Re: Openbgpd in -current does not announce prefix
Since we discussed this offline, here for the record: The patch works fine for me, no problems during the last few days. Thanks, Christian
Re: NFS Failover Fails
Hi Tom, On Thu, Apr 24, 2008 at 1:50 AM, Tom Geman <[EMAIL PROTECTED]> wrote: > It is no secret that > when the nfsd goes down, it becomes a headache to umount the directories that > relay on this. Not sure how effective this might be, but have you tried using amd (automounter). man amd -- Best Regards Edd http://students.dec.bournemouth.ac.uk/ebarrett
faq15
Index: faq15.html === RCS file: /cvs/www/faq/faq15.html,v retrieving revision 1.47 diff -u -r1.47 faq15.html --- faq15.html 1 Mar 2008 11:31:08 - 1.47 +++ faq15.html 24 Apr 2008 08:45:07 - @@ -691,7 +691,7 @@ Do NOT ask beginner questions on the mailing lists like "How can I get the ports tree working?". If you have questions about the ports tree, it is assumed that you have -read the manual pages and this FAQ, and that you are able to work with it. +read the manual pages and this FAQ, and that you are able to work with it. -- see ya, giovanni
Re: carpnodes trouble
hi i try it today again just for one interface in this case. on host a: inet 10.90.5.202 255.255.255.0 10.90.1.255 \ carpdev em4 \ group management_if \ carpnodes 91:0,101:100 on host b: inet 10.90.5.202 255.255.255.0 10.90.1.255 \ group management_if \ carpdev em4 \ carpnodes 101:0,91:100 this works ! i can see the traffic on both interfaces and boxes. now i try to change the next carp interface on host a: inet 10.90.1.202 255.255.255.0 10.90.1.255 \ group management_if \ carpnodes 90:0,100:100 after the setup on the first box my whole network go's down. my question is can i do carp loadblanacing on a multiple carp box ( 5 carp interfaces ) ? is this the right way to do lb carp like i ahead described ? holger Holger Glaess schrieb: > hi > > i try today to use the ip loadbalancing feature of carp. > > basiclly there ist an working carp cluster with 5 carp interfaces on 2 > boxes. > > > on host a: > hostname.carp0 > inet 10.100.0.254 255.255.252.0 10.100.3.255 \ > vhid 25 pass office2world group lan_if > hostname.carp1 > inet 10.10.223.15 255.255.255.0 10.10.223.255 \ > vhid 15 pass office2world group wan_if > hostname.carp2 > inet 10.90.1.202 255.255.255.0 10.90.1.255 > vhid 90 pass manage2world group management_if > hostname.carp3 > inet 10.90.5.202 255.255.255.0 10.90.1.255 \ > carpdev em4 vhid 91 pass manage2world group management_if > hostname carp4 > inet 10.11.223.15 255.255.255.0 10.11.223.255 \ > carpdev em5 vhid 92 pass manage2world group an10-predmz > > the devices em4 and em5 have are no ip . > > on host b: > hostname.carp0 > inet 10.100.0.254 255.255.252.0 10.100.3.255 \ > group lan_if \ > pass office2world \ > vhid 25 \ > advskew 100 > hostname.carp1 > inet 10.10.223.15 255.255.255.0 10.10.223.255 \ > group wan_if \ > vhid 15 \ > advskew 100 \ > pass office2world > > hostname.carp2 > inet 10.90.1.202 255.255.255.0 10.90.1.255 \ > group management_if \ > vhid 90 \ > advskew 100 \ > pass manage2world > > hostname.carp3 > inet 10.90.5.202 255.255.255.0 10.90.1.255 \ > group management_if \ > carpdev em4 \ > vhid 91 \ > advskew 100 \ > pass manage2world > > hostname.carp4 > > inet 10.11.223.15 255.255.255.0 10.11.223.255 \ > group an10-predmz \ > vhid 92 \ > pass manage2world \ > advskew 100 \ > carpdev em5 > > now i try to what the document says i add the line on > host a > carpnodes 15:0,15:100 balancing ip > host b > carpnodes 15:100,15:0 balancing ip > > id did this for all vhid's > then i try to load the setup i got the error "ifconfig: SIOCSVH: Invalid > argument" if i delete the part after the , der error is gone but it > kills my network. > > > what did i wrong ? > what i miss understud the man page ? > > holger
usb hsdpa modem by qualcom
hello, i've got a USB modem that is a UMTS HSDPA device. when i plug it in, it appears as mass storage device: umass0 at uhub1 port 1 configuration 1 interface 0 "Qualcomm, Incorporated USB MMC Storage" rev 1.10/0.00 addr 2 umass0: using SCSI over Bulk-Only scsibus1 at umass0: 2 targets cd1 at scsibus1 targ 1 lun 0: SCSI2 5/cdrom removable that storage must be the one with drivers for windows. it is not accessible though: # disklabel cd1 disklabel: ioctl DIOCGDINFO: Input/output error # usbdevs shows: # usbdevs -vd Controller /dev/usb0: addr 1: high speed, self powered, config 1, EHCI root hub(0x), Intel(0x8086), rev 1.00 uhub0 port 1 powered port 2 powered port 3 powered port 4 powered port 5 powered port 6 powered Controller /dev/usb1: addr 1: full speed, self powered, config 1, UHCI root hub(0x), Intel(0x8086), rev 1.00 uhub1 port 1 addr 2: full speed, power 100 mA, config 1, USB MMC Storage(0x1000), Qualcomm, Incorporated(0x05c6), rev 0.00, iSerialNumber 0002 umass0 port 2 powered Controller /dev/usb2: addr 1: full speed, self powered, config 1, UHCI root hub(0x), Intel(0x8086), rev 1.00 uhub2 port 1 powered port 2 powered Controller /dev/usb3: addr 1: full speed, self powered, config 1, UHCI root hub(0x), Intel(0x8086), rev 1.00 uhub3 port 1 addr 2: full speed, self powered, config 1, Bluetooth by hp(0x0086), ACTIONTEC(0x049f), rev 8.02 ugen0 port 2 powered # any one knows anything about how to get these devices working? basic googling gives a linux discussions with references to an icon_switch.c, which does some binary magic thingies, like: memcpy(buf, "\x55\x53\x42\x43\x70\x6e\xde\x86\x00\x00\x00\x00\x00\x00\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 0x01f); ret = usb_bulk_write(devh, 0x0005, buf, 0x01f, 1000); if (ret >= 0 ) printf("Device change command successfully sent. Box probably switched.\nLook at /var/log/syslog for result ... Bye\n\n"); else printf("Device change command returned error %d", ret); thanks!
Re: Sendmail OpenBSD performance
Morris, Roy wrote: I know this is not exactly a OpenBSD question but I am wondering if anyone can give me a sense of the performance/limitations of sendmail? Basically I have a machine that sends out 20,000 mails a day and once and a while the application sending emails for delivery complains that it has to wait for sendmail. I go and check the sendmail machine and it's hardly even breathing hard. Almost no cpu usage, memory fine blah blah .. I am not convinced this is a problem with sendmail, just looking for some feedback from anyone doing volume email on openbsd. cheers Roy What I do always recpomend to people using sendmail for mass mailing (that is having large mailing lists :) ) is to use smtpsend external smtp mailer. it scales much better. Also I would recommend you to use -odq and separate queue runner process. -- With best regards, Gregory Edigarov
Re: Problems reading CD during install
Wade, Daniel wrote: > The installer can't mount the cd to read the files from it. I'm using a > recent install43.iso. I'll try to use ftp for the install sets, but it would > be nice if I could do it all from the CD. > > Here is what I get if I try to mount the CD > > cd0(ahci0:1:0): Check Condition (error 0x70) on opcode 0x8 > SENSE KEY: Illegal Request > cd0(ahci0:1:0): Check Condition (error 0x70) on opcode 0x8 > SENSE KEY: Illegal Request > cd0(ahci0:1:0): Check Condition (error 0x70) on opcode 0x8 > SENSE KEY: Illegal Request My first reaction: Looks like a bad media, a bad drive, or a bad burner used to create the disk. Do you have any reason to believe otherwise? Looks like a SATA DVD ROM drive attached to an ahci controller, which is kinda new stuff (at least for me! :), so I'm not going to say there ISN'T an OpenBSD problem, at least until I get some better HW in production here to try it, but I'd certainly start with the obvious. Nick.
Freeze during boot after recent upgrade (amd64 -current)
Hi! After upgrading my system, which runs amd64 -CURRENT, to the latest snapshot yesterday it freezes during boot after showing the message: "setting tty flags". The last time I upgraded before this was just after WPA support was available, so something must have happened between these two moments. I upgraded my config under /etc using mergemaster. Normally I run GENERIC.MP but I tested with GENERIC and it yielded the same results. Is any aware of what might be going wrong? Best regards, Jona
Re: Problems reading CD during install
On Thu, Apr 24, 2008 at 07:02:17AM -0400, Nick Holland wrote: > Wade, Daniel wrote: > > The installer can't mount the cd to read the files from it. I'm using a > > recent install43.iso. I'll try to use ftp for the install sets, but it > > would > > be nice if I could do it all from the CD. > > > > Here is what I get if I try to mount the CD > > > > cd0(ahci0:1:0): Check Condition (error 0x70) on opcode 0x8 > > SENSE KEY: Illegal Request > > cd0(ahci0:1:0): Check Condition (error 0x70) on opcode 0x8 > > SENSE KEY: Illegal Request > > cd0(ahci0:1:0): Check Condition (error 0x70) on opcode 0x8 > > SENSE KEY: Illegal Request > > My first reaction: Looks like a bad media, a bad drive, or a bad > burner used to create the disk. > Do you have any reason to believe otherwise? > > Looks like a SATA DVD ROM drive attached to an ahci controller, > which is kinda new stuff (at least for me! :), so I'm not going > to say there ISN'T an OpenBSD problem, at least until I get some > better HW in production here to try it, but I'd certainly start > with the obvious. > > Nick. > opcode 0x8 seems to be a six byte READ command. The device may only be amenable to 10 byte READ commands. Easy to test if you can compile up a new install media. If you can, let me know and I'll send you a diff. Ken
update openbsd
how can we update openBSD system for vuneralbility tell me steps to update system security regularly - Anil Saini M.E. - Software Systems B.E. - Electronics and Communication Project Assistant CISCO LAB Information Processing Center Unit BITS-PILANI -- View this message in context: http://www.nabble.com/update-openbsd-tp16850200p16850200.html Sent from the openbsd user - misc mailing list archive at Nabble.com.
Re: MS and OpenBSD interportability, a lil list with "patented" and non patented protocols
On Wed, Apr 23, 2008 at 09:48:30AM +0200, [EMAIL PROTECTED] wrote: > I recently read about MS and there's a Blog wich claims (it includes a > list) that like 80% of all MS server protocols are not patented right now. > > This, if true, could propably handy for some developers or anybody else to > maybe improve the integration of oBSD into MS networks. This is unimportant and unworthy of serious attention. Professionals -- actual, real, live professionals, not mere ignorant newbies with strings of worthless certifications after their names -- don't use Microsoft products. ---Rsk
Re: Sendmail OpenBSD performance
On Wed, Apr 23, 2008 at 11:18:34AM -0400, Morris, Roy wrote: > I know this is not exactly a OpenBSD question but I am wondering if anyone > can give me a sense of the performance/limitations of sendmail? Basically > I have a machine that sends out 20,000 mails a day and once and a while > the application sending emails for delivery complains that it has to > wait for sendmail. I go and check the sendmail machine and it's hardly > even breathing hard. Almost no cpu usage, memory fine blah blah .. > > I am not convinced this is a problem with sendmail, just looking for > some feedback from anyone doing volume email on openbsd. Many MTA performance problems of this nature are not the related to the MTA per se, but to DNS. So much so, that it's become nearly a SOP to thoroughly check DNS function and performance before looking at the MTA. That may or may not be your problem, but it's certainly a good place to start looking. Should it turn out to be the case, one simple mitigating strategy is to enable BIND on the sendmail machine (in recursive, caching mode but answering local queries only) and set the resolver on it to use that instance of BIND. If you're sending to the domains on a regular basis, the cache will become and remain populated with most of the DNS information required, which should boost query response. ---Rsk
Re: update openbsd
Le Thu, 24 Apr 2008 04:58:15 -0700 (PDT), Anil Saini <[EMAIL PROTECTED]> a icrit : > how can we update openBSD system for vuneralbility > > tell me steps to update system security regularly You can follow -stable branch: http://openbsd.org/faq/faq5.html#Flavors - Nicolas.
Re: update openbsd
On Thu, 24 Apr 2008 04:58:15 -0700 (PDT), Anil Saini wrote > how can we update openBSD system for vuneralbility > > tell me steps to update system security regularly http://www.openbsd.org/errata42.html http://www.openbsd.org/stable.html http://www.openbsd.org/faq/faq5.html#Flavors
Re: Freeze during boot after recent upgrade (amd64 -current)
On 2008-04-24, Jona Joachim <[EMAIL PROTECTED]> wrote: > Hi! > After upgrading my system, which runs amd64 -CURRENT, to the latest > snapshot yesterday it freezes during boot after showing the message: > "setting tty flags". > The last time I upgraded before this was just after WPA support was > available, so something must have happened between these two moments. > I upgraded my config under /etc using mergemaster. > Normally I run GENERIC.MP but I tested with GENERIC and it yielded the > same results. > > Is any aware of what might be going wrong? > > Best regards, > Jona > > Serial or vga console?
Re: update openbsd
Hello, I'm a dummy in this mailing list but I think that I have an anwser : In the security section you have everything explained as follow -> http://www.openbsd.org/errata42.html. Just download the patch archive and do a `cat` on them if you want to know how to apply them. Cordialy PS : Fish Bites On Thu, 24 Apr 2008 04:58:15 -0700 (PDT), Anil Saini <[EMAIL PROTECTED]> wrote: > how can we update openBSD system for vuneralbility > > tell me steps to update system security regularly > > > - > Anil Saini > M.E. - Software Systems > B.E. - Electronics and Communication > > Project Assistant > CISCO LAB > Information Processing Center Unit > BITS-PILANI > -- Martial NDEKO-FOLLIGAN GSM : +33 6 88 70 78 95
Re: Sendmail OpenBSD performance
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Rich Kulawiec Sent: Thursday, April 24, 2008 6:57 AM To: misc@openbsd.org Subject: Re: Sendmail OpenBSD performance On Wed, Apr 23, 2008 at 11:18:34AM -0400, Morris, Roy wrote: > I know this is not exactly a OpenBSD question but I am wondering if anyone > can give me a sense of the performance/limitations of sendmail? Basically > I have a machine that sends out 20,000 mails a day and once and a while > the application sending emails for delivery complains that it has to > wait for sendmail. I go and check the sendmail machine and it's hardly > even breathing hard. Almost no cpu usage, memory fine blah blah .. > > I am not convinced this is a problem with sendmail, just looking for > some feedback from anyone doing volume email on openbsd. >>Many MTA performance problems of this nature are not the related to >>the MTA per se, but to DNS. So much so, that it's become nearly a >>SOP to thoroughly check DNS function and performance before looking >>at the MTA. Yes, thanks I have stats running on the DNS server and dedicated bind server on each mail machine, which I would have thought plenty of horse power. >>That may or may not be your problem, but it's certainly a good place >>to start looking. Should it turn out to be the case, one simple >>mitigating strategy is to enable BIND on the sendmail machine >>(in recursive, caching mode but answering local queries only) and >>set the resolver on it to use that instance of BIND. If you're >>sending to the domains on a regular basis, the cache will become >>and remain populated with most of the DNS information required, >>which should boost query response. >>---Rsk Thanks for your input, Roy
[Boarderline OT] Re: MS and OpenBSD interportability, a lil list with "patented" and non patented protocols
On 23/04/2008, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > This, if true, could propably handy for some developers or anybody else to > maybe improve the integration of oBSD into MS networks. You can already fully emulate/replace Windows Primary Domain Controllers (and Backup DCs, and member servers) with OpenBSD, and interoperate with Windows servers: http://www.kernel-panic.it/openbsd/pdc/ Btw., I heartily recommend Kernel Panic. It is a very nice site, with a cool OpenBSD section: http://www.kernel-panic.it/openbsd.html What Samba AFAIK still cannot currently do is fully replace/emulate Windows Active Directory Domain Controllers. It can interoperate in an AD network, and even AD DC functionality is *partially* implemented, but the work remains incomplete. (Cf. http://samba.org/samba/news/articles/abartlet_thesis.pdf -- 3 years old, but AFAIK still essentially correct.) That said, IMHO there are less things wrong with using an OpenBSD/Samba-based NT4-style PCD/BDC domain than there are with using a Windows server-based AD domain. I once had to rebuild a compromised Windows Server 2003 AD DC. The trouble was, with the preexisting backups (and out-of-the-box backup solutions), there didn't seem to be a way to wipe and reinstall the machine without losing the entire domain. So we wiped the box and reinstalled Windows Server 2003, and promoted the thing to an AD DC again, and even after restoring the backups found that we had to remove every single client from its old domain and add it to the new one, because the AD DC still considered itself master of a new domain and even with the backed up data, there was no way to convince it to take over as the master of the old one. On top of that, all file shares were screwed, because there were now new GUIDs involved, and because the Windows boxen had had server based profiles, no one could log on even after we fixed the above. After manually applying permissions (which in Windows Server 2003) still aren't properly propagated/applied throughout all subfolders, which thus all need to be checked as well), it still barfed, and every single user had to create an entirely new profile and manually copy desired settings from the old to the new profile. In summary: Windows AD networks don't just suck, they deep-throat. If there's any possibility that all of your AD DCs may get compromised simultaneously, and unless you have a *strongly* Windows Server-quirk-aware backup/restore solution that can fully restore AD DCs (and I'm not aware of any), then you're really gambling your entire network. If you have a choice, wait till Samba becomes fully AD interoperable and in the meantime use OpenBSD/Samba PDCs, BDCs, and member servers. The above link should help you with that. Thanks and regards, --ropers
Re: Freeze during boot after recent upgrade (amd64 -current)
Le Thu, 24 Apr 2008 12:33:32 +, Stuart Henderson a C)critB : > On 2008-04-24, Jona Joachim <[EMAIL PROTECTED]> wrote: >> Hi! >> After upgrading my system, which runs amd64 -CURRENT, to the latest >> snapshot yesterday it freezes during boot after showing the message: >> "setting tty flags". >> The last time I upgraded before this was just after WPA support was >> available, so something must have happened between these two moments. I >> upgraded my config under /etc using mergemaster. Normally I run >> GENERIC.MP but I tested with GENERIC and it yielded the same results. >> >> Is any aware of what might be going wrong? >> >> Best regards, >> Jona >> >> >> > Serial or vga console? VGA. This is on a Thinkpad T60 laptop, I don't have a serial interface. Also I didn't touch the default tty configuration.
Re: Sendmail OpenBSD performance
On Thu, Apr 24, 2008 at 09:17:50AM -0400, Morris, Roy wrote: > Yes, thanks I have stats running on the DNS server and dedicated bind > server on each mail machine, which I would have thought plenty of horse > power. Okay, then maybe it's not DNS. The next step might be to check your sendmail logs to see if you're bumping into various configurable limits. There are quite a few of them; common ones (using sendmail config file nomenclature) are: BAD_RCPT_THROTTLE CONNECTION_RATE_THROTTLE MAX_DAEMON_CHILDREN QUEUE_LA DELAY_LA REFUSE_LA Most of these are probably not in play (e.g. BAD_RCPT_THROTTLE tends to only kick in if you're getting dictionary-attacked) but it's possible that one of the load-average-sensitive limits (_LA) is, or perhaps the process limit is. This is of course another shot-in-the-dark guess, so it may well be wrong too. ;-) ---Rsk
OLPC
I saw this today and thought I'd share. It took me back to Theo's email[1] from a number of years ago about using the closed drivers by Marvell: * Ironically, the majority of the system-level problems we had experienced are directly tied to the two proprietary code bases on the laptop: the wireless firmware and the embedded controller firmware. While there are efforts to replace these, OLPC itself has been diligently working with both Marvell and Quanta to make the best of the situation. To suggest that fundamentalism has impeded progress on those two subsystems is not correct.[2] Thought some of you would be interested in that nugget. [1]: http://marc.info/?l=openbsd-misc&m=116007094304009&w=2 [2]: http://lists.laptop.org/pipermail/devel/2008-April/013067.html -- # Curt Micol
openssh and hideversion.patch
On Wed, Apr 23, 2008 at 3:44 AM, Theo de Raadt <[EMAIL PROTECTED]> wrote: > In around 1988 there were some people left who still believed in > version string 'problems', but it is 20 years later, and it was not an > issue then and it is not an issue now, so get a grip. > > Instead we try to get the code right, and we stop fucking around with > the theory that an attacker will look at our version string and then > attack just that. Attackers don't. They throw every attack at > everything, version string or not. > > That diff you are passing around is the same old uneducate bullshit > passed around by false security practitioners. > > Hacking Source Code to Hide Version Number of Software = I don't believe in hiding version numbers to thwart attackers. The right way to thwart attackers to keep the software updated by patching. If your software is not patched it will be cracked into by the attacker which ever version number you show him. I write this mail because I stumbled upon http://www.amazon.com/Anti-Hacker-Tool-Second-Mike-Shema/dp/0072230207/ref=pd_bbs_sr_3?ie=UTF8&s=books&qid=1209047502&sr=8-3 and was going through it. In chapter 1 where netcat is introduced ( 16th page of Indian Edition ) there is a **NOTE** for System Administrators. It is as follows. "System Administrators can go as far as hacking the source code to change these type of banners to give false information. it is a **great way** to make the hacker wonder if he can actually trust the information he is receiving" And no warning is given about the dangerous things that can be caused as in this case SSH by doing that. Perhaps it is such books and articles that still gives the false feeling of security to people who think it is a great Idea. I kept he heading so that anybody searching google "ways to patch the source code to change the version number" might stumble upon this thread and learn how dangerous it is. Thanks --Siju
umsm
hello, i've had in my hands for a few hours this usb hsdpa modem http://cgi.ebay.it/Modem-USB-Momo-Design-UMTS-GPRS,-HSDPA-fino-a-7.2-Mbps_W0QQitemZ250233113933QQcmdZViewItem and as usual and I gave it a try. At first it was recognized as ugen but VID & PID gave me the right direction Controller /dev/usb1: addr 1: full speed, self powered, config 1, UHCI root hub(0x), Intel(0x8086), rev 1.00 uhub1 port 1 addr 2: full speed, power 500 mA, config 1, H3G USB HSDPA Modem(0x6000), H3G , Incorporated(0x05c6), rev 0.00 ugen0 port 2 powered Index: usbdevs === RCS file: /cvs/src/sys/dev/usb/usbdevs,v retrieving revision 1.348 diff -u -r1.348 usbdevs --- usbdevs 13 Apr 2008 19:41:29 - 1.348 +++ usbdevs 24 Apr 2008 15:26:51 - @@ -2227,6 +2227,7 @@ product QUALCOMM MSM_MODEM 0x3196 CDMA MSM modem product QUALCOMM2 MSM_PHONE0x6000 CDMA MSM phone product QUALCOMM MSM_HSDPA 0x6613 HSDPA MSM +product QUALCOMM MSM_HSDPA20x6000 HSDPA MSM product QUALCOMM3 CDMA_MSM 0x0001 CDMA Technologies MSM modem /* Quickshot products */ Index: umsm.c === RCS file: /cvs/src/sys/dev/usb/umsm.c,v retrieving revision 1.20 diff -u -r1.20 umsm.c --- umsm.c 19 Feb 2008 10:57:48 - 1.20 +++ umsm.c 24 Apr 2008 15:28:47 - @@ -67,6 +67,7 @@ { USB_VENDOR_NOVATEL, USB_PRODUCT_NOVATEL_XU870 }, { USB_VENDOR_NOVATEL, USB_PRODUCT_NOVATEL_ES620 }, { USB_VENDOR_QUALCOMM, USB_PRODUCT_QUALCOMM_MSM_HSDPA }, + { USB_VENDOR_QUALCOMM, USB_PRODUCT_QUALCOMM_MSM_HSDPA2 }, { USB_VENDOR_SIERRA,USB_PRODUCT_SIERRA_EM5625 }, { USB_VENDOR_SIERRA,USB_PRODUCT_SIERRA_AIRCARD_580 }, { USB_VENDOR_SIERRA,USB_PRODUCT_SIERRA_AIRCARD_595 }, [...] umsm0 at uhub1 port 1 "H3G , Incorporated H3G USB HSDPA Modem" rev 1.10/0.00 addr 2 ucom0 at umsm0 portno 0 [...] I've surfed a bit and it seems to work well -- see ya, giovanni
Re: install43.iso hangs....any ideas?
Anybody hit this error below? Thanks vatocleti wrote: > > Hey all, > I have a usb attached CD/DVD and I have tried install42.iso and > install43.iso and they both hang. > > - I have enabled "AHCI" in the bios > - also, from "boot -c" I have done "enable acpi" > > and it hangs in the following location (sorry I can't attach the complete > dmesg, I can't connect to the com port) > > *** > usb4 at uhci3: USB revision 1.0 > uhub4 at usb4 "Intel UHCI root hub" rev 1.00/1.00 addr 1 > isa0 at mainbus0 > com0 at isa0 port 0x3f8/8 irq 4: ns8250, no fifo > com0: console > com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo > pckbc0 at isa0 port 0x60/5 > pckbd0 at pckbc0 (kbd slot) > pckbc0: using irq 1 for kbd slot > wskbd0 at pckbd0: console keyboard, using wsdisplay0 > > > I have a keyboard and the CD/DVD attached to the USB hub where the live CD > is trying to boot from. > > > -- > View this message in context: > http://www.nabble.com/install43.iso-hangsany-ideas--tp16828971p16828971.html > Sent from the openbsd user - misc mailing list archive at Nabble.com. > > > -- View this message in context: http://www.nabble.com/install43.iso-hangsany-ideas--tp16846607p16851015.html Sent from the openbsd user - misc mailing list archive at Nabble.com.
Re: install43.iso hangs....any ideas?
Am 23.04.2008 um 03:29 schrieb vatocleti: I have a usb attached CD/DVD and I have tried install42.iso and install43.iso and they both hang. I don't remember at which stage boot hangs with my old Dell Poweredge 1650 Systems, but this options works for me: > boot -c UKC> disable apm UKC> disable acpi Falk
transparent firewall doesn't filter anything
Hi, I apologize for my English, it's not native my language. I'm a new BSD user, I have been looking for information about my problem on internet (google, manuals, ...) and I haven't found the solucion. i hope you can help me. I'm installing a transparent (bridge) firewall with OpenBSD. The machine has 4 network interfaces, 2 interfeces are copper intel/Pro1000MT and the other two are optical fiber Intel/Pro1000MF (one is SX and the other is LX). I want to use the fiber interfaces for the bridge firewall and copper interfaces for firewall administration. The problem is that the bridge doesn't filter anything. I tried to put rules that block everything but only filter administration interfaces. The trafic still go through the bridge. I've installed OpenBSD4.2, it detects all 4 interfaces (em0->fiberSX->internal network, em1->fiberLX->Internet, em2 and em3 are copper administration interfaces). Those are my configuration files: # more /etc/hostname.em0 up # more /etc/hostname.em1 up # more /etc/hostname.em3 inet aaa.bbb.ccc.ddd 255.255.255.128 NONE # more /etc/bridgename.bridge0 add em0 add em1 up # more /etc/mygate At the moment I don't use em2. /etc/mygate is void because administration connection is using a crossover cable. Those are my rules. If I remove the last rule, the administration interface blocks but the traffic still go through the bridge. Anybody could tell me what I'm doing wrong? # pfctl -s rules block drop in all block drop in quick on em0 all block drop in quick on em1 all block drop in quick on bridge0 all block drop out quick on em0 all block drop out quick on em1 all block drop out quick on bridge0 all pass in quick on em3 all flags S/SA keep state This is dmesg result: # dmesg OpenBSD 4.2 (GENERIC) #375: Tue Aug 28 10:38:44 MDT 2007 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel(R) Xeon(TM) CPU 3.20GHz ("GenuineIntel" 686-class) 3.20 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR real mem = 2146795520 (2047MB) avail mem = 2068230144 (1972MB) mainbus0 at root bios0 at mainbus0: AT/286+ BIOS, date 09/22/05, BIOS32 rev. 0 @ 0xffe90, SMBIOS rev. 2.3 @ 0xf9920 (87 entries) bios0: vendor Dell Computer Corporation version "A04" date 09/22/2005 bios0: Dell Computer Corporation PowerEdge 1850 pcibios0 at bios0: rev 2.1 @ 0xf/0x1 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfb140/272 (15 entries) pcibios0: PCI Interrupt Router at 000:31:0 ("Intel 82801EB/ER LPC" rev 0x00) pcibios0: PCI bus #9 is the last bus bios0: ROM list: 0xc/0xb000! 0xcb000/0x1000 0xcc000/0x1000 0xcd000/0x2200 0xec000/0x4000! acpi at mainbus0 not configured ipmi0 at mainbus0: version 1.5 interface KCS iobase 0xca8/8 spacing 4 cpu0 at mainbus0 pci0 at mainbus0 bus 0: configuration mode 1 (no bios) pchb0 at pci0 dev 0 function 0 "Intel E7520 MCH" rev 0x09 ppb0 at pci0 dev 2 function 0 "Intel MCH PCIE" rev 0x09 pci1 at ppb0 bus 1 ppb1 at pci1 dev 0 function 0 "Intel IOP332 PCIE-PCIX" rev 0x06 pci2 at ppb1 bus 2 em0 at pci2 dev 12 function 0 "Intel PRO/1000MF (82545GM)" rev 0x04: irq 10, address 00:04:23:ad:55:77 ami0 at pci2 dev 14 function 0 "Dell PERC 4e/Di" rev 0x06: irq 7 ami0: Dell 16c, 32b, FW 521S, BIOS vH430, 256MB RAM ami0: 1 channels, 0 FC loops, 1 logical drives scsibus0 at ami0: 40 targets sd0 at scsibus0 targ 0 lun 0: SCSI2 0/direct fixed sd0: 34680MB, 4421 cyl, 255 head, 63 sec, 512 bytes/sec, 71024640 sec total scsibus1 at ami0: 16 targets safte0 at scsibus1 targ 6 lun 0: SCSI2 3/processor fixed ppb2 at pci1 dev 0 function 2 "Intel IOP332 PCIE-PCIX" rev 0x06 pci3 at ppb2 bus 3 em1 at pci3 dev 11 function 0 "Intel PRO/1000MF (82545GM)" rev 0x04: irq 3, address 00:04:23:c8:75:db ppb3 at pci0 dev 4 function 0 "Intel MCH PCIE" rev 0x09 pci4 at ppb3 bus 4 ppb4 at pci0 dev 5 function 0 "Intel MCH PCIE" rev 0x09 pci5 at ppb4 bus 5 ppb5 at pci5 dev 0 function 0 "Intel PCIE-PCIE" rev 0x09 pci6 at ppb5 bus 6 em2 at pci6 dev 7 function 0 "Intel PRO/1000MT (82541GI)" rev 0x05: irq 11, address 00:14:22:21:6a:22 ppb6 at pci5 dev 0 function 2 "Intel PCIE-PCIE" rev 0x09 pci7 at ppb6 bus 7 em3 at pci7 dev 8 function 0 "Intel PRO/1000MT (82541GI)" rev 0x05: irq 3, address 00:14:22:21:6a:23 ppb7 at pci0 dev 6 function 0 "Intel MCH PCIE" rev 0x09 pci8 at ppb7 bus 8 uhci0 at pci0 dev 29 function 0 "Intel 82801EB/ER USB" rev 0x02: irq 11 uhci1 at pci0 dev 29 function 1 "Intel 82801EB/ER USB" rev 0x02: irq 10 uhci2 at pci0 dev 29 function 2 "Intel 82801EB/ER USB" rev 0x02: irq 7 ehci0 at pci0 dev 29 function 7 "Intel 82801EB/ER USB2" rev 0x02: irq 5 usb0 at ehci0: USB revision 2.0 uhub0 at usb0: Intel EHCI root hub, rev 2.00/1.00, addr 1 ppb8 at pci0 dev 30 function 0 "Intel 82801BA AGP" rev 0xc2 pci9 at ppb8 bus 9 vga1 at pci9 dev 13 function 0 "ATI Radeon VE QY" rev 0x00 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5
Re: Freeze during boot after recent upgrade (amd64 -current)
Le Thu, 24 Apr 2008 13:17:37 +, Jona Joachim a C)critB : > Le Thu, 24 Apr 2008 12:33:32 +, Stuart Henderson a C)critB : > >> On 2008-04-24, Jona Joachim <[EMAIL PROTECTED]> wrote: >>> Hi! >>> After upgrading my system, which runs amd64 -CURRENT, to the latest >>> snapshot yesterday it freezes during boot after showing the message: >>> "setting tty flags". >>> The last time I upgraded before this was just after WPA support was >>> available, so something must have happened between these two moments. >>> I upgraded my config under /etc using mergemaster. Normally I run >>> GENERIC.MP but I tested with GENERIC and it yielded the same results. >>> >>> Is any aware of what might be going wrong? >>> >>> Best regards, >>> Jona >>> >>> >>> >> Serial or vga console? > > VGA. This is on a Thinkpad T60 laptop, I don't have a serial interface. > Also I didn't touch the default tty configuration. The error is triggered by: ttyflags -a in /etc/rc. The machine boots up normally if I comment out this line. If I issue the command after having booted successfully I can reproduce the freeze. Let me know if you need further information.
Re: mrxvt and ksh issue
Hi, thanks for your info. If I do the exit command on every tab, this thing doesn't happens, its directly related with the key combination Ctrl+Alt+Backspace but I still think this is a buggy behaviour ( in my opinion) and such thing should be solved. To not get this in mind I moved to use rxvt and urxvt :S I know it's not the solution but these zombie processes wich make me unable to halt the machine are really disturbing to me. Jesus- Clint Pachl escribis: Jesus Sanchez wrote: Hi, I'm using 4.2. I'm using 4.1. I have installed from ports the program mrxvt it works well as people say but I have (I believe) found a buggy behaviour when using mrxvt and ksh (the OpenBSD one). I launch startx (with fvwm2 and mrxvt on my .xinitrc) as a regular user (it's in the wheel group) and then I open a few tabs on mrxvt (3 or 4), then I close X with Ctrl+Alt+Backspace and I found with 'ps -ax' that the ksh opened with mrxvt (ttyp0, ttyp1, and more) are still running, not mrxvt. I am also using fvwm2, but I use xdm instead of startx. I used to have the same problem you describe and I can't remember what I did to fix it. In my ~/.Xdefaults I have the line: mrxvt.macro.Primary+Ctrl+W: Close 0 I only have that because it matches the shortcut to close a tab in my Seamonkey browser. Also, I'm not sure if I installed from ports. OpenBSD didn't have an mrxvt port for quite awhile so I always compiled my own. Here are the characteristics of my current mrxvt: [EMAIL PROTECTED] mrxvt -h Mrxvt v0.5.2 Options: XPM,Jpeg,PNG,transparent,fade,tint,utmp,menubar,XIM, scrollbars=rxvt+NeXT+xterm+sgi+plain,xft,frills,linespace,selectionscrolling, 256colour,cursorBlink,pointerBlank,session management,Resources When I try to kill them this doesn't works and ps return the "Is+" STATE I get 0wn3d and then try (as root) kill -9 and still doesn't works, ps returns "IEs+" STATE. Even If I have to power off the computer with 'halt -p' these ksh sessions make it imposible, I have to use 'halt -p -q'. What happens when you type the exit command instead of using the keyboard shortcut to close a tab/terminal? I wish I could remember what I did to fix the problem, but I also found this interesting line in my ~/.Xdefaults that may help: mrxvt.holdExit: 0x00 This stuff doesn't happends with tcsh and mrxvt. And also if I use rxvt instead of mrxvt this also doesn't happends with ksh. I have not added my dmesg or something else because I really don't know if it's necessary. You may also want to try the mrxvt mailing lists. I'm subscribed and they seem very active. The lead developer is top notch. -pachl
phpxs apache root?
Should there not be an option to specify apache root directory for phpxs, or did I miss it? Looked at the code, but it's not clear where phpxs is getting the directory from. Lee
ntfs usb drive fail to mount
I have an NTFS drive attached via USB that was previously attached to an XP home system I am trying to now attach this drive to my OpenBSD server I get the following error however im unsure what im doing wrong also, why does it show as a scsi device, its a pata drive in a usb enclosure? I created a very small partition from some remaining space and made it ffs, that partition works and will mount no problem, it seems to be filesystem specific THank you Lawrence # mount -t ntfs -r /dev/sd0i /mnt/usb2 mount_ntfs: /dev/sd0i on /mnt/usb2: Operation not supported # disklabel sd0 disklabel: warning, DOS partition table with no valid OpenBSD partition # /dev/rsd0c: type: SCSI disk: SCSI disk label: 2A flags: bytes/sector: 512 sectors/track: 63 tracks/cylinder: 255 sectors/cylinder: 16065 cylinders: 36481 total sectors: 586072368 rpm: 3600 interleave: 1 trackskew: 0 cylinderskew: 0 headswitch: 0 # microseconds track-to-track seek: 0 # microseconds drivedata: 0 16 partitions: #size offset fstype [fsize bsize cpg] a: 5103586067265 4.2BSD 2048 163841 c:5860723680 unused 0 0 i:586067202 63 unknown # Apr 24 11:43:40 fire /bsd: umass0 detached Apr 24 11:43:43 fire /bsd: umass0 at uhub0 port 1 configuration 1 interface 0 Apr 24 11:43:43 fire /bsd: Apr 24 11:43:43 fire /bsd: umass0: Cypress Semiconductor Cypress AT2LP, rev 2.00/2.40, addr 2 Apr 24 11:43:43 fire /bsd: umass0: using SCSI over Bulk-Only Apr 24 11:43:43 fire /bsd: scsibus1 at umass0: 2 targets Apr 24 11:43:43 fire /bsd: sd0 at scsibus1 targ 1 lun 0: SCSI0 0/direct fixed Apr 24 11:43:43 fire /bsd: sd0: 286168MB, 36481 cyl, 255 head, 63 sec, 512 bytes/sec, 586072368 sec total -- -Lawrence
Re: ntfs usb drive fail to mount
--- Lord Sporkton [Thu, Apr 24, 2008 at 02:32:37PM -0700]: ---7 > I have an NTFS drive attached via USB that was previously attached to > an XP home system [ ... ] > # mount -t ntfs -r /dev/sd0i /mnt/usb2 > mount_ntfs: /dev/sd0i on /mnt/usb2: Operation not supported you don't say if7you're using a GENERIC kernel or not, but from: http://www.openbsd.org/faq/faq14.html#foreignfs > Once you have determined which partition it is you want to use, you can > move to the final step: mounting the filesystem contained in it. Most > filesystems are supported in the GENERIC kernel: just have a look at the > kernel configuration file, located in the /usr/src/sys/arch//conf > directory. However, some are not, e.g. the NTFS support is experimental > and therefore not included in GENERIC. If you want to use one of the > filesystems not supported in GENERIC, you will need to build a custom > kernel.
Disabling IPv6 ?
How can I disable IPv6 in openbsd 4.x (3 - in my case) without recompiling kernel? I have a strange issue where when I try to install symon utility using ports, it fails with message: >> Fetch ftp://ftp.freebsd.org/pub/FreeBSD/distfiles//jpegsrc.v6b.tar.gz . Trying 2001:4f8:0:2::e... ftp: connect to address 2001:4f8:0:2::e: No route to host Trying 2001:6c8:6:4::7... I don't know why I am seeing Ipv6 address there. Maybe the DNS server is returning this IPv6 address but my os or app (ports in this case) has to be querying for an IPv6 record?? don't know. Any help is highly appreciated. Thanks!
Re: ntfs usb drive fail to mount
My appologies, i am indeed using GENERIC, I did think that perhaps it did not support ntfs, but then i also thought it would be rather absent minded to have included mount_ntfs if support was not included, thus since i had mount_ntfs, i assumed i had support for it. I will look into adding ntfs support to my kernel On 24/04/2008, jmc <[EMAIL PROTECTED]> wrote: > --- Lord Sporkton [Thu, Apr 24, 2008 at 02:32:37PM -0700]: ---7 > > > I have an NTFS drive attached via USB that was previously attached to > > an XP home system > > > [ ... ] > > > > # mount -t ntfs -r /dev/sd0i /mnt/usb2 > > mount_ntfs: /dev/sd0i on /mnt/usb2: Operation not supported > > > you don't say if7you're using a GENERIC kernel or not, but from: > > http://www.openbsd.org/faq/faq14.html#foreignfs > > > Once you have determined which partition it is you want to use, you can > > move to the final step: mounting the filesystem contained in it. Most > > filesystems are supported in the GENERIC kernel: just have a look at the > > kernel configuration file, located in the /usr/src/sys/arch//conf > > directory. However, some are not, e.g. the NTFS support is experimental > > and therefore not included in GENERIC. If you want to use one of the > > filesystems not supported in GENERIC, you will need to build a custom > > kernel. > > -- -Lawrence
Re: ntfs usb drive fail to mount
On 2008-04-24, Lord Sporkton <[EMAIL PROTECTED]> wrote: > I get the following error however im unsure what im doing wrong > also, why does it show as a scsi device, its a pata drive in a usb enclosure? USB mass storage devices use the SCSI protocol in a USB wrapper. The bridge chip in the enclosure converts this to the ATA protocol.
Re: ntfs usb drive fail to mount
--- Lord Sporkton [Thu, Apr 24, 2008 at 03:17:16PM -0700]: --- > My appologies, i am indeed using GENERIC, > I did think that perhaps it did not support ntfs, but then i also > thought it would be rather absent minded to have included mount_ntfs > if support was not included, thus since i had mount_ntfs, i assumed i > had support for it. > > I will look into adding ntfs support to my kernel should just be a matter of uncommenting: #option NTFS# Experimental NTFS support and rebuilding.
Re: Disabling IPv6 ?
On Thu, Apr 24, 2008 at 3:16 PM, Parvinder Bhasin <[EMAIL PROTECTED]> wrote: > How can I disable IPv6 in openbsd 4.x (3 - in my case) without recompiling > kernel? Unless your network is misconfigured, in your use case there's no problem. Your machine will detect it has no routes for IPv6 unicast addresses, and will skip those and attempt IPv4 automatically. Is that not what you're seeing? > I don't know why I am seeing Ipv6 address there. Because ftp.freebsd.org has records, and ftp(1) supports IPv6.
Re: Disabling IPv6 ?
Thanks Everyone for the help!! from what I gather it not easy to disable ipv6 but then why disable it anyways. I think what's happening is that the fetch (or ftp) is just trying ipv6 address first and not the ipv4. From one of the replies I got from Jona (see below), this should do the trick. Thanks In gmane.os.openbsd.misc, you wrote: > How can I disable IPv6 in openbsd 4.x (3 - in my case) without > recompiling kernel? > I have a strange issue where when I try to install symon utility using > ports, it fails with message: > >>> Fetch ftp://ftp.freebsd.org/pub/FreeBSD/distfiles// >>> jpegsrc.v6b.tar.gz > . > Trying 2001:4f8:0:2::e... > ftp: connect to address 2001:4f8:0:2::e: No route to host > Trying 2001:6c8:6:4::7... > > I don't know why I am seeing Ipv6 address there. Maybe the DNS server > is returning this IPv6 address but my os or app (ports in this case) > has to be querying for an IPv6 record?? don't know. It should fall back to the v4 address if the connection to the v6 address fails. If you want to get rid of the message you can set: FETCH_CMD = /usr/bin/ftp -V -m -4 -k ${FTP_KEEPALIVE} in /etc/mk.conf. That's the default setting plus -4 which makes it stick to IPv4 addresses. See: bsd.port.mk(5) ftp(1) On Apr 24, 2008, at 4:21 PM, Matthew Dempsky wrote: > On Thu, Apr 24, 2008 at 3:16 PM, Parvinder Bhasin > <[EMAIL PROTECTED]> wrote: >> How can I disable IPv6 in openbsd 4.x (3 - in my case) without >> recompiling >> kernel? > > Unless your network is misconfigured, in your use case there's no > problem. Your machine will detect it has no routes for IPv6 unicast > addresses, and will skip those and attempt IPv4 automatically. > > Is that not what you're seeing? > >> I don't know why I am seeing Ipv6 address there. > > Because ftp.freebsd.org has records, and ftp(1) supports IPv6.
Re: [bsd-peru] BSD DAY (Global)
El 23/04/08, HDC <[EMAIL PROTECTED]> escribis: > Hola a todos, quiero anunciarles que estoy impulsando un proyecto para > realizar el BSD DAY en la mayor cantidad de paises posible. En > Argentina lo hariamos nosotros y ya contacte a otros grupos de OpenBSD > y estan muy interesados en realizarlo. > > La idea es comenzar este proyecto con tiempo (ya que si es el primer > evento que realizamos, es muy probable que lo necesitemos), dentro de > un lapso de 10 meses a 16 meses creo que estariamos en condiciones de > realizar en conjunto varios eventos locales. > > Mas detalles los pueden ver y seguir en el wiki: > http://www.openbsderos.org/wiki/index.php?title=BSDDAY > > Espero que los interesados se sumen. > > Se agradece la difusion de esta noticia. > > > Saludos, > Hernan > > -- > # /dev/hdc > -> OpenBSDeros.org > hdc [at] openbsderos [dot] org Parece una buena idea, ya lo comentabamos con algunas personas en el canal de #bsd.pe y de verdad seria muy bueno lograr que se posicione un evento como el BSD Day, no se que diga el resto de interesados en tu propuesta pero personalmente puedes contar con mi apoyo para la organizacion del BSD Day masivo. Abrire una seccion en el wiki de bsd-peru.org donde los interesados en colaborar iremos agregando ideas, o avances relacionados a la propuesta. Saludos ACM
Re: minimac on openbsd
Hey Tas... I'm trying to bring a second mini on line and am having a problem that I don't recall how I worked around the first go around. Perhaps you can apply a clue bat! I hooked up a monitor and keyboard, installed a CD created from the latest snapshot, and was happy to see it boot OpenBSD as I powered it up while holding the C key. Much easier than I remember the first time when I had to build a custom i386 kernel. Alas, my joy was short lived: once the bsd.rd is running the USB keyboard isn't recognized. I'm sitting at the (I)nstall, (U)pgrade, or (S)hell? prompt and can't go any further. Do you remember the the necessary tweak to get bsd.rd to handle the USB keyboard? I don't remember this issue the last time I tried to bring one on line. Thanks, // marc
Re: minimac on openbsd
On Thu, Apr 24, 2008 at 09:28:55PM -0700, Marco S Hyman wrote: > Hey Tas... > > I'm trying to bring a second mini on line and am having a problem > that I don't recall how I worked around the first go around. Perhaps > you can apply a clue bat! > > I hooked up a monitor and keyboard, installed a CD created > from the latest snapshot, and was happy to see it boot OpenBSD > as I powered it up while holding the C key. Much easier than > I remember the first time when I had to build a custom i386 > kernel. > > Alas, my joy was short lived: once the bsd.rd is running the > USB keyboard isn't recognized. I'm sitting at the (I)nstall, > (U)pgrade, or (S)hell? prompt and can't go any further. > > Do you remember the the necessary tweak to get bsd.rd to > handle the USB keyboard? I don't remember this issue the > last time I tried to bring one on line. > > Thanks, > > // marc On a macbook, not all USB ports are created equal. You have to use the frontmost USB port for the external keyboard when installing. Perhaps something similar is the case for the mini? -Otto
Re: minimac on openbsd
Otto Moerbeek writes: > On Thu, Apr 24, 2008 at 09:28:55PM -0700, Marco S Hyman wrote: > > Alas, my joy was short lived: once the bsd.rd is running the > > USB keyboard isn't recognized. I'm sitting at the (I)nstall, > > (U)pgrade, or (S)hell? prompt and can't go any further. Heh... didn't realize I copied misc. > On a macbook, not all USB ports are created equal. You have to use the > frontmost USB port for the external keyboard when installing. Perhaps > something similar is the case for the mini? A cookie for Otto. Moving the keyboard from the port closest to the edge to the port closest to the video connector (guess, from port 4 to port 1) did the trick. It was either that or the fact that this time I booted an amd64 CD instead of the i386 CD. My guess is that it was moving the keyboard that did the trick. Many, many thanks. Now on to some disk partitioning. // marc