Re: Routing on source

2008-06-25 Thread Duncan Patton a Campbell
On Tue, 24 Jun 2008 21:34:00 -0700
Daniel Anderson [EMAIL PROTECTED] wrote:

 The mechanism you seek is the route-to and reply-to. Kindly see this message 
 for an example:
 
 http://marc.info/?l=openbsd-miscm=120665186412690w=2
 

Yes.  Thank you.

Dhu

 As to the concern on redundancy, perhaps someone else will address it for you.
 
 ---
 On Tuesday 24 June 2008 08:29:08 pm Duncan Patton a Campbell wrote:
  Dear List,
 
  I am trying to figure out if is is possible to route packets
  through an OpenBSD firewall on the basis of the packet source.
 
  The situation is that I have two ISPs hooked up to a firewall
  and would like to route traffic to these ISPs on the basis of
  which NAT client (IP or mask) the traffic is coming from.
 
  Is this possible?  What mechanisms (pf... etc)?  I am also
  hoping to work ifstated or something like it into the mess
  so that if the normal route for a client fails the traffic
  will go to the secondary connection.  Is this reasonable?
 
  Thanks,
 
  Dhu



Re: Route ftp-proxy pasive mode to secondary Internet conection

2008-06-25 Thread Claer
On Tue, Jun 24 2008 at 24:19, Giancarlo Razzolini wrote:

 Jon Rubio wrote:
  Hello everyone,
 
  We need some help with the ftp-proxy on reverse mode. Thanks you very much
  for your help.
 
  The scenario:
  ---
 
  We have an OpenBSD firewall with two interfaces conected to Internet (bge0
  ang bge1).
  The first interface is used to browse internet and access all external
  Internet services.
  The second interface is used to manage incoming conections from our partners
  to our internal services (www, ftp  mail).
 
  We have sucessfully created routing rules on the PF to route outgoing trafic
  for www and mail services.
  We have even sucessfully created routing rules on the PF to route outgoing
  trafic for FTP service until it enters on passive mode (ftp authentification
  is sucessfull).
 
  But on PF rules created by the ftp-proxy (dinamically) we can't find how to
  specify to use the secondary connection, so it sends packages from the first
  interface.
 
  B?Can anyone, please help us? Any idea would be appreciated.
 
  Thanks in advance.
  --
  View this message in context:
  http://www.nabble.com/Route-ftp-proxy-pasive-mode-to-secondary-Internet-conec
  tion-tp18100893p18100893.html
  Sent from the openbsd user - misc mailing list archive at Nabble.com.
 
 

 There are two solutions for this problem AFAIK. The easy, and the not so
 easy, but nice solution. The easy, is to change the default gateway of
 the firewall to be the secondary connection one. You will have to adapt
 you rules to use the primary connection for navigation traffic, because
 know, your secondary connection is your primary one. So the logic
 changes. The second alternative is to use the -mpath feature of ifconfig
 to set both the default gateways, and to make ftp-proxy create the rules
 using the connection you want. Take a look at -a option of it. In both
 cases you will have to select the routes using pf. I recommend that you
 do things right and use -mpath. It can even help with failover and other
 things.
 
 My regards,

You may want to look at the -T option of ftp-proxy. This way you can tag
packets for further filtering. The man page seems to describe a solution
to your problem :

-T tag  The filter rules will add tag tag to data connections, and not
match quick.  This way alternative rules that use the tagged key-
word can be implemented following the ftp-proxy anchor.  These
rules can use special pf(4) features like route-to, reply-to, la-
bel, rtable, overload, etc. that ftp-proxy does not implement it-
self.

Claer



Re: the backend...

2008-06-25 Thread dermiste
nah, it's much more fun to expose their stupidity in full view. Plus
it serves as a warning to forecoming dullards, and helps keeping this
list clean.

echo compile marc.info into openbsd-wall_of_shame  ToDo


On Wed, Jun 25, 2008 at 7:31 AM, Pieter Verberne
[EMAIL PROTECTED] wrote:
 On Tue, Jun 24, 2008 at 03:32:01PM -0600, Theo de Raadt wrote:
  On Tue, Jun 24, 2008 at 01:07:07PM -0700, badeguruji wrote:
  | Hello Group,
  |
  | sorry this is slightly off topic, but i was curious. (that) What 
  database technology (Oracle, MysQL, Postgres...) does Google use for its 
  database need? both in its plethora of apps and internally to manage the 
  company!
  | and i turned to some of the brightest minds in the industry, i have 
  access to, for solid answer :)
  | Thank you.
 
  I don't see what this has to do with OpenBSD, but ok ..

 Paul,

 if it has nothing to do with OpenBSD, please don't answer the stupid
 idiots with truth.  Otherwise you are part of the same problem.

 You could make this a 'somewhat' moderated mailing list. So that a few
 of you can remove messages from the list. Or maybe a the archives only?

 Hmm, never mind:) (but I'll post this message)



--
Vincent



carp and arpresolve: route without link local address

2008-06-25 Thread Christian

Hi all,

I have configured a carp(4) over vlan(4) over trunk(4) (failover 
mode) over bge(4) setup. While everything seems to work fine, 
the kernel on the machine where carp is in the master state 
keeps spitting out warnings as follows:


arpresolve: XX.YY.16.3: route without link local address

Note: XX.YY.16.3 is the IP of the carp interface. There are some 
other vlans defined on the trunk, but no other carp interface. 
The machine acts as a router (BGPD is running as well).

The machine is running OpenBSD 4.3-current as of may 2nd.

Has anybody seen this before?

Thanks,
 Christian

# cat /etc/hostname.carp1 


XX.YY.16.3 netmask 255.255.255.224 carpdev vlan100 vhid 1

# cat /etc/hostname.vlan100
XX.YY.16.1 netmask 255.255.255.224 vlan 100 vlandev trunk0

# route -n get XX.YY.16.1
   route to: XX.YY.16.1
destination: XX.YY.16.1
  interface: lo0
 if address: XX.YY.16.1
  flags: UP,HOST,DONE,LLINFO,CLONED
 use  hopcount   mtuexpire
 450 0 0 0

# route -n get XX.YY.16.3
   route to: XX.YY.16.3
destination: XX.YY.16.3
  interface: carp1
 if address: XX.YY.16.3
  flags: UP,HOST,DONE
 use  hopcount   mtuexpire
   4 0 0 0

# cat /var/run/dmesg.boot

OpenBSD 4.3-current (GENERIC.MP) #0: Sat May  3 00:08:05 CEST 2008
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) Core(TM)2 Duo CPU E4500 @ 2.20GHz (GenuineIntel 
686-class) 2.21 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,TM2,CX16,xTPR

real mem  = 1071947776 (1022MB)
avail mem = 1028378624 (980MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 03/05/08, BIOS32 rev. 0 @ 
0xfac90, SMBIOS rev. 2.5 @ 0x3ff9c000 (46 entries)

bios0: vendor Dell Inc. version 1.2.1 date 03/05/2008
bios0: Dell Inc. PowerEdge R200
acpi0 at bios0: rev 2
acpi0: tables DSDT FACP APIC SPCR HPET MCFG WD__ SLIC ERST HEST 
BERT EINJ SSDT SSDT SSDT

acpi0: wakeup devices PCI0(S5)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 200MHz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Core(TM)2 Duo CPU E4500 @ 2.20GHz (GenuineIntel 
686-class) 2.21 GHz
cpu1: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,TM2,CX16,xTPR

ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
ioapic0: misconfigured as apic 0, remapped to apid 2
ioapic1 at mainbus0: apid 3 pa 0xfec1, version 20, 24 pins
ioapic1: misconfigured as apic 0, remapped to apid 3
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 1 (PEX1)
acpiprt2 at acpi0: bus 2 (SBE0)
acpiprt3 at acpi0: bus 3 (PXHA)
acpiprt4 at acpi0: bus 5 (SBE4)
acpiprt5 at acpi0: bus 6 (SBE5)
acpiprt6 at acpi0: bus 7 (COMP)
acpicpu0 at acpi0: FVS, 2200, 2000, 1800, 1600, 1400, 1200 MHz
acpicpu1 at acpi0: FVS, 2200, 2000, 1800, 1600, 1400, 1200 MHz
bios0: ROM list: 0xc/0xb000 0xcb000/0x3c00 0xcf000/0x600 
0xec000/0x4000!

ipmi at mainbus0 not configured
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 Intel 3200/3210 Host rev 0x01
ppb0 at pci0 dev 1 function 0 Intel 3200/3210 PCIE rev 0x01: 
apic 2 int 16 (irq 15)

pci1 at ppb0 bus 1
em0 at pci1 dev 0 function 0 Intel PRO/1000 PT (82571EB) rev 
0x06: apic 2 int 16 (irq 15), address 00:15:17:5c:14:b4
em1 at pci1 dev 0 function 1 Intel PRO/1000 PT (82571EB) rev 
0x06: apic 2 int 17 (irq 14), address 00:15:17:5c:14:b5

ppb1 at pci0 dev 28 function 0 Intel 82801I PCIE rev 0x02
pci2 at ppb1 bus 2
ppb2 at pci2 dev 0 function 0 Intel PCIE-PCIE rev 0x09
pci3 at ppb2 bus 3
ppb3 at pci3 dev 2 function 0 Hint HB4 PCI-PCI rev 0x04
pci4 at ppb3 bus 4
vga1 at pci4 dev 2 function 0 ATI Radeon VE QY rev 0x00
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
vendor Dell, unknown product 0x0010 (class undefined unknown 
subclass 0x00, rev 0x00) at pci4 dev 4 function 0 not configured
Dell DRAC 4 Virtual UART rev 0x00 at pci4 dev 4 function 1 not 
configured

Dell DRAC 4 SMIC rev 0x00 at pci4 dev 4 function 2 not configured
pciide0 at pci4 dev 7 function 0 CMD Technology PCI0680 rev 0x02
pciide0: bus-master DMA support present
pciide0: channel 0 wired to native-PCI mode
pciide0: using apic 3 int 0 (irq 15) for native-PCI interrupt
atapiscsi0 at pciide0 channel 0 drive 0
scsibus0 at atapiscsi0: 2 targets
sd0 at scsibus0 targ 0 lun 0: DELL, VSF, 0123 SCSI0 0/direct 
removable

sd0: drive offline
atapiscsi1 at pciide0 channel 0 drive 1
scsibus1 at atapiscsi1: 2 targets
cd0 at scsibus1 targ 0 lun 0: DELL, VCD, 0133 SCSI0 5/cdrom 
removable

sd0(pciide0:0:0): using PIO mode 3
cd0(pciide0:0:1): using PIO mode 3
pciide0: channel 1 wired to 

Re: the backend...

2008-06-25 Thread Tomas Bodzar
I think,that something like G-base,G-database,GoogleBase,
Oh wait,Google..isn't it company,that has maybe best search engine?
Maybe I can try type - google database - or something like that.
WTHit serves good answers for my question.
What can I do?Maybe click on some blue links on screen?
What a magicI really like modern technology.

I don't know exactly,but looks like RTFM is still useful in these times.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
badeguruji
Sent: Tuesday, June 24, 2008 10:07 PM
To: misc@openbsd.org
Subject: the backend...

Hello Group,

sorry this is slightly off topic, but i was curious. (that) What database
technology (Oracle, MysQL, Postgres...) does Google use for its database need?
both in its plethora of apps and internally to manage the company!
and i turned to some of the brightest minds in the industry, i have access to,
for solid answer :)
Thank you.
-BG

~~aapka kalyan ho~~



Problem with LDAP and PDC

2008-06-25 Thread What you get is Not what you see
Hi
I have openbsd 4.1 GENERIC#1435 i386 on a server.
I am following the guidelines at http://www.kernel-panic.it/openbsd/pdc/
to have a PDC with virus scan etc. But I got some error messages during
2-3 days and am progressing slowly (I mean I resolve the error messages
day by day).
I think there is a problem with ldap.Because at the beginning the command
# ldapsearch -x -b '' -s base '(objectclass=*)' namingContexts
didnt yield any output. Now its yielding a correct output.
But this time the command
#slapcat or slaptest
yileds this
ldbm_back_db_open: database already in use
backend_startup_one: bi_db_open failed! (-1)
slap_startup failed
And also the command
#smbldap-groupadd -g 1500 Accounting
gives this error
/usr/local/sbin/smbldap-groupadd: error adding group Accounting.

Something strange happens.
I have also dns serving on this machine.
I guess there are some problems with ldbm which I cant solve.



Re: OpenBSD project goals

2008-06-25 Thread Miod Vallat

Yes, of course doing a little research on a subject before posting is
beyond the capabilities of the common misc poster. I should become
grumpy, but alas, that name is already taken.


This is because grumpyness is so overrated, those days. Back in the
beginnings of Unix all you needed was a long beard. Now people don't
wear them and pretend to be grumpy instead, but this won't fool
old-timers.

Miod



Re: OpenBSD project goals

2008-06-25 Thread bofh
On Tue, Jun 24, 2008 at 4:29 PM, Martin Schrvder [EMAIL PROTECTED] wrote:

 2008/6/24 Pierre Riteau [EMAIL PROTECTED]:
  As someone already said earlier, you can write your letter in troff
  with mg or vi and create a postscript file from that.

 Real Men wrote their thesis directly in PostScript using ed. :-)


Oh great!  Another real men thread!  I wonder what Real Women use.

And Real Transexuals.

and so on...


-speaking as the perpetrator of the last Real Men thread... 8-)
--
http://www.glumbert.com/media/shift
http://www.youtube.com/watch?v=tGvHNNOLnCk
This officer's men seem to follow him merely out of idle curiosity. --
Sandhurst officer cadet evaluation.
Securing an environment of Windows platforms from abuse - external or
internal - is akin to trying to install sprinklers in a fireworks factory
where smoking on the job is permitted. -- Gene Spafford
learn french: http://www.youtube.com/watch?v=j1G-3laJJP0feature=related



Re: OpenBSD project goals

2008-06-25 Thread Miod Vallat

 As someone already said earlier, you can write your letter in troff
 with mg or vi and create a postscript file from that.

Real Men wrote their thesis directly in PostScript using ed. :-)



Oh great!  Another real men thread!  I wonder what Real Women use.


That's an easy one: Real Women are smarter than Real Men and have them
write their thesis in addition to their own...

Miod



Re: Problem with LDAP and PDC

2008-06-25 Thread Stuart Henderson
On 2008-06-25, What you get is Not what you see [EMAIL PROTECTED] wrote:
 I have openbsd 4.1 GENERIC#1435 i386 on a server.
 I am following the guidelines at http://www.kernel-panic.it/openbsd/pdc/
 to have a PDC with virus scan etc. But I got some error messages during
 2-3 days and am progressing slowly (I mean I resolve the error messages
 day by day).

The guide was updated fairly recently, so it appears to be actively
maintained. If you followed it carefully and had problems, why not
give feedback to the author so it can be made clearer? If you didn't
document what you did, perhaps it might be an idea to start again
and log your commands and the output with script(8). You might find
that just by starting again, things work better.

 I think there is a problem with ldap.Because at the beginning the command
 # ldapsearch -x -b '' -s base '(objectclass=*)' namingContexts
 didnt yield any output. Now its yielding a correct output.
 But this time the command
 #slapcat or slaptest
 yileds this
 ldbm_back_db_open: database already in use
 backend_startup_one: bi_db_open failed! (-1)
 slap_startup failed
 And also the command
 #smbldap-groupadd -g 1500 Accounting
 gives this error
 /usr/local/sbin/smbldap-groupadd: error adding group Accounting.

 Something strange happens.
 I have also dns serving on this machine.
 I guess there are some problems with ldbm which I cant solve.

Having problems which you aren't given the information to solve
is fairly common with guides in the howto style. Working things
out for yourself increases your ability to fix problems that you
may run into...



Re: OpenBSD project goals

2008-06-25 Thread Diana Eichert

On Wed, 25 Jun 2008, Miod Vallat wrote:


Oh great!  Another real men thread!  I wonder what Real Women use.


That's an easy one: Real Women are smarter than Real Men and have them
write their thesis in addition to their own...

Miod


Nah, you have it all wrong.  Why get an advanced degree in the first
place?

When I owned my computer business I used to tell people I'm not an
engineer, I employ them.


diana



anyone related to m5hosting on this list

2008-06-25 Thread Siju George
Hi,

Is there anybody related to

http://www.m5hosting.com/

on this list?

Thanks

Siju



List of OpenBSD Mirrors

2008-06-25 Thread Sevan / Venture37
Hi
Would it be possible to indicate which mirrors are ipv6 enabled eg on ftp.html
 anoncvs.html.


Sevan / Venture37
_

All new Live Search at Live.com

http://clk.atdmt.com/UKM/go/msnnkmgl001006ukm/direct/01/



Re: 23 June AMD64 Snapshots Kernel Panic

2008-06-25 Thread Insan Praja SW
On Wed, 25 Jun 2008 20:47:50 +0700, Insan Praja SW [EMAIL PROTECTED]  
wrote:

Sorry, the title should be 25 June AMD64 Snapshots Kernel Panic
Thanks,

Insan

Hi Misc@,
This is a recent panic I got on OpenBSD 4.3-current (GENERIC.MP) #8:  
Wed Jun 25 09:55:34 WIT 2008 . The source is updated to this morning  
Wed Jun 25 09:55:34 WIT.

This is what panicking:

kernel: page fault trap, code=0
stopped at pf_state_tree_RB_INSERT_COLOR+0x63:  movq 0x28 (%rdx),%rax
ddb{0} trace
pf_state_tree_RB_INSERT_COLOR() at pf_state_tree_RB_INSERT_COLOR+0x63
pf_state_tree_RB_INSERT() at pf_state_tree_RB_INSERT+0x75
pf_state_key_insert() at pf_state_key_insert+0x27
pf_state_insert() at pf_test_rule+0x42
pf_test_rule() at pf_test_rule+0x1948
pf_test_rule() at pf_test_rule+0x4d8
pf_test() at pf_test+0x944
ipv4_input() at ipv4_input+0x153
ipintr() at ipintr+0x6d
Xsoftnet() at Xsoftnet+0x4a
 interrupt ---
end trace frame 0x0, count: -10
0:
ddb{0}

and this is the kernel panic before I update:

uvm_fault(0x 80b7b0e0, 0x0, 0, 1) - e
kernel : page fault trap, code=0
Stopped at  pf_state_tree_RB_REMOVE_COLOR + 0x1C0: cmpl $0x1,0x40(%rsi)
ddb {0} trace
pf_state_tree_RB_REMOVE_COLOR() at pf_state_tree_RB_REMOVE_COLOR+0x1c0
pf_state_tree_RB_REMOVE() at pf_state_tree_RB_REMOVE+0x4d
pf_state_tree_key_detach() at pf_state_key_detech+0x9d
pf_state_state() at pf_detach_state_key_detach+0x9d
pf_purge_expired_states() at pf_purge_expired_state+0x9d
pf_purge_thread() at pf_purge_thread+0x53
end trace frame : 0x0, counnt: -6
ddb {0}

Its all PF, right? damn.. I love PF.. I mean.. really love pf.. and  
BGPd, of course :D


Thanks and Best Regards,

Insan




--
insandotpraja(at)gmaildotcom



23 June AMD64 Snapshots Kernel Panic

2008-06-25 Thread Insan Praja SW

Hi Misc@,
This is a recent panic I got on OpenBSD 4.3-current (GENERIC.MP) #8: Wed  
Jun 25 09:55:34 WIT 2008 . The source is updated to this morning Wed Jun  
25 09:55:34 WIT.

This is what panicking:

kernel: page fault trap, code=0
stopped at pf_state_tree_RB_INSERT_COLOR+0x63:  movq 0x28 (%rdx),%rax
ddb{0} trace
pf_state_tree_RB_INSERT_COLOR() at pf_state_tree_RB_INSERT_COLOR+0x63
pf_state_tree_RB_INSERT() at pf_state_tree_RB_INSERT+0x75
pf_state_key_insert() at pf_state_key_insert+0x27
pf_state_insert() at pf_test_rule+0x42
pf_test_rule() at pf_test_rule+0x1948
pf_test_rule() at pf_test_rule+0x4d8
pf_test() at pf_test+0x944
ipv4_input() at ipv4_input+0x153
ipintr() at ipintr+0x6d
Xsoftnet() at Xsoftnet+0x4a
 interrupt ---
end trace frame 0x0, count: -10
0:
ddb{0}

and this is the kernel panic before I update:

uvm_fault(0x 80b7b0e0, 0x0, 0, 1) - e
kernel : page fault trap, code=0
Stopped at  pf_state_tree_RB_REMOVE_COLOR + 0x1C0: cmpl $0x1,0x40(%rsi)
ddb {0} trace
pf_state_tree_RB_REMOVE_COLOR() at pf_state_tree_RB_REMOVE_COLOR+0x1c0
pf_state_tree_RB_REMOVE() at pf_state_tree_RB_REMOVE+0x4d
pf_state_tree_key_detach() at pf_state_key_detech+0x9d
pf_state_state() at pf_detach_state_key_detach+0x9d
pf_purge_expired_states() at pf_purge_expired_state+0x9d
pf_purge_thread() at pf_purge_thread+0x53
end trace frame : 0x0, counnt: -6
ddb {0}

Its all PF, right? damn.. I love PF.. I mean.. really love pf.. and BGPd,  
of course :D


Thanks and Best Regards,

Insan
--
insandotpraja(at)gmaildotcom

OpenBSD 4.3-current (GENERIC.MP) #8: Wed Jun 25 09:55:34 WIT 2008
[EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 2124914688 (2026MB)
avail mem = 2063269888 (1967MB)
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.34 @ 0x7f6ee000 (78 entries)
bios0: vendor FUJITSU SIEMENS // Phoenix Technologies Ltd. version 5.00  
R1.10.2151.A1 date 05/08/2006

bios0: FUJITSU SIEMENS D2151-A1
acpi0 at bios0: rev 2
acpi0: tables DSDT FACP ASF! SSDT MCFG HPET APIC BOOT
acpi0: wakeup devices PEXA(S4) PEXB(S4) PEXC(S4) PEXD(S4) PEXE(S4)  
USB1(S4) USB2(S4) USB3(S4) USB4(S4) USB5(S4) PCIH(S4) KEYB(

S4) PS2M(S4) COM1(S1) COM2(S1)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 14318179 Hz
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Pentium(R) D CPU 2.66GHz, 2660.42 MHz
cpu0:  
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,S

SE3,MWAIT,DS-CPL,TM2,CNXT-ID,CX16,xTPR,NXE,LONG
cpu0: 1MB 64b/line 8-way L2 cache
cpu0: apic clock running at 133MHz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Pentium(R) D CPU 2.66GHz, 2660.07 MHz
cpu1:  
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,S

SE3,MWAIT,DS-CPL,TM2,CNXT-ID,CX16,xTPR,NXE,LONG
cpu1: 1MB 64b/line 8-way L2 cache
ioapic0 at mainbus0 apid 2 pa 0xfec0, version 20, 24 pins
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (PEXA)
acpiprt2 at acpi0: bus 3 (PEXB)
acpiprt3 at acpi0: bus 5 (PEXC)
acpiprt4 at acpi0: bus 7 (PEXD)
acpiprt5 at acpi0: bus 9 (PEXE)
acpiprt6 at acpi0: bus 11 (PCIH)
acpicpu0 at acpi0: FVS, 2667, 1862 MHz
acpicpu1 at acpi0: FVS, 2667, 1862 MHz
acpibtn0 at acpi0: PWRB
pci0 at mainbus0 bus 0: configuration mode 1
pchb0 at pci0 dev 0 function 0 Intel 82945G Host rev 0x02
vga1 at pci0 dev 2 function 0 Intel 82945G Video rev 0x02
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
agp0 at vga1: aperture at 0xe000, size 0x1000
azalia0 at pci0 dev 27 function 0 Intel 82801GB HD Audio rev 0x01: apic  
2 int 18 (irq 9)

azalia0: codec[s]: Realtek ALC260
audio0 at azalia0
ppb0 at pci0 dev 28 function 0 Intel 82801GB PCIE rev 0x01: apic 2 int  
17 (irq 11)

pci1 at ppb0 bus 3
ppb1 at pci0 dev 28 function 1 Intel 82801GB PCIE rev 0x01: apic 2 int  
16 (irq 11)

pci2 at ppb1 bus 5
bge0 at pci2 dev 0 function 0 Broadcom BCM5751 rev 0x01, BCM5750 A1  
(0x4001): apic 2 int 17 (irq 11), address 00:30:05:c9:79

:df
brgphy0 at bge0 phy 1: BCM5750 10/100/1000baseT PHY, rev. 0
ppb2 at pci0 dev 28 function 2 Intel 82801GB PCIE rev 0x01: apic 2 int  
18 (irq 9)

pci3 at ppb2 bus 7
ppb3 at pci0 dev 28 function 3 Intel 82801GB PCIE rev 0x01: apic 2 int  
19 (irq 9)

pci4 at ppb3 bus 9
uhci0 at pci0 dev 29 function 0 Intel 82801GB USB rev 0x01: apic 2 int  
23 (irq 11)
uhci1 at pci0 dev 29 function 1 Intel 82801GB USB rev 0x01: apic 2 int  
22 (irq 10)
uhci2 at pci0 dev 29 function 2 Intel 82801GB USB rev 0x01: apic 2 int  
21 (irq 5)
uhci3 at pci0 dev 29 function 3 Intel 82801GB USB rev 0x01: apic 2 int  
20 (irq 9)
ehci0 at pci0 dev 29 function 7 Intel 82801GB USB rev 0x01: apic 2 int  
23 (irq 11)

ehci0: timed out waiting for BIOS
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1
ppb4 at pci0 dev 30 

Re: the backend...

2008-06-25 Thread Eric Furman
On Wed, 25 Jun 2008 07:31:17 +0200, Pieter Verberne
[EMAIL PROTECTED] said:
  if it has nothing to do with OpenBSD, please don't answer the stupid
  idiots with truth.  Otherwise you are part of the same problem.
 
 You could make this a 'somewhat' moderated mailing list. So that a few
 of you can remove messages from the list. Or maybe a the archives only?

The list is already moderated. With grumpiness. :)
(sorry, couldn't resist)



Re: List of OpenBSD Mirrors

2008-06-25 Thread Stuart Henderson
On 2008-06-25, Sevan / Venture37 [EMAIL PROTECTED] wrote:
 Would it be possible to indicate which mirrors are ipv6 enabled eg on ftp.html
  anoncvs.html.

This is a manually maintained list and I think it's fairly
unlikely to get a volunteer who will keep the information up
to date. It's better not to publish, than publish something
and not maintain it.

If you think you can maintain it (don't expect the operators
of many of the mirrors to be forthcoming, you will have to
check yourself on a regular basis), feel free to send diffs
for the build scripts and mirrors.dat.

As of today, these ftp mirrors currently have  or a
CNAME pointing to a name with :

ftp.belnet.be
ftp.chg.ru
ftp.cse.buffalo.edu
ftp.esat.net
ftp.estpak.ee
anga.funkfeuer.at
ftp.freenet.de
ftp.heanet.ie
ftp.irisa.fr
ftp.itb.ac.id
ftp.kddlabs.co.jp
ftp.nluug.nl
mirror.switch.ch
ftp.task.gda.pl
openbsd.informatik.uni-erlangen.de

As far as anoncvs goes, I think your v6 options are currently
uni-erlangen and funkfeuer.at.



Resume - Mumps Developer

2008-06-25 Thread jose thomas
Hi,

Herewith I am sending my resume with this letter. I have more than 3 years
of experience and below mentioned is my skill set.
Mumps, ClearCase, ClearQuest, Siebel 7.0, Lab, HL7, HIPAA, VB 6.0, VB.Net,
HTML, Infragistics and SQL Server 2000

If it suits to the requirements of your esteemed organization please let me
know.

Sincerely,
Jose Thomas
Software Engineer
Sunquest Information Systems India Pvt. Ltd.
Mobile: 0091+9845735384
Email: [EMAIL PROTECTED]
Web: http://www.sunquestinfo.com

[demime 1.01d removed an attachment of type APPLICATION/DEFANGED which had a 
name of Resume_of_Jose_Thomas.17023DEFANGED-doc]



Re: OpenBSD project goals

2008-06-25 Thread Steve Shockley

bofh wrote:

Oh great!  Another real men thread!  I wonder what Real Women use.


Sorry, next time I'll check the archives.



Re: Resume - Mumps Developer

2008-06-25 Thread Tomas Bodzar
And what

If it's not spam,than I think,that devs of OpenBSD want your physical and real
experience,like programs and so on.Not a list of names.My list will be
longer,but I don't think,that I can ask for job ;-)

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of jose
thomas
Sent: Wednesday, June 25, 2008 4:50 PM
To: misc@openbsd.org
Subject: Resume - Mumps Developer

Hi,

Herewith I am sending my resume with this letter. I have more than 3 years
of experience and below mentioned is my skill set.
Mumps, ClearCase, ClearQuest, Siebel 7.0, Lab, HL7, HIPAA, VB 6.0, VB.Net,
HTML, Infragistics and SQL Server 2000

If it suits to the requirements of your esteemed organization please let me
know.

Sincerely,
Jose Thomas
Software Engineer
Sunquest Information Systems India Pvt. Ltd.
Mobile: 0091+9845735384
Email: [EMAIL PROTECTED]
Web: http://www.sunquestinfo.com

[demime 1.01d removed an attachment of type APPLICATION/DEFANGED which had a
name of Resume_of_Jose_Thomas.17023DEFANGED-doc]



Net-SNMP segfaults under OpenBSD 4.3

2008-06-25 Thread (private) HKS
In my quest for real SNMP monitoring of OpenBSD, I installed net-snmp-5.4.1p0
on an OpenBSD 4.3 box via packages. The executable segfaults every time I try
to run it. This happens with or without command-line options, with my custom
config file or the default config file. I've tested with two different
machines, two
different mirrors, and seen no change.

I've not yet tried building net-snmp from the ports system, but that's
my next step.

Has anybody else run into this?

-HKS



Re: OpenBSD project goals

2008-06-25 Thread Marco Peereboom
 Oh great!  Another real men thread!  I wonder what Real Women use.

likely the right tool because they don't need to show off.



Re: Resume - Mumps Developer

2008-06-25 Thread Jay Hart
I believe he was volunteering to rewrite the kernel using VB 6.0, but I could
be wrong.

Jay

 And what

 If it's not spam,than I think,that devs of OpenBSD want your physical and real
 experience,like programs and so on.Not a list of names.My list will be
 longer,but I don't think,that I can ask for job ;-)

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of jose
 thomas
 Sent: Wednesday, June 25, 2008 4:50 PM
 To: misc@openbsd.org
 Subject: Resume - Mumps Developer

 Hi,

 Herewith I am sending my resume with this letter. I have more than 3 years
 of experience and below mentioned is my skill set.
 Mumps, ClearCase, ClearQuest, Siebel 7.0, Lab, HL7, HIPAA, VB 6.0, VB.Net,
 HTML, Infragistics and SQL Server 2000

 If it suits to the requirements of your esteemed organization please let me
 know.

 Sincerely,
 Jose Thomas
 Software Engineer
 Sunquest Information Systems India Pvt. Ltd.
 Mobile: 0091+9845735384
 Email: [EMAIL PROTECTED]
 Web: http://www.sunquestinfo.com

 [demime 1.01d removed an attachment of type APPLICATION/DEFANGED which had a
 name of Resume_of_Jose_Thomas.17023DEFANGED-doc]



Re: Resume - Mumps Developer

2008-06-25 Thread raven

Jay Hart ha scritto:

I believe he was volunteering to rewrite the kernel using VB 6.0, but I could
be wrong.

Jay

  
In VB.Net i think, so we can compile everything with monoThanks to 
miguel de icaza


Francesco



ide timeouts on Mac G4 400 (PCI)

2008-06-25 Thread Don Hiatt
  Are there any PPC hackers on this list? I posted the following message
to
the openbsd-ppc list but there doesn't seem to be much activity there. I
found this message:
http://marc.info/?l=openbsd-ppcm=119662985806682w=2
from 12/2007 but so far, no response.

  Anyway, I'm trying to install OpenBSD 4.3 on my Mac G4/400 (PCI) and
keep getting
messages along the lines:

  wd0(pci ide0:0:0): timeout type: ata c_bcount: 16384
   c_skip: 0...wd0g: device timeout writing fsbn ...

I've tried the install using two different 80G drives (a Maxtor and a
Western Digital) but
encounter the same problem, so it seems to be an IDE controller issue
more than anything
(I'm using the onboard IDE controller with a single drive on ide:0)

Once the timeouts begin I pretty much lose all ability to control the
box even though
it still responds to pings (SSH just hangs as well). I know the Mac is
OK because I've
been running OSX on it for years. ;-)

Any suggestions would be greatly appreciated.

Thanks!

don



Re: Resume - Mumps Developer

2008-06-25 Thread Thilo Pfennig

jose thomas wrote:


Herewith I am sending my resume with this letter. I have more than 3 years
of experience and below mentioned is my skill set.
Mumps, ClearCase, ClearQuest, Siebel 7.0, Lab, HL7, HIPAA, VB 6.0, VB.Net,
HTML, Infragistics and SQL Server 2000



I have heard about Mumps (http://en.wikipedia.org/wiki/Mumps), but what 
are the other diseases?


Thilo



php curl https?

2008-06-25 Thread L. V. Lammert
There don't seem to be any package dependencies, .. however on a 4.2 
machine I can't seem to get php5-curl-5.2.3p0.tgz to connect with an https 
session.


Is there an issue, or have I missed something? Don't see anything in the 
archives.


TIA,

Lee



Re: Resume - Mumps Developer

2008-06-25 Thread Jay Hart
BMWs

 jose thomas wrote:

 Herewith I am sending my resume with this letter. I have more than 3 years
 of experience and below mentioned is my skill set.
 Mumps, ClearCase, ClearQuest, Siebel 7.0, Lab, HL7, HIPAA, VB 6.0, VB.Net,
 HTML, Infragistics and SQL Server 2000


 I have heard about Mumps (http://en.wikipedia.org/wiki/Mumps), but what
 are the other diseases?

 Thilo



Re: UDP reception with minimal overhead

2008-06-25 Thread Claudio Jeker
On Wed, Jun 18, 2008 at 07:38:23PM +0200, Markus wrote:
 Good evening,
 
 I'm setting off for writing prototype code for an imaging
 application. For this reason, I'm in need of an extremely fast 
 way to transport large amounts of UDP data to a userland 
 application. 
 
 A socket implementation does not perform very well, which is the
 reason why I'm looking for a better solution to minimize 
 processing time. My initial idea was to already filter the 
 traffic with bpf and only hand the datagrams (or parts of them) 
 I really want out of kernel space. 
 
 To stay somehow portable I realize that using libpcap would be a
 saner approach. I would however sacrifice portability over
 mediocre performance if it had a serious impact.
 
 I'd be grateful for some advice towards the filtering, since I
 have no idea how well bpf performs with a load in the order of
 800 MBit and more. There's probably a better way to get this done.
 Is it realistic to expect no data loss on a machine equipped with 
 proper hardware?
 
 As for bpf vs. libpcap: Does anybody have a rough estimate of 
 the performance advantage of using bpf directly compared to libpcap
 on OpenBSD?

bpf is not designed for high speed. It will cause more load in the kernel
because the recieved pakets need to be copied in the kernel before passing
them on. So better look at your client/server app and try to fix their
socket usage (use bpf is not designed for high speed. It will cause
more load in the kernel because the recieved pakets need to be copied in
the kernel before passing them on. So better look at your client/server
app and try to fix their socket usage (use non blocking sockets and
poll plus have a look at getsockopt and setsockopt to tune the receive
buffer and don't write a ping-pong like protocol).
IIRC we where able to blast 2.2Gbps over UDP between two OpenBSD boxes so
I think the 800 Mbps should be handable.
-- 
:wq Claudio



carp / routing question (multiple lines)

2008-06-25 Thread openbsd misc
Hello,

I hope I can avoid try'n error this way ;-) I have two firewall systems
with carp enabled (running obsd 4.3). These gateways have two internet
connections (dsl 6000 and symmetric 4000 provided by a router with an
/29 transport net).
The symmetric line should be used for vpn and vor mail and http(s) if
the dsl line is not available.
I tried to google about this topic, but I didn't find much helpful.
Someone mentioned http://marc.info/?l=openbsd-miscm=120665186412690w=2
yesterday. Looks like a good starting point because the pf.conf manpage
doesn't say much about route-to and reply-to syntax.

Every connect should find his way back the same way (same route, using
the ip-address the SYN came to).

Does someone have a link for me how to set the correct routes and
pf-rules? The symmetric line should be set as default route with a
higher metric but the source ip should be the carp ip if used. I think
my biggest problem is carp, because I don't know how to set up pf
corretly with carp in use. As you know pf uses the phisical interface,
not the virtual interface, so I think I have to define the source ip,
too?

I hope someone understand my english ;-) and can give me some links /
documentation / examples ...

Thanks and regards
  Hagen Volpers



Re: OT: Dissertation ideas for my degree

2008-06-25 Thread Adriaan
On Wed, Jun 18, 2008 at 11:15 PM, Edd Barrett [EMAIL PROTECTED] wrote:
 Hi,

 As it seems my last two project ideas for my degree have fallen through, I
 wonder if anyone here has any ideas for software projects which are:

 a) Useful
 b) Conceptually new

 Ideas need not be OpenBSD based, but it's a bonus if it is.

 Usually a project consists of a software build and a write up.


Write an OpenBSD bsd.rd equivalent for FreeBSD ;)



Re: carp / routing question (multiple lines)

2008-06-25 Thread Stuart Henderson
On 2008-06-25, openbsd misc [EMAIL PROTECTED] wrote:
 I hope I can avoid try'n error this way ;-) I have two firewall systems
 with carp enabled (running obsd 4.3). These gateways have two internet
 connections (dsl 6000 and symmetric 4000 provided by a router with an
 /29 transport net).
 The symmetric line should be used for vpn and vor mail and http(s) if
 the dsl line is not available.
 I tried to google about this topic, but I didn't find much helpful.
 Someone mentioned http://marc.info/?l=openbsd-miscm=120665186412690w=2
 yesterday. Looks like a good starting point because the pf.conf manpage
 doesn't say much about route-to and reply-to syntax.

Try http://www.openbsd.org/faq/pf/pools.html#outgoing for an
introduction, the syntax of route-to and reply-to is given in the
BNF section at the bottom of pf.conf(5) - everyone writing PF
configuration files should learn how to read this section.
Everyone copying-and-pasting PF configs from samples really
should too...

You should also get acquainted with running tcpdump on different
interfaces, including pflog0 (with the relevant log in PF rules), 
it's very useful when you need to debug PF and in particular any
complicated NAT/route-to configuration.

 Does someone have a link for me how to set the correct routes and
 pf-rules? The symmetric line should be set as default route with a
 higher metric but the source ip should be the carp ip if used.

You set the source address of outgoing packets with NAT rules.
You direct packets out the relevant interface with route-to.
And you direct return packets for an *incoming* connection
with reply-to.

Forget metrics/route priority for now, that won't help you direct
packets out of one or other connection based on port number, you
need PF rules to classify traffic if you want that.

 I think
 my biggest problem is carp, because I don't know how to set up pf
 corretly with carp in use. As you know pf uses the phisical interface,
 not the virtual interface, so I think I have to define the source ip,
 too?

Where you have to define an interface, use the physical interface
(vlan/trunk count as physical interface for this purpose).

Where you have to specify an address, use whichever is correct for
what you're trying to do, carp/physical/both.



Re: OT: Dissertation ideas for my degree

2008-06-25 Thread raven

Adriaan ha scritto:

On Wed, Jun 18, 2008 at 11:15 PM, Edd Barrett [EMAIL PROTECTED] wrote:
  

Hi,

As it seems my last two project ideas for my degree have fallen through, I
wonder if anyone here has any ideas for software projects which are:

a) Useful
b) Conceptually new

Ideas need not be OpenBSD based, but it's a bonus if it is.

Usually a project consists of a software build and a write up.




Write an OpenBSD bsd.rd equivalent for FreeBSD ;)

  

Improve the OpenBSD kernel for xbox... ;)



Re: carp / routing question (multiple lines)

2008-06-25 Thread openbsd misc
Hello,

I totally agree, that's why I wrote to mailing list and not copied the example
;-) It's not the first time I'm working with pf, but the first time with two
external connections. Thanks for the link, I missed that because of the topic
(I'm not looking for load balancing).
But I didn't find out how to set this up correctly:
- normaly the choosen link is rule (pf) based
- the other line should be used if one is down (how to do that with pf?)
- how must I read the route-to / reply-to syntax?
for example:
pass out on $ext_if1 route-to ($ext_if2 $ext_gw2) from $ext_if2 to any
pass out on $ext_if2 route-to ($ext_if1 $ext_gw1) from $ext_if1 to any

Till now I wasn't able to get into that, still looking for the
click-aha-effect ;-)

Thanks for your help.

Regards
  Hagen Volpers

 -Urspr|ngliche Nachricht-
 Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
 Im Auftrag von Stuart Henderson
 Gesendet: Donnerstag, 26. Juni 2008 01:47
 An: misc@openbsd.org
 Betreff: Re: carp / routing question (multiple lines)

 On 2008-06-25, openbsd misc [EMAIL PROTECTED] wrote:
  I hope I can avoid try'n error this way ;-) I have two
 firewall systems
  with carp enabled (running obsd 4.3). These gateways have
 two internet
  connections (dsl 6000 and symmetric 4000 provided by a
 router with an
  /29 transport net).
  The symmetric line should be used for vpn and vor mail and
 http(s) if
  the dsl line is not available.
  I tried to google about this topic, but I didn't find much helpful.
  Someone mentioned
 http://marc.info/?l=openbsd-miscm=120665186412690w=2
  yesterday. Looks like a good starting point because the
 pf.conf manpage
  doesn't say much about route-to and reply-to syntax.

 Try http://www.openbsd.org/faq/pf/pools.html#outgoing for an
 introduction, the syntax of route-to and reply-to is given in the
 BNF section at the bottom of pf.conf(5) - everyone writing PF
 configuration files should learn how to read this section.
 Everyone copying-and-pasting PF configs from samples really
 should too...

 You should also get acquainted with running tcpdump on different
 interfaces, including pflog0 (with the relevant log in PF rules),
 it's very useful when you need to debug PF and in particular any
 complicated NAT/route-to configuration.

  Does someone have a link for me how to set the correct routes and
  pf-rules? The symmetric line should be set as default route with a
  higher metric but the source ip should be the carp ip if used.

 You set the source address of outgoing packets with NAT rules.
 You direct packets out the relevant interface with route-to.
 And you direct return packets for an *incoming* connection
 with reply-to.

 Forget metrics/route priority for now, that won't help you direct
 packets out of one or other connection based on port number, you
 need PF rules to classify traffic if you want that.

  I think
  my biggest problem is carp, because I don't know how to set up pf
  corretly with carp in use. As you know pf uses the phisical
 interface,
  not the virtual interface, so I think I have to define the
 source ip,
  too?

 Where you have to define an interface, use the physical interface
 (vlan/trunk count as physical interface for this purpose).

 Where you have to specify an address, use whichever is correct for
 what you're trying to do, carp/physical/both.



Re: Openbgpd IPv6 problem

2008-06-25 Thread Claudio Jeker
On Tue, Jun 24, 2008 at 11:56:40PM +0200, Andri Keller wrote:
 Andri Keller schrieb:
 Hi

 I've got a problem setting up IPv6 peers.

 bgpd.conf:
 group SwissIX V6 Peers {
# Global configuration
multihop2
local-address   myaddress
holdtime180
holdtime min3
announceIPv6 unicast
announceIPv4 none
softreconfig in yes
max-prefix  10

neighbor peeraddress {
remote-as   peeras
  set localpref   400
tcp md5sig passwordpassword
}
 }

 My peer receives my prefix, but I don't receive any prefixes from him 
 (other peering partners of him receives his prefix). No errors are logged.

 I temporarly tried to a filter rule allow from any inet6 but with no 
 success.

 I think it's a configuration issue of mine. Can somebody provide me with a 
 sample config for ipv6?


 Regards Andri


 Sorry forgot the version info:
 I'm using openbsd 4.2 with the shipped openbgpd...


Did you check the bgpctl show nei output of that peering session?
Check the message statistics for received updates. If it is null the other
side fucked up.

-- 
:wq Claudio



Re: Resume - Mumps Developer

2008-06-25 Thread Tom McLaughlin
On Wed, 2008-06-25 at 19:50 +0200, Thilo Pfennig wrote:
 jose thomas wrote:
 
  Herewith I am sending my resume with this letter. I have more than 3 years
  of experience and below mentioned is my skill set.
  Mumps, ClearCase, ClearQuest, Siebel 7.0, Lab, HL7, HIPAA, VB 6.0, VB.Net,
  HTML, Infragistics and SQL Server 2000
 
 
 I have heard about Mumps (http://en.wikipedia.org/wiki/Mumps), but what 
 are the other diseases?
 
 Thilo
 

Massachusetts general hospital Utility Multi-Programming System.  Still
popular in US healthcare systems as either MUMPS or a derivative.  And
if anyone at the hackathon ended up in the hospital there's a good
chance their systems are using something that evolved from MUMPS. ;)

http://en.wikipedia.org/wiki/MUMPS_language

tom

-- 
| tmclaugh at sdf.lonestar.org tmclaugh at FreeBSD.org |
| FreeBSD   http://www.FreeBSD.org |



Re: Resume - Mumps Developer

2008-06-25 Thread bofh
On Wed, Jun 25, 2008 at 8:58 PM, Tom McLaughlin [EMAIL PROTECTED]
wrote:


 Massachusetts general hospital Utility Multi-Programming System.  Still
 popular in US healthcare systems as either MUMPS or a derivative.  And
 if anyone at the hackathon ended up in the hospital there's a good
 chance their systems are using something that evolved from MUMPS. ;)

 http://en.wikipedia.org/wiki/MUMPS_language


That mumps?  Man, I've heard some pretty horrible things about it.
Apparently not to be touched with a 10' pole.



-- 
http://www.glumbert.com/media/shift
http://www.youtube.com/watch?v=tGvHNNOLnCk
This officer's men seem to follow him merely out of idle curiosity. --
Sandhurst officer cadet evaluation.
Securing an environment of Windows platforms from abuse - external or
internal - is akin to trying to install sprinklers in a fireworks factory
where smoking on the job is permitted. -- Gene Spafford
learn french: http://www.youtube.com/watch?v=j1G-3laJJP0feature=related



Re: Resume - Mumps Developer

2008-06-25 Thread bofh
On Wed, Jun 25, 2008 at 9:18 PM, Lyndon Nerenberg [EMAIL PROTECTED] wrote:


 On 2008-Jun-25, at 18:15 , bofh wrote:

  Apparently not to be touched with a 10' pole.


 Like COBOL, the language that invented almost all of the paradigms
 popularized by C.

 Read some history -- it's enlightening ;-)


Even better, I read the rants of someone who had to work with it.  Of
course, he could be doing reverse psychology and trying to scare people away
from the field so that he can be the only highly paid conslutant left.  I
don't think that's the case though, because the pain shone through his
rants...


-- 
http://www.glumbert.com/media/shift
http://www.youtube.com/watch?v=tGvHNNOLnCk
This officer's men seem to follow him merely out of idle curiosity. --
Sandhurst officer cadet evaluation.
Securing an environment of Windows platforms from abuse - external or
internal - is akin to trying to install sprinklers in a fireworks factory
where smoking on the job is permitted. -- Gene Spafford
learn french: http://www.youtube.com/watch?v=j1G-3laJJP0feature=related



DRM, i965 and X3100: runs nice and stable

2008-06-25 Thread guilherme m. schroeder
Hi,

I just enabled inteldrm and here's what i got:

inteldrm0 at vga1
info: [drm] Intel i965GM (unit 0)
info: [drm] AGP at 0xc000 256MB
info: [drm] Initialized i915 1.6.0 20080312

X.org:

(==) AIGLX enabled
drmOpenDevice: node name is /dev/drm0
drmOpenDevice: open result is 11, (OK)
drmAvailable: 1
drmOpenDevice: node name is /dev/drm0
drmOpenDevice: open result is 11, (OK)
drmAvailable: 1
drmOpenByBusid: Searching for BusID pci::00:02.0
drmOpenDevice: node name is /dev/drm0
drmOpenDevice: open result is 11, (OK)
drmOpenByBusid: drmOpenMinor returns 11
drmOpenByBusid: drmGetBusid reports pci::00:02.0
(II) [drm] DRM interface version 1.2
(II) [drm] DRM open master succeeded.
(II) intel(0): [drm] Using the DRM lock SAREA also for drawables.
(II) intel(0): [drm] framebuffer mapped by ddx driver
(II) intel(0): [drm] added 1 reserved context for kernel
(II) intel(0): X context handle = 0x1
(II) intel(0): [drm] installed DRM signal handler
(**) intel(0): Framebuffer compression disabled
(**) intel(0): Tiling enabled
(WW) intel(0): remove MTRR d010 - d018
(==) intel(0): Write-combining range (0xd010,0x8) was already clear
(WW) intel(0): remove MTRR d018 - d020
(==) intel(0): Write-combining range (0xd018,0x8) was already clear
(==) intel(0): VideoRam: 262144 KB
(II) intel(0): Attempting memory allocation with tiled buffers.
(II) intel(0): Allocating 3840 scanlines for pixmap cache
(II) intel(0): Tiled allocation successful.
(II) intel(0): [drm] Registers = 0x4000
(II) intel(0): [drm] ring buffer = 0x40106000
(II) intel(0): [drm] mapped front buffer at 0xc005, handle = 0x40126000
(II) intel(0): [drm] mapped back buffer at 0xc196, handle = 0x40766000
(II) intel(0): [drm] mapped depth buffer at 0xc1fa, handle = 0x40da6000
(II) intel(0): [drm] mapped classic textures at 0xc25e, handle = 0x413e6000
(II) intel(0): [drm] Initialized kernel agp heap manager, 33554432
(II) intel(0): [dri] visual configs initialized
(II) intel(0): Page Flipping disabled
(WW) intel(0): remove MTRR d010 - d018
(==) intel(0): Write-combining range (0xd010,0x8) was already clear
(WW) intel(0): remove MTRR d018 - d020
(==) intel(0): Write-combining range (0xd018,0x8) was already clear
(WW) intel(0): set MTRR c000 - d000
(==) intel(0): Write-combining range (0xc000,0x1000)
(II) intel(0): vgaHWGetIOBase: hwp-IOBase is 0x03d0, hwp-PIOOffset is 0x
(WW) intel(0): remove MTRR a - b
(==) intel(0): Write-combining range (0xa,0x1) was already clear
(II) intel(0): Using XFree86 Acceleration Architecture (XAA)
Screen to screen bit blits
Solid filled rectangles
8x8 mono pattern filled rectangles
Indirect CPU to Screen color expansion
Solid Horizontal and Vertical Lines
Offscreen Pixmaps
Setting up tile and stipple cache:
32 128x128 slots
27 256x256 slots
10 512x512 slots
(==) intel(0): Backing store disabled
(==) intel(0): Silken mouse enabled
(II) intel(0): Initializing HW Cursor
(II) intel(0): [DRI] installation complete
(II) intel(0): [drm] dma control initialized, using IRQ 11

(WW) AIGLX: 3D driver claims to not support visual 0x23
(WW) AIGLX: 3D driver claims to not support visual 0x24
(WW) AIGLX: 3D driver claims to not support visual 0x25
(WW) AIGLX: 3D driver claims to not support visual 0x26
(WW) AIGLX: 3D driver claims to not support visual 0x27
(WW) AIGLX: 3D driver claims to not support visual 0x28
(WW) AIGLX: 3D driver claims to not support visual 0x29
(WW) AIGLX: 3D driver claims to not support visual 0x2a
(WW) AIGLX: 3D driver claims to not support visual 0x2b
(WW) AIGLX: 3D driver claims to not support visual 0x2c
(WW) AIGLX: 3D driver claims to not support visual 0x2d
(WW) AIGLX: 3D driver claims to not support visual 0x2e
(WW) AIGLX: 3D driver claims to not support visual 0x2f
(WW) AIGLX: 3D driver claims to not support visual 0x30
(WW) AIGLX: 3D driver claims to not support visual 0x31
(WW) AIGLX: 3D driver claims to not support visual 0x32
(II) AIGLX: Loaded and initialized /usr/X11R6/lib/modules/dri/i965_dri.so
(II) GLX: Initialized DRI GL provider for screen 0


glxgears:

5488 frames in 5.0 seconds = 1097.567 FPS
5889 frames in 5.0 seconds = 1177.602 FPS
5894 frames in 5.0 seconds = 1178.735 FPS

glxgears runs smooth and the system seens stable.

Keep the good work! Thanks.



Re: anyone related to m5hosting on this list

2008-06-25 Thread m5hosting
Siju,
   I can help you with anything related to M5Hosting. I am not on this list
currently, but Google Alerts found a new page with M5Hosting on it. How can
I help ?
   I can help you directly if you send email to support and say you want it
to go to Mike.

Thanks !
Mike


Siju George wrote:
 
 Hi,
 
 Is there anybody related to
 
 http://www.m5hosting.com/
 
 on this list?
 
 Thanks
 
 Siju
 
 
 

-- 
View this message in context: 
http://www.nabble.com/anyone-related-to-m5hosting-on-this-list-tp18112769p18125421.html
Sent from the openbsd user - misc mailing list archive at Nabble.com.



Anyone from this list at BlackHat or DefCon? And a query...

2008-06-25 Thread Amarendra Godbole
Hi,

It would be a pleasure meeting folks on this mailing list, including
OBSD developers' at BH or DefCon. Thanks.

It is generally said that the BH or DefCon wireless network is
hostile, and sane individuals must not use their laptop for the risk
of being compromised. My question is: if I use OpenBSD -current, with
not much additional configuration (apart from the Intel wifi
firmware), will the connection be reasonable secure? (Not sure if this
hostility is a publicity stunt). Thanks again.

-Amarendra



Re: OpenBGPD crash

2008-06-25 Thread Erich

Hi,

i haven an bgpd that is randonly crashing to on 2 openbsd 4.2 boxes, but 
its not while

the reconfiguring process.

Jun 24 16:08:13 router1 bgpd[3063]: Lost child: route decision engine 
terminated; signal 11
Jun 24 16:08:13 router1 bgpd[189]: fatal in SE: session_dispatch_imsg: 
pipe closed: Operation now i

n progress

what is needed to do for debuging here?

erich

Peter Bristow schrieb:

Hi
I've had a couple of problems with OpenBGPD.
I have an Extreme Networks switch that has a session to 4.2-RELEASE and
4.3-RELEASE OpenBSD route servers.
1 of each. Today I saw both OpenBGPD processes crash. Below is the logs from
the 4.2 server. I haven't got access
to the 4.3 logs as it crashed hard on bgpd restart and it's in a remote
location.

Jun 18 17:01:23 rs bgpd[4338]: SE reconfigured
Jun 18 17:01:23 rs bgpd[12450]: nexthop 92.48.119.135 now valid: via
217.112.81.97
Jun 18 17:01:24 rs bgpd[15659]: RDE reconfigured
Jun 18 17:02:05 rs bgpd[4338]: neighbor 92.48.95.5: received notification:
HoldTimer expired, unknown subcode 0
Jun 18 17:02:05 rs bgpd[4338]: neighbor 92.48.95.5: state change Established
- Idle, reason: NOTIFICATION received
Jun 18 17:02:56 rs bgpd[4338]: Connection attempt from neighbor
92.48.95.5while session is in state Idle
Jun 18 17:03:10 rs bgpd[12450]: rereading config
Jun 18 17:03:10 rs bgpd[12450]: nexthop 92.48.119.194 now valid: via
217.112.81.97
Jun 18 17:03:10 rs bgpd[12450]: nexthop 92.48.122.137 now valid: via
217.112.81.97

Jun 18 17:03:10 rs bgpd[12450]: nexthop 92.48.119.135 now valid: via
217.112.81.97  was the route added prior to the reload.

Jun 18 17:03:10 rs bgpd[12450]: nexthop 92.48.95.2 now valid: via
217.112.81.97
Jun 18 17:03:10 rs bgpd[12450]: nexthop 92.48.95.1 now valid: via
217.112.81.101
Jun 18 17:03:10 rs bgpd[12450]: nexthop 92.48.119.221 now valid: via
217.112.81.97
Jun 18 17:03:10 rs bgpd[4338]: SE reconfigured
Jun 18 17:03:10 rs bgpd[15659]: RDE reconfigured
Jun 18 17:03:54 rs bgpd[12450]: rereading config
Jun 18 17:03:54 rs bgpd[4338]: fatal in SE: session_dispatch_imsg: pipe
closed: Operation now in progress
Jun 18 17:03:54 rs bgpd[15659]: fatal in RDE: rde_dispatch_imsg_parent: pipe
closed

network 92.48.126.128/28 set { nexthop 92.48.119.135 community 64667:0 }
was the route added and caused the reload.

hex_7600=92.48.95.1
the_7600=92.48.95.2
rs1=92.48.95.3
rs2=92.48.95.4
bs3_x450=92.48.95.5

# global configuration
AS 29550
router-id $rs1
fib-update yes
include /etc/bgp/serverNextHops.conf
include /etc/bgp/statics.conf
group iBGP sessions {
softreconfig in yes
softreconfig out yes
local-address $rs1
remote-as 29550
announce all
neighbor $rs2
neighbor $hex_7600
neighbor $the_7600
neighbor $bs3_x450
}

[EMAIL PROTECTED]:/home/jestasudo cat /etc/bgp/statics.conf

network 92.48.125.0/25 set { nexthop 92.48.114.130 community 64667:0 }
network 92.48.125.128/25 set { nexthop 92.48.114.132 community 64667:0 }

[EMAIL PROTECTED]:/home/jestasudo cat /etc/bgp/serverNextHops.conf

#1213805260
network 92.48.111.124/30 set { nexthop 92.48.119.68 community 64667:0 }
network 92.48.111.120/30 set { nexthop 92.48.119.70 community 64667:0 }
network 92.48.111.116/30 set { nexthop 92.48.119.69 community 64667:0 }
network 92.48.111.112/30 set { nexthop 92.48.119.3 community 64667:0 }
network 92.48.111.108/30 set { nexthop 92.48.119.72 community 64667:0 }
network 92.48.111.104/30 set { nexthop 92.48.119.5 community 64667:0 }
network 92.48.111.100/30 set { nexthop 92.48.119.74 community 64667:0 }
network 92.48.111.96/30 set { nexthop 92.48.119.6 community 64667:0 }
network 92.48.111.92/30 set { nexthop 92.48.119.75 community 64667:0 }
network 92.48.111.80/30 set { nexthop 92.48.124.2 community 64667:0 }
network 92.48.111.12/30 set { nexthop 92.48.119.7 community 64667:0 }
network 92.48.111.144/30 set { nexthop 92.48.119.194 community 64667:0 }
network 92.48.124.160/28 set { nexthop 92.48.122.135 community 64667:0 }
network 92.48.124.144/28 set { nexthop 92.48.122.137 community 64667:0 }
network 92.48.124.128/28 set { nexthop 92.48.122.136 community 64667:0 }
network 92.48.114.124/30 set { nexthop 92.48.119.2 community 64667:0 }
network 92.48.114.120/30 set { nexthop 92.48.119.2 community 64667:0 }
network 92.48.114.116/30 set { nexthop 92.48.119.131 community 64667:0 }
network 92.48.120.224/27 set { nexthop 92.48.119.221 community 64667:0 }
network 92.48.111.152/30 set { nexthop 92.48.119.80 community 64667:0 }
network 92.48.111.128/30 set { nexthop 92.48.119.20 community 64667:0 }
network 92.48.111.136/30 set { nexthop 92.48.119.79 community 64667:0 }
network 92.48.111.148/30 set { nexthop 92.48.119.68 community 64667:0 }
network 92.48.111.132/30 set { nexthop 92.48.119.78 community 64667:0 }
network 92.48.111.140/30 set { nexthop 92.48.124.3 community 64667:0 }
network 92.48.126.128/28 set { nexthop 92.48.119.135 community 64667:0 }
network 92.48.126.144/28 set { nexthop 92.48.119.136 community 

Re: Anyone from this list at BlackHat or DefCon? And a query...

2008-06-25 Thread Tomas Bodzar
Just try ;-)

Better will be use -stable with block in all in pf.
Everything is about your settings and wants.
OBSD has good chance,that attacker will better leave.


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Amarendra Godbole
Sent: Thursday, June 26, 2008 6:07 AM
To: OpenBSD general usage list
Subject: Anyone from this list at BlackHat or DefCon? And a query...

Hi,

It would be a pleasure meeting folks on this mailing list, including
OBSD developers' at BH or DefCon. Thanks.

It is generally said that the BH or DefCon wireless network is
hostile, and sane individuals must not use their laptop for the risk
of being compromised. My question is: if I use OpenBSD -current, with
not much additional configuration (apart from the Intel wifi
firmware), will the connection be reasonable secure? (Not sure if this
hostility is a publicity stunt). Thanks again.

-Amarendra