Re: Stop in line 73 of Makefile

2008-09-07 Thread Doug Milam
Thanks; I had never set or changed any flags until a few days ago, in trying to 
'fix' this issue. Perhaps someone compromised the system via FTP (ftpd was 
running only anonymously), or via HTTP. 

* *

The most dangerous man, to any government, is the man who is able to think 
things out for himself, without regard to the prevailing superstitions and 
taboos.  --Mencken

--- On Sun, 9/7/08, Philip Guenther <[EMAIL PROTECTED]> wrote:
From: Philip Guenther <[EMAIL PROTECTED]>
Subject: Re: Stop in line 73 of Makefile
To: [EMAIL PROTECTED]
Cc: "Misc OpenBSD" 
Date: Sunday, September 7, 2008, 12:32 PM

On Sun, Sep 7, 2008 at 9:18 AM, Doug Milam <[EMAIL PROTECTED]> wrote:
> Performing 'make build' as root...there is no 'schg' flag
on /bin/chgrp
>
> ===> bin/chmod
> install -c -s -o root -g bin  -m 555 chmod /bin/chmod
> strip: Bad address

Umm, that's not an expected error from 'strip' during install. 
Your
system appears to suffer all sorts of oddball failures.


> rm: /bin/chgrp: Operation not permitted

unlink("/bin/chgrp") is returning EPERM.  Either you're
installing to
an unusual file system, or the /bin/chgrp file has flags set (you say
no schg, but what about uchg, uappnd, or sappnd?), or your rm binary
is broken/hacked, or your running kernel is broken/hacked.

IMHO, the only way to be sure you have a good system at this point is
to reinstall from scratch via an actual CD.  You never said whether
you found who had used the chflags command on /bsd.  If the answer was
"don't know who", then consider that you're running a system
that has
had root-level changes made that you can't explain and therefore can't
trust, and then ask yourself why you *haven't* already reinstalled
from a CD.


Philip Guenther



Re: [OT] moving out to a new /home

2008-09-07 Thread Nick Holland
Nuno Magalhces wrote:
...
> My test box is an old Compaq Armada laptop - no battery, no monitor, a
> piece of junk. But works, with 96RAM running Open BSD. I use it to
> serve http and ssh at the moment, and maybe ftp in the future. Being a
> laptop it uses less power and the fan is more silent. I'm inclined to
> having it working 24/7, however, it only has a 4GB disc.
> 
> What i'm thinking about is finding a big 2.5" IDE and use that laptop
> not only as my server toy but also as my /home, that way i can share
> its contents through the home network to the other pcs. The desktop
> would mount it at startup (NFS?), they're connected through the home
> router. Alternatively i could find a way to adapt the 3.5" 160GB SATA
> to the laptop but i think that's unlikely. The laptop only has USB
> 1.0.
> 
> Are there any big hard drive limitations or is creating a small /boot
> partition at the start of the disk enough?
> Any other suggestions?

this isn't Linux, we aren't using a /boot partition.
You need a small root partition.
You can get a 250G HD for sickeningly cheap.  It will probably just
take off and run...though some Compaqs have historically had serious
problems with BIOSs and "large" disks, so don't be surprised if you
put a 250G disk in the thing and it refuses to POST.  A BIOS upgrade
may help...or it may help only up to 128G (or 32G, or ...)

You will be in for a rude surprise should you need to fsck a drive that
big with that "small" amount of RAM.  See appropriate entries in FAQs
14 and 4.  Give yourself a lot of swap and tweak the default file system
parameters a bit, though, and you might be happy...assuming your FS
needs match your tweaking, and not the much more general purpose
defaults.  You will wish you had a functioning battery the first time
you knock out the power cord.

How do you plan to back this thing up?
(don't bother answering to me or the list, we don't care.  You might
someday...so you should have an answer in mind).

Be forewarned, laptops aren't generally designed for 24x7 operation.
Neither the disks nor the machines are designed for that.
'course, my backup IBM A21p (love that screen!) just died, leaving
just my "production" one (my favorite laptop, which has one of those
cheap 250G disks, but 384M RAM and no one huge partition), so I'm
even more cynical about that than usual...

You may want to check your assumptions about power consumption and
laptops, and actually measure comparable machines.  I was a little
surprised when I put a Wattmeter on my Thecus and a Celeron 500, and
found out that the price I paid for the new Thecus will NEVER
compensate for the small reduction in power consumption over the
free Celeron 500 (something like 18W vs. 22W) (do proper comparisons,
booted to the target OS, with the OS doing what it will be doing in
production (which for most home users is nothing, though in the case
above, under full load, the Celeron 500 went to something like 40W,
the Thecus went to around 24W).

Nick.



ip.ipsec-enc-alg

2008-09-07 Thread jared r r spiegel
  does isakmpd(8) actually use this and the other ipsec-* sysctls?

  ip.ipsec-enc-alg has been aes for as long as i've ever noticed it
  and it seems isakmpd always wants to use 3des for as long as i've
  known about it (perhaps because it performs an explicit default
  of the BLHABLH-3DES-BLHABLA like the isakmpd.conf(5) page says).

-- 

  jared



System not finishing boot up after applying kernel patch 005_pcb

2008-09-07 Thread casey roberts
Hope someone knows how to address the following issue.  I patched my 4.3
kernel with the 005_pcb patch, did the usual config/make depend/make steps
as clearly outlined in config(8).  DMESG's follow.

After the new kernel starts rc, things go bad real fast.  Plain
generic.mpand generic.  Nothing was changed at all.

Good generic.mp kernel

login: >> OpenBSD/i386 BOOT 3.02
boot>
booting hd0a:/bsd: 5999364+1014172 [52+311824+292774]=0x744000
entry point at 0x200120
[ using 605024 bytes of bsd ELF symbol table ]
Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California.  All rights reserved.
Copyright (c) 1995-2008 OpenBSD. All rights reserved.
http://www.OpenBSD.org

OpenBSD 4.3-current (GENERIC.MP) #673: Fri May  2 04:50:32 MDT 2008
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) Xeon(TM) CPU 3.00GHz ("GenuineIntel" 686-class) 3 GHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR
real mem  = 2145525760 (2046MB)
avail mem = 2066485248 (1970MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 03/15/06, BIOS32 rev. 0 @ 0xffe90,
SMBIOS rev. 2.3 @ 0xf0450 (97 entries)
bios0: vendor Dell Inc. version "A07" date 03/15/2006
bios0: Dell Inc. Precision WorkStation 470
acpi0 at bios0: rev 0
acpi0: tables DSDT FACP SSDT APIC BOOT ASF! MCFG HPET
acpi0: wakeup devices VBTN(S4) PCI0(S5) PCI1(S5) PCI2(S5) PCI3(S5) PCI4(S5)
PCI5(S5) PCI6(S5) KBD_(S1) USB0(S3) USB1(S3) USB2(S3) USB3(S3)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: apic clock running at 199MHz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Xeon(TM) CPU 3.00GHz ("GenuineIntel" 686-class) 3 GHz
cpu1:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR
ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins
ioapic0: misconfigured as apic 0, remapped to apid 8
ioapic1 at mainbus0: apid 9 pa 0xfec8, version 20, 24 pins
ioapic1: misconfigured as apic 0, remapped to apid 9
ioapic2 at mainbus0: apid 10 pa 0xfec80800, version 20, 24 pins
ioapic2: misconfigured as apic 0, remapped to apid 10
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 1 (PCI1)
acpiprt1 at acpi0: bus 2 (PCI2)
acpiprt2 at acpi0: bus 3 (PCI3)
acpiprt3 at acpi0: bus 4 (PCI4)
acpiprt4 at acpi0: bus 5 (PCI5)
acpiprt5 at acpi0: bus 6 (PCI6)
acpiprt6 at acpi0: bus 0 (PCI0)
acpicpu0 at acpi0
acpicpu1 at acpi0
acpibtn0 at acpi0: VBTN
bios0: ROM list: 0xc/0xc000! 0xcc000/0x1800! 0xcd800/0x2800
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel E7525 Host" rev 0x09
"Intel E7520 Error Reporting" rev 0x09 at pci0 dev 0 function 1 not
configured
ppb0 at pci0 dev 2 function 0 "Intel E7520 PCIE" rev 0x09
pci1 at ppb0 bus 1
ppb1 at pci1 dev 0 function 0 "Intel PCIE-PCIE" rev 0x00
pci2 at ppb1 bus 2
ppb2 at pci1 dev 0 function 2 "Intel PCIE-PCIE" rev 0x00
pci3 at ppb2 bus 3
ral0 at pci3 dev 13 function 0 "Ralink RT2560" rev 0x01: apic 10 int 1 (irq
10), address 00:0e:2e:52:03:65
ral0: MAC/BBP RT2560 (rev 0x04), RF RT2525
em0 at pci3 dev 14 function 0 "Intel PRO/1000MT (82545GM)" rev 0x04: apic 10
int 0 (irq 11), address 00:14:22:26:1d:3b
ppb3 at pci0 dev 3 function 0 "Intel E7520 PCIE" rev 0x09: apic 8 int 16
(irq 11)
pci4 at ppb3 bus 4
ppb4 at pci0 dev 4 function 0 "Intel E7520 PCIE" rev 0x09: apic 8 int 16
(irq 11)
pci5 at ppb4 bus 5
vga1 at pci5 dev 0 function 0 "NVIDIA Quadro FX 1400" rev 0xa2
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
uhci0 at pci0 dev 29 function 0 "Intel 82801EB/ER USB" rev 0x02: apic 8 int
16 (irq 11)
uhci1 at pci0 dev 29 function 1 "Intel 82801EB/ER USB" rev 0x02: apic 8 int
19 (irq 10)
uhci2 at pci0 dev 29 function 2 "Intel 82801EB/ER USB" rev 0x02: apic 8 int
18 (irq 9)
uhci3 at pci0 dev 29 function 3 "Intel 82801EB/ER USB" rev 0x02: apic 8 int
16 (irq 11)
ehci0 at pci0 dev 29 function 7 "Intel 82801EB/ER USB2" rev 0x02: apic 8 int
23 (irq 5)
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1
ppb5 at pci0 dev 30 function 0 "Intel 82801BA Hub-to-PCI" rev 0xc2
pci6 at ppb5 bus 6
re0 at pci6 dev 13 function 0 "US Robotics USR997902" rev 0x10: RTL8169S
(0x0400), apic 8 int 17 (irq 10), address 00:14:c1:32:4a:f4
rgephy0 at re0 phy 7: RTL8169S/8110S PHY, rev. 0
ichpcib0 at pci0 dev 31 function 0 "Intel 82801EB/ER LPC" rev 0x02
pciide0 at pci0 dev 31 function 1 "Intel 82801EB/ER IDE" rev 0x02: DMA,
channel 0 configured to compatibility, channel 1 configured to compatibility
pciide0: channel 0 ignored (disabled)
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0:  ATAPI
5/cdrom removabl

logging all blocked packets with PF

2008-09-07 Thread Maxx Twayne

Hi,

I would like to know if there is way to log all blocked packets with.
When i use "block in log all", the parsing is OK, but i got nothing on 
the pflog0 interface, or in the pflog files.


Is this normal or am i doing something wrong ?

Is there a way to log all those blocked traffic for debugging purpose ?

Thanks



Re: Wireless

2008-09-07 Thread OpenBSD
On Sun, 7 Sep 2008 17:11:08 +
Cezary Morga <[EMAIL PROTECTED]> wrote:

> Dnia niedziela, 7 wrze6nia 2008, OpenBSD napisa3:
> > I have 1 Broadcom wireless card that is recognized by OpenBSD 4.3 as
> > bwi0, but it needs a firmware;
> 
> The link to the firmware is in bwi(4) manpage.
> --
> Cezary Morga
> "The belief in a supernatural source of evil is not necessary; men alone
> are quite capable of every wickedness." (Joseph Conrad)
> 

Yes, i found it, but it doesn't work well; it stop at boot and leave me in a 
command line, ddr>, freezing the OS.
-- 
OpenBSD <[EMAIL PROTECTED]>



Re: Stop in line 73 of Makefile

2008-09-07 Thread Philip Guenther
On Sun, Sep 7, 2008 at 9:18 AM, Doug Milam <[EMAIL PROTECTED]> wrote:
> Performing 'make build' as root...there is no 'schg' flag on /bin/chgrp
>
> ===> bin/chmod
> install -c -s -o root -g bin  -m 555 chmod /bin/chmod
> strip: Bad address

Umm, that's not an expected error from 'strip' during install.  Your
system appears to suffer all sorts of oddball failures.


> rm: /bin/chgrp: Operation not permitted

unlink("/bin/chgrp") is returning EPERM.  Either you're installing to
an unusual file system, or the /bin/chgrp file has flags set (you say
no schg, but what about uchg, uappnd, or sappnd?), or your rm binary
is broken/hacked, or your running kernel is broken/hacked.

IMHO, the only way to be sure you have a good system at this point is
to reinstall from scratch via an actual CD.  You never said whether
you found who had used the chflags command on /bsd.  If the answer was
"don't know who", then consider that you're running a system that has
had root-level changes made that you can't explain and therefore can't
trust, and then ask yourself why you *haven't* already reinstalled
from a CD.


Philip Guenther



Re: spamd: smtp clients from the outside

2008-09-07 Thread Philip Guenther
On Sun, Sep 7, 2008 at 10:31 AM, Gabri Mati <[EMAIL PROTECTED]> wrote:
> I thought about making an smtpd listening on a non-default port accepting
> clients for sending. What do you think about that?

Sounds like you're looking for port 587, the submission port, as
described in RFC 4409.  Protocol-wise, ports 25 and 587 differ in the
following:
1) some SMTP extensions are banned from port 587 (ETRN), others are banned
from
   port 25 (BURL, FUTURERELEASE)
2) the port 587 server is permitted to do additional message
canonicalization that a
   port 25 is banned from.
3) many more ISPs filter outbound port 25 to cut down on spam
generation by their
   customers

As for authenticating the remote clients with dynamic IPs, why not use
the standard SMTP AUTH extension?  Lots of places use that to permit
relaying by remote clients; indeed, the default sendmail configs do
so.  Do your remote clients not support that extension?


Philip Guenther



Re: Duplicat Defintion of drm_i915_flip

2008-09-07 Thread Owain Ainsworth
On Sun, Sep 07, 2008 at 07:13:23PM +0200, Tobias Sarnowski wrote:
> I discovered the same issue with following the official instructions:
>   $ cd /usr/xenocara
>   $ make bootstrap
>   $ make obj
>   $ make build
> 
> Commenting the duplicate out fixed the problem for me atm. Is "make
> clean" the way to go before doing the bootstrap, obj, build when
> following current?

The instructions for doing a make build in src advises you to clean out
the obj dir before starting. The same applies for xenocara.

(reference man release:
...

Now that you are running your new kernel you can build a new
system.  It's safer (but slower) to remove your object
directories and re-create them before the build.

...
)

-0-

-- 
Don't take life too seriously -- you'll never get out of it alive.



Re: spamd: smtp clients from the outside

2008-09-07 Thread Gábri Máté
I thought about making an smtpd listening on a non-default port accepting
clients for sending. What do you think about that?

2008/9/3 GC!bri MC!tC) <[EMAIL PROTECTED]>

> Dear List,
> i'd like to use spamd to create a gerylisting layer, but i have a few smtp
> clients on the internet with dynamic IPs. Is there a better way to let them
> through besides 2 sending attempts or authpf?
>
> Thanks!



[OT] moving out to a new /home

2008-09-07 Thread Nuno Magalhães
Hi,

My main desktop is an amd64 running Debian with 2GB RAM and 160GB
disc, about to burst with all the stuff i have in /home. I can clean
it up a bit but i'll just delay the issue. I can also repartition,
since / is only taking up 25% of its space and i don't use the XP
partition anyway.

My test box is an old Compaq Armada laptop - no battery, no monitor, a
piece of junk. But works, with 96RAM running Open BSD. I use it to
serve http and ssh at the moment, and maybe ftp in the future. Being a
laptop it uses less power and the fan is more silent. I'm inclined to
having it working 24/7, however, it only has a 4GB disc.

What i'm thinking about is finding a big 2.5" IDE and use that laptop
not only as my server toy but also as my /home, that way i can share
its contents through the home network to the other pcs. The desktop
would mount it at startup (NFS?), they're connected through the home
router. Alternatively i could find a way to adapt the 3.5" 160GB SATA
to the laptop but i think that's unlikely. The laptop only has USB
1.0.

Are there any big hard drive limitations or is creating a small /boot
partition at the start of the disk enough?
Any other suggestions?

TIA

PS: i don't want to change my main box to Open BSD.

--
Nuno MagalhC#es



Stop in line 73 of Makefile

2008-09-07 Thread Doug Milam
Performing 'make build' as root...there is no 'schg' flag on /bin/chgrp

===> bin/chmod
install -c -s -o root -g bin  -m 555 chmod /bin/chmod
strip: Bad address
(cd /usr/sbin;  ln -sf ../../sbin/chown .;  ln -sf ../../bin/chgrp .)
(cd /usr/bin;  ln -sf ../../bin/chmod chflags)
install -c -o root -g bin -m 444 chmod.cat1 /usr/share/man/cat1/chmod.0
install -c -o root -g bin -m 444 chgrp.cat1 /usr/share/man/cat1/chgrp.0
install -c -o root -g bin -m 444 chown.cat8 /usr/share/man/cat8/chown.0
install -c -o root -g bin -m 444 chflags.cat1 /usr/share/man/cat1/chflags.0
/bin/chgrp -> /bin/chmod
rm: /bin/chgrp: Operation not permitted
*** Error code 1

Stop in /usr/src/bin/chmod (line 134 of /usr/share/mk/bsd.prog.mk).
*** Error code 1

Stop in /usr/src/bin (line 48 of /usr/share/mk/bsd.subdir.mk).
*** Error code 1

Stop in /usr/src (line 48 of /usr/share/mk/bsd.subdir.mk).
*** Error code 1

Stop in /usr/src (line 73 of Makefile).


* *

The most dangerous man, to any government, is the man who is able to think
things out for himself, without regard to the prevailing superstitions and
taboos.  --Mencken



Re: Duplicat Defintion of drm_i915_flip

2008-09-07 Thread Tobias Sarnowski
I discovered the same issue with following the official instructions:
  $ cd /usr/xenocara
  $ make bootstrap
  $ make obj
  $ make build

Commenting the duplicate out fixed the problem for me atm. Is "make
clean" the way to go before doing the bootstrap, obj, build when
following current?


Tobias Sarnowski


Matthieu Herrb wrote:
> On Sun, Sep 7, 2008 at 8:01 AM, Aaron W. Hsu <[EMAIL PROTECTED]> wrote:
>> Hello all,
>>
>> I've been following -current for some time now without having too much
>> trouble, but I knew I was going to hit something at some point with
>> compiling from source. Usually I'd just take a snapshot and start from
>> there or some such, but I was curious whether this is really a mistake
>> in the tree or not. I'm guessing not, but just in case, I thought
>> I would drop it here.
>>
>> I attempted to compile the xenocara tree today after a fresh checkout
>> and a working rebuild of the base today. I receive an error when
>> trying to build driver/xf86-video-intel/src/i830_dri.c.
>>
>> It says that a duplicate definition of struct drm_i915_flip and
>> drm_i915_flip_t. The duplicate definition is from i915_drm.h. I
>> noticed that i915_drm.h is included in i830_dri.c, which is why
>> I thought that maybe this duplicate definition is more than just
>> a failure on my end.
>>
>> Can anyone verify this? I'm hoping it's just the standard kickback
>> from following -current via cvs.
>>
> 
> You need to wipe you obj tree before rebuilding.
> 
> 


-- 
www.new-thoughts.org
__ tobias sarnowski / software development & managment
__ [EMAIL PROTECTED]



Re: Wireless

2008-09-07 Thread Cezary Morga
Dnia niedziela, 7 wrze6nia 2008, OpenBSD napisa3:
> I have 1 Broadcom wireless card that is recognized by OpenBSD 4.3 as
> bwi0, but it needs a firmware;

The link to the firmware is in bwi(4) manpage.
--
Cezary Morga
"The belief in a supernatural source of evil is not necessary; men alone
are quite capable of every wickedness." (Joseph Conrad)



Re: Duplicat Defintion of drm_i915_flip

2008-09-07 Thread Matthieu Herrb
On Sun, Sep 7, 2008 at 8:01 AM, Aaron W. Hsu <[EMAIL PROTECTED]> wrote:
> Hello all,
>
> I've been following -current for some time now without having too much
> trouble, but I knew I was going to hit something at some point with
> compiling from source. Usually I'd just take a snapshot and start from
> there or some such, but I was curious whether this is really a mistake
> in the tree or not. I'm guessing not, but just in case, I thought
> I would drop it here.
>
> I attempted to compile the xenocara tree today after a fresh checkout
> and a working rebuild of the base today. I receive an error when
> trying to build driver/xf86-video-intel/src/i830_dri.c.
>
> It says that a duplicate definition of struct drm_i915_flip and
> drm_i915_flip_t. The duplicate definition is from i915_drm.h. I
> noticed that i915_drm.h is included in i830_dri.c, which is why
> I thought that maybe this duplicate definition is more than just
> a failure on my end.
>
> Can anyone verify this? I'm hoping it's just the standard kickback
> from following -current via cvs.
>

You need to wipe you obj tree before rebuilding.


-- 
Matthieu Herrb