:
>
>
E,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,S
> S,HTT,TM,SBF,CNXT-ID,xTPR
> real mem  = 536346624 (523776K)
> avail mem = 481685504 (470396K)
> using 4278 buffers containing 26943488 bytes (26312K) of memory
> mainbus0 (root)
> bios0 at mainbus0: AT/286+ BIOS, date 11/09/05, BIOS32 rev. 0 @ 0xfafc0,
> SMBIOS rev. 2.2 @ 0xf (57 entries)
> bios0: IBM -[86495CG]-
> apm0 at bios0: Power Management spec V1.2
> apm0: AC on, battery charge unknown
> apm0: flags 70102 dobusy 1 doidle 1
> pcibios0 at bios0: rev 2.1 @ 0xf/0xded4
> pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdde0/240 (13 entries)
> pcibios0: PCI Exclusive IRQs: 5 9 10 11
> pcibios0: PCI Interrupt Router at 000:31:0 ("Intel 82371SB ISA" rev 0x00)
> pcibios0: PCI bus #5 is the last bus
> bios0: ROM list: 0xc/0x8000 0xc8000/0x1800 0xca000/0x3800
> acpi at mainbus0 not configured
> cpu0 at mainbus0
> pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
> pchb0 at pci0 dev 0 function 0 "Intel E7505 MCH Host" rev 0x03
> "Intel E7505 MCH RAS" rev 0x03 at pci0 dev 0 function 1 not configured
> ppb0 at pci0 dev 1 function 0 "Intel E7505 MCH AGP" rev 0x03
> pci1 at ppb0 bus 1
> ppb1 at pci0 dev 2 function 0 "Intel E7505 MCH PCI-PCI" rev 0x03
> pci2 at ppb1 bus 2
> "Intel 82870P2 IOxAPIC" rev 0x04 at pci2 dev 28 function 0 not configured
> ppb2 at pci2 dev 29 function 0 "Intel 82870P2 PCIX-PCIX" rev 0x04
> pci3 at ppb2 bus 3
> bge0 at pci3 dev 1 function 0 "Broadcom BCM5703X" rev 0x02, BCM5703 A2
> (0x1002): irq 11, address 00:0c:76:f2:9d:a2
> brgphy0 at bge0 phy 1: BCM5703 10/100/1000baseT PHY, rev. 2
> "Intel 82870P2 IOxAPIC" rev 0x04 at pci2 dev 30 function 0 not configured
> ppb3 at pci2 dev 31 function 0 "Intel 82870P2 PCIX-PCIX" rev 0x04
> pci4 at ppb3 bus 4
> ips0 at pci4 dev 1 function 0 "Adaptec ServeRAID" rev 0x02: Morpheus, irq
11
> scsibus0 at ips0: 15 targets
> "Intel E7505 MCH PCI-PCI" rev 0x03 at pci0 dev 2 function 1 not configured
> uhci0 at pci0 dev 29 function 0 "Intel 82801DB USB" rev 0x02: irq 10
> usb0 at uhci0: USB revision 1.0
> uhub0 at usb0
> uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1
> uhub0: 2 ports with 2 removable, self powered
> uhci1 at pci0 dev 29 function 1 "Intel 82801DB USB" rev 0x02: irq 11
> usb1 at uhci1: USB revision 1.0
> uhub1 at usb1
> uhub1: Intel UHCI root hub, rev 1.00/1.00, addr 1
> uhub1: 2 ports with 2 removable, self powered
> uhci2 at pci0 dev 29 function 2 "Intel 82801DB USB" rev 0x02: irq 11
> usb2 at uhci2: USB revision 1.0
> uhub2 at usb2
> uhub2: Intel UHCI root hub, rev 1.00/1.00, addr 1
> uhub2: 2 ports with 2 removable, self powered
> ehci0 at pci0 dev 29 function 7 "Intel 82801DB USB" rev 0x02: irq 9
> usb3 at ehci0: USB revision 2.0
> uhub3 at usb3
> uhub3: Intel EHCI root hub, rev 2.00/1.00, addr 1
> uhub3: 6 ports with 6 removable, self powered
> ppb4 at pci0 dev 30 function 0 "Intel 82801BA AGP" rev 0x82
> pci5 at ppb4 bus 5
> vga1 at pci5 dev 1 function 0 "ATI Rage XL" rev 0x27
> wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
> wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
> ichpcib0 at pci0 dev 31 function 0 "Intel 82801DB LPC" rev 0x02
> pciide0 at pci0 dev 31 function 1 "Intel 82801DB IDE" rev 0x02: DMA, channel
0
> configured to compatibility, channel 1 configured to compatibility
> wd0 at pciide0 channel 0 drive 0: 
> wd0: 16-sector PIO, LBA48, 76319MB, 156301488 sectors
> wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
> atapiscsi0 at pciide0 channel 1 drive 0
> scsibus1 at atapiscsi0: 2 targets
> cd0 at scsibus1 targ 0 lun 0:  SCSI0 5/cdrom
> removable
> cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
> ichiic0 at pci0 dev 31 function 3 "Intel 82801DB SMBus" rev 0x02: irq 5
> iic0 at ichiic0
> iic0: addr 0x22 01=01 02=02 03=03 04=04 05=05 06=06 07=07 08=08 09=09 0a=0a
> 0b=0b 0c=0c 0d=0d 0e=0e 0f=0f 10=10 11=11 12=12 13=13 14=14 15=15 16=16
17=17
> 18=18 19=19 1a=1a 1b=1b 1c=1c 1d=1d 1e=1e 1f=1f 20=20 21=21 22=22 23=23
24=24
> 25=25 26=26 27=27 28=28 29=29 2a=2a 2b=2b 2c=2c 2d=2d 2e=2e 2f=2f 30=30
31=31
> 32=32 33=33 34

Re: squid and OBSD 4

2007-03-02 Thread Nils.Reuvers
I recently installed squid (squid-2.5.STABLE13-transparent-snmp) from
packages on openbsd 4.0 -release -stable. My squid only uses 29M.

15707 _squid 20   27M   29M sleeppoll12:38  0.98% squid

This top 'snapshot' has been taken at a peak moment. We have a 10Mbit/s
internet connection and when using squid, no slow performance. I do not
use the cache option of squid (just wanna log everything for now).

So it might not be that strange for Squid to take 90M. When you disable
squid, do you still have poor performance? When you disable the cache,
do you still have poor performance? What is your definition of poor
performance and how did you establish a baseline?

Dmesg partial:
OpenBSD 4.0 (GENERIC) #1107: Sat Sep 16 19:15:58 MDT 2006
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel Pentium III ("GenuineIntel" 686-class) 1 GHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,
MMX,FXSR,SSE
real mem  = 1072914432 (1047768K)
avail mem = 970698752 (947948K)

Nils

-Original Message-
Hi,

i have a openbsd 4 box with squid-transparent.
it seems like it have poors performance. investigating with `top' i
saw squid using only 90M of ram, why?

How can i use better my box resource? (Xeon CPU with 4GB of ram)

top:
  PID USERNAME PRI NICE  SIZE   RES STATEWAIT TIMECPU
COMMAND
27010 _squid 20   87M   90M sleeppoll 9:01  0.05% squid


--
Cris, member of G.U.F.I
Italian FreeBSD User Group
http://www.gufi.org/



=

A disclaimer applies to this email and any attachments.
Refer to http://www.sparkholland.com/emaildisclaimer for the full text of this
disclaimer.



Re: squid and OBSD 4

2007-03-02 Thread Marius ROMAN

What about your squid.conf ?

what values do you have (if any) for :
cache_mem
minimum_object_size
maximum_object_size
maximum_object_size_in_memory

Check the squid manual for these (and other) options.


Marius

On 3/2/07, Cristiano Deana <[EMAIL PROTECTED]> wrote:

Hi,

i have a openbsd 4 box with squid-transparent.
it seems like it have poors performance. investigating with `top' i
saw squid using only 90M of ram, why?

How can i use better my box resource? (Xeon CPU with 4GB of ram)

top:
  PID USERNAME PRI NICE  SIZE   RES STATEWAIT TIMECPU COMMAND
27010 _squid 20   87M   90M sleeppoll 9:01  0.05% squid


--
Cris, member of G.U.F.I
Italian FreeBSD User Group
http://www.gufi.org/





--
GPG KeyID: 601CB35E
GPG Fingerprint: 17C7 BB76 DF3C 0E54 472E 6154 8AC9 FC1B 601C B35E



Re: squid and OBSD 4

2007-03-02 Thread Martin Schröder

2007/3/2, Cristiano Deana <[EMAIL PROTECTED]>:

i have a openbsd 4 box with squid-transparent.
it seems like it have poors performance. investigating with `top' i
saw squid using only 90M of ram, why?


Check the memory section of your squid.conf

Best
  Martin



invisible line on sparc64

2007-03-02 Thread lukasz
invisible line sparc64

When I tried last snapshot (01.03.07) on sunblade 280r I found one 
inconvenience.
When system is booting and kernel's recognizing video card:

vgafb0 at pci0 dev 1 function 0 "ATI Radeon VE QY" rev 0x00

my screen goes one line up, and I can't see top line of text.

How can I fix this? Thank for any ideas.

Lukasz.

My dmesg:

console is keyboard/display
Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California.  All rights reserved.
Copyright (c) 1995-2007 OpenBSD. All rights reserved.  http://www.OpenBSD.org

OpenBSD 4.1 (GENERIC) #1090: Thu Mar  1 19:51:51 MST 2007
[EMAIL PROTECTED]:/usr/src/sys/arch/sparc64/compile/GENERIC
total memory = 2147483648
avail memory = 1949138944
using 13107 buffers containing 107372544 bytes of memory
bootpath: /[EMAIL PROTECTED],60/SUNW,[EMAIL PROTECTED],0/[EMAIL 
PROTECTED],0/[EMAIL PROTECTED],0
mainbus0 (root): Sun Fire 280R (2 X UltraSPARC-III+) 
cpu0 at mainbus0: SUNW,UltraSPARC-III+ (rev 11.1) @ 1200 MHz, version 0 FPU
cpu0: physical 32K instruction (32 b/l), 64K data (32 b/l), 8192K external (512 
b/l)
memory-controller at mainbus0 not configured
memory-controller at mainbus0 not configured
schizo0 at mainbus0: "Schizo", version 7, ign 200, bus B 0 to 1
schizo0: dvma map c000-, iotdb ad5-ae5
pci0 at schizo0
ebus0 at pci0 dev 5 function 0 "Sun RIO EBus" rev 0x01
"flashprom" at ebus0 addr 0-1f not configured
pcfiic0 at ebus0 addr 2e-2f, 2d-2d ipl 35
iic0 at pcfiic0
"at24c64" at iic0 addr 0x50 not configured
"at24c64" at iic0 addr 0xd0 not configured
"at24c64" at iic0 addr 0xd1 not configured
"at24c64" at iic0 addr 0xd2 not configured
"at24c64" at iic0 addr 0xd3 not configured
"at24c64" at iic0 addr 0xd4 not configured
"at24c64" at iic0 addr 0xd5 not configured
"at24c64" at iic0 addr 0xd6 not configured
"at24c64" at iic0 addr 0xd7 not configured
"bbc" at ebus0 addr 0-f not configured
power0 at ebus0 addr 30002e-30002f, 300600-300607
pcfiic1 at ebus0 addr 30-31 ipl 35
iic1 at pcfiic1
"at24c64" at iic1 addr 0x50 not configured
admtemp0 at iic1 addr 0x18: max1617
"at24c64" at iic1 addr 0x51 not configured
admtemp1 at iic1 addr 0x4c: max1617
"tda8444" at iic1 addr 0x24 not configured
"at24c64" at iic1 addr 0x54 not configured
"pcf8574" at iic1 addr 0x39 not configured
"pcf8574" at iic1 addr 0x3d not configured
"pcf8574" at iic1 addr 0x3e not configured
"at24c64" at iic1 addr 0x52 not configured
"at24c64" at iic1 addr 0x53 not configured
"at24c64" at iic1 addr 0x55 not configured
"at24c64" at iic1 addr 0x56 not configured
"at24c64" at iic1 addr 0x57 not configured
"ds1307" at iic1 addr 0x68 not configured
"beep" at ebus0 addr 32-37 not configured
rtc0 at ebus0 addr 300070-300071 ipl 36: ds1287
"gpio" at ebus0 addr 300600-300607 not configured
"pmc" at ebus0 addr 300700-300701 not configured
lpt0 at ebus0 addr 300278-300287, 30002e-30002f, 70-7f ipl 28: polled
"rsc-control" at ebus0 addr 3062f8-3062ff ipl 46 not configured
"rsc-console" at ebus0 addr 3083f8-3083ff ipl 45 not configured
sab0 at ebus0 addr 40-40007f ipl 34: rev 3.2
sabtty0 at sab0 port 0
sabtty1 at sab0 port 1
gem0 at pci0 dev 5 function 1 "Sun ERI Ether" rev 0x01: ivec 0x21d, address 
00:03:ba:92:a2:3c
luphy0 at gem0 phy 0: LU6612 10/100 PHY, rev. 1
luphy1 at gem0 phy 1: LU6612 10/100 PHY, rev. 1
ohci0 at pci0 dev 5 function 3 "Sun USB" rev 0x01: ivec 0x21f, version 1.0, 
legacy support
usb0 at ohci0: USB revision 1.0
uhub0 at usb0
uhub0: Sun OHCI root hub, rev 1.00/1.00, addr 1
uhub0: 4 ports with 4 removable, self powered
siop0 at pci0 dev 6 function 0 "Symbios Logic 53c875" rev 0x37: ivec 0x218, 
using 4K of on-board RAM
scsibus0 at siop0: 16 targets
cd0 at scsibus0 targ 6 lun 0:  SCSI2 5/cdrom 
removable
siop1 at pci0 dev 6 function 1 "Symbios Logic 53c875" rev 0x37: ivec 0x219, 
using 4K of on-board RAM
scsibus1 at siop1: 16 targets
vgafb0 at pci0 dev 1 function 0 "ATI Radeon VE QY" rev 0x00
wsdisplay0 at vgafb0: console (std, sun emulation)
ppb0 at pci0 dev 3 function 0 "Intel S21154AE/BE PCI-PCI" rev 0x00
pci1 at ppb0 bus 1
cas0 at pci1 dev 0 function 0 "Sun Cassini" rev 0x20: ivec 0x214, address 
00:03:ba:93:19:60
brgphy0 at cas0 phy 1: BCM5401 10/100/1000baseT PHY, rev. 3
schizo1 at mainbus0: "Schizo", version 7, ign 200, bus A 0 to 0
schizo1: dvma map c000-, iotdb b41-b51
pci2 at schizo1
isp0 at pci2 dev 4 function 0 "QLogic ISP2200" rev 0x05: ivec 0x204
scsibus2 at isp0: 256 targets
sd0 at scsibus2 targ 0 lun 0:  SCSI2 0/direct 
fixed
sd0: 70007MB, 14089 cyl, 24 head, 424 sec, 512 bytes/sec, 143374738 sec total
pcons at mainbus0 not configured
No counter-timer -- using %tick at 1200MHz as system clock.
uhidev0 at uhub0 port 3 configuration 1 interface 0
uhidev0: Sun Microsystems Type 6 Keyboard, rev 1.10/2.00, addr 2, iclass 3/1
ukbd0 at uhidev0: 8 modifier keys, 6 key codes, layout 33
wskbd0 at ukbd0: console keyboard, using wsdisplay0
root on sd0a
rootdev=0x700 rrootdev

squid and OBSD 4

2007-03-02 Thread Cristiano Deana

Hi,

i have a openbsd 4 box with squid-transparent.
it seems like it have poors performance. investigating with `top' i
saw squid using only 90M of ram, why?

How can i use better my box resource? (Xeon CPU with 4GB of ram)

top:
 PID USERNAME PRI NICE  SIZE   RES STATEWAIT TIMECPU COMMAND
27010 _squid 20   87M   90M sleeppoll 9:01  0.05% squid


--
Cris, member of G.U.F.I
Italian FreeBSD User Group
http://www.gufi.org/



Re: IBM ServeRAID 6i

2007-03-02 Thread Alexander Yurchenko
On Fri, Mar 02, 2007 at 10:38:05AM +0100, Danny Kj?rgaard wrote:
> Hi...
> 
> 
> I have a IBM x225 that i would love to install openbsd on. I did a try with
> the snapshot from 3/1/07 and it boots but cant find the scsi drives. I threw
> in a ide disk and did the install on this one. I know that the ips driver is
> being implemented for the 4.1 release, but since the cvs got locked i thought
> the snapshot would contain a fullt working ips driver. Is it the driver or me
> ? And what could someone do to make this work ?

the ips driver is still experimental, don't expect much from it.
have you configured an array using the serveraid management cd?

> 
> This is the dmesg:
> 
> E,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,S
> S,HTT,TM,SBF,CNXT-ID,xTPR
> real mem  = 536346624 (523776K)
> avail mem = 481685504 (470396K)
> using 4278 buffers containing 26943488 bytes (26312K) of memory
> mainbus0 (root)
> bios0 at mainbus0: AT/286+ BIOS, date 11/09/05, BIOS32 rev. 0 @ 0xfafc0,
> SMBIOS rev. 2.2 @ 0xf (57 entries)
> bios0: IBM -[86495CG]-
> apm0 at bios0: Power Management spec V1.2
> apm0: AC on, battery charge unknown
> apm0: flags 70102 dobusy 1 doidle 1
> pcibios0 at bios0: rev 2.1 @ 0xf/0xded4
> pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdde0/240 (13 entries)
> pcibios0: PCI Exclusive IRQs: 5 9 10 11
> pcibios0: PCI Interrupt Router at 000:31:0 ("Intel 82371SB ISA" rev 0x00)
> pcibios0: PCI bus #5 is the last bus
> bios0: ROM list: 0xc/0x8000 0xc8000/0x1800 0xca000/0x3800
> acpi at mainbus0 not configured
> cpu0 at mainbus0
> pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
> pchb0 at pci0 dev 0 function 0 "Intel E7505 MCH Host" rev 0x03
> "Intel E7505 MCH RAS" rev 0x03 at pci0 dev 0 function 1 not configured
> ppb0 at pci0 dev 1 function 0 "Intel E7505 MCH AGP" rev 0x03
> pci1 at ppb0 bus 1
> ppb1 at pci0 dev 2 function 0 "Intel E7505 MCH PCI-PCI" rev 0x03
> pci2 at ppb1 bus 2
> "Intel 82870P2 IOxAPIC" rev 0x04 at pci2 dev 28 function 0 not configured
> ppb2 at pci2 dev 29 function 0 "Intel 82870P2 PCIX-PCIX" rev 0x04
> pci3 at ppb2 bus 3
> bge0 at pci3 dev 1 function 0 "Broadcom BCM5703X" rev 0x02, BCM5703 A2
> (0x1002): irq 11, address 00:0c:76:f2:9d:a2
> brgphy0 at bge0 phy 1: BCM5703 10/100/1000baseT PHY, rev. 2
> "Intel 82870P2 IOxAPIC" rev 0x04 at pci2 dev 30 function 0 not configured
> ppb3 at pci2 dev 31 function 0 "Intel 82870P2 PCIX-PCIX" rev 0x04
> pci4 at ppb3 bus 4
> ips0 at pci4 dev 1 function 0 "Adaptec ServeRAID" rev 0x02: Morpheus, irq 11
> scsibus0 at ips0: 15 targets
> "Intel E7505 MCH PCI-PCI" rev 0x03 at pci0 dev 2 function 1 not configured
> uhci0 at pci0 dev 29 function 0 "Intel 82801DB USB" rev 0x02: irq 10
> usb0 at uhci0: USB revision 1.0
> uhub0 at usb0
> uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1
> uhub0: 2 ports with 2 removable, self powered
> uhci1 at pci0 dev 29 function 1 "Intel 82801DB USB" rev 0x02: irq 11
> usb1 at uhci1: USB revision 1.0
> uhub1 at usb1
> uhub1: Intel UHCI root hub, rev 1.00/1.00, addr 1
> uhub1: 2 ports with 2 removable, self powered
> uhci2 at pci0 dev 29 function 2 "Intel 82801DB USB" rev 0x02: irq 11
> usb2 at uhci2: USB revision 1.0
> uhub2 at usb2
> uhub2: Intel UHCI root hub, rev 1.00/1.00, addr 1
> uhub2: 2 ports with 2 removable, self powered
> ehci0 at pci0 dev 29 function 7 "Intel 82801DB USB" rev 0x02: irq 9
> usb3 at ehci0: USB revision 2.0
> uhub3 at usb3
> uhub3: Intel EHCI root hub, rev 2.00/1.00, addr 1
> uhub3: 6 ports with 6 removable, self powered
> ppb4 at pci0 dev 30 function 0 "Intel 82801BA AGP" rev 0x82
> pci5 at ppb4 bus 5
> vga1 at pci5 dev 1 function 0 "ATI Rage XL" rev 0x27
> wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
> wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
> ichpcib0 at pci0 dev 31 function 0 "Intel 82801DB LPC" rev 0x02
> pciide0 at pci0 dev 31 function 1 "Intel 82801DB IDE" rev 0x02: DMA, channel 0
> configured to compatibility, channel 1 configured to compatibility
> wd0 at pciide0 channel 0 drive 0: 
> wd0: 16-sector PIO, LBA48, 76319MB, 156301488 sectors
> wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
> atapiscsi0 at pciide0 channel 1 drive 0
> scsibus1 at atapiscsi0: 2 targets
> cd0 at scsibus1 targ 0 lun 0:  SCSI0 5/cdrom
> removable
> cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
> ichiic0 at pci0 dev 31 function 3 "Intel 82801DB SMBus" rev 0x02: irq 5
> iic0 at ichiic0
> iic0: addr 0x22 01=01 02=02 03=03 04=04 05=05 06=06 07=07 08=08 09=09 0a=0a
> 0b=0b 0c=0c 0d=0d 0e=0e 0f=0f 10=10 11=11 12=12 13=13 14=14 15=15 16=16 17=17
> 18=18 19=19 1a=1a 1b=1b 1c=1c 1d=1d 1e=1e 1f=1f 20=20 21=21 22=22 23=23 24=24
> 25=25 26=26 27=27 28=28 29=29 2a=2a 2b=2b 2c=2c 2d=2d 2e=2e 2f=2f 30=30 31=31
> 32=32 33=33 34=34 35=35 36=36 37=37 38=38 39=39 3a=3a 3b=3b 3c=3c 3d=3d 3e=3e
> 3f=3f 40=40 41=41 42=42 43=43 44=44 45=45 46=46 47=47 48=48 49=49 4a=4a 4b=4b
> 4c=4c 4d=4d 4e=4e 4f=4f 50=50 51=51 52=52 53=53 54=54 55=55 56=56 57=57 58=

IBM ServeRAID 6i

2007-03-02 Thread Danny Kjærgaard
Hi...


I have a IBM x225 that i would love to install openbsd on. I did a try with
the snapshot from 3/1/07 and it boots but cant find the scsi drives. I threw
in a ide disk and did the install on this one. I know that the ips driver is
being implemented for the 4.1 release, but since the cvs got locked i thought
the snapshot would contain a fullt working ips driver. Is it the driver or me
? And what could someone do to make this work ?

This is the dmesg:

E,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,S
S,HTT,TM,SBF,CNXT-ID,xTPR
real mem  = 536346624 (523776K)
avail mem = 481685504 (470396K)
using 4278 buffers containing 26943488 bytes (26312K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+ BIOS, date 11/09/05, BIOS32 rev. 0 @ 0xfafc0,
SMBIOS rev. 2.2 @ 0xf (57 entries)
bios0: IBM -[86495CG]-
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
apm0: flags 70102 dobusy 1 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xf/0xded4
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdde0/240 (13 entries)
pcibios0: PCI Exclusive IRQs: 5 9 10 11
pcibios0: PCI Interrupt Router at 000:31:0 ("Intel 82371SB ISA" rev 0x00)
pcibios0: PCI bus #5 is the last bus
bios0: ROM list: 0xc/0x8000 0xc8000/0x1800 0xca000/0x3800
acpi at mainbus0 not configured
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel E7505 MCH Host" rev 0x03
"Intel E7505 MCH RAS" rev 0x03 at pci0 dev 0 function 1 not configured
ppb0 at pci0 dev 1 function 0 "Intel E7505 MCH AGP" rev 0x03
pci1 at ppb0 bus 1
ppb1 at pci0 dev 2 function 0 "Intel E7505 MCH PCI-PCI" rev 0x03
pci2 at ppb1 bus 2
"Intel 82870P2 IOxAPIC" rev 0x04 at pci2 dev 28 function 0 not configured
ppb2 at pci2 dev 29 function 0 "Intel 82870P2 PCIX-PCIX" rev 0x04
pci3 at ppb2 bus 3
bge0 at pci3 dev 1 function 0 "Broadcom BCM5703X" rev 0x02, BCM5703 A2
(0x1002): irq 11, address 00:0c:76:f2:9d:a2
brgphy0 at bge0 phy 1: BCM5703 10/100/1000baseT PHY, rev. 2
"Intel 82870P2 IOxAPIC" rev 0x04 at pci2 dev 30 function 0 not configured
ppb3 at pci2 dev 31 function 0 "Intel 82870P2 PCIX-PCIX" rev 0x04
pci4 at ppb3 bus 4
ips0 at pci4 dev 1 function 0 "Adaptec ServeRAID" rev 0x02: Morpheus, irq 11
scsibus0 at ips0: 15 targets
"Intel E7505 MCH PCI-PCI" rev 0x03 at pci0 dev 2 function 1 not configured
uhci0 at pci0 dev 29 function 0 "Intel 82801DB USB" rev 0x02: irq 10
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1 at pci0 dev 29 function 1 "Intel 82801DB USB" rev 0x02: irq 11
usb1 at uhci1: USB revision 1.0
uhub1 at usb1
uhub1: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2 at pci0 dev 29 function 2 "Intel 82801DB USB" rev 0x02: irq 11
usb2 at uhci2: USB revision 1.0
uhub2 at usb2
uhub2: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
ehci0 at pci0 dev 29 function 7 "Intel 82801DB USB" rev 0x02: irq 9
usb3 at ehci0: USB revision 2.0
uhub3 at usb3
uhub3: Intel EHCI root hub, rev 2.00/1.00, addr 1
uhub3: 6 ports with 6 removable, self powered
ppb4 at pci0 dev 30 function 0 "Intel 82801BA AGP" rev 0x82
pci5 at ppb4 bus 5
vga1 at pci5 dev 1 function 0 "ATI Rage XL" rev 0x27
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
ichpcib0 at pci0 dev 31 function 0 "Intel 82801DB LPC" rev 0x02
pciide0 at pci0 dev 31 function 1 "Intel 82801DB IDE" rev 0x02: DMA, channel 0
configured to compatibility, channel 1 configured to compatibility
wd0 at pciide0 channel 0 drive 0: 
wd0: 16-sector PIO, LBA48, 76319MB, 156301488 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide0 channel 1 drive 0
scsibus1 at atapiscsi0: 2 targets
cd0 at scsibus1 targ 0 lun 0:  SCSI0 5/cdrom
removable
cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
ichiic0 at pci0 dev 31 function 3 "Intel 82801DB SMBus" rev 0x02: irq 5
iic0 at ichiic0
iic0: addr 0x22 01=01 02=02 03=03 04=04 05=05 06=06 07=07 08=08 09=09 0a=0a
0b=0b 0c=0c 0d=0d 0e=0e 0f=0f 10=10 11=11 12=12 13=13 14=14 15=15 16=16 17=17
18=18 19=19 1a=1a 1b=1b 1c=1c 1d=1d 1e=1e 1f=1f 20=20 21=21 22=22 23=23 24=24
25=25 26=26 27=27 28=28 29=29 2a=2a 2b=2b 2c=2c 2d=2d 2e=2e 2f=2f 30=30 31=31
32=32 33=33 34=34 35=35 36=36 37=37 38=38 39=39 3a=3a 3b=3b 3c=3c 3d=3d 3e=3e
3f=3f 40=40 41=41 42=42 43=43 44=44 45=45 46=46 47=47 48=48 49=49 4a=4a 4b=4b
4c=4c 4d=4d 4e=4e 4f=4f 50=50 51=51 52=52 53=53 54=54 55=55 56=56 57=57 58=58
59=59 5a=5a 5b=5b 5c=5c 5d=5d 5e=5e 5f=5f 60=60 61=61 62=62 63=63 64=64 65=65
66=66 67=67 68=68 69=69 6a=6a 6b=6b 6c=6c 6d=6d 6e=6e 6f=6f 70=70 71=71 72=72
73=73 74=74 75=75 76=76 77=77 78=78 79=79 7a=7a 7b=7b 7c=7c 7d=7d 7e=7e 7f=7f
80=80 81=81 82=82 83=83 84=84 85=85 86=86 87=87 88=88 89=89 8a=8a 8b=8b 8c=8c
8d=8d 8e=8e 8f=8f 90=90 91=91 92=92 93=93 94=94 95=95 96=96 97=97 98=98 9

Re: jails in openbsd

2007-03-02 Thread Lars D . Noodén

Yes.  I want to run several separate instances of Debian under OpenBSD.

I've started looking at sysjail and can look at qemu.  Would there be any 
special reasons to choose qemu over others, besides that it's available in 
ports?


-Lars
Lars Nooden ([EMAIL PROTECTED])
On the Internet, nobody knows you're a dog ...
... until you start barking.

On Thu, 1 Mar 2007, Joachim Schipper wrote:

What do you want to do?

- Run a different OS (e.g., Debian) under OpenBSD?
Install emulators/qemu.




Re: Problem with /sys

2007-03-02 Thread Victor Abeytua
Oops,
I wrote too fast and forgot ther src between usr and sys :)
Right now, I haven't got access to the OpenBSD machine I'm referring
to, so I can't provide a dmesg. Nevertheless, I'll try to explain the
problem in more detail.
   
The OpenBSD box stands between my home network and the ADSL router.
Inteface vr0 points to the ADSL router and interface fxp0 to my home
network. From time to time the ADSL router hangs and I have to reboot
it. As the router comes back to life two things may happen:
- I can access the firewall through interface fxp0 but I won't be
abre to reach the ADSL.
- I'm not able to reach the firewall. (a ssh -v returns where the
commucations breaksdown).

As soon as I get home I'll be able to post the dmesg as well as the
ssh traces.

Thanks again

V.

Srebrenko Sehic wrote:
> On 3/2/07, Victor Abeytua <[EMAIL PROTECTED]> wrote:
>
>> Trying to solve this problems I've noticed that the /sys link is
>> broken. In other words, directory /usr/sys doesn't exist. Probably this
>> has to be an installation error, but I would like to know if there is
>> someway to fix, that is, without having to reinstall the box.
>
> /sys is a symlink to /usr/src/sys (and not /usr/sys) where kernel
> sources are typically installed.  Since you (probably) didn't install
> them, /sys points to a non-existing directory. Don't worry. Nothing is
> broken.
>
> Regarding your "interface falling problem", you need to provide more
> details. Don't forget to include the dmesg.



Re: Problem with /sys

2007-03-02 Thread Srebrenko Sehic

On 3/2/07, Victor Abeytua <[EMAIL PROTECTED]> wrote:


Trying to solve this problems I've noticed that the /sys link is
broken. In other words, directory /usr/sys doesn't exist. Probably this
has to be an installation error, but I would like to know if there is
someway to fix, that is, without having to reinstall the box.


/sys is a symlink to /usr/src/sys (and not /usr/sys) where kernel
sources are typically installed.  Since you (probably) didn't install
them, /sys points to a non-existing directory. Don't worry. Nothing is
broken.

Regarding your "interface falling problem", you need to provide more
details. Don't forget to include the dmesg.



Problem with /sys

2007-03-02 Thread Victor Abeytua
Hi,
I currently have a 4.0 with some weird network problems (at least
they seem weird for me as I come from the linux world) like net
interfaces "falling" down when the router to which they are attached
reboots etc ...
Trying to solve this problems I've noticed that the /sys link is
broken. In other words, directory /usr/sys doesn't exist. Probably this
has to be an installation error, but I would like to know if there is
someway to fix, that is, without having to reinstall the box.

Thanks in advance,
VC-ctor



Migrate to OpenBSD + OpenBGP

2007-03-02 Thread [EMAIL PROTECTED]

Hello to everyone in the list,
I run small ISP. Currently I use Debian + Quagga Box for my BGP sessions.
It is a single box with tow full feeds (approximately 200K prefixes) 
from tow ISPs and tow sessions from the same ISPs with local prefixes 
(approximately 2,5K prefixes). The same box is doing traffic shaping, 
firewall and so on for DMZ and clients. The clients are only connected 
by Metro Ethernet links.
If I do not describe the current situation well please let me know, I 
will give more details.
I plan to change this setup with OpenBSD + OpenBGP boxes, one for each 
ISP with IBGP between them and third box for firewall and client 
connections, possibly the third box would be duplicated by another box 
with CARP. I am looking for the best redundancy I could get.

However I may be wrong in my plan...
As I am absolute beginner with OpenBSD I would be very happy for any 
ideas, advises or practical examples.

Thank you very much,
Ivo



X package sets not listed in MD5

2007-03-02 Thread Antti Harri

Hello,

What's the reason for not providing MD5 sums
of X*.tgz sets in the MD5-file of release directories?

I found only one thread [1] regarding this question
from the archives and it didn't answer it
really.

I want to be able to see if the file has been
transferred correctly and I also want to see
if a file that has been transferred earlier
is up to date. I don't want to use other tools than
what is provided in base sets to do this (no
regular packages)

[1] http://marc.theaimsgroup.com/?l=openbsd-misc&m=113230911219069&w=2

--
Antti Harri