Re: IPv6 null route

[Todd T. Fries]

I believe you want:

$ sudo route add -inet6 -net -blackhole 2607:f2f8:: -prefixlen 32 ::1 
-- 
Todd Fries .. t...@fries.net

 _
| \  1.636.410.0632 (voice)
| Free Daemon Consulting, LLC \  1.405.227.9094 (voice)
| http://FreeDaemonConsulting.com \  1.866.792.3418 (FAX)
| "..in support of free software solutions."  \  250797 (FWD)
| \
 \\
 
  37E7 D3EB 74D0 8D66 A68D  B866 0326 204E 3F42 004A
http://todd.fries.net/pgp.txt

Penned by Garry Dolley on 20090406 19:29.46, we have:
| Hey misc@,
| 
| I'm trying to install a null route for an IPv6 block, but I get:
| 
| $ sudo route add -inet6 2607:f2f8::/32 ::1 -blackhole
| route: 2607:f2f8::/32: bad value
| 
| What is bad about that v6 address?
| 
| Note that even when omitting -blackhole, it will still error.
| 
| I'm running OpenBSD 4.4 on amd64 arch.  Stock GENERIC kernel.
| 
| I'm sure it's simple but I don't deal w/ OpenBSD routers much.
| 
| Thanks.
| 
| -- 
| Garry Dolley
| ARP Networks, Inc. | http://www.arpnetworks.com | (818) 206-0181
| Data center, VPS, and IP Transit solutions
| Member Los Angeles County REACT, Unit 336 | WQGK336
| Blog http://scie.nti.st

Re: Stupid Ideas - softraid and ExpEther

[SJP Lists]

2009/4/7 J.C. Roberts :

> The design involves a technology called "Express Ether" though it is
> typically written as "ExpEther," and it is basically a way to run a
> PCIe bus over ethernet. Though this might be the first you've heard of
> it, ExpEther has been in development at NEC for the last five years,
> and yes, I'm currently working on getting the documentation released for
> the existing silicon.

DMA to host memory via Ethernet?

O_o

Re: OpenBSD on IBM 3550

[Marcos Laufer]

Ricardo,

Yo supongo que te va a funcionar, si llegas a tener la posibilidad de 
probarlo decime como te fue!


Saludos,
Marcos

Ricardo Augusto de Souza escribis:

Hi,



I have an IBM 3550 with SAS disks and Adaptec ServeRAID 8k controller
and I AM NOT able to install openBSD on it.

Installation didn't find any hard disk during installation.



According with http://www.openbsd.org/i386.html
  it works with adaptec serveraid.



If I change SAS to SATA disks will openBSD recognize them at
installation ?





Thanks

Re: [semi-OT] Can anyone recommend an OpenBSD-compatible colour laser printer?

[J.C. Roberts]

On Tue, 7 Apr 2009 01:57:20 +0200 ropers  wrote:

> 2009/4/6 J.C. Roberts :
> >
> > If the real reason for buying a laser printer is PCB work, then
> > there are some laser printers with a perfectly straight card-stock
> > paper path where you can actually run the PCB material directly
> > through the printer. I've seen them but I can't recall off the top
> > of my head what brands/models can do this.
> 
> Have you actually tried this? I'm just wondering, because I have a
> really hard time imagining how this could work, seeing that laser
> printers tend to require and electrically charged drum, and an
> electrically conductive (and potentially, somewhere, grounded) print
> medium seems like it could drain the drum charge real fast, resulting
> in the toner going all over the place. But maybe I'm mistaken. Maybe
> the drum charge is really only required during transfer of the toner
> to the drum, and maybe even the drum being in contact with a copper
> plated medium wouldn't disturb the toner positioning. Maybe the toner
> would transfer and get fused to the "blank PCB" just fine. Maybe. If
> anyone knows, then I'd be really curious to hear.
> 
> regards,
> --ropers

I've seen these printers in prototype labs, but I've never actually
used one. As for how the heck they actually work, I really don't know.
A search on "PCB Printer" might answer your questions. Since your goal
is PCB work, it seemed worth mentioning since few people know these
strange beasts even exist.

-- 
J.C. Roberts

IPv6 null route

[Garry Dolley]

Hey misc@,

I'm trying to install a null route for an IPv6 block, but I get:

$ sudo route add -inet6 2607:f2f8::/32 ::1 -blackhole
route: 2607:f2f8::/32: bad value

What is bad about that v6 address?

Note that even when omitting -blackhole, it will still error.

I'm running OpenBSD 4.4 on amd64 arch.  Stock GENERIC kernel.

I'm sure it's simple but I don't deal w/ OpenBSD routers much.

Thanks.

-- 
Garry Dolley
ARP Networks, Inc. | http://www.arpnetworks.com | (818) 206-0181
Data center, VPS, and IP Transit solutions
Member Los Angeles County REACT, Unit 336 | WQGK336
Blog http://scie.nti.st

Stupid Ideas - softraid and ExpEther

[J.C. Roberts]

On Fri, 3 Apr 2009 13:52:28 -0500 Marco Peereboom 
wrote:

> That said I can guarantee that the OpenBSD project pays more attention
> to its users then other OS'.  This does not mean that the users get to
> set the road-map.  When an idea is not good the author is told so,
> usually, in strong language.  The opposite is Linux and other unnamed
> BSDs where everyone agrees with each other paralyzing proper
> development.  A stupid idea is still a stupid idea and it isn't
> magically going to mature like a good wine.


Over the last handful of days, I've been trying to figure out whether
or not the the way of doing things proposed by my work is actually a
stupid idea. Though I've been sent out to investigate status on all UNIX
variants, both open and closed source, I'm pushing for using OpenBSD in
one of their new designs.

The design involves a technology called "Express Ether" though it is
typically written as "ExpEther," and it is basically a way to run a
PCIe bus over ethernet. Though this might be the first you've heard of
it, ExpEther has been in development at NEC for the last five years,
and yes, I'm currently working on getting the documentation released for
the existing silicon.

http://www.nec.co.jp/press/en/0702/0801.html
http://www.expether.org/

In short, you can think of ExpEther as something between a bus extender
and a bridge (PCIe<->ethernet), so basically anything you can plug into
a PCIe slot can be made available to a remote machine. Yep, you can
even partition attached devices into VLANs and basically "build" a
computer on the fly out of available parts attached to the network. For
example if your VPN or secure website is running a little slow, you
would usually halt the machine and add a crypto accelerator, but with
ExpEther, you just export a crypto accelerator device on another system
to the system that needs it and the recipient system assumes the device
is attached to it's local PCIe bus.

One of the first applications I'm working on is exporting a softraid
volume over ExpEther. I was asked if it was possible to build a shim
that makes a block device like a softraid sd0a look like an ATA device
sitting on a (fictitious) ATA controller on the PCIe bus?

Though it's certainly an uncommon thing to try to do, there's just
something about this approach that makes me wonder if it's a
crazy/stupid idea, or absolutely brilliant?

To *me* (complete idiot), I'm wondering if this is being approached at
the wrong level, namely shimming a block device like sd0a to be seen as
a ata/scsi device on a fictitious controller, versus shimming something
below it, i.e. 
scsibus0 at softraid0 
sd0 at scsibus0

The *consumer* of the resource is expecting to see a disk attached to
a (fictitious) scsi/ata controller on it's local PCIe bus (which is
imported via ExpEther).

The *provider* of the resource needs to take a softraid volume and make
it look like just a (fictitious) disk attached to a (fictitious)
scsi/ata controller on a (fictitious) PCIe bus (which is exported via
ExpEther).

Whether or not the shimming is done below partitioning on the provider
side is yet to be determined. If it is done above partitioning on the
provider side (i.e. block devices like sd0a), the result will be two
layers of partitioning (both provider and consumer) since sd0a on the
provider-system would become the (fictitious) sd0 on the
consuming-system.

The thing to remember is we're talking *below* the file system, so well
intended suggestions of NFS, ZFS, or file-system-de-jour are not at all
relevant.

As for the vast number of different types of potential failure modes,
the PCIe spec includes hot-plug requirements (yet who knows if your
$VENDOR implemented them properly), but on top of that, the ExpEther
spec also has it's own hot-plug requirements, and they've been
implemented. Even with all this, getting the potential failure modes
correctly handled at the various levels will take a lot of effort.

Yes Nick, you can show up with your nail-gun (ramset). (;

Though this is for my work, I'm quietly doing my best to make it
benefit the project in various ways (including docs, code, ...). If any
of you would be kind enough to drop kick me in the direction of finding
a clue, or even want to voice an opinion about the bleeding edge (pink
elephants, vaporware, etc.) stuff I'm working on, it would be much
appreciated. I'm *way* over my head on a lot of this stuff, but I'm
learning it as fast as I can.

Thanks,
jcr

-- 
J.C. Roberts

Confirmacion de suscripcion: Boletin Cientifico Coband

[Boletin Cientifico Coband]

Estimada/o,

Le estamos enviando este mail porque esta suscripta/o al Boletmn Cientmfico 
Coband con la siguiente direccisn de correo:

misc@openbsd.org

Como usted sabe, el Proyecto COBAND es una organizacisn sin fines de lucro 
formada por estudiantes, graduados, docentes, profesionales e investigadores 
que promueven el avance de la psicologma cientmfica en Argentina.

A travis de este boletmn, usted recibe quincenalmente y de forma totalmente 
gratuita, informacisn actualizada de psicologma argentina y mundial, 
invitaciones a eventos nacionales e internacionales, una seleccisn de reszmenes 
de las revistas de psicologma mas importantes del mundo, recomendaciones de 
libros, artmculos de divulgacisn, biografmas de grandes psicslogos, informacisn 
para investigadores, recursos, llamados para artmculos, acceso preferencial a 
becas. Puede ver el zltimo nzmero aqum: http://www.boletin.coband.org

Actualmente, debido a nuestra adhesisn a una nueva polmtica anti-spam estamos 
actualizando nuestra base de datos con un sistema de confirmacisn seguro. Puede 
acceder a nuestra polmtica de privacidad aqum: 
http://www.coband.org/privacidad.htm
   
Para confirmar su suscripcisn y seguir recibiendo en su casilla el Boletmn 
Cientmfico Coband visite la siguiente direccisn:

http://scripts.dreamhost.com/add_list.cgi?g=u2T45mWGYANkE

Su presencia es muy importante para nosotros.

Muchas gracias por mantenerse actualizado en psicologma cientmfica con el 
Proyecto COBAND
 
Muy cordialmente,
 
Ezequiel Benito
Coordinador General
Proyecto COBAND 

Re: mounting Blu-ray/HD-DVD reader causes system lockup

[Bryan]

On Mon, Apr 6, 2009 at 16:02, Stefan Sperling  wrote:
> On Mon, Apr 06, 2009 at 08:43:05AM -0700, Bryan wrote:
>> I don't know if I've supplied enough information, but if you need
>> something to help postulate a theory, please let me know. B I don't
>> mind tracking it down. B I did a "find" for all .core files after I
>> rebooted, and I do not see anything on my system.
>
> Some ideas:
>
> Read the ddb(4) and crash(8) man pages.
>
> Go to the console (Ctrl+Alt+F1), and drop into ddb from the console
> after setting the ddb.console sysctl to 1 as documented in ddb(4).
>
> Then, continue execution by typing
>
> B  B  B  B continue
>
> into the ddb> prompt.
>
> Then ssh into the system from another computer to get another shell,
> and mount the disk using that shell.
>
> If you are getting any white on blue text on the console upon mounting
> the drive, write it down on paper and type it up in a mail to this list.
>
> If you even get a ddb> prompt upon mounting the drive, type
>
> B  B  B  B trace
>
> and copy that output, too.
>
> Then type
>
> B  B  B  B hangman
>
> and play that for a while to get your mind off the issue...
>
> Stefan
>

Okay I did exactly as your e-mail suggested.  I started the box, put
the blu-ray in, and issued a ctrl-alt-esc, and went to ddb>, typed
"continue", and then ssh'ed into the box from antoher system.

>From the SSH session, I attempted to mount the disc.  "mount /dev/cd0c
/cdrom", and  nothing...  no output on the screen, and my ssh
session is dead.  nothing on the screen, just a blinking cursor...

Here's the output:

#Stopped at Debugger+0x4: leave
ddb> continue
*blinking cursor*


at this point, I have to hit the power button for 4 secs to poweroff
I tried this with a different blu-ray disc, to rule out the
possibility of a disc problem.
After I restarted and let the system fsck itself, I went back and went
to the ddb> prompt.  I thought I might try to see the partition on the
disc, so I tried "fdisk /dev/rcd0c".  Yea, I know, I should have used
/dev/cd0c, but the system still hung, and no output from the debug
prompt...


I'd say it was a faulty drive, but I have this system dual-booted with
vista, and I can view the contents of blu-ray and hd-dvd discs.  I can
mount CDs and DVDs in it, so hardware problems are probably not it.

I didn't try the "hangman" thing...  This isn't a random kernel

Now, I've been looking through my BIOS settings, and there appears to
be a setting for SATA with three choices IDE, RAID, and AHCI.  The HP
guys appear to have set it to "AHCI".  This is probably where everyone
facepalms, but if I set that to "IDE" would I fix this issue?

Regards,
Bryan

Re: shell history and page-up

[Nick Guenther]

On Mon, Apr 6, 2009 at 8:10 PM, Chris  wrote:
> On Tue, Apr 7, 2009 at 10:04 AM, Nick Guenther  wrote:
>> On Mon, Apr 6, 2009 at 7:54 PM, Chris  wrote:
>>> On Mon, Apr 6, 2009 at 6:13 PM, J.C. Roberts  
>>> wrote:
 If you are using ksh, and the above keys/key-combos do not work, then
 you have screwed around with the default ksh settings, or you are using
 a garbage terminal emulator that is screwing with the key-bindings.
>>>
>>> The problem was with "export EDITOR=vi" in ~/.profile. I removed it
>>> and all good now.
>>>
>>
>> ..huh? How?
>
> Not sure how but if I put "export EDITOR=vi" or "export
> EDITOR=/usr/bin/vi" in .profile, page-up (or page-down) don't work
> anymore.
>

And you really do mean page-up right? Not arrow-up?

I just tried and you're right. The ksh manpage says:
 VISUAL If set, this parameter controls the command-line editing mode
for interactive shells.  If the last component of the path
specified in this parameter contains the string ``vi'',
``emacs'', or ``gmacs'', the vi, emacs, or gmacs (Gosling
emacs) editing mode is enabled, respectively.  See also the
EDITOR parameter, above.

-Nick

Re: shell history and page-up

[Chris]

On Tue, Apr 7, 2009 at 10:04 AM, Nick Guenther  wrote:
> On Mon, Apr 6, 2009 at 7:54 PM, Chris  wrote:
>> On Mon, Apr 6, 2009 at 6:13 PM, J.C. Roberts  
>> wrote:
>>> If you are using ksh, and the above keys/key-combos do not work, then
>>> you have screwed around with the default ksh settings, or you are using
>>> a garbage terminal emulator that is screwing with the key-bindings.
>>
>> The problem was with "export EDITOR=vi" in ~/.profile. I removed it
>> and all good now.
>>
>
> ..huh? How?

Not sure how but if I put "export EDITOR=vi" or "export
EDITOR=/usr/bin/vi" in .profile, page-up (or page-down) don't work
anymore.

Re: shell history and page-up

[Nick Guenther]

On Mon, Apr 6, 2009 at 7:54 PM, Chris  wrote:
> On Mon, Apr 6, 2009 at 6:13 PM, J.C. Roberts  wrote:
>> If you are using ksh, and the above keys/key-combos do not work, then
>> you have screwed around with the default ksh settings, or you are using
>> a garbage terminal emulator that is screwing with the key-bindings.
>
> The problem was with "export EDITOR=vi" in ~/.profile. I removed it
> and all good now.
>

..huh? How?

Re: [semi-OT] Can anyone recommend an OpenBSD-compatible colour laser printer?

[Abel Camarillo]

On Tue, Apr 07, 2009 at 01:35:17AM +0200, ropers wrote:
> > Daniel A. Ramaley wrote:
> >>
> >> As for the original poster's HP aversion... i've had good luck with HP.
> >> At home i use an HP 2605dn, a duplexing color laser printer that has
> >> worked beautifully for my light use. That exact model is probably no
> >> longer available since HP regularly rotates their consumer models, but
> >> they undoubtedly have something similar today.
> 
> 2009/4/6 Aaron Poffenberger :
> >
> > I specifically went with HP after doing my research and can second Dan's
> > recommendation of the HP's 2605dn. I have the same printer and did nothing
> > more than setup a printcap entry for it to be the default printer and it
> > just works. I really like the fact that it has a web-management console that
> > lets me configure anything available from the Mac & Windows desktop app. I
> > also like that on both Mac & PC you can opt to install just a print driver
> > without the management crap. Some printers require desktop-software running
> > in the background in order to use the printer. This one doesn't.
> >
> > All-in-all, a nice printer.
> 
> Grand, grand. It's your purchase, so your satisfaction with it is
> paramount. Personally, I'd not want a HP product unless there was no
> alternative and it was unavoidable. Or maybe if I got it for free.
> Generally speaking, I'm just not really convinced that HP printers are
> all that great.
> 
> ...
> 
> In other news, if you engaged in some serious Intarwebs sleuthing, you
> could probably figure out what company I used to work for.
> Coming up at eight: The evening movie, right after a quick word from
> our sponsors. But first: the weather. More news at 11.
> 
> regards,
> --ropers
> 

Personally I believe that HP printers are they only thing that doesn't
suck.

I have had a very cheap HP printer for the last 8 years without any
problems (a very cheap Inkjet).

Re: [semi-OT] Can anyone recommend an OpenBSD-compatible colour laser printer?

[ropers]

2009/4/6 J.C. Roberts :
>
> If the real reason for buying a laser printer is PCB work, then there
> are some laser printers with a perfectly straight card-stock paper path
> where you can actually run the PCB material directly through the
> printer. I've seen them but I can't recall off the top of my head what
> brands/models can do this.

Have you actually tried this? I'm just wondering, because I have a
really hard time imagining how this could work, seeing that laser
printers tend to require and electrically charged drum, and an
electrically conductive (and potentially, somewhere, grounded) print
medium seems like it could drain the drum charge real fast, resulting
in the toner going all over the place. But maybe I'm mistaken. Maybe
the drum charge is really only required during transfer of the toner
to the drum, and maybe even the drum being in contact with a copper
plated medium wouldn't disturb the toner positioning. Maybe the toner
would transfer and get fused to the "blank PCB" just fine. Maybe. If
anyone knows, then I'd be really curious to hear.

regards,
--ropers

Re: shell history and page-up

[Chris]

On Mon, Apr 6, 2009 at 6:13 PM, J.C. Roberts  wrote:
> If you are using ksh, and the above keys/key-combos do not work, then
> you have screwed around with the default ksh settings, or you are using
> a garbage terminal emulator that is screwing with the key-bindings.

The problem was with "export EDITOR=vi" in ~/.profile. I removed it
and all good now.

Re: [semi-OT] Can anyone recommend an OpenBSD-compatible colour laser printer?

[ropers]

> Daniel A. Ramaley wrote:
>>
>> As for the original poster's HP aversion... i've had good luck with HP.
>> At home i use an HP 2605dn, a duplexing color laser printer that has
>> worked beautifully for my light use. That exact model is probably no
>> longer available since HP regularly rotates their consumer models, but
>> they undoubtedly have something similar today.

2009/4/6 Aaron Poffenberger :
>
> I specifically went with HP after doing my research and can second Dan's
> recommendation of the HP's 2605dn. I have the same printer and did nothing
> more than setup a printcap entry for it to be the default printer and it
> just works. I really like the fact that it has a web-management console that
> lets me configure anything available from the Mac & Windows desktop app. I
> also like that on both Mac & PC you can opt to install just a print driver
> without the management crap. Some printers require desktop-software running
> in the background in order to use the printer. This one doesn't.
>
> All-in-all, a nice printer.

Grand, grand. It's your purchase, so your satisfaction with it is
paramount. Personally, I'd not want a HP product unless there was no
alternative and it was unavoidable. Or maybe if I got it for free.
Generally speaking, I'm just not really convinced that HP printers are
all that great.

...

In other news, if you engaged in some serious Intarwebs sleuthing, you
could probably figure out what company I used to work for.
Coming up at eight: The evening movie, right after a quick word from
our sponsors. But first: the weather. More news at 11.

regards,
--ropers

Re: RES: OpenBSD on IBM 3550

[Emilio Perea]

On Mon, Apr 06, 2009 at 07:11:33PM -0300, Ricardo Augusto de Souza wrote:
> Really?
> 
> So http://www.openbsd.org/i386.html is wrong?

No, but you are not reading the whole thing.  See this note:

(*) Support for devices marked with (*) is not included on the
distribution media or in the GENERIC kernel, and will require you to
compile a custom kernel to enable it. 

You need a custom kernel for the aac driver.  It is NOT in GENERIC.

> Cause we can see this there:
> 
> "
> RAID and Cache Controllers
> 
> ICP-Vortex and Intel GDT series (gdt) (A) (C)
> Adaptec FSA-based RAID controllers (aac), including: (*)
> Note: In the past years Adaptec has lied to us repeatedly about
> forthcoming documentation which would have allowed us to stabilize,
> improve and manage RAID support for these (rather buggy) raid
> controllers.
> As a result, we do not recommend the Adaptec cards for use.
> Adaptec AAC-2622, AAC-364, AAC-3642, 2130S, 2200S, 2230SLP, 2410SA,
> 2610SA, 2810SA, 21610SA
> Dell CERC-SATA, PERC 320/DC
> Dell PERC 2/QC, PERC 2/Si, PERC 3/Si, PERC 3/D
> HP NetRaid-4M
> IBM ServeRAID-8i/8k/8s
> "
> 
> 
> 
> As i cant install openbsd on  IBM 3550, I installed FreeBSD 7.1.
> This is dmesg:
> http://ti.cmtsp.com.br:810/logs/dmesg_FreeBSD7.1_IBM3550.txt
> 
> FreeBSD shows:
> aac0:  port 0x4000-0x40ff mem
> 0xcce0-0xccff,0xcafe-0xcaff irq 17 at device 0.0 on pci2
> aac0: Enable Raw I/O
> aac0: Enable 64-bit array
> aac0: New comm. interface enabled
> aac0: [ITHREAD]
> aac0: ServeRAID 8k-l  , aac driver 2.0.0-1

RES: OpenBSD on IBM 3550

[Ricardo Augusto de Souza]

Dmsesg is here:

http://ti.cmtsp.com.br:810/logs/dmesg_OpenBSD4.4_IBM3550.txt


Continuing...
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 01/29/09, BIOS32 rev. 0 @ 0xfd841,
SMBIOS rev. 2.4 @ 0xbffcee80 (86 entries)
bios0: vendor IBM version "-[GFE143AUS-1.13]-" date 01/29/2009
bios0: IBM IBM System x3550 -[7978B1U]-
acpi at bios0 function 0x0 not configured
pcibios0 at bios0: rev 2.1 @ 0xf/0x
pcibios0: PCI BIOS has 11 Interrupt Routing table entries
pcibios0: PCI Exclusive IRQs: 9 10 11 15
pcibios0: PCI Interrupt Router at 000:31:0 ("Intel 6321ESB LPC" rev
0x00)
pcibios0: PCI bus #35 is the last bus
bios0: ROM list: 0xc/0xb000 0xcb000/0x1800 0xcc800/0x1800
0xce000/0x5000!
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel 5000X Host" rev 0x31
ppb0 at pci0 dev 2 function 0 "Intel 5000 PCIE x8" rev 0x31
pci1 at ppb0 bus 16
ppb1 at pci1 dev 0 function 0 "Intel 6321ESB PCIE" rev 0x01
pci2 at ppb1 bus 17
ppb2 at pci2 dev 0 function 0 "Intel 6321ESB PCIE" rev 0x01
pci3 at ppb2 bus 19
ppb3 at pci2 dev 1 function 0 "Intel 6321ESB PCIE" rev 0x01
pci4 at ppb3 bus 18
ppb4 at pci1 dev 0 function 3 "Intel 6321ESB PCIE-PCIX" rev 0x01
pci5 at ppb4 bus 20
ppb5 at pci0 dev 3 function 0 "Intel 5000 PCIE" rev 0x31
pci6 at ppb5 bus 35
ppb6 at pci0 dev 4 function 0 "Intel 5000 PCIE x8" rev 0x31
pci7 at ppb6 bus 7
ppb7 at pci0 dev 5 function 0 "Intel 5000 PCIE" rev 0x31
pci8 at ppb7 bus 34
ppb8 at pci0 dev 6 function 0 "Intel 5000 PCIE" rev 0x31
pci9 at ppb8 bus 3
ppb9 at pci9 dev 0 function 0 "ServerWorks PCIE-PCIX" rev 0xc3
pci10 at ppb9 bus 4
bnx0 at pci10 dev 0 function 0 "Broadcom BCM5708" rev 0x12: irq 7
ppb10 at pci0 dev 7 function 0 "Intel 5000 PCIE" rev 0x31
pci11 at ppb10 bus 2
"Adaptec ASR-2120S" rev 0x02 at pci11 dev 0 function 0 not configured
"Intel I/OAT" rev 0x31 at pci0 dev 8 function 0 not configured
pchb1 at pci0 dev 16 function 0 "Intel 5000 Error Reporting" rev 0x31
pchb2 at pci0 dev 16 function 1 "Intel 5000 Error Reporting" rev 0x31
pchb3 at pci0 dev 16 function 2 "Intel 5000 Error Reporting" rev 0x31
pchb4 at pci0 dev 17 function 0 "Intel 5000 Reserved" rev 0x31
pchb5 at pci0 dev 19 function 0 "Intel 5000 Reserved" rev 0x31
pchb6 at pci0 dev 21 function 0 "Intel 5000 FBD" rev 0x31
pchb7 at pci0 dev 22 function 0 "Intel 5000 FBD" rev 0x31
ppb11 at pci0 dev 28 function 0 "Intel 6321ESB PCIE" rev 0x09
pci12 at ppb11 bus 5
ppb12 at pci12 dev 0 function 0 "ServerWorks PCIE-PCIX" rev 0xc3
pci13 at ppb12 bus 6
bnx1 at pci13 dev 0 function 0 "Broadcom BCM5708" rev 0x12: irq 3
uhci0 at pci0 dev 29 function 0 "Intel 6321ESB USB" rev 0x09: irq 5
uhci1 at pci0 dev 29 function 1 "Intel 6321ESB USB" rev 0x09: irq 11
uhci2 at pci0 dev 29 function 2 "Intel 6321ESB USB" rev 0x09: irq 5
ehci0 at pci0 dev 29 function 7 "Intel 6321ESB USB" rev 0x09: irq 5
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1
ppb13 at pci0 dev 30 function 0 "Intel 82801BA Hub-to-PCI" rev 0xd9
pci14 at ppb13 bus 1
vga1 at pci14 dev 1 function 0 "ATI ES1000" rev 0x02
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
ichpcib0 at pci0 dev 31 function 0 "Intel 6321ESB LPC" rev 0x09: PM
disabled
pciide0 at pci0 dev 31 function 1 "Intel 6321ESB IDE" rev 0x09: DMA,
channel 0 configured to compatibility, channel 1 configured to
compatibility
atapiscsi0 at pciide0 channel 0 drive 0
scsibus0 at atapiscsi0: 2 targets, initiator 7
cd0 at scsibus0 targ 0 lun 0:  ATAPI
5/cdrom removable
cd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
pciide0: channel 1 ignored (disabled)
"Intel 6321ESB SMBus" rev 0x09 at pci0 dev 31 function 3 not configured
usb1 at uhci0: USB revision 1.0
uhub1 at usb1 "Intel UHCI root hub" rev 1.00/1.00 addr 1
usb2 at uhci1: USB revision 1.0
uhub2 at usb2 "Intel UHCI root hub" rev 1.00/1.00 addr 1
usb3 at uhci2: USB revision 1.0
uhub3 at usb3 "Intel UHCI root hub" rev 1.00/1.00 addr 1
isa0 at ichpcib0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
biomask ff65 netmask ffed ttymask 
rd0: fixed, 3800 blocks
uhub4 at uhub2 port 2 "Silitek IBM USB HUB KEYBOARD" rev 1.10/1.00 addr
2
uhidev0 at uhub4 port 1 configuration 1 interface 0 "Silitek IBM USB HUB
KEYBOARD" rev 1.10/1.00 addr 3
uhidev0: iclass 3/1
ukbd0 at uhidev0
wskbd1 at ukbd0 mux 1
wskbd1: connecting to wsdisplay0
uhidev1 at uhub4 port 3 configuration 1 interface 0 "vendor 0x15ca USB
Optical Mouse" rev 2.00/5.12 addr 4
uhidev1: iclass 3/1
uhid at uhidev1 not configured
softraid0 at root
root on rd0a swap on rd0b dump on rd0b
bnx1: address 00:1a:64:79:f1:5a
brgphy0 at bnx1 phy 1: BCM5708C 10/100/1000baseT PHY, rev. 6
bnx0: address 00:1a:64:79:f1:58
brgphy1 at bnx0 phy 1: BCM5708C 10/100/1000baseT PHY, rev. 6
umass0 at uhub0

Re: RES: OpenBSD on IBM 3550

[Chris Cappuccio]

http://www.openbsd.org/cgi-bin/cvsweb/src/sys/arch/i386/conf/GENERIC.diff?r1=1.405;r2=1.406

Ricardo Augusto de Souza [ricardo.so...@cmtsp.com.br] wrote:
> Really?
> 
> So http://www.openbsd.org/i386.html is wrong?
> 
> Cause we can see this there:
> 
> "
> RAID and Cache Controllers
> 
> ICP-Vortex and Intel GDT series (gdt) (A) (C)
> Adaptec FSA-based RAID controllers (aac), including: (*)
> Note: In the past years Adaptec has lied to us repeatedly about
> forthcoming documentation which would have allowed us to stabilize,
> improve and manage RAID support for these (rather buggy) raid
> controllers.
> As a result, we do not recommend the Adaptec cards for use.
> Adaptec AAC-2622, AAC-364, AAC-3642, 2130S, 2200S, 2230SLP, 2410SA,
> 2610SA, 2810SA, 21610SA
> Dell CERC-SATA, PERC 320/DC
> Dell PERC 2/QC, PERC 2/Si, PERC 3/Si, PERC 3/D
> HP NetRaid-4M
> IBM ServeRAID-8i/8k/8s
> "
> 
> 
> 
> As i cant install openbsd on  IBM 3550, I installed FreeBSD 7.1.
> This is dmesg:
> http://ti.cmtsp.com.br:810/logs/dmesg_FreeBSD7.1_IBM3550.txt
> 
> FreeBSD shows:
> aac0:  port 0x4000-0x40ff mem
> 0xcce0-0xccff,0xcafe-0xcaff irq 17 at device 0.0 on pci2
> aac0: Enable Raw I/O
> aac0: Enable 64-bit array
> aac0: New comm. interface enabled
> aac0: [ITHREAD]
> aac0: ServeRAID 8k-l  , aac driver 2.0.0-1
> 
> 
> 
> -Mensagem original-
> De: Chris Cappuccio [mailto:ch...@nmedia.net]
> Enviada em: segunda-feira, 6 de abril de 2009 19:07
> Para: Ricardo Augusto de Souza
> Cc: misc@openbsd.org
> Assunto: Re: OpenBSD on IBM 3550
> 
> your controller isn't supported.
> unless it has i2o mode, try something else
> 
> Ricardo Augusto de Souza [ricardo.so...@cmtsp.com.br] wrote:
> > Hi,
> >
> >
> >
> > I have an IBM 3550 with SAS disks and Adaptec ServeRAID 8k controller
> > and I AM NOT able to install openBSD on it.
> >
> > Installation didn't find any hard disk during installation.
> >
> >
> >
> > According with http://www.openbsd.org/i386.html
> >   it works with adaptec serveraid.
> >
> >
> >
> > If I change SAS to SATA disks will openBSD recognize them at
> > installation ?
> >
> >
> >
> >
> >
> > Thanks
> 
> --
> the conservative, sandwich-heavy portfolio pays off for the hungry
> investor.

-- 
the conservative, sandwich-heavy portfolio pays off for the hungry investor.

Re: I can't connect to Internet

[Josh Grosse]

On Tue, Apr 07, 2009 at 12:19:44AM +0200, Jose P.G wrote:
> At last it's working. The truth is that there are so many responses that i
> missed that part.
> 
> Right now is downloading slowly, could someone say me how can i select a
> mirror near to me?

The "Getting Releases" link on the left hand side of the main website 
lists all the mirrors around the planet, sorted by download protocol then
by mirror type then by country.

Here's a shortcut: www.openbsd.org/ftp.html

Re: I can't connect to Internet

[L. V. Lammert]

At 12:19 AM 4/7/2009 +0200, Jose P.G wrote:

At last it's working. The truth is that there are so many responses that i
missed that part.

Right now is downloading slowly, could someone say me how can i select a
mirror near to me?

Thank you very much for bothering to answer.


http://openbsd.org/ftp.html

RES: OpenBSD on IBM 3550

[Ricardo Augusto de Souza]

Really?

So http://www.openbsd.org/i386.html is wrong?

Cause we can see this there:

"
RAID and Cache Controllers

ICP-Vortex and Intel GDT series (gdt) (A) (C)
Adaptec FSA-based RAID controllers (aac), including: (*)
Note: In the past years Adaptec has lied to us repeatedly about
forthcoming documentation which would have allowed us to stabilize,
improve and manage RAID support for these (rather buggy) raid
controllers.
As a result, we do not recommend the Adaptec cards for use.
Adaptec AAC-2622, AAC-364, AAC-3642, 2130S, 2200S, 2230SLP, 2410SA,
2610SA, 2810SA, 21610SA
Dell CERC-SATA, PERC 320/DC
Dell PERC 2/QC, PERC 2/Si, PERC 3/Si, PERC 3/D
HP NetRaid-4M
IBM ServeRAID-8i/8k/8s
"



As i cant install openbsd on  IBM 3550, I installed FreeBSD 7.1.
This is dmesg:
http://ti.cmtsp.com.br:810/logs/dmesg_FreeBSD7.1_IBM3550.txt

FreeBSD shows:
aac0:  port 0x4000-0x40ff mem
0xcce0-0xccff,0xcafe-0xcaff irq 17 at device 0.0 on pci2
aac0: Enable Raw I/O
aac0: Enable 64-bit array
aac0: New comm. interface enabled
aac0: [ITHREAD]
aac0: ServeRAID 8k-l  , aac driver 2.0.0-1



-Mensagem original-
De: Chris Cappuccio [mailto:ch...@nmedia.net]
Enviada em: segunda-feira, 6 de abril de 2009 19:07
Para: Ricardo Augusto de Souza
Cc: misc@openbsd.org
Assunto: Re: OpenBSD on IBM 3550

your controller isn't supported.
unless it has i2o mode, try something else

Ricardo Augusto de Souza [ricardo.so...@cmtsp.com.br] wrote:
> Hi,
>
>
>
> I have an IBM 3550 with SAS disks and Adaptec ServeRAID 8k controller
> and I AM NOT able to install openBSD on it.
>
> Installation didn't find any hard disk during installation.
>
>
>
> According with http://www.openbsd.org/i386.html
>   it works with adaptec serveraid.
>
>
>
> If I change SAS to SATA disks will openBSD recognize them at
> installation ?
>
>
>
>
>
> Thanks

--
the conservative, sandwich-heavy portfolio pays off for the hungry
investor.

Re: I can't connect to Internet

[Josh Grosse]

On Mon, Apr 06, 2009 at 11:06:20PM +0200, Jose P.G wrote:
> Wow... i never expected so many responses... i still have problems, and *this
> time i have written it correct* for sure: "export pkg_path=
> ftp://ftp.openbsd.org/pub/OpenBSD/4.4/packages/i386/";. This time is written
> well, i still don't know where the problem is.
> 
> Thank you very much, i see that i am being helped by many people at once.
> 
No, you *still* do not have it right.

PKG_PATH, not pkg_path.  Upper case.  Capital letter.   Have you been tested
for dyslexia?

Re: I can't connect to Internet

[Nick Guenther]

On Mon, Apr 6, 2009 at 5:06 PM, Jose P.G  wrote:
> Wow... i never expected so many responses... i still have problems, and *this
> time i have written it correct* for sure: "export pkg_path=
> ftp://ftp.openbsd.org/pub/OpenBSD/4.4/packages/i386/";. This time is written
> well, i still don't know where the problem is.
>
> Thank you very much, i see that i am being helped by many people at once.
>
>

successful troll is successful

Re: I can't connect to Internet

[Jose P.G]

At last it's working. The truth is that there are so many responses that i
missed that part.

Right now is downloading slowly, could someone say me how can i select a
mirror near to me?

Thank you very much for bothering to answer.

Re: I can't connect to Internet

[Matthias Kilian]

On Mon, Apr 06, 2009 at 11:06:20PM +0200, Jose P.G wrote:
> Wow... i never expected so many responses... i still have problems, and *this
> time i have written it correct* for sure: "export pkg_path=
> ftp://ftp.openbsd.org/pub/OpenBSD/4.4/packages/i386/";. This time is written
> well, i still don't know where the problem is.

tHe worLD Is CASe sEnsitiVE

Re: OpenBSD on IBM 3550

[Chris Cappuccio]

your controller isn't supported.
unless it has i2o mode, try something else

Ricardo Augusto de Souza [ricardo.so...@cmtsp.com.br] wrote:
> Hi,
> 
> 
> 
> I have an IBM 3550 with SAS disks and Adaptec ServeRAID 8k controller
> and I AM NOT able to install openBSD on it.
> 
> Installation didn't find any hard disk during installation.
> 
> 
> 
> According with http://www.openbsd.org/i386.html
>   it works with adaptec serveraid.
> 
> 
> 
> If I change SAS to SATA disks will openBSD recognize them at
> installation ?
> 
> 
> 
> 
> 
> Thanks

-- 
the conservative, sandwich-heavy portfolio pays off for the hungry investor.

Re: VLANs, bridge interface and PF

[(private) HKS]

On Mon, Apr 6, 2009 at 2:27 PM, Chris Jones  wrote:
> Good morning folks,
>
> I am a little bit stumped with my firewall config and need some
> assistance. I have a Soekris net4501 with two interfaces connected. The
> sis1 interface is connected to my macbook and the sis2 interface (vlan
> trunk) is connected to my switch (see diagram below). I have a bridge
> interface (bridge0) with with vlan100, sis1 and ral0 as members. I
> assume this is the best way to have multiple physical interfaces in a vlan.
>
>   .---.
>  | |
>  | macbook |
> .--.+ sis0.-+ |_|
> |  | / \_\
> |  fw  |+ sis1 +*
> |  |  802.1q trunk.--.  vlan99 (inet)
> !__!+ sis2 ++ |  switch  | +-
>| !__!
>+ral0 ..   +
>  ||   vlan100/
>  | server | *
>  ||
>  !!
>
> With no rules loaded in PF everything works just fine. From my Macbook I
> am able to NAT outside the network and also access everything on
> vlan100. When I load the rules into PF I am unable to access the
> management IP on the switch or my server, both of which are in vlan100.
> It's obviously an issue with pf and the bridge interface, I just can't
> seem to figure it out (see config below).
>
> I appreciate any advice on this.
>
> Cheers,
> -Chris
>
>
> hostname.sis1
> -
>
> up
>
> hostname.sis2
> -
>
> up
>
> hostname.vlan99
> ---
>
> dhcp NONE NONE NONE vlan 99 vlandev sis2
>
> hostname.vlan100
> 
>
> inet 192.168.1.1 255.255.255.0 NONE vlan 100 vlandev sis2
>
> bridgename.bridge0
> --
>
> add vlan100
> add sis1
> add ral0
> up
>
> pf.conf
> ---
>
> #
> # Macros
>
> ext_if="vlan99"
> int_if="vlan100"
> int_bridge="bridge0"
>
> int_net="192.168.1.0/24"
>
> icmp_types="echoreq"
>
> #
> # Options
>
> set block-policy return
> set loginterface $ext_if
> set skip on lo
>
> #
> # Traffic Normalization
>
> scrub in
>
> #
> # NAT Rules: "rdr", "nat", "binat"
>
> nat on $ext_if from !($ext_if) -> ($ext_if:0)
> nat-anchor "ftp-proxy/*"
> rdr-anchor "ftp-proxy/*"
>
> rdr pass on $int_if proto tcp to port ftp -> 127.0.0.1 port 8021
> rdr on $ext_if inet proto tcp from any to ($ext_if) port 2121 \
>-> 192.168.1.200 port 21
> rdr on $ext_if inet proto tcp from any to ($ext_if) port  \
>-> 192.168.1.200 port 22
> rdr on $ext_if inet proto tcp from any to ($ext_if) port 80 \
>-> 192.168.1.200 port 80
>
>
> #
> # Filter Rules
>
> block in
>
> pass out
>
> anchor "ftp-proxy/*"
>
> antispoof quick for lo0
>
> pass  in log on $ext_if proto udp from any to ($ext_if:0) \
>port {500, 4500}
> pass out log on $ext_if proto udp from ($ext_if:0) to any \
>port {500, 4500}
>
> pass  in log on $ext_if proto esp from any to ($ext_if:0)
> pass out log on $ext_if proto esp from ($ext_if:0) to any
>
> pass  in log on enc0 proto ipencap from any to ($ext_if:0) \
>keep state (if-bound)
> pass out log on enc0 proto ipencap from ($ext_if:0) to any \
>keep state (if-bound)
>
> pass  in on enc0 from 10.1.0.2/32 to any keep state (if-bound)
> pass out on enc0 from 192.168.1.0/24 to any keep state (if-bound)
>
> pass in inet proto icmp all icmp-type $icmp_types
>
> pass in  log on $ext_if proto udp from any to port 1194
> pass in  log on $ext_if proto tcp to ($ext_if) port ssh
> pass in  log on $ext_if proto tcp from any to 192.168.1.200 \
>port 21
> pass in  log on $ext_if proto tcp from any to 192.168.1.200 \
>port 22
> pass in  log on $ext_if proto tcp from any to 192.168.1.200 \
>port 80
> pass in  log on $ext_if proto tcp to ($ext_if) port smtp
> pass out log on $ext_if proto tcp from ($ext_if) to port smtp
>
> pass quick on $int_if
>

I don't know bridge interfaces, but for shits and giggles try adding:

pass quick on $int_bridge

-HKS

Re: I can't connect to Internet

[Neal Hogan]

On Mon, Apr 6, 2009 at 4:06 PM, Jose P.G  wrote:

> Wow... i never expected so many responses... i still have problems, and
> *this
> time i have written it correct* for sure: "export pkg_path=
> ftp://ftp.openbsd.org/pub/OpenBSD/4.4/packages/i386/";. This time is
> written
> well, i still don't know where the problem is.
>
> Thank you very much, i see that i am being helped by many people at once.
>
>

This is that last time that I'm going to respond . . .

CAREFULLY (I can't stress that enough) read the OpenBSD faq page (
openbsd.org/faq), especially the package stuff.


-- 
www.nealhogan.net  www.lambdaserver.com

Re: I can't connect to Internet

[alvaro]

Uhmmm

Do it with:

export env PKG_PATH="ftp://ftp.openbsd.org/pub/OpenBSD/4.4/packages/i386/";

And please, send the output of your route table:

$ route show

or

$ netstat -rn

Regards,

 Alvaro



On Mon, 6 Apr 2009, Jose P.G wrote:


Wow... i never expected so many responses... i still have problems, and *this
time i have written it correct* for sure: "export pkg_path=
ftp://ftp.openbsd.org/pub/OpenBSD/4.4/packages/i386/";. This time is written
well, i still don't know where the problem is.

Thank you very much, i see that i am being helped by many people at once.

Re: I can't connect to Internet

[Peter N. M. Hansteen]

"Jose P.G"  writes:

> Wow... i never expected so many responses... i still have problems, and *this
> time i have written it correct* for sure: "export pkg_path=
> ftp://ftp.openbsd.org/pub/OpenBSD/4.4/packages/i386/";. This time is written
> well, i still don't know where the problem is.

You still need the variable name in upper case, as in

export PKG_PATH=ftp://ftp.openbsd.org/pub/OpenBSD/4.4/packages/i386/

Hopefully that gets you all the way there

Cheers,
-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.

Re: I can't connect to Internet

[L. V. Lammert]

At 11:06 PM 4/6/2009 +0200, Jose P.G wrote:

Wow... i never expected so many responses... i still have problems, and *this
time i have written it correct* for sure: "export pkg_path=
ftp://ftp.openbsd.org/pub/OpenBSD/4.4/packages/i386/";. This time is written
well, i still don't know where the problem is.

Thank you very much, i see that i am being helped by many people at once.


Well, .. the URL is now correct, .. however you did not catch the note:

export PKG_PATH=

Remember, the ONLY OS that ignores case is DOS & Windoze [every other one 
obeys the case as written - pkg_path <> PKG_PATH].


Also, please use a mirror closer to you so as to avoid excessive traffic on 
the primary.


Lee

Re: [semi-OT] Can anyone recommend an OpenBSD-compatible colour laser printer?

[J.C. Roberts]

On Mon, 6 Apr 2009 15:05:14 -0400 Jason Dixon 
wrote:

> > For Do-It-Yourself PCB's, you *really* want postscript support.
> > Color support is not necessary, and you can easily get away with
> > finding a free, used, office laser printer. As odd as it might
> > seem, some of the old laser printers are actually "better" in the
> > sense of they were built to last and you can still get parts for
> > most of them.
> > 
> > Network support is very nice to have, and makes your life a lot
> > easier, but isn't a show stopper since you can almost always use a
> > small "print-server" device. I've had *decades* of success with HP
> > LaserJet I, and LaserJet II-P printers, although I would not
> > suggest the former for PCB work due to resolution. Yes, I know
> > they're ancient, but they work.
> 
> If the above is correct (and I believe JCR) then I can highly
> recommend the Brother HL-2170W.  It's inexpensive and has worked
> great for me with OpenBSD.  Comes with wireless *and* wired
> networking.
> 
> http://www.brother-usa.com/Printer/ModelDetail.aspx?ProductID=hl2170W

If I am recalling things correctly, the "issue" with the original
LaserJet I (if you could find one) is that without a memory upgrade it
can only do 300dpi across 25-33% of a "letter" sized page. Yes, I know
it seems terribly odd, but that's the way it worked. You sent it a page
at 300dpi, and it would only print the first part of it. If the same
page was sent at 75dpi or 150dpi, the whole page would print.

You will probably never be building extremely high-speed PCB designs in
your garage, so a resolution of 300dpi or better should suffice. Even
the axis-based mixed-resolution printers (i.e. "600x300" Horizonal/Vert)
should work fine.

The things I like about my XEROX DocuPrint N17 are:
1.) 1200 dpi resolution
2.) a paper path for thick card stock
3.) network interface
4.) postscript support (multiple levels)
5.) duplexing
6.) very cheap to run

If the real reason for buying a laser printer is PCB work, then there
are some laser printers with a perfectly straight card-stock paper path
where you can actually run the PCB material directly through the
printer. I've seen them but I can't recall off the top of my head what
brands/models can do this.

You need to realize laser printers are *not* the only way to do PCB's,
and some of the inkjet printers are at least equal if not better for
this task.

http://blog.makezine.com/archive/2006/08/how_to_direct_to_pcb_ink_jet_r.html

(MakeZine has a number of other Home-PCB articles)
Some people argue that using inkjets is more accurate than laser
printers since the possible human errors in resist mask alignment are
eliminated. Also, with inkjet printers, you can even do "silkscreens"
of sorts on your home built boards.

"Fashion Is My Only Conscience" ;-)

Lastly, if you're not in a rush, or if you're working on high-speed
designs, you should talk to your local PCB fabrication house. The silly
part is many of their customers do not use the entire "blank" so your
small design can easily be tossed in an unused corner of the blank and
be manufactured in parallel with orders from other customers. This is
really cheap to do, since without your order, the wasted space on the
blank would be tossed out. The cool part about this is you can get
multi-layer (>2) PCB designs --something you can't do at home-- done
very cheaply if you're patient, as well as get the benefit of DRC
testing, X-RAY analysis, Bed-Of-Nails (aka "clamshell") testing, ...

As long as you can "Tape-Out" your design into a supported format (i.e.
gerber), your local fab house will most likely be *real* friendly since
it will save them wasted materials, and of course, they just never know
where the "little business" you offer may lead in the future.

-- 
J.C. Roberts

Ηλεκτρονικό Βιβλίο / Έντυπο / Παρουσίαση

[Genco Power SA (Marketing)]

Untitled Document





   Newsletter NOO
N9N;N/N?O 2009
NN9N1ON.N

Re: I can't connect to Internet

[Neal Hogan]

On Mon, Apr 6, 2009 at 3:26 PM, Timo Myyrd  wrote:

> Mnlcrrsc  writes:
>
> The package path variable should be in capital letters:
> export PKG_PATH=ftp.openbsd.org/pub/OpenBSD/4.4/packages/i386/
>
> Please, use your local mirror and not the main site for packages.
> Timo


So far, all mirrors are safe!


>
>
>  Hi. I just installed Openbsd 4.4 and my first problem is that i
>>
> can't connect
>
>> to Internet for downloading packages.
>>
>> My configuration is perfectly configured, so i don't know what
>>
> it is (i
>
>> already have configured a Debian and a Windows system).  My
>>
> configuration is
>
>> 192.168.1.1 gateway, 192.168.1.8 ipv4, 255.255.255.0 netmask,
>>
> and the DNS
>
>> "208.67.222.222 208.67.220.220" (opendns).
>>
>> I write:
>> export pkg_path=ftp://ftp.openbsd.org/pub/OpenBsd/4.4/i386/
>>
>> and then:
>>
>> pkg_add kde (for example), but it says "no packages available".
>>
>> What could i do? Thank you very much for your help.
>>
>
>


--
www.nealhogan.net  www.lambdaserver.com

Re: I can't connect to Internet

[Jose P.G]

Wow... i never expected so many responses... i still have problems, and *this
time i have written it correct* for sure: "export pkg_path=
ftp://ftp.openbsd.org/pub/OpenBSD/4.4/packages/i386/";. This time is written
well, i still don't know where the problem is.

Thank you very much, i see that i am being helped by many people at once.

Re: I can't connect to Internet

[Timo Myyrä]

Mnlcrrsc  writes:

The package path variable should be in capital letters:
export PKG_PATH=ftp.openbsd.org/pub/OpenBSD/4.4/packages/i386/

Please, use your local mirror and not the main site for packages. 


Timo

Hi. I just installed Openbsd 4.4 and my first problem is that i 

can't connect

to Internet for downloading packages.

My configuration is perfectly configured, so i don't know what 

it is (i
already have configured a Debian and a Windows system).  My 

configuration is
192.168.1.1 gateway, 192.168.1.8 ipv4, 255.255.255.0 netmask, 

and the DNS

"208.67.222.222 208.67.220.220" (opendns).

I write:
export pkg_path=ftp://ftp.openbsd.org/pub/OpenBsd/4.4/i386/

and then:

pkg_add kde (for example), but it says "no packages available".

What could i do? Thank you very much for your help.

Re: I can't connect to Internet

[Mark - obsd list]

Jose P.G wrote:

Ok, Internet is working. But i have the same problem. The strange is that i
can connect to the ftps when i am installing openbsd4.4, but not when i am
doing this. pkg_path is correct so i suppose that i am making an error
writing, though all i do is "export pkg_path=
ftp://ftp.openbsd.org/ub/openbsd/4.4/packages/i386/"; and "pkg_add gnome2".

What could be doing this? Thank you very much.

  
I sure hope this is just a troll. He has written "OpenBSD" in just about 
every way that won't work and is ignoring everyone telling him 
repeatedly that he has to capitalize BSD.

Re: I can't connect to Internet

[Neal Hogan]

On Mon, Apr 6, 2009 at 3:01 PM, Jose P.G  wrote:

> Ok, Internet is working. But i have the same problem. The strange is that i
> can connect to the ftps when i am installing openbsd4.4, but not when i am
> doing this. pkg_path is correct so i suppose that i am making an error
> writing, though all i do is "export pkg_path=
> ftp://ftp.openbsd.org/ub/openbsd/4.4/packages/i386/"; and "pkg_add gnome2".
>
> What could be doing this? Thank you very much.
>
>
Your path is not correct!


-- 
www.nealhogan.net  www.lambdaserver.com

Re: I can't connect to Internet

[Ted Unangst]

there is no ub directory on the ftp server.

On Mon, Apr 6, 2009 at 4:01 PM, Jose P.G  wrote:
> Ok, Internet is working. But i have the same problem. The strange is that i
> can connect to the ftps when i am installing openbsd4.4, but not when i am
> doing this. pkg_path is correct so i suppose that i am making an error
> writing, though all i do is "export pkg_path=
> ftp://ftp.openbsd.org/ub/openbsd/4.4/packages/i386/"; and "pkg_add gnome2".
>
> What could be doing this? Thank you very much.

Re: I can't connect to Internet

[Mike Erdely]

On Mon, Apr 06, 2009 at 10:01:46PM +0200, Jose P.G wrote:
> Ok, Internet is working. But i have the same problem. The strange is that i
> can connect to the ftps when i am installing openbsd4.4, but not when i am
> doing this. pkg_path is correct so i suppose that i am making an error
> writing, though all i do is "export pkg_path=
> ftp://ftp.openbsd.org/ub/openbsd/4.4/packages/i386/"; and "pkg_add gnome2".
> 
> What could be doing this? Thank you very much.

Assuming that you're not copy and pasting and are just typing the URL
wrong in your email, try `export PKG_PATH=ftp://...`

-ME

Re: I can't connect to Internet

[Marti Martinez]

I'm fairly certain that when adding a package from the FTP servers,
you need to specify enough info for the pkg_add module to
unambiguously request the right package -- i.e., version information
in this case.

What you've described hasn't convinced me that you're unable to
"connect to the internet" -- have you tried pinging a known address,
or resolving a hostname? Those are good indicators of where your
problems lie.

As to downloading packages, I usually don't bother setting package
path -- just pick a fast mirror, download a copy of its packages
directory for your architecture and version, and grab links off of
that page -- "sudo pkg_add -v ftp:///pkg-version.tgz" will
take care of the details for you

Marti

On Mon, Apr 6, 2009 at 11:51 AM, Mnlcrrsc  wrote:
> Hi. I just installed Openbsd 4.4 and my first problem is that i can't
connect
> to Internet for downloading packages.
>
> My configuration is perfectly configured, so i don't know what it is (i
> already have configured a Debian and a Windows system).  My configuration
is
> 192.168.1.1 gateway, 192.168.1.8 ipv4, 255.255.255.0 netmask, and the DNS
> "208.67.222.222 208.67.220.220" (opendns).
>
> I write:
> export pkg_path=ftp://ftp.openbsd.org/pub/OpenBsd/4.4/i386/
>
> and then:
>
> pkg_add kde (for example), but it says "no packages available".
>
> What could i do? Thank you very much for your help.
> --
> View this message in context:
http://www.nabble.com/I-can%27t-connect-to-Internet-tp22914928p22914928.html
> Sent from the openbsd user - misc mailing list archive at Nabble.com.
>
>



--
Systems Programmer, Principal
Electrical & Computer Engineering
The University of Arizona
ma...@arizona.edu

Re: I can't connect to Internet

[Marti Martinez]

| sed  's/Bsd/BSD/'

On Mon, Apr 6, 2009 at 12:12 PM, Jeszs P.G  wrote:
> Ops, sorry, i wanted to write "export pkg_path=
>
ftp://ftp.openbsd.org/pub/OpenBsd/4.4/packages/i386/.
> It's written well.
>
> Thank you very much.
>
> 2009/4/6 Bryan Irvine 
>
>> On Mon, Apr 6, 2009 at 11:51 AM, Mnlcrrsc  wrote:
>> > Hi. I just installed Openbsd 4.4 and my first problem is that i can't
>> connect
>> > to Internet for downloading packages.
>> >
>> > My configuration is perfectly configured, so i don't know what it is (i
>> > already have configured a Debian and a Windows system).  My
configuration
>> is
>> > 192.168.1.1 gateway, 192.168.1.8 ipv4, 255.255.255.0 netmask, and the
DNS
>> > "208.67.222.222 208.67.220.220" (opendns).
>> >
>> > I write:
>> > export pkg_path=ftp://ftp.openbsd.org/pub/OpenBsd/4.4/i386/
>>
>>
>> A proper package path might work better.  Look at the posted URL
>> *Very* closely and you will see the problems (yes there's more than
>> 1).
>>
>> -Bryan
>
>



--
Systems Programmer, Principal
Electrical & Computer Engineering
The University of Arizona
ma...@arizona.edu

Re: I can't connect to Internet

[Neal Hogan]

On Mon, Apr 6, 2009 at 2:12 PM, Jeszs P.G  wrote:

> Ops, sorry, i wanted to write "export pkg_path=
> ftp://ftp.openbsd.org/pub/OpenBsd/4.4/packages/i386/<
> ftp://ftp.openbsd.org/pub/OpenBsd/4.4/i386/>.
> It's written well.


.../OpenBSD/...



>
>
> Thank you very much.
>
> 2009/4/6 Bryan Irvine 
>
> > On Mon, Apr 6, 2009 at 11:51 AM, Mnlcrrsc  wrote:
> > > Hi. I just installed Openbsd 4.4 and my first problem is that i can't
> > connect
> > > to Internet for downloading packages.
> > >
> > > My configuration is perfectly configured, so i don't know what it is (i
> > > already have configured a Debian and a Windows system).  My
> configuration
> > is
> > > 192.168.1.1 gateway, 192.168.1.8 ipv4, 255.255.255.0 netmask, and the
> DNS
> > > "208.67.222.222 208.67.220.220" (opendns).
> > >
> > > I write:
> > > export pkg_path=ftp://ftp.openbsd.org/pub/OpenBsd/4.4/i386/
> >
> >
> > A proper package path might work better.  Look at the posted URL
> > *Very* closely and you will see the problems (yes there's more than
> > 1).
> >
> > -Bryan
>
>


--
www.nealhogan.net  www.lambdaserver.com

Re: I can't connect to Internet

[Jose P.G]

Ok, Internet is working. But i have the same problem. The strange is that i
can connect to the ftps when i am installing openbsd4.4, but not when i am
doing this. pkg_path is correct so i suppose that i am making an error
writing, though all i do is "export pkg_path=
ftp://ftp.openbsd.org/ub/openbsd/4.4/packages/i386/"; and "pkg_add gnome2".

What could be doing this? Thank you very much.

Re: I can't connect to Internet

[L. V. Lammert]

On Mon, 6 Apr 2009, [ISO-8859-1] Jeszs P.G wrote:

> Ops, sorry, i wanted to write "export pkg_path=
>
ftp://ftp.openbsd.org/pub/OpenBsd/4.4/packages/i386/.
> It's written well.
>
> Thank you very much.
>
ahh, .. it's not written well if it doesn't work. Try it in your browser.

Lee

==
 Leland V. Lammertl...@omnitec.net
  Chief ScientistOmnitec Corporation
 Network/Internet Consultants www.omnitec.net
==

Re: I can't connect to Internet

[Neal Hogan]

On Mon, Apr 6, 2009 at 2:09 PM, Jeszs P.G  wrote:

> Who would it be? I can't connect to ftp with the other computers because
> the
> others are behind a net firewall (that only accepts http / s). Could you do
> this favour to me?
>
> Thank you bery much.


not sure what you're asking . . .

have you looked at www.openbsd.org/faq


>
> 2009/4/6 Bryan Irvine 
>
> > On Mon, Apr 6, 2009 at 11:51 AM, Mnlcrrsc  wrote:
> > > Hi. I just installed Openbsd 4.4 and my first problem is that i can't
> > connect
> > > to Internet for downloading packages.
> > >
> > > My configuration is perfectly configured, so i don't know what it is (i
> > > already have configured a Debian and a Windows system).  My
> configuration
> > is
> > > 192.168.1.1 gateway, 192.168.1.8 ipv4, 255.255.255.0 netmask, and the
> DNS
> > > "208.67.222.222 208.67.220.220" (opendns).
> > >
> > > I write:
> > > export pkg_path=ftp://ftp.openbsd.org/pub/OpenBsd/4.4/i386/
> >
> >
> > A proper package path might work better.  Look at the posted URL
> > *Very* closely and you will see the problems (yes there's more than
> > 1).
> >
> > -Bryan
>
>


--
www.nealhogan.net  www.lambdaserver.com

Re: I can't connect to Internet

[Jesús P . G]

Who would it be? I can't connect to ftp with the other computers because the
others are behind a net firewall (that only accepts http / s). Could you do
this favour to me?

Thank you bery much.

2009/4/6 Bryan Irvine 

> On Mon, Apr 6, 2009 at 11:51 AM, Mnlcrrsc  wrote:
> > Hi. I just installed Openbsd 4.4 and my first problem is that i can't
> connect
> > to Internet for downloading packages.
> >
> > My configuration is perfectly configured, so i don't know what it is (i
> > already have configured a Debian and a Windows system).  My configuration
> is
> > 192.168.1.1 gateway, 192.168.1.8 ipv4, 255.255.255.0 netmask, and the DNS
> > "208.67.222.222 208.67.220.220" (opendns).
> >
> > I write:
> > export pkg_path=ftp://ftp.openbsd.org/pub/OpenBsd/4.4/i386/
>
>
> A proper package path might work better.  Look at the posted URL
> *Very* closely and you will see the problems (yes there's more than
> 1).
>
> -Bryan

Re: I can't connect to Internet

[Stijn]

Mnlcrrsc wrote:

Hi. I just installed Openbsd 4.4 and my first problem is that i can't connect
to Internet for downloading packages.

My configuration is perfectly configured, so i don't know what it is (i
already have configured a Debian and a Windows system).  My configuration is
192.168.1.1 gateway, 192.168.1.8 ipv4, 255.255.255.0 netmask, and the DNS
"208.67.222.222 208.67.220.220" (opendns).

I write:
export pkg_path=ftp://ftp.openbsd.org/pub/OpenBsd/4.4/i386/

and then:

pkg_add kde (for example), but it says "no packages available".

What could i do? Thank you very much for your help.
  

export pkg_path=ftp://ftp.openbsd.org/pub/OpenBSD/4.4/packages/i386/
^

HTH,
Stijn

Re: stupid amd64 vs i386 hardware question

[Marco Peereboom]

On Mon, Apr 06, 2009 at 08:59:58PM +0200, Didier Wiroth wrote:
> Hello,
> I'm planning to get a SAS controller, which has a LSI-SAS-1068E chip.
> The controller should be running on current, on the amd64 arch.
> The LSISAS1068E chip is only mentioned on the i386 hardware support page.
> Sorry for the questions ... ;-/ but
> 1) does it mean that it won't run with a amd64 kernel ?

mpi works on virtually all arches.

> 2) by the way ... do all the i386 supported driver run on the amd64 arch or

mostly.

> not?
> Didier

Re: VLANs, bridge interface and PF

[Stefan Sperling]

On Mon, Apr 06, 2009 at 11:41:27AM -0700, Garry Dolley wrote:
> On Mon, Apr 06, 2009 at 11:27:08AM -0700, Chris Jones wrote:
> >.---.
> >   | |
> >   | macbook |
> > .--.+ sis0.-+ |_|
> > |  | / \_\
> > |  fw  |+ sis1 +*
> > |  |  802.1q trunk.--.  vlan99 (inet)
> > !__!+ sis2 ++ |  switch  | +-
> > | !__!
> > +ral0 ..   +
> >   ||   vlan100/
> >   | server | *
> >   ||
> >   !!
> 
> That's a nice ASCII diagram :)

Yeah I was just about to say the same :)

Stefan

OpenBSD on IBM 3550

[Ricardo Augusto de Souza]

Hi,



I have an IBM 3550 with SAS disks and Adaptec ServeRAID 8k controller
and I AM NOT able to install openBSD on it.

Installation didn't find any hard disk during installation.



According with http://www.openbsd.org/i386.html
  it works with adaptec serveraid.



If I change SAS to SATA disks will openBSD recognize them at
installation ?





Thanks

Re: [semi-OT] Can anyone recommend an OpenBSD-compatible colour laser printer?

[Jason Dixon]

On Mon, Apr 06, 2009 at 11:49:28AM -0700, J.C. Roberts wrote:
> On Mon, 6 Apr 2009 11:37:30 +0200 ropers  wrote:
> 
> > 2009/4/6 Toni Mueller :
> > >
> > > I don't know what exactly you want to do, but you might be
> > > interested in reading some reports about the printing quality and
> > > operating cost, too. Eg. a good ink jet printer should deliver
> > > better quality printouts than a bad laser printer.
> > 
> > I do positively, affirmatively, definitely want a laser printer. ;)
> > 
> > Because:
> > (a), I already have a (dead slow and old but portable) ink jet
> > printer, (b), ink jet printers are more likely to go into the
> > direction of weird binary blob printer drivers with neither built-in
> > postscript, nor good ghostscript/driver support, and
> > (c), an ink jet printer cannot do this:
> > http://www.riccibitti.com/pcb/pcb.htm
> 
> For Do-It-Yourself PCB's, you *really* want postscript support. Color
> support is not necessary, and you can easily get away with finding a
> free, used, office laser printer. As odd as it might seem, some of the
> old laser printers are actually "better" in the sense of they were
> built to last and you can still get parts for most of them.
> 
> Network support is very nice to have, and makes your life a lot easier,
> but isn't a show stopper since you can almost always use a small
> "print-server" device. I've had *decades* of success with HP LaserJet I,
> and LaserJet II-P printers, although I would not suggest the former for
> PCB work due to resolution. Yes, I know they're ancient, but they work.

If the above is correct (and I believe JCR) then I can highly recommend
the Brother HL-2170W.  It's inexpensive and has worked great for me with
OpenBSD.  Comes with wireless *and* wired networking.

http://www.brother-usa.com/Printer/ModelDetail.aspx?ProductID=hl2170W
 
-- 
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net/

Re: I can't connect to Internet

[Jesús P . G]

Ops, sorry, i wanted to write "export pkg_path=
ftp://ftp.openbsd.org/pub/OpenBsd/4.4/packages/i386/.
It's written well.

Thank you very much.

2009/4/6 Bryan Irvine 

> On Mon, Apr 6, 2009 at 11:51 AM, Mnlcrrsc  wrote:
> > Hi. I just installed Openbsd 4.4 and my first problem is that i can't
> connect
> > to Internet for downloading packages.
> >
> > My configuration is perfectly configured, so i don't know what it is (i
> > already have configured a Debian and a Windows system).  My configuration
> is
> > 192.168.1.1 gateway, 192.168.1.8 ipv4, 255.255.255.0 netmask, and the DNS
> > "208.67.222.222 208.67.220.220" (opendns).
> >
> > I write:
> > export pkg_path=ftp://ftp.openbsd.org/pub/OpenBsd/4.4/i386/
>
>
> A proper package path might work better.  Look at the posted URL
> *Very* closely and you will see the problems (yes there's more than
> 1).
>
> -Bryan

Re: I can't connect to Internet

[Neal Hogan]

On Mon, Apr 6, 2009 at 1:51 PM, Mnlcrrsc  wrote:

> Hi. I just installed Openbsd 4.4 and my first problem is that i can't
> connect
> to Internet for downloading packages.
>
> My configuration is perfectly configured, so i don't know what it is (i
> already have configured a Debian and a Windows system).  My configuration
> is
> 192.168.1.1 gateway, 192.168.1.8 ipv4, 255.255.255.0 netmask, and the DNS
> "208.67.222.222 208.67.220.220" (opendns).
>
> I write:
> export pkg_path=ftp://ftp.openbsd.org/pub/OpenBsd/4.4/i386/
>
> and then:
>
> pkg_add kde (for example), but it says "no packages available".
>
> What could i do? Thank you very much for your help.
> --
> View this message in context:
> http://www.nabble.com/I-can%27t-connect-to-Internet-tp22914928p22914928.html
> Sent from the openbsd user - misc mailing list archive at Nabble.com.
>
>

 . . . /pub/OpenBSD/4.4/packages/i386/


-- 
www.nealhogan.net  www.lambdaserver.com

Re: I can't connect to Internet

[Bryan Irvine]

On Mon, Apr 6, 2009 at 11:51 AM, Mnlcrrsc  wrote:
> Hi. I just installed Openbsd 4.4 and my first problem is that i can't
connect
> to Internet for downloading packages.
>
> My configuration is perfectly configured, so i don't know what it is (i
> already have configured a Debian and a Windows system).  My configuration
is
> 192.168.1.1 gateway, 192.168.1.8 ipv4, 255.255.255.0 netmask, and the DNS
> "208.67.222.222 208.67.220.220" (opendns).
>
> I write:
> export pkg_path=ftp://ftp.openbsd.org/pub/OpenBsd/4.4/i386/


A proper package path might work better.  Look at the posted URL
*Very* closely and you will see the problems (yes there's more than
1).

-Bryan

stupid amd64 vs i386 hardware question

[Didier Wiroth]

Hello,
I'm planning to get a SAS controller, which has a LSI-SAS-1068E chip.
The controller should be running on current, on the amd64 arch.
The LSISAS1068E chip is only mentioned on the i386 hardware support page.
Sorry for the questions ... ;-/ but
1) does it mean that it won't run with a amd64 kernel ?
2) by the way ... do all the i386 supported driver run on the amd64 arch or
not?
Didier

Re: [semi-OT] Can anyone recommend an OpenBSD-compatible colour laser printer?

[J.C. Roberts]

On Mon, 6 Apr 2009 11:37:30 +0200 ropers  wrote:

> 2009/4/6 Toni Mueller :
> >
> > I don't know what exactly you want to do, but you might be
> > interested in reading some reports about the printing quality and
> > operating cost, too. Eg. a good ink jet printer should deliver
> > better quality printouts than a bad laser printer.
> 
> I do positively, affirmatively, definitely want a laser printer. ;)
> 
> Because:
> (a), I already have a (dead slow and old but portable) ink jet
> printer, (b), ink jet printers are more likely to go into the
> direction of weird binary blob printer drivers with neither built-in
> postscript, nor good ghostscript/driver support, and
> (c), an ink jet printer cannot do this:
> http://www.riccibitti.com/pcb/pcb.htm

For Do-It-Yourself PCB's, you *really* want postscript support. Color
support is not necessary, and you can easily get away with finding a
free, used, office laser printer. As odd as it might seem, some of the
old laser printers are actually "better" in the sense of they were
built to last and you can still get parts for most of them.

Network support is very nice to have, and makes your life a lot easier,
but isn't a show stopper since you can almost always use a small
"print-server" device. I've had *decades* of success with HP LaserJet I,
and LaserJet II-P printers, although I would not suggest the former for
PCB work due to resolution. Yes, I know they're ancient, but they work.

The other two laser printers I have here are only slightly more recent,
namely a Xerox N17 (mono, network, duplexing) and a Tektronix (xerox)
Phaser 750 (color, network duplexing). The latter is a beast and fairly
expensive to run, but it does a good job.

For D-I-Y PCB work, one of the features you might want to look for is
whether or not the printer has a "paper path" for card stock (I'm
not sure what it's called elsewhere in the world, but "card stock" is
basically *very* thick paper like cardboard).

-- 
J.C. Roberts

I can't connect to Internet

[Mnlcrrsc]

Hi. I just installed Openbsd 4.4 and my first problem is that i can't connect
to Internet for downloading packages.

My configuration is perfectly configured, so i don't know what it is (i
already have configured a Debian and a Windows system).  My configuration is
192.168.1.1 gateway, 192.168.1.8 ipv4, 255.255.255.0 netmask, and the DNS
"208.67.222.222 208.67.220.220" (opendns).

I write:
export pkg_path=ftp://ftp.openbsd.org/pub/OpenBsd/4.4/i386/

and then:

pkg_add kde (for example), but it says "no packages available".

What could i do? Thank you very much for your help.
-- 
View this message in context: 
http://www.nabble.com/I-can%27t-connect-to-Internet-tp22914928p22914928.html
Sent from the openbsd user - misc mailing list archive at Nabble.com.

Re: [semi-OT] Can anyone recommend an OpenBSD-compatible colour laser printer?

[Graham Allan]

On Sun, Apr 05, 2009 at 08:15:54PM +0200, Eric JACQUOT wrote:
> Hi Ropers,
> 
> Le Sun, 5 Apr 2009 19:44:27 +0200,
> ropers  a icrit :
> 
> > I'm looking for a colour laser printer that's so cheap that I can put
> > it on my birthday wish list and stand a chance of getting it (too
> > broke to buy one myself).
> >
> > - The printer should work with OpenBSD without a hitch, and by that I
> > don't mean "can sometimes be gotten to work by endlessly tweaking
> > CUPS", and I also don't mean "can be gotten to work with compat_linux
> > and a binary blob",
> > - the printer should also be Linux-compatible (Windows-compatibility
> > not required),
> > - it should be a colour laser printer,
> > - replacement cartridges shouldn't be prohibitively expensive,
> > - and it should be as cheap as possible without totally sucking
> > monkey balls.**
> >
> > Oh, and I have an aversion to HP, so it would be better if it wasn't
> > from them.
> 
> So am I ;)
> 
> I use personnaly a Xerox Phaser 6130N (tested and work very good since
> I bought it with openbsd 4.2, and working as a usb local printer like
> as a network printers with its embbedded network interface). No blob,
> just a ppd file provided on Xerox Site (like all others models) and It
> just works good with a great quality printing. Everything but the good
> model depends of your monthly printing.
> 
> But it'd been just my humble opinion, I just love Xerox ;) because i
> can't find at this time a printer from them without a ppd file provided
> on their site.

Xerox has been good for us too (genuine Postscript helps). The Phaser 6180
has been a good printer, and the successor 6280 looks quite similar.

Graham
-- 
-
Graham Allan - I.T. Manager
School of Physics and Astronomy - University of Minnesota
-

Re: VLANs, bridge interface and PF

[Garry Dolley]

On Mon, Apr 06, 2009 at 11:27:08AM -0700, Chris Jones wrote:
>.---.
>   | |
>   | macbook |
> .--.+ sis0.-+ |_|
> |  | / \_\
> |  fw  |+ sis1 +*
> |  |  802.1q trunk.--.  vlan99 (inet)
> !__!+ sis2 ++ |  switch  | +-
> | !__!
> +ral0 ..   +
>   ||   vlan100/
>   | server | *
>   ||
>   !!

That's a nice ASCII diagram :)

-- 
Garry Dolley
ARP Networks, Inc. | http://www.arpnetworks.com | (818) 206-0181
Data center, VPS, and IP Transit solutions
Member Los Angeles County REACT, Unit 336 | WQGK336
Blog http://scie.nti.st

VLANs, bridge interface and PF

[Chris Jones]

Good morning folks,

I am a little bit stumped with my firewall config and need some
assistance. I have a Soekris net4501 with two interfaces connected. The
sis1 interface is connected to my macbook and the sis2 interface (vlan
trunk) is connected to my switch (see diagram below). I have a bridge
interface (bridge0) with with vlan100, sis1 and ral0 as members. I
assume this is the best way to have multiple physical interfaces in a vlan.

   .---.
  | |
  | macbook |
.--.+ sis0.-+ |_|
|  | / \_\
|  fw  |+ sis1 +*
|  |  802.1q trunk.--.  vlan99 (inet)
!__!+ sis2 ++ |  switch  | +-
| !__!
+ral0 ..   +
  ||   vlan100/
  | server | *
  ||
  !!

With no rules loaded in PF everything works just fine. From my Macbook I
am able to NAT outside the network and also access everything on
vlan100. When I load the rules into PF I am unable to access the
management IP on the switch or my server, both of which are in vlan100.
It's obviously an issue with pf and the bridge interface, I just can't
seem to figure it out (see config below).

I appreciate any advice on this.

Cheers,
-Chris


hostname.sis1
-

up

hostname.sis2
-

up

hostname.vlan99
---

dhcp NONE NONE NONE vlan 99 vlandev sis2

hostname.vlan100


inet 192.168.1.1 255.255.255.0 NONE vlan 100 vlandev sis2

bridgename.bridge0
--

add vlan100
add sis1
add ral0
up

pf.conf
---

#
# Macros

ext_if="vlan99"
int_if="vlan100"
int_bridge="bridge0"

int_net="192.168.1.0/24"

icmp_types="echoreq"

#
# Options

set block-policy return
set loginterface $ext_if
set skip on lo

#
# Traffic Normalization

scrub in

#
# NAT Rules: "rdr", "nat", "binat"

nat on $ext_if from !($ext_if) -> ($ext_if:0)
nat-anchor "ftp-proxy/*"
rdr-anchor "ftp-proxy/*"

rdr pass on $int_if proto tcp to port ftp -> 127.0.0.1 port 8021
rdr on $ext_if inet proto tcp from any to ($ext_if) port 2121 \
-> 192.168.1.200 port 21
rdr on $ext_if inet proto tcp from any to ($ext_if) port  \
-> 192.168.1.200 port 22
rdr on $ext_if inet proto tcp from any to ($ext_if) port 80 \
-> 192.168.1.200 port 80


#
# Filter Rules

block in

pass out

anchor "ftp-proxy/*"

antispoof quick for lo0

pass  in log on $ext_if proto udp from any to ($ext_if:0) \
port {500, 4500}
pass out log on $ext_if proto udp from ($ext_if:0) to any \
port {500, 4500}

pass  in log on $ext_if proto esp from any to ($ext_if:0)
pass out log on $ext_if proto esp from ($ext_if:0) to any

pass  in log on enc0 proto ipencap from any to ($ext_if:0) \
keep state (if-bound)
pass out log on enc0 proto ipencap from ($ext_if:0) to any \
keep state (if-bound)

pass  in on enc0 from 10.1.0.2/32 to any keep state (if-bound)
pass out on enc0 from 192.168.1.0/24 to any keep state (if-bound)

pass in inet proto icmp all icmp-type $icmp_types

pass in  log on $ext_if proto udp from any to port 1194
pass in  log on $ext_if proto tcp to ($ext_if) port ssh
pass in  log on $ext_if proto tcp from any to 192.168.1.200 \
port 21
pass in  log on $ext_if proto tcp from any to 192.168.1.200 \
port 22
pass in  log on $ext_if proto tcp from any to 192.168.1.200 \
port 80
pass in  log on $ext_if proto tcp to ($ext_if) port smtp
pass out log on $ext_if proto tcp from ($ext_if) to port smtp

pass quick on $int_if

21 Palestrantes dentro da sua Empresa

[Edilson Lopes - K.L.A.]

 Bom dia
Como vai?

Leve os 21 Maiores Palestrantes do Brasil para dentro da Sua Empresa.

Waldez Ludwig, Roberto Shinyashiki, Daniel Godri, Leila Navarro, Prof.
Gretz, Lair Ribeiro entre outros. Programa Completo de Treinamento com 21
DVDs - Gravado ao Vivo no Hotel Transamirica em Sco Paulo.

Os DVDs de Treinamento mais vendidos do Brasil.

Informagues - www.klatreinamentos.com.br/programakla

Edmlson Lopes
K.L.A. Eventos Empresariais
Diretor Geral
Tel. (11) 3059-5800
Caso nco queira mais receber as mensagens do Grupo K.L.A., favor
responder a esse e-mail com o tmtulo REMOVER.

Re: PF failing to create state for ipv6 tunnel

[Peter N. M. Hansteen]

Aaron Stellman  writes:

> By commenting out half the ruleset, and doing that recursively until
> finding which rule causes it, I found it it be:
>
> nat on $ext_if from !self to any -> ($ext_if:0)

The perils of doing both ipv4 and ipv6 at the same time, I see.  Then
again, if you narrow its scope to inet only (not inet6) you can
probably put it back in, ie

nat on $ext_if inet from !self to any -> ($ext_if:0)

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.

Re: mounting Blu-ray/HD-DVD reader causes system lockup

[Bryan]

On Mon, Apr 6, 2009 at 09:02, Stefan Sperling  wrote:
> On Mon, Apr 06, 2009 at 08:43:05AM -0700, Bryan wrote:
>> I don't know if I've supplied enough information, but if you need
>> something to help postulate a theory, please let me know. B I don't
>> mind tracking it down. B I did a "find" for all .core files after I
>> rebooted, and I do not see anything on my system.
>
> Some ideas:
>
> Read the ddb(4) and crash(8) man pages.
>
> Go to the console (Ctrl+Alt+F1), and drop into ddb from the console
> after setting the ddb.console sysctl to 1 as documented in ddb(4).
>
> Then, continue execution by typing
>
> B  B  B  B continue
>
> into the ddb> prompt.
>
> Then ssh into the system from another computer to get another shell,
> and mount the disk using that shell.
>
> If you are getting any white on blue text on the console upon mounting
> the drive, write it down on paper and type it up in a mail to this list.
>
> If you even get a ddb> prompt upon mounting the drive, type
>
> B  B  B  B trace
>
> and copy that output, too.
>
> Then type
>
> B  B  B  B hangman
>
> and play that for a while to get your mind off the issue...
>
> Stefan
>

Stefan,

Thanks for that... I'll try that tonight, and send what I find...  I
just found it odd that I get nothing if it did crash.

Regards,
Bryan

Re: [semi-OT] Can anyone recommend an OpenBSD-compatible colour laser printer?

[Aaron Poffenberger]

Daniel A. Ramaley wrote:

On 2009-04-05 at 13:26:54, Martin Schrvder wrote:
  

2009/4/5, ropers :


 - The printer should work with OpenBSD without a hitch, and by that
I don't mean "can sometimes be gotten to work by endlessly tweaking
CUPS", and I also don't mean "can be gotten to work with
compat_linux and a binary blob",
  

Get one with PostScript and a NIC.



In my experience, that is the correct answer. At various times in the
past i've tried to get non-PostScript printers working with different
Unix-like operating systems (including OpenBSD). Unless your time is
very cheap, it is usually better just to buy something with PostScript.
And if it has built-in networking, even better. Buying a printer with a
NIC is easier than setting up printer sharing on a computer.

As for the original poster's HP aversion... i've had good luck with HP.
At home i use an HP 2605dn, a duplexing color laser printer that has
worked beautifully for my light use. That exact model is probably no
longer available since HP regularly rotates their consumer models, but
they undoubtedly have something similar today.


Dan RamaleyDial Center 118, Drake University
Network Programmer/Analyst 2407 Carpenter Ave
+1 515 271-4540Des Moines IA 50311 USA

  
I specifically went with HP after doing my research and can second Dan's 
recommendation of the HP's 2605dn. I have the same printer and did 
nothing more than setup a printcap entry for it to be the default 
printer and it just works. I really like the fact that it has a 
web-management console that lets me configure anything available from 
the Mac & Windows desktop app. I also like that on both Mac & PC you can 
opt to install just a print driver without the management crap. Some 
printers require desktop-software running in the background in order to 
use the printer. This one doesn't.


All-in-all, a nice printer.

--Aaron

Re: mounting Blu-ray/HD-DVD reader causes system lockup

[Stefan Sperling]

On Mon, Apr 06, 2009 at 08:43:05AM -0700, Bryan wrote:
> I don't know if I've supplied enough information, but if you need
> something to help postulate a theory, please let me know.  I don't
> mind tracking it down.  I did a "find" for all .core files after I
> rebooted, and I do not see anything on my system. 

Some ideas:

Read the ddb(4) and crash(8) man pages.

Go to the console (Ctrl+Alt+F1), and drop into ddb from the console
after setting the ddb.console sysctl to 1 as documented in ddb(4).

Then, continue execution by typing

continue

into the ddb> prompt.

Then ssh into the system from another computer to get another shell,
and mount the disk using that shell.

If you are getting any white on blue text on the console upon mounting
the drive, write it down on paper and type it up in a mail to this list.

If you even get a ddb> prompt upon mounting the drive, type

trace

and copy that output, too.

Then type

hangman

and play that for a while to get your mind off the issue...

Stefan

Re: PF failing to create state for ipv6 tunnel

[Aaron Stellman]

On Sun, Apr 05, 2009 at 10:48:21PM -0700, Aaron Stellman wrote:
> On Sun, Apr 05, 2009 at 10:43:17PM -0700, Aaron Stellman wrote:
> > Sorry, this machine is running 4.4 and I'm unable to upgrade it to
> > current, since I only have remote access to it.
> > 
> > My goal is to have operational ipv6 tunnel. Whenever appropriate gif0 is
> > created and default route through it is added, ipv6 traffic is not
> > allowed out.
> > 
> > As far as I understand, there must be a state, which will allow ipv6
> > traffic out. this state is never created as seen by 'loud' level:
> > 
> > Apr  6 00:19:50 D2710 /bsd: pf: stack key attach failed on all: 41 out
> > wire: 209.51.181.2 12.158.188.186 stack: 209.51.181.2 12.158.188.186 1:0
> > Apr  6 00:19:51 D2710 /bsd: pf: stack key attach failed on all: 41 out
> > wire: 209.51.181.2 12.158.188.186 stack: 209.51.181.2 12.158.188.186 1:0
> 
> Whenever I ping6 this box from "outside", appropriate state is created,
> and only then ipv6 traffic is able to go out.
> 
> all ipv6 12.158.188.186 <- 209.51.181.2   MULTIPLE:MULTIPLE
> 
By commenting out half the ruleset, and doing that recursively until
finding which rule causes it, I found it it be:

nat on $ext_if from !self to any -> ($ext_if:0)

In other words, same rulset w/o rule above creates a proper state:
all ipv6 12.158.188.186 -> 209.51.181.2   MULTIPLE:MULTIPLE

Re: openbsd europe

[Amarendra Godbole]

On Mon, Apr 6, 2009 at 7:29 PM, Duncan Patton a Campbell
 wrote:
>
> Howdy Amarendtra, all?
>
> I note here the comment that shipping to India
> is quicker from Europe than from Canada or the US.
>
> How are these shipments being made?  In my (long)
> experience it is quicker/cheaper/more reliable to
> use the standard postal system for international
> shipments of sw images than pretty much anything
> else.  There are various reasons for this, not
> all of which are constructively defined.
[...]

Yes, I believe they ship via standard postal system. Over the last
year or so, stuff sent from the US and Canada took more time to arrive
at my place, than that shipped from the EU. Both were standard postal
system. So I am led to believe that this will be the case this time
too, though I know my sample space is very limited. :-)

-Amarendra

Re: mounting Blu-ray/HD-DVD reader causes system lockup

[Bryan]

On Sat, Apr 4, 2009 at 15:20, Bryan  wrote:
> I have had this LG GGC-H20L Blu-ray/HD-DVD reader. B I got it because I
> made the mistake of buying several HD-DVDs before the format wars were
> over, plus I wanted to make backups of my HD movies. B I installed this
> in my quad-core server, and booted the system. B in the dmesg, I see
> the following:
>
> cd0 at scsibus0 targ 4 lun 0:  ATAPI
> 5/cdrom removable
>
> I did confirm that this the latest firmware, and it says "ATAPI 5",
> but it's connected via SATA connection.
>
> I am able to mount DVD's and do a dump from mplayer to a VOB on the
> harddrive. B I can view files on the DVD, and copy from it to the
> harddrive. B The problem comes when I attempt to mount a blu-ray or
> hd-dvd disc. B I put the disc in, and when I try to mount it using
> "mount /dev/cd0c /cdrom", the drive light flashes two or three times,
> and then the system locks up.
>
> I can no longer do anything lose my USB keyboard, and I have connected
> a PS2 keyboard to the system. B I can do "Ctrl-C", and "Ctrl-Z", and I
> see output on the screen, but no more prompt. B I lose network
> connectivity, and cannot even ping the system. B I am using the
> snapshots from 31 March, and I am still getting the same issue.
>
> Is this an issue with the HD discs not being supported by the OS, or
> is the drive not fully supported? Does OpenBSD support the UDF format
> that these discs use? B Maybe that's the issue... B but it shouldn't
> lock a system up when you try to mount the disc...
>
> B I have included the GENERIC.MP dmesg below.
>
> If I need to send anything else, please let me know... B I'm using just
> the console, no window manager or program other than "mount"
>
> regards,
> Bryan
>
>
Damn, English is my first language...  that was some awfully bad writing...

I don't know if I've supplied enough information, but if you need
something to help postulate a theory, please let me know.  I don't
mind tracking it down.  I did a "find" for all .core files after I
rebooted, and I do not see anything on my system.  There is no error
message that I can find in any logfile, and there isn't an error when
I trying to mount the disc saying that the file system isn't
supported.

It would just be nice to hear a definitive "yea, blu-ray/hd-dvd isn't
supported yet"...

Thanks...  I promise to talk gooder next time.

Bryan

Re: PF failing to create state for ipv6 tunnel

[Aaron Stellman]

On Mon, Apr 06, 2009 at 11:58:01AM +0200, Tasmanian Devil wrote:
> > whereas, a state should be created by this rule:
> > pass out quick inet from any to 209.51.181.2
> 
> Not sure how this fits together with your second post where you say
> that you can ping6 from the outside, but depends also on your other
> rules. What you need to allow is proto 41 (ipv6) between the two
> tunnel endpoints of your GIF tunnel (between 12.158.188.186 and
> 209.51.181.2 in your case), and in both directions.
proto 41 is allowed out by "first" quick rule in the ruleset.

@0 pass out quick on vr0 inet proto ipv6 from any to 209.51.181.2 keep
state
  [ Evaluations: 83Packets: 0 Bytes: 0   States:
0 ]
  [ Inserted: uid 0 pid 5522 State Creations: 6 ]

That's the rule that should create appropriate state, but it doesn't as
seen by

Apr  6 01:21:39 D2710 /bsd: pf: stack key attach failed on all: 41 out
wire: 209.51.181.2 12.158.188.186 stack: 209.51.181.2 12.158.188.186 1:0
> 
> For me, with "block in all/pass out all" default rules, a rule like
> this works fine:
> 
> pass in on $ext_if proto ipv6 from $server_ip to $my_ip
> 
> > traffic on gif0 is skipped, but it shouldn't matter
> 
> Are you sure that you really want this? That way you allow all traffic
> via IPv6 in, which means no filtering at all for IPv6. So the world
> can probably access more than you think...
this is done for debugging purposes only.

Re: PF failing to create state for ipv6 tunnel

[Aaron Stellman]

On Mon, Apr 06, 2009 at 04:31:42PM +0100, Sevan / Venture37 wrote:
> try adding:
> pass in on $ext_if inet proto ipv6
> to your pf.conf
This has nothing to do with "in" direction. Packets coming "in" are
passed fine and they do create a proper state.
The problem is that packets that are coming "out" when there is no state
don't create don't create approporiate state, and are not visible on pflog0 
even though all my block rules are logged.

This problem is confirmed by
Apr  6 01:21:39 D2710 /bsd: pf: stack key attach failed on all: 41 out
wire: 209.51.181.2 12.158.188.186 stack: 209.51.181.2 12.158.188.186 1:0

Re: PF failing to create state for ipv6 tunnel

[Sevan / Venture37]

try adding:
pass in on $ext_if inet proto ipv6
to your pf.conf

Re: [semi-OT] Can anyone recommend an OpenBSD-compatible colour laser printer?

[Daniel A. Ramaley]

On 2009-04-05 at 13:26:54, Martin Schrvder wrote:
>2009/4/5, ropers :
>>  - The printer should work with OpenBSD without a hitch, and by that
>> I don't mean "can sometimes be gotten to work by endlessly tweaking
>> CUPS", and I also don't mean "can be gotten to work with
>> compat_linux and a binary blob",
>
>Get one with PostScript and a NIC.

In my experience, that is the correct answer. At various times in the
past i've tried to get non-PostScript printers working with different
Unix-like operating systems (including OpenBSD). Unless your time is
very cheap, it is usually better just to buy something with PostScript.
And if it has built-in networking, even better. Buying a printer with a
NIC is easier than setting up printer sharing on a computer.

As for the original poster's HP aversion... i've had good luck with HP.
At home i use an HP 2605dn, a duplexing color laser printer that has
worked beautifully for my light use. That exact model is probably no
longer available since HP regularly rotates their consumer models, but
they undoubtedly have something similar today.


Dan RamaleyDial Center 118, Drake University
Network Programmer/Analyst 2407 Carpenter Ave
+1 515 271-4540Des Moines IA 50311 USA

Re: openbsd europe

[Duncan Patton a Campbell]

Howdy Amarendtra, all?

I note here the comment that shipping to India
is quicker from Europe than from Canada or the US.

How are these shipments being made?  In my (long)
experience it is quicker/cheaper/more reliable to
use the standard postal system for international
shipments of sw images than pretty much anything
else.  There are various reasons for this, not
all of which are constructively defined.

Dhu


On Mon, 6 Apr 2009 07:20:10 +0530
Amarendra Godbole  wrote:

> On Tue, Apr 7, 2009 at 4:19 AM, Jesus Sanchez  wrote:
> > I didn't knew about that site, does www.openbsdeurope.com have any
> > relationship with the OpenBSD project? I'm from Spain and since the
> > Wim issue I'm going to try this web. Any previous experience with them?
> [...]
> 
> I recently pre-ordered from them, and was happy that they agreed to
> ship to a country not listed in their shipping zone -- India. The cost
> breaks-even for me, as both the computer shop and obsdeurope roughly
> cost roughly the same amount. But in my experience, shipments from EU
> reach India faster than those from Canada or US, so thought of giving
> them a try.
> 
> The service is very friendly, and prompt. And I am happy that the
> money is going back into the OpenBSD project. Thanks.
> 
> -Amarendra

Re: Anyone using munin?

[Cezary Morga]

Dnia poniedzia3ek, 6 kwietnia 2009, Toni Mueller napisa3:
> Hi,
>
> On Sat, 04.04.2009 at 12:15:35 +0200, Cezary Morga  wrote:
> > I think munin comes with a bunch of plugins already. If not you can grab
> > some Linux package (like Debian's munin-node) and extract them from it.
> > These are simple scripts (shell, perl, python) so they might run on
> > OpenBSD even without any modifications.
>
> I think that this is very optimistic, since a lot of Linux specific
> facilities are being used. Eg. several scripts parse the output of
> iptables, or read /proc...

Argh, you're right. My bad.

--
Cezary Morga

Re: [semi-OT] Can anyone recommend an OpenBSD-compatible colour laser printer?

[Jussi Peltola]

On Mon, Apr 06, 2009 at 11:37:30AM +0200, ropers wrote:
> (c), an ink jet printer cannot do this: http://www.riccibitti.com/pcb/pcb.htm
 
However, inkjets seem to be better for printing masks for photo-etching,
but the transparencies are awfully expensive and so is the ink when it
dries out. I got surprisingly good results photo etching with plain
paper and an inkjet, about as good as a LaserJet 2200 and
good transparencies.

For the toner transfer trick it seems to me that LaserJet 3 and 4 work
very well, they print much darker than newer lasers. Haven't tried a
color laser, they might have interesting differences. I wish I could
just put my PCBs through a laser printer and etch away... 

-- 
Jussi Peltola

Re: Anyone using munin?

[Alexander Bochmann]

Hi,

...on Thu, Apr 02, 2009 at 05:44:32PM -0700, Marc Runkel wrote:

 > Trying to set up munin work with OpenBSD and was wondering if anyone had some
 > plugins pre-written?  In particular interface statistics but I'll take just
 > about anything.

I have a bunch of badly hacked munin plugins I've 
been running for some time, which you could try to 
use as an inspiration. 
Warning: Undocumented cut & paste code from other 
existing plugins. I'll take no responsibility if 
it breaks your brain (or computer).

They do at least basic IF Statistics, cpu, disk, 
temperature sensors.

Can be downloaded from here:

http://ozeanos.gxis.de/temp/filepile/munin-plugins-obsd39.tar.gz

Alex.

Re: PF: "Port Range Triggering" or add an IP address to a table on first connection

[Tasmanian Devil]

> pass out on gif0 inet6 proto tcp from any to any port 6600:7000 keep
> state (max-src-conn 0, overload )
>
> Looks good, but does not work. PF complains: " 'max-src-conn' must be
> > 0". With "max-src-conn 1" the IP address only gets added to the
> table with the second connection, which doesn't help me in my case.
> I'd need to have the address in the table as soon as the first
> connection is build up.

An additional (and maybe better) question is: Why is "max-src-conn 0"
not allowed? As far as I can see, a value of zero for max-src-conn
would solve my problem. Most probably there is a good reason for this
limit, but which reason is it? It's probably not a good idea to remove
this limit without understanding why it's there...

Thank you for any help with this!

Tas.

Re: PF failing to create state for ipv6 tunnel

[Tasmanian Devil]

> whereas, a state should be created by this rule:
> pass out quick inet from any to 209.51.181.2

Not sure how this fits together with your second post where you say
that you can ping6 from the outside, but depends also on your other
rules. What you need to allow is proto 41 (ipv6) between the two
tunnel endpoints of your GIF tunnel (between 12.158.188.186 and
209.51.181.2 in your case), and in both directions.

For me, with "block in all/pass out all" default rules, a rule like
this works fine:

pass in on $ext_if proto ipv6 from $server_ip to $my_ip

> traffic on gif0 is skipped, but it shouldn't matter

Are you sure that you really want this? That way you allow all traffic
via IPv6 in, which means no filtering at all for IPv6. So the world
can probably access more than you think...

Tas.

Re: Anyone using munin?

[Russell Howe]

Martin SchrC6der wrote, sometime around 06/04/09 10:01:

2009/4/3, Marc Runkel :

Trying to set up munin work with OpenBSD and was wondering if anyone had some
 plugins pre-written?  In particular interface statistics but I'll take just
 about anything.


Good luck. AFAIK there's a freebsd port, try that. And there are some
plugins for pf at http://muninexchange.projects.linpro.no/


Munin can collect from SNMP, which makes life a LOT easier!

OK, so that's not so useful if you want to collect some stats which 
OpenBSD's snmpd doesn't expose but assuming you do, this is what you 
need to do:


munin-node can act as a proxy, forwarding requests to another box. This 
is handy if you want to monitor a bunch of hosts the other side of a 
firewall as you only need to punch a hole for the one machines. It can 
also do act as a munin-to-snmp one way bridge, forwarding incoming 
requests on to another node that speaks SNMP.


Install munin-node somewhere (I installed it on a Debian box that I run 
munin on, which is also where I collect all syslog messages and run 
logcheck and nagios).


Check that the box running munin-node can talk SNMP to OpenBSD:

This works well enough for me as a test:
$ snmpwalk -v 2c -c  

Run munin-node-configure-snmp - you can pass either a single address or 
a CIDR range. It will scan for SNMP and configure any plugins which can 
monitor the stats it finds.


Configure munin-node to allow connections from the host running munin

e.g.

echo 'allow ^10\.0\.0\.1$' >> /etc/munin/munin-node.conf

where 10.0.0.1 is the IP address of the box running munin (the one which 
collects stats from all the nodes and draws graphs)


Restart munin-node

Wait for the pretty graphs to appear

Debug, rejoice and go on an SNMP configuring rampage across your network 
(hint: this is useful for monitoring Windows boxes, if you have any of 
those).


--
Russell Howe, IT Manager. 
BMT Marine & Offshore Surveys Ltd.

Re: [semi-OT] Can anyone recommend an OpenBSD-compatible colour laser printer?

[ropers]

2009/4/6 Toni Mueller :
>
> I don't know what exactly you want to do, but you might be interested
> in reading some reports about the printing quality and operating cost,
> too. Eg. a good ink jet printer should deliver better quality printouts
> than a bad laser printer.

I do positively, affirmatively, definitely want a laser printer. ;)

Because:
(a), I already have a (dead slow and old but portable) ink jet printer,
(b), ink jet printers are more likely to go into the direction of
weird binary blob printer drivers with neither built-in postscript,
nor good ghostscript/driver support, and
(c), an ink jet printer cannot do this: http://www.riccibitti.com/pcb/pcb.htm

regards,
--ropers

Re: Anyone using munin?

[Martin Schröder]

2009/4/3, Marc Runkel :
> Trying to set up munin work with OpenBSD and was wondering if anyone had some
>  plugins pre-written?  In particular interface statistics but I'll take just
>  about anything.

Good luck. AFAIK there's a freebsd port, try that. And there are some
plugins for pf at http://muninexchange.projects.linpro.no/

Best
   Martin

Re: Anyone using munin?

[Toni Mueller]

Hi,

On Sat, 04.04.2009 at 12:15:35 +0200, Cezary Morga  wrote:
> I think munin comes with a bunch of plugins already. If not you can grab some 
> Linux package (like Debian's munin-node) and extract them from it. These are 
> simple scripts (shell, perl, python) so they might run on OpenBSD even 
> without 
> any modifications.

I think that this is very optimistic, since a lot of Linux specific
facilities are being used. Eg. several scripts parse the output of
iptables, or read /proc...


Kind regards,
--Toni++

Re: [semi-OT] Can anyone recommend an OpenBSD-compatible colour laser printer?

[Toni Mueller]

Hi,

On Sun, 05.04.2009 at 15:24:09 -0400, System Administrator  
wrote:
> device with most of the processing happening on the host. If you stick 
> to real "hardware" printers that provide built-in Postscript (or at 
> least PCL) language and fonts, you will have no problems with OpenBSD. 

these will imho easily bust a small budget, but are also the only
viable choice if you intend to keep the device for some time.

> For the longest time I used to be a fan of HP, although I have also 
> always liked Lexmark.

I was also a fan of HP printers, especially after having bad experience
with a medium-sized Lexmark printer, due to massive mechanical problems
which looked like "designed-to-break", and very pricey replacement
parts.


> learned from a reseller that HP's cartridges include a page counter and 
> stop operating at the prescribed number of pages regardless of actual 
> utilization, which is in stark contrast to Lexmark whose cartridges are 
> guaranteed for "at least" a certain number of pages and the company 
> will replace it free of charge if it runs out sooner but does not 
> prevent you using it past that many pages.

The page count mechanisms seem to be very common in many printers'
cartridges, esp. in the lower price range. Try to ask your dealer about
page counters in other printers' cartridges. I guess that you'll find
them in more than half the models across the board.


> On 5 Apr 2009 at 19:44, ropers wrote:
> > I'm looking for a colour laser printer that's so cheap that I can

I don't know what exactly you want to do, but you might be interested
in reading some reports about the printing quality and operating cost,
too. Eg. a good ink jet printer should deliver better quality printouts
than a bad laser printer. If all you're doing is printing a few easy
charts from your spread sheet, then this may be irrelevant to you.


Kind regards,
--Toni++

sysctl - message queues

[Mariusz Makowski]

Is there any chance to change this settings:

option MSGMNB
option MSGMNI
option MSGSEG
option MSGSSZ
option MSGTQL

by not editing kernel sources, but by sysctl ?

I only found that i can change:

kern.shminfo.shmmax
kern.shminfo.shmmin
kern.shminfo.shmmni
kern.shminfo.shmseg
kern.shminfo.shmall
kern.seminfo.semmni
kern.seminfo.semmns
kern.seminfo.semmnu
kern.seminfo.semmsl
kern.seminfo.semopm
kern.seminfo.semume
kern.seminfo.semusz
kern.seminfo.semvmx
kern.seminfo.semaem


Regards,
 Mariusz

Re: shell history and page-up

[J.C. Roberts]

On Mon, 6 Apr 2009 14:55:12 +1000 Chris  wrote:

> On Thu, Apr 2, 2009 at 3:00 PM, Nick Guenther 
> wrote:
> > On Thu, Apr 2, 2009 at 12:58 AM, Chris  wrote:
> >> On Thu, Apr 2, 2009 at 3:55 PM, Nick Guenther 
> >> wrote:
> >>> On Thu, Apr 2, 2009 at 12:52 AM, Chris  wrote:
>  On Thu, Apr 2, 2009 at 3:46 PM, Nick Guenther 
>  wrote:
> > On Thu, Apr 2, 2009 at 12:37 AM, Chris 
> > wrote:
> >> I am trying to get the shell history with page-up but looks
> >> like it's not working. I'm running -current with the default
> >> ksh and added HISTSIZE=50 and export HISTSIZE to ~/.profile.
> >>
> >> Does anyone know how to get it?
> >
> > I've never seen it not work. Does it work for you on -RELEASE?
> > Does it work if you don't set HISTSIZE at all?
> 
>  No, it doesn't work either way. Maybe I should mention that it's
>  only a test machine so I didn't create a swap partition (it has
>  only one 6 GB / partition) - could this be the reason why?
> 
>  Thanks.
> >>>
> >>>
> >>> I doubt it but I don't know the code off by heart. A more likely
> >>> reason is your terminal settings, what's $TERM?
> >>
> >> You are right: it's something to do with the $TERM environment
> >> variable. I ssh to the box from inside GNU screen so $TERM shows
> >> screen; OTOH, if I log on to the box directly, $TERM shows vt220.
> >>
> >> Should I export term vt220 in .profile?
> >>
> >
> > Oh you're using screen? Does the problem show up when you don't use
> > screen?
> 
> Yes, it does. I am ssh'ing to the OpenBSD box using Xterminal emulator
> that comes with XFCE. When I log in, it shows terminal as xterm and
> Page up don't work. If I change the terminal to vt220 (export
> TERM=vt220 && echo $TERM), it shows vt220 but page up still doesn't
> work. The only time page up works is when I log on via the physical
> console.
> 

In short, there is *no* default mapping in ksh for PageUp and PageDown.

Surprisingly enough, your shell history, and how it is accessed,
depends, for the most part, on the shell you are using. If you look at
your configuration files for the C shell, ~/.login and ~/.chsrc, in the
first you'll find 'savehist' and in the second you'll find the 'h'
alias for accessing the shell history.

The default shell on OpenBSD is no longer the C Shell, but instead is a
variant of the Korn Shell (ksh). If you take the time to read the man
page for ksh, you'll find that 'history' is just a *default* alias for
the `fc -l` command.

Your main problem is mistaken perception; you are expecting UNIX to
behave like GNU crap (bash/screen/whatever).

If you are running the default system shell, namely ksh(1), you can
access the history, line by line, in two different ways:

1.) The Up-Arrow and Down-Arrow keys
2.) The CTRL-P (Previous, also known as "up-history") and CTRL-N (Next,
also known as "down-history") key combinations.

The ksh(1) man page even details the exact default key bindings used to
make the Up and Down Arrow keys access the shell history. 

If you are using ksh, and the above keys/key-combos do not work, then
you have screwed around with the default ksh settings, or you are using
a garbage terminal emulator that is screwing with the key-bindings.

The terminal emulator in XFCE is stupidly named "Terminal" and like all
terminal emulators, has it's own set of quirks, conflicts and
limitations. The "GNU screen" program is terminal multiplexer and has
countless quirks, conflicts and bugs, in addition to a virus license.

Unless you are using the default xterm(1), without modification, it's
nearly impossible to tell what kind of remapping/rebinding your
terminal emulator is doing, assuming it's doing any rebinding/remapping.

None the less, in ksh you can set your own bindings. To get a list of
existing bindings, just run the `bind` command without arguments.

# UpArrow - up-history - works (default)
# ^XA = up-history
$ bind '^[[A'=up-history

# DownArrow - down-history - works (default)
# ^XB = down-history
$ bind '^[[B'=down-history

# RightArrow - forward-char - works (default)
# ^XC = forward-char
$ bind '^[[C'=forward-char

# LeftArrow - backward-char - works (default)
# ^XD = backward-char
$ bind '^[[D'=backward-char


These two are useful additions:

# End Key - Goto Last Character In Line - works
# ^XF = end-of-line
$ bind '^[[F'=end-of-line   

# Home Key - Goto First Character In Line - works
# ^XH = beginning-of-line
$ bind '^[[H'=beginning-of-line


Unfortunately, I've got no clue what the correct eXtra-key binding is
for the PageUp and PageDown keys. I thought they were either ^XI and
^XG, or ^XJ and ^XK, but both of those combinations are wrong.

# PageUp Key - broken
# ^XI = up-history
# ^XJ = up-history
$ bind '^[[I'=up-history  

# PageDown Key - broken
# ^XG = down-history
# ^XK = down-history
$ bind '^[[G'=down-history


If you spend enough time digging through termcap/terminfo you'll
probably figure out the correct magic for PgUp and

Re: openbsd europe

[Cezary Morga]

Dnia wtorek, 7 kwietnia 2009, Jesus Sanchez napisa3:
> I didn't knew about that site, does www.openbsdeurope.com have any
> relationship with the OpenBSD project? I'm from Spain and since the
> Wim issue I'm going to try this web. Any previous experience with them?

http://marc.info/?l=openbsd-misc&m=123869832609766&w=2

--
Pozdrawiam,
Cezary Morga
"Indecision may or may not be my problem." (Jimmy Buffett)