Re: identifying sparse files and get ride of them trick available?
On Fri, Nov 09, 2007 at 02:00:14AM -0500, Daniel Ouellet wrote: Hi, I am trying to find a way ti identifying sparse files properly and quickly and find a way to rectify the situation. Any trick to do this? The problem is that overtime looks like I am ending up with lots of them and because I have to sync multiples servers together the sparse files makes the sync painful over time as well as huge obviously and slow. I am talking multiple GB's here. So far the only way I have do it is with rsync and -S options, but then the sync process takes a lots of time and when you need to sync multiple boxes multiple times per hours, it end up not be able to do it anymore and the process is not finish and it is suppose to start again. The other way that I found is to use dump and then restore, but that also is painful to do on live systems obviously. I need to find a way to clean the source, so that the sync system do their stuff easy. If I simply sync with the sparse file, sure I can do that, but then, the problem is the destinations runs out of space as the sparse gets to big over time. Google also pointed out that may be FIBMAP ioctl may have done to job, may be, but that was kill by Theo on 2007/06/02 09:14:36. I assume for many good reason for sure, so I didn't pursue that anymore. Then may be filefrag -v might work, but not much success there either. So, I am running out of ideas and may be there isn't any way to do this, I however hope there is. If it is not possible to correct the problem in a cronjob fashion or something, may be how could I possible find sparse files efficiently? At a minimum, if I could find the file getting out of control, then I could at a minimum delete them and copy them from the source again and reduce the problem of the sparse files. I do not get you at all. Unsparsing the file will only make it use more disk space. Actually, since some time cp(1) will actively create sparse files if it can. Any clue as to how to tackle this problem, or any trick around it? I really do not understand the problem here. But you might be able to detect sparse files compartaring the size vs the number of blocks it uses. -Otto
Re: OpenBSD 4.2 on Intel Board S3000AHLX + QuadNic EXPI9404PT =couldn't map interrupt
On Thu, 08 Nov 2007 21:35:57 +0700, Koenig, Thomas [EMAIL PROTECTED] wrote: What version of OpenBSD are you running ? Several fixes have recently been added that made my machine suddenly support ACPI. You snipped this (very important) piece of information. Maybe trying the latest snapshot fixes your problem. Please also add a full dmesg (without acpi) so we don't have to guess what's in your machine. Hi, as you can see, the full dmesg output without acpi was included in my fist email! But currently I've installed the amd64 version and not i386, it was a try - but with both the same problems. and btw. you can find the Version I'm running in the dmesg/panic output in my last email, but however here the dmesg out without acpi from the current amd64 installation: OpenBSD 4.2 (GENERIC) #1179: Tue Aug 28 10:37:50 MDT 2007 [EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC real mem = 1069268992 (1019MB) avail mem = 1027014656 (979MB) RTC BIOS diagnostic error ffixed_disk,invalid_time mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.4 @ 0x3fc1d000 (43 entries) bios0: vendor Intel Corporation version S3000.86B.02.00.0035.111020061326 date 11/10/2006 bios0: Intel S3000AHLX acpi at mainbus0 not configured cpu0 at mainbus0: (uniprocessor) cpu0: Intel(R) Core(TM)2 Duo CPU E4500 @ 2.20GHz, 2200.18 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36, CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,TM2 ,CX16,xTPR,NXE,LONG cpu0: 2MB 64b/line 8-way L2 cache pci0 at mainbus0 bus 0: configuration mode 1 pchb0 at pci0 dev 0 function 0 Intel E7230 MCH rev 0x00 ppb0 at pci0 dev 1 function 0 Intel E7230 PCIE rev 0x00 pci1 at ppb0 bus 1 ppb1 at pci1 dev 0 function 0 vendor IDT, unknown product 0x8018 rev 0x04 pci2 at ppb1 bus 2 ppb2 at pci2 dev 0 function 0 vendor IDT, unknown product 0x8018 rev 0x04 pci3 at ppb2 bus 3 em0 at pci3 dev 0 function 0 Intel PRO/1000 QP (82571EB) rev 0x06pci_intr_map: bad interrupt line 128 : couldn't map interrupt em0: Allocation of PCI resources failed em1 at pci3 dev 0 function 1 Intel PRO/1000 QP (82571EB) rev 0x06pci_intr_map: bad interrupt line 128 : couldn't map interrupt em1: Allocation of PCI resources failed ppb3 at pci2 dev 1 function 0 vendor IDT, unknown product 0x8018 rev 0x04 pci4 at ppb3 bus 4 em2 at pci4 dev 0 function 0 Intel PRO/1000 QP (82571EB) rev 0x06pci_intr_map: bad interrupt line 128 : couldn't map interrupt em2: Allocation of PCI resources failed em3 at pci4 dev 0 function 1 Intel PRO/1000 QP (82571EB) rev 0x06pci_intr_map: bad interrupt line 128 : couldn't map interrupt em3: Allocation of PCI resources failed ppb4 at pci0 dev 28 function 0 Intel 82801GB PCIE rev 0x01 pci5 at ppb4 bus 5 ppb5 at pci5 dev 0 function 0 Intel PCIE-PCIE rev 0x09 pci6 at ppb5 bus 6 ppb6 at pci0 dev 28 function 4 Intel 82801G PCIE rev 0x01 pci7 at ppb6 bus 7 ppb7 at pci0 dev 28 function 5 Intel 82801G PCIE rev 0x01 pci8 at ppb7 bus 8 em4 at pci8 dev 0 function 0 Intel PRO/1000MT (82573E) rev 0x03: irq 9, address 00:15:17:29:70:25 Intel 82573E AMT rev 0x03 at pci8 dev 0 function 3 not configured Intel 82573E KCS (Active Management) rev 0x03 at pci8 dev 0 function 4 not configured ppb8 at pci0 dev 30 function 0 Intel 82801BA AGP rev 0xe1 pci9 at ppb8 bus 9 vga1 at pci9 dev 4 function 0 ATI ES1000 rev 0x02 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) em5 at pci9 dev 5 function 0 Intel PRO/1000MT (82541GI) rev 0x05: irq 9, address 00:15:17:29:70:26 pcib0 at pci0 dev 31 function 0 Intel 82801GB LPC rev 0x01 pciide0 at pci0 dev 31 function 1 Intel 82801GB IDE rev 0x01: DMA, channel 0 configured to compatibility, channel 1 configured to compatibility atapiscsi0 at pciide0 channel 0 drive 0 scsibus0 at atapiscsi0: 2 targets cd0 at scsibus0 targ 0 lun 0: Optiarc, DVD RW AD-7540A, 1.01 SCSI0 5/cdrom removable cd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2 pciide0: channel 1 disabled (no drives) pciide1 at pci0 dev 31 function 2 Intel 82801GB SATA rev 0x01: DMA, channel 0 configured to native-PCI, channel 1 configured to native-PCI pciide1: using irq 10 for native-PCI interrupt wd0 at pciide1 channel 0 drive 0: Hitachi HDS721680PLA380 wd0: 16-sector PIO, LBA48, 76319MB, 156301488 sectors wd0(pciide1:0:0): using PIO mode 4, Ultra-DMA mode 5 ichiic0 at pci0 dev 31 function 3 Intel 82801GB SMBus rev 0x01: irq 10 iic0 at ichiic0 adt0 at iic0 addr 0x2e: emc6d100 rev 0x69 isa0 at pcib0 isadma0 at isa0 com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo pckbc0 at isa0 port 0x60/5 pckbd0 at pckbc0 (kbd slot) pckbc0: using irq 1 for kbd slot wskbd0 at pckbd0: console keyboard, using wsdisplay0 pcppi0 at isa0 port 0x61 midi0 at pcppi0: PC speaker spkr0 at pcppi0 fdc0 at isa0 port 0x3f0/6 irq 6 drq 2 dkcsum: wd0 matches BIOS drive 0x80 root on wd0a swap on wd0b dump on wd0b regards, Thomas [demime 1.01d removed an attachment of type application/x-pkcs7-signature which
Re: identifying sparse files and get ride of them trick available?
Any clue as to how to tackle this problem, or any trick around it? I really do not understand the problem here. But you might be able to detect sparse files compartaring the size vs the number of blocks it uses. Without making a bit writing out of it. Let say that the problem is for now a storage capacity problem on the destinations servers, a timing one in the extended transfer process and the additional bandwidth required at some of the destination point and the volumes of files. Let just say that if it was syncing 100K files, it would be a piece of cake, but it's much bigger. Just for example, a source file that is sparse badly, don't really have allocated disk block yet, but when copy over, via scp, or rsync will actually use that space on the destination servers. All the servers are identical (or suppose to be anyway) but what is happening is the copy of them are running out of space at time in the copy process. Like when it is copying them, it may easy use twice the amount of space in the process and sadly filling up the destinations then then the sync process stop making the distribution of the load unusable. I need to increase the capacity yes, except that it will take me times to do so. Sparse file for database example is a very good thing, but not for everything however. The problem is not the sparse file at the source. It sure can stay as is. It's just offset pointers anyway. The problem is in the sync process between multiple servers using the Internet to sync them and the bandwidth waisted as well as the lack of space available at the destination. Plus because the copy is different in size, then the sync process see it as different files and as such will copy them again. Or it can be copy using -S with rsync, however this process will inflate the file at the destination and run out of space during the process and make them smaller at the end. Plus this obviously take a lots more time and as such, the timely sync process that was good for a long time now, well... Let say, not reliable. Let say, sync without concern for sparse is done just in a few minutes, but then use lots more space on the destination. Doing it with -S to address the capacity issue fix that, but then it takes a HUGE amount of time more and sadly there is useless transfer of null data cause from the sparse source empty space. I can manage, I find ways to use ls -laR, or du -k and do diff's between them and fine the files that are getting out of wack, replace them and then continue, but this really is painful. Obviously when the capacity will be there, it will be a none issue, however I am sadly not at that point yet and it will take me some time. Not sure if that explain it any better, I hope so. But I was looking if it was possible to identify these files in a more efficient way. If not, I will just deal with it. It's just going to be painful for sometime that's all. The issue is really in the transfer process and at the final destination. Not at the source. I hope it make more sense explaining it this way, if not I apologists for the lack of better thinking at the moment in explaining it. Best, Daniel
Re: Intel (82573L) TCP/UDP checksum incorect
Hello All Wednesday, November 7, 2007, 6:04:13 PM, you wrote: Today install CentOS 5.0 and had the same problem with network on 82573L chip. After i'm try NetBSD 4.0RC3 and wonder it's work fine. SB Hello misc, SB I'm install OpenBSD 4.2 on new box (NexCOM 1083L). SB I have 8xGE ports on board. 2-port based on 82541GI work good. Other SB 6-port based on 82573L have trouble with TCP checksum or UDP length.
Re: can't figure out obsd with a bridging ADSL modem.
On Thu, Nov 08, 2007 at 10:25:04PM +, Stuart Henderson wrote: On 08/11/2007, Craig Hammond [EMAIL PROTECTED] wrote: me setup an obsd firewall. The adsl modem that the ISP sent only does bridging (Netgear DM111) and although I got it all working, it feels Looks like DM111 offers PPPoE/PPPoA bridge modes which sound like what some other boxes refer to as half-bridge or DHCP spoofing, and also standard RFC1483 bridging. I had a DLink like this for a while, worked fine when I set it to PPPoA (the usual for non-USA ADSL) bridge DHCP on the client. Sounds stupid, but the router's WAN IP gets passed through to the PC via DHCP so you get the static address that the ISP issues to the router and the router becomes invisable to the Internet as your box has the routable IP on its NIC.
Re: identifying sparse files and get ride of them trick available?
On Fri, Nov 09, 2007 at 04:27:49AM -0500, Daniel Ouellet wrote: Any clue as to how to tackle this problem, or any trick around it? I really do not understand the problem here. But you might be able to detect sparse files compartaring the size vs the number of blocks it uses. Without making a bit writing out of it. Let say that the problem is for now a storage capacity problem on the destinations servers, a timing one in the extended transfer process and the additional bandwidth required at some of the destination point and the volumes of files. Let just say that if it was syncing 100K files, it would be a piece of cake, but it's much bigger. Just for example, a source file that is sparse badly, don't really have allocated disk block yet, but when copy over, via scp, or rsync will actually use that space on the destination servers. All the servers are identical (or suppose to be anyway) but what is happening is the copy of them are running out of space at time in the copy process. Like when it is copying them, it may easy use twice the amount of space in the process and sadly filling up the destinations then then the sync process stop making the distribution of the load unusable. I need to increase the capacity yes, except that it will take me times to do so. Sparse file for database example is a very good thing, but not for everything however. The problem is not the sparse file at the source. It sure can stay as is. It's just offset pointers anyway. The problem is in the sync process between multiple servers using the Internet to sync them and the bandwidth waisted as well as the lack of space available at the destination. Plus because the copy is different in size, then the sync process see it as different files and as such will copy them again. The size will not be different, just the disk space used. Or it can be copy using -S with rsync, however this process will inflate the file at the destination and run out of space during the process and make them smaller at the end. Plus this obviously take a lots more time and as such, the timely sync process that was good for a long time now, well... Let say, not reliable. Let say, sync without concern for sparse is done just in a few minutes, but then use lots more space on the destination. Doing it with -S to address the capacity issue fix that, but then it takes a HUGE amount of time more and sadly there is useless transfer of null data cause from the sparse source empty space. So your problem seems to be that rsync -S is inefficient to the point where it is not useable. I do not use rsync a lot, so I do not know if there's a solution to that problem. It does seem strange that a feature to solve a problem actually make the problem worse. I can manage, I find ways to use ls -laR, or du -k and do diff's between them and fine the files that are getting out of wack, replace them and then continue, but this really is painful. stat -s gives the raw info in one go. Some shell script hacking should make it easy to detect sparse files. -Otto Obviously when the capacity will be there, it will be a none issue, however I am sadly not at that point yet and it will take me some time. Not sure if that explain it any better, I hope so. But I was looking if it was possible to identify these files in a more efficient way. If not, I will just deal with it. It's just going to be painful for sometime that's all. The issue is really in the transfer process and at the final destination. Not at the source. I hope it make more sense explaining it this way, if not I apologists for the lack of better thinking at the moment in explaining it. Best, Daniel
Ndd vérification
Bonjour, Suite ` la libiralisation de lâextension frangaise, vous avez probablement riservi votre nom de domaine en .FR Virifiez dhs ` prisent la disponibiliti de votre extension en .COM ou .EU, et protigez efficacement votre adresse Internet. Dans lâattente dâun prochain contact, Veuillez accepter mes sinchres salutations. Marie-thi Robin Responsable Diveloppement www.nom-domaine.fr Ne plus recevoir d'information de notre part, suivez le lien.
Re: Problem with MP on 4.2
On Fri, 26 Oct 2007 16:50:13 +0700, Abdul Rehman Gani [EMAIL PROTECTED] wrote: Hi, I upgraded a 4.1 machine running bsd.mp to 4.2. This was a remote upgrade using the instructions in the FAQ for a 4.1 - 4.2 upgrade. All kernels used are GENERIC off the CD versions. On 4.2 the bsd kernel works fine, but when I install the bsd.mp kernel only one processor was shown and the following error was logged in /var/log/messages once a second:- Oct 25 21:03:00 host02 /bsd: ichiic0: exec: op 1, addr 0x2f, cmdlen 1, len 1, flags 0x00: timeout, status 0x0 Oct 25 21:03:00 host02 /bsd: ichiic0: abort failed, status 0x42INTR,INUSE Here are the lines from messages log from that system when booting bsd.mp. This is a dual XEON:- Oct 25 20:58:56 host02 syslogd: start Oct 25 20:58:56 host02 /bsd: OpenBSD 4.2 (GENERIC.MP) #252: Tue Aug 28 10:53:04 MDT 2007 Oct 25 20:58:56 host02 /bsd: [EMAIL PROTECTED]:/usr/src/ sys/arch/i386/compile/GENERIC.MP Oct 25 20:58:56 host02 /bsd: cpu0: Intel(R) Xeon(TM) CPU 2.80GHz (GenuineIntel 686-class) 2.81 GHz Oct 25 20:58:56 host02 /bsd: cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36, CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT- ID,CX16,xTPR Oct 25 20:58:56 host02 /bsd: real mem = 1073037312 (1023MB) Oct 25 20:58:56 host02 /bsd: avail mem = 1029881856 (982MB) Oct 25 20:58:56 host02 /bsd: mainbus0 at root Oct 25 20:58:56 host02 /bsd: bios0 at mainbus0: AT/286+ BIOS, date 03/29/05, BIOS32 rev. 0 @ 0xf0010, SMBIOS rev. 2.3 @ 0xfa670 (57 entries) Oct 25 20:58:56 host02 /bsd: bios0: vendor American Megatrends Inc. version 080010 date 03/29/2005 Oct 25 20:58:56 host02 /bsd: bios0: Supermicro X6DVL-EG2 Oct 25 20:58:56 host02 /bsd: apm0 at bios0: Power Management spec V1.2 Oct 25 20:58:56 host02 /bsd: apm0: AC on, battery charge unknown Oct 25 20:58:56 host02 /bsd: apm0: flags 30102 dobusy 0 doidle 1 Oct 25 20:58:56 host02 /bsd: pcibios0 at bios0: rev 2.1 @ 0xf/0x1 Oct 25 20:58:56 host02 /bsd: pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf51d0/336 (19 entries) Oct 25 20:58:56 host02 /bsd: pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82801EB/ER LPC rev 0x00) Oct 25 20:58:56 host02 /bsd: pcibios0: PCI bus #4 is the last bus Oct 25 20:58:56 host02 /bsd: bios0: ROM list: 0xc/0x8000 0xc8000/0x1000 0xc9000/0x1000 Oct 25 20:58:56 host02 /bsd: ipmi at mainbus0 not configured Oct 25 20:58:56 host02 /bsd: mainbus0: Intel MP Specification (Version 1.4) Oct 25 20:58:56 host02 /bsd: cpu0 at mainbus0: apid 0 (boot processor) Oct 25 20:58:56 host02 /bsd: cpu0: apic clock running at 200 MHz Oct 25 20:58:56 host02 /bsd: mainbus0: bus 0 is type PCI Oct 25 20:58:56 host02 /bsd: mainbus0: bus 1 is type PCI Oct 25 20:58:56 host02 /bsd: mainbus0: bus 2 is type PCI Oct 25 20:58:56 host02 /bsd: mainbus0: bus 3 is type PCI Oct 25 20:58:56 host02 /bsd: mainbus0: bus 4 is type PCI Oct 25 20:58:56 host02 /bsd: mainbus0: bus 5 is type ISA Oct 25 20:58:56 host02 /bsd: ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins Oct 25 20:58:56 host02 /bsd: ioapic1 at mainbus0: apid 3 pa 0xfec1, version 20, 24 pins Oct 25 20:58:56 host02 /bsd: pci0 at mainbus0 bus 0: configuration mode 1 (no bios) Oct 25 20:58:56 host02 /bsd: pchb0 at pci0 dev 0 function 0 Intel E7320 MCH rev 0x0c Oct 25 20:58:56 host02 /bsd: ppb0 at pci0 dev 2 function 0 Intel MCH PCIE rev 0x0c Oct 25 20:58:56 host02 /bsd: pci_intr_map: bus 0 dev 2 func 0 pin 2; line 11 Oct 25 20:58:56 host02 /bsd: pci_intr_map: no MP mapping found Oct 25 20:58:56 host02 /bsd: pci_intr_map: bus 0 dev 2 func 0 pin 3; line 3 Oct 25 20:58:56 host02 /bsd: pci_intr_map: no MP mapping found Oct 25 20:58:56 host02 /bsd: pci_intr_map: bus 0 dev 2 func 0 pin 4; line 3 Oct 25 20:58:56 host02 /bsd: pci_intr_map: no MP mapping found Oct 25 20:58:56 host02 /bsd: pci1 at ppb0 bus 1 Oct 25 20:58:56 host02 /bsd: ppb1 at pci0 dev 3 function 0 Intel MCH PCIE rev 0x0c Oct 25 20:58:56 host02 /bsd: pci_intr_map: bus 0 dev 3 func 0 pin 2; line 11 Oct 25 20:58:56 host02 /bsd: pci_intr_map: no MP mapping found Oct 25 20:58:56 host02 /bsd: pci_intr_map: bus 0 dev 3 func 0 pin 3; line 3 Oct 25 20:58:56 host02 /bsd: pci_intr_map: no MP mapping found Oct 25 20:58:56 host02 /bsd: pci_intr_map: bus 0 dev 3 func 0 pin 4; line 3 Oct 25 20:58:56 host02 /bsd: pci_intr_map: no MP mapping found Oct 25 20:58:56 host02 /bsd: pci2 at ppb1 bus 2 Oct 25 20:58:56 host02 /bsd: ppb2 at pci0 dev 28 function 0 Intel 6300ESB PCIX rev 0x02 Oct 25 20:58:56 host02 /bsd: pci3 at ppb2 bus 3 Oct 25 20:58:56 host02 /bsd: em0 at pci3 dev 3 function 0 Intel PRO/ 1000MT (82541GI) rev 0x05: apic 3 int 2 (irq 7), address 00:30:48:5c:c1:ca Oct 25 20:58:56 host02 /bsd: em1 at pci3 dev 4 function 0 Intel PRO/ 1000MT (82541GI) rev 0x05: apic 3 int 3 (irq 7), address 00:30:48:5c:c1:cb Oct 25 20:58:56 host02 /bsd: uhci0 at pci0 dev 29 function 0 Intel 6300ESB USB rev 0x02: apic 2 int 16 (irq 10) Oct 25 20:58:56 host02 /bsd: uhci1 at pci0 dev 29 function 1
Re: OpenBSD 4.2 on Intel Board S3000AHLX + QuadNic EXPI9404PT =couldn't map interrupt
On Fri, 09 Nov 2007 16:45:58 +0700, Koenig, Thomas [EMAIL PROTECTED] wrote: Hi, Hi, I know what you feel.. I'm using s3000AH on release, got the panic too. So I download -current using CVS, do compile on GENERIC and GENERIC.MP, install them, enable acpi on UKC, and it suddenly works :D (kidding). Chris Kuethe pointed me out on the other thread. Maybe the differences between your hardware and mine are the S3000AHLX while I'm using S3000AH and I got no QuadNic EXPI9404P. Maybe you should try to remove the quad nic and if it boot, well.. we definitely need fix on that.. Thanks, Hi, how do I do this - I'm new in OpenBSD, normaly I use Solaris or LINUX. :) regards Thomas well.. first you need latest snapshots, follow http://openbsd.org/faq/faq5.html#Bld correctly, than you should be on your way.. anyway, the faq and man should explain you most everything, I'm also a newbie, moving to openBSD about a year ago, and I found it very cool and stable too.. :D -- Insan Praja SW
PF
I have updated the openbsd 4.0 to 4.2, and my rules of the pf stopped working. Some of my network connections are being blocked, someone knows what could be happening?
Re: can't figure out obsd with a bridging ADSL modem.
On Fri, Nov 09, 2007 at 10:15:07AM +, Craig Skinner wrote: On Thu, Nov 08, 2007 at 10:25:04PM +, Stuart Henderson wrote: On 08/11/2007, Craig Hammond [EMAIL PROTECTED] wrote: me setup an obsd firewall. The adsl modem that the ISP sent only does bridging (Netgear DM111) and although I got it all working, it feels Looks like DM111 offers PPPoE/PPPoA bridge modes which sound like what some other boxes refer to as half-bridge or DHCP spoofing, and also standard RFC1483 bridging. I had a DLink like this for a while, worked fine when I set it to PPPoA (the usual for non-USA ADSL) bridge DHCP on the client. Sounds stupid, but the router's WAN IP gets passed through to the PC via DHCP so you get the static address that the ISP issues to the router and the router becomes invisable to the Internet as your box has the routable IP on its NIC. That's how I've used the last 2 ADSL modems I've had - both Westells. I put them in PPPoE bridging mode such that the modem passes the packets to my obsd box, which then gets assigned an IP address via DHCP. Works great. A bit of a pain sometimes if you're having upstream network issues and have to haggle with the telco support drone about what kind of router you're using. Then, config pppd accordingly with user/pass from your ISP. It's a cinch with obsd and pf also works great. I've been using ipcheck to reconfig my A record with dyndns upon a change of IP with mixed success; sometimes I have to go do it manually. The default gateway assigned via DHCP with the two different ISPs I've done this with have been in the 10.* range.
excessive ierrs on dc0 interface
Hi. I am seeing way too many errors on my dc0 external interface and I have tried everything I can think of. Running 4.0 on a p500+128mb ram as an internet gateway/donkey/torrent box. # netstat -m 458 mbufs in use: 233 mbufs allocated to data 218 mbufs allocated to packet headers 7 mbufs allocated to socket names and addresses 154/256/65536 mbuf clusters in use (current/peak/max) 676 Kbytes allocated to network (62% in use) 0 requests for memory denied 0 requests for memory delayed 0 calls to protocol drain routines # netstat -i (local int's snipped) NameMtu Network Address Ipkts IerrsOpkts Oerrs Colls rl0 1500 Link 00:0a:cd:0a:58:8c23150 030820 0 0 rl0 1500 10.0.0/24 10.0.0.1 23150 030820 0 0 rl0 1500 fe80::%rl0/ fe80::20a:cdff:fe23150 030820 0 0 dc0 1500 Link 00:90:cc:52:66:78 2229558 56984 2103323 0 0 dc0 1500 fe80::%dc0/ fe80::290:ccff:fe 2229558 56984 2103323 0 0 tun01454 Link 2173284 0 2094741 0 20404 tun01454 xyz-336 xyz-336.net 2173284 0 2094741 0 20404 # rl is local network dc external iface And I also see some queuing on the Send-Q when doing a netstat -an (max 64k) sysctl mods are as follows: net.inet.ip.forwarding=1# 1=Permit forwarding (routing) of IPv4 packets #random guesses for performance kern.somaxconn=8192 net.inet.tcp.recvspace=65535 net.inet.udp.recvspace=65535 net.inet.tcp.sendspace=65535 net.inet.udp.sendspace=65535 kern.maxclusters=65535 kern.maxproc=4096 kern.maxfiles=8192 net.inet.ip.maxqueue=2048 net.bpf.bufsize=2097152 net.bpf.maxbufsize=4194304 load averages: 1.11, 1.24, 1.20 27 processes: 26 idle, 1 on processor CPU states: 0.9% user, 7.3% nice, 3.2% system, 0.8% interrupt, 87.8% idle Memory: Real: 54M/78M act/tot Free: 41M Swap: 0K/0K used/tot As mentioned above running rel 4.0 on a p500+128mb ram as an internet gateway/donkey/torrent box with unmodified kernel Googling on Ierrs tells me I'm running out of network kernel bufs but certainly doesn't look that way from netstat -m. Can anyone suggest what could be the problem? A 4.0 bug? Additional sysctl line needed? Moe
Re: PF
On 2007/11/09 08:59, Kleber Rocha wrote: I have updated the openbsd 4.0 to 4.2, and my rules of the pf stopped working. Some of my network connections are being blocked, someone knows what could be happening? Read the 4.1 upgrade guide.
Re: OpenBSD 4.2 on Intel Board S3000AHLX + QuadNic EXPI9404PT =couldn't map interrupt
Hi, I downloaded the sources from CVS and build a new GENERIC Kernel, with the same result. :( The Kernel panic, after enable acpi, is now: malloc: allocation too large regards, Thomas [demime 1.01d removed an attachment of type application/x-pkcs7-signature which had a name of smime.p7s]
Re: Trouble ftp'ing out of network, already running ftpproxy for internal ftp server, need to ftp out
On 11/9/07, Jake Conk [EMAIL PROTECTED] wrote: My question though is why did you give this rdr rule? rdr pass on $int_if proto tcp from any to !$ftp_server port ftp - 127.0.0.1 port 8022 What special feature does switching any to !$ftp_server add to the pf rules? Should I modify mine to also say that? no, I *think* I made some wrong assumptions about your network (obviously didn't read your first mail carefully enough) and I can't figure out now why I suggested that. Sorry about that. --knitti
Re: can't figure out obsd with a bridging ADSL modem.
On 2007/11/09 10:15, Craig Skinner wrote: On Thu, Nov 08, 2007 at 10:25:04PM +, Stuart Henderson wrote: On 08/11/2007, Craig Hammond [EMAIL PROTECTED] wrote: me setup an obsd firewall. The adsl modem that the ISP sent only does bridging (Netgear DM111) and although I got it all working, it feels Looks like DM111 offers PPPoE/PPPoA bridge modes which sound like what some other boxes refer to as half-bridge or DHCP spoofing, and also standard RFC1483 bridging. I had a DLink like this for a while, worked fine when I set it to PPPoA (the usual for non-USA ADSL) bridge DHCP on the client. In .uk we get to choose either PPPoA or PPPoE from most ISPs. There are +/- points for each, but now I almost always choose to configure the modem as an RFC1483 bridge, and the PF box to run PPPoE. No need to dig out ISP details and configure a modem to replace a failed one. If someone has multiple lines that's a big advantage (one spare works for all lines without changing config) - and it runs nicely over vlans too, which would at least be complicated with DHCP. Sounds stupid, but the router's WAN IP gets passed through to the PC via DHCP so you get the static address that the ISP issues to the router and the router becomes invisable to the Internet as your box has the routable IP on its NIC. In the OPs case, the router address in the DHCP reply is outside the subnet (it's just converted from the address in PPP IPCP negotiations, which is ok on a point-to-point link where the route is to the PtP link, but isn't ok for a multiple-access medium). This issue comes up from time to time here, both in relation to ADSL and with 'root servers' from some hosting providers (some of whom give /32 subnet and an out-of-subnet gateway). Some OS accept this and ARP for the address, that seems broken to me but is probably the only way to work around this abuse.
Re: PF
Being on the subject I upgraded from 4.1 to 4.2, everything seems to be working but I found some macro names have changed when using pftop of pfctl pftctl -s all output ... pass in on xl0 inet proto tcp from __automatic_1e910d00_0 to any port = ssh flags S/SA keep state TABLES: __automatic_1e910d00_0 __automatic_1e910d00_1 __automatic_1e910d00_2 __automatic_1e910d00_3 __automatic_1e910d00_4 __automatic_55f8c85d_1 abusers spamd spamd-white .. That __automatic_1e910d00_0 corresponds to a macro called ssh_allowed which somehow has turned into a table a received a new name. On 09/11/2007, Stuart Henderson [EMAIL PROTECTED] wrote: On 2007/11/09 08:59, Kleber Rocha wrote: I have updated the openbsd 4.0 to 4.2, and my rules of the pf stopped working. Some of my network connections are being blocked, someone knows what could be happening? Read the 4.1 upgrade guide.
Re: PF
RCF [EMAIL PROTECTED] writes: That __automatic_1e910d00_0 corresponds to a macro called ssh_allowed which somehow has turned into a table a received a new name. That's probably the ruleset optimizer in action. Your list has been turned into a table for efficiency. -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.datadok.no/ http://www.nuug.no/ Remember to set the evil bit on all malicious network traffic delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.
Port Security 2007
[IMAGE] November 13-15 , 2007 Omni Los Angeles, Los Angeles, CA Register / Speaker's Bio / Conference Day 1 / Conference Day 2 / Contact From the Organizers of Border Management, Network Centric Homeland Security and Maritime Homeland Security Register now for Port Security 2007 IDGA's Port Security Conference will bring together the port security community to discuss the hot issues and new innovations in this rapidly evolving arena. Port Security 2007 is the place to be to discuss and analyze the latest initiatives by the major key players. Keynote Address Speakers: General Victor E. Renuart Jr., USAF, Commander of the North American Aerospace Defense Command and USNORTHCOM. The Integral Role of Port Security in the North American Defense Strategy. Port Security operations are a vital part of securing America's borders. The ports are often the first line of defense for products entering our country. Listen to General Renuart as he describes how Port Security affects our overall North American defense strategy. Rear Admiral Craig E. Bone, USCG, Commander of the Eleventh Coast Guard Port Security - U.S. Coast Guard Agenda Hear Rear Admiral Bone speak about the U.S. Coast Guard's Agenda on Port Security. The U.S. Coast Guard is a part of the integrated approach to Port Security and defending the U.S. boarders. Limited Availability Port of LA Site Visit workshop Sign up now! Get an in-depth, behind-the-scenes look at how the Port of LA, the largest U.S. port, is taking measures to ensure safety while facilitating swift commerce. A classroom environment at the Port will highlight port security training. Hear from A. Aubteen Darabi, Ph.D, Associate Professor and Leading Research Scientist, Florida State University and Judd Butler, Port Security Project Manager, Center for National Security Training and Research, The Learning Systems Institute, Florida State University. The boat tour around the Port of LA will provide an up close look at their progressive security measures and technology. Attendees will have the chance to hear directly from and ask questions of the LA Port Authority. To register call 1-800-882-8684 or email us at [EMAIL PROTECTED] Please quote the following registration code: PORTMPEM Go here to view a copy of the brochure. [IMAGE] View the brochure here High level presentations from: * Gen Victor E. Renuart Jr, USAF, Commander, North American Aerospace Defense Command and USNORTHCOM. * RADM Craig E. Bone Commander, Eleventh Coast Guard District * Owen Doherty, Director, Office of Security * Capt Jon S. Helmick, U.S. Maritime Administration MTSA/IMO Standards and Curriculum Project * CAPT James McNamara, President National Cargo Bureau * Capt Mark Ogle Operations Chief Deployable Operations Group * CDR Ken Stefanisin Commanding Officer of Port Security Unit 311 * And Many More! This email was sent by: %%Member_Busname%% %%Member_Addr%% %%Member_City%%, %%Member_State%% %%Member_PostalCode%% IDGA respects your privacy - go here to view our policy. Go here to leave this mailing list or here to modify your email profile.
Osvoji LCD TV, kameru, mobilni... igra se nastavlja!
Tvoj prijatelj [EMAIL PROTECTED] Te poziva da uhestvuje9 u poklon igri i osvoji9 jedan od sjajnih poklona - LCD TV, digitalnu kameru, ili mobilni telefon! Kako? Lako! Samo klikni na tahan odgovor i osvaja9 20 poena... Trefa teniserka na svetskoj WTA listi je: A. Amelie Moresmo http://www.e-topshop.tv/igra/vote.asp?vid=1808697sid=36871option=94m ed=emorig=intbrd=tsctn=scgvir=yesreferrer=tv_scg_friend2src=tv_scg _friend2 B. Jelena Jankovif http://www.e-topshop.tv/igra/vote.asp?vid=1808697sid=36871option=95m ed=emorig=intbrd=tsctn=scgvir=yesreferrer=tv_scg_friend2src=tv_scg _friend2 C. Na Li http://www.e-topshop.tv/igra/vote.asp?vid=1808697sid=36871option=96m ed=emorig=intbrd=tsctn=scgvir=yesreferrer=tv_scg_friend2src=tv_scg _friend2 Svako dobija! Dovoljno je da se odluhi9 na uhe9fe i po zavr9etku igre dobija9 besplatnu e-knjigu lifestyle saveta: Ljubav, zdravlje i jo9 pone9to... Prihvati izazov - nastavi igru! Tahan odgovor na svako naredno pitanje donosi Ti sve vi9e bodova... A ukoliko eli9 jo9 vi9e bodova i jo9 vefe 9anse za poklon - klikni na www.e-topshop.tv/igra http://www.e-topshop.tv/igra Link-pravila nagradne igre http://www.e-topshop.tv/igra/popup_rules.asp
find out acpibat trouble
hello, may be I'm wrong but it seems that this patch http://www.openbsd.org/cgi-bin/cvsweb/src/sys/dev/acpi/dsdt.c?rev=1.94content-type=text/x-cvsweb-markupsortby=date give me troubles w/ acpibat. w/o the patch the values reported are corected hw.sensors.acpibat0.volt0=12.59 VDC (voltage) hw.sensors.acpibat0.volt1=unknown (current voltage), UNKNOWN hw.sensors.acpibat0.watthour0=57.72 Wh (last full capacity) hw.sensors.acpibat0.watthour1=1.00 Wh (warning capacity) hw.sensors.acpibat0.watthour2=0.40 Wh (low capacity) hw.sensors.acpibat0.watthour3=57.72 Wh (remaining capacity), OK hw.sensors.acpibat0.raw0=0 (battery full), OK hw.sensors.acpibat0.raw1=unknown (rate), UNKNOWN w/ the patch I'have: ??? hw.sensors.acpibat0.volt0=1.30 VDC (voltage) hw.sensors.acpibat0.volt1=unknown (current voltage), UNKNOWN ??? hw.sensors.acpibat0.watthour0=1.40 Wh (last full capacity) hw.sensors.acpibat0.watthour1=1.00 Wh (warning capacity) hw.sensors.acpibat0.watthour2=0.40 Wh (low capacity) ??? hw.sensors.acpibat0.watthour3=1.47 Wh (remaining capacity), OK hw.sensors.acpibat0.raw0=2 (battery full), OK hw.sensors.acpibat0.raw1=unknown (rate), UNKNOWN any help is appreciated -- see ya, giovanni
Re: I've done something stupid
Aaron Martinez wrote: can you log in using single user mode? boot boot -s then change it? Aaron Thanks to all! I'm back up and running. I just feel like an idiot :) -- View this message in context: http://www.nabble.com/I%27ve-done-something-stupid-tf4775501.html#a13667702 Sent from the openbsd user - misc mailing list archive at Nabble.com.
Re: bgpd causing black-holes with bgp-only setup
On Mon, 05 Nov 2007 07:08:56 +0700, Claudio Jeker
[EMAIL PROTECTED] wrote:
Hi,
I'm currently setup a redundant BGP router, from your presentation (maybe
around 2004-2006), you discourage using carp for fail-over/load balancing
since it will loose the session. so I wonder, since I'm using 4.2-current,
is using carp interface already do-able, it wont loose session, etc?
Thanks,
Insan
On Sun, Nov 04, 2007 at 11:30:20PM +, Tony Sarendal wrote:
On 11/4/07, Tony Sarendal [EMAIL PROTECTED] wrote:
Thanks for all the info. I will have a look at this as well. Currently I
think it is possible that route-reflector is not bug free in cases where
you have route-reflector rings or other very complex setups. I only
tested
the easy setups till now. Why you get routing loops and black-holes in
your 3 AS setups is not clear (at least for me) but I guess it may be an
issue with a failed update. I have the feeling that when we get a update
with a routing loop in it we should actually issue a withdraw for the
prefix carried in it so the following code in rde.c is looking
suspicious:
/* aspath needs to be loop free nota bene this is not a hard error */
if (peer-conf.ebgp !aspath_loopfree(asp-aspath, conf-as)) {
error = 0;
goto done;
}
I'm mostly offline in the next days so maybe you beat me in finding a fix
for this.
--
Insan Praja SW
problem installing some packages on 4.2
Hello all, I have problem installing packages via ftp on a new 4.2 installation. It is a standard installation with 2 patches applied (001 and 002),dmesg is on the bottom. I have tried rrdtool-1.0.49p4.tgz and mc-4.6.1p1.tgz so far. I succeeded to get mtr-0.72-no_x11.tgz installed though. I have not tried other packages. I tried to add missing packages manually, I mean install gettext-0.14.6p0 by pkg_add and so on, but then again some other things are missing. Do I do something wrong? Any help is appreciated. Thanks, Ivo This is the result I am getting from pkg_add: # pkg_add -v ftp://ftp.stacken.kth.se/pub/OpenBSD/4.2/packages/i386/mc-4.6.1p1.tgz parsing ftp://ftp.stacken.kth.se/pub/OpenBSD/4.2/packages/i386/mc-4.6.1p1.tgz Dependencies for mc-4.6.1p1 resolve to: gettext-0.14.6p0, unzip-5.52, zip-2.32, glib2-2.12.12p1, libiconv-1.9.2p3 (todo: gettext-0.14.6p0,glib2-2.12.12p1) mc-4.6.1p1:parsing gettext-0.14.6p0 Dependencies for gettext-0.14.6p0 resolve to: libiconv-1.9.2p3 found libspec c.41.0 in /usr/lib Can't install gettext-0.14.6p0: lib not found expat.8.0 Dependencies for gettext-0.14.6p0 resolve to: libiconv-1.9.2p3 Full dependency tree is libiconv-1.9.2p3 found libspec iconv.4.0 in package libiconv-1.9.2p3 mc-4.6.1p1:parsing glib2-2.12.12p1 Dependencies for glib2-2.12.12p1 resolve to: gettext-0.14.6p0, libiconv-1.9.2p3 (todo: gettext-0.14.6p0) mc-4.6.1p1:parsing gettext-0.14.6p0 Dependencies for gettext-0.14.6p0 resolve to: libiconv-1.9.2p3 found libspec c.41.0 in /usr/lib Can't install gettext-0.14.6p0: lib not found expat.8.0 Dependencies for gettext-0.14.6p0 resolve to: libiconv-1.9.2p3 Full dependency tree is libiconv-1.9.2p3 found libspec iconv.4.0 in package libiconv-1.9.2p3 Can't install glib2-2.12.12p1: can't resolve gettext-0.14.6p0 Can't install mc-4.6.1p1: can't resolve gettext-0.14.6p0,glib2-2.12.12p1 # pkg_add -v ftp://ftp.stacken.kth.se/pub/OpenBSD/4.2/packages/i386/rrdtool-1.0.49p4.tgz parsing ftp://ftp.stacken.kth.se/pub/OpenBSD/4.2/packages/i386/rrdtool-1.0.49p4.tgz Dependencies for rrdtool-1.0.49p4 resolve to: gd-2.0.35, libiconv-1.9.2p3 (todo: gd-2.0.35) rrdtool-1.0.49p4:parsing gd-2.0.35 Dependencies for gd-2.0.35 resolve to: png-1.2.18, jpeg-6bp3, libiconv-1.9.2p3 (todo: jpeg-6bp3,png-1.2.18) rrdtool-1.0.49p4:parsing jpeg-6bp3 found libspec c.41.0 in /usr/lib rrdtool-1.0.49p4:jpeg-6bp3: complete rrdtool-1.0.49p4:parsing png-1.2.18 rrdtool-1.0.49p4:png-1.2.18: complete found libspec c.41.0 in /usr/lib Can't install gd-2.0.35: lib not found expat.8.0 Dependencies for gd-2.0.35 resolve to: png-1.2.18, jpeg-6bp3, libiconv-1.9.2p3 (todo: jpeg-6bp3,png-1.2.18) Full dependency tree is png-1.2.18,jpeg-6bp3,libiconv-1.9.2p3 Can't install gd-2.0.35: lib not found fontconfig.5.1 Can't install gd-2.0.35: lib not found freetype.14.0 found libspec iconv.4.0 in package libiconv-1.9.2p3 found libspec jpeg.62.0 in package jpeg-6bp3 found libspec m.2.3 in /usr/lib found libspec png.5.2 in package png-1.2.18 found libspec z.4.1 in /usr/lib Can't install rrdtool-1.0.49p4: can't resolve gd-2.0.35 # dmesg OpenBSD 4.2 (RAMDISK_CD) #468: Tue Aug 28 11:02:17 MDT 2007 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/RAMDISK_CD cpu0: Intel Pentium III (GenuineIntel 686-class) 1 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE real mem = 535326720 (510MB) avail mem = 511623168 (487MB) mainbus0 at root bios0 at mainbus0: AT/286+ BIOS, date 01/04/01, BIOS32 rev. 0 @ 0xfd87d, SMBIOS rev. 2.2 @ 0xe4010 (41 entries) bios0: vendor Phoenix Technologies Ltd. version IP.01.06US date 01/04/2001 bios0: Hewlett-Packard HP Vectra apm0 at bios0: Power Management spec V1.2 apm0: flags 30102 dobusy 0 doidle 1 pcibios0 at bios0: rev 2.1 @ 0xfd810/0x7f0 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdf30/176 (9 entries) pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82371FB ISA rev 0x00) pcibios0: PCI bus #1 is the last bus bios0: ROM list: 0xc/0xa000 0xca000/0x1000 0xcb000/0x1000 0xcc000/0x1800 0xe4000/0xc000! cpu0 at mainbus0 pci0 at mainbus0 bus 0: configuration mode 1 (no bios) pchb0 at pci0 dev 0 function 0 Intel 82815 Hub rev 0x02: rng active, 800Kb/sec vga1 at pci0 dev 2 function 0 Intel 82815 Graphics rev 0x02 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) ppb0 at pci0 dev 30 function 0 Intel 82801AA Hub-to-PCI rev 0x02 pci1 at ppb0 bus 1 em0 at pci1 dev 0 function 0 Intel PRO/1000MT (82540EM) rev 0x02: irq 11, address 00:07:e9:a0:13:e8 em1 at pci1 dev 1 function 0 Intel PRO/1000MT (82540EM) rev 0x02: irq 5, address 00:07:e9:2e:e6:3b re0 at pci1 dev 2 function 0 Realtek 8169 rev 0x10: RTL8169/8110SB (0x1000), irq 9, address 00:0c:76:ae:b5:b7 rgephy0 at re0 phy 7: RTL8169S/8110S PHY, rev. 2 xl0 at pci1 dev 4 function 0 3Com 3c905C 100Base-TX rev 0x78: irq 5, address 00:01:02:29:ee:81 bmtphy0 at xl0 phy 24: Broadcom 3C905C internal PHY, rev. 7 ichpcib0 at pci0 dev
FreeBSD BSD licensed bintools reimplementation
Hi, today, I read that one of the Google Summer of Code 2007 projects from FreeBSD involved a reimplementation of GPL-licensed bintools. Details: Project: BSD bintools project (Part I) Student: Kai Wang Mentor: Joseph Koshy Summary: This project re-implemented part of the GNU binutils based on the libelf and libarchive libraries. It will bring FreeBSD a BSD Licensed toolchain for processing ELF binary files. The project mainly concentrated on re-implementing the tools ar(1), ranlib(1), objcopy(1), strip(1) and composing corresponding manual pages. Ready to enter CVS: soon Source: http://www.freebsd.org/projects/summerofcode-2007.html Even if no code is available in CVS yet (according to that Web page), I thought it would be interesting to some. I guess the code could be asked for. Greetings.
Lost my Sensors (or should be senses!) with 4.2
Hi Folks, I've just been upgrading some of our old war horses (Nokia IP440) to 4.2. They run Intel made BX PIII chipset motherboards, dmesg below. Whilst not extensive the boards do have some sensor data that we grab to check on the health of the old girls. After a fresh install of 4.2 I noticed we had lost the FAN readout from the list of sensors, see output below (taken from different boxes but I've confirmed the loss using the same box switching between 4.1 and 4.2). Whilst this isn't critical for us on these units whatever is causing the omission may have bigger problems for other people so I thought I'd bring it to the lists attention. Many thanks to all the developers for yet another excellence release in 4.2, the bulk CD order is going through soon! Sensor Output from 4.1 i386 (sysctl -a hw) hw.machine=i386 hw.model=Intel Pentium III (GenuineIntel 686-class) hw.ncpu=1 hw.byteorder=1234 hw.physmem=267993088 hw.usermem=267988992 hw.pagesize=4096 hw.disknames=wd0,cd0,fd0 hw.diskcount=3 hw.sensors.lmenv0.temp1=23.00 degC (Internal) *hw.sensors.lmenv0.fan0=2647 RPM *** MISSING *** hw.sensors.lmenv0.fan1=3970 RPM * MISSING hw.sensors.lmenv0.volt0=1.52 VDC (+2.5Vin) hw.sensors.lmenv0.volt1=1.66 VDC (Vccp) hw.sensors.lmenv0.volt2=3.30 VDC (+Vcc) hw.sensors.lmenv0.volt3=5.08 VDC (+5Vin/Vcc) hw.sensors.lmenv0.volt4=12.38 VDC (+12Vin) hw.sensors.lmenv0.volt5=2.43 VDC (Vccp) hw.cpuspeed=599 hw.vendor=Intel Corporation hw.product=SE440BX-2 hw.uuid=ebf758f0-b47b-11d4-af0d-0030d3006ea4 Sensor Output from 4.2 i386 (sysctl -a hw) hw.machine=i386 hw.model=Intel Pentium III (GenuineIntel 686-class) hw.ncpu=1 hw.byteorder=1234 hw.physmem=267993088 hw.usermem=267984896 hw.pagesize=4096 hw.disknames=wd0,cd0,fd0 hw.diskcount=3 hw.sensors.lmenv0.temp1=28.00 degC (Internal) hw.sensors.lmenv0.volt0=1.50 VDC (+2.5Vin) hw.sensors.lmenv0.volt1=1.69 VDC (Vccp) hw.sensors.lmenv0.volt2=3.27 VDC (+Vcc) hw.sensors.lmenv0.volt3=5.05 VDC (+5Vin/Vcc) hw.sensors.lmenv0.volt4=12.00 VDC (+12Vin) hw.sensors.lmenv0.volt5=2.40 VDC (Vccp) hw.sensors.lmenv0.volt6=2.48 VDC (AIN1) hw.sensors.lmenv0.volt7=1.66 VDC (AIN2) hw.cpuspeed=599 hw.vendor=Intel Corporation hw.product=SE440BX-2 hw.uuid=82947f19-b652-11d4-b074-0030d3001e5e DMESG's OpenBSD 4.1 (GENERIC) #1435: Sat Mar 10 19:07:45 MST 2007 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel Pentium III (GenuineIntel 686-class) 599 MHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,SER,MMX,FXSR,SSE real mem = 267993088 (261712K) avail mem = 236847104 (231296K) using 3302 buffers containing 13524992 bytes (13208K) of memory mainbus0 (root) bios0 at mainbus0: AT/286+ BIOS, date 02/23/00, BIOS32 rev. 0 @ 0xfd7a0, SMBIOS rev. 2.1 @ 0xefbe0 (42 entries) bios0: Intel Corporation SE440BX-2 pcibios0 at bios0: rev 2.1 @ 0xfd7a0/0x860 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdf30/176 (9 entries) pcibios0: PCI Interrupt Router at 000:07:0 (Intel 82371FB ISA rev 0x00) pcibios0: PCI bus #2 is the last bus bios0: ROM list: 0xc/0x8000 0xe/0x4000! 0xe4000/0xc000 acpi at mainbus0 not configured cpu0 at mainbus0 pci0 at mainbus0 bus 0: configuration mode 1 (no bios) pchb0 at pci0 dev 0 function 0 Intel 82443BX AGP rev 0x03 ppb0 at pci0 dev 1 function 0 Intel 82443BX AGP rev 0x03 pci1 at ppb0 bus 1 vga1 at pci1 dev 0 function 0 ATI Mach64 GM rev 0x27 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) pcib0 at pci0 dev 7 function 0 Intel 82371AB PIIX4 ISA rev 0x02 pciide0 at pci0 dev 7 function 1 Intel 82371AB IDE rev 0x01: DMA, channel 0 wired to compatibility, channel 1 wired to compatibility wd0 at pciide0 channel 0 drive 0: IC35L020AVER07-0 wd0: 16-sector PIO, LBA, 19623MB, 40188960 sectors wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2 atapiscsi0 at pciide0 channel 1 drive 0 scsibus0 at atapiscsi0: 2 targets cd0 at scsibus0 targ 0 lun 0: TEAC, CD-540E, 1.0A SCSI0 5/cdrom removable cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2 uhci0 at pci0 dev 7 function 2 Intel 82371AB USB rev 0x01: irq 9 usb0 at uhci0: USB revision 1.0 uhub0 at usb0 uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered piixpm0 at pci0 dev 7 function 3 Intel 82371AB Power rev 0x02: SMI iic0 at piixpm0 lmenv0 at iic0 addr 0x2d: adm9240 rev 2, starting scan ppb1 at pci0 dev 13 function 0 DEC 21152 PCI-PCI rev 0x03 pci2 at ppb1 bus 2 dc0 at pci2 dev 4 function 0 DEC 21142/3 rev 0x41: irq 11, address 00:c0:95:e0:9d:1c dcphy0 at dc0 phy 31: internal PHY dc1 at pci2 dev 5 function 0 DEC 21142/3 rev 0x41: irq 10, address 00:c0:95:e0:9d:1d dcphy1 at dc1 phy 31: internal PHY dc2 at pci2 dev 6 function 0 DEC 21142/3 rev 0x41: irq 7, address 00:c0:95:e0:9d:1e dcphy2 at dc2 phy 31: internal PHY dc3 at pci2 dev 7 function 0 DEC 21142/3 rev 0x41: irq 9, address 00:c0:95:e0:9d:1f dcphy3 at dc3 phy 31: internal PHY isa0
Re: bgpd causing black-holes with bgp-only setup
* Insan Praja SW [EMAIL PROTECTED] [2007-11-09 16:37]: On Mon, 05 Nov 2007 07:08:56 +0700, Claudio Jeker [EMAIL PROTECTED] wrote: Hi, I'm currently setup a redundant BGP router, from your presentation (maybe around 2004-2006), you discourage using carp for fail-over/load balancing since it will loose the session. so I wonder, since I'm using 4.2-current, is using carp interface already do-able, it wont loose session, etc? using carp interfaces for failover is perfectly fine, you just have to understand what it does and what not. sessions get lost and re-established of course. -- Henning Brauer, [EMAIL PROTECTED], [EMAIL PROTECTED] BS Web Services, http://bsws.de Full-Service ISP - Secure Hosting, Mail and DNS Services Dedicated Servers, Rootservers, Application Hosting - Hamburg Amsterdam
Re: style(9)
On Fri, Nov 09, 2007 at 02:25:50PM +1030, David Walker wrote: I am thinking of doing some reformatting and prefer to do it correctly. Everything tedu said. I'll add that it's more important to understand why style(9) says what it says than to blindly obey it. The goal being to write in a clean, understandable, and consistent manner. If you break a style(9) rule because it makes the code more readable then you are not wrong. A foolish consistency is the hobgoblin of little minds, adored by little statesmen and philosophers and divines. -- Ralph Waldo Emerson -- Darrin Chandler| Phoenix BSD User Group | MetaBUG [EMAIL PROTECTED] | http://phxbug.org/ | http://metabug.org/ http://www.stilyagin.com/ | Daemons in the Desert | Global BUG Federation
Problems with pkg_add and partial installed package
Hello All, I have a problem with pkg_add on a OpenBSD 4.2. I tried to install the package freebsd_lib-4.11p0.tgz. The first try failed because the Internet connection breaks and on the second try and get this error: $ pkg_add -v freebsd_lib-4.11p0.tgz parsing freebsd_lib-4.11p0.tgz Can't install freebsd_lib-4.11p0 because of conflicts (partial-freebsd_lib-4.11p0) /usr/sbin/pkg_add: freebsd_lib-4.11p0:Fatal error The same happens if I try to install it over the ports. /usr/ports/emulators/freebsd_lib make install === Installing freebsd_lib-4.11p0 from /usr/ports/packages/i386/all/ Can't install freebsd_lib-4.11p0 because of conflicts (partial-freebsd_lib-4.11p0) /usr/sbin/pkg_add: freebsd_lib-4.11p0:Fatal error *** Error code 1 I checked in /var/db/pkg but do not find any entry. Has anybody an idea how I can fix this? I read the man pkg_add and tried as well the -F switch but I does not help. Best Regards, Stefan --
Re: Problems with pkg_add and partial installed package
Hiya Stafan. I had this problem. Try this: pkg_delete partial-freebsd_lib-4.11p0 Best wishes, David Hello All, I have a problem with pkg_add on a OpenBSD 4.2. I tried to install the package freebsd_lib-4.11p0.tgz. The first try failed because the Internet connection breaks and on the second try and get this error: $ pkg_add -v freebsd_lib-4.11p0.tgz \ parsing freebsd_lib-4.11p0.tgz Can't install freebsd_lib-4.11p0 because of conflicts (partial-freebsd_lib-4.11p0) /usr/sbin/pkg_add: freebsd_lib-4.11p0:Fatal error The same happens if I try to install it over the ports. /usr/ports/emulators/freebsd_lib make install === Installing freebsd_lib-4.11p0 from /usr/ports/packages/i386/all/ Can't install freebsd_lib-4.11p0 because of conflicts (partial-freebsd_lib-4.11p0) /usr/sbin/pkg_add: freebsd_lib-4.11p0:Fatal error *** Error code 1 I checked in /var/db/pkg but do not find any entry. Has anybody an idea how I can fix this? I read the man pkg_add and tried as well the -F switch but I does not help. Best Regards, Stefan --
Re: problem installing some packages on 4.2
Hello Ivo, Did you check : http://openbsd.org/faq/upgrade42.html because libexpat is now shipped with X (until 4.3). Just install xbase42 (if you need to build ports, you may need xshare42).* *Best regards, Jean-philippe. Ivo Chutkin a icrit : Hello all, I have problem installing packages via ftp on a new 4.2 installation. # pkg_add -v ftp://ftp.stacken.kth.se/pub/OpenBSD/4.2/packages/i386/mc-4.6.1p1.tgz Can't install gettext-0.14.6p0: lib not found expat.8.0
Re: Problems with pkg_add and partial installed package
On 09/11/2007, OBSD [EMAIL PROTECTED] wrote: The same happens if I try to install it over the ports. Ofcourse. Ports just makes a package and then calls pkg_add. Has anybody an idea how I can fix this? I read the man pkg_add and tried as well the -F switch but I does not help. You just pkg_delete it. pkg_delete partial-freebsd_lib-4.11p0 A package was half way through installing and got interrupted, so pkg_add marked it as partial. -- Best Regards Edd --- http://students.dec.bournemouth.ac.uk/ebarrett
Re: I've done something stupid
Aaron Martinez wrote: can you log in using single user mode? boot boot -s then change it? Aaron I forgot to mention the box was headless. I had to return to the site. I was hoping there was some other way to make the fix... not matter now. I visited the site this morning and made the change. Thanks again, Brad -- View this message in context: http://www.nabble.com/I%27ve-done-something-stupid-tf4775501.html#a13671503 Sent from the openbsd user - misc mailing list archive at Nabble.com.
Re: Problems with pkg_add and partial installed package
pkg_delete partial-freebsd_lib-4.11p0 pkg_add freebsd_lib On 09/11/2007, OBSD [EMAIL PROTECTED] wrote: Hello All, I have a problem with pkg_add on a OpenBSD 4.2. I tried to install the package freebsd_lib-4.11p0.tgz. The first try failed because the Internet connection breaks and on the second try and get this error: $ pkg_add -v freebsd_lib-4.11p0.tgz parsing freebsd_lib-4.11p0.tgz Can't install freebsd_lib-4.11p0 because of conflicts (partial-freebsd_lib-4.11p0) /usr/sbin/pkg_add: freebsd_lib-4.11p0:Fatal error The same happens if I try to install it over the ports. /usr/ports/emulators/freebsd_lib make install === Installing freebsd_lib-4.11p0 from /usr/ports/packages/i386/all/ Can't install freebsd_lib-4.11p0 because of conflicts (partial-freebsd_lib-4.11p0) /usr/sbin/pkg_add: freebsd_lib-4.11p0:Fatal error *** Error code 1 I checked in /var/db/pkg but do not find any entry. Has anybody an idea how I can fix this? I read the man pkg_add and tried as well the -F switch but I does not help. Best Regards, Stefan --
Printing with apsfilter
Hello all, I would like to get some advise on printing with apsfilter on 4.2. I have an Epson CX5400 multifunction printer that I normally use with the Gutenprint drivers and CUPS on other Unix systems. I am only using this as a local printer, so I don't really need something as elaborate as CUPS to do the job. Gutenprint is not available in ports, so I used ghostscript, which does not include this printer as a supported device. I have been able to get it to print somewhat in black and white using one of the drivers, but no color. How feasible is it to use FreeBSD compatibility mode and Gutenprint, etc. packages from FreeBSD to use with apsfilter to make this work? What are other folks using on OpenBSD? Thanks
Security Comparisons
If this is off-topic, I apologize. Just tell me and I'll go away ;) I'm having discussions with a coworkers about moving to OpenBSD for Apache/PHP web hosting. Right now, we use various Linux distros. I have no problem with that. Linux is cool... but it's takes more time to secure and manage. I like the Suhosin (Hardened PHP patch in OpenBSD's PHP package) and the fact that Apache is chrooted by default. We even uploaded some php exploit code onto a test OpenBSD box (r57shell) to see how well it contained the exploit. It worked well. All of these demos and discussions are informal. So here's the question: Are there any formal/corporate comparisons that demonstrate the enhanced security of OpenBSD when compared to other solutions in this space that we can provide to upper management? I know this seems odd, but our managers ask for these types of things... even when the solution speaks for itself and has a strong history of security. IMO, OpenBSD doesn't need to be 'sold' as as security solution as it sells itself, but others feel differently. Many thanks to any who can offer advice, Brad -- View this message in context: http://www.nabble.com/Security-Comparisons-tf4779123.html#a13671831 Sent from the openbsd user - misc mailing list archive at Nabble.com.
Re: Problems with pkg_add and partial installed package
On Fri, 9 Nov 2007 18:02:20 +0100, OBSD wrote Hello All, I have a problem with pkg_add on a OpenBSD 4.2. I tried to install the package freebsd_lib-4.11p0.tgz. The first try failed because the Internet connection breaks and on the second try and get this error: $ pkg_add -v freebsd_lib-4.11p0.tgz parsing freebsd_lib-4.11p0.tgz Can't install freebsd_lib-4.11p0 because of conflicts (partial- freebsd_lib-4.11p0) /usr/sbin/pkg_add: freebsd_lib-4.11p0:Fatal error The same happens if I try to install it over the ports Stefan, Try: # pkg_delete partial-freebsd_lib
Re: 7800GS + 2 monitors under 4.2-release
Sadly the post on the forum was created by me and im also still having no luck. On 09/11/2007, michael hamerski [EMAIL PROTECTED] wrote: the dualhead directive doesn't seem to work on my 7300 GO, still get garbled flashing zx81-style nonsense on my second screen. found this discussion which doesn't solve the problem but is interesting : http://www.bsdforums.org/forums/printthread.php?t=53402 good luck, mike
Re: identifying sparse files and get ride of them trick available?
On Fri, Nov 09, 2007 at 11:03:31AM +0100, Otto Moerbeek wrote: So your problem seems to be that rsync -S is inefficient to the point where it is not useable. I do not use rsync a lot, so I do not know if there's a solution to that problem. It does seem strange that a feature to solve a problem actually make the problem worse. Anything is inefficient in that case. Just create a huge dummy file: $ dd if=/dev/null seek=1m bs=1m of=file Then copy it (with cp, or any sparse-file aware program) to another filesystem. Watch how much time and power it takes to copy nothing from one place to another. Any way to obtain a 'map' of the file that tell you exactly where the written sectors are would make for a BIG improvement. You can't do that on OpenBSD without raw low-level fs hacks and reinventing half of dump(8) and fsck(8). Adi
Re: Security Comparisons
On Nov 9, 2007 10:53 AM, new_guy [EMAIL PROTECTED] wrote: If this is off-topic, I apologize. Just tell me and I'll go away ;) I'm having discussions with a coworkers about moving to OpenBSD for Apache/PHP web hosting. Right now, we use various Linux distros. I have no problem with that. Linux is cool... but it's takes more time to secure and manage. I like the Suhosin (Hardened PHP patch in OpenBSD's PHP package) and the fact that Apache is chrooted by default. We even uploaded some php exploit code onto a test OpenBSD box (r57shell) to see how well it contained the exploit. It worked well. All of these demos and discussions are informal. So here's the question: Are there any formal/corporate comparisons that demonstrate the enhanced security of OpenBSD when compared to other solutions in this space that we can provide to upper management? Sadly, justifying the obvious through these means is often a requirement. Here's an approach you might consider. Take a best practice / standards guide such as from NIST: http://www.itl.nist.gov/lab/bulletns/bltndec02.htm http://csrc.nist.gov/publications/drafts/800-44-Version2/Draft-SP800-44v2.pdf And for the points your organization feels are important (like what you've listed above), map how OpenBSD's implementation and OS approach addresses those points. You'll find this is a pretty good indicator and should be well accepted by the folks that matter. DS
Re: Printing with apsfilter
Hello all, I would like to get some advise on printing with apsfilter on 4.2. I have an Epson CX5400 multifunction printer that I normally use with the Gutenprint drivers and CUPS on other Unix systems. I am only using this as a local printer, so I don't really need something as elaborate as CUPS to do the job. Gutenprint is not available in ports, so I used ghostscript, which does not include this printer as a supported device. I have been able to get it to print somewhat in black and white using one of the drivers, but no color. How feasible is it to use FreeBSD compatibility mode and Gutenprint, etc. packages from FreeBSD to use with apsfilter to make this work? What are other folks using on OpenBSD? Thanks Hi Kim, I do not use LPD(apsfilter) on OpenBSD but rather CUPS which is in packages. That would probably be easy solution to your problem as you could get PPD file directly from http://www.linux-foundation.org/en/OpenPrinting without the need for compiling Gutenprint. I use on one of my older computers running FreeBSD apsfilter(LPD) but the printer attached to it is HP so the drivers are included in apsfilter package itself.(old hpjos driver package) For printers that need Gutenprint drivers in FreeBSD one has to compile Gutenprint with the tag without CUPS. I absolutely have no experience in running FreeBSD programs on OpenBSD which is possible of course. It just looks to me that it would be easier for you to use CUPS in the given situation. CUPS post installation configuration on OpenBSD is well-documented. If you get that Gutenprint rolling I would really like to hear from you how did you install FreeBSD packages on OpenBSD. Best, Predrag
Re: identifying sparse files and get ride of them trick available?
Ted Unangst wrote: On 11/9/07, Daniel Ouellet [EMAIL PROTECTED] wrote: Just for example, a source file that is sparse badly, don't really have allocated disk block yet, but when copy over, via scp, or rsync will actually use that space on the destination servers. All the servers are identical (or suppose to be anyway) but what is happening is the copy of them are running out of space at time in the copy process. Like when it is copying them, it may easy use twice the amount of space in the process and sadly filling up the destinations then then the sync process stop making the distribution of the load unusable. I need to increase the capacity yes, except that it will take me times to do so. so what are you going to do when you find these sparse files? So far. When I find them. Not all of them, but huge waisting space one. I delete them and replace them. with the original one, or even with the one copy using rsync -S back to the original reduce it's size in 1/2 and more at times. So, yes, very inefficiently, but manageable anyway. It's a plaster for now if you want. Don't get me wrong. Sparse files makes no problem what so ever when they stay on the same systems. It's when you need to move them around servers, and specially across Internet connected locations and keep them in sync as much as possible in as shorter time as possible that it becomes unmanageable. That's really the issue at hands. Not that sparse files are bad in any ways. Keeping them in sync across multiples system is however. I was looking if there was a more intelligent ways to do it. (; Like finding them about some level of sparse, like let say 25% and then compact them at the source to be none sparse again, or something similar. Doesn't need to do every single one, even if that might be a good thing in special cases, not all obviously. The problem is that some customers end up running out of space and I really didn't know, plus the huge factor of waisted bandwidth and filling up their connections transferring empty files if you like and taking much longer in sync time that other wise it wouldn't if you sync as is. Still is an interesting problem after I found out what it really was. I hope it explained the issue somewhat better. Thanks for the feedback never the less. Daniel
Re: identifying sparse files and get ride of them trick available?
Otto Moerbeek wrote: So your problem seems to be that rsync -S is inefficient to the point where it is not useable. I do not use rsync a lot, so I do not know if there's a solution to that problem. It does seem strange that a feature to solve a problem actually make the problem worse. Well, I don't want to create a miss understanding here about rsync. -S does address the issue of making the sparse file copy smaller at the end, if you like. It doesn't help in the fact that it is processing them however and if not use -S, then the sync is much, much faster, however the destination is huge space actually use space on the drive that fill it up. So they do their respective job, but with different side effect. Faster sync, much lower bandwidth usage, bigger end results usage space on disk. The other one is the opposite. (;. But the biggest side effect is that using -S will redo the transfer regardless if the end results would be the same as it doesn't see it as the same. In the end, that's really the problem, witch I don't think there is a solutions for anyway in the design of rsync. If there is one anyway, I don't think about it at the moment for sure. It's just a catch 22 situation at the moment. A stupid solution that I just though of writing it to explain it might be as simple as putting temporary a box between the original one and the remote bunch that would be sync to first. This way, it add more delay yes, but may be in the end would much better. I can manage, I find ways to use ls -laR, or du -k and do diff's between them and fine the files that are getting out of wack, replace them and then continue, but this really is painful. stat -s gives the raw info in one go. Some shell script hacking should make it easy to detect sparse files. Thanks Otto for the suggestion. That might help until it can be address for good. It would help speed up some of it. (; Many thanks as trying to explain the problem better may have given me a temporary work around that is not brilliant, but that might just work until the problem can be address better. Daniel
Re: Security Comparisons
Darren Spruell wrote: Sadly, justifying the obvious through these means is often a requirement. Here's an approach you might consider. Take a best practice / standards guide such as from NIST: http://www.itl.nist.gov/lab/bulletns/bltndec02.htm http://csrc.nist.gov/publications/drafts/800-44-Version2/Draft-SP800-44v2.pdf And for the points your organization feels are important (like what you've listed above), map how OpenBSD's implementation and OS approach addresses those points. Thanks... that's a good suggestion. I found the Secunia OS advisories very telling as well. Comparing OpenBSD 3.x (85 Advisories) to Debian 3.x (577). http://secunia.com/product/ -- View this message in context: http://www.nabble.com/Security-Comparisons-tf4779123.html#a13676309 Sent from the openbsd user - misc mailing list archive at Nabble.com.
Re: Printing with apsfilter
On Fri, Nov 09, 2007 at 01:20:14PM -0700, [EMAIL PROTECTED] wrote: Hello all, I would like to get some advise on printing with apsfilter on 4.2. I have an Epson CX5400 multifunction printer that I normally use with the Gutenprint drivers and CUPS on other Unix systems. I am only using this as a local printer, so I don't really need something as elaborate as CUPS to do the job. Gutenprint is not available in ports, so I used ghostscript, which does not include this printer as a supported device. I have been able to get it to print somewhat in black and white using one of the drivers, but no color. How feasible is it to use FreeBSD compatibility mode and Gutenprint, etc. packages from FreeBSD to use with apsfilter to make this work? probably more of a hassle than running -current, IMO. What are other folks using on OpenBSD? I don't have a working printer anymore but, I have used Epson printers with OpenBSD for years. there are now ports for: print/gutenprint print/ijs print/foomatic-finters print/foomatic-db print/foomatic-db-engine in -current, which allow the easy integration of gutenprint drivers with the standard ghostscript port/package. these drivers can then be used with lpd, CUPS, direct printing, or whatever way you prefer. but please read the messages that are displayed when the packages are installed!! Thanks Hi Kim, I do not use LPD(apsfilter) on OpenBSD but rather CUPS which is in packages. That would probably be easy solution to your problem as you could get PPD file directly from http://www.linux-foundation.org/en/OpenPrinting without the need for compiling Gutenprint. not true. plus, with the foomatic-db* packages, there is no need to go searching for PPD files. -- [EMAIL PROTECTED] SDF Public Access UNIX System - http://sdf.lonestar.org
HP Proliant ML110
For the archives: HP Proliant ML110 will not boot bsd.rd unless the BIOS option 8042 Emulation Support (which is enabled by default) is disabled. It will hang at the entry point... message indefinitely. Maybe this will save somebody half an hour of googling, tweaking bios etc Mitja
Powered by obsd stickers and other stuff
Hello all Some art, at slw spanish foul asymetric connection. The sources are xcf, at 1600x1200. Clarify that I am not a designer :) I have make the typical Powered by stickers: http://inigo.homeunix.net/files/art/powered_by_puffy_black.png http://inigo.homeunix.net/files/art/powered_by_puffy_grey.png I hope that those stickers replace the vista compatible of the developers laptops :) There are some backgrounds: A blue rounded gradient with puffy: http://inigo.homeunix.net/files/art/background_blue_puff_1024x768.png http://inigo.homeunix.net/files/art/background_blue_puffy_text_1024x768.png The same but old picture filter: http://inigo.homeunix.net/files/art/background_grandpuffy_1024x768.png And last, but not least, a old daemon half wired / half red: http://inigo.homeunix.net/files/art/art_head_mix_200x175.png The sources (5.3Mm at 33k of upload): http://inigo.homeunix.net/art.tgz Last, I want to acknowledge to the project, by the results, the quality, the and every i know about it. Greetings. Inigo
Re: I've done something stupid
On Fri, Nov 09, 2007 at 09:35:31AM -0800, new_guy wrote: Aaron Martinez wrote: can you log in using single user mode? boot boot -s then change it? Aaron I forgot to mention the box was headless. I had to return to the site. I was hoping there was some other way to make the fix... not matter now. I visited the site this morning and made the change. Thanks again, Brad For the future, I find it useful to have headless boxes set up for serial console attached (or attachable) to a modem. Saves the drive. Doug.
CARP and BGPD (WAS:bgpd causing black-holes with bgp-only setup)
On Fri, 09 Nov 2007 23:37:28 +0700, Henning Brauer [EMAIL PROTECTED] wrote: * Insan Praja SW [EMAIL PROTECTED] [2007-11-09 16:37]: On Mon, 05 Nov 2007 07:08:56 +0700, Claudio Jeker [EMAIL PROTECTED] wrote: Hi, I'm currently setup a redundant BGP router, from your presentation (maybe around 2004-2006), you discourage using carp for fail-over/load balancing since it will loose the session. so I wonder, since I'm using 4.2-current, is using carp interface already do-able, it wont loose session, etc? using carp interfaces for failover is perfectly fine, you just have to understand what it does and what not. sessions get lost and re-established of course. Thanks Henning, I'm sorry to mailed my posts/reply directly to you since misc@ seem to reject my email. Fortunately Im still able to receive posts from [EMAIL PROTECTED] Thanks, -- Insan Praja SW
Re: Powered by obsd stickers and other stuff
El sC!b, 10-11-2007 a las 01:18 +0100, IC1igo Tejedor Arrondo escribiC3: oops The sources (5.3Mm at 33k of upload): http://inigo.homeunix.net/art.tgz It is: http://inigo.homeunix.net/art/art.tgz
Re: Powered by obsd stickers and other stuff
Hey, nice job! Those are really good looking. I'll use that background puffy =) On Nov 9, 2007 9:18 PM, Iqigo Tejedor Arrondo [EMAIL PROTECTED] wrote: Hello all Some art, at slw spanish foul asymetric connection. The sources are xcf, at 1600x1200. Clarify that I am not a designer :) I have make the typical Powered by stickers: http://inigo.homeunix.net/files/art/powered_by_puffy_black.png http://inigo.homeunix.net/files/art/powered_by_puffy_grey.png I hope that those stickers replace the vista compatible of the developers laptops :) There are some backgrounds: A blue rounded gradient with puffy: http://inigo.homeunix.net/files/art/background_blue_puff_1024x768.png http://inigo.homeunix.net/files/art/background_blue_puffy_text_1024x768.png The same but old picture filter: http://inigo.homeunix.net/files/art/background_grandpuffy_1024x768.png And last, but not least, a old daemon half wired / half red: http://inigo.homeunix.net/files/art/art_head_mix_200x175.png The sources (5.3Mm at 33k of upload): http://inigo.homeunix.net/art.tgz Last, I want to acknowledge to the project, by the results, the quality, the and every i know about it. Greetings. Inigo -- An OpenBSD user... and that's all you need to know =) Please, send private emails to [EMAIL PROTECTED]
Re: Security Comparisons
On Fri, Nov 09, 2007 at 02:27:16PM -0800, new_guy wrote: Darren Spruell wrote: Sadly, justifying the obvious through these means is often a requirement. Here's an approach you might consider. Take a best practice / standards guide such as from NIST: http://www.itl.nist.gov/lab/bulletns/bltndec02.htm http://csrc.nist.gov/publications/drafts/800-44-Version2/Draft-SP800-44v2.pdf And for the points your organization feels are important (like what you've listed above), map how OpenBSD's implementation and OS approach addresses those points. Thanks... that's a good suggestion. I found the Secunia OS advisories very telling as well. Comparing OpenBSD 3.x (85 Advisories) to Debian 3.x (577). http://secunia.com/product/ However, you should read their PLEASE NOTE: comment. Especially when you figure that the reports for Debian are for all the packages in debian (thousands of them) whereas OpenBSD doesn't have as many pieces. They specifically say not to use the number of advisories to compare the relative security of the products on which they report. You also have to look at the duration of support. OpenBSD comes out with a new version every six months. Debian comes out every few years. Since Debian is designed with continuous updates possible, the only impitus for a new OS version is new versions of software. Otherwise, the Debian security team takes security advisories in newer versions and backports them to the version supplied in the current stable branch. If you look specifically at, for example, Debian 3.1 (Sarge) and want to compare it with OpenBSD, you'd have to look at the dates from Sarge release to Etch (4.0) release and count the security advisories (which are both security and important bug fixes). Then look at the security advisories for OpenBSD in that time. Then weed out of Debian's count those updates that applied to applications that aren't in OpenBSD, and weed out bugfixes only (that may have been applied to OpenBSD -current but not backported in to -patch). The one thing you will find is that there have been more updates to any single version of the Linux kernel than to the OpenBSD kernel. Its the nature of the beast: Linux is all about new features to work on new hardware. To me the biggest difference between Linux and OpenBSD is one of philosophy. Linux is about making all kinds of toys work in a hot-plug way and allow people to boast about their uptime. OpenBSD is about security. If you add a new piece of hardware, do a reboot and forget about uptime as a quality indicator. Its not a fair comparision since OpenBSD handles USB stuff too but the philosophical difference is there. Doug.
Re: Printing with apsfilter
Jacob Meuser wrote: On Fri, Nov 09, 2007 at 01:20:14PM -0700, [EMAIL PROTECTED] wrote: Hello all, I would like to get some advise on printing with apsfilter on 4.2. I have an Epson CX5400 multifunction printer that I normally use with the Gutenprint drivers and CUPS on other Unix systems. I am only using this as a local printer, so I don't really need something as elaborate as CUPS to do the job. Gutenprint is not available in ports, so I used ghostscript, which does not include this printer as a supported device. I have been able to get it to print somewhat in black and white using one of the drivers, but no color. How feasible is it to use FreeBSD compatibility mode and Gutenprint, etc. packages from FreeBSD to use with apsfilter to make this work? probably more of a hassle than running -current, IMO. What are other folks using on OpenBSD? I don't have a working printer anymore but, I have used Epson printers with OpenBSD for years. there are now ports for: print/gutenprint print/ijs print/foomatic-finters print/foomatic-db print/foomatic-db-engine in -current, which allow the easy integration of gutenprint drivers with the standard ghostscript port/package. these drivers can then be used with lpd, CUPS, direct printing, or whatever way you prefer. but please read the messages that are displayed when the packages are installed!! Thanks Hi Kim, I do not use LPD(apsfilter) on OpenBSD but rather CUPS which is in packages. That would probably be easy solution to your problem as you could get PPD file directly from http://www.linux-foundation.org/en/OpenPrinting without the need for compiling Gutenprint. not true. plus, with the foomatic-db* packages, there is no need to go searching for PPD files. Dear Jacob, Could you please give me some more explanations. Are you saying that the Epson printers will not work with CUPS even if the appropriate PPD files are reachable by CUPS. My HP printers have always been able to work that way (just by downloading PPD file from Linux Printing on the third page of CUPS web management tool) in both FreeBSD and OpenBSD. I am not talking about simple text or ps files. I am talking about printing images from browsers and gimp as well as printing from applications like xdvi or xpdf (I obviously use TeX). Yes, I am aware that foomatic-db can generate PPD files for you. I have never used it though. Could you post some link or how to use foomatic packages. I would really like to learn. Any strong opinion on LPD vs LPRng vs CUPS issue? I am not a professional system administrator and there is way too much Linux and CUPS around me for my taste. I want to hear from the serious people what are the benefits of one system over the another. Thanks Predrag
Re: Printing with apsfilter
On Fri, Nov 09, 2007 at 07:15:11PM -0700, Predrag Punosevac wrote: Could you please give me some more explanations. Are you saying that the Epson printers will not work with CUPS even if the appropriate PPD files are reachable by CUPS. yes. you need the right driver. PPD files are not drivers; they are descriptions of the printer and the driver options. My HP printers have always been able to work that way (just by downloading PPD file from Linux Printing on the third page of CUPS web management tool) in both FreeBSD and OpenBSD. I am not talking about simple text or ps files. I am talking about printing images from browsers and gimp as well as printing from applications like xdvi or xpdf (I obviously use TeX). then the drivers those PPD files used for those printers must have been availble on your system. Yes, I am aware that foomatic-db can generate PPD files for you. I have never used it though. Could you post some link or how to use foomatic packages. I would really like to learn. install the packages. read the info that is displayed when the package is installed, then read foomatic-ppdfile(1). Any strong opinion on LPD vs LPRng vs CUPS issue? I am not a professional system administrator and there is way too much Linux and CUPS around me for my taste. I want to hear from the serious people what are the benefits of one system over the another. lpd - part of the base system. lightweight and very reliable. CUPS - relatively easy set up and ability to tweak options on the fly. lprng - never used it. -- [EMAIL PROTECTED] SDF Public Access UNIX System - http://sdf.lonestar.org
Re: Powered by obsd stickers and other stuff
IC1igo Tejedor Arrondo wrote: El sC!b, 10-11-2007 a las 01:18 +0100, IC1igo Tejedor Arrondo escribiC3: oops The sources (5.3Mm at 33k of upload): http://inigo.homeunix.net/art.tgz It is: http://inigo.homeunix.net/art/art.tgz No luck here: Not Found The requested URL /art/art.tgz was not found on this server. Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
