Re: Snapshots packages for I386

2008-04-03 Thread Theo de Raadt
 Just wonder if there is a possible estimate as to when we might get 
 snapshots packages for the I386?

No estimate.  Maybe a week or two.

 There is for:
 
 Alpha
 AMD64
 ARM
 HPPA
 m68k (but old)
 mips64
 powerpc
 sparc64

And none of those will work because libc has cranked major.

 Same on all the mirrors I looked at.
 
 Not a complain here, just wonder as I have a server that crash and I am 
 trying to load a new one, but loading 4.2 on it gives me IPMI problem, 
 so I run current on most boxes.

Luckily all the source code is available for our project, and you can
handle this yourself.  And it pretty much always compiles.

This happens every release, you know.  Nothing has changed in the process.



Re: Snapshots packages for I386

2008-04-03 Thread Daniel Ouellet

Theo de Raadt wrote:

Luckily all the source code is available for our project, and you can
handle this yourself.  And it pretty much always compiles.

This happens every release, you know.  Nothing has changed in the process.


Thanks for the info Theo!

No problem, I will take care of it from the port then. I justed wonder 
as yes, that's not new, but in previous release, the out of packages was 
for less time if I remember. Must be the libc and the release timing 
happening at the same time that make it longer this time around.


Not the end of the world.

Best,

Daniel



Re: FTP-Proxy swallows 221 Message (MS FTP-Service)

2008-04-03 Thread Michael Hoffrath
For passive mode data connections, ftpd will listen to a random high TCP
port.  The interval of ports used are configurable using sysctl(8) vari-
ables net.inet.ip.porthifirst and net.inet.ip.porthilast.

I'm aware of this, but we are running many different kinds of FTP-Servers
and partially self developed ftp-applications so that we can't limit the
port-range that way. 



Re: spamd -M behaviour when real MX is down

2008-04-03 Thread Martin Hedenfalk

Hi,

The real MTA is not involved here. What's important is that spamd  
with the

low priority MX address active must see all the greylist changes for a
higher priority MX host for the same domains, either by being synchro-
nised with it, or by receiving the connections itself. (from the man  
page).


If this fails, the connection will be greytrapped.

-martin

2 apr 2008 kl. 18.45 skrev Jose Fragoso:


Hi,

Since I am not able to test this now in the real world, I
would  like to know how would spamd behave when it
received SMTP connections to a fake low priority MX
address and the real MTA was unavailable at the time.

I mean, would the connection be rejected with error 450?
Would there be any initial stuttering (like in -S)?
Thanks in advance.

Regards,

Jose

--
Want an e-mail address like mine?
Get a free e-mail account today at www.mail.com!




Re: HP nw9440 does not boot ACPI snapshot

2008-04-03 Thread Raimo Niskanen
I also have ACPI problems on a HP notebook. Mine is a hp2510p,
and it kernel panics during boot.  I have reported this to
[EMAIL PROTECTED] a few times.

For me it has worked to boot and crash,
UKC trace
UKC ps
UKC boot reboot
boot with -c,
UKC disable acpi
UKC exit
and let it boot without ACPI. And magically, when booted,
the dmesg contains both boots; put it on e.g an USB key.

acpidump core dumps for mee too. I have sent in the
broken results as well as the core file. I do not
if someone is trying to solve the problem, though.

I have not tried the MP kernel.



On Thu, Apr 03, 2008 at 10:59:01AM +0200, Daniele Pilenga wrote:
 Hi guys,
 I have this notebook on which I'd like to install (and use!) OpenBSD,
 but I have a little problem.
 
 If I leave ACPI anabled, as per default on this Apr 1st snapshot, the
 /bsd kernel reboots after cpu probing
 (more or less, I don't have any serial so I cannot see very clearly,
 it's too fast) and the /bsd.mp kernel hangs at some
 acpi probing.
 
 Enabling verbose mode is not very helpful since it scrolls down too
 fast and in both cases rebooting the machine does not
 leave the dmesg in memory.
 
 I already tried disabling some random driver, but since I cannot see
 where the problem is I don't even know what to
 look for.
 
 It would not be that bad living without acpi, but the MP kernel cannot
 see both cpu cores, so I hope there is something
 I could try.
 
 It seems there is a problem with the audio, but I'll leave that for later. :-)
 
 Dmesg follows, please let me know if there is something else you need
 or if you have any suggestion.
 BTW, acpidump core dumps, but may be related to the non-acpi kernel.
 
 Thank you,
 D.
 
 OpenBSD 4.3-current (GENERIC) #732: Tue Apr  1 00:54:18 MDT 2008
 
 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
 
 cpu0: Genuine Intel(R) CPU T2600 @ 2.16GHz (GenuineIntel 686-class) 2.17 GHz
 
 cpu0: 
 FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,VMX,EST,TM2,xTPR
 
 real mem  = 2146856960 (2047MB)
 
 avail mem = 2067857408 (1972MB)
 
 User Kernel Config
 
 UKC disable acpi
 
 422 acpi0 disabled
 
 UKC quit
 
 Continuing...
 
 mainbus0 at root
 
 bios0 at mainbus0: AT/286+ BIOS, date 03/05/08, BIOS32 rev. 0 @
 0xf, SMBIOS rev. 2.4 @ 0xf3b77 (23 entries)
 
 bios0: vendor Hewlett-Packard version 68YAF Ver. F.1C date 03/05/2008
 
 bios0: Hewlett-Packard HP Compaq nw9440 (EY314EA#ABZ)
 
 acpi at bios0 function 0x0 not configured
 
 pcibios0 at bios0: rev 2.1 @ 0xf/0x2000
 
 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf07c0/208 (11 entries)
 
 pcibios0: bad IRQ table checksum
 
 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf9990/208 (11 entries)
 
 pcibios0: PCI Exclusive IRQs: 5 10 11
 
 pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82801FBM LPC rev 0x00)
 
 pcibios0: PCI bus #32 is the last bus
 
 bios0: ROM list: 0xc/0xdc00 0xd/0x1000 0xd1000/0x1800
 
 cpu0 at mainbus0
 
 cpu0: unknown Enhanced SpeedStep CPU, msr 0x06130d2c06000d2c
 
 cpu0: using only highest and lowest power states
 
 cpu0: Enhanced SpeedStep 2167 MHz (1404 mV): speeds: 2167, 1000 MHz
 
 pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
 
 pchb0 at pci0 dev 0 function 0 Intel 82945GM Host rev 0x03
 
 ppb0 at pci0 dev 1 function 0 Intel 82945GM PCIE rev 0x03
 
 pci1 at ppb0 bus 1
 
 vga1 at pci1 dev 0 function 0 vendor NVIDIA, unknown product 0x029b rev 0xa1
 
 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
 
 wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
 
 agp0 at vga1: no integrated graphics
 
 azalia0 at pci0 dev 27 function 0 Intel 82801GB HD Audio rev 0x01: irq 10
 
 azalia0: codec[s]: Analog Devices/0x1981, Conexant/0x2bfa, using
 Analog Devices/0x1981
 
 audio0 at azalia0
 
 ppb1 at pci0 dev 28 function 0 Intel 82801GB PCIE rev 0x01: irq 10
 
 pci2 at ppb1 bus 8
 
 bge0 at pci2 dev 0 function 0 Broadcom BCM5753M rev 0x21, BCM5750 C1
 (0x4201): irq 10, address 00:16:d4:0c:fc:f0
 
 brgphy0 at bge0 phy 1: BCM5750 10/100/1000baseT PHY, rev. 0
 
 ppb2 at pci0 dev 28 function 1 Intel 82801GB PCIE rev 0x01: irq 10
 
 pci3 at ppb2 bus 16
 
 wpi0 at pci3 dev 0 function 0 Intel PRO/Wireless 3945ABG rev 0x02:
 irq 10, MoW2, address 00:13:02:51:af:9d
 
 ppb3 at pci0 dev 28 function 3 Intel 82801GB PCIE rev 0x01: irq 5
 
 pci4 at ppb3 bus 32
 
 uhci0 at pci0 dev 29 function 0 Intel 82801GB USB rev 0x01: irq 10
 
 uhci1 at pci0 dev 29 function 1 Intel 82801GB USB rev 0x01: irq 11
 
 uhci2 at pci0 dev 29 function 2 Intel 82801GB USB rev 0x01: irq 11
 
 uhci3 at pci0 dev 29 function 3 Intel 82801GB USB rev 0x01: irq 5
 
 ehci0 at pci0 dev 29 function 7 Intel 82801GB USB rev 0x01: irq 10
 
 usb0 at ehci0: USB revision 2.0
 
 uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1
 
 ppb4 at pci0 dev 30 function 0 Intel 82801BAM Hub-to-PCI rev 0xe1
 
 pci5 at ppb4 bus 2
 
 cbb0 at pci5 dev 6 function 0 TI PCIXX12 CardBus rev 0x00: irq 11
 
 TI 

STP / redundant network paths

2008-04-03 Thread Arjen
Hi list,


I am trying to get STP to work with (to start with) one openbsd firewall
/ gateway and two switches to the same subnet for failover. Let me draw:



   ---
  | Internet  |
   ---
   |

   ---
  |   |
  |  OpenBSD GW   |
  |   |
   ---
   /  \
  --   --
  |  SW 1  |   |  SW 2  |
  |(stp root)  |   | (stp fallback) |
  --   --
  \   /
   \ /
  
  | subnet   |
  


The openbsd box should act as an IP gateway for the subnet. I bridged
two NICS, one goes into sw1, the other into sw2. I also want to give
this bridge an IP address, but that is not possible. So I


- tried to set a vlan on the bridge, (vlandev bridge0), but this is not
possible ( SIOCSETVLAN: Protocol not supported). The switches see each
other and root sw is elected.


- tried to set a failover trunk on the bridge member interfaces and set
the vlan on that. Packets are being forwarded then, but STP does not work
(switches don't see each other)



How should I go about this?


Thanks,

Arjen.



HP nw9440 does not boot ACPI snapshot

2008-04-03 Thread Daniele Pilenga
Hi guys,
I have this notebook on which I'd like to install (and use!) OpenBSD,
but I have a little problem.

If I leave ACPI anabled, as per default on this Apr 1st snapshot, the
/bsd kernel reboots after cpu probing
(more or less, I don't have any serial so I cannot see very clearly,
it's too fast) and the /bsd.mp kernel hangs at some
acpi probing.

Enabling verbose mode is not very helpful since it scrolls down too
fast and in both cases rebooting the machine does not
leave the dmesg in memory.

I already tried disabling some random driver, but since I cannot see
where the problem is I don't even know what to
look for.

It would not be that bad living without acpi, but the MP kernel cannot
see both cpu cores, so I hope there is something
I could try.

It seems there is a problem with the audio, but I'll leave that for later. :-)

Dmesg follows, please let me know if there is something else you need
or if you have any suggestion.
BTW, acpidump core dumps, but may be related to the non-acpi kernel.

Thank you,
D.

OpenBSD 4.3-current (GENERIC) #732: Tue Apr  1 00:54:18 MDT 2008

[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC

cpu0: Genuine Intel(R) CPU T2600 @ 2.16GHz (GenuineIntel 686-class) 2.17 GHz

cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,VMX,EST,TM2,xTPR

real mem  = 2146856960 (2047MB)

avail mem = 2067857408 (1972MB)

User Kernel Config

UKC disable acpi

422 acpi0 disabled

UKC quit

Continuing...

mainbus0 at root

bios0 at mainbus0: AT/286+ BIOS, date 03/05/08, BIOS32 rev. 0 @
0xf, SMBIOS rev. 2.4 @ 0xf3b77 (23 entries)

bios0: vendor Hewlett-Packard version 68YAF Ver. F.1C date 03/05/2008

bios0: Hewlett-Packard HP Compaq nw9440 (EY314EA#ABZ)

acpi at bios0 function 0x0 not configured

pcibios0 at bios0: rev 2.1 @ 0xf/0x2000

pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf07c0/208 (11 entries)

pcibios0: bad IRQ table checksum

pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf9990/208 (11 entries)

pcibios0: PCI Exclusive IRQs: 5 10 11

pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82801FBM LPC rev 0x00)

pcibios0: PCI bus #32 is the last bus

bios0: ROM list: 0xc/0xdc00 0xd/0x1000 0xd1000/0x1800

cpu0 at mainbus0

cpu0: unknown Enhanced SpeedStep CPU, msr 0x06130d2c06000d2c

cpu0: using only highest and lowest power states

cpu0: Enhanced SpeedStep 2167 MHz (1404 mV): speeds: 2167, 1000 MHz

pci0 at mainbus0 bus 0: configuration mode 1 (no bios)

pchb0 at pci0 dev 0 function 0 Intel 82945GM Host rev 0x03

ppb0 at pci0 dev 1 function 0 Intel 82945GM PCIE rev 0x03

pci1 at ppb0 bus 1

vga1 at pci1 dev 0 function 0 vendor NVIDIA, unknown product 0x029b rev 0xa1

wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)

wsdisplay0: screen 1-5 added (80x25, vt100 emulation)

agp0 at vga1: no integrated graphics

azalia0 at pci0 dev 27 function 0 Intel 82801GB HD Audio rev 0x01: irq 10

azalia0: codec[s]: Analog Devices/0x1981, Conexant/0x2bfa, using
Analog Devices/0x1981

audio0 at azalia0

ppb1 at pci0 dev 28 function 0 Intel 82801GB PCIE rev 0x01: irq 10

pci2 at ppb1 bus 8

bge0 at pci2 dev 0 function 0 Broadcom BCM5753M rev 0x21, BCM5750 C1
(0x4201): irq 10, address 00:16:d4:0c:fc:f0

brgphy0 at bge0 phy 1: BCM5750 10/100/1000baseT PHY, rev. 0

ppb2 at pci0 dev 28 function 1 Intel 82801GB PCIE rev 0x01: irq 10

pci3 at ppb2 bus 16

wpi0 at pci3 dev 0 function 0 Intel PRO/Wireless 3945ABG rev 0x02:
irq 10, MoW2, address 00:13:02:51:af:9d

ppb3 at pci0 dev 28 function 3 Intel 82801GB PCIE rev 0x01: irq 5

pci4 at ppb3 bus 32

uhci0 at pci0 dev 29 function 0 Intel 82801GB USB rev 0x01: irq 10

uhci1 at pci0 dev 29 function 1 Intel 82801GB USB rev 0x01: irq 11

uhci2 at pci0 dev 29 function 2 Intel 82801GB USB rev 0x01: irq 11

uhci3 at pci0 dev 29 function 3 Intel 82801GB USB rev 0x01: irq 5

ehci0 at pci0 dev 29 function 7 Intel 82801GB USB rev 0x01: irq 10

usb0 at ehci0: USB revision 2.0

uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1

ppb4 at pci0 dev 30 function 0 Intel 82801BAM Hub-to-PCI rev 0xe1

pci5 at ppb4 bus 2

cbb0 at pci5 dev 6 function 0 TI PCIXX12 CardBus rev 0x00: irq 11

TI PCIXX12 FireWire rev 0x00 at pci5 dev 6 function 1 not configured

TI PCIXX12 Multimedia Card Reader rev 0x00 at pci5 dev 6 function 2
not configured

sdhc0 at pci5 dev 6 function 3 TI PCIXX12 Secure Data rev 0x00: irq 11

sdmmc0 at sdhc0

TI PCIXX12 Smart Card rev 0x00 at pci5 dev 6 function 4 not configured

cardslot0 at cbb0 slot 0 flags 0

cardbus0 at cardslot0: bus 3 device 0 cacheline 0x10, lattimer 0x20

pcmcia0 at cardslot0

ichpcib0 at pci0 dev 31 function 0 Intel 82801GBM LPC rev 0x01: PM disabled

pciide0 at pci0 dev 31 function 1 Intel 82801GB IDE rev 0x01: DMA,
channel 0 configured to compatibility, channel 1 configured to
compatibility

atapiscsi0 at pciide0 channel 0 drive 0

scsibus0 at atapiscsi0: 2 targets

cd0 at scsibus0 targ 0 lun 0: HL-DT-ST, DVDRAM GMA-4082N, 

STP / redundant network paths

2008-04-03 Thread Arjen Van Drie
Hi list,

(sorry for the possible resend, I used the wrong from address)


I am trying to get STP to work with (to start with) one openbsd firewall
/ gateway and two switches to the same subnet for failover. Let me draw:



   ---
  | Internet  |
   ---
   |

   ---
  |   |
  |  OpenBSD GW   |
  |   |
   ---
   /  \
  --   --
  |  SW 1  |   |  SW 2  |
  |(stp root)  |   | (stp fallback) |
  --   --
  \   /
   \ /
  
  | subnet   |
  


The openbsd box should act as an IP gateway for the subnet. I bridged
two NICS, one goes into sw1, the other into sw2. I also want to give
this bridge an IP address, but that is not possible. So I


- tried to set a vlan on the bridge, (vlandev bridge0), but this is not
possible ( SIOCSETVLAN: Protocol not supported). The switches see each
other and root sw is elected.


- tried to set a failover trunk on the bridge member interfaces and set
the vlan on that. Packets are being forwarded then, but STP does not work
(switches don't see each other)



How should I go about this?


Thanks,

Arjen.



Re: HP nw9440 does not boot ACPI snapshot

2008-04-03 Thread Denis Doroshenko
i have the same issue, which i reported in
http://marc.info/?l=openbsd-miscm=119608530213184w=2
then i had angry mail from Theo (WRT lack of information), though
he listed a few of developers who i needed to contact. i did some
more progres (like backtracing the core from -g compiled acpidump)
and sent to those developers; there's no news since then.

the problem is there in the -current. i upgraded the bios of the
notebook (just in case there is something wrong with it), but the
problem remains. the worst thing is those notebooks have no
other means to access various hardware stuff (e.g. sensors),
only via ACPI.

unfortunately i have no spare time whatsoever to read ACPI
specs, because the assert that fails in acpidump points (as
far as i understand) that ACPI script's structure causes
problems to OpenBSD ACPI parser (non-standard things?).

On Thu, Apr 3, 2008 at 12:32 PM, Raimo Niskanen
[EMAIL PROTECTED] wrote:
 I also have ACPI problems on a HP notebook. Mine is a hp2510p,
  and it kernel panics during boot.  I have reported this to
  [EMAIL PROTECTED] a few times.

  For me it has worked to boot and crash,
  UKC trace
  UKC ps
  UKC boot reboot
  boot with -c,
  UKC disable acpi
  UKC exit
  and let it boot without ACPI. And magically, when booted,
  the dmesg contains both boots; put it on e.g an USB key.

  acpidump core dumps for mee too. I have sent in the
  broken results as well as the core file. I do not
  if someone is trying to solve the problem, though.

  I have not tried the MP kernel.



  On Thu, Apr 03, 2008 at 10:59:01AM +0200, Daniele Pilenga wrote:
   Hi guys,
   I have this notebook on which I'd like to install (and use!) OpenBSD,
   but I have a little problem.
  
   If I leave ACPI anabled, as per default on this Apr 1st snapshot, the
   /bsd kernel reboots after cpu probing
   (more or less, I don't have any serial so I cannot see very clearly,
   it's too fast) and the /bsd.mp kernel hangs at some
   acpi probing.
  
   Enabling verbose mode is not very helpful since it scrolls down too
   fast and in both cases rebooting the machine does not
   leave the dmesg in memory.
  
   I already tried disabling some random driver, but since I cannot see
   where the problem is I don't even know what to
   look for.
  
   It would not be that bad living without acpi, but the MP kernel cannot
   see both cpu cores, so I hope there is something
   I could try.
  
   It seems there is a problem with the audio, but I'll leave that for later. 
 :-)
  
   Dmesg follows, please let me know if there is something else you need
   or if you have any suggestion.
   BTW, acpidump core dumps, but may be related to the non-acpi kernel.
  
   Thank you,
   D.
  
   OpenBSD 4.3-current (GENERIC) #732: Tue Apr  1 00:54:18 MDT 2008
  
   [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
  
   cpu0: Genuine Intel(R) CPU T2600 @ 2.16GHz (GenuineIntel 686-class) 2.17 
 GHz
  
   cpu0: 
 FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,VMX,EST,TM2,xTPR
  
   real mem  = 2146856960 (2047MB)
  
   avail mem = 2067857408 (1972MB)
  
   User Kernel Config
  
   UKC disable acpi
  
   422 acpi0 disabled
  
   UKC quit
  
   Continuing...
  
   mainbus0 at root
  
   bios0 at mainbus0: AT/286+ BIOS, date 03/05/08, BIOS32 rev. 0 @
   0xf, SMBIOS rev. 2.4 @ 0xf3b77 (23 entries)
  
   bios0: vendor Hewlett-Packard version 68YAF Ver. F.1C date 03/05/2008
  
   bios0: Hewlett-Packard HP Compaq nw9440 (EY314EA#ABZ)
  
   acpi at bios0 function 0x0 not configured
  
   pcibios0 at bios0: rev 2.1 @ 0xf/0x2000
  
   pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf07c0/208 (11 entries)
  
   pcibios0: bad IRQ table checksum
  
   pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf9990/208 (11 entries)
  
   pcibios0: PCI Exclusive IRQs: 5 10 11
  
   pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82801FBM LPC rev 0x00)
  
   pcibios0: PCI bus #32 is the last bus
  
   bios0: ROM list: 0xc/0xdc00 0xd/0x1000 0xd1000/0x1800
  
   cpu0 at mainbus0
  
   cpu0: unknown Enhanced SpeedStep CPU, msr 0x06130d2c06000d2c
  
   cpu0: using only highest and lowest power states
  
   cpu0: Enhanced SpeedStep 2167 MHz (1404 mV): speeds: 2167, 1000 MHz
  
   pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
  
   pchb0 at pci0 dev 0 function 0 Intel 82945GM Host rev 0x03
  
   ppb0 at pci0 dev 1 function 0 Intel 82945GM PCIE rev 0x03
  
   pci1 at ppb0 bus 1
  
   vga1 at pci1 dev 0 function 0 vendor NVIDIA, unknown product 0x029b rev 
 0xa1
  
   wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
  
   wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
  
   agp0 at vga1: no integrated graphics
  
   azalia0 at pci0 dev 27 function 0 Intel 82801GB HD Audio rev 0x01: irq 10
  
   azalia0: codec[s]: Analog Devices/0x1981, Conexant/0x2bfa, using
   Analog Devices/0x1981
  
   audio0 at azalia0
  
   ppb1 at pci0 dev 28 function 0 

Re: 4.2 Errata 006 failed to compile.

2008-04-03 Thread Sunnz
2008/4/2, Josh Grosse [EMAIL PROTECTED]:


  Looking at the patch 006 instructions, I note that it suggests you do a make
  build but I believe that will only work if you've already built Xenocara 
 from
  source before.   If you look at the man page for release(8) or the
  /usr/src/xenocara/README file, you will see you should issue make bootstrap
  and make obj before executing the make build.

  That might work.  If it does, let misc@ know that the patch documentation
  needs those two commands added.



Yes you are right, doing

make bootstrap
make obj
make build

Successfully compiled today. This on a 4.2-release system that has
never compiled Xencara before.

This is reposted back to misc. Thanks for the help everyone!



Nouvelle collection

2008-04-03 Thread Yolande Large
[IMAGE]

[IMAGE]

[IMAGE]

[IMAGE]

Bonjour,

Dicouvrez la nouvelle collection de Coffret Cadeaux Liberty..

Cette solution raffinie permettra ` chacun de vos binificiaires de
choisir son cadeau parmi une silection encore plus prestigieuse d’objets
de grandes marques, de champagne, de vin, d'activitis plaisir : stage de
pilotage, massage, nuitie en chbteaux, spa ...

Tout est inclus dans cette offre soigneusement ilaborie.

Dans l'attente d'un prochain contact,

Yolande LARGE
Directrice ginirale

www.coffret-liberty.com
Tel : 0892 680 907
Fax : 02 41 48 57 32

Pour ne plus recevoir nos informations, suivez le lien



Re: waiting for a snapshot

2008-04-03 Thread raven

Juan Miscaro ha scritto:

Hi everyone,

I'm waiting to set up a new box with the latest snapshot but the corresponding 
i386 packages directory on the main ftp server is empty.  When will it be 
populated?

Thank you,

/juan




  __
Looking for the perfect gift? Give the gift of Flickr! 


http://www.flickr.com/gift/


  

I hope this answer can be helpful:


Theo de Raadt:
Luckily all the source code is available for our project, and you can
handle this yourself.  And it pretty much always compiles.

This happens every release, you know.  Nothing has changed in the process.


To be clear, use PORTS instead of packages.
Have a nice day :)

Francesco



Re: 7800GS + 2 monitors under 4.2-release

2008-04-03 Thread Markus Hennecke

On Mon, 14 Jan 2008, Chris Harper wrote:


Just checking if anyone has made any progress thus far getting dual
screens to function ?

On 05/11/2007, Paulo Rodriguez [EMAIL PROTECTED] wrote:

Hi misc,

Just wondering about any success stories getting dual-screen/xinerama
running under OpenBSD 4.2-release with nVidia cards (G73) under X. If I
read correctly the necessary code for this was imported by matthieu@
after 4.2-release code was frozen, so it should be in -current.


I can speak only of -current. Putting the following lines in your 
xorg.conf should give you dual head with a few drawbacks:


Section Device
Identifier  GeForce 7600
Driver  nv
Option  Dualhead  true
EndSection

Section Screen
Identifier  Screen
Device  GeForce 7600
Monitor Monitor1
DefaultDepth 24

Subsection Display
ViewPort0 0
Depth   24
Modes   1280x1024
EndSubsection
EndSection

This will give you dual head with VBE. Using the xv extension will 
freeze the X server and xinerama does not work. There is a patch around 
to give a fake xinerama, I did not test that.


Another drawback is that both screens have to have the same mode 
available. But my flatpanels with 1400x1050 won't work either and the X 
server will give me both screens on 1280x1024. This results in an ugly 
scaled flatpanel picture that really hurt the eyes.


So it somewhat works, but only up to 1280x1024 on my 7600GT for each 
screen and without the xvideo extension.


I decided to put another pci card into the computer to have a dual screen 
which actually works. Putting another nvidia card into the second PCIE-16x 
slot resultet in a non starting X server.


It would be really nice to have working dual head support for my card but 
I don't think that this will happen in the near future.


Kind regards,
  Markus



Re: STP / redundant network paths

2008-04-03 Thread Vinicius Vianna
If you wanna route packets from the internet to the SW's, you need some 
IP on the OpenBSD's interfaces to the switches.
I remember being able to set IP addresses on bridged interfaces with 
ifconfig, don't know if this is a good approach but was usable in the time.


Maybe your best approach is to set a trunk between the switches, if you 
wanna redundancy, maybe there's a need for two openbsd firewalls, one on 
each switch?
Or are you using different subnet's in the switches, and the openbsd try 
to decide who is up to forward the packets (like some rdr rules on pf?).


Well.. maybe this helps you in anyway, if not please send more details 
for the list, or maybe someone else can help on this also.


Regards

Arjen Van Drie wrote:

Hi list,

(sorry for the possible resend, I used the wrong from address)


I am trying to get STP to work with (to start with) one openbsd firewall
/ gateway and two switches to the same subnet for failover. Let me draw:



   ---
  | Internet  |
   ---
   |

   ---
  |   |
  |  OpenBSD GW   |
  |   |
   ---
   /  \
  --   --
  |  SW 1  |   |  SW 2  |
  |(stp root)  |   | (stp fallback) |
  --   --
  \   /
   \ /
  
  | subnet   |
  


The openbsd box should act as an IP gateway for the subnet. I bridged
two NICS, one goes into sw1, the other into sw2. I also want to give
this bridge an IP address, but that is not possible. So I


- tried to set a vlan on the bridge, (vlandev bridge0), but this is not
possible ( SIOCSETVLAN: Protocol not supported). The switches see each
other and root sw is elected.


- tried to set a failover trunk on the bridge member interfaces and set
the vlan on that. Packets are being forwarded then, but STP does not work
(switches don't see each other)



How should I go about this?


Thanks,

Arjen.




Re: STP / redundant network paths

2008-04-03 Thread Arjen Van Drie
Vinicius Vianna wrote:

 If you wanna route packets from the internet to the SW's, you need
 some IP on the OpenBSD's interfaces to the switches.
 I remember being able to set IP addresses on bridged interfaces with
 ifconfig, don't know if this is a good approach but was usable in the
 time.

I also did that, set IP addresses on the physical interfaces. I gave
them both the same IP address (since the subnet behind it needs that as
default gateway), but when I pulled out the cable to the master switch
the inet routing table kept pointing towards the NIC that just went
down, and I haven't figured out a way to set the same route on two
different interfaces.


 Maybe your best approach is to set a trunk between the switches, if
 you wanna redundancy, maybe there's a need for two openbsd firewalls,
 one on each switch?

I also tried a trunk on both nics. STP went away and the switches did
not see each other (as said below). Adding a second firewall is in the
planning, but I first want to get it to work with one firewall.

 Or are you using different subnet's in the switches, and the openbsd
 try to decide who is up to forward the packets (like some rdr rules on
 pf?).
I would like to set it up as transparant as possible, redirecting
packages in case of path failover is the last thing I want to  do.

In Linux (and a friend of mine was nearly certain to have also done it
with freebsd) I can set an IP on an ehternet bridge. I chose openbsd for
carp and pfsync which I use on the external interface (no STP here) for
failover with the to-be-added second firewall.

Thanks,
Arjen.



/dev/random as (chrooted) named's entropy source [current]

2008-04-03 Thread Jan Stary
Hi list,

I wonder how exactly the /dev/random of (chrooted) named works.
If I just start named with named_flags=, the log says

named[9291]: could not open entropy source /dev/arandom: file not found
named[9291]: using pre-chroot entropy source /dev/arandom

(But named runs just fine beside that.)

Now, named is chrooted into /var/named, and there is no
/var/named/dev/arandom indeed. According to 
usr/share/doc/html/bind/Bv9ARM.ch06.html#options saying

random-device
[...] If not specified, the default value is /dev/random
(or equivalent) when present, and none otherwise. 

I assume that in that point named does not use any in-kernel
random source (which is OK). But is is not so -

# fstat /dev/arandom 
USER CMD  PID   FD MOUNTINUM MODE   R/WSZ|DV NAME
namednamed  195686 /5386 crw-r--r--   r  arandom 
/dev/arandom

- named uses the out-of-chroot /dev/arandom.

It seems that the documentation is a bit misleading there: if the
(chrooted) /dev/arandom (an equivalent ov /dev/random I suppose)
is not there, it uses the (non-chrooted) /dev/arandom (and not 'none').
(Or perhaps I just miss-interpreted this.)

What bothers me more is: does that mean that named is _not_ chrooted
now? Because if it were chrooted, how could it 'see' the 'real'
/dev/arandom?

Note that 19568 is the pid of the 'child' named (which runs as the
named user):

|-+= 18849 root named: [priv] (named)
| \--- 19568 named named


Trying to give named its own random-source, I stopped named, did

# cd /var/named/dev/   
# /dev/MAKEDEV arandom 
# ls -l
total 0
crw-r--r--  1 root  wheel   45,   4 Apr  3 14:16 arandom
srw-rw-rw-  1 root  wheel 0 Apr  3 13:51 log
crw-r--r--  1 root  wheel   45,   3 Apr  3 14:16 prandom
crw-r--r--  1 root  wheel   45,   0 Apr  3 14:16 random
crw-r--r--  1 root  wheel   45,   1 Apr  3 14:16 srandom
crw-r--r--  1 root  wheel   45,   2 Apr  3 14:16 urandom

and started named again. Now the log says

named[25688]: /usr/src/usr.sbin/bind/lib/isc/unix/errno2result.c:111: 
unexpected error:
named[25688]: unable to convert errno to isc_result: 6: Device not configured
named[25688]: could not open entropy source /dev/arandom: unexpected error
named[25688]: using pre-chroot entropy source /dev/arandom

So why is /var/named/dev/arandom not configured. Is there something
that needs to be done beside MAKEDEV?

Thanks a lot

Jan



OpenBSD 4.3-current (GENERIC) #0: Mon Mar 17 16:21:09 CET 2008
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Geode(TM) Integrated Processor by AMD PCS (AuthenticAMD 586-class) 432 
MHz
cpu0: FPU,DE,PSE,TSC,MSR,CX8,SEP,PGE,CMOV,CFLUSH,MMX
real mem  = 133791744 (127MB)
avail mem = 121327616 (115MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 12/10/07, BIOS32 rev. 0 @ 0xfceb2
pcibios0 at bios0: rev 2.1 @ 0xf/0x1
pcibios0: pcibios_get_intr_routing - function not supported
pcibios0: PCI IRQ Routing information unavailable.
pcibios0: PCI bus #0 is the last bus
bios0: ROM list: 0xe/0xa800
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 1 function 0 AMD Geode LX rev 0x31
glxsb0 at pci0 dev 1 function 2 AMD Geode LX Crypto rev 0x00: RNG AES
vr0 at pci0 dev 9 function 0 VIA VT6105M RhineIII rev 0x96: irq 10, address 
00:0d:b9:12:9f:2c
ukphy0 at vr0 phy 1: Generic IEEE 802.3u media interface, rev. 3: OUI 0x004063, 
model 0x0034
vr1 at pci0 dev 10 function 0 VIA VT6105M RhineIII rev 0x96: irq 11, address 
00:0d:b9:12:9f:2d
ukphy1 at vr1 phy 1: Generic IEEE 802.3u media interface, rev. 3: OUI 0x004063, 
model 0x0034
vr2 at pci0 dev 11 function 0 VIA VT6105M RhineIII rev 0x96: irq 12, address 
00:0d:b9:12:9f:2e
ukphy2 at vr2 phy 1: Generic IEEE 802.3u media interface, rev. 3: OUI 0x004063, 
model 0x0034
glxpcib0 at pci0 dev 15 function 0 AMD CS5536 ISA rev 0x03: rev 0, 32-bit 
3579545Hz timer, watchdog, gpio
gpio0 at glxpcib0: 32 pins
pciide0 at pci0 dev 15 function 2 AMD CS5536 IDE rev 0x01: DMA, channel 0 
wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: CF CARD 4GB
wd0: 1-sector PIO, LBA, 3871MB, 7928928 sectors
wd0(pciide0:0:0): using PIO mode 4, DMA mode 2
pciide0: channel 1 ignored (disabled)
ohci0 at pci0 dev 15 function 4 AMD CS5536 USB rev 0x02: irq 15, version 1.0, 
legacy support
ehci0 at pci0 dev 15 function 5 AMD CS5536 USB rev 0x02: irq 15
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 AMD EHCI root hub rev 2.00/1.00 addr 1
isa0 at glxpcib0
isadma0 at isa0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: PC speaker
spkr0 at pcppi0
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom0: console
usb1 at ohci0: USB revision 1.0
uhub1 at usb1 AMD OHCI root hub rev 1.00/1.00 addr 1

chrooted /dev/log (named and postfix) [current]

2008-04-03 Thread Jan Stary
Hi list,

this is a question about named and syslog and how they interplay.
My named is instructed to log via a syslog channel (local0) and
it works fine. The relevant flags of rc.conf.local are

syslogd_flags=
named_flags=

In the output of ps I see that syslogd runs as

syslogd -a /var/named/dev/log -a /var/empty/dev/log

I wonder how this is done. syslog and named are two separate processes
that don't basically care about each other (right?). So how does the
'-a /var/named/dev/log' get into syslog's flags and who created
/var/named/dev/log - named or syslog?

Oh ... /etc/rc did. OK, syslogd_flags _do_ care whether named is enabled.
(Although my question is now answered by just asking the question,
I will leave it here for others who go this way.)

A similar question I have: I use postfix. After make install, one of the
things the package's postfix-enable script asks me to do is to add '-a
/var/spool/postfix/dev/log' to syslogd_flags. That's because postfix is
a(n optional) package, and as such is not taken into consideration in
/etc/rc - unlike named, which is part of the system. Right?

One final question: I removed /var/spool/postfix/dev/log now,
removed '-a /var/spool/postfix/dev/log' from syslogd_flags,
and rebooted. Postfix still logs as it is supposed to, although
/var/spool/postfix/dev/log is not there now. So why does
'-a /var/spool/postfix/dev/log' need to be added to syslogd_flags?
(The same seems to work without it.)

Thanks

Jan



Re: HP nw9440 does not boot ACPI snapshot

2008-04-03 Thread Reyk Floeter
On Thu, Apr 03, 2008 at 01:35:31PM +0300, Denis Doroshenko wrote:
 i have the same issue, which i reported in
 http://marc.info/?l=openbsd-miscm=119608530213184w=2
 then i had angry mail from Theo (WRT lack of information), though
 he listed a few of developers who i needed to contact. i did some
 more progres (like backtracing the core from -g compiled acpidump)
 and sent to those developers; there's no news since then.
 
 the problem is there in the -current. i upgraded the bios of the
 notebook (just in case there is something wrong with it), but the
 problem remains. the worst thing is those notebooks have no
 other means to access various hardware stuff (e.g. sensors),
 only via ACPI.
 
 unfortunately i have no spare time whatsoever to read ACPI
 specs, because the assert that fails in acpidump points (as
 far as i understand) that ACPI script's structure causes
 problems to OpenBSD ACPI parser (non-standard things?).
 

i have the same problems on a HP Compaq dc7600 Convertible Minitower.
acpi doesn't work.  the acpi developers like marco@ are aware of the
problem and it is being worked on.

---snip---
 0x8005c460 cnt:00 stk:61 integer: 0
8b46 Called: \_SB_.PCI0._CRS
local0: 0x8005c420 cnt:00 stk:60 integer: b6
local0: 0x8005c460 cnt:00 stk:61 integer: 0
panic: aml_die aml_setbufint:988
---snap---

in addition to the `boot -c` temporary workaround, you can also
permanently disable acpi in a kernel by running the following command
from the shell:

# config -ef /bsd 
OpenBSD 4.3-current (GENERIC) #1381: Sun Mar 30 18:15:05 MDT 2008
[EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC
Enter 'help' for information
ukc disable acpi
285 acpi0 disabled
ukc quit
Saving modified kernel.

 On Thu, Apr 3, 2008 at 12:32 PM, Raimo Niskanen
 [EMAIL PROTECTED] wrote:
  I also have ACPI problems on a HP notebook. Mine is a hp2510p,
   and it kernel panics during boot.  I have reported this to
   [EMAIL PROTECTED] a few times.
 
   For me it has worked to boot and crash,
   UKC trace
   UKC ps
   UKC boot reboot
   boot with -c,
   UKC disable acpi
   UKC exit
   and let it boot without ACPI. And magically, when booted,
   the dmesg contains both boots; put it on e.g an USB key.
 
   acpidump core dumps for mee too. I have sent in the
   broken results as well as the core file. I do not
   if someone is trying to solve the problem, though.
 
   I have not tried the MP kernel.
 
 
 
   On Thu, Apr 03, 2008 at 10:59:01AM +0200, Daniele Pilenga wrote:
Hi guys,
I have this notebook on which I'd like to install (and use!) OpenBSD,
but I have a little problem.
   
If I leave ACPI anabled, as per default on this Apr 1st snapshot, the
/bsd kernel reboots after cpu probing
(more or less, I don't have any serial so I cannot see very clearly,
it's too fast) and the /bsd.mp kernel hangs at some
acpi probing.
   
Enabling verbose mode is not very helpful since it scrolls down too
fast and in both cases rebooting the machine does not
leave the dmesg in memory.
   
I already tried disabling some random driver, but since I cannot see
where the problem is I don't even know what to
look for.
   
It would not be that bad living without acpi, but the MP kernel cannot
see both cpu cores, so I hope there is something
I could try.
   
It seems there is a problem with the audio, but I'll leave that for 
  later. :-)
   
Dmesg follows, please let me know if there is something else you need
or if you have any suggestion.
BTW, acpidump core dumps, but may be related to the non-acpi kernel.
   
Thank you,
D.
   
OpenBSD 4.3-current (GENERIC) #732: Tue Apr  1 00:54:18 MDT 2008
   
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
   
cpu0: Genuine Intel(R) CPU T2600 @ 2.16GHz (GenuineIntel 686-class) 
  2.17 GHz
   
cpu0: 
  FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,VMX,EST,TM2,xTPR
   
real mem  = 2146856960 (2047MB)
   
avail mem = 2067857408 (1972MB)
   
User Kernel Config
   
UKC disable acpi
   
422 acpi0 disabled
   
UKC quit
   
Continuing...
   
mainbus0 at root
   
bios0 at mainbus0: AT/286+ BIOS, date 03/05/08, BIOS32 rev. 0 @
0xf, SMBIOS rev. 2.4 @ 0xf3b77 (23 entries)
   
bios0: vendor Hewlett-Packard version 68YAF Ver. F.1C date 03/05/2008
   
bios0: Hewlett-Packard HP Compaq nw9440 (EY314EA#ABZ)
   
acpi at bios0 function 0x0 not configured
   
pcibios0 at bios0: rev 2.1 @ 0xf/0x2000
   
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf07c0/208 (11 entries)
   
pcibios0: bad IRQ table checksum
   
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf9990/208 (11 entries)
   
pcibios0: PCI Exclusive IRQs: 5 10 11
   
pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82801FBM LPC rev 
  0x00)
   
pcibios0: 

Re: spamd -M behaviour when real MX is down

2008-04-03 Thread Jose Fragoso
Hi, Martin!

Thanks for your reply.

 The real MTA is not involved here. What's important is that spamd  with
the
 low priority MX address active must see all the greylist changes for a
 higher priority MX host for the same domains, either by being synchro-
 nised with it, or by receiving the connections itself. (from the man
page).

Yes. But the man page does not say how SPAMD would behave if the real MTA
(high priority MX) is down. In such a situation, a remote host trying to
deliver a message to a given domain, will try the real MTA first (and
SPAMD will see this pass through). Since it is down, the host will next
try to make an SMTP connection to the low-pri MX address, which is
controlled by SPAMD, right?

This is what my question is about. How will SPAMD react to this connection?

Regards,

Jose

--
Want an e-mail address like mine?
Get a free e-mail account today at www.mail.com!



script to process spamd and generate html

2008-04-03 Thread Jose Fragoso
Hi,

Anyone written scripts that analyse SPAMD logs and generate
html reports, and could share them with us?

Thanks in advance.

Regards,

Jose

--
Want an e-mail address like mine?
Get a free e-mail account today at www.mail.com!



Re: spamd -M behaviour when real MX is down

2008-04-03 Thread Stuart Henderson
On 2008-04-03, Jose Fragoso [EMAIL PROTECTED] wrote:
 The real MTA is not involved here. What's important is that spamd  with
 the
 low priority MX address active must see all the greylist changes for a
 higher priority MX host for the same domains, either by being synchro-
 nised with it, or by receiving the connections itself. (from the man
 page).

 Yes. But the man page does not say how SPAMD would behave if the real MTA
 (high priority MX) is down. In such a situation, a remote host trying to
 deliver a message to a given domain, will try the real MTA first (and
 SPAMD will see this pass through). Since it is down, the host will next
 try to make an SMTP connection to the low-pri MX address, which is
 controlled by SPAMD, right?

If you run spamd -M then you must have more than one IP address
that is handled by spamd.

e.g.

MX 0 mailhost
MX 10 spamd
MX 20 spamd (-M address)

 This is what my question is about. How will SPAMD react to this connection?

If you don't have the other address (MX 10 in my example) it will
just block the sender straight away.



Re: : HP nw9440 does not boot ACPI snapshot

2008-04-03 Thread Raimo Niskanen
On Thu, Apr 03, 2008 at 02:50:26PM +0200, Reyk Floeter wrote:
 On Thu, Apr 03, 2008 at 01:35:31PM +0300, Denis Doroshenko wrote:
  i have the same issue, which i reported in
  http://marc.info/?l=openbsd-miscm=119608530213184w=2
  then i had angry mail from Theo (WRT lack of information), though
  he listed a few of developers who i needed to contact. i did some
  more progres (like backtracing the core from -g compiled acpidump)
  and sent to those developers; there's no news since then.
  
  the problem is there in the -current. i upgraded the bios of the
  notebook (just in case there is something wrong with it), but the
  problem remains. the worst thing is those notebooks have no
  other means to access various hardware stuff (e.g. sensors),
  only via ACPI.
  
  unfortunately i have no spare time whatsoever to read ACPI
  specs, because the assert that fails in acpidump points (as
  far as i understand) that ACPI script's structure causes
  problems to OpenBSD ACPI parser (non-standard things?).
  
 
 i have the same problems on a HP Compaq dc7600 Convertible Minitower.
 acpi doesn't work.  the acpi developers like marco@ are aware of the
 problem and it is being worked on.
 

Great!

When they need testing there are many users @misc willing to help.
Also whatever debugging they trust us to do.

 ---snip---
  0x8005c460 cnt:00 stk:61 integer: 0
 8b46 Called: \_SB_.PCI0._CRS
 local0: 0x8005c420 cnt:00 stk:60 integer: b6
 local0: 0x8005c460 cnt:00 stk:61 integer: 0
 panic: aml_die aml_setbufint:988
 ---snap---
 
 in addition to the `boot -c` temporary workaround, you can also
 permanently disable acpi in a kernel by running the following command
 from the shell:
 
 # config -ef /bsd 
 OpenBSD 4.3-current (GENERIC) #1381: Sun Mar 30 18:15:05 MDT 2008
 [EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC
 Enter 'help' for information
 ukc disable acpi
 285 acpi0 disabled
 ukc quit
 Saving modified kernel.
 
:
:

-- 

/ Raimo Niskanen, Erlang/OTP, Ericsson AB



Re: /dev/random as (chrooted) named's entropy source [current]

2008-04-03 Thread Darrin Chandler
On Thu, Apr 03, 2008 at 02:26:26PM +0200, Jan Stary wrote:
 named[9291]: could not open entropy source /dev/arandom: file not found
 named[9291]: using pre-chroot entropy source /dev/arandom

The above logs say to me can't so this, so doing this instead.

Since it's using the pre-chroot /dev/arandom, it has a good random
source and everything is fine there.

-- 
Darrin Chandler|  Phoenix BSD User Group  |  MetaBUG
[EMAIL PROTECTED]   |  http://phxbug.org/  |  http://metabug.org/
http://www.stilyagin.com/  |  Daemons in the Desert   |  Global BUG Federation



Re: STP / redundant network paths

2008-04-03 Thread Vinicius Vianna

Arjen Van Drie wrote:

Vinicius Vianna wrote:

  

If you wanna route packets from the internet to the SW's, you need
some IP on the OpenBSD's interfaces to the switches.
I remember being able to set IP addresses on bridged interfaces with
ifconfig, don't know if this is a good approach but was usable in the
time.



I also did that, set IP addresses on the physical interfaces. I gave
them both the same IP address (since the subnet behind it needs that as
default gateway), but when I pulled out the cable to the master switch
the inet routing table kept pointing towards the NIC that just went
down, and I haven't figured out a way to set the same route on two
different interfaces.

  
If you need to change routing on the event of a NIC going down you need 
to use ifstated(8), check the man page for it on your system or the website.

Maybe your best approach is to set a trunk between the switches, if
you wanna redundancy, maybe there's a need for two openbsd firewalls,
one on each switch?



I also tried a trunk on both nics. STP went away and the switches did
not see each other (as said below). Adding a second firewall is in the
planning, but I first want to get it to work with one firewall.

  
The trunk would be between the switches, not involving the openbsd fw at 
all, so all your switches will appear as one, but i don't know the 
details of your network to setup to know if it's the right thing to do, 
you have to do some research for it.

Or are you using different subnet's in the switches, and the openbsd
try to decide who is up to forward the packets (like some rdr rules on
pf?).


I would like to set it up as transparant as possible, redirecting
packages in case of path failover is the last thing I want to  do.

In Linux (and a friend of mine was nearly certain to have also done it
with freebsd) I can set an IP on an ehternet bridge. I chose openbsd for
carp and pfsync which I use on the external interface (no STP here) for
failover with the to-be-added second firewall.
  
I did it on OpenBSD, had the internet coming on an em0, the switch on 
the em1, a bridge with em0 and em1 with no IP setup on it, and put an 
subnet address on em1, so the synproxy rules could route and work on a 
transparent bridge firewall, and it did work very well :)
But i think you need some network knowledge, do some research on your 
routing table on the firewall, some route get commands to check how 
the server would route some packets on it, don't know how carp could 
help in this setup since it was designed to work on different servers, 
not on the same server with different NIC's (am i right here?), but 
mixing bridges with IP address, gateway and pf can be difficult sometimes.



Thanks,
Arjen.


  

You're welcome :)

Vinicius



Re: Mountain and Road Bikes Liquidation Sale on 2007 models

2008-04-03 Thread chucky
What is the sizes available for the 07 Giant Trance 1?
How do I buy? I have signed up already.


caio wrote:
 
 Hi- Send me some inf on the rocky mountain slayer sxc 70,Thanks. 
 [EMAIL PROTECTED]
 
 Cinder Cycling Shop wrote:
 
 Hi there,
 
 We are liquidating our 2007 stock and we give big discounts on all our
 bicycles.
 
 We sell Cannondale, Cervelo, Ellsworth, Giant, Jamis, Klein, Kona,
 Litespeed, Rocky Mountain, Santa Cruz, Specialized, Trek, Gary Fisher
 bikes.
 
 
 Here are some of our best offers:
 
 NEW 2007 Cannondale Road Tandem Bike   $1,200
 
 NEW 2007 Cannondale F4000 SL Mountain Bike   $2,400
 
 NEW 2007 Cannondale Gemini 900 Mountain Bike $1,200
 
 NEW 2007 Cannondale Mountain Tandem Bike$1,200
 
 NEW 2007 Cannondale Prophet 4000 Mountain Bike $2,600
 
 NEW 2007 Cannondale R1000 Road Bike$1,000
 
 NEW 2007 Cannondale Scalpel 3000 Mountain Bike  $2,600
 
 NEW 2007 Cannondale Six13 Team 1 Dura Ace Road Bike  $2,400
 
 NEW 2007 Cervelo Soloist Carbon Road Bike$2,300
 
 NEW 2007 Cervelo P3 Carbon Road Bike   $2,300
 
 NEW 2007 Cervelo Soloist Team Road Bike$1,100
 
 NEW 2007 Ellsworth Epiphany Mountain Bike$2,500
 
 NEW 2007 Ellsworth Moment Mountain Bike$2,600
 
 NEW 2007 Ellsworth Truth Mountain Bike $2,200
 
 NEW 2007 Gary Fisher Cake 1 DLX Mountain Bike  $1,500
 
 NEW 2007 Giant Anthem 1 Mountain Bike  $1,200
 
 NEW 2007 Giant Reign X0 Mountain Bike  $1,800
 
 NEW 2007 Giant Tcr Composite 1 Road Bike$1,500
 
 NEW 2007 Giant Trance 1 Mountain Bike $1,200
 
 NEW 2007 Jamis Dakar XC Pro Mountain Bike$1,900
 
 NEW 2007 Klein Q-Pro XV Road Bike$1,300
 
 NEW 2007 Kona Dawg Primo Mountain Bike$1,200
 
 NEW 2007 Kona Kula Supreme Mountain Bike$1,900
 
 NEW 2007 Kona Stinky Mountain Bike$1,100
 
 NEW 2007 Litespeed Bella Road Bike$1,200
 
 NEW 2007 Litespeed Ghisallo Road Bike $2,600
 
 NEW 2007 Litespeed Niota Ti Mountain Bike$2,800
 
 NEW 2007 Litespeed Tuscany Road Bike $1,800
 
 NEW 2007 Rocky Mountain Element Team Mountain Bike$2,000
 
 NEW 2007 Rocky Mountain Slayer 70 Mountain Bike$1,700
 
 NEW 2007 Santa Cruz Blur LT Mountain Bike$2,400
 
 NEW 2007 Santa Cruz Nomad Mountain Bike $2,000
 
 NEW 2007 Santa Cruz V 10 Mountain Bike  $2,400
 
 NEW 2007 Specialized Demo 8 Mountain Bike $2,000
 
 NEW 2007 Specialized Enduro SL Pro Carbon Mountain Bike $2,200
 
 NEW 2007 Specialized Epic Comp Mountain Bike  $1,200
 
 NEW 2007 Specialized Epic Marathon Mountain Bike$1,800
 
 NEW 2007 Specialized Roubaix Pro Road Bike $1,800
 
 NEW 2007 Specialized Ruby Pro Road Bike$1,800
 
 NEW 2007 Specialized S-Works Stumpjumper Fsr Carbon Bike$2,400
 
 NEW 2007 Specialized S-Works Tarmac SL Sram Road Bike  $2,400
 
 NEW 2007 Specialized S-Works Roubaix Dura Ace Road Bike   $2,400
 
 NEW 2007 Specialized Stumpjumper Comp Mountain Bike$1,000
 
 NEW 2007 Specialized Tarmac Pro Double Road Bike$1,800
 
 NEW 2007 Specialized Transition Pro Road Bike  $1,800
 
 NEW 2007 Trek 5000 Road Bike $1,100
 
 NEW 2007 Trek Pilot SL 5.9 Road Bike  $1,900
 
 NEW 2007 Trek Tandem T 2000 Road Bike  $1,500
 
 NEW 2007 Trek Madone SSL 6.9 Road Bike$2,900
 
 NEW 2007 Trek Top Fuel SL Mountain Bike $2,900
 
 and many many ... models available at this special price.
 
 
 
 If you are interested please reply and we will give you our website
 address
 where you can order the bikes.
 
 We offer free shipping if you buy now !!!
 
 
 
 We look forward for your reply,
 
 Jack Simmons,
 Sales Dep.,
 Cinder Cycling Shop,
 11874 Heron Bay Blvd, Coral Springs, FL, 33076, USA
 
 
 
 
 
 
 
 
 .
 
 http://app.streamsend.com/private/MN9b/Q9cYqlY/unsubscribe/248682
 
 
 
 
 

-- 
View this message in context: 
http://www.nabble.com/Re%3A-Mountain-and-Road-Bikes-Liquidation-Sale-on-2007-models-tp15389863p16467503.html
Sent from the openbsd user - misc mailing list archive at Nabble.com.



SGI C-BRICK Origin Onyx R12000

2008-04-03 Thread Sebastian Reitenbach
Hi,

I just bought such a machine on ebay. The seller has a second one available. 
Just in case there is an OpenBSD developer interested in getting such a box 
into the list of supported SGI hardware, I'd buy a second one, and would 
offer to donate it to the developer in question. I'd prefer to deliver the 
box somewhere here in Germany, but if necessary, I'd send it to somewhere in 
Europe too.

just let me know.

Sebastian



Re: script to process spamd and generate html

2008-04-03 Thread Calomel
We use a simple Perl script to analyze the spamd logs and generate HTML
output.

  Spamd Statistics Script (annoying spammers)
  http://calomel.org/spamd_stats.html

--
  Calomel @ http://calomel.org
  Open Source Research and Reference


On Thu, Apr 03, 2008 at 10:19:18AM -0300, Jose Fragoso wrote:
Hi,

Anyone written scripts that analyse SPAMD logs and generate
html reports, and could share them with us?

Thanks in advance.

Regards,

Jose

--
Want an e-mail address like mine?
Get a free e-mail account today at www.mail.com!



Re: spamd -M behaviour when real MX is down

2008-04-03 Thread Jose Fragoso
Hi Stuart,


 If you run spamd -M then you must have more than one IP address
 that is handled by spamd.

 e.g.

 MX 0 mailhost
 MX 10 spamd
 MX 20 spamd (-M address)

Sorry. I forgot to explain. My spamd box is running as a bridge.
So it is not an MX. The correct setup is:

MX 0 mailhost
MX 10 spamd (-M address)

Now what happens when the mailhost is down? Will spamd politely
drop the SMTP connection to its fake IP address? Will it delay
the first 10 secs (-s)?

Regards,

Jose

--
Want an e-mail address like mine?
Get a free e-mail account today at www.mail.com!



Re: /dev/random as (chrooted) named's entropy source [current]

2008-04-03 Thread Dave Anderson
On Thu, 3 Apr 2008, Jan Stary wrote:

Trying to give named its own random-source, I stopped named, did

# cd /var/named/dev/
# /dev/MAKEDEV arandom
# ls -l
total 0
crw-r--r--  1 root  wheel   45,   4 Apr  3 14:16 arandom
srw-rw-rw-  1 root  wheel 0 Apr  3 13:51 log
crw-r--r--  1 root  wheel   45,   3 Apr  3 14:16 prandom
crw-r--r--  1 root  wheel   45,   0 Apr  3 14:16 random
crw-r--r--  1 root  wheel   45,   1 Apr  3 14:16 srandom
crw-r--r--  1 root  wheel   45,   2 Apr  3 14:16 urandom

and started named again. Now the log says

named[25688]: /usr/src/usr.sbin/bind/lib/isc/unix/errno2result.c:111: 
unexpected error:
named[25688]: unable to convert errno to isc_result: 6: Device not configured
named[25688]: could not open entropy source /dev/arandom: unexpected error
named[25688]: using pre-chroot entropy source /dev/arandom

So why is /var/named/dev/arandom not configured. Is there something
that needs to be done beside MAKEDEV?

Is /var marked 'nodev' in /etc/fstab?

Dave

-- 
Dave Anderson
[EMAIL PROTECTED]



Re: Pfstat - issue

2008-04-03 Thread Calomel
You also need to tell pfstat what action you want to do. You can query to
collect the pf interface statistics, generate new graphs or clean up the
database.

See if our page can help you out.

  Pfstat how to ( pfstat.conf )
  http://calomel.org/pfstat.html

--
  Calomel @ http://calomel.org
  Open Source Research and Reference


On Wed, Apr 02, 2008 at 08:13:35PM -0700, Parvinder Bhasin wrote:
I cannot get pfstat to run with -c or -d option whenever I run:

pfstat -c /etc/pfstat.conf

I get:
usage: pfstat [-v] [-c config] [-d data] [-r host[:port]] [-p] [-q] [-t 
days[:days]]

same thing when I even run against provided example pfstat.conf file.

Any ideas? anyone?

any help, highly appreciated :)

thx.



Re: HP nw9440 does not boot ACPI snapshot

2008-04-03 Thread Nicolas Legrand
Reyk Floeter [EMAIL PROTECTED] writes:


 i have the same problems on a HP Compaq dc7600 Convertible Minitower.
 acpi doesn't work.  the acpi developers like marco@ are aware of the
 problem and it is being worked on.

Excellent news! I have the same problem on a dc7700, though I don't
disable the whole acpi, but acpiprt* on /bsd or acpiprt* and acpimadt0
on /bsd.mp.



Re: Ethernet on ASUS EEE PC?

2008-04-03 Thread Joel Sing
This problem has been tracked down and is fixed in r1.10 of if_lii.c.

On Wednesday 02 April 2008, James Hartley wrote:
 On Tue, Apr 1, 2008 at 4:53 AM, James Hartley [EMAIL PROTECTED] wrote:
  The 31 March snapshot works;

 I'm now seeing multiple messages:

 lii0: mismatched status and packet

 ...when checking out the CVS tree.  If anyone can point out what
 information would be pertinent for including in a PR, I would gladly
 comply.

 Thanks.
-- 

 = Joel Sing | [EMAIL PROTECTED] | 0419 577 603 =


 Real stupidity beats artificial intelligence every time.
  - Terry Pratchett, Hogfather



Re: /dev/random as (chrooted) named's entropy source [current]

2008-04-03 Thread Jan Stary
named[9291]: could not open entropy source /dev/arandom: file not found
named[9291]: using pre-chroot entropy source /dev/arandom
   
   The above logs say to me can't so this, so doing this instead.
   
   Since it's using the pre-chroot /dev/arandom, it has a good random
   source and everything is fine there.
  
  Yes, but is named still chrooted under /var/named after doing this?
  Because if it is, how can it use /dev/arandom?
 
 Once a file has been opened it is still available after chroot. Any new
 accesses are limited by chroot. It's like a suid program opening files
 or binding to a port  1024 and then dropping priveleges, in a way.

Obviously, this is what I needed to know.

Thanks!

Jan



From Mr Abubakar,if you are interested get back to me.

2008-04-03 Thread Abubakar Sankara
You're invited to From Mr Abubakar,if you are interested get back to me..


By your host Abubakar Sankara:

With due respect:
Greetings to you, I am Mr.Abubakar Sankara the Account Manager of Late Mr. 
Morris Thompson in ( B.S.I.C )Bank, here in Burkina Faso Ouagadougou Africa. I 
discovered his Dormant Account with a huge amount of Money Valued (Fourteen 
Million Dollars only) that belongs to late Mr. Morris Thompson who died in a 
plane crash with his entire family, if your are interested to run this deal 
with me, then more details will be discussed once I hear from you and 40% for 
you while 60% for me

 Date:  Thursday April 3, 2008

 Time:  5:00 pm - 6:00 pm (GMT +00:00 GMT Britain, Ireland, 
Portugal)

Will you attend? RSVP to this invitation at:

 
http://calendar.yahoo.com/abubakarsan5?v=126a1=0iid=0xA51at%40NLvjAD82BhLOhqp%40fduT%40lzDigid=HxJ7OpxbN-flaEsNVhD8pwd%40Sv3T%40myWphAXhh%40%40

Copyright ) 2008 All Rights Reserved
 www.yahoo.ca

Privacy Policy:
 http://privacy.yahoo.com/privacy/ca

Terms of Service:
 http://ca.docs.yahoo.com/info/terms/



Problems when natting ipsec communications

2008-04-03 Thread carlopmart

Hi all,

 I have a very strange problem related to use NAT rules with ipsec
communications. I have two StoneGate FWs nodes in front of public adsl lines.
Behind them, I have a pair of OpenBSD servers used only to serve VPN connections
over IPSec protocols familiy (we use isakmpd).

 Ok, where is the problem? Problem appears when I need to nat isakmp and
isakmp-nat-t ports on stonegate firewalls. If we disable nat rule on stongate
firewalls, all works ok: clients can connect via IPSec clients. But if we enable 
nat rule on stonegate firewalls, any client can connect via IPsec and returns 
this error: UNEQUAL_PAYLOAD_LENGTHS.


 My rules on SG firewalls are:

 Access rule:

  - Src: NOT internal networks, Dst: sgfw_public_ip, Ports:
isakmp,isakmp-nat-t, Action: allowed

 Nat Rule:

  - Src: NOT Internal networks, Dst: sgfw_public_ip, Ports: isakmp,
isakmp-nat-t, Destination: openbsd_fws (carp interface), Ports: same as source.

 On OpenBSD sysctl.conf file i have enabled these options:

 net.inet.esp.enable=1
 net.inet.ah.enable=0
 net.inet.esp.udpencap=1
 net.inet.ipcomp.enable=1

 Do I need to do something else?? I know that it isn't an openbsd problem,
almost I think. But I need to deploy these infraestructure as soon as possible.

 Many thanks for your help.



--
CL Martinez
carlopmart {at} gmail {d0t} com



Re: HP nw9440 does not boot ACPI snapshot

2008-04-03 Thread Reyk Floeter
On Thu, Apr 03, 2008 at 04:38:08PM +, Nicolas Legrand wrote:
 Reyk Floeter [EMAIL PROTECTED] writes:
 
 
  i have the same problems on a HP Compaq dc7600 Convertible Minitower.
  acpi doesn't work.  the acpi developers like marco@ are aware of the
  problem and it is being worked on.
 
 Excellent news! I have the same problem on a dc7700, though I don't
 disable the whole acpi, but acpiprt* on /bsd or acpiprt* and acpimadt0
 on /bsd.mp.
 

it is just a workaround, not a solution.  at least it lets the device
in the PCI express slot appear (compare the two dmesgs below).  so
thanks for the hint, it is better than disabling acpi at all...

cpu0: 2MB 64b/line 8-way L2 cache
pci0 at mainbus0 bus 0: configuration mode 1
+ppb0 at pci0 dev 1 function 0 Intel 82945G PCIE rev 0x02: irq 11
+pci1 at ppb0 bus 1
+thtc0 at pci1 dev 0 function 0 Tehuti Networks TN3014 rev 0x00: irq 11
+tht0 at thtc0 port 0: address 00:1b:56:18:00:99
+tht1 at thtc0 port 1: address 00:1b:56:18:80:99

reyk

OpenBSD 4.3-current (GENERIC) #1381: Sun Mar 30 18:15:05 MDT 2008
[EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC
real mem = 527884288 (503MB)
avail mem = 500695040 (477MB)
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.4 @ 0xeeb40 (69 entries)
bios0: vendor Hewlett-Packard version 786D1 v01.03 date 05/18/2005
bios0: Hewlett-Packard HP Compaq dc7600 Convertible Minitower
acpi at bios0 not configured
cpu0 at mainbus0: (uniprocessor)
cpu0: Intel(R) Pentium(R) 4 CPU 3.00GHz, 2990.77 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,CNXT-ID,CX16,xTPR,NXE,LONG
cpu0: 2MB 64b/line 8-way L2 cache
pci0 at mainbus0 bus 0: configuration mode 1
pchb0 at pci0 dev 0 function 0 Intel 82945G Host rev 0x02
vga1 at pci0 dev 2 function 0 Intel 82945G Video rev 0x02
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
agp0 at vga1: aperture at 0xd000, size 0x1000
azalia0 at pci0 dev 27 function 0 Intel 82801GB HD Audio rev 0x01: irq 11
azalia0: codec[s]: Realtek ALC260
audio0 at azalia0
ppb0 at pci0 dev 28 function 0 Intel 82801GB PCIE rev 0x01
pci1 at ppb0 bus 32
ppb1 at pci0 dev 28 function 1 Intel 82801GB PCIE rev 0x01: irq 10
pci2 at ppb1 bus 63
bge0 at pci2 dev 0 function 0 Broadcom BCM5752 rev 0x01, BCM5752 A1 (0x6001): 
irq 10, address 00:15:60:9d:72:d9
brgphy0 at bge0 phy 1: BCM5752 10/100/1000baseT PHY, rev. 0
uhci0 at pci0 dev 29 function 0 Intel 82801GB USB rev 0x01: irq 5
uhci1 at pci0 dev 29 function 1 Intel 82801GB USB rev 0x01: irq 10
uhci2 at pci0 dev 29 function 2 Intel 82801GB USB rev 0x01: irq 11
uhci3 at pci0 dev 29 function 3 Intel 82801GB USB rev 0x01: irq 11
ehci0 at pci0 dev 29 function 7 Intel 82801GB USB rev 0x01: irq 5
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1
ppb2 at pci0 dev 30 function 0 Intel 82801BA Hub-to-PCI rev 0xe1
pci3 at ppb2 bus 5
pcib0 at pci0 dev 31 function 0 Intel 82801GB LPC rev 0x01
pciide0 at pci0 dev 31 function 1 Intel 82801GB IDE rev 0x01: DMA, channel 0 
configured to compatibility, channel 1 configured to compatibility
pciide0: channel 0 disabled (no drives)
pciide0: channel 1 disabled (no drives)
pciide1 at pci0 dev 31 function 2 Intel 82801GB SATA rev 0x01: DMA, channel 0 
configured to native-PCI, channel 1 configured to native-PCI
pciide1: using irq 5 for native-PCI interrupt
wd0 at pciide1 channel 0 drive 0: ST380819AS
wd0: 16-sector PIO, LBA48, 76319MB, 156301488 sectors
wd0(pciide1:0:0): using PIO mode 4, Ultra-DMA mode 5
usb1 at uhci0: USB revision 1.0
uhub1 at usb1 Intel UHCI root hub rev 1.00/1.00 addr 1
usb2 at uhci1: USB revision 1.0
uhub2 at usb2 Intel UHCI root hub rev 1.00/1.00 addr 1
usb3 at uhci2: USB revision 1.0
uhub3 at usb3 Intel UHCI root hub rev 1.00/1.00 addr 1
usb4 at uhci3: USB revision 1.0
uhub4 at usb4 Intel UHCI root hub rev 1.00/1.00 addr 1
isa0 at pcib0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: PC speaker
spkr0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
uhub5 at uhub0 port 1 Standard Microsystems Hub rev 2.00/0.01 addr 2
uhidev0 at uhub5 port 1 configuration 1 interface 0 Logitech USB-PS/2 Optical 
Mouse rev 2.00/27.20 addr 3
uhidev0: iclass 3/1
ums0 at uhidev0: 8 buttons and Z dir.
wsmouse0 at ums0 mux 0
uhidev1 at uhub5 port 2 configuration 1 interface 0 CHICONY HP Basic USB 
Keyboard rev 1.10/3.00 addr 4
uhidev1: iclass 3/1
ukbd0 at uhidev1: 8 modifier keys, 6 key codes
wskbd1 at ukbd0 mux 1
wskbd1: connecting to wsdisplay0
softraid0 at root
root on wd0a swap on wd0b dump on wd0b
WARNING: / was not properly unmounted
syncing disks... 
OpenBSD 4.3-current (GENERIC) #1381: Sun Mar 30 18:15:05 MDT 

Re: Pfstat - issue

2008-04-03 Thread Parvinder Bhasin

Calomel wrote:

You also need to tell pfstat what action you want to do. You can query to
collect the pf interface statistics, generate new graphs or clean up the
database.

See if our page can help you out.

  Pfstat how to ( pfstat.conf )
  http://calomel.org/pfstat.html

--
  Calomel @ http://calomel.org
  Open Source Research and Reference


On Wed, Apr 02, 2008 at 08:13:35PM -0700, Parvinder Bhasin wrote:
  

I cannot get pfstat to run with -c or -d option whenever I run:

pfstat -c /etc/pfstat.conf

I get:
usage: pfstat [-v] [-c config] [-d data] [-r host[:port]] [-p] [-q] [-t 
days[:days]]


same thing when I even run against provided example pfstat.conf file.

Any ideas? anyone?

any help, highly appreciated :)

thx.



  

Thanks Calomel, this is excellent info.

Thanks again!
-Parvinder Bhasin



OpenBSD TV tuner

2008-04-03 Thread Damon McMahon

Greetings,

Just wondering if anyone here is using/has used OpenBSD to view TV  
and if so what hardware and software they use/d. I gather from  
looking through the hardware and packages pages that a combined tuner/ 
video capture device supported by bktr(4) and the fxtv package  
imported from FreeBSD may work?


I'm thinking of putting together a second-hand box in our kitchen as  
a gift for my other half so any thoughts on minimum hardware specs  
would be appreciated too.


Cheers,
Damon



configuration tweaks for CF-based systems?

2008-04-03 Thread Fred Snurd
There was mention a few days back that the following still contains useful 
information when it comes to reducing the amount of writing done to CF-like 
systems:


http://blog.innerewut.de/2005/05/14/openbsd-3-7-on-wrap


Yet I'm puzzled by the desire/need to move /dev into mfs.  The timestamp on the 
files within /dev don't change, so what is the reason for moving the device 
nodes into memory?  Are there parameters which are frequently changed residing 
in this directory?  Any information shared would be appreciated.




  

You rock. That's why Blockbuster's offering you one month of Blockbuster Total 
Access, No Cost.  
http://tc.deals.yahoo.com/tc/blockbuster/text5.com



Re: configuration tweaks for CF-based systems?

2008-04-03 Thread Brian A. Seklecki
On Thu, 2008-04-03 at 13:05 -0700, Fred Snurd wrote:
 There was mention a few days back that the following still contains useful 
 information when it comes to reducing the amount of writing done to CF-like 
 systems:


Send mea  dmesg(8) and I'll send you a 4.3-current CF image built using
bsd-appliance(*)

*1: Name changing soon
*2: code.google.com/p/bsd-appliance

~BAS

 
 http://blog.innerewut.de/2005/05/14/openbsd-3-7-on-wrap
 
 
 Yet I'm puzzled by the desire/need to move /dev into mfs.  The timestamp on 
 the files within /dev don't change, so what is the reason for moving the 
 device nodes into memory?  Are there parameters which are frequently changed 
 residing in this directory?  Any information shared would be appreciated.
 
 
 
 
   
 
 You rock. That's why Blockbuster's offering you one month of Blockbuster 
 Total Access, No Cost.  
 http://tc.deals.yahoo.com/tc/blockbuster/text5.com
 
-- 
Brian A. Seklecki [EMAIL PROTECTED]
Collaborative Fusion, Inc.



Re: configuration tweaks for CF-based systems?

2008-04-03 Thread Chris Kuethe
On Thu, Apr 3, 2008 at 1:05 PM, Fred Snurd [EMAIL PROTECTED] wrote:
  Yet I'm puzzled by the desire/need to move /dev into mfs.  The timestamp on
 the files within /dev don't change, so what is the reason for moving the 
 device
 nodes into memory?  Are there parameters which are frequently changed residing
 in this directory?  Any information shared would be appreciated.

Try this:
ls -ltr /dev | tail ; date ; tty

Notice that the tty you're logged in from has a ctime/atime/mtime of
 well, now?
Tons of devices change as they get used. my /dev/bpf1 has a modtime of
a few minutes ago; just about when dhclient decided to renew its
lease.

CK

-- 
GDB has a 'break' feature; why doesn't it have 'fix' too?



Re: OpenBSD TV tuner

2008-04-03 Thread Diana Eichert

On Fri, 4 Apr 2008, Damon McMahon wrote:


Greetings,

SNIP
I'm thinking of putting together a second-hand box in our kitchen as a gift 
for my other half so any thoughts on minimum hardware specs would be 
appreciated too.


Cheers,
Damon


fxtv and bktr device work fine.

however more info is required.

what are you trying to accomplish?  Make a teevee?
are you in the US?
are you talking OTA or cable teevee?
if OTA then analog OTA dies in the US in 2009.


diana



4.3 /-current and xenocara

2008-04-03 Thread Ed V.

Since there seems to be a bug with cvs checkouts (dies with:

cvs [server aborted]: out of memory; can not allocate 2937909 bytes
on x86 32-bit platforms,
cvs [server aborted]: out of memory; can not reallocate 5242880 bytes
on amd64 64-bit platforms and
cvs [server aborted]: out of memory; can not reallocate 5242880 bytes
on Windows CVS GUI clients)

is there anywhere I can download a tarball of the latest snapshot?

--
Ed V.
3 April 2008 14:28:24

I gather, young man, that you wish to be a Member of Parliament.
 The first lesson that you must learn is, when I call for
statistics about the rate of infant mortality, what I want is
proof that fewer babies died when I was Prime Minister than when
anyone else was Prime Minister.  That is a political statistic.
- Sir Winston Leonard Spencer Churchill



Re: OpenBSD TV tuner

2008-04-03 Thread Louis V. Lambrecht

TV is limited to the bktr driver, see man bktr
In short TV cards with the bt848 or bt878 chip
(and very early bt8x8 compatible conexant chips).
CX23xxx will not work.

There are two apps to watch TV,
fbtv (needs some editing not explained clearly) and
xawtv

xawtv can further be hacked to allow the, imvho better, motv

Mplayer and vlc also should work.

Damon McMahon wrote:

Greetings,

Just wondering if anyone here is using/has used OpenBSD to view TV and 
if so what hardware and software they use/d. I gather from looking 
through the hardware and packages pages that a combined tuner/video 
capture device supported by bktr(4) and the fxtv package imported from 
FreeBSD may work?


I'm thinking of putting together a second-hand box in our kitchen as a 
gift for my other half so any thoughts on minimum hardware specs would 
be appreciated too.


Cheers,
Damon




Re: configuration tweaks for CF-based systems?

2008-04-03 Thread Fred Snurd
On Thu, Apr 3, 2008 at 1:05 PM, Chris Kuethe [EMAIL PROTECTED] wrote:
 Try this:
 ls -ltr /dev | tail ; date ; tty

This explains a lot.  Thanks.


The article referenced discusses copying /tmp, /var, and /dev into a 
memory-based filesystem.  Obviously, the contents of /tmp don't need to 
retained across reboots, and the article covers how to save /var at shutdown.  
Are the changed contents of /dev not important to retain too?


Thanks again!




  

You rock. That's why Blockbuster's offering you one month of Blockbuster Total 
Access, No Cost.  
http://tc.deals.yahoo.com/tc/blockbuster/text5.com



Re: 4.3 /-current and xenocara

2008-04-03 Thread Bryan Irvine
Look in the archives for subject line: xenocara CVS out of memory

-Bryan

On Thu, Apr 3, 2008 at 1:30 PM, Ed V. [EMAIL PROTECTED] wrote:
 Since there seems to be a bug with cvs checkouts (dies with:

  cvs [server aborted]: out of memory; can not allocate 2937909 bytes
  on x86 32-bit platforms,
  cvs [server aborted]: out of memory; can not reallocate 5242880 bytes
  on amd64 64-bit platforms and
  cvs [server aborted]: out of memory; can not reallocate 5242880 bytes
  on Windows CVS GUI clients)

  is there anywhere I can download a tarball of the latest snapshot?

  --
  Ed V.
  3 April 2008 14:28:24

  I gather, young man, that you wish to be a Member of Parliament.
   The first lesson that you must learn is, when I call for
  statistics about the rate of infant mortality, what I want is
  proof that fewer babies died when I was Prime Minister than when
  anyone else was Prime Minister.  That is a political statistic.
  - Sir Winston Leonard Spencer Churchill



Re: OpenBSD TV tuner

2008-04-03 Thread Jacob Meuser
On Fri, Apr 04, 2008 at 06:52:58AM +1030, Damon McMahon wrote:
 Greetings,
 
 Just wondering if anyone here is using/has used OpenBSD to view TV  
 and if so what hardware and software they use/d. I gather from  
 looking through the hardware and packages pages that a combined tuner/ 
 video capture device supported by bktr(4) and the fxtv package  
 imported from FreeBSD may work?

yeah, but fxtv is not very pleasant, IMO.  xawtv is a little better.
it's in ports too.

 I'm thinking of putting together a second-hand box in our kitchen as  
 a gift for my other half so any thoughts on minimum hardware specs  
 would be appreciated too.

fxtv doesn't use much cpu.  netither does xawtv.  but, if you use
xawtv, make sure the X driver for the video card has Xv(3).  I think,
most X drivers have Xv these days.  you don't need any special amount
of RAM or HD space/speed either.

I still prefer bktrplay + tunerctl from
http://jakemsr.trancell.org/bsdav-1.4.tar.gz for watching TV, but I
know those programs, since they are mine.  mainly, bktrplay has better
full-screen support, and has fewer artifact issues than either fxtv
or xawtv.  bktrplay uses Xv, and probably less resources than fxtv
and xawtv.  if you're crafty, wrap bktrplay + tunerctl in a gui for
your s.o.

-- 
[EMAIL PROTECTED]
SDF Public Access UNIX System - http://sdf.lonestar.org



Re: 4.3 /-current and xenocara

2008-04-03 Thread raven

Ed V. ha scritto:

Since there seems to be a bug with cvs checkouts (dies with:

cvs [server aborted]: out of memory; can not allocate 2937909 bytes
on x86 32-bit platforms,
cvs [server aborted]: out of memory; can not reallocate 5242880 bytes
on amd64 64-bit platforms and
cvs [server aborted]: out of memory; can not reallocate 5242880 bytes
on Windows CVS GUI clients)

is there anywhere I can download a tarball of the latest snapshot?


There you find an answer for cvs:
http://www.nabble.com/xenocara-CVS-out-of-memory-td16270970.html
And, you can use another cvs server, maybe was full the one you use.

Francesco



Re: OpenBSD TV tuner

2008-04-03 Thread Girish Venkatachalam
On 06:52:58 Apr 04, Damon McMahon wrote:
 Greetings,

 Just wondering if anyone here is using/has used OpenBSD to view TV and if 
 so what hardware and software they use/d. I gather from looking through the 
 hardware and packages pages that a combined tuner/video capture device 
 supported by bktr(4) and the fxtv package imported from FreeBSD may work?


fxtv has rough edges.

 I'm thinking of putting together a second-hand box in our kitchen as a gift 
 for my other half so any thoughts on minimum hardware specs would be 
 appreciated too.

mplayer can be used to watch television.

$ mplayer tv:// (along with a bunch of other params like frequency
table)

-Girish



selective state flush

2008-04-03 Thread Jeff Santos
Hi,

Suppose I have an anchor in PF that, when some condition
is met, is loaded with a set of block rules.

If the condition is met, the connections that were
open before these blcok rules were loaded to the
anchor are not dropped, correct?

If so, is there some way to selectively drop some
connections (flush some states)?

Thanks in advance.

Regards,

Jose

--
Want an e-mail address like mine?
Get a free e-mail account today at www.mail.com!



Re: selective state flush

2008-04-03 Thread Calomel
Jose,

Correct. If you load a block rule with an anchor or by hand, but the state
has already been made for a connection, the current state will not be
cleared. If you wanted to clear all states before you load the new rules
this could be done.

Selectively, you can use pfctl with the argument -k to drop connections
dependent on ip address. For example, If we wanted to drop all states from
any ip to our internal server at 10.10.10.22 we could execute:

pfctl -k 0.0.0.0/0 -k 10.10.10.22


Hope this helps.

  PF Config how to (pf.conf)
  http://calomel.org/pf_config.html

--
  Calomel @ http://calomel.org
  Open Source Research and Reference


On Thu, Apr 03, 2008 at 06:44:41PM -0500, Jeff Santos wrote:
Hi,

Suppose I have an anchor in PF that, when some condition
is met, is loaded with a set of block rules.

If the condition is met, the connections that were
open before these blcok rules were loaded to the
anchor are not dropped, correct?

If so, is there some way to selectively drop some
connections (flush some states)?

Thanks in advance.

Regards,

Jose

--
Want an e-mail address like mine?
Get a free e-mail account today at www.mail.com!



Re: OpenBSD TV tuner

2008-04-03 Thread Jacob Meuser
On Fri, Apr 04, 2008 at 12:19:27AM +0200, Louis V. Lambrecht wrote:
 TV is limited to the bktr driver, see man bktr
 In short TV cards with the bt848 or bt878 chip
 (and very early bt8x8 compatible conexant chips).
 CX23xxx will not work.

I've only seen conexant 878.  in old (10 years), and new (well, 2-3
years ago new in store) capture devices.

 
 There are two apps to watch TV,
 fbtv (needs some editing not explained clearly) and
 xawtv

fbtv actually works on OpenBSD?

 xawtv can further be hacked to allow the, imvho better, motv
 
 Mplayer and vlc also should work.

there's no bktr support in vlc.

 Damon McMahon wrote:
 Greetings,
 
 Just wondering if anyone here is using/has used OpenBSD to view TV and 
 if so what hardware and software they use/d. I gather from looking 
 through the hardware and packages pages that a combined tuner/video 
 capture device supported by bktr(4) and the fxtv package imported from 
 FreeBSD may work?
 
 I'm thinking of putting together a second-hand box in our kitchen as a 
 gift for my other half so any thoughts on minimum hardware specs would 
 be appreciated too.
 
 Cheers,
 Damon
 

-- 
[EMAIL PROTECTED]
SDF Public Access UNIX System - http://sdf.lonestar.org



Re: OpenBSD TV tuner

2008-04-03 Thread Girish Venkatachalam
On 22:06:32 Apr 03, Jacob Meuser wrote:
 
 http://jakemsr.trancell.org/bsdav-1.4.tar.gz 

Jake,

404 Not found.

Where do you have it?

I can't find it in your page either.

-Girish



Re: OpenBSD TV tuner

2008-04-03 Thread Jacob Meuser
On Fri, Apr 04, 2008 at 06:46:21AM +0530, Girish Venkatachalam wrote:
 On 22:06:32 Apr 03, Jacob Meuser wrote:
  
  http://jakemsr.trancell.org/bsdav-1.4.tar.gz 
 
 Jake,
 
 404 Not found.
 
 Where do you have it?
 

oops

http://jakemsr.trancell.org/distfiles/bsdav-1.4.tar.gz

-- 
[EMAIL PROTECTED]
SDF Public Access UNIX System - http://sdf.lonestar.org



Problem installing milter-spamd -setenv

2008-04-03 Thread Chris Bennett

I'm trying to install milter-spamd. The instructions say:
  # cd /usr/src/gnu/usr.sbin/sendmail
  # make clean cleandir
  # setenv WANT_LIBMILTER 1
  # make obj  make  make install

but setenv WANT_LIBMILTER 1 says:  
ksh: setenv: not found


How do I do this step successfully? using OpenBSD 4.0/i386

Thanks
Chris Bennett



Re: [Invitation] Almighty GOD never forsake his people @ Fri Apr 4 05:00 - 06:00 ()

2008-04-03 Thread Darrin Chandler
Dude! This is covered in the archives, FAQ, and man pages!

On Thu, Apr 03, 2008 at 08:59:56PM -0700, barthlomew uncle wrote:
 misc@openbsd.org, you are invited to
 
 Title:  Almighty GOD never forsake his people 
 Time: Fri Apr 4 05:00 - 06:00 (Timezone: Hawaii Time)
 Calendar: 
 Description:Almighty GOD never forsake  his people   
 
 A church of GOD built by white men collapse in the city of lagos for over a 
 year now two people
 died and many injured and since then we have been conducting our services 
 outside
 
 i the pastor incharge have traveled to many places and many churches looking 
 for help but no one seems to help ,i have tried all i can to make sure that 
 we does not stay outside but all my effort prove to nothing because the 
 church was very big and it is in a 
 swamppy area
 for my GOD never fail in HIS promise for HE told earlier to stop bothering 
 myself that a day will come HE will build HIS church HIMSELF ,and yesterday 
 when i was on the mountain praying GOD spoke to me and said the hour I told 
 you has come ,i said how, HE said that we will be in our church  before next 
 month and i said but next is very near ,HE said you little faith,I AM your 
 GOD speaking to somebody I have puting joy in his heart to build my church 
 for me and no matter how big is my church now is the hour i have choosen to 
 rebuild it He said i have giving you joy,wealth and every other thing you 
 need in this world and for your joy to be  complete in your life my people 
 are worshping me with tears,take them out of that situation and you will be 
 bless,remember my children who are surfering because of money and i will 
 remember you in heaven.
 
 my brother my sister or whoever that will recieve this message .The lord said 
 is a message to someone He love
 my brother my sister i the pastor of GOOD SHEPHARD CHURCH and my members 
 plead you to consider how long we have been in this condition,very painful i 
 must confess.and this have brought us to the last that whenever rain met us 
 during our service that come to the end of the service for the day .we have 
 work and we have pray but the Lord says this is the hour.
 my fellow  man my fellow woman in christ  i  the  pastor  of GOOD  SHEPHARD 
 CHURCH join hand with my  members and we pray that as you help us out of this 
  situation that heavenly blessings will never depart from your  family in 
 Jesus name Amen.thanks and never ignore this message.
 
 A message of GOD from rev pastor cheta moses to somebody HE have choosen.
 thanks and GOD bless you as you heartken to this vioce 
 our no +229 93 68 29 11
  our email address is [EMAIL PROTECTED]
 
 
 
 You can view this event at 
 http://www.google.com/calendar/event?action=VIEWeid=azJrMHBqdWM2ZmFwczkwbjRuODV0b3BwNW8gbWlzY0BvcGVuYnNkLm9yZwtok=MjYjYmFydGhsb21ld3VuY2xlM0BnbWFpbC5jb205M2ZkYTcwYzI2ZTljOTYyNWVjYjIxYjllYTVmNjYzMjQ5ZDY3Njhmctz=Pacific%2FHonoluluhl=en
 
 
 
 You are receiving this courtesy email at the account misc@openbsd.org because 
 you are an attendee of this event.
 
 To stop receiving future notifications for this event, decline this event. 
 Alternatively you can sign up for a Google Calendar account at 
 http://www.google.com/calendar/ and control your notification settings for 
 your entire calendar.
 
 [demime 1.01d removed an attachment of type application/ics which had a name 
 of invite.ics]
 

-- 
Darrin Chandler|  Phoenix BSD User Group  |  MetaBUG
[EMAIL PROTECTED]   |  http://phxbug.org/  |  http://metabug.org/
http://www.stilyagin.com/  |  Daemons in the Desert   |  Global BUG Federation