Re: missing clue regarding IPv6, vlans bridging

2008-07-29 Thread dermiste
I did some additional tests : pings using link-local addresses work
out-of-the-box, whether the target is hme0 or le0, but the problem
remains with public addresses (2000::/3)

On Mon, Jul 28, 2008 at 2:36 PM, dermiste [EMAIL PROTECTED] wrote:
 Hi misc,

 my ISP is kind enough to provide native IPv6 access, so I'd like to
 have a full-IPv6 intranet.
 IPv6 addresses are assigned with rtadv and IPv4 with DHCP

 The setup :

 curry: OpenBSD-current, Thinkpad x41.
  /etc/hostname.bge0:
up

  /etc/hostname.vlan0:
vlan 0 vlandev bge0 up
rtsol

  /etc/hostname.vlan1:
vlan 1 vlandev bge0 up
dhcp NONE NONE NONE


 debruijn: OpenBSD-4.3, Sun Ultra 1.
  /etc/hostname.le0:
dhcp NONE NONE NONE
up
rtsol

  /etc/hostname.hme0
lladdr 08:00:20:68:54:b1 up  #by default hme0's ll@ equals le0's ll@

  /etc/hostname.vlan0
vlan 0 vlandev hme0 up

  /etc/hostname.vlan1
inet 192.168.1.1 255.255.255.0 192.168.1.255 vlan 1 vlandev hme0 up

  /etc/bridgename.bridge0
add le0
add vlan0
up

 (plus nat on le0 inet from !(le0) - (le0))


  [Teh Intartubz]
 !
 !
 !
 +-+
 |   le0   |
 | +--+|
 |  bridge0|
 | !   |
 |   vlan0 vlan1   |
 | +--+--+ |
 |   hme0  |
 +-+
 !
 !
 !
   [my network]

 If it's not clear enough, vlan 0 is for IPv6 and vlan 1 for IPv4, so I
 can bridge vlan0 and le0.

 debruijn boots cleanly, gets all its adresses and routes, both v6 and v4.
 curry boots cleanly, gets all its addresses and routes, both v6 and v4

 then :
 1) from curry, I try to ping6 debruijn, but it says host unreachable
 2) from debruijn, I try to ping6 curry, and it works.
 3) from curry, I try to ping6 debruijn, and it works.

 I tcpdump'ed hme0, vlan0 and bridge0 during curry boot, and the
 packets flow through all 3, showing DHCP on vlan1 and rtadv on vlan0 +
 bridge0.
 During the pings, not a single packet goes through bridge0 or vlan0,
 but I've a lot of ICMPv6 neighbor sol on hme0 from curry during 1),
 then a successful neighbor sol - neighbor adv from debruijn to curry
 followed by echo requests and replies on hme0 during 2), then the same
 pattern from curry to debruijn on hme0 during 3).

 I really can't see what's wrong with my setup, clues anyone ?

 --
 Vincent Gross

 So, the essence of XML is this: the problem it solves is not hard, and
 it does not solve the problem well. -- Jerome Simeon  Phil Wadler




-- 
--
Vincent Gross

So, the essence of XML is this: the problem it solves is not hard, and
it does not solve the problem well. -- Jerome Simeon  Phil Wadler



Re: Performance issues with the DNS patch?

2008-07-29 Thread Damien Miller
On Sat, 26 Jul 2008, J Duke wrote:

 I realize that the whole fix to this DNS cache poisoning is to have
 random ports and random query ids, and that generating good, strong,
 random numbers costs cpu cycles and time. Has anyone else noticed the
 performance hit? Anything that I can do? Particularly I am open to any
 suggestions on commands that would help identify if that is really the
 problem, systat, vmstat, etc.

The additional overhead in the fixed bind is due to the need to manange
lots of open sockets. Since bind now randomises source ports, it must
open, bind and subsequently manage a UDP socket for each query whereas
before it only needed a single socket for its single query port.

Future releases of bind will reduce this overhead a little, but a good
portion of it is intrinsic.

That being said, you probably shouldn't be getting failed queries. Make
sure that:

1) You aren't running out of file descriptors in bind (check logs and
   ulimits against fstat -p [named-pid])

2) Your queries are not being firewalled. There are lots of firewalls
   that implement restrictions on high-numbered UDP ports. If you have
   such a firewall then you will cause queries to fail and be retried,
   which will cause additional load on your name server. -current tries
   hard to avoid well-known ports, but we can't predict every firewall
   configuration.

-d



Re: Atheros Drivers

2008-07-29 Thread bofh
Man,
It's not like the other thread even died yet.


-- 
http://www.glumbert.com/media/shift
http://www.youtube.com/watch?v=tGvHNNOLnCk
This officer's men seem to follow him merely out of idle curiosity. --
Sandhurst officer cadet evaluation.
Securing an environment of Windows platforms from abuse - external or
internal - is akin to trying to install sprinklers in a fireworks factory
where smoking on the job is permitted. -- Gene Spafford
learn french: http://www.youtube.com/watch?v=j1G-3laJJP0feature=related



Re: Atheros Drivers

2008-07-29 Thread chefren

On 7/29/08 5:59 AM, Ringo Kamens wrote:


Here's the full story, people seemed to be wondering if the drivers were
open/had binary blobs etc.


The new frontier? Yes there are no blobs in the code but because the 
important part of the code has come from a reverse engineereed blob and 
there is no full documentation there is only little difference.


Let's call it open by obscurity or so?

That FSF gives free publicity to Atheros and with Atheros ignores the 
facts, such as lacking documentations and that the main part was work of 
Reyk is morally defect.


+++chefren



Re: make ls not show dot-files as root

2008-07-29 Thread Marc Espie
On Tue, Jul 29, 2008 at 12:33:54AM +0200, Jesus Sanchez wrote:
 Hi, using 4.2.

 Just for curiosity...

 Can I make ls to NOT show
 the hidden files (.xinitrc , .vimrc, etc) when
 using as Root??

 Thanks 4 all.

Why is this a problem ?

When you're root, you really want to see all the files.

If you see this as inconvenient, this is because you're misusing the root
account, most likely doing your normal work as root.

THIS IS A HUGE MISTAKE.

Create a user account, use it. You have nice tools like sudo to become
root when you need it.

If you do everything as root, sooner or later, you will fuck up.

We have this old saying.

There are two kinds of sysadmins: those who have already done one big mistake
(and learnt from it) and those who haven't YET.



mount_ext2fs

2008-07-29 Thread mwa
Hi,
It might be worth noting in the man page that if the ext2 file system is
created outside openbsd that the inode size needs to be set to 128 in order
for it to work in obsd... (at least that seemed solve the problem for me
(4.3))...
Cheers
Mark
or take any action in reliance on its content.
***

***
This email has been checked for known viruses. 
***



Avviso di accredito

2008-07-29 Thread Poste Italiane
[IMAGE]

Ultime da Poste Italiane:

Gentile Cliente,
Ci e' arrivata una segnalazione di accredito di Euro 116,31 ricevuta dal
UFFICIO POSTALE di MILANO. L'accredito e' stato temporaneamente bloccato
a causa dell'incongruenza dei suoi dati, potra' ora verificare i suoi
dati e successivamente le sara' accreditato l'importo ricevuto
Accedi a Poste.it ; Acceda al servizio accrediti online di Poste.it e
verifichi le sue operazioni ;

Sai che da oggi offriamo il doppio dei servizi? Vi offriamo solo servizi
sicuri e di alta qualita'.

Cordiali saluti,

Poste Italiane

Societ` del gruppo: [IMAGE] [IMAGE] [IMAGE] [IMAGE] [IMAGE]

Ti preghiamo di non inviare alcuna risposta a questo messaggio e-mail,
poichi non verr` presa in considerazione.



Re: keyboard encoding

2008-07-29 Thread Hannah Schroeter
Hi!

On Mon, Jul 28, 2008 at 07:30:35PM +, Christian Weisgerber wrote:
Hannah Schroeter [EMAIL PROTECTED] wrote:

 Is your keyboard an USB one? I observe the same with an USB keyboard.

 - keyboard.encoding=us.swapctrlcaps has no effect (in
   /etc/wsconsctl.conf)

These settings only affect the _first_ keyboard in the system
(wskbd0).  Unfortunately, for a PC that is usually the PS/2 keyboard,
even if none is plugged in.

 This is a box that has *no* PS/2 connectors any more.

But it still has a PS/2 keyboard controller.  Check your dmesg.  It
probably includes something like this:

pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0

You're right:

$ grep pckb /var/run/dmesg.boot   
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
$

That's quite unfortunate though if you can't affect the non-X11 keyboard
mapping of secondary keyboards at all.

(And btw, in X11, somehow the setup of the keyboard mapping from
/etc/X11/xorg.conf is delayed, since about mid-December 2007. Before,
the mapping from there, and from a few xmodmap settings loaded in
.xinitrc, took effect immediately when X was up from startx, now it
takes quite some time, perhaps half a minute or so, for them to take
effect. Related to X11 privsep changes? Later changes using setxkbmap
take effect immediately, btw.)

Kind regards,

Hannah.



Re: OpenBSD 4.4-beta compile error in /usr/src/gnu/lib/libiberty

2008-07-29 Thread Bernard Parinas
On Sun, Jul 27, 2008 at 7:29 AM, Stuart Henderson [EMAIL PROTECTED]wrote:

 On 2008-07-26, Bernard Parinas [EMAIL PROTECTED] wrote:
  I'm having a problem building the userland. Compiling libc and libm was
  successful but not the libiberty.

 Use a snapshot.



Hi Stuart,

  It works as expected. Thanks for your help.


  -Bernard



Re: keyboard encoding

2008-07-29 Thread Mats O Jansson

On Tue, 29 Jul 2008, Hannah Schroeter wrote:


Hi!

On Mon, Jul 28, 2008 at 07:30:35PM +, Christian Weisgerber wrote:

Hannah Schroeter [EMAIL PROTECTED] wrote:



Is your keyboard an USB one? I observe the same with an USB keyboard.



- keyboard.encoding=us.swapctrlcaps has no effect (in
  /etc/wsconsctl.conf)



These settings only affect the _first_ keyboard in the system
(wskbd0).  Unfortunately, for a PC that is usually the PS/2 keyboard,
even if none is plugged in.



This is a box that has *no* PS/2 connectors any more.



But it still has a PS/2 keyboard controller.  Check your dmesg.  It
probably includes something like this:



pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0


You're right:

$ grep pckb /var/run/dmesg.boot
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
$

That's quite unfortunate though if you can't affect the non-X11 keyboard
mapping of secondary keyboards at all.


Thats not correct.

/sbin/kbd will change keyboard settings on ALL keyboards that has
support for the requested keyboard map.

wsconsctl has -f which allows you select which keyboard you are applying
the change to. For keyboard operations /dev/wskbd0 is default if not
specified.

read the man page!


(And btw, in X11, somehow the setup of the keyboard mapping from
/etc/X11/xorg.conf is delayed, since about mid-December 2007. Before,
the mapping from there, and from a few xmodmap settings loaded in
.xinitrc, took effect immediately when X was up from startx, now it
takes quite some time, perhaps half a minute or so, for them to take
effect. Related to X11 privsep changes? Later changes using setxkbmap
take effect immediately, btw.)


It will always take the mapping from xorg.conf if it is defined there.
If no keyboard language is specified X11 will now make a guess depending
on which keyboard layout wscons has. But since X11 is reading the keyboard
raw any change made to wscons after X11 is started doesn't change anything
in X11.

-moj


Kind regards,

Hannah.




Re: keyboard encoding

2008-07-29 Thread Hannah Schroeter
Hi!

On Tue, Jul 29, 2008 at 03:53:37PM +0200, Mats O Jansson wrote:
On Tue, 29 Jul 2008, Hannah Schroeter wrote:

On Mon, Jul 28, 2008 at 07:30:35PM +, Christian Weisgerber wrote:
Hannah Schroeter [EMAIL PROTECTED] wrote:

Is your keyboard an USB one? I observe the same with an USB keyboard.

- keyboard.encoding=us.swapctrlcaps has no effect (in
  /etc/wsconsctl.conf)

These settings only affect the _first_ keyboard in the system
(wskbd0).  Unfortunately, for a PC that is usually the PS/2 keyboard,
even if none is plugged in.

[...]

That's quite unfortunate though if you can't affect the non-X11 keyboard
mapping of secondary keyboards at all.

Thats not correct.

/sbin/kbd will change keyboard settings on ALL keyboards that has
support for the requested keyboard map.

wsconsctl has -f which allows you select which keyboard you are applying
the change to. For keyboard operations /dev/wskbd0 is default if not
specified.

read the man page!

Thanks for the hints. I see /etc/rc still can use /sbin/kbd to set the
keyboard type from /etc/kbdtype, in addition to load wsconsctl settings
from /etc/wsconsctl.conf (but the latter only to the default control
devices, to load settings to a *specific* different control device, it
seems you need to setup something on your own, e.g. in /etc/rc.local).

(And btw, in X11, somehow the setup of the keyboard mapping from
/etc/X11/xorg.conf is delayed, since about mid-December 2007. Before,
the mapping from there, and from a few xmodmap settings loaded in
.xinitrc, took effect immediately when X was up from startx, now it
takes quite some time, perhaps half a minute or so, for them to take
effect. Related to X11 privsep changes? Later changes using setxkbmap
take effect immediately, btw.)

It will always take the mapping from xorg.conf if it is defined there.
If no keyboard language is specified X11 will now make a guess depending
on which keyboard layout wscons has. But since X11 is reading the keyboard
raw any change made to wscons after X11 is started doesn't change anything
in X11.

No problem. I set the X11 keyboard layout using X11 means (xorg.conf,
setxkbmap, xmodmap). I just complained about the *delay* for the initial
setup from xorg.conf. That delay was introduced around in December 07.
Before that, the keyboard setup from xorg.conf used to be in effect
immediately after startup, now, directly after startup, it seems to be
the keyboard setup taken from wscons, and after about half a minute, it
suddenly changes to be that from xorg.conf.

Kind regards,

Hannah.



sparc64 kernel panic (SUN v440)

2008-07-29 Thread Michael

Hi all,

I just had my v440 crash on me with a weird message (at the end of the 
dmesg). Any ideas why that happened?




console is /[EMAIL PROTECTED],60/[EMAIL PROTECTED]/[EMAIL PROTECTED],3f8
Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California.  All rights reserved.
Copyright (c) 1995-2008 OpenBSD. All rights reserved. 
http://www.OpenBSD.org


OpenBSD 4.4-beta (GENERIC.MP) #364: Sun Jul 20 17:33:03 MDT 2008

[EMAIL PROTECTED]:/usr/src/sys/arch/sparc64/compile/GENERIC.MP
real mem = 8589934592 (8192MB)
avail mem = 8369397760 (7981MB)
mainbus0 at root: Sun Fire V440
cpu0 at mainbus0: SUNW,UltraSPARC-IIIi (rev 2.4) @ 1062 MHz
cpu0: physical 32K instruction (32 b/l), 64K data (32 b/l), 1024K 
external (64 b/l)

cpu1 at mainbus0: SUNW,UltraSPARC-IIIi (rev 2.4) @ 1062 MHz
cpu1: physical 32K instruction (32 b/l), 64K data (32 b/l), 1024K 
external (64 b/l)

cpu2 at mainbus0: SUNW,UltraSPARC-IIIi (rev 2.4) @ 1062 MHz
cpu2: physical 32K instruction (32 b/l), 64K data (32 b/l), 1024K 
external (64 b/l)

cpu3 at mainbus0: SUNW,UltraSPARC-IIIi (rev 2.4) @ 1062 MHz
cpu3: physical 32K instruction (32 b/l), 64K data (32 b/l), 1024K 
external (64 b/l)

memory-controller at mainbus0 not configured
memory-controller at mainbus0 not configured
memory-controller at mainbus0 not configured
memory-controller at mainbus0 not configured
schizo0 at mainbus0: Tomatillo, version 4, ign 700, bus A 0 to 0
schizo0: dvma map c000-dfff, iotdb 5174000-51f4000
pci0 at schizo0
cas0 at pci0 dev 2 function 0 Sun Cassini rev 0x20: ivec 0x718, 
address 00:03:ba:66:75:d1

brgphy0 at cas0 phy 1: BCM5421 10/100/1000baseT PHY, rev. 1
ppm at mainbus0 not configured
schizo1 at mainbus0: Tomatillo, version 4, ign 740, bus B 0 to 0
schizo1: dvma map c000-dfff, iotdb 552c000-55ac000
pci1 at schizo1
mpi0 at pci1 dev 2 function 0 Symbios Logic 53c1030 rev 0x08: ivec 0x740
scsibus0 at mpi0: 16 targets, initiator 7
schizo2 at mainbus0: Tomatillo, version 4, ign 780, bus A 0 to 0
schizo2: dvma map c000-dfff, iotdb 5694000-5714000
pci2 at schizo2
ebus0 at pci2 dev 7 function 0 Acer Labs M1533 ISA rev 0x00
flashprom at ebus0 addr 0-f, 290-290 not configured
rtc0 at ebus0 addr 70-71: m5819p
pcfiic0 at ebus0 addr 320-321 ivec 0x1b
iic0 at pcfiic0
SUNW,i2c-imax at iic0 addr 0xb not configured
SUNW,i2c-imax at iic0 addr 0xc not configured
admtemp0 at iic0 addr 0x18: max1617, cannot get control register
pca9555 at iic0 addr 0x21 not configured
pca9555 at iic0 addr 0x22 not configured
pca9555 at iic0 addr 0x23 not configured
pca9555 at iic0 addr 0x24 not configured
adm1026 at iic0 addr 0x2e not configured
admtemp1 at iic0 addr 0x32: max1617, cannot get control register
admtemp2 at iic0 addr 0x40: max1617, cannot get control register
admtemp3 at iic0 addr 0x48: max1617, cannot get control register
lmtemp0 at iic0 addr 0x4e: lm75, fails to respond
spd at iic0 addr 0x5b not configured
spd at iic0 addr 0x5c not configured
spd at iic0 addr 0x5d not configured
spd at iic0 addr 0x5e not configured
spd at iic0 addr 0x63 not configured
spd at iic0 addr 0x64 not configured
spd at iic0 addr 0x65 not configured
spd at iic0 addr 0x66 not configured
spd at iic0 addr 0x6b not configured
spd at iic0 addr 0x6c not configured
spd at iic0 addr 0x6d not configured
spd at iic0 addr 0x6e not configured
spd at iic0 addr 0x73 not configured
spd at iic0 addr 0x74 not configured
spd at iic0 addr 0x75 not configured
spd at iic0 addr 0x76 not configured
ics951601 at iic0 addr 0x69 not configured
power0 at ebus0 addr 800-82f ivec 0x1a
com0 at ebus0 addr 3f8-3ff ivec 0x22: ns16550a, 16 byte fifo
com0: console
com1 at ebus0 addr 2e8-2ef ivec 0x22: ns16550a, 16 byte fifo
rmc-comm at ebus0 addr 3e8-3ef ivec 0x22 not configured
cas1 at pci2 dev 2 function 0 NS Saturn rev 0x30: ivec 0x78c, address 
00:14:4f:1e:d6:b4

gentbi0 at cas1 phy 0: Generic ten-bit interface, rev. 0
ATI Rage XL rev 0x27 at pci2 dev 4 function 0 not configured
alipm0 at pci2 dev 6 function 0 Acer Labs M7101 Power rev 0x00: 223KHz 
clock

iic1 at alipm0
ohci0 at pci2 dev 10 function 0 Acer Labs M5237 USB rev 0x03: ivec 
0x7a1, version 1.0, legacy support
ohci1 at pci2 dev 11 function 0 Acer Labs M5237 USB rev 0x03: ivec 
0x7a5, version 1.0, legacy support
pciide0 at pci2 dev 13 function 0 Acer Labs M5229 UDMA IDE rev 0xc4: 
DMA, channel 0 configured to native-PCI, channel 1 configured to native-PCI

pciide0: using ivec 0x7a6 for native-PCI interrupt
atapiscsi0 at pciide0 channel 0 drive 0
scsibus1 at atapiscsi0: 2 targets, initiator 7
cd0 at scsibus1 targ 0 lun 0: TOSHIBA, DVD-ROM SD-C2612, 1011 ATAPI 
5/cdrom removable

cd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
pciide0: channel 1 disabled (no drives)
usb0 at ohci0: USB revision 1.0
uhub0 at usb0 Acer Labs OHCI root hub rev 1.00/1.00 addr 1
usb1 at ohci1: USB revision 1.0
uhub1 at usb1 Acer Labs OHCI root hub rev 1.00/1.00 addr 1
ppm at mainbus0 not configured
schizo3 at mainbus0: 

Re: keyboard encoding

2008-07-29 Thread Louis V. Lambrecht

Hannah Schroeter wrote:

Hi!

On Tue, Jul 29, 2008 at 03:53:37PM +0200, Mats O Jansson wrote:
  

On Tue, 29 Jul 2008, Hannah Schroeter wrote:



  

On Mon, Jul 28, 2008 at 07:30:35PM +, Christian Weisgerber wrote:
  

Hannah Schroeter [EMAIL PROTECTED] wrote:



  

Is your keyboard an USB one? I observe the same with an USB keyboard.
  


  

- keyboard.encoding=us.swapctrlcaps has no effect (in
 /etc/wsconsctl.conf)
  


  

These settings only affect the _first_ keyboard in the system
(wskbd0).  Unfortunately, for a PC that is usually the PS/2 keyboard,
even if none is plugged in.



  

[...]



  

That's quite unfortunate though if you can't affect the non-X11 keyboard
mapping of secondary keyboards at all.
  


  

Thats not correct.



  

/sbin/kbd will change keyboard settings on ALL keyboards that has
support for the requested keyboard map.



  

wsconsctl has -f which allows you select which keyboard you are applying
the change to. For keyboard operations /dev/wskbd0 is default if not
specified.



  

read the man page!



Thanks for the hints. I see /etc/rc still can use /sbin/kbd to set the
keyboard type from /etc/kbdtype, in addition to load wsconsctl settings
from /etc/wsconsctl.conf (but the latter only to the default control
devices, to load settings to a *specific* different control device, it
seems you need to setup something on your own, e.g. in /etc/rc.local).

  

(And btw, in X11, somehow the setup of the keyboard mapping from
/etc/X11/xorg.conf is delayed, since about mid-December 2007. Before,
the mapping from there, and from a few xmodmap settings loaded in
.xinitrc, took effect immediately when X was up from startx, now it
takes quite some time, perhaps half a minute or so, for them to take
effect. Related to X11 privsep changes? Later changes using setxkbmap
take effect immediately, btw.)
  


  

It will always take the mapping from xorg.conf if it is defined there.
If no keyboard language is specified X11 will now make a guess depending
on which keyboard layout wscons has. But since X11 is reading the keyboard
raw any change made to wscons after X11 is started doesn't change anything
in X11.



No problem. I set the X11 keyboard layout using X11 means (xorg.conf,
setxkbmap, xmodmap). I just complained about the *delay* for the initial
setup from xorg.conf. That delay was introduced around in December 07.
Before that, the keyboard setup from xorg.conf used to be in effect
immediately after startup, now, directly after startup, it seems to be
the keyboard setup taken from wscons, and after about half a minute, it
suddenly changes to be that from xorg.conf.

Kind regards,

Hannah.


  

Rem: the XlbLayout option in xorg.conf is a list which happens
to only have one member most of the time.

This said, in order to use the keyboard applet under GNOME, I needed
ln -s /etc/X11/xkb /usr/X11R6/lib/X11/xkb
might explain some delay?


Keyboard switching is present in XFCE, but only enable the default.
Switching is planned for later versions.

Now, fir the VT's, there *must* be a way.
Thinking of thre luit filter, now part of stock xorg.
Luit filters source codeset and dislays target codeset.
Intended for UTF-8 and the UNICODEs, what woud prevent it to translate
US-8859-1 from/to DE-8859-15 ?
Didn't try though.
Stiil convinced there must be easier ways.



Re: keyboard encoding

2008-07-29 Thread Hannah Schroeter
Hi!

On Tue, Jul 29, 2008 at 05:33:42PM +0200, Louis V. Lambrecht wrote:
Hannah Schroeter wrote:
[...]

No problem. I set the X11 keyboard layout using X11 means (xorg.conf,
setxkbmap, xmodmap). I just complained about the *delay* for the initial
setup from xorg.conf. That delay was introduced around in December 07.
Before that, the keyboard setup from xorg.conf used to be in effect
immediately after startup, now, directly after startup, it seems to be
the keyboard setup taken from wscons, and after about half a minute, it
suddenly changes to be that from xorg.conf.

Rem: the XlbLayout option in xorg.conf is a list which happens
to only have one member most of the time.

This said, in order to use the keyboard applet under GNOME, I needed
ln -s /etc/X11/xkb /usr/X11R6/lib/X11/xkb
might explain some delay?

I don't think so. X11 *does* eventually setup the keyboard right, it
just has a delay, i.e. it first has the wrong keyboard mapping, later
the right one, without any user action. And I do *not* use GNOME or any
other desktop environment.

Keyboard switching is present in XFCE, but only enable the default.
Switching is planned for later versions.

I don't use xfce either. I use fvwm2 from ports, but for keyboard
switching (rarely needed, usually the initial mapping from xorg.conf
plus a few xmodmap settings, once it's active after the initial delay,
is ok for me) I use shell scripts involving setxkbmap and re-loading my
xmodmap modifications, called either from xterm manually, or from the
fvwm2 menu.

Now, fir the VT's, there *must* be a way.
Thinking of thre luit filter, now part of stock xorg.
Luit filters source codeset and dislays target codeset.
Intended for UTF-8 and the UNICODEs, what woud prevent it to translate
US-8859-1 from/to DE-8859-15 ?
Didn't try though.
Stiil convinced there must be easier ways.

luit isn't for keyboard mapping, but, as you said, for character
encoding. I don't use it (usually doing iso-8859-1 using a non-utf-8
xterm, for the rare instances I need utf-8, I use uxterm, and I nearly
never need anything besides those two).

Kind regards,

Hannah.



Is it necessary to recompile just to apply a security patch?

2008-07-29 Thread skogzort
Is it necessary to recompile just to apply a security patch?
 
Hello,
I know nothing/very little about OpenBSD or UNIX. I have been tasked with
updating our OpenBSD DNS server with a security fix (Vulnerability Note
VU#800113- Multiple DNS implementations vulnerable to cache poisoning).
 
In order to do this it appears that I have to download the source code
re-compile the entire OS. Recompiling the OS seems to involve a lot of steps.
Before I continue to read through them all, I just want to confirm that it is
actually necessary to do all of this, simply to apply a security patch:
 
Down load the tree..
Pre load the tree..
Build the Kernel..
Build the userland..
Etc.
 
The only thing we use the server for is DNS. I dont know what Flavor we are
running, since its on a production server I assume it will be * release or *
stable, either way from what Ive read so far it looks like in order to apply
this security patch I will have to update it to * stable.
 
Is it true that the only way to apply this patch is to recompile the entire
OS, and go through all the steps above? Im only familiar with Windows, where
you just push a button to apply a security patch and you dont even have to
reboot the server, so I was thinking that I may be misunderstanding what Im
reading.
 
Thanks very much for your time and any info
 
Kyle
 



Re: Is it necessary to recompile just to apply a security patch?

2008-07-29 Thread Nick Guenther
On Tue, Jul 29, 2008 at 11:41 AM, skogzort [EMAIL PROTECTED] wrote:
 Is it necessary to recompile just to apply a security patch?

 Hello,
 I know nothing/very little about OpenBSD or UNIX. I have been tasked with
 updating our OpenBSD DNS server with a security fix (Vulnerability Note
 VU#800113- Multiple DNS implementations vulnerable to cache poisoning).

 In order to do this it appears that I have to download the source code
 re-compile the entire OS. Recompiling the OS seems to involve a lot of steps.
 Before I continue to read through them all, I just want to confirm that it is
 actually necessary to do all of this, simply to apply a security patch:

 Down load the tree..
 Pre load the tree..
 Build the Kernel..
 Build the userland..
 Etc.

 The only thing we use the server for is DNS. I dont know what Flavor we are
 running, since its on a production server I assume it will be * release or *
 stable, either way from what Ive read so far it looks like in order to apply
 this security patch I will have to update it to * stable.

 Is it true that the only way to apply this patch is to recompile the entire
 OS, and go through all the steps above? Im only familiar with Windows, where
 you just push a button to apply a security patch and you dont even have to
 reboot the server, so I was thinking that I may be misunderstanding what Im
 reading.


OpenBSD is mostly designed as a monolithic kernel. It's a very small
kernel, only a couple of megs large, but it is one single program so
yes, to apply a security patch to the kernel you must recompile the
entire kernel. You may be able to get away without recompiling
userland if the patch is only affecting kernel internals, but just to
be safe you probably should do userland too. It's not actually that
hard to recompile, the instructions are very clear -- but I do know
the feeling that you have, I only finally worked myself up to
compiling kernels. Just take the leap of faith and in a few hours
you'll have a new secure system.

Hmm, though if you don't know much about Unix, make sure to take a
backup of /etc first, though, just in case you trash your DNS server.

-Nick



Re: Is it necessary to recompile just to apply a security patch?

2008-07-29 Thread Heinrich Rebehn

skogzort wrote:

Is it necessary to recompile just to apply a security patch?
 
Hello,

I know nothing/very little about OpenBSD or UNIX. I have been tasked with
updating our OpenBSD DNS server with a security fix (Vulnerability Note
VU#800113- Multiple DNS implementations vulnerable to cache poisoning).
 
In order to do this it appears that I have to download the source code

re-compile the entire OS. Recompiling the OS seems to involve a lot of steps.
Before I continue to read through them all, I just want to confirm that it is
actually necessary to do all of this, simply to apply a security patch:
 
Down load the tree..

Pre load the tree..
Build the Kernel..
Build the userland..
Etc.
 
The only thing we use the server for is DNS. I dont know what Flavor we are

running, since its on a production server I assume it will be * release or *
stable, either way from what Ive read so far it looks like in order to apply
this security patch I will have to update it to * stable.
 
Is it true that the only way to apply this patch is to recompile the entire

OS, and go through all the steps above? Im only familiar with Windows, where
you just push a button to apply a security patch and you dont even have to
reboot the server, so I was thinking that I may be misunderstanding what Im
reading.
 
Thanks very much for your time and any info
 
Kyle
 


Hi Kyle,

the header of the patch available at
ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.3/common/004_bind.patch
explains:

Apply by doing:
cd /usr/src
patch -p0  004_bind.patch

Then rebuild and install bind:
cd usr.sbin/bind
make -f Makefile.bsd-wrapper obj
make -f Makefile.bsd-wrapper
make -f Makefile.bsd-wrapper install

that's all you need to do.

HTH,

Heinrich



Is it necessary to recompile OS to apply security patch?

2008-07-29 Thread skogzort
Hello,
I know nothing/very little about OpenBSD or UNIX. I have been tasked with
updating our OpenBSD DNS server with a security fix (Vulnerability Note
VU#800113- Multiple DNS implementations vulnerable to cache poisoning).
 
In order to do this it appears that I have to download the source code
re-compile the entire OS. Recompiling the OS seems to involve a lot of steps.
Before I continue to read through them all, I just want to confirm that it is
actually necessary to do all of this, simply to apply a security patch:
 
Down load the tree..
Pre load the tree..
Build the Kernel..
Build the userland..
Etc.
 
The only thing we use the server for is DNS. I dont know what flavor we are
running, since its on a production server I assume it will be * release or *
stable, either way from what Ive read so far it looks like in order to apply
this security patch I will have to update it to * stable, which seems to
require that the entire OS be recompiled. Is this correct?
 
Is it true that the only way to apply this patch is to recompile the entire
OS, and go through all the steps above? I dont mind doing all this since it
will give me a chance to learn, its just that the more steps I have to take,
the more chances there are for mistakes. I want to be sure that the way I plan
to do the update is the simplest. Im only familiar with Windows, where you
just push a button to apply a security patch and you dont even have to reboot
the server, so I was thinking that I may be misunderstanding what Im
reading.
 
Thanks very much for your time and any info
 
Kyle



Re: keyboard encoding

2008-07-29 Thread Christian Weisgerber
Hannah Schroeter [EMAIL PROTECTED] wrote:

  This is a box that has *no* PS/2 connectors any more.
 
 But it still has a PS/2 keyboard controller.
 
 You're right: [...]
 That's quite unfortunate though if you can't affect the non-X11 keyboard
 mapping of secondary keyboards at all.

If you don't want to touch the startup scripts, you can just disable
pckbc in the kernel.

-- 
Christian naddy Weisgerber  [EMAIL PROTECTED]



Re: Is it necessary to recompile just to apply a security patch?

2008-07-29 Thread Andreas Maus
On Tue, Jul 29, 2008 at 08:41:36AM -0700, skogzort wrote:
 Is it necessary to recompile just to apply a security patch?
Of course! ;)

 In order to do this it appears that I have to download the source code
 re-compile the entire OS. Recompiling the OS seems to involve a lot of steps.
 Before I continue to read through them all, I just want to confirm that it is
 actually necessary to do all of this, simply to apply a security patch:
Do you use the current 4.3 or do you use a CVS snapshot ?

If you use 4.3 you _have_ to download and install src.tar.gz and
install it. Now download only the bind patch for 4.3 and apply
the patch and rebuild and reinstall named. (Don't forget to restart
named ;) )

If you use a older version check the appropriate errata page instead ;)

Its OpenBSD. Its soo easy :P

HTH,

Andreas.

-- 
Windows 95: A 32-bit patch for a 16-bit GUI shell running on top of
an 8-bit operating system written for a 4-bit processor by a 2-bit
company who cannot stand 1 bit of competition.



Re: Is it necessary to recompile just to apply a security patch?

2008-07-29 Thread Zamri Besar
On Tue, Jul 29, 2008 at 11:41 PM, skogzort [EMAIL PROTECTED] wrote:

 Is it necessary to recompile just to apply a security patch?

 Hello,
 I know nothing/very little about OpenBSD or UNIX. I have been tasked with
 updating our OpenBSD DNS server with a security fix (Vulnerability Note
 VU#800113- Multiple DNS implementations vulnerable to cache poisoning).

 In order to do this it appears that I have to download the source code
 re-compile the entire OS. Recompiling the OS seems to involve a lot of
 steps.
 Before I continue to read through them all, I just want to confirm that it
 is
 actually necessary to do all of this, simply to apply a security patch:

 Down load the tree..
 Pre load the tree..
 Build the Kernel..
 Build the userland..
 Etc.

 The only thing we use the server for is DNS. I dont know what Flavor we
 are
 running, since its on a production server I assume it will be * release or
 *
 stable, either way from what Ive read so far it looks like in order to
 apply
 this security patch I will have to update it to * stable.

 Is it true that the only way to apply this patch is to recompile the entire
 OS, and go through all the steps above? Im only familiar with Windows,
 where
 you just push a button to apply a security patch and you dont even have to
 reboot the server, so I was thinking that I may be misunderstanding what
 Im
 reading.

 Thanks very much for your time and any info

 Kyle




The first step is you need to identify which version of OpenBSD that you're
running right now, and apply suitable patches to your system. For latest DNS
patches, OpenBSD developers were releasing two version of security fixes for
4.2 and 4.3. Just follow the given instruction at the top/head of every
patch.

http://www.openbsd.org/errata43.html
ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.3/common/004_bind.patch

http://www.openbsd.org/errata42.html
ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.2/common/013_bind.patch

And you may check archive, couple of days ago, iirc someone reported they
were successfully updating their DNS in 4.1 by using patch from 4.2.

And finally, probably you need to read about this too (not sure either the
above patches will affect DNS performance in OpenBSD, but someone just
reporting it about some issue with Ironport, check archive):
http://marc.info/?l=bind-usersm=121726908015389w=2

-- 
Thank you.

Zamri Besar



Re: Is it necessary to recompile OS to apply security patch?

2008-07-29 Thread Brynet
Assume this production server is running one of the supported
releases, 4.2 or 4.3, you can obtain the latest patch via the errata
page.

http://openbsd.org/errata43.html

For 4.2 it's errata #013, for 4.3 it's #004... if you run an earlier
version, manually merging the patch may be required.

From the top of the 4.3 patch file:
ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.3/common/004_bind.patch

Apply by doing:
cd /usr/src
patch -p0  004_bind.patch

Then rebuild and install bind:
cd usr.sbin/bind
make -f Makefile.bsd-wrapper obj
make -f Makefile.bsd-wrapper
make -f Makefile.bsd-wrapper install

You'll only need to recompile then restart BIND, updating to -STABLE
and compiling the kernel isn't required..

Now, your server may not have the source in /usr/src, you can either
obtain it from the release CD-ROM or a local HTTP/FTP mirror..

src.tar.gz is the userland.
sys.tar.gz is the kernel.

Locate a mirror here: http://www.openbsd.org/ftp.html

Take care, feel free to reply to the list for further assistance...



Re: Is it necessary to recompile OS to apply security patch?

2008-07-29 Thread Pete Vickers

Hi,

Assuming the box is only a DNS server, then the simplest  easiest (in
my option) is to take a copy of the DNS related files:
- /etc/rc.conf.local
- /var/named/*
- noting also IP address, hostname etc etc

and then reinstall the o/s from a recent snapshot (downloaded here
ftp://ftp.openbsd.org/pub/OpenBSD/snapshots/
 or mirror), which has all the patches pre-applied. Then restore the
above files. job done.

if you're paranoid and unexperienced in unix, then grab a spare
machine to do a dry run on that.

/Pete



On 29 Jul 2008, at 18:16, skogzort wrote:


Hello,
I know nothing/very little about OpenBSD or UNIX. I have been tasked
with
updating our OpenBSD DNS server with a security fix (Vulnerability
Note
VU#800113- Multiple DNS implementations vulnerable to cache
poisoning).

In order to do this it appears that I have to download the source code
re-compile the entire OS. Recompiling the OS seems to involve a lot
of steps.
Before I continue to read through them all, I just want to confirm
that it is
actually necessary to do all of this, simply to apply a security
patch:

Down load the tree..
Pre load the tree..
Build the Kernel..
Build the userland..
Etc.

The only thing we use the server for is DNS. I dont know what
flavor we are
running, since its on a production server I assume it will be *
release or *
stable, either way from what Ive read so far it looks like in order
to apply
this security patch I will have to update it to * stable, which
seems to
require that the entire OS be recompiled. Is this correct?

Is it true that the only way to apply this patch is to recompile the
entire
OS, and go through all the steps above? I dont mind doing all this
since it
will give me a chance to learn, its just that the more steps I have
to take,
the more chances there are for mistakes. I want to be sure that the
way I plan
to do the update is the simplest. Im only familiar with Windows,
where you
just push a button to apply a security patch and you dont even have
to reboot
the server, so I was thinking that I may be misunderstanding what Im
reading.

Thanks very much for your time and any info

Kyle




rxterm replacement

2008-07-29 Thread Anathae Townsend
In my delving into the OpenBSD system and using Xorg, I 

noticed that .fvwmrc contains references to rsh, rxterm, and

rxvt.

 

Replacing rsh with ssh and rxvt with xterm was easy.  

However creating a replacement for the rxterm not so much.

 

From the information I was able to gather, rxterm is a shell

script that creates a remote xterm (duh).  The .fvwmrc line

could easily be replaced with 'Exec ssh [remotehost] xterm 

-display $HOSTDISPLAY ' but that would defeat the intent

of the original line.  I have not been able in my admittedly

limited search of openbsd.org and google to find a shell

script that has replaced rxterm.

 

Is there one?

 

My intent is to provide a diff of the current .fvwmrc with

references to the insecure rsh etc stuff replaced with ssh

alternatives.



Re: missing clue regarding IPv6, vlans bridging

2008-07-29 Thread Christian Weisgerber
dermiste [EMAIL PROTECTED] wrote:

 1) from curry, I try to ping6 debruijn, but it says host unreachable
 2) from debruijn, I try to ping6 curry, and it works.
 3) from curry, I try to ping6 debruijn, and it works.

This is very typical of multicast reception failing on one box
(debruijn in your case).

At step 1, curry sends a neighor solicitation message by multicast,
so it can map the IPv6 address to the link layer address, but
debruijn doesn't see the packet and fails to respond.  At step 2,
everything works in the opposite direction, and debruijn caches
curry's address and proceeds to use it in step 3.

Link-local v6 addresses also work fine because they don't involve
neighbor discovery.

 I tcpdump'ed hme0, vlan0 and bridge0 during curry boot, and the
 packets flow through all 3, showing DHCP on vlan1 and rtadv on vlan0 +
 bridge0.

Hmm.  The router solicitation message curry sends is also a multicast
packet.  You might want to track its way.

 I really can't see what's wrong with my setup, clues anyone ?

Not sure.  What happens if you put an IPv6 address on debruijn's
vlan0 interface and try to ping6 that address?

-- 
Christian naddy Weisgerber  [EMAIL PROTECTED]



Re: Is it necessary to recompile just to apply a security patch?

2008-07-29 Thread Ingo Schwarze
Hi skogzort,

Nick Guenther wrote on Tue, Jul 29, 2008 at 01:05:52PM -0400:
 On Tue, Jul 29, 2008 at 11:41 AM, skogzort [EMAIL PROTECTED] wrote:

 I know nothing/very little about OpenBSD or UNIX. I have been tasked with
 updating our OpenBSD DNS server with a security fix (Vulnerability Note
 VU#800113- Multiple DNS implementations vulnerable to cache poisoning).

That doesn't sound all too well.  You have an OpenBSD server,
but you have nobody knowing more than very little about UNIX?
UNIX is easier to administer than Windows, but some learning
will be required...

Quite probably, your server might be terribly out of date.
OpenBSD servers ought to be updated at least once a year.
Please look at the first line of the output of dmesg(8).
If the version number is lower than OpenBSD 4.2,
you should upgrade the base system before applying patches.
In any case, you should establish a process for regular
updates of the server.  The best times to update are
in May and November, just after the -stable releases.
In my experience, updating twice a year is easier and
less risky than just once: You get used to it.
Regularly ordering the CDs and just upgrading from CD
is the most convenient way to go.

If your task is to maintain that server, carefully read
  http://www.openbsd.org/cgi-bin/cvsweb/src/etc/root/root.mail?rev=HEAD
Have a quick look at the resources referenced there,
just to get an impression what is available.
The man pages, the FAQ and afterboot(8) are particularly useful.

 In order to do this it appears that I have to download the source code
 re-compile the entire OS.  Recompiling the OS seems to involve a lot of
 steps.

Don't compile the whole system from source unless you are actively
hacking on the base system (which clearly you aren't) or unless
you want to track -current using a single build for multiple servers.
As others told you, each errata patch contains instructions what
exactly must be rebuilt, and how.

 you dont even have to reboot the server,

That's indeed true in the present case, yes.
After patching named, you must restart named,
but rebooting would be useless.

Of course, kernel patches require rebooting -
which applies to Windows machines as well, by the way.  ;-)


Nick wrote:
 OpenBSD is mostly designed as a monolithic kernel.

Please stop spreading misleading advice.
This has nothing to do with the kernel.
(Hopefully, skogzort didn't start building kernels yet.)

Yours,
  Ingo

--
Ingo Schwarze [EMAIL PROTECTED]
usta.de / studis.de system operation
 *** Can we get a bind9 kernel module for OpenBSD any time soon? ***



Multiboot Windows XP + OpenBSD doesnt work

2008-07-29 Thread thacrazze
I want a dualboot with windows xp, and for this I used the FAQ
http://www.openbsd.org/faq/faq4.html#Multibooting, but when I run the
command installboot i get only ksh: installboot: not found and
when I execute dd if=/dev/rsd0a of=openbsd.pbr bs=512 count=1 I get
only dd: /dev/rsd0a: Device not configured

can someone help me?

--thacrazze



free plot software

2008-07-29 Thread Pau
Hi,

do you know of a command-line, active, FREE programme to produce
scientific plots? I am getting more and more used to gnuplot, but I
don't like their conditions:

http://en.wikipedia.org/wiki/Gnuplot#License

I have read something about gri, but it doesn't seem to be as powerful
as gnuplot is, and the license is, well, gpl. There are some other
gpl-lincesed projects but they look either not active or not
well-advanced, or are GUI-specific, as grace is.

Supermongo -which I used in the past- is not very freedom-friendly and
I don't like the ps result: Everything is converted into a curve,
included the labels (letters). This makes very difficult the
(potential) per-hand edition/modification of the ps.

Just asking. Thanks in advance.

Pau



Re: free plot software

2008-07-29 Thread Marc Balmer
* Pau wrote:
 Hi,
 
 do you know of a command-line, active, FREE programme to produce
 scientific plots? I am getting more and more used to gnuplot, but I
 don't like their conditions:
 
 http://en.wikipedia.org/wiki/Gnuplot#License
 
 I have read something about gri, but it doesn't seem to be as powerful
 as gnuplot is, and the license is, well, gpl. There are some other
 gpl-lincesed projects but they look either not active or not
 well-advanced, or are GUI-specific, as grace is.

I suggest that you try out R.  It is in ports, math/R and I
use it a lot for statistics and graphing.

 
 Supermongo -which I used in the past- is not very freedom-friendly and
 I don't like the ps result: Everything is converted into a curve,
 included the labels (letters). This makes very difficult the
 (potential) per-hand edition/modification of the ps.
 
 Just asking. Thanks in advance.
 
 Pau



Re: missing clue regarding IPv6, vlans bridging

2008-07-29 Thread Paul de Weerd
On Tue, Jul 29, 2008 at 09:16:21PM +, Christian Weisgerber wrote:
| dermiste [EMAIL PROTECTED] wrote:
| 
|  1) from curry, I try to ping6 debruijn, but it says host unreachable
|  2) from debruijn, I try to ping6 curry, and it works.
|  3) from curry, I try to ping6 debruijn, and it works.
| 
| This is very typical of multicast reception failing on one box
| (debruijn in your case).
| 
| At step 1, curry sends a neighor solicitation message by multicast,
| so it can map the IPv6 address to the link layer address, but
| debruijn doesn't see the packet and fails to respond.  At step 2,
| everything works in the opposite direction, and debruijn caches
| curry's address and proceeds to use it in step 3.
| 
| Link-local v6 addresses also work fine because they don't involve
| neighbor discovery.

Uhm, why ?

23:37:41.664994 00:0c:29:e5:f9:24 33:33:ff:ff:4d:0d 86dd 86: 
fe80::20c:29ff:fee5:f924  ff02::1::4d0d: icmp6: neighbor sol: who has 
fe80::20c:29ff:feff:4d0d(src lladdr: 00:0c:29:e5:f9:24) (len 32, hlim 255)

How would you determine the linklayer address of your neighbour without
neighbor discovery ?

Cheers,

Paul 'WEiRD' de Weerd

-- 
[++-]+++.+++[---].+++[+
+++-].++[-]+.--.[-]
 http://www.weirdnet.nl/ 



iwi(4) does not work with latest snapshot

2008-07-29 Thread Andrea Parazzini
Hi misc,
iwi(4) does not work, it worked well with 4.3:

iwi0: timeout waiting for ucode to initialize
iwi0: could not load microcode
iwi0: fatal firmware error
iwi0: timeout waiting for firmware initialization to complete
iwi0: could not load main firmware

Regards,
Andrea Parazzini


OpenBSD 4.4-beta (GENERIC) #991: Sun Jul 27 19:14:07 MDT 2008
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) M processor 1.73GHz (GenuineIntel 686-class)
1.73 GHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,TM,SBF,EST,TM2
real mem  = 1064738816 (1015MB)
avail mem = 1021317120 (974MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 12/27/05, BIOS32 rev. 0 @ 0xffe90,
SMBIOS rev. 2.3 @ 0xf7810 (60 entries)
bios0: vendor Dell Inc. version A04 date 12/27/2005
bios0: Dell Inc. Latitude D510
acpi0 at bios0: rev 0
acpi0: tables DSDT FACP APIC MCFG SSDT SSDT SSDT
acpi0: wakeup devices LID_(S3) PBTN(S4) PCI0(S3) USB0(S0) USB1(S0) USB2(S0)
USB4(S0) USB3(S0) MODM(S3) PCIE(S4)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus 2 (PCIE)
acpicpu0 at acpi0: C3, C3, C2, C1, FVS, 1733, 1333, 1067, 800 MHz
acpitz0 at acpi0: critical temperature 102 degC
acpiac0 at acpi0: AC unit online
acpibat0 at acpi0: BAT0 model DELL Y13385 serial 5439 type LION oem
Sanyo
acpibat1 at acpi0: BAT1 not present
acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: PBTN
acpibtn2 at acpi0: SBTN
acpidock at acpi0 not configured
acpivideo at acpi0 not configured
acpivideo at acpi0 not configured
bios0: ROM list: 0xc/0xf800! 0xcf800/0x800
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 Intel 82915GM Host rev 0x03
vga1 at pci0 dev 2 function 0 Intel 82915GM Video rev 0x03
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
agp0 at vga1: aperture at 0xc000, size 0x1000
Intel 82915GM Video rev 0x03 at pci0 dev 2 function 1 not configured
uhci0 at pci0 dev 29 function 0 Intel 82801FB USB rev 0x03: irq 11
uhci1 at pci0 dev 29 function 1 Intel 82801FB USB rev 0x03: irq 10
uhci2 at pci0 dev 29 function 2 Intel 82801FB USB rev 0x03: irq 9
uhci3 at pci0 dev 29 function 3 Intel 82801FB USB rev 0x03: irq 5
ehci0 at pci0 dev 29 function 7 Intel 82801FB USB rev 0x03: irq 11
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1
ppb0 at pci0 dev 30 function 0 Intel 82801BAM Hub-to-PCI rev 0xd3
pci1 at ppb0 bus 2
bce0 at pci1 dev 0 function 0 Broadcom BCM4401B1 rev 0x02: irq 9, address
00:14:22:b5:6f:99
bmtphy0 at bce0 phy 1: BCM4401 10/100baseTX PHY, rev. 0
cbb0 at pci1 dev 1 function 0 TI PCI6515 CardBus rev 0x00: irq 5
vendor TI, unknown product 0x8037 (class serial bus subclass Firewire,
rev 0x00) at pci1 dev 1 function 2 not configured
iwi0 at pci1 dev 3 function 0 Intel PRO/Wireless 2200BG rev 0x05: irq 10,
address 00:13:ce:50:9c:37
cardslot0 at cbb0 slot 0 flags 0
cardbus0 at cardslot0: bus 3 device 0 cacheline 0x10, lattimer 0x20
pcmcia0 at cardslot0
auich0 at pci0 dev 30 function 2 Intel 82801FB AC97 rev 0x03: irq 11,
ICH6 AC97
ac97: codec id 0x83847652 (SigmaTel STAC9752/53)
ac97: codec features headphone, 20 bit DAC, 20 bit ADC, SigmaTel 3D
audio0 at auich0
Intel 82801FB Modem rev 0x03 at pci0 dev 30 function 3 not configured
ichpcib0 at pci0 dev 31 function 0 Intel 82801FBM LPC rev 0x03: PM
disabled
pciide0 at pci0 dev 31 function 2 Intel 82801FBM SATA rev 0x03: DMA,
channel 0 wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: Hitachi HTS541040G9AT00
wd0: 16-sector PIO, LBA48, 38154MB, 78140160 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets, initiator 7
cd0 at scsibus0 targ 0 lun 0: TSSTcorp, CDRW/DVD TSL462C, DE01 ATAPI
5/cdrom removable
cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
usb1 at uhci0: USB revision 1.0
uhub1 at usb1 Intel UHCI root hub rev 1.00/1.00 addr 1
usb2 at uhci1: USB revision 1.0
uhub2 at usb2 Intel UHCI root hub rev 1.00/1.00 addr 1
usb3 at uhci2: USB revision 1.0
uhub3 at usb3 Intel UHCI root hub rev 1.00/1.00 addr 1
usb4 at uhci3: USB revision 1.0
uhub4 at usb4 Intel UHCI root hub rev 1.00/1.00 addr 1
isa0 at ichpcib0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pms0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pms0 mux 0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: PC speaker
spkr0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
biomask ef65 netmask ef65 ttymask 
mtrr: Pentium Pro MTRR support
wi0 at pcmcia0 

Re: FAQ License?

2008-07-29 Thread thacrazze
The BSD Documentation License

see http://bsdinstall.de/misc/license.txt



Re: Multiboot Windows XP + OpenBSD doesnt work

2008-07-29 Thread thacrazze
My /etc/fstab
/dev/wd0a / ffs rw 1 1
/dev/wd0h /home ffs rw,nodev,nosuid 1 2
/dev/wd0d /tmp ffs rw,nodev,nosuid 1 2
/dev/wd0g /usr ffs rw,nodev 1 2
/dev/wd0e /var ffs rw,nodev,nosuid 1 2

# fdisk wd0
Disk: wd0   geometry: 3916/255/63 [62914560 Sectors]
Offset: 0   Signature: 0xAA55
Starting Ending LBA Info:
 #: id  C   H   S -  C   H   S [   start:size ]
---
 0: 07  0   1   1 -   1274 254  63 [  63:20482812 ] HPFS/QNX/AUX
*1: A6   1275   0   1 -   3915 254  63 [20482875:42427665 ] OpenBSD
 2: 00  0   0   0 -  0   0   0 [   0:   0 ] unused
 3: 00  0   0   0 -  0   0   0 [   0:   0 ] unused

On 7/29/08, thacrazze [EMAIL PROTECTED] wrote:
 I want a dualboot with windows xp, and for this I used the FAQ
 http://www.openbsd.org/faq/faq4.html#Multibooting, but when I run the
 command installboot i get only ksh: installboot: not found and
 when I execute dd if=/dev/rsd0a of=openbsd.pbr bs=512 count=1 I get
 only dd: /dev/rsd0a: Device not configured

 can someone help me?

 --thacrazze



Re: Multiboot Windows XP + OpenBSD doesnt work

2008-07-29 Thread Ted Unangst
On 7/29/08, thacrazze [EMAIL PROTECTED] wrote:
 I want a dualboot with windows xp, and for this I used the FAQ
  http://www.openbsd.org/faq/faq4.html#Multibooting, but when I run the
  command installboot i get only ksh: installboot: not found and
  when I execute dd if=/dev/rsd0a of=openbsd.pbr bs=512 count=1 I get
  only dd: /dev/rsd0a: Device not configured

  can someone help me?

don't copy commands from a web page and run them without thinking.
first off, installboot probably already ran, but installboot is
definitely not the right way to run it.  second, you need to figure
out what kind of disk you installed on.  if you included dmesg,
somebody could tell you, but it's going to be wd.



Re: FAQ License?

2008-07-29 Thread Ted Unangst
On 7/29/08, thacrazze [EMAIL PROTECTED] wrote:
 The BSD Documentation License

  see http://bsdinstall.de/misc/license.txt

No, that's not the license for the FAQ.



Re: Multiboot Windows XP + OpenBSD doesnt work

2008-07-29 Thread Alicornio
2008/7/29, Ted Unangst [EMAIL PROTECTED]:
 On 7/29/08, thacrazze [EMAIL PROTECTED] wrote:

  I want a dualboot with windows xp, and for this I used the FAQ
http://www.openbsd.org/faq/faq4.html#Multibooting, but when I run the
command installboot i get only ksh: installboot: not found and
when I execute dd if=/dev/rsd0a of=openbsd.pbr bs=512 count=1 I get
only dd: /dev/rsd0a: Device not configured
  
can someone help me?


 don't copy commands from a web page and run them without thinking.
  first off, installboot probably already ran, but installboot is
  definitely not the right way to run it.  second, you need to figure
  out what kind of disk you installed on.  if you included dmesg,
  somebody could tell you, but it's going to be wd.


Note: this is a really good time to remind you that blindly typing
commands in you don't understand is a really bad idea. This line will
not work directly on most computers. It is left to the reader to adapt
it to their machine.

from: http://www.openbsd.org/faq/faq4.html#Multibooting

try: dd if=/dev/rwd0a of=openbsd.pbr bs=512 count=1



Re: Multiboot Windows XP + OpenBSD doesnt work

2008-07-29 Thread thacrazze
Thanks! That works!

--thacrazze

On 7/30/08, Alicornio [EMAIL PROTECTED] wrote:
 2008/7/29, Ted Unangst [EMAIL PROTECTED]:
 On 7/29/08, thacrazze [EMAIL PROTECTED] wrote:

  I want a dualboot with windows xp, and for this I used the FAQ
http://www.openbsd.org/faq/faq4.html#Multibooting, but when I run the
command installboot i get only ksh: installboot: not found and
when I execute dd if=/dev/rsd0a of=openbsd.pbr bs=512 count=1 I get
only dd: /dev/rsd0a: Device not configured
  
can someone help me?


 don't copy commands from a web page and run them without thinking.
  first off, installboot probably already ran, but installboot is
  definitely not the right way to run it.  second, you need to figure
  out what kind of disk you installed on.  if you included dmesg,
  somebody could tell you, but it's going to be wd.


 Note: this is a really good time to remind you that blindly typing
 commands in you don't understand is a really bad idea. This line will
 not work directly on most computers. It is left to the reader to adapt
 it to their machine.

 from: http://www.openbsd.org/faq/faq4.html#Multibooting

 try: dd if=/dev/rwd0a of=openbsd.pbr bs=512 count=1



Re: Multiboot Windows XP + OpenBSD doesnt work

2008-07-29 Thread thacrazze
OpenBSD 4.3 (GENERIC) #698: Wed Mar 12 11:07:05 MDT 2008
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Core(TM)2 CPU 6420 @ 2.13GHz (GenuineIntel 686-class) 2.14 GHz
cpu0: FPU,V86,DE,PSE,TSC,MSR,MCE,CX8,APIC,SEP,PGE,CMOV,CFLUSH,MMX,FXSR,SSE,SSE2,
MWAIT
real mem  = 536375296 (511MB)
avail mem = 510599168 (486MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 06/23/99, BIOS32 rev. 0 @ 0xfad60
apm0 at bios0: Power Management spec V1.2
apm0: APM engage (device 1): unknown error code? (83)
apm0: AC on, battery charge unknown
pcibios0 at bios0: rev 2.1 @ 0xf/0x0
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfb0a0/192 (10 entries)
pcibios0: PCI Interrupt Router at 000:01:0 (Intel 82371SB ISA rev 0x00)
pcibios0: PCI bus #0 is the last bus
bios0: ROM list: 0xc/0x8e00 0xe2000/0x1000
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 Intel 82441FX rev 0x02
pcib0 at pci0 dev 1 function 0 Intel 82371SB ISA rev 0x00
pciide0 at pci0 dev 1 function 1 Intel 82371AB IDE rev 0x01: DMA, channel 0 co
nfigured to compatibility, channel 1 configured to compatibility
wd0 at pciide0 channel 0 drive 0: VBOX HARDDISK
wd0: 128-sector PIO, LBA, 30720MB, 62914560 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: VBOX, CD-ROM, 1.0 SCSI0 5/cdrom removable
cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
vga1 at pci0 dev 2 function 0 InnoTek VirtualBox Graphics Adapter rev 0x00
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
pcn0 at pci0 dev 3 function 0 AMD 79c970 PCnet-PCI rev 0x40, Am79c973, rev 0:
irq 11, address 08:00:27:d6:f2:cc
acphy0 at pcn0 phy 0: AC101 10/100 PHY, rev. 11
ifmedia_set: no match for 0x20/0x
InnoTek VirtualBox Guest Service rev 0x00 at pci0 dev 4 function 0 not configu
red
auich0 at pci0 dev 5 function 0 Intel 82801AA AC97 rev 0x01: irq 9, ICH AC97
ac97: codec id 0x83847600 (SigmaTel STAC9700)
audio0 at auich0
ohci0 at pci0 dev 6 function 0 Apple Intrepid USB rev 0x00: irq 5, version 1.0
piixpm0 at pci0 dev 7 function 0 Intel 82371AB Power rev 0x08: SMBus disabled
ehci0 at pci0 dev 11 function 0 Intel 82801FB USB rev 0x00: irq 11
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pmsi0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pmsi0 mux 0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: PC speaker
spkr0 at pcppi0
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
fd1 at fdc0 drive 1: density unknown
usb1 at ohci0: USB revision 1.0
uhub1 at usb1 Apple OHCI root hub rev 1.00/1.00 addr 1
biomask edfd netmask edfd ttymask fdff
softraid0 at root
root on wd0a swap on wd0b dump on wd0b
auich0: measured ac97 link rate at 22020 Hz, will use 48000 Hz

On 7/30/08, Alicornio [EMAIL PROTECTED] wrote:
 2008/7/29, Ted Unangst [EMAIL PROTECTED]:
 On 7/29/08, thacrazze [EMAIL PROTECTED] wrote:

  I want a dualboot with windows xp, and for this I used the FAQ
http://www.openbsd.org/faq/faq4.html#Multibooting, but when I run the
command installboot i get only ksh: installboot: not found and
when I execute dd if=/dev/rsd0a of=openbsd.pbr bs=512 count=1 I get
only dd: /dev/rsd0a: Device not configured
  
can someone help me?


 don't copy commands from a web page and run them without thinking.
  first off, installboot probably already ran, but installboot is
  definitely not the right way to run it.  second, you need to figure
  out what kind of disk you installed on.  if you included dmesg,
  somebody could tell you, but it's going to be wd.


 Note: this is a really good time to remind you that blindly typing
 commands in you don't understand is a really bad idea. This line will
 not work directly on most computers. It is left to the reader to adapt
 it to their machine.

 from: http://www.openbsd.org/faq/faq4.html#Multibooting

 try: dd if=/dev/rwd0a of=openbsd.pbr bs=512 count=1



Re: missing clue regarding IPv6, vlans bridging

2008-07-29 Thread Christian Weisgerber
Paul de Weerd [EMAIL PROTECTED] wrote:

 | Link-local v6 addresses also work fine because they don't involve
 | neighbor discovery.
 
 Uhm, why ?
 
 23:37:41.664994 00:0c:29:e5:f9:24 33:33:ff:ff:4d:0d 86dd 86:
 fe80::20c:29ff:fee5:f924  ff02::1::4d0d: icmp6: neighbor sol: who
 has fe80::20c:29ff:feff:4d0d(src lladdr: 00:0c:29:e5:f9:24) (len 32,
 hlim 255)

I stand corrected.

 How would you determine the linklayer address of your neighbour without
 neighbor discovery ?

Well, you could, since the link-local address is reversibly constructed
from the link-layer address.  On further reflection, I realize that
not all the world is ethernet and this relation might not be true
for other types of interfaces.

Vexingly, I seem to remember that at one time I actually verified
this behavior.  I must have made a mistake then.

My interest was the influence of neighbor discovery on NTP.  Some
fresh tcpdumping here shows that the typical packet exchange goes
like this:

 0 sec  NTP request ---
- NTP reply
+5 sec  neighbor sol --
-- neighbor adv
-- neighbor sol
neighbor adv --

That seems counterintuitive, but it is nice for NTP.

-- 
Christian naddy Weisgerber  [EMAIL PROTECTED]



Re: spamd stopped logging

2008-07-29 Thread mk

Hello

I was able to reproduce this problem on second OpenBSD 4.2 Stable box.
spamd was logging all verbose information until I installed 013: SECURITY 
FIX for Bind issue.


Before patch activation, I was able to see messages like this:
Jul 30 00:35:02 maronet spamd[12359]: (GREY) 146.164.48.5:  - 
[EMAIL PROTECTED]


These messages are not logged anymore.

Can anyone reproduce it too?
Thank you
MK


- Original Message - 
From: mk [EMAIL PROTECTED]

To: misc@openbsd.org
Sent: Sunday, July 27, 2008 2:48 PM
Subject: spamd stopped logging



Hello all

I've found that my spamd on OpenBSD 4.2 stable box stopped logging 
information provided by -v flag.
I did not make any changes on my box in last few days at least I think. 
(except named build)
It was working without any problem for several months. Now, all I can get 
from spamd into my log file is that daemon started, that's all.


my syslog.conf
!spamd
daemon.err;daemon.warn;daemon.info  /var/log/spamd

/var/log/spamd exists, but spamd writes there only these messages:

Jul 27 11:57:19 sra spamd[3752]: listening for incoming connections

I'm starting spamd this way: spamd_flags=-v -G5:4:864
I tried to restart it manually also with syslogd but nothing changed.

Thanks for any hint.
MK




Re: Multiboot Windows XP + OpenBSD doesnt work

2008-07-29 Thread thacrazze
I put the openbsd.pbr to C: and made an entry in the C:/boot.ini

After a reboot I can select the OpenBSD boot entry, but it doesn't starts
I get only a black screen with some cryptical characters/symbols

Then I testet in Windows BootPart, which was recommended in the FAQ
and that says:

Physical numer of disk 0 : 33fa33f9
 0 : C:* type=7 HPFS/NTFS, size=10241406 KB, Lba Pos=63
 1: C:   type=a6 , size= 21213832 KB, Lba Pos=20482875

Can someone help me how to start OpenBSD correctly?

--thacrazze

On Wed, Jul 30, 2008 at 12:30 AM, thacrazze [EMAIL PROTECTED] wrote:
 Thanks! That works!

 --thacrazze

 On 7/30/08, Alicornio [EMAIL PROTECTED] wrote:
 2008/7/29, Ted Unangst [EMAIL PROTECTED]:
 On 7/29/08, thacrazze [EMAIL PROTECTED] wrote:

  I want a dualboot with windows xp, and for this I used the FAQ
http://www.openbsd.org/faq/faq4.html#Multibooting, but when I run the
command installboot i get only ksh: installboot: not found and
when I execute dd if=/dev/rsd0a of=openbsd.pbr bs=512 count=1 I get
only dd: /dev/rsd0a: Device not configured
  
can someone help me?


 don't copy commands from a web page and run them without thinking.
  first off, installboot probably already ran, but installboot is
  definitely not the right way to run it.  second, you need to figure
  out what kind of disk you installed on.  if you included dmesg,
  somebody could tell you, but it's going to be wd.


 Note: this is a really good time to remind you that blindly typing
 commands in you don't understand is a really bad idea. This line will
 not work directly on most computers. It is left to the reader to adapt
 it to their machine.

 from: http://www.openbsd.org/faq/faq4.html#Multibooting

 try: dd if=/dev/rwd0a of=openbsd.pbr bs=512 count=1



Re: Is it necessary to recompile just to apply a security patch?

2008-07-29 Thread Andrew Dalgleish
On Wed, Jul 30, 2008 at 7:25 AM, Ingo Schwarze [EMAIL PROTECTED] wrote:
[snippage]
 Quite probably, your server might be terribly out of date.
 OpenBSD servers ought to be updated at least once a year.
 Please look at the first line of the output of dmesg(8).

If  the server has been up for a while, the circular buffer may have
been over-written.

Try:
head -1 /var/run/dmesg.boot

 If the version number is lower than OpenBSD 4.2,
 you should upgrade the base system before applying patches.



Re: Multiboot Windows XP + OpenBSD doesnt work

2008-07-29 Thread Francisco Valladolid Hdez.
--- thacrazze [EMAIL PROTECTED] wrote:

 I put the openbsd.pbr to C: and made an entry in the
 C:/boot.ini
 
 After a reboot I can select the OpenBSD boot entry,
 but it doesn't starts
 I get only a black screen with some cryptical
 characters/symbols
 
 Then I testet in Windows BootPart, which was
 recommended in the FAQ
 and that says:
 
 Physical numer of disk 0 : 33fa33f9
  0 : C:* type=7 HPFS/NTFS, size=10241406 KB, Lba
 Pos=63
  1: C:   type=a6 , size= 21213832 KB, Lba
 Pos=20482875
 
 Can someone help me how to start OpenBSD correctly?

OpenBSD partition must be active (flag) and try using 
GAG software.

http://gag.sourceforge.net

I'm using OpenBSD 4.4 Beta and XP together.

Regards. 

 
 --thacrazze
 
 On Wed, Jul 30, 2008 at 12:30 AM, thacrazze
 [EMAIL PROTECTED] wrote:
  Thanks! That works!
 
  --thacrazze
 
  On 7/30/08, Alicornio [EMAIL PROTECTED] wrote:
  2008/7/29, Ted Unangst [EMAIL PROTECTED]:
  On 7/29/08, thacrazze [EMAIL PROTECTED]
 wrote:
 
   I want a dualboot with windows xp, and for
 this I used the FAQ

 http://www.openbsd.org/faq/faq4.html#Multibooting,
 but when I run the
 command installboot i get only ksh:
 installboot: not found and
 when I execute dd if=/dev/rsd0a
 of=openbsd.pbr bs=512 count=1 I get
 only dd: /dev/rsd0a: Device not configured
   
 can someone help me?
 
 
  don't copy commands from a web page and run them
 without thinking.
   first off, installboot probably already ran,
 but installboot is
   definitely not the right way to run it. 
 second, you need to figure
   out what kind of disk you installed on.  if you
 included dmesg,
   somebody could tell you, but it's going to be
 wd.
 
 
  Note: this is a really good time to remind you
 that blindly typing
  commands in you don't understand is a really bad
 idea. This line will
  not work directly on most computers. It is left
 to the reader to adapt
  it to their machine.
 
  from:
 http://www.openbsd.org/faq/faq4.html#Multibooting
 
  try: dd if=/dev/rwd0a of=openbsd.pbr bs=512
 count=1
 
 


--- 
Therefore, if anyone is in Christ, he is a new creation; the old has gone, the 
new has come! - 2 Corinthians 5:17 (NIV)
---
Francisco Valladolid Hdez.
http://blog.bsdguy.net - http://flickr.com/photos/sigueme/



Re: OpenBSD 4.3 FAQ in PDF?

2008-07-29 Thread Nick Holland
my mail wrote:
 i don't have 24 hours connection at home, and want read FAQ OpenBSD 4.3 in 
 PDF format.
 
 in this address i can read 4.3 FAQ http://openbsd.org/faq/index.html
 but when i try to download from pub/OpenBSD/doc at FTP mirrors, this FAQ for 
 4.2 version not for 4.3
 
 where i can download 4.3 FAQ in PDF format?
 
 thx

I've put up a 4.3 version of the FAQ in PDF and text formats a
day or two ago, it's out on the mirrors now, the PF user's guide
was just uploaded, so give it a day or so to reach your favorite
mirror.

I still wonder if the occasional people asking for PDFs are
actually from Adobe, trying to make people think people actually
LIKE reading documents in PDF format.  The idea is not bad, but
the readers suck (in my opinion, of course).

Personally, I'd suggest checking out the www/ tree to your local
machine, then pointing your browser at the checkout.  That way,
when you find an error, correct it, do a cvs diff -u, send
it to us, and make things better. :)

However, to each their own.  That's why I spin the PDFs.  It's
a pain, that's why I spin 'em rarely. :)

Nick.



Re: free plot software

2008-07-29 Thread Tim Hume
Hi Pau,

You might like to look at the Generic Mapping Tools:

http://gmt.soest.hawaii.edu/

GMT is a collection of UNIX utilities for making scientific plots (with a
particular focus on geophysics, but widely used elsewhere). I think it
meets all your requirements of being command line driven, active and free.

Cheers,

Tim.

 Hi,

 do you know of a command-line, active, FREE programme to produce
 scientific plots? I am getting more and more used to gnuplot, but I
 don't like their conditions:

 http://en.wikipedia.org/wiki/Gnuplot#License

 I have read something about gri, but it doesn't seem to be as powerful
 as gnuplot is, and the license is, well, gpl. There are some other
 gpl-lincesed projects but they look either not active or not
 well-advanced, or are GUI-specific, as grace is.

 Supermongo -which I used in the past- is not very freedom-friendly and
 I don't like the ps result: Everything is converted into a curve,
 included the labels (letters). This makes very difficult the
 (potential) per-hand edition/modification of the ps.

 Just asking. Thanks in advance.

 Pau



Re: OpenBSD 4.3 FAQ in PDF?

2008-07-29 Thread my mail
-- On Wed, 7/30/08, Nick Holland [EMAIL PROTECTED] wrote:

 From: Nick Holland [EMAIL PROTECTED]
 Subject: Re: OpenBSD 4.3 FAQ in PDF?

 I've put up a 4.3 version of the FAQ in PDF and text
 formats a
 day or two ago, it's out on the mirrors now, the PF
 user's guide
 was just uploaded, so give it a day or so to reach your
 favorite
 mirror.
 
 I still wonder if the occasional people asking for PDFs are
 actually from Adobe, trying to make people think people
 actually
 LIKE reading documents in PDF format.  The idea is not bad,
 but
 the readers suck (in my opinion, of course).
 
 Personally, I'd suggest checking out the www/ tree to
 your local
 machine, then pointing your browser at the checkout.  That
 way,
 when you find an error, correct it, do a cvs diff
 -u, send
 it to us, and make things better. :)
 
 However, to each their own.  That's why I spin the
 PDFs.  It's
 a pain, that's why I spin 'em rarely. :)
 
 Nick.

hi Nick, thx for you great work, really apreciate that.
Yes I know, Adobe reader is to slow and to much memory usage, but i like read 
using XPDF no Adobe Reader

thanks again for this PDF



Re: Is it necessary to recompile just to apply a security patch?

2008-07-29 Thread Joel Sing
On Wednesday 30 July 2008, Andrew Dalgleish wrote:
 On Wed, Jul 30, 2008 at 7:25 AM, Ingo Schwarze [EMAIL PROTECTED] wrote:
 [snippage]

  Quite probably, your server might be terribly out of date.
  OpenBSD servers ought to be updated at least once a year.
  Please look at the first line of the output of dmesg(8).

 If  the server has been up for a while, the circular buffer may have
 been over-written.

 Try:
 head -1 /var/run/dmesg.boot

Or:

[EMAIL PROTECTED] ~ 64]$ uname -a
OpenBSD wombat.sing.id.au 4.4 GENERIC#73 sgi

Or:

[EMAIL PROTECTED] ~ 63]$ config -e /bsd
OpenBSD 4.4-beta (GENERIC) #73: Tue Jul 29 00:16:10 EST 2008
[EMAIL PROTECTED]:/usr/src/sys/arch/sgi/compile/GENERIC
warning: no output file specified
Enter 'help' for information
ukc quit

  If the version number is lower than OpenBSD 4.2,
  you should upgrade the base system before applying patches.

-- 

 = Joel Sing | [EMAIL PROTECTED] | 0419 577 603 =


 Real stupidity beats artificial intelligence every time.
  - Terry Pratchett, Hogfather



Re: atheros - just curious, ot

2008-07-29 Thread Travers Buda
* Reyk Floeter [EMAIL PROTECTED] [2008-07-28 09:53:58]:

 
 Actually, I'm confused.  It carries an ISC license with an Atheros
 copyright.  Luis Rodriguez (madwifi/ath5k) and Jouni Malinen (Linux
 Prism2 HostAP) are working for Atheros now.  The code seems to include
 open source HAL-code, there is no binary blob.
 
 The only missing thing is the documentation, but even the existing
 driver might help to port it to OpenBSD.  Actually, the ath9k stuff is
 very similar to ath5k which is indeed based on my ar5k driver (OpenBSD
 ath(4))... too bad that Atheros did not decide to use a copyright like
 
   Copyright (c) 2008 Atheros Communications Inc.
   Copyright (c) 2004-2007 Reyk Floeter [EMAIL PROTECTED]
 
 They neither apologized for all the trouble nor give me any credits
 for my work.  ath9k would not exist without my work on the OpenBSD
 ar5k driver, it was a door opener, the base of the ath5k port, and
 Atheros' way into the Linux kernel.  It was the reason why Luis
 Rodriguez got his new job.  It might help Atheros to gain market
 shares again, after they lost so many to more open companies like
 Ralink Tech.
 

Didn't someone mention they even used license.template?  What's up
with that?

Why is this code ISC licensed anyhow?  I suppose it's a bit off-topic
but I was under the impression that Torvalds only _wants_ *wink*
GPL code.  Perhaps they're keeping ISC around to placate Reyk or
perhaps make themselves feel less guilty?  Despite the licensing,
I'm sure it will be bundled with every linux distro out there
regardless.  Most of those guys just don't seem to care what the
license is let alone actually understand it.  Perhaps it's less of
an open source push than it is for market share.  That might explain
the choice of ISC--more adoption, albeit painful if you don't like
magic.

Atheros must like magic, they could have just seded the explicitives
out of their docs and put them on an ftp.  They would not have
needed to pay anybody and it would have taken less time.

This has nothing to do about opening up--they want more market
share.  Incidentally, how many 802.11 stacks does linux have now?

-- 
Travers Buda



Re: Is it necessary to recompile just to apply a security patch?

2008-07-29 Thread Nick Guenther
On Tue, Jul 29, 2008 at 5:25 PM, Ingo Schwarze [EMAIL PROTECTED] wrote:

 Nick wrote:
 OpenBSD is mostly designed as a monolithic kernel.

 Please stop spreading misleading advice.
 This has nothing to do with the kernel.
 (Hopefully, skogzort didn't start building kernels yet.)

Sorry. I didn't read what his specific task was, I just read oh noes
recompile :(?. I jumped on trying to ease him into OpenBSD instead of
scaring him off.
-Nick



Re: Is it necessary to recompile just to apply a security patch?

2008-07-29 Thread John Brooks
how about this:

uname -a

or this:

head -1 /etc/motd

--
John Brooks
[EMAIL PROTECTED]

...

 Please look at the first line of the output of dmesg(8).

If  the server has been up for a while, the circular buffer may have
been over-written.

Try:
head -1 /var/run/dmesg.boot