Re: Opening VPN ports

2008-03-18 Thread Almir Karic
On Mon, Mar 17, 2008 at 11:26 PM, Dave Beckstrom [EMAIL PROTECTED] wrote:
 Hi Everyone,

  I have an OpenBSD 3.3 transparently bridged packet filtering firewall.  I
  would like to enable a VPN connection through the firewall into a Win2K3
  server that sits behind the firewall.

  I am finding conflicting information on what ports/protocol to open up.
  Microsoft is saying protocol ID 47 and TCP port 1723 both inbound and
  outbound.  If that's true, then something like the following should work:


  pass in quick on ext_if proto 47 from any to any
  pass out quick on ext_if proto 47 from any to any


  pass in quick on ext_if proto tcp from any to any port 1723 keep state
  pass out  quick on ext_if proto tcp from any to any port 1723 keep state

  I had not luck with the above.  If I disable PF I can connect fine, so I
  know for sure that the problem has to do with PF blocking my access.

  To complicate matters, I've found other references to protocols 50  51 and
  port 500.

  I'm hoping that one of you who has this working can let me know what I need
  to config in order to allow my VPN connection to pass through the firewall.


add 'log' statement to your block rule, than tcpdump -n -e -ttt -i
pflog0 to see which packets are being droped and by which rule,
example (from 4.2 tho):

Mar 18 07:39:26.412253 rule 8/(match) block out on fxp0:
192.168.1.2.42731  192.168.1.98.6335: [|tcp] (DF) [tos 0x10]

you see the packet is blocked on it's way out of fxp0.

-- 
error: one bad user found in front of screen



Re: AMD Geode

2008-03-18 Thread Nicolas Legrand
Damien Miller [EMAIL PROTECTED] writes:

 On Mon, 17 Mar 2008, Dimitri wrote:

 Hello all.
 
 My cuestion is simply.
 
 OpenBSD run over AMD Geode,

 Yes.

 specificly over Packard
 Bell S18P?.

I've read it's an AMD Geode LX800, so yes.



Re: the death of the oldest OpenBSD system on the net...

2008-03-18 Thread Johan Mson Lindman
On Monday 17 March 2008 22:12:05 you wrote:
 On Mon, Mar 17, 2008 at 4:56 PM, Marc Balmer [EMAIL PROTECTED] wrote:
  back in time (but not to long ago), I served 3000 email accounts for
  a Swiss multinational insurance company on a P133 with 32MB RAM.
 
  That is no big deal, however.  sendmail and any Unix like system
  can handle that without problem.

 Until a few years back, all the emails for one of the most widely
 recognized global brands went through 3 gateway servers (think 250k
 employees, and a whole bunch of automatic notification emails) that were
 freebsd, sendmail, and either dual ppro 200mhz or dual P2-400mhz.

 softdep really helped them out :)

Nice!
Got any more _freebsd_ success stories for [EMAIL PROTECTED]



Re: the death of the oldest OpenBSD system on the net...

2008-03-18 Thread Siegbert Marschall
 On Monday 17 March 2008 22:12:05 you wrote:
 On Mon, Mar 17, 2008 at 4:56 PM, Marc Balmer [EMAIL PROTECTED]
 wrote:
  back in time (but not to long ago), I served 3000 email accounts for
  a Swiss multinational insurance company on a P133 with 32MB RAM.
 
  That is no big deal, however.  sendmail and any Unix like system
  can handle that without problem.

 Until a few years back, all the emails for one of the most widely
 recognized global brands went through 3 gateway servers (think 250k
 employees, and a whole bunch of automatic notification emails) that were
 freebsd, sendmail, and either dual ppro 200mhz or dual P2-400mhz.

 softdep really helped them out :)

 Nice!
 Got any more _freebsd_ success stories for [EMAIL PROTECTED]

No. But I will be shutting down a ten year old Linux server, where I am the
only one which actually changed and burned the EPROMs of a rather rare
kind with the software needed to make the mylex Raid6 controller working
in a few days. The thing kept sitting in the basement without UPS and
anybody ever doing anything, just running and running...
Almost as good as novell 3.x and nowadays openbsd, some things just
keep running...
The guy at mylex was quite happy that finally somebody made use of the
code they wrote for this at the time ancient piece of hardware and
surprised. ;)

-sm



Re: the death of the oldest OpenBSD system on the net...

2008-03-18 Thread William Boshuck
On Tue, Mar 18, 2008 at 10:16:13AM +0100, Siegbert Marschall wrote:
  On Monday 17 March 2008 22:12:05 you wrote:
  ...
  Got any more _freebsd_ success stories for [EMAIL PROTECTED]
 ^^^
 
 No. But I will be shutting down a ten year old Linux server, ...

and this week I'll have to replace the clip (for the umpteenth
time) of a forty year old fountain pen ...



Re: AMD Geode

2008-03-18 Thread Nick Holland
Nicolas Legrand wrote:
 Damien Miller [EMAIL PROTECTED] writes:
 
 On Mon, 17 Mar 2008, Dimitri wrote:

 Hello all.
 
 My cuestion is simply.
 
 OpenBSD run over AMD Geode,

 Yes.

 specificly over Packard
 Bell S18P?.
 
 I've read it's an AMD Geode LX800, so yes.


ONCE AGAIN, the processor on an PC-like machine is one of the least
important parts to the question of compatibility.

The question is, what are all the other chips around the thing, how
are they hooked up, and how badly did the designers screw it up in
ways that haven't already been dealt with already.

Unfortunately, until someone tests a machine, it is pretty close to
impossible to find out.

Load OpenBSD on a USB flash drive, stick it in the thing, boot from
it and see what happens...

Nick.



pf label and viewing with tcpdump?

2008-03-18 Thread Karl-Heinz Wild

Hi.

After viewing the man pages and searched the internet
I couldn't find how to display pf tags-labels in tcpdump.

The other thing is how to display a tag in the states with
pfctl -ss?

Is it not implemented or did I miss the right information?

I hope that my questions aren't rubbish :)

Thanks for answering.

Regards
Karl-Heinz



Re: the death of the oldest OpenBSD system on the net...

2008-03-18 Thread bofh
On Tue, Mar 18, 2008 at 2:52 AM, Johan Mson Lindman [EMAIL PROTECTED] wrote:

 Nice!
 Got any more _freebsd_ success stories for [EMAIL PROTECTED]


I think the key here is that not everything needs to be a 4 cpu quad core
with 128Gigs of ram, and not that it was running freebsd or openbsd.



-- 
http://www.glumbert.com/media/shift
http://www.youtube.com/watch?v=tGvHNNOLnCk
This officer's men seem to follow him merely out of idle curiosity.  --
Sandhurst officer cadet evaluation.
Securing an environment of Windows platforms from abuse - external or
internal - is akin to trying to install sprinklers in a fireworks factory
where smoking on the job is permitted.  -- Gene Spafford
learn french:  http://www.youtube.com/watch?v=j1G-3laJJP0feature=related



Re: the death of the oldest OpenBSD system on the net...

2008-03-18 Thread Marcus Andree
snip


  back in time (but not to long ago), I served 3000 email accounts for
  a Swiss multinational insurance company on a P133 with 32MB RAM.

  That is no big deal, however.  sendmail and any Unix like system
  can handle that without problem.


Agreed. People nowadays seem to wrongly associate email with
Exchange Server bloatware.

Give those gigs of RAM and disk space to a lightweight UNIX
distro, fasten your seatbelts and prepare to take off.

It's amazing how little knowledge tech workers have about
network protocols...



Re: the death of the oldest OpenBSD system on the net...

2008-03-18 Thread T. Ribbrock
On Mon, Mar 17, 2008 at 09:56:44PM +0100, Marc Balmer wrote:
 back in time (but not to long ago), I served 3000 email accounts for
 a Swiss multinational insurance company on a P133 with 32MB RAM.

Out of curiousity: Was that with or without spamfilters and
virusscanning? These two seem to cause most of the power demands of
mail servers these days, not the number of accounts...

Cheerio,

Thomas
-- 
 ** PLEASE: NO Cc's to me privately, I do read the list - thanks! **
-
  Thomas Ribbrockhttp://www.ribbrock.orgICQ#: 15839919
   You have to live on the edge of reality - to make your dreams come true!



Re: Flexibility of pf rules created by ftp-proxy?

2008-03-18 Thread Camiel Dobbelaar
Dave Anderson wrote:
 I've been working on the pf configuration for my home firewall,
 including setting up ftp-proxy.  I've noticed that the command is
 getting cluttered with options to adjust the rules it creates to the
 needs of different pf configurations.  Has any thought been given to
 allowing arbitrary nat, rdr and pass rules to be specified in a
 configuration file (in the same syntax as for pf.conf) with macros
 defined for the server, client and proxy addresses (as in the examples;
 also, perhaps, a few other macros -- such as for the interfaces through
 which the client and server are reachable)?
 
 I'm not asking (let alone demanding) that anyone implement this, but
 would like to know if it's been considered and rejected for some
 reason, is on someone's to-do list, has never been thought about, or
 whatever.  It seems to me to be a good way both to avoid needing more
 and more options to tweak the generated rules and to avoid the delay
 involved in modifying the program whenever someone comes up with a new
 need.

Now that the 'tag' option is available I don't expect ftp-proxy to gain
any more options wrt. to the pf rules it creates, because you can
implement those yourself using 'tagged'.

The history behind the current implementation is that I wanted it to be
simple.  Having a configuration file with pf rules means that you either
have:
- embed a full parser, which is a lot of code
- run pfctl, which makes it harder to chroot

Also, the FTP protocol is complex.  Having the nat and rdr rules under
user control would easily break things.

So it would be a lot of extra code for not much gain.

--
Cam



4.3-stable ports

2008-03-18 Thread Alexander Hall

From http://www.openbsd.org/43.html#ports:

  Updated packages for the 4.3 release will be made available
   if problems arise.

From the discussions lately, i suspect this is not the case anymore, 
for now, anyway?


/Alexander



Re: the death of the oldest OpenBSD system on the net...

2008-03-18 Thread Henning Brauer
* Marcus Andree [EMAIL PROTECTED] [2008-03-18 12:31]:
 snip
   back in time (but not to long ago), I served 3000 email accounts for
   a Swiss multinational insurance company on a P133 with 32MB RAM.
 
   That is no big deal, however.  sendmail and any Unix like system
   can handle that without problem.
 Agreed. People nowadays seem to wrongly associate email with
 Exchange Server bloatware.

well. it depends a LOT on your users' usage profile. I could not serve 
our customers from such an old machine.
ok, the frontends are still 360MHz Sun netra t1s. But the storage 
backend is a 14 disk raid5 of 15k RPM U320 drives, plus a 6 disk raid5 of 
10k RPM U320 drives - and that is needed.

 It's amazing how little knowledge tech workers have about
 network protocols...

ack ack ack ack ack

-- 
Henning Brauer, [EMAIL PROTECTED], [EMAIL PROTECTED]
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting - Hamburg  Amsterdam



Re: AMD Geode

2008-03-18 Thread [EMAIL PROTECTED]
On Tue, Mar 18, 2008 at 8:15 AM, Henning Brauer [EMAIL PROTECTED] wrote:

  so you are saying that the old cisco catalyst 1924 switches I have
  somewhere here (that an axe or some explosives and I will have fun with
  soonish) runs OpenBSD, since it has an 80486 processor? cool.


I think that would be an useful port, considering how many interfaces
it has.  Git 'r done, Henning!



Re: AMD Geode

2008-03-18 Thread Jeremy Huiskamp

On 18/03/08 08:15 AM, Henning Brauer wrote:

* Nicolas Legrand [EMAIL PROTECTED] [2008-03-18 07:56]:

Damien Miller [EMAIL PROTECTED] writes:

On Mon, 17 Mar 2008, Dimitri wrote:

Hello all.
My cuestion is simply.
OpenBSD run over AMD Geode,

Yes.

specificly over Packard
Bell S18P?.

I've read it's an AMD Geode LX800, so yes.


so you are saying that the old cisco catalyst 1924 switches I have 
somewhere here (that an axe or some explosives and I will have fun with 
soonish) runs OpenBSD, since it has an 80486 processor? cool.




That depends.  There's already an axe(4) but:
$ man -k explosives
explosives: nothing appropriate



Re: pf label and viewing with tcpdump?

2008-03-18 Thread Girish Venkatachalam
On 12:13:56 Mar 18, Karl-Heinz Wild wrote:
 After viewing the man pages and searched the internet
 I couldn't find how to display pf tags-labels in tcpdump.


It is not possible for userland processes like tcpdump(1) to display
pf(4) tags. So it follows that pfctl(1) also cannot read tags.

Packet tagging happens in kernel and there is no ioctl to read tags. I
am not sure if there is any plan to implement it.

 The other thing is how to display a tag in the states with
 pfctl -ss?


It is not possible.

 Is it not implemented or did I miss the right information?

 I hope that my questions aren't rubbish :)


You know how to display pf(4) labels with pfctl. Don't you?

-Girish

--
unix soi qui mal y pense

UNIX to him who evil thinks

+--+
| GnuPG key  : 0xC7BBF207  |  http://wwwkeys.nl.pgp.net|
| Fingerprint: 2AFF C264 20CE C80C DDFF  CC15 AD3E F190 C7BB F207  |
+--+

[demime 1.01d removed an attachment of type application/pgp-signature]



Re: the death of the oldest OpenBSD system on the net...

2008-03-18 Thread Jussi Peltola
On Tue, Mar 18, 2008 at 01:11:45PM +0100, Henning Brauer wrote:
 well. it depends a LOT on your users' usage profile. I could not serve 
 our customers from such an old machine.
 ok, the frontends are still 360MHz Sun netra t1s. But the storage 
 backend is a 14 disk raid5 of 15k RPM U320 drives, plus a 6 disk raid5 of 
 10k RPM U320 drives - and that is needed.
 
IMAP vs POP, presumably?



Re: the death of the oldest OpenBSD system on the net...

2008-03-18 Thread Henning Brauer
* Jussi Peltola [EMAIL PROTECTED] [2008-03-18 15:41]:
 On Tue, Mar 18, 2008 at 01:11:45PM +0100, Henning Brauer wrote:
  well. it depends a LOT on your users' usage profile. I could not serve 
  our customers from such an old machine.
  ok, the frontends are still 360MHz Sun netra t1s. But the storage 
  backend is a 14 disk raid5 of 15k RPM U320 drives, plus a 6 disk raid5 of 
  10k RPM U320 drives - and that is needed.
  
 IMAP vs POP, presumably?

mixed, in my case.
not all that many direct imap users, but many many indirect ones via 
webmail.

-- 
Henning Brauer, [EMAIL PROTECTED], [EMAIL PROTECTED]
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting - Hamburg  Amsterdam



cvs comparisons [ot]

2008-03-18 Thread ttw+bsd
been setting up a repository of various development stuff and finding
subversion to be horrifically slow and very hard on resources.
struggling to find actual comparisons with CVS (lots of opinions and
statements about SVN tagging and branching being better) but hoping
someone here could help with links or experiences.

currently switching back to CVS but hopeful of something quantative
for future reference.



glxpcib: tiny bug fix

2008-03-18 Thread Rolf Sommerhalder
Without the fix below, reading back the state of the impulse switch
(GPIO24) on my ALIX always returned '0' (e.g. switch is pressed). Now it
returns '1' if depressed, and '0' only while pressing it, as expected.

As AMD5536_GPIO_READ_BACK was already #defined but so far unused, I
assume it was just a small oversight which crept through testing while
reading back the LEDs' state only. See p. 480ff in the CS4436 Companion
Data Book for a detailed description of the registers in question.

Note: This fix changes the values returned while reading the LEDs' state
(GPIO6, 25 and 27). Before, they alway reflected the last state written
(LED on or off). Now, they always return '0', unless you set 'in' flag,
upon which it returns always '1'.
The LEDs' current state can't be read back anymore this manner because
these GPIOs do not support the 'inout' flag.

Rolf


--- sys/arch/i386/pci/glxpcib.c.origSat Nov 24 09:21:00 2007
+++ sys/arch/i386/pci/glxpcib.c Tue Mar 18 15:55:51 2008
@@ -291,7 +291,7 @@
u_int32_t data;
int reg;

-   reg = AMD5536_GPIO_OUT_VAL;
+   reg = AMD5536_GPIO_READ_BACK;
if (pin  15) {
pin = 0x0f;
reg += AMD5536_GPIOH_OFFSET;



kqemu - was [Re: what version/release for Thinkpad x61]

2008-03-18 Thread Michael
Hi,

Louis V. Lambrecht schrieb:
 Re: kqemu
 Did you load kqemu via rc.securelevel ?
 if [ -r /usr/local/lib/kqemu/kqemu.o ]; then
echo ' kqemu'; /sbin/modload /usr/local/lib/kqemu/kqemu.o
 fi
 
 modload kqemu gives errors.

Yes, no errors during load, only later...

kqemu: failed to unwire page at 0x7d1e7000
kqemu: failed to unwire page at 0x82b23000
kqemu: failed to unwire page at 0x8ae4d000

Already posted that once in another topic though. Still hoping a little
that maybe qemu 0.9.1 fixes it, once that is ported.


Michael



Re: glxpcib: tiny bug fix

2008-03-18 Thread Marc Balmer

Rolf Sommerhalder wrote:

Without the fix below, reading back the state of the impulse switch
(GPIO24) on my ALIX always returned '0' (e.g. switch is pressed). Now it
returns '1' if depressed, and '0' only while pressing it, as expected.

As AMD5536_GPIO_READ_BACK was already #defined but so far unused, I
assume it was just a small oversight which crept through testing while
reading back the LEDs' state only. See p. 480ff in the CS4436 Companion
Data Book for a detailed description of the registers in question.

Note: This fix changes the values returned while reading the LEDs' state
(GPIO6, 25 and 27). Before, they alway reflected the last state written
(LED on or off). Now, they always return '0', unless you set 'in' flag,
upon which it returns always '1'.
The LEDs' current state can't be read back anymore this manner because
these GPIOs do not support the 'inout' flag.


Thanks, Rolf, I will look into this.

- Marc



Rolf


--- sys/arch/i386/pci/glxpcib.c.origSat Nov 24 09:21:00 2007
+++ sys/arch/i386/pci/glxpcib.c Tue Mar 18 15:55:51 2008
@@ -291,7 +291,7 @@
u_int32_t data;
int reg;

-   reg = AMD5536_GPIO_OUT_VAL;
+   reg = AMD5536_GPIO_READ_BACK;
if (pin  15) {
pin = 0x0f;
reg += AMD5536_GPIOH_OFFSET;




Re: the death of the oldest OpenBSD system on the net...

2008-03-18 Thread Marc Balmer

Henning Brauer wrote:

* Marcus Andree [EMAIL PROTECTED] [2008-03-18 12:31]:

snip

 back in time (but not to long ago), I served 3000 email accounts for
 a Swiss multinational insurance company on a P133 with 32MB RAM.

 That is no big deal, however.  sendmail and any Unix like system
 can handle that without problem.

Agreed. People nowadays seem to wrongly associate email with
Exchange Server bloatware.


well. it depends a LOT on your users' usage profile. I could not serve 
our customers from such an old machine.


well, we can't either nowadays, of course. much, much more iron in
place now;)

ok, the frontends are still 360MHz Sun netra t1s. But the storage 
backend is a 14 disk raid5 of 15k RPM U320 drives, plus a 6 disk raid5 of 
10k RPM U320 drives - and that is needed.



It's amazing how little knowledge tech workers have about
network protocols...


ack ack ack ack ack




Laptop display refresh rate

2008-03-18 Thread Rafal Brodewicz
Hello.

Is there any tool to find out what V,H refresh rates should I set in
xorg.conf for my laptop display? It's HP Copmaq 6510b with 1280x800
resolution.

Are they still needed btw?
-- 
Rafal Brodewicz
Section Module
Loaddbe
SubSection  extmod
Optionomit xfree86-dga
EndSubSection
Loadfreetype
EndSection

Section Files
FontPath   /usr/X11R6/lib/X11/fonts/misc/
FontPath   /usr/X11R6/lib/X11/fonts/75dpi/:unscaled
FontPath   /usr/X11R6/lib/X11/fonts/100dpi/:unscaled
FontPath   /usr/X11R6/lib/X11/fonts/TTF/
FontPath   /usr/X11R6/lib/X11/fonts/OTF
FontPath   /usr/X11R6/lib/X11/fonts/Type1/
FontPath   /usr/X11R6/lib/X11/fonts/Speedo/
FontPath   /usr/local/lib/X11/fonts/ghostscript/
FontPath   /usr/local/lib/X11/fonts/artwiz-aleczapka
FontPath   /usr/local/lib/X11/fonts/terminus
FontPath   /usr/local/lib/X11/fonts/TTF

EndSection

Section ServerFlags
EndSection

Section InputDevice
Identifier  Keyboard1
Driver  kbd
Option AutoRepeat 500 30
Option XkbRules   xorg
Option XkbModel   pc105
Option XkbLayout  pl
EndSection

Section InputDevice
Identifier  Mouse1
Driver  mouse
Option Protocolwsmouse
Option Device  /dev/wsmouse
Option Emulate3Buttons
Option ZAxisMapping 4 5
EndSection

Section Monitor
Identifier  hp# laptop display
HorizSync   31-64   # ?
VertRefresh 59-61   # ?
EndSection

Section Monitor
Identifier  eizo  # external display
HorizSync   31-64
VertRefresh 59-61
EndSection

Section Device
Identifier  intel
Driver  intel
Option DRI true
Option monitor-VGA eizo
Option monitor-LVDS hp
EndSection

Section Screen
Identifier  Screen 1
Device  intel
Monitor hp
DefaultDepth 24
Subsection Display
Depth   8
Modes   1280x800 1280x1024
ViewPort0 0
EndSubsection
Subsection Display
Depth   16
Modes   1280x800 1280x1024
ViewPort0 0
EndSubsection
Subsection Display
Depth   24
Modes   1280x1024 1280x800 
ViewPort0 0
EndSubsection
EndSection

Section ServerLayout
Identifier  Simple Layout
Screen Screen 1
InputDevice Mouse1 CorePointer
InputDevice Keyboard1 CoreKeyboard
EndSection



relayd layer 7 http proxy and filtering questions

2008-03-18 Thread Calomel
We are looking to do some URL path and request method filtering with relayd
if possible. Many of the other layer 7 filters like User-Agent and
Referer work without issue. 

The box is built using relayd from -current cvs downloaded on Mar 18, 2008.
Relayd is setup to be a reverse HTTP proxy with layer 7 filtering as a
relay to a test webserver.

Similar to a firewall mindset, we are looking to block everything other
than what we specifically list out.


As a test, the URL or path filtering can allow /, *.html and *.jpg.
We are unable to figure out how to get relayd to allow only these types of
files, and deny any other access. The following is from our test
relayd.conf file, but these rules block all access.  Is there a way to list
out each file type, one per line?  Can we instead use something similar to
a regular expression like, request path expect (^\/|\.html|\.jpg)$

## ## URL filtering (NOT working yet)
 label BAD path request
 request path expect /
 request path expect /*.html
 request path expect /*.jpg


The second question is how to only accept the GET and HEAD request
methods and deny any others. For example we do not want the webserver to
ever see POST or TRACE methods. As GET and HEAD are not headers, we are
unsure as what rules to use.

## ## Block bad request method (NOT working yet)
 label BAD request method
 request header expect GET
 request header expect HEAD


Since it is a work in progress, our full relayd.conf file can be found
here for reference:

  Relayd proxy how to (relayd.conf)
  http://calomel.org/relayd.html

--
 Calomel @ http://calomel.org
 Open Source Research and Reference



using openbsd to make presentations

2008-03-18 Thread Pau Amaro-Seoane
Hi,

very often I have to give a talk about my work etc... The slides
contain a lot of math equations, plots and even sometimes some movies.

I was used to latex-beamer to do all this because I want something I
can edit with vi(m) and it fulfilled all requisites ... and I was used
to it when I was using linux.

I have switched to OpenBSD since some 1.5 years and I am very happy to
report here, by the way, that OpenBSD _does_ start X on the projector
where most linux peecees and macs fail :) BUT -and this is the main
reason to write now- the pdf slides created with latex-beamer feel
heavy... What I mean is that when using full screen (with xpdf or
kpdf etc) it takes some 3-4 seconds to change a slide. I don't know
why... I can provide you with a test talk, so that you udnerstand what
I mean.

This is very bad when somebody in the public asks a question of plot
number 2 in slide #3 and you're in slide #55. Sure there are ways to
overcome the problem, with the progress bar of latex-beamer, for
instance, but still I don't like it.

I just want to ask here in misc whether somebody has had the same
problem and what other alternatives there are.

I have noticed that a lot of people are using magicpoint out there. I
had a look at it, but it seems not obvious to use when it comes to
latex. As far as i know, there are these two possibilities:

http://www.sonycsl.co.jp/person/nishida/mgp-users/msg00241.html

http://www.sonycsl.co.jp/person/nishida/mgp-users/msg00290.html

I have made some tests and I could not use all latex commands... I run
into a snag in a number of occasions.

Question: Do you have any recommendation / suggestion to prepare talks
to be shown in a projector including mathematical equations, plots
and, eventually, movies (I can live without this last point)?

Thanks,

Pau



PF puzzlements.

2008-03-18 Thread Sherwood Botsford

I've got The Book of PF on order.
Meanwhile I will continue to fumble through on my own.


I work at a boarding school.

Freetime Internet access is a carrot we use to encourage 
accademic performance.  Most free time use is java games and 
social networking sites.


I am trying to set up a system to allow internet usage on a per 
person basis.  I work in a school, and the kids aren't terribly 
shy about loaning/borrowing accounts.


(I've already set up my windows boxes so that if the same user is 
detected logged in on more than one machine, then BOTH machines 
reboot.  Sometimes it's because a kid forgot to log off. 
Sometimes it's because he logged in for someone else.)



I want to change the system from one where computer access is 
allowed/denied (script working on smbpasswd file.) to one where 
internet access is allowed/denied through pfauth.


The firewall box also runs squid in transparent mode.  Almost all 
of the internet access is for the web.  I want to use pfauth 
instead of squid's authentication for several reasons.
1.  To use squid's authorization I have to make squid 
non-transparent.
2.  I have a prototype authentication scheme that will work with 
ssh/pfauth, but that is beyond me for squid integration. (Notion 
is to build up a set of questions/answers that only the user will 
know. In essence a bunch of questions for each user on the line 
of what is the middle name of the first girl you had a crush 
on? with them having considerable leeway in which questions they 
want in their personal security database)

3.  I want to regulate the non-squid access too.

How do I set up pfauth to authenticate both squid and network trafic?

How do I set up tallying by user so that I can get an idea of 
who's spending too much time on facebook.




Allégez vos crédits de 60%, Nouveaux critères, 50 euros offerts à la réalisation de votre dossier.

2008-03-18 Thread Vanessa � Etoiles Finances
Etoiles Finances, le spicialiste du rachat de cridits

[IMAGE]

[IMAGE]Augmentez votre pouvoir d'achat
[IMAGE]en iconomisant jusqu'` 60%
[IMAGE]sur vos mensualitis ![IMAGE]

[IMAGE]

[IMAGE]LES AVANTAGES DU RACHAT DE CREDITS :[IMAGE]

[IMAGE]C'est pour tout le monde
[IMAGE]On s'occupe de tout
[IMAGE]Pas de changement de banque
[IMAGE]C'est pour tout le monde
[IMAGE]Regroupez votre cridit immobilier
[IMAGE]et vos cridits consommation
[IMAGE]en un seul prjt !

[IMAGE]Prilhvement unique ` date fixe
[IMAGE]Possibiliti d'une trisorerie
[IMAGE]Etude possible crithres
[IMAGE]hors norme et hors assurances

[IMAGE]

[IMAGE]Possibiliti de diffirer
[IMAGE]votre remboursement[IMAGE]

[IMAGE]

[IMAGE]

NOUVEAUX CRITERES PROPRIETAIRES ET LOCATAIRES POUR 2008

[IMAGE]

Aucun versement, de quelque nature que ce soit, ne peut jtre exigi d'un
particulier, avant l'obtention d'un ou plusieurs prjts d'argent.

Conformiment ` la loi informatique et liberti du 06 janvier 1978, vous
disposez d'un droit d'acchs, de rectification ou d'opposition aux
informations vous concernant auprhs du service clients d'Etoiles
Finances.com.

Pour ne plus recevoir de message de notre part, cliquez ici



Re: using openbsd to make presentations

2008-03-18 Thread Matthieu Herrb
On Tue, Mar 18, 2008 at 10:18 PM, Pau Amaro-Seoane
[EMAIL PROTECTED] wrote:
 Hi,

  very often I have to give a talk about my work etc... The slides
  contain a lot of math equations, plots and even sometimes some movies.

  I was used to latex-beamer to do all this because I want something I
  can edit with vi(m) and it fulfilled all requisites ... and I was used
  to it when I was using linux.

  I have switched to OpenBSD since some 1.5 years and I am very happy to
  report here, by the way, that OpenBSD _does_ start X on the projector
  where most linux peecees and macs fail :) BUT -and this is the main
  reason to write now- the pdf slides created with latex-beamer feel
  heavy... What I mean is that when using full screen (with xpdf or
  kpdf etc) it takes some 3-4 seconds to change a slide. I don't know
  why... I can provide you with a test talk, so that you udnerstand what
  I mean.

I'm using latex+beamer noadays too.

The behaviour you describe is generally caused by slides with lots of bitmapped
images in them that need to be  rendered/scaled before displayng them. If you
have images that get repeated on each slide, like a logo, a background image
or some other theme elements, you can reduce both the PDF file and the time
it takes to render each slide by using the pgf package and
\pgfdeclareimage/\pgfuseimage.

Use images that have a resolution that more or less matches the resolution
at which they will be displayed. Scaling downa 3000x2000 image to 320x200
every time it's displayed takes some time.

Also make sure pdflatex is correctly configured to use Type1 fonts and not
bit-mapped fonts (it can be tricky if you use an input or font
character encoding
other than TeX's default, but texlive makes things easier).



Re: AMD Geode

2008-03-18 Thread Matthieu Herrb
On Mon, Mar 17, 2008 at 11:38 PM, Dimitri [EMAIL PROTECTED] wrote:
 Hello all.

  My cuestion is simply.

  OpenBSD run over AMD Geode, specificly over Packard
  Bell S18P?.

If it's using the integrated LX800 graphics for its display, OpenBSD
will not run X on it.
The amd/geode X driver needs some kernel support that's currently more
or less Linux
only. (Shouldn't be too hard to add to OpenBSD though, but none of the
developers
 has access to this kind of hardware and enough motivation to do it).



Re: using openbsd to make presentations

2008-03-18 Thread Jonathan Thornburg
Pau Amaro-Seoane asked about options for producing slides (for a
computer presentation) containing lots of math, plots, and sometimes
movies, given that
 the pdf slides created with latex-beamer feel
 heavy... What I mean is that when using full screen (with xpdf or
 kpdf etc) it takes some 3-4 seconds to change a slide.
[[...]]
 
 This is very bad when somebody in the public asks a question of plot
 number 2 in slide #3 and you're in slide #55. Sure there are ways to
 overcome the problem, with the progress bar of latex-beamer, for
 instance, but still I don't like it.

I use the 'seminar' latex package, together with the cumulative
overlays in postscript trick from section 12.2 of the seminar package
FAQ, http://www.tug.org/applications/Seminar/Seminar-FAQ.html .

I find that the speed, or lack thereof, which which xpdf renders
each new page (or progessive-overlay-on-the-same-page) varies from
too fast for any perceptable delay to a couple of seconds and
sometimes even to 10 secondes.  It seems to depend entirely on how
big/complex the graphics are that I include -- if a page has only
text and/or latex math, it renders instantly.  But if there are
big/complex graphics, then it can be slower.  (The 10 seconds is
only for some really nasty graphics files.)

It's never occured to me that there was anything I could do about
this other than enabling 'apm -H' when I give the talk.  I could
imagine a fancy viewer pre-rendering in the background while previous
pages are being displayed, but absent a lot of caching (= potentially
big memory usage) that scenario would still fall down in Pau's case
where
[[...]]
 somebody in the public asks a question of plot
 number 2 in slide #3 and you're in slide #55.

-- 
-- Jonathan Thornburg [EMAIL PROTECTED]
   School of Mathematics, U of Southampton, England
   C++ is to programming as sex is to reproduction. Better ways might
technically exist but they're not nearly as much fun. -- Nikolai Irgens



Disk I/O problems

2008-03-18 Thread Carl Horne
Hi,

I am having an issue with running OpenBSD on a Sunfire V40z.  The server
run AMD dual core processors.  I have tried a number of different
versions of OpenBSD and they all seem to have the same issues.  One of
the builds I did fluked and it's working as expected but I have not been
able to duplicate it.  I have checked the bios settings and versions.  I
have matched the settings and versions of the firmware on the SCSI disk
controller.  The hardware is the same.  Below is a bunch of data.  I
need to be able to build consistance servers.  Please help.

The test:
To test I am using a tar ball that is 60.9M in size with 167,000 files
in it.

On the server that works:
# time tar -xzf test.tar.gz
0m12.79s real 0m0.56s user 0m0.85s system

On other servers:
# time tar -xzf mod_ssl-new.tar.gz
1m39.58s real 0m0.58s user 0m0.66s system

Disklabel output:
 On server that works:
# disklabel sd0
# Inside MBR partition 3: type A6 start 63 size 143363997
# /dev/rsd0c:
type: SCSI
disk: SCSI disk
label: ST373307LC
flags:
bytes/sector: 512
sectors/track: 718
tracks/cylinder: 4
sectors/cylinder: 2872
cylinders: 49855
total sectors: 143374744
rpm: 10033
interleave: 1
trackskew: 0
cylinderskew: 0
headswitch: 0   # microseconds
track-to-track seek: 0  # microseconds
drivedata: 0

16 partitions:
# sizeoffset  fstype [fsize bsize  cpg]
  a:  2097128163  4.2BSD   2048 16384  432 # Cyl 0*-
7301
  b:   4193120  31457016swap   # Cyl 10953 -
12412
  c: 143374744 0  unused  0 0  # Cyl 0 -
49921*
  d:  10485672  20971344  4.2BSD   2048 16384  432 # Cyl  7302 -
10952
  e: 107713924  35650136  4.2BSD   2048 16384  432 # Cyl 12413 -
49917*

On server that doesn't:
# disklabel sd0
# Inside MBR partition 3: type A6 start 63 size 143361729
# /dev/rsd0c:
type: SCSI
disk: SCSI disk
label: ST373307LC
flags:
bytes/sector: 512
sectors/track: 718
tracks/cylinder: 4
sectors/cylinder: 2872
cylinders: 49855
total sectors: 143374744
rpm: 10033
interleave: 1
trackskew: 0
cylinderskew: 0
headswitch: 0   # microseconds
track-to-track seek: 0  # microseconds
drivedata: 0

16 partitions:
#size   offset  fstype [fsize bsize  cpg]
  a: 20974153   63  4.2BSD   2048 163841
  b:  8389112 20974216swap
  c:1433747440  unused  0 0
  d: 20974216 29363328  4.2BSD   2048 163841
  e: 93026516 50337544  4.2BSD   2048 163841

Thanks,
Carl



Re: using openbsd to make presentations

2008-03-18 Thread Alexandre Ratchov
On Tue, Mar 18, 2008 at 10:18:30PM +0100, Pau Amaro-Seoane wrote:
 Hi,
 
 very often I have to give a talk about my work etc... The slides
 contain a lot of math equations, plots and even sometimes some movies.
 
 I was used to latex-beamer to do all this because I want something I
 can edit with vi(m) and it fulfilled all requisites ... and I was used
 to it when I was using linux.
 
 I have switched to OpenBSD since some 1.5 years and I am very happy to
 report here, by the way, that OpenBSD _does_ start X on the projector
 where most linux peecees and macs fail :) BUT -and this is the main
 reason to write now- the pdf slides created with latex-beamer feel
 heavy... What I mean is that when using full screen (with xpdf or
 kpdf etc) it takes some 3-4 seconds to change a slide. I don't know
 why... I can provide you with a test talk, so that you udnerstand what
 I mean.
 
 This is very bad when somebody in the public asks a question of plot
 number 2 in slide #3 and you're in slide #55. Sure there are ways to
 overcome the problem, with the progress bar of latex-beamer, for
 instance, but still I don't like it.
 
 I just want to ask here in misc whether somebody has had the same
 problem and what other alternatives there are.
 

yes i've the same problem, i've been using latex-beamer on a slow
machine. To speedup the display, i converted the whole presentation
to pnm images (one image per slide) and then made my presentation
using graphics/qiv port. For instance, to generate the pnm files:

gs -r248 -sDEVICE=pnmraw -sOutputFile=%d.ppm -dTextAlphaBits=4 \
-dGraphicsAlphaBits=4 -dNOPAUSE doc.ps -c quit

for i in ?.ppm; do mv $i 0$i done

then to display them:

qiv -f -i ??.ppm

using space and backspace keys you can switch between slides very
quickly even on a slow machine. Furthermore you can skip 5 slides
using page-up and page-down keys, which is very handy when somebody
asks you to go a particular slide.

hth,

-- Alexandre



Re: Disk I/O problems

2008-03-18 Thread Stuart Henderson
On 2008-03-18, Carl Horne [EMAIL PROTECTED] wrote:
 One of
 the builds I did fluked and it's working as expected but I have not been
 able to duplicate it.

softdep? (it will show in mount(8) output, you set it in fstab).



Re: using openbsd to make presentations

2008-03-18 Thread Matthew Szudzik
 Question: Do you have any recommendation / suggestion to prepare talks
 to be shown in a projector including mathematical equations, plots
 and, eventually, movies (I can live without this last point)?

HTML is probably the most portable solution for your problem, and movies
would work fine too (using VLC's Mozilla plug-in).  Graphics display
quickly and Firefox has MathML for displaying equations, but special
fonts are required, and I'm unsure if anyone has ever tried to install
them on OpenBSD (I certainly haven't).  An example of MathML used in
HTML is at

 http://pear.math.pitt.edu/mathzilla/Examples/markupOftheWeek.mhtml

Personally, I use Mathematica on my OpenBSD laptop--it has a nice
presentation mode and renders equations beautifully.  Of course, it's
proprietary software that costs money, so it's not for everyone.



Re: AMD Geode

2008-03-18 Thread Nicolas Legrand
Henning Brauer [EMAIL PROTECTED] writes:

 * Nicolas Legrand [EMAIL PROTECTED] [2008-03-18 07:56]:
 Damien Miller [EMAIL PROTECTED] writes:
  On Mon, 17 Mar 2008, Dimitri wrote:
  Hello all.
  My cuestion is simply.
  OpenBSD run over AMD Geode,
  Yes.
  specificly over Packard
  Bell S18P?.
 I've read it's an AMD Geode LX800, so yes.

 so you are saying that the old cisco catalyst 1924 switches I have 
 somewhere here (that an axe or some explosives and I will have fun with 
 soonish) runs OpenBSD, since it has an 80486 processor? cool.

Oups no :-), I have no idea how OpenBSD is on a Packard Bell S18P. The
question was about the CPU, I answered for the CPU and didn't see it
could be misinterpreted or useless. I realise it was a silly answer,
sorry for the noise.



Re: using openbsd to make presentations

2008-03-18 Thread Predrag Punosevac

Pau Amaro-Seoane wrote:

Hi,

very often I have to give a talk about my work etc... The slides
contain a lot of math equations, plots and even sometimes some movies.

I was used to latex-beamer to do all this because I want something I
can edit with vi(m) and it fulfilled all requisites ... and I was used
to it when I was using linux.

I have switched to OpenBSD since some 1.5 years and I am very happy to
report here, by the way, that OpenBSD _does_ start X on the projector
where most linux peecees and macs fail :) BUT -and this is the main
reason to write now- the pdf slides created with latex-beamer feel
heavy... What I mean is that when using full screen (with xpdf or
kpdf etc) it takes some 3-4 seconds to change a slide. I don't know
why... I can provide you with a test talk, so that you udnerstand what
I mean.

This is very bad when somebody in the public asks a question of plot
number 2 in slide #3 and you're in slide #55. Sure there are ways to
overcome the problem, with the progress bar of latex-beamer, for
instance, but still I don't like it.

I just want to ask here in misc whether somebody has had the same
problem and what other alternatives there are.

I have noticed that a lot of people are using magicpoint out there. I
had a look at it, but it seems not obvious to use when it comes to
latex. As far as i know, there are these two possibilities:

http://www.sonycsl.co.jp/person/nishida/mgp-users/msg00241.html

http://www.sonycsl.co.jp/person/nishida/mgp-users/msg00290.html

I have made some tests and I could not use all latex commands... I run
into a snag in a number of occasions.

Question: Do you have any recommendation / suggestion to prepare talks
to be shown in a projector including mathematical equations, plots
and, eventually, movies (I can live without this last point)?

  
I am a mathematician so I am quite often in the same position as you to 
give presentations which contain

lots of formulas and images.

I use Powerdot class of Latex presentations (descendant of Prosper an 
obsolete class of presentations )  which is as an alternative to the 
Beamer class. For the comprehensive review of all classes of 
presentations for latex you may check


http://texcatalogue.sarovar.org/bytopic.html#present

The advantages over Powerdot over Beamer are numerous.
Powerdot is far easier (has only 60 man pages v.s. Beamer man pages are 
over 400 pages).
It is also very simple to incorporate movies into your slides. The 
slides are easily customized

and in my point of view far more beautiful than the Beamer.

The popularity of Beamer seems comes from the fact that you can use 
pdflatex to produce pdf slides.
That is not possible with Powerdot as it uses some PostScript tricks. So 
you will have to latex slides followed by
dvips and ps2pdf or dvipdfm to produce pdf slides. The ultimate goal of 
course is to produce pdf slides.


I noticed that one has to use Adobe Reader (I prefer Xpdf as well) which 
is only available from ports due to the
license issues in order to have alive links on slides. That seems to be 
built in feature ( I would call it bug)
which should be communicated probably up stream. The slides are very 
responsive.  I  personally have not seen better

looking slides on any platform and I think I have seen it all.

Powerdot class of presentations is part of TeXLive but not the part of 
teTeX. As you know teTeX is
dead for about three years now and the TeXLive is official TeX 
distribution for Unix maintained by TeX community.

TeXLive  is available only from ports for OpenBSD 4.2.
However you will have to use port for 4.3 current (soon to be release) 
as I stumbled upon a bug in Powerdot
class of presentation. The bug was in TeXLive source code and was well 
documented.

It is already fixed by port maintainer for OpenBSD 4.3.

As far as I know TeXLive will be regular package (you will not need to 
use ports) starting OpenBSD 4.3. This is
only second Unix like system after Debian to have fully functional 
TeXLive thanks to Edd Baret porter of TeXLive
for OpenBSD. On the last note I recommend that you install full TeXLive 
which is about 1Gb but includes
all TeX/Latex features coded at the moment. I am not sure if the TeXLive 
base includes Powerdot. I would guess yes.



Most Kind Regards,
Predrag Punosevac


Thanks,

Pau




Re: Laptop display refresh rate

2008-03-18 Thread raven

Rafal Brodewicz ha scritto:

Hello.

Is there any tool to find out what V,H refresh rates should I set in
xorg.conf for my laptop display? It's HP Copmaq 6510b with 1280x800
resolution.

Are they still needed btw?
  
No isnt necessary anymore. You can remove xorg.conf in order to be X to 
choice your monitor resolution, or... at least start X -configure with 
root account to have an xorg.conf.new


Regards,
[raven]



Re: the death of the oldest OpenBSD system on the net...

2008-03-18 Thread Gordon Klok

On 18-Mar-08, at 5:14 AM, bofh wrote:

On Tue, Mar 18, 2008 at 2:52 AM, Johan Mson Lindman  
[EMAIL PROTECTED] wrote:



Nice!
Got any more _freebsd_ success stories for [EMAIL PROTECTED]



I think the key here is that not everything needs to be a 4 cpu quad  
core

with 128Gigs of ram, and not that it was running freebsd or openbsd.

Why the hell not?
Running old hardware is a hobby not something you should depend on,  
one $700 dell server can replace dozens of crappy 5 year old machines  
using a tiny fraction of the power and generating a fraction of the  
heat. Of course its not as much fun hunting for spare parts in the  
trash or on ebay but you will have more time to get real work done.