Celluless - uz popust od 25% do 19. jula
Top Shop JoÅ¡ nije kasno! Celluless - anticelulit masažer dostupan Vam je uz popust od 25% Imate joÅ¡ 4 dana da Celluless poruÄite meÄu prvima Putem Interneta joÅ¡ uvek je dostupna ograniÄena koliÄina ovog proizvoda i to po posebnoj promotivnoj ceni! Puna cena: 3990,00 RSD VaÅ¡a cena: 2.990,00 RSD VAŽNO! Ponuda traje do 19. jula ili do isteka zaliha! PoruÄite odmah i uÅ¡tedite! Samo putem Interneta i samo do 19. jula proizvod je dostupan po ovoj ceni! Ovu elektronsku poÅ¡tu primate, ukoliko ste svojevoljno ostavili svoju e-mail adresu na nekom od sajtova Top Shop-a, uÄestvovali u posebnim akcijama ili se prijavili za e-Äasopis Top Shop-a ili nekog od nasih brendova. Ponuda data u ovom e-mailu važi iskljuÄivo za porudžbine upuÄene putem Interneta ili broja telefona 021 489 26 60. Ukoliko ne želite viÅ¡e da primate naÅ¡e elektronske poruke, za odjavljivanje sa naÅ¡e e-mailing liste, kliknite ovde. Studio Moderna d.o.o., Laze NanÄiÄa 50, 21000 Novi Sad, Tel: 021 489 26 60, Fax: 021 489 26 08, E-mail: [EMAIL PROTECTED] [IMAGE]If you would no longer like to receive our emails please unsubscribe by clicking here.
Re: gnome-display-properties for OpenBSD ?
--- On Tue, 7/15/08, Jasper Lievisse Adriaanse <[EMAIL PROTECTED]> wrote: > From: Jasper Lievisse Adriaanse <[EMAIL PROTECTED]> > Subject: Re: gnome-display-properties for OpenBSD ? > hi, > > yep, correct. please see > http://openbsd.org/faq/current.html for more > details. > > cheers, > jasper > hi jasper, i have set up OpenBSD installation for -current branch, and have testing gnome. but if i want using gnome-display-properties for -stable (4.3) branch how to do it? i have search gnome-display-properties using google so i can compile in my stable machine, but i can't found this source code. thx
Re: 'Nother broken package - git-1.5.4.2
On 7/15/08, Darrin Chandler <[EMAIL PROTECTED]> wrote: > > > Out of curiosity, what happens when you install X but answer > > > "no" to the question about intending to RUN X? > > > > exactly the same thing that happens when you answer "yes". > > > Doesn't that question effect the machdep.allowaperature sysctl? Other > than that, I don't think it does anything. Exactly. allowaperture has no effect on installing X.
Re: 'Nother broken package - git-1.5.4.2
On Tue, 15 Jul 2008, Ted Unangst wrote: > try it. install x, then resist the urge to type "startx". can you do > it? can you ignore the siren song, or do your fingers fly forth of > their own volition? I have it on good authority that plugging one's ears with wax helps. -d
Re: 'Nother broken package - git-1.5.4.2
On Tue, Jul 15, 2008 at 08:11:37PM -0400, Ted Unangst wrote: > On 7/15/08, Tony Abernethy <[EMAIL PROTECTED]> wrote: > > Ted Unangst wrote: > > > tar zxf X > > > pkg_add crap > > > rm -r /usr/X11R6 > > > > > > > Lovely. > > > > Out of curiosity, what happens when you install X but answer > > "no" to the question about intending to RUN X? > > exactly the same thing that happens when you answer "yes". Doesn't that question effect the machdep.allowaperature sysctl? Other than that, I don't think it does anything. -- Darrin Chandler| Phoenix BSD User Group | MetaBUG [EMAIL PROTECTED] | http://phxbug.org/ | http://metabug.org/ http://www.stilyagin.com/ | Daemons in the Desert | Global BUG Federation
Re: 'Nother broken package - git-1.5.4.2
No, I want it *MY* way, all the time! Oh, wait, I'm not talking about a burger or my own distro, am I? On 7/15/08, Marco Peereboom <[EMAIL PROTECTED]> wrote: > You could also use a less retarded source control system. > > On Tue, Jul 15, 2008 at 05:51:04PM -0500, L. V. Lammert wrote: >> On Tue, 15 Jul 2008, Will Maier wrote: >> >> > On Tue, Jul 15, 2008 at 02:30:36PM -0500, L. V. Lammert wrote: >> > > Depends on tcl-8.4.7p6, .. maybe, .. but what does X have to do >> > > with git?? >> > >> > http://en.wikipedia.org/wiki/Tk_%28framework%29 >> > >> > > Can't install tk-8.4.7p1: lib not found X11.11.1 >> > > >> > > Is this a broken dependency >> > >> > No. >> > >> > > or . . . ? Seems like git installed cleanly on 4.2. >> > >> > Are you going to send a mail to misc@ every time a package depends >> > on X? >> > >> No, I'm sending an email to misc when a package depends on X that should >> **NOT** depend on X. That's what's broken, obviously, if you're saying I >> should be installing X on a production server. NOT. >> >> Lee > > -- http://www.glumbert.com/media/shift http://www.youtube.com/watch?v=tGvHNNOLnCk "This officer's men seem to follow him merely out of idle curiosity." -- Sandhurst officer cadet evaluation. "Securing an environment of Windows platforms from abuse - external or internal - is akin to trying to install sprinklers in a fireworks factory where smoking on the job is permitted." -- Gene Spafford learn french: http://www.youtube.com/watch?v=j1G-3laJJP0&feature=related
Re: 'Nother broken package - git-1.5.4.2
You could also use a less retarded source control system. On Tue, Jul 15, 2008 at 05:51:04PM -0500, L. V. Lammert wrote: > On Tue, 15 Jul 2008, Will Maier wrote: > > > On Tue, Jul 15, 2008 at 02:30:36PM -0500, L. V. Lammert wrote: > > > Depends on tcl-8.4.7p6, .. maybe, .. but what does X have to do > > > with git?? > > > > http://en.wikipedia.org/wiki/Tk_%28framework%29 > > > > > Can't install tk-8.4.7p1: lib not found X11.11.1 > > > > > > Is this a broken dependency > > > > No. > > > > > or . . . ? Seems like git installed cleanly on 4.2. > > > > Are you going to send a mail to misc@ every time a package depends > > on X? > > > No, I'm sending an email to misc when a package depends on X that should > **NOT** depend on X. That's what's broken, obviously, if you're saying I > should be installing X on a production server. NOT. > > Lee
Re: 'Nother broken package - git-1.5.4.2
On 7/15/08, Tony Abernethy <[EMAIL PROTECTED]> wrote: > Ted Unangst wrote: > > tar zxf X > > pkg_add crap > > rm -r /usr/X11R6 > > > > Lovely. > > Out of curiosity, what happens when you install X but answer > "no" to the question about intending to RUN X? exactly the same thing that happens when you answer "yes". > > Seems like if a package has any kind of GUI helper/configurator > thingee then it has a legitimate requirement for something in X. > > Does installing X on a production server require that you > RUN X on that server? try it. install x, then resist the urge to type "startx". can you do it? can you ignore the siren song, or do your fingers fly forth of their own volition?
Re: 'Nother broken package - git-1.5.4.2
Ted Unangst wrote: > > On 7/15/08, L. V. Lammert <[EMAIL PROTECTED]> wrote: > > No, I'm sending an email to misc when a package depends on > X that should > > **NOT** depend on X. That's what's broken, obviously, if > you're saying I > > should be installing X on a production server. NOT. > > tar zxf X > pkg_add crap > rm -r /usr/X11R6 > Lovely. Out of curiosity, what happens when you install X but answer "no" to the question about intending to RUN X? Seems like if a package has any kind of GUI helper/configurator thingee then it has a legitimate requirement for something in X. Does installing X on a production server require that you RUN X on that server?
Re: 'Nother broken package - git-1.5.4.2
On 7/15/08, L. V. Lammert <[EMAIL PROTECTED]> wrote: > No, I'm sending an email to misc when a package depends on X that should > **NOT** depend on X. That's what's broken, obviously, if you're saying I > should be installing X on a production server. NOT. tar zxf X pkg_add crap rm -r /usr/X11R6
Re: 'Nother broken package - git-1.5.4.2
On Tue, Jul 15, 2008 at 05:51:04PM -0500, L. V. Lammert wrote: > On Tue, 15 Jul 2008, Will Maier wrote: > > > On Tue, Jul 15, 2008 at 02:30:36PM -0500, L. V. Lammert wrote: > > > Depends on tcl-8.4.7p6, .. maybe, .. but what does X have to do > > > with git?? > > > > http://en.wikipedia.org/wiki/Tk_%28framework%29 > > > > > Can't install tk-8.4.7p1: lib not found X11.11.1 > > > > > > Is this a broken dependency > > > > No. > > > > > or . . . ? Seems like git installed cleanly on 4.2. > > > > Are you going to send a mail to misc@ every time a package depends > > on X? > > > No, I'm sending an email to misc when a package depends on X that should > **NOT** depend on X. That's what's broken, obviously, that's your opinion which unfortunately is not based on any kind of fact. these dependencies on X are ultimately from upstream. in the cases you've mentioned, the upstream package has dependencies on code which has dependencies on X related packages. webalizer uses gd, a graphics library. makes sense to me that a graphics library would need elements from X. git uses tk, another graphics toolkit. if you want to keep bitching about these kinds of dependencies, please go bitch at upstream. if you want to be nice and reasonable, you could ask on ports@ if it's possible to separate the dependencies. -- [EMAIL PROTECTED] SDF Public Access UNIX System - http://sdf.lonestar.org
Re: 'Nother broken package - git-1.5.4.2
On Tue, 15 Jul 2008, Will Maier wrote: > On Tue, Jul 15, 2008 at 02:30:36PM -0500, L. V. Lammert wrote: > > Depends on tcl-8.4.7p6, .. maybe, .. but what does X have to do > > with git?? > > http://en.wikipedia.org/wiki/Tk_%28framework%29 > > > Can't install tk-8.4.7p1: lib not found X11.11.1 > > > > Is this a broken dependency > > No. > > > or . . . ? Seems like git installed cleanly on 4.2. > > Are you going to send a mail to misc@ every time a package depends > on X? > No, I'm sending an email to misc when a package depends on X that should **NOT** depend on X. That's what's broken, obviously, if you're saying I should be installing X on a production server. NOT. Lee
Re: [Samba] Re: Winbind syslog errors and Domain Local Groups
Ah, thanks, didn't even realize 3.0.31 had been released. I'll give that a try. -HKS On Tue, Jul 15, 2008 at 6:15 PM, Jeremy Allison <[EMAIL PROTECTED]> wrote: > On Tue, Jul 15, 2008 at 06:12:41PM -0400, (private) HKS wrote: >> I was finally able to correct these errors by enabling Kerberos >> and changing the security model from domain to ads, but now >> I've run into the same problem reported here: >> http://www.usenet-forums.com/samba/394092-re-samba-accessing-member-server-prompts-credentials.html >> >> After about 5 minutes of uptime the winbind service throws >> several errors into syslog and nothing referencing it will work >> correctly until I restart it. The processes are still running. >> >> Jul 15 17:57:26 testbox winbindd[994]: [2008/07/15 17:57:26, 0] >> nsswitch/winbindd_dual.c:async_request_timeout_handler(182) >> Jul 15 17:57:26 testbox kernel: Jul 15 17:57:26 testbox winbindd[994]: >> [2008/07/15 17:57:26, 0] >> nsswitch/winbindd_dual.c:async_request_timeout_handler(182) >> Jul 15 17:57:26 testbox winbindd[994]: >> async_request_timeout_handler: child pid 992 is not responding. >> Closing connection to it. >> Jul 15 17:57:26 testbox kernel: Jul 15 17:57:26 testbox winbindd[994]: >> async_request_timeout_handler: child pid 992 is not responding. >> Closing connection to it. >> >> This is Samba 3.0.30 and Kerberos 5 running on FreeBSD 7.0. >> >> Can anyone help me out here? > > Known bug that was explicitly fixed in 3.0.31. > > Jeremy.
Re: UPDATE: mozilla-firefox-3.0
Jim Razmus wrote on Tue, Jul 15, 2008 at 04:58:18PM -0400: > I follow the link to Adobe's site where they "don't have a plugin > for my platform" and refresh 10-20 times to sprinkle some > love in their web server logs. Adobe will certainly get that exactly right: You clearly want foobar binary plugins! :-/ Scratching my head, Ingo P.S. << __ME_TOO_SCNR__ Certainly, you will all listen to Marco. He is advocating small doses of sanity, difficult as that may seem with respect to firefox... __ME_TOO_SCNR__
Re: 'Nother broken package - git-1.5.4.2
On Tue, Jul 15, 2008 at 04:52:16PM -0400, Nick Guenther wrote: > On Tue, Jul 15, 2008 at 4:28 PM, Will Maier <[EMAIL PROTECTED]> wrote: > > On Tue, Jul 15, 2008 at 02:30:36PM -0500, L. V. Lammert wrote: > >> Depends on tcl-8.4.7p6, .. maybe, .. but what does X have to do > >> with git?? > > > > http://en.wikipedia.org/wiki/Tk_%28framework%29 > > > >> Can't install tk-8.4.7p1: lib not found X11.11.1 > >> > >> Is this a broken dependency > > > > No. > > > > It's because of gitk which is a repository browser (or so > http://git.or.cz/course/svn.html tells me). Annoying that there's no > git-no_x11 but them's the breaks. Makes no sense. It's clearly a multi-package situation, not flavor.
Re: 'Nother broken package - git-1.5.4.2
On 2008-07-15, L. V. Lammert <[EMAIL PROTECTED]> wrote: > Depends on tcl-8.4.7p6, .. maybe, .. but what does X have to do with git?? ports@, dammit. > Can't install tk-8.4.7p1: lib not found X11.11.1 > > Is this a broken dependency or . . . ? Seems like git installed cleanly on > 4.2. And check the commit log for -current.
Re: UPDATE: mozilla-firefox-3.0
* Marco Peereboom <[EMAIL PROTECTED]> [080715 15:08]: > I disagree. > > We should have both versions available in packages; preferably both > would work on the same system too. > > I have been playing with FF3 and I'd have to say that minus the speedup > overall the browser took a step backwards. What particularly ticked me > off was: > * outlook like popup in the right-hand corner to notify that a > download completed (now there is some information one *has* to see) > Not only is that beyond irritating there is no obvious way to turn > off. I had to turn it off in about:config which brings me to the > second irritant. > > I'd like to therefore set > browser.download.manager.showAlertOnComplete = false > > * When one enter about:config a warning shows up that says: "if you > click here you can void your warranty. What warranty??? When I > launched the browser the first time I already had to accept a license > that explicitly says "no warranty"; wtf? > > To fix that we can set these by default: > general.warnOnAboutConfig = false > browser.EULA.3.accepted = true > > * While trying to make FF3 a better browser for OpenBSD we might as well > set plugin.default_plugin_disabled = false to remove the annoying > message that scrolls down your screen at snails pace asking if you > want to install a friggin non-existing plug-in. > I would like it to automatically ping Adobe looking for the Flash player that is not available. When I'm particularly irritated with some site that demands Flash, I follow the link to Adobe's site where they "don't have a plugin for my platform" and refresh 10-20 times to sprinkle some love in their web server logs. FF automating that for me would be great! Jim
Re: 'Nother broken package - git-1.5.4.2
On Tue, Jul 15, 2008 at 4:28 PM, Will Maier <[EMAIL PROTECTED]> wrote: > On Tue, Jul 15, 2008 at 02:30:36PM -0500, L. V. Lammert wrote: >> Depends on tcl-8.4.7p6, .. maybe, .. but what does X have to do >> with git?? > > http://en.wikipedia.org/wiki/Tk_%28framework%29 > >> Can't install tk-8.4.7p1: lib not found X11.11.1 >> >> Is this a broken dependency > > No. > It's because of gitk which is a repository browser (or so http://git.or.cz/course/svn.html tells me). Annoying that there's no git-no_x11 but them's the breaks.
Re: pf - antispoof and alias ip addresses
On Tue, Jul 15, 2008 at 10:17:47PM +0200, [EMAIL PROTECTED] wrote: > Hi, > Want to know if antispoof also include the alias ip address(es) off > the given interface? It does: $ sudo ifconfig lo0 alias 1.2.3.4 netmask 255.255.255.255 $ ifconfig lo0 lo0: flags=8049 mtu 33204 groups: lo inet 127.0.0.1 netmask 0xff00 inet6 ::1 prefixlen 128 inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4 inet 1.2.3.4 netmask 0x $ sudo cat /etc/pf.conf antispoof for lo0 $ sudo pfctl -e -f /etc/pf.conf pf enabled $ sudo pfctl -sr block drop in on ! lo0 inet from 127.0.0.0/8 to any block drop in on ! lo0 inet from 1.2.3.4 to any block drop in on ! lo0 inet6 from ::1 to any Martin
Re: 'Nother broken package - git-1.5.4.2
On Tue, Jul 15, 2008 at 02:30:36PM -0500, L. V. Lammert wrote:
> Depends on tcl-8.4.7p6, .. maybe, .. but what does X have to do
> with git??
http://en.wikipedia.org/wiki/Tk_%28framework%29
> Can't install tk-8.4.7p1: lib not found X11.11.1
>
> Is this a broken dependency
No.
> or . . . ? Seems like git installed cleanly on 4.2.
Are you going to send a mail to misc@ every time a package depends
on X?
--
o--{ Will Maier }--o
| web:...http://www.lfod.us/ | [EMAIL PROTECTED] |
*-[ BSD: Live Free or Die ]*
pf - antispoof and alias ip addresses
Hi, Want to know if antispoof also include the alias ip address(es) off the given interface? hostname.fxp0: inet 192.168.0.10 255.255.255.0 NONE inet alias 192.168.0.11 pf.conf: antispoof quick for fxp0 The faq say pf would expand the antispoof rule into the following two rules: block in quick on ! fxp0 inet from 192.168.0.0/24 to any block in from 192.168.0.10 to any Does pf create also the following rules: block in from 192.168.0.11 to any Or does I have to create this additionaly rule explicitly? Thanks --- E-Mail mit adon gesendet (http://www.adon.li)/
amd64 with 4Go and azalia
Hi all, I have a amd64 computer with 4Go of memory. When i boot i have this error : azalia0 at pci1 dev 0 function 1 vendor "ATI", unknown product 0xaa30 rev 0x00: can't map device i/o space azalia1 at pci0 dev 27 function 0 "Intel 82801I HD Audio" rev 0x02: can't map device i/o space If i remove 2 Go of memory. These errors disappear. I Have try to disable pci memory mapping in the bios. My computer have ~3,2 GB of ram but my computer freeze randomly. Someone has an idea? My dmesg : OpenBSD 4.4-beta (ROHFF.MP) #0: Tue Jul 15 20:31:24 CEST 2008 [EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/ROHFF.MP real mem = 4281348096 (4083MB) avail mem = 4157829120 (3965MB) mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.4 @ 0xf06e0 (71 entries) bios0: vendor American Megatrends Inc. version "0704" date 10/30/2007 bios0: ASUSTeK Computer INC. P5K acpi0 at bios0: rev 2 acpi0: tables DSDT FACP APIC MCFG OEMB HPET OSFR acpi0: wakeup devices P0P2(S4) P0P1(S4) UAR1(S4) PS2K(S4) EUSB(S4) USBE(S4) P0P5(S4) P0P6(S4) P0P7(S4) P0P8(S4) P0P9(S4) USB0(S4) USB1(S4) USB2(S4) USB3 (S4) USB4(S4) USB5(S4) USB6(S4) P0P4(S4) acpitimer0 at acpi0: 3579545 Hz, 24 bits acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz, 2405.74 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,CX16,xTPR,NXE,LONG cpu0: 4MB 64b/line 16-way L2 cache cpu0: apic clock running at 267MHz cpu1 at mainbus0: apid 1 (application processor) cpu1: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz, 2405.46 MHz cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,CX16,xTPR,NXE,LONG cpu1: 4MB 64b/line 16-way L2 cache cpu2 at mainbus0: apid 2 (application processor) cpu2: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz, 2405.46 MHz cpu2: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,CX16,xTPR,NXE,LONG cpu2: 4MB 64b/line 16-way L2 cache cpu3 at mainbus0: apid 3 (application processor) cpu3: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz, 2405.46 MHz cpu3: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,CX16,xTPR,NXE,LONG cpu3: 4MB 64b/line 16-way L2 cache ioapic0 at mainbus0 apid 4 pa 0xfec0, version 20, 24 pins acpihpet0 at acpi0: can't map i/o space acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus 1 (P0P2) acpiprt2 at acpi0: bus 4 (P0P1) acpiprt3 at acpi0: bus -1 (P0P5) acpiprt4 at acpi0: bus -1 (P0P6) acpiprt5 at acpi0: bus -1 (P0P7) acpiprt6 at acpi0: bus 2 (P0P8) acpiprt7 at acpi0: bus -1 (P0P9) acpiprt8 at acpi0: bus 3 (P0P4) acpicpu0 at acpi0: PSS acpicpu1 at acpi0: PSS acpicpu2 at acpi0: PSS acpicpu3 at acpi0: PSS acpibtn0 at acpi0: PWRB pci0 at mainbus0 bus 0: configuration mode 1 pchb0 at pci0 dev 0 function 0 "Intel 82G33 Host" rev 0x02 ppb0 at pci0 dev 1 function 0 "Intel 82G33 PCIE" rev 0x02: apic 4 int 16 (irq 11) pci1 at ppb0 bus 1 vga1 at pci1 dev 0 function 0 vendor "ATI", unknown product 0x9442 rev 0x00 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) agp0 at vga1: no integrated graphics azalia0 at pci1 dev 0 function 1 vendor "ATI", unknown product 0xaa30 rev 0x00: can't map device i/o space uhci0 at pci0 dev 26 function 0 "Intel 82801I USB" rev 0x02: apic 4 int 16 (irq 11) uhci1 at pci0 dev 26 function 1 "Intel 82801I USB" rev 0x02: apic 4 int 21 (irq 3) uhci2 at pci0 dev 26 function 2 "Intel 82801I USB" rev 0x02: apic 4 int 18 (irq 5) ehci0 at pci0 dev 26 function 7 "Intel 82801I USB" rev 0x02: can't map memory space azalia1 at pci0 dev 27 function 0 "Intel 82801I HD Audio" rev 0x02: can't map device i/o space ppb1 at pci0 dev 28 function 0 "Intel 82801I PCIE" rev 0x02: apic 4 int 17 (irq 10) pci2 at ppb1 bus 3 ppb2 at pci0 dev 28 function 4 "Intel 82801I PCIE" rev 0x02: apic 4 int 17 (irq 10) pci3 at ppb2 bus 2 jmb0 at pci3 dev 0 function 0 "JMicron JMB363 IDE/SATA" rev 0x03 ahci0 at jmb0: apic 4 int 16 (irq 11), unable to map registers pciide0 at jmb0: DMA, channel 0 wired to native-PCI, channel 1 wired to native-PCI pciide0: using apic 4 int 16 (irq 11) for native-PCI interrupt wd0 at pciide0 channel 0 drive 0: wd0: 16-sector PIO, LBA48, 156334MB, 320173056 sectors atapiscsi0 at pciide0 channel 0 drive 1 scsibus0 at atapiscsi0: 2 targets, initiator 7 cd0 at scsibus0 targ 0 lun 0: ATAPI 5/cdrom removable wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 6 cd0(pciide0:0:1): using PIO mode 4, Ultra-DMA mode 4 pciide0: channel 1 disabled (no drives) uhci3 at pci0 dev 29 function 0 "Intel 82801I USB" rev 0x02: apic 4 int 23 (irq 7) uhci4 at pci0 dev 29 function 1 "In
'Nother broken package - git-1.5.4.2
Depends on tcl-8.4.7p6, .. maybe, .. but what does X have to do with git?? Can't install tk-8.4.7p1: lib not found X11.11.1 Is this a broken dependency or . . . ? Seems like git installed cleanly on 4.2. Lee
Re:
2007-06-27 17:08:16 Theo de Raadt wrote: > Various developers are busy implimenting workarounds for serious bugs > in Intel's Core 2 cpu. > > These processors are buggy as hell, and some of these bugs don't just > cause development/debugging problems, but will *ASSUREDLY* be > exploitable from userland code. > > As is typical, BIOS vendors will be very late providing workarounds / > fixes for these processors bugs. Some bugs are unfixable and cannot > be worked around. Intel only provides detailed fixes to BIOS vendors > and large operating system groups. Open Source operating systems are > largely left in the cold. > > Full (current) errata from Intel: > > http://download.intel.com/design/processor/specupdt/31327914.pdf > > - We bet there are many more errata not yet announced -- every month > this file gets larger. > - Intel understates the impact of these erraata very significantly. > Almost all operating systems will run into these bugs. > - Basically the MMU simply does not operate as specified/implimented > in previous generations of x86 hardware. It is not just buggy, > but Intel has gone further and defined "new ways to handle page > tables" (see page 58). > - Some of these bugs are along the lines of "buffer overflow"; where > a write-protect or non-execute bit for a page table entry is > ignored. Others are floating point instruction non-coherencies, or > memory corruptions -- outside of the range of permitted writing for > the process -- running common instruction sequences. > - All of this is just unbelievable to many of us. > > An easier summary document for some people to read: > > > http://www.geek.com/images/geeknews/2006Jan/core_duo_errata__2006_01_2 >1__full.gif > > Note that some errata like AI65, AI79, AI43, AI39, AI90, AI99 scare > the hell out of us. Some of these are things that cannot be fixed in > running code, and some are things that every operating system will do > until about mid-2008, because that is how the MMU has always been > managed on all generations of Intel/AMD/whoeverelse hardware. Now > Intel is telling people to manage the MMU's TLB flushes in a new and > different way. Yet even if we do so, some of the errata listed are > unaffected by doing so. > > As I said before, hiding in this list are 20-30 bugs that cannot be > worked around by operating systems, and will be potentially > exploitable. I would bet a lot of money that at least 2-3 of them > are. > > For instance, AI90 is exploitable on some operating systems (but not > OpenBSD running default binaries). > > At this time, I cannot recommend purchase of any machines based on the > Intel Core 2 until these issues are dealt with (which I suspect will > take more than a year). Intel must be come more transparent. > > (While here, I would like to say that AMD is becoming less helpful day > by day towards open source operating systems too, perhaps because > their serious errata lists are growing rapidly too). http://conference.hackinthebox.org/hitbsecconf2008kl/?page_id=214 -- Best wishes, Vadim Zhukov
Re: pfctl
if answer exists in man page then don't ask here, can I have a Regular Expression for "the answer" structure, so I can grep and make sure it isn't there before I post ... On Tue, Jul 15, 2008 at 12:20 PM, Stuart Henderson <[EMAIL PROTECTED]> wrote: > On 2008/07/15 11:49, Giancarlo Razzolini wrote: > > > > > Please, don't misinterpret me. I like to help people, like many others > > here. But, i think that should be a mantra for every a admin: "Read the > > manual, before you ask.". > > If something's totally obvious I tend not to answer... But I totally > overlooked "pfctl -sI -v" until I looked it up for this question, and > I've read that manual page plenty of times, so I learned something. > I would guess I'm not the only one. > > -- Some software money can't buy. For everything else there's Micros~1.
Re: pfctl
On 2008/07/15 11:49, Giancarlo Razzolini wrote: > > > Please, don't misinterpret me. I like to help people, like many others > here. But, i think that should be a mantra for every a admin: "Read the > manual, before you ask.". If something's totally obvious I tend not to answer... But I totally overlooked "pfctl -sI -v" until I looked it up for this question, and I've read that manual page plenty of times, so I learned something. I would guess I'm not the only one.
Re: pppoe0 doesn't get ip address - how to reconnect ?
2008/7/15 Henning Brauer <[EMAIL PROTECTED]>:
> * Xavier Millihs-Lacroix <[EMAIL PROTECTED]> [2008-07-15 14:15]:
> > > pppoe automagically reconnects
> > So if my ip change I still have to reload pf ?
>
> not if you write your pf.conf correctly
>
> Here is my actual version. I 'will add later spamd, sshbruteforece.
Do you think my pf.conf is correct ?
Xavier.
# macros
ext_if="pppoe0"
int_if="vr1"
tcp_services="{ 22, 113 }"
icmp_types="echoreq"
comp3="192.168.1.2"
# options
set block-policy return
set loginterface $ext_if
set skip on lo
# scrub
scrub in
# nat/rdr
nat on $ext_if from !($ext_if) -> ($ext_if:0)
nat-anchor "ftp-proxy/*"
rdr-anchor "ftp-proxy/*"
rdr pass on $int_if proto tcp to port ftp -> 127.0.0.1 port 8021
rdr on $ext_if proto tcp from any to any port 80 -> $comp3
# filter rules
block in
pass out keep state
anchor "ftp-proxy/*"
antispoof quick for { lo $int_if }
pass in on $ext_if inet proto tcp from any to ($ext_if) \
port $tcp_services flags S/SA keep state
pass in on $ext_if inet proto tcp from any to $comp3 port 80 \
flags S/SA synproxy state
pass in inet proto icmp all icmp-type $icmp_types keep state
pass in quick on $int_if
/etc/pf.conf
# macros
ext_if="pppoe0"
int_if="vr1"
tcp_services="{ 22, 113, 443 }"
icmp_types="echoreq"
srvexchange="192.168.1.2"
tcp_srvexchange="{ 25, 110, 1024 }"
srvfiles="192.168.1.10"
tcp_srvfiles="{ 873, 3389 }"
# options
set block-policy return
set loginterface $ext_if
set skip on lo
# scrub
scrub in
# nat/rdr
nat on $ext_if from !($ext_if) -> ($ext_if:0)
nat-anchor "ftp-proxy/*"
rdr-anchor "ftp-proxy/*"
rdr pass on $int_if proto tcp to port ftp -> 127.0.0.1 port 8021
rdr on $ext_if proto tcp from any to any port $tcp_srvfiles -> $srvfiles
rdr on $ext_if proto tcp from any to any port $tcp_srvexchange ->
$srvexchange
# filter rules
block in
pass out keep state
anchor "ftp-proxy/*"
antispoof quick for { lo $int_if }
pass in on $ext_if inet proto tcp from any to ($ext_if) \
port $tcp_services flags S/SA keep state
pass in on $ext_if inet proto tcp from any to $srvfiles port $tcp_srvfiles \
flags S/SA synproxy state
pass in on $ext_if inet proto tcp from any to $srvexchange port
$tcp_srvexchange \
flags S/SA synproxy state
pass in inet proto icmp all icmp-type $icmp_types keep state
pass in quick on $int_if
Re: HP LaserJet 1018 (HPLJ1018) firmware upload
Gmail Account wrote: Marc Balmer wrote: * Gmail Account wrote: I have the above mentioned USB printer. It requires the foo2zjs driver which I've successfully compiled from the foo2zjs web site (following the OpenBSD instructions). Unlike most printers, the HPLJ1018 does not have "persistent" firmware. Instead, its firmware (the file 'sihp1018.dl') must be uploaded to it every time it is physically powered on. When I power up the HPLJ1018 and plug it in to one of my PC's USB ports, dmesg shows: ulpt0 at uhub0 port 2 configuration 1 interface 0 "Hewlett-Packard HP LaserJet 1018" rev 2.00/1.00 addr 2 ulpt0: using bi-directional mode However, when I try: $ cat hp1018.dl > /dev/ulpt0 The terminal cursor just hangs. The same thing happens when I try it as root. Eventually, things time out and I get the response: ksh: cannot create /dev/ulpt0: Device busy I've tried disabling ulpt0 at boot: boot> -c disable ulpt quit this is correct and then: # sihp1018.dl > /dev/ugen0 use cat sihp1018.dl >/dev/ugen0 and of course configure your printcap to print to ugen0. it works, we use ton's of these printers (I think even the same model) but it still does not appear to load properly - the cursor just goes back to # shortly thereafter and nothing happens. Anything I print disappears into a black hole. When I try things in linux the printer emits a few noises and the print head moves and subsequent printing works without a hitch. I fear I'm doing something wrong in uploading the firmware (am I missing steps?). I'm quite new to OpenBSD and am having trouble finding guidance on how to upload firmware to peripheral devices. Can anyone help me out? Kind regards Ooops. My mistake. The missing 'cat' was a typo. Sry. I'm using CUPS so IIRC /etc/printcap is overwritten by CUPS and that I should edit /etc/cups/printers.conf instead. (Is that correct?) If I do this, and change the line: DeviceURI usb:/dev/ulpt0 to: DeviceURI usb:/dev/ugen0 I get the error message "Unable to open USB device "usb:/dev/ugen0": Permission denied". I can only see '_cups' in /etc/group and when I change the permissions of /dev/ugen0 to 646 I still get this permission error. Why would you have permission 646? Try firstly the most naive approach by changing permissions as # chmod 0666 /dev/ugen* # chmod 0666 /dev/usb* then once you get everything working adjust the group ownership to _cups and restrict permissions to something like 0664 or even more restrictive. I'm stumped.
Re: tcpdump -X
On Tue, 15 Jul 2008 16:49:46 +0200 "GVG GVG" <[EMAIL PROTECTED]> wrote: > Just out of curiosity what's this 'MTU' stands for? http://www.google.com/search?q=define%3A%20MTU Typically it's 1500. -- It is better to hear the rebuke of the wise, Than for a man to hear the song of fools. Ecclesiastes 7:5 [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]
Re: tcpdump -X
On Tue, 15 Jul 2008 21:49:46 +0700, GVG GVG <[EMAIL PROTECTED]> wrote: It stand for Maximum Transmit Unit. On Tue, Jul 15, 2008 at 3:54 PM, David Hill <[EMAIL PROTECTED]> wrote: On Tue, Jul 15, 2008 at 03:42:58PM +0200, GVG GVG wrote: > Dear list, > > was going through the OpenBSD tcpdump version and couldn't identify anything > like the '-A' flag in order to capture full web sites etc. Tried optin '-X' > but didn't work! Should I use '-s snaplen' but what snaplen value do I have > to define. Tried few combinations with no success! > > Thanks for your help > > George > Use the size of your MTU, which can be found my using ifconfig. -- David Hill Thanks for your prompt reply. Just out of curiosity what's this 'MTU' stands for? Thanks George -- insandotpraja(at)gmaildotcom
Re: tcpdump -X
GVG GVG wrote: On Tue, Jul 15, 2008 at 3:54 PM, David Hill <[EMAIL PROTECTED]> wrote: On Tue, Jul 15, 2008 at 03:42:58PM +0200, GVG GVG wrote: Dear list, was going through the OpenBSD tcpdump version and couldn't identify anything like the '-A' flag in order to capture full web sites etc. Tried optin '-X' but didn't work! Should I use '-s snaplen' but what snaplen value do I have to define. Tried few combinations with no success! Thanks for your help George Use the size of your MTU, which can be found my using ifconfig. -- David Hill Thanks for your prompt reply. Just out of curiosity what's this 'MTU' stands for? it's Maximum Transfer Unit -- With best regards, Gregory Edigarov
Re: tcpdump -X
On Tue, Jul 15, 2008 at 04:49:46PM +0200, GVG GVG wrote: > Just out of curiosity what's this 'MTU' stands for? http://www.acronymfinder.com/MTU.html
Re: tcpdump -X
On Tue, Jul 15 2008 at 49:16, GVG GVG wrote: > On Tue, Jul 15, 2008 at 3:54 PM, David Hill <[EMAIL PROTECTED]> wrote: > > On Tue, Jul 15, 2008 at 03:42:58PM +0200, GVG GVG wrote: > > > Dear list, > > > > > > was going through the OpenBSD tcpdump version and couldn't identify > > anything > > > like the '-A' flag in order to capture full web sites etc. Tried optin > > '-X' > > > but didn't work! Should I use '-s snaplen' but what snaplen value do I > > have > > > to define. Tried few combinations with no success! > > > > > > Thanks for your help > > > > > > George > > > > > > > Use the size of your MTU, which can be found my using ifconfig. > > > > -- > > David Hill > > Thanks for your prompt reply. > > Just out of curiosity what's this 'MTU' stands for? Maximum Transmission Unit. Its the biggest number of bytes that can be transmited on the media (ISO layer 2). You can go on wikipedia for more informations http://en.wikipedia.org/wiki/Maximum_transmission_unit Claer
Re: HP LaserJet 1018 (HPLJ1018) firmware upload
Marc Balmer wrote: * Gmail Account wrote: I have the above mentioned USB printer. It requires the foo2zjs driver which I've successfully compiled from the foo2zjs web site (following the OpenBSD instructions). Unlike most printers, the HPLJ1018 does not have "persistent" firmware. Instead, its firmware (the file 'sihp1018.dl') must be uploaded to it every time it is physically powered on. When I power up the HPLJ1018 and plug it in to one of my PC's USB ports, dmesg shows: ulpt0 at uhub0 port 2 configuration 1 interface 0 "Hewlett-Packard HP LaserJet 1018" rev 2.00/1.00 addr 2 ulpt0: using bi-directional mode However, when I try: $ cat hp1018.dl > /dev/ulpt0 The terminal cursor just hangs. The same thing happens when I try it as root. Eventually, things time out and I get the response: ksh: cannot create /dev/ulpt0: Device busy I've tried disabling ulpt0 at boot: boot> -c disable ulpt quit this is correct and then: # sihp1018.dl > /dev/ugen0 use cat sihp1018.dl >/dev/ugen0 and of course configure your printcap to print to ugen0. it works, we use ton's of these printers (I think even the same model) but it still does not appear to load properly - the cursor just goes back to # shortly thereafter and nothing happens. Anything I print disappears into a black hole. When I try things in linux the printer emits a few noises and the print head moves and subsequent printing works without a hitch. I fear I'm doing something wrong in uploading the firmware (am I missing steps?). I'm quite new to OpenBSD and am having trouble finding guidance on how to upload firmware to peripheral devices. Can anyone help me out? Kind regards Ooops. My mistake. The missing 'cat' was a typo. Sry. I'm using CUPS so IIRC /etc/printcap is overwritten by CUPS and that I should edit /etc/cups/printers.conf instead. (Is that correct?) If I do this, and change the line: DeviceURI usb:/dev/ulpt0 to: DeviceURI usb:/dev/ugen0 I get the error message "Unable to open USB device "usb:/dev/ugen0": Permission denied". I can only see '_cups' in /etc/group and when I change the permissions of /dev/ugen0 to 646 I still get this permission error. I'm stumped.
Re: tcpdump -X
On Tue, Jul 15, 2008 at 3:54 PM, David Hill <[EMAIL PROTECTED]> wrote: > On Tue, Jul 15, 2008 at 03:42:58PM +0200, GVG GVG wrote: > > Dear list, > > > > was going through the OpenBSD tcpdump version and couldn't identify > anything > > like the '-A' flag in order to capture full web sites etc. Tried optin > '-X' > > but didn't work! Should I use '-s snaplen' but what snaplen value do I > have > > to define. Tried few combinations with no success! > > > > Thanks for your help > > > > George > > > > Use the size of your MTU, which can be found my using ifconfig. > > -- > David Hill > > Thanks for your prompt reply. Just out of curiosity what's this 'MTU' stands for? Thanks George
Re: pfctl
Vijay Sankar escreveu: > On July 14, 2008 08:16:08 pm Giancarlo Razzolini wrote: > >> Stuart Henderson escreveu: >> >>> On 2008-07-14, Charlie Clark <[EMAIL PROTECTED]> wrote: >>> I have noticed that you are unable to view the currently loaded options for pf using pfctl, even 'pfctl -sa' doesn't show the options eg. set skip on tun0. >>> Some of the "set" options aren't directly passed to PF, they're >>> just used in pfctl. Others are available from various modifiers to >>> pfctl -s, e.g. for skip rules: >>> >>> -s Interfaces Show the list of interfaces and interface >>> drivers available to PF. When used together with -v, it additionally >>> lists which interfaces have skip rules activated. When used together >>> with -vv, in- terface statistics are also shown. -i can be used to >>> select an interface or a group of interfaces. >>> >> Another RTFM thread. I think there should be more emphasis about how >> good and complete openbsd doc is, on the download page of the site, to >> avoid this kind of thread. >> >> My regards, >> > > Well, first of all let me say that your past replies about ifstated and > queuing and some of other threads you responded to were helpful to me. I am > glad you did not ask the OP to RTFM during those conversations. > > I agree with you that OpenBSD man pages (and FAQ and style and mdoc and a > whole lot of stuff) are excellent but a message like the one that Stuart > Henderson sent helps that person out and probably encourages everyone to read > the docs more thoroughly. For me, reading Stuart's replies on various topics > in the archives (and his replies to some of my questions posted to misc@) > have pointed me in the right direction on what to read and where to look and > has been very valuable. > > So really hope he and you and others continue to help out people whenever > possible and not ask them to RTFM. > > Please, don't misinterpret me. I like to help people, like many others here. But, i think that should be a mantra for every a admin: "Read the manual, before you ask.". I wasn't talking specifically about you, but in general. OpenBSD has a so good documentation, that people doesn't always use. I think that is much easier read the docs than asking in the list. But, i see this behavior in every list i sign, so it's not openbsd specific. I was just saying that there should be more emphasis about how good the doc is. I know that faq says this, i know that there the marvelous intro man pages. And there is some warnings on the mailing list page telling you to RTFM. But people just don't get it. Sorry for my aggressive response, i apology. My regards, -- Giancarlo Razzolini http://lock.razzolini.adm.br Linux User 172199 Red Hat Certified Engineer no:804006389722501 Verify:https://www.redhat.com/certification/rhce/current/ Moleque Sem Conteudo Numero #002 OpenBSD Stable Ubuntu 8.04 Hardy Herom 4386 2A6F FFD4 4D5F 5842 6EA0 7ABE BBAB 9C0E 6B85
Re: tcpdump -X
On Tue, Jul 15, 2008 at 03:42:58PM +0200, GVG GVG wrote: > Dear list, > > was going through the OpenBSD tcpdump version and couldn't identify anything > like the '-A' flag in order to capture full web sites etc. Tried optin '-X' > but didn't work! Should I use '-s snaplen' but what snaplen value do I have > to define. Tried few combinations with no success! > > Thanks for your help > > George > Use the size of your MTU, which can be found my using ifconfig. -- David Hill
HP LaserJet 1018 (HPLJ1018) firmware upload
I have the above mentioned USB printer. It requires the foo2zjs driver which I've successfully compiled from the foo2zjs web site (following the OpenBSD instructions). Unlike most printers, the HPLJ1018 does not have "persistent" firmware. Instead, its firmware (the file 'sihp1018.dl') must be uploaded to it every time it is physically powered on. When I power up the HPLJ1018 and plug it in to one of my PC's USB ports, dmesg shows: ulpt0 at uhub0 port 2 configuration 1 interface 0 "Hewlett-Packard HP LaserJet 1018" rev 2.00/1.00 addr 2 ulpt0: using bi-directional mode However, when I try: $ cat hp1018.dl > /dev/ulpt0 The terminal cursor just hangs. The same thing happens when I try it as root. Eventually, things time out and I get the response: ksh: cannot create /dev/ulpt0: Device busy I've tried disabling ulpt0 at boot: boot> -c disable ulpt quit and then: # sihp1018.dl > /dev/ugen0 but it still does not appear to load properly - the cursor just goes back to # shortly thereafter and nothing happens. Anything I print disappears into a black hole. When I try things in linux the printer emits a few noises and the print head moves and subsequent printing works without a hitch. I fear I'm doing something wrong in uploading the firmware (am I missing steps?). I'm quite new to OpenBSD and am having trouble finding guidance on how to upload firmware to peripheral devices. Can anyone help me out? Kind regards
tcpdump -X
Dear list, was going through the OpenBSD tcpdump version and couldn't identify anything like the '-A' flag in order to capture full web sites etc. Tried optin '-X' but didn't work! Should I use '-s snaplen' but what snaplen value do I have to define. Tried few combinations with no success! Thanks for your help George
Re: Decipering "Understanding IP addressing"
I got non-deliverable receipts back from Nick when I sent this last message: http://kerneltrap.org/mailarchive/openbsd-misc/2008/7/12/2438104 Apparently Nick is not getting my email, or I've ended up on his blacklist for some reason. Nick, if you're reading this, could you drop me a mail? Is ropers at gmail dot com on your blacklist? Is nick at holland-consulting dot net still the correct email address to reach you under? Sorry for the noise, --ropers 2008/7/15 Mail Delivery Subsystem <[EMAIL PROTECTED]>: > This is an automatically generated Delivery Status Notification > > Delivery to the following recipient failed permanently: > > [EMAIL PROTECTED] > > Technical details of permanent failure: > TEMP_FAILURE: Google tried to deliver your message, but it was rejected by > the recipient domain. We recommend contacting the other email provider for > further information about the cause of this error. The error that the other > server returned was: 451 451 Temporary failure, please try again later. > (state 15). > > - Original message - > > Received: by 10.114.195.19 with SMTP id s19mr15258750waf.110.1215843515313; >Fri, 11 Jul 2008 23:18:35 -0700 (PDT) > Received: by 10.114.179.20 with HTTP; Fri, 11 Jul 2008 23:18:35 -0700 (PDT) > Message-ID: <[EMAIL PROTECTED]> > Date: Sat, 12 Jul 2008 08:18:35 +0200 > From: ropers <[EMAIL PROTECTED]> > To: "Paul de Weerd" <[EMAIL PROTECTED]> > Subject: Re: Decipering "Understanding IP addressing" > Cc: "Nick Holland" <[EMAIL PROTECTED]>, misc@openbsd.org > In-Reply-To: <[EMAIL PROTECTED]> > MIME-Version: 1.0 > Content-Type: text/plain; charset=ISO-8859-1 > Content-Transfer-Encoding: 7bit > Content-Disposition: inline > References: <[EMAIL PROTECTED]> > <[EMAIL PROTECTED]> > <[EMAIL PROTECTED]> > <[EMAIL PROTECTED]> > <[EMAIL PROTECTED]> > <[EMAIL PROTECTED]> > <[EMAIL PROTECTED]> > > 2008/7/11 Paul de Weerd <[EMAIL PROTECTED]>: > >> I must admist, I've only read the parts you pointed out, but so far >> I'm very much impressed with how they managed to totally confuse the >> reader with incorrect statements and wrong examples. The section on >> IPv6 is probably best removed or mostly rewritten. > > I could use pdfedit to remove pages 43 through 51 (pages 45 thru 53 of > the pdf), and I also had that thought. But entirely removing that part > may make it harder to get 3com to accept the changed version. OTOH it > > - Message truncated -
Re: pfctl
On July 14, 2008 08:16:08 pm Giancarlo Razzolini wrote: > Stuart Henderson escreveu: > > On 2008-07-14, Charlie Clark <[EMAIL PROTECTED]> wrote: > >> I have noticed that you are unable to view the currently loaded options > >> for pf using pfctl, even 'pfctl -sa' doesn't show the options eg. set > >> skip on tun0. > > > > Some of the "set" options aren't directly passed to PF, they're > > just used in pfctl. Others are available from various modifiers to > > pfctl -s, e.g. for skip rules: > > > > -s Interfaces Show the list of interfaces and interface > > drivers available to PF. When used together with -v, it additionally > > lists which interfaces have skip rules activated. When used together > > with -vv, in- terface statistics are also shown. -i can be used to > > select an interface or a group of interfaces. > > Another RTFM thread. I think there should be more emphasis about how > good and complete openbsd doc is, on the download page of the site, to > avoid this kind of thread. > > My regards, Well, first of all let me say that your past replies about ifstated and queuing and some of other threads you responded to were helpful to me. I am glad you did not ask the OP to RTFM during those conversations. I agree with you that OpenBSD man pages (and FAQ and style and mdoc and a whole lot of stuff) are excellent but a message like the one that Stuart Henderson sent helps that person out and probably encourages everyone to read the docs more thoroughly. For me, reading Stuart's replies on various topics in the archives (and his replies to some of my questions posted to misc@) have pointed me in the right direction on what to read and where to look and has been very valuable. So really hope he and you and others continue to help out people whenever possible and not ask them to RTFM. -- Vijay Sankar, M.Eng., P.Eng. ForeTell Technologies Limited 59 Flamingo Avenue, Winnipeg, MB Canada R3J 0X6 Phone: +1 204 885 9535, E-Mail: [EMAIL PROTECTED]
Re: pppoe0 doesn't get ip address - how to reconnect ?
* Xavier Millihs-Lacroix <[EMAIL PROTECTED]> [2008-07-15 14:15]: > > pppoe automagically reconnects > So if my ip change I still have to reload pf ? not if you write your pf.conf correctly
Re: pppoe0 doesn't get ip address - how to reconnect ?
Thanks a lot. I will make some tests this evening. > pppoe automagically reconnects So if my ip change I still have to reload pf ? using ppp.linkdown ? Xavier. 2008/7/15 Henning Brauer <[EMAIL PROTECTED]>: > * Xavier Millihs-Lacroix <[EMAIL PROTECTED]> [2008-07-15 09:02]: > > Sometimes when I boot a soekris box (net5501) - OpenBSD 4.3, I didn't get > > each times an ip address for the pppoe0 link. > > This is a problem as I can connect to this box only remotely. > > I didn't find on the documentation how to reconnect automatically if the > > link goes down. > > pppoe automagically reconnects. > > many ISPs have some logic to deny you from opening two ppp sessions, > so by the time your box reboots the old sessions has not yet timed > out. You can't do all that much but waiting for the old session to > expire, pppoe will retry all the time. > > -- > Henning Brauer, [EMAIL PROTECTED], [EMAIL PROTECTED] > BS Web Services, http://bsws.de > Full-Service ISP - Secure Hosting, Mail and DNS Services > Dedicated Servers, Rootservers, Application Hosting - Hamburg & Amsterdam
Re: pppoe0 doesn't get ip address - how to reconnect ?
On Tue, 15 Jul 2008, Henning Brauer wrote: * Xavier Millihs-Lacroix <[EMAIL PROTECTED]> [2008-07-15 09:02]: Sometimes when I boot a soekris box (net5501) - OpenBSD 4.3, I didn't get each times an ip address for the pppoe0 link. This is a problem as I can connect to this box only remotely. I didn't find on the documentation how to reconnect automatically if the link goes down. pppoe automagically reconnects. many ISPs have some logic to deny you from opening two ppp sessions, so by the time your box reboots the old sessions has not yet timed out. You can't do all that much but waiting for the old session to expire, pppoe will retry all the time. Just put "ifconfig pppoe0 down" in your rc.shutdown script and this problem should be solved. I wrote a short piece of code for rc.local, that was waiting for the pppoe link to come up, before I discoverd that. Kind regards, Markus
Re: PF DiffServ
On Tue, 15 Jul 2008 13:39:57 +0700, Claer <[EMAIL PROTECTED]> wrote: On Tue, Jul 15 2008 at 32:01, Insan Praja SW wrote: Hi Misc@, I was wondering if I could use pf to read and write DSCP code to packets, maybe using "scrub" or altq? If there is a way to do it using Puffy, maybe I could try it on my box. Thanks, Hello, Actually, 4.3 can read DSCP but not write it. Write support was commited last month (http://marc.info/?l=openbsd-cvs&m=121014159632272&w=2) so you can certainly test this functionnality with a snapshot. Claer Geezz... "cruel and sick" OS.. On to it.. Thanks, Insan -- insandotpraja(at)gmaildotcom
Re: pppoe0 doesn't get ip address - how to reconnect ?
* Xavier Millihs-Lacroix <[EMAIL PROTECTED]> [2008-07-15 09:02]: > Sometimes when I boot a soekris box (net5501) - OpenBSD 4.3, I didn't get > each times an ip address for the pppoe0 link. > This is a problem as I can connect to this box only remotely. > I didn't find on the documentation how to reconnect automatically if the > link goes down. pppoe automagically reconnects. many ISPs have some logic to deny you from opening two ppp sessions, so by the time your box reboots the old sessions has not yet timed out. You can't do all that much but waiting for the old session to expire, pppoe will retry all the time. -- Henning Brauer, [EMAIL PROTECTED], [EMAIL PROTECTED] BS Web Services, http://bsws.de Full-Service ISP - Secure Hosting, Mail and DNS Services Dedicated Servers, Rootservers, Application Hosting - Hamburg & Amsterdam
Re: pppoe0 doesn't get ip address - how to reconnect ?
Hi Xavier, Look at this file: ppp.linkdown.sample it will be in /etc/ppp/ 2008/7/15 Xavier Millihs-Lacroix <[EMAIL PROTECTED]>: > Sometimes when I boot a soekris box (net5501) - OpenBSD 4.3, I didn't get > each times an ip address for the pppoe0 link. > This is a problem as I can connect to this box only remotely. > I didn't find on the documentation how to reconnect automatically if the > link goes down. > > Any ideas ? > > Xavier. > > > Here is my configuration : > > /etc/sysctl.conf file : > > net.inet.ip.forwarding=1 > net.inet6.ip6.forwarding=1 > > /etc/rc.conf.local file : > > named_flags="" # nameserver > > ntpd_flags="" # timeserver > > dhcpd_flags="" # DHCP server > > ftpproxy_flags="" # ftp proxy server > > pf=YES > > pf_rules=/etc/pf.conf > > check_quotas=NO # desactivate quotas > > /etc/resolv.conf file : > > lookup file bind > > nameserver 127.0.0.1 > > */etc/hostname.pppoe0 file file :* > > inet 0.0.0.0 255.255.255.255 0.0.0.1 pppoedev vr0 \ > > authproto pap authname my_USER authkey my_PASSWORD up > > !/sbin/route add default 0.0.0.1 > > */etc/hostname.**vr0 file :* > > up > > * > * > > */etc/hostname.**vr1 file :* > > inet 10.0.0.1 255.255.255.0 NONE > > I don't have /etc/mygate file. > I don't have /var/named/named.boot file > I use pf. > > -- - Murilo da Silva Ijanc' (MuriloBSD) SILC: silc.br.dotbsd.org Canal: dotbsd E-mail: [EMAIL PROTECTED] End.: http://murilo.dotbsd.org
Re: It's possible to mirror OpenBSD manual page?
--- On Tue, 7/15/08, Marco Fretz <[EMAIL PROTECTED]> wrote: > From: Marco Fretz <[EMAIL PROTECTED]> > Subject: Re: It's possible to mirror OpenBSD manual page? > To: [EMAIL PROTECTED] > Cc: misc@openbsd.org > Date: Tuesday, July 15, 2008, 8:09 AM > my idea is that you can extract the directory structure out > of the > man44.tgz. of course then you have no search function, > etc.. > > as far as i know the man.cgi from openbsd is a script, > searching the > manpage files. maybe you can then us this to search the the > man page > files you got out of the man44.tgz > > greets > marco hi all, thanks you after google, i got two script http://www.freebsd.org/cgi/man.cgi/source and http://www.chedong.com/phpMan.php/source i'll try using this script with man44.tgz but i still don't know how to modificated this script because i can't using perl and php :) i think this script read man path from system, it's right eh? so if i run webserver + php + perl, and extract man44.tgz in my webserver, this script will read them? i'll try it :) thanks for you help all :)
Re: It's possible to mirror OpenBSD manual page?
On 2008-07-15, my mail <[EMAIL PROTECTED]> wrote: > i want using interface like http://www.openbsd.org/cgi-bin/man.cgi, > so i can browsing from my LAN without online, because i don't have > a 24 hours connection. try man2web (in ports/packages).
Re: It's possible to mirror OpenBSD manual page?
http://www.openbsd.org/cgi-bin/man.cgi?manpath=OpenBSD+Current The FAQ link leads to a page full of forgotten treasures Have a nice day On Tue, Jul 15, 2008 at 9:05 AM, my mail <[EMAIL PROTECTED]> wrote: > hi all > > i want using interface like http://www.openbsd.org/cgi-bin/man.cgi, so i can > browsing from my LAN without online, because i don't have a 24 hours > connection. > > so can i mirroring the OpenBSD manual website? > > thx
pf grouped per interface with anchors and brace ...
It might be not that useful, but looks nice :)
Loaded without errors. It should work :)
# Experimental filter
# too show the possibility using anchors for grouping
# interfaces in readable sections
table { 1.1.1.1 } persist
set skip on { lo }
scrub in on wan_if
nat on wan_if from (lan_if) to !(lan_if) -> (wan_if:0)
antispoof for { wan_if, lan_if }
anchor "external" on wan_if {
block # default rule
pass out proto { tcp, udp } to port < 1025 # restricted and maybe
not useful
pass in from # all for the admin
}
anchor "internal" on lan_if {
block out # default block into the lan
pass in# but all allowed from lan
}
---
Regards Karl-Heinz
[demime 1.01d removed an attachment of type application/pkcs7-signature which
had a name of smime.p7s]
Re: It's possible to mirror OpenBSD manual page?
Oops, sorry for the noice, i misread and i interpreted it as FAQ the first time.. 2008/7/15 Karl Karlsson <[EMAIL PROTECTED]>: > > > 2008/7/15 my mail <[EMAIL PROTECTED]>: > > hi all >> >> i want using interface like http://www.openbsd.org/cgi-bin/man.cgi, so i >> can browsing from my LAN without online, because i don't have a 24 hours >> connection. >> >> so can i mirroring the OpenBSD manual website? >> >> thx >> >> cvs -d $CVSROOT checkout www
Re: It's possible to mirror OpenBSD manual page?
2008/7/15 my mail <[EMAIL PROTECTED]>: > hi all > > i want using interface like http://www.openbsd.org/cgi-bin/man.cgi, so i > can browsing from my LAN without online, because i don't have a 24 hours > connection. > > so can i mirroring the OpenBSD manual website? > > thx > > cvs -d $CVSROOT checkout www
It's possible to mirror OpenBSD manual page?
hi all i want using interface like http://www.openbsd.org/cgi-bin/man.cgi, so i can browsing from my LAN without online, because i don't have a 24 hours connection. so can i mirroring the OpenBSD manual website? thx
pppoe0 doesn't get ip address - how to reconnect ?
Sometimes when I boot a soekris box (net5501) - OpenBSD 4.3, I didn't get each times an ip address for the pppoe0 link. This is a problem as I can connect to this box only remotely. I didn't find on the documentation how to reconnect automatically if the link goes down. Any ideas ? Xavier. Here is my configuration : /etc/sysctl.conf file : net.inet.ip.forwarding=1 net.inet6.ip6.forwarding=1 /etc/rc.conf.local file : named_flags="" # nameserver ntpd_flags="" # timeserver dhcpd_flags="" # DHCP server ftpproxy_flags="" # ftp proxy server pf=YES pf_rules=/etc/pf.conf check_quotas=NO # desactivate quotas /etc/resolv.conf file : lookup file bind nameserver 127.0.0.1 */etc/hostname.pppoe0 file file :* inet 0.0.0.0 255.255.255.255 0.0.0.1 pppoedev vr0 \ authproto pap authname my_USER authkey my_PASSWORD up !/sbin/route add default 0.0.0.1 */etc/hostname.**vr0 file :* up * * */etc/hostname.**vr1 file :* inet 10.0.0.1 255.255.255.0 NONE I don't have /etc/mygate file. I don't have /var/named/named.boot file I use pf.
