Las Reglas de Juego de las Empresas Familiares

2010-06-30 Thread Salo Grabinsky Steider
Seminario Internacional
Las Reglas de Juego de las Empresas Familiares
19 de julio de 2010 Monterrey
21 de julio de 2010 Guadalajara
23 de julio de 2010 Mexico DF
?Cual es el impacto potencial de la familia y parientes en las Empresas
Familiares? y ?Qui puede hacer al respecto? ?Son familia, socios o simplemente
colaboradores de "confianza"? ?Benefician o Perjudican? ?Csmo manejar las
evidencias, los parientes "parasitos" y las ambiciones de los herederos? ?Le
doy acciones a mis hermanos? ?Parientes polmticos? ?Qui sucedera con su
familia y con su empresa si usted llegara a faltar?
*La empresa familiar, su problematica y oportunidades.
*?Por qui debe haber reglas y lineamientos?
*?Csmo se transforma una empresa familiar en una empresa profesional?
*LA CUMBRE: el ixito y su impacto en la familia.
*?Herencias, Testamentos y asuntos de la Sucesisn?
*La empresa familiar: Venta, Divisisn, Crisis con herederos.
*?Csmo correr a un Familiar?
Reciba un_folleto con toda la informacisn
Opcisn 1) llamando al 01_800 250 20_30
Opcisn 2) respondiendo los siguientes datos:
-Empresa:
-Nombre:
-Puesto:
-Tel: ( )

Ciudad donde_Desea Participar : ( ) Monterrey ( ) Guadalajara ( ) Mexico DF

To unsubscribe and discontinue mailings, please send a blank email



pfctl from today seems to be somehow messed up / DIOCSETSTATUSIF

2010-06-30 Thread Laurent CARON

Hi,

I did upgrade one of my BGP routers today with latest current.

Upon reboot I have no network.

pfctl returns the following error:
# pfctl -f /etc/pf.conf
pfctl: DIOCSETSTATUSIF

A default drop all in ruleset is loaded.

If I rollback to previous pfctl it loads my rules fine.

If i want to load rules correctly with newer pfctl I have to remove:
set loginterface $EXTIF001 from /etc/pf.conf

Thanks



x4100

2010-06-30 Thread Marco Peereboom
It seems that the sun X4100 works now with amd64 GENERIC.MP.  I'd like
to get some test reports from folks in the field.

You have to checkout a kernel using cvs because all niceness isn't in
snaps yet.

Thanks,
/marco



Festival Le Chien à Plumes

2010-06-30 Thread LE CHIEN A PLUMES
www.chienaplumes.fr



Re: MD5 checksum

2010-06-30 Thread Alexander Hall
On 06/30/10 14:58, Claudiu Pruna wrote:
>   Hi there,
> 
>   I have a question if I have one box running OpenBSD 4.7 and everytime I
> do md5 on one file I get different results, who is more succeptible to
> be broken ? cpu ? ram ? or mb. ?
> 
> Thanks for your thoughts.

If your system is indeed this corrupt I am surprised it will run at all.

Please show the actual command that produces this.

/Alexander



Re: Java plugin not detected by Firefox

2010-06-30 Thread Landry Breuil
On Wed, Jun 30, 2010 at 11:02 PM, Jiri B.  wrote:
> On Wed, 30 Jun 2010 20:01:04 +0200
> Martin Toft  wrote:
>
>> > Java plugin does not work since Firefox 3.6.x changes the connection
>> > mechanism and requires newer Java. Licensing issues so far prevent
>> > getting Java updated. If you need Java, you need to stay with 3.5.x
>>
>> And people keep telling me Java is "free"...
>
> IIRC OpenJDK doesn't contain all stuff, like sound support and plugin.
> IceTea project bases their work on OpenJDK and provides their version
> of plugin which works with OpenJDK, this is what is Debian using.

And this is what pkgsrc does in www/openjdk-icedtea-plugin, which
works with firefox 3.6.x.

Landry



Soluções de imagem e comunicação à medida do seu negócio!

2010-06-30 Thread Opção Global, Lda.
se nco conseguir visualizar correctamente o contezdo deste e-mail, por
favor, clique aqui

A Opgco Global desenvolve solugues para os desafios que se colocam ` sua
empresa em relagco a comunicagco, marketing e imagem!

Para comprovar a diversidade dos nossos servigos convidamos a visitar-nos
em: www.opcaoglobal.com e a desfolhar a nossa brochura de apresentagco em
www.opcaoglobal.com/brochuraog/.

Queremos que nos desafie, para em conjunto encontrarmos a melhor forma de
dar visibilidade aos seus projectos com o intuito de optimizar o seu
investimento em comunicagco.

AVISO

---

De acordo com a legislagco internacional que regulamenta o correio
electrsnico, Secgco 301, paragrafo (a)(2)(c) Decreto S 1618, tmtulo
terceiro aprovado pelo "105 Congresso Base Das Normativas Internacionais
Sobre Spam" diz o seguinte: "O email nco podera ser considerado SPAM
quando incluir uma forma do receptor ser removido da lista". Se por algum
acaso o seu nome esta inclumdo nesta lista por erro ou gostaria de ser
removido desta lista, por favor clique aqui
Esta mensagem (incluindo quaisquer anexos) pode conter informagco
confidencial ou legalmente protegida para uso exclusivo do destinatario.
Se nco for o destinatario pretendido da mesma, nco devera usar, copiar,
distribuir ou revelar o seu contezdo (incluindo quaisquer anexos) a
terceiros, sem autorizagco. Se recebeu esta mensagem por engano, por
favor informe o emissor por e-mail e elimine-a imediatamente. Obrigado. A
transmissco de mensagens via e-mail nco pode ser considerada protegida ou
isenta de erros uma vez que a informagco podera ser interceptada,
corrompida, perdida, destrumda, chegar ao destino com atraso ou conter
vmrus. Assim, o remetente nco podera ser responsabilizado por quaisquer
erros ou omissues.



Re: Java plugin not detected by Firefox

2010-06-30 Thread Jiri B.
On Wed, 30 Jun 2010 20:01:04 +0200
Martin Toft  wrote:

> > Java plugin does not work since Firefox 3.6.x changes the connection
> > mechanism and requires newer Java. Licensing issues so far prevent
> > getting Java updated. If you need Java, you need to stay with 3.5.x
> 
> And people keep telling me Java is "free"...

IIRC OpenJDK doesn't contain all stuff, like sound support and plugin.
IceTea project bases their work on OpenJDK and provides their version
of plugin which works with OpenJDK, this is what is Debian using.

jirib



MD5 checksum

2010-06-30 Thread Claudiu Pruna
Hi there,

I have a question if I have one box running OpenBSD 4.7 and everytime I
do md5 on one file I get different results, who is more succeptible to
be broken ? cpu ? ram ? or mb. ?

Thanks for your thoughts.

 

-- 
Claudiu Pruna 



Re: Java plugin not detected by Firefox

2010-06-30 Thread Martin Toft
Never mind.  Kenneth R Westerback replied (thanks!):

> Java plugin does not work since Firefox 3.6.x changes the connection
> mechanism and requires newer Java. Licensing issues so far prevent
> getting Java updated. If you need Java, you need to stay with 3.5.x

And people keep telling me Java is "free"...



Java plugin not detected by Firefox

2010-06-30 Thread Martin Toft
Hi misc@

I run a less than one week old -current, together with JDK 1.6 (built
from ports) and Firefox 3.6.3.  As the subject states, Firefox does not
detect the Java plugin found in JDK.

  $ pkg_info | grep -e firefox -e jdk
  jdk-1.5.0.16p2  Java2(TM) Standard Edition Dev Kit v1.5.0.16
  jdk-1.6.0.03p9  Java2(TM) Standard Edition Dev Kit v1.6.0.03
  mozilla-firefox-3.6.3p2 redesign of Mozilla's browser component

The build of JDK 1.6 depended on 1.5, which is why the latter is
installed.  I have tried symlinks to the plugin in four different
locations, one at a time, without success: ~/.mozilla/plugins,
/usr/local/lib/mozilla/plugins, /usr/local/mozilla-firefox/plugins, and
/usr/local/lib/mozilla-plugins/.  The former three are mentioned in
/usr/local/mozilla-firefox/README.OpenBSD and the latter is mentioned in
the install message for JDK.

The plugin exists:

  $ pwd
  /usr/local/jdk-1.6.0/jre/plugin/i386/ns7
  $ ls -l libjavaplugin_oji.so 
  -rwxr-xr-x  1 root  bin  266285 Jun 29 13:41 libjavaplugin_oji.so

A symlink example:

  $ pwd  
  /home/mt/.mozilla/plugins
  $ ls -l libjavaplugin_oji.so 
  lrwxr-xr-x  1 mt  users  61 Jun 30 18:58 libjavaplugin_oji.so -> 
/usr/local/jdk-1.6.0/jre/plugin/i386/ns7/libjavaplugin_oji.so

The about:plugins page in Firefox keeps claiming that no plugins are
installed.  I have tried loading a website with a Java applet, and it is
true that Java-support is not enabled.

Additionally, I have tried starting Firefox with a fresh profile, I have
tried the plugin from JDK 1.5, and I have tried changing the
java.default_java_location_{others,solaris} keys in about:config.  None
of the attempts helped.  I tried /usr/local/jdk-1.6.0 and
/usr/local/jdk-1.6.0/jre for the keys' value.

Can anyone spot whether I am doing something wrong?

Thanks!

Martin



Thinkpad SL510 woes

2010-06-30 Thread Tomas Vavrys
Hello,

I bought new Thinkpad SL510 yesterday and I want to share my experiences
with you.

First problem was with i386 -current instalation, you can read full
description here

http://www.pubbs.net/201005/openbsd/54814-may-26-current-on-lenovo-sl410-laptop.html

So I used AMD64 -current. Everything seems to be working correctly
except ACPI and Wifi (Unfortunately, wrong technical description is
common thing these days. That's why I have Realtek wifi instead of Intel
wifi.)

Great quote from Undeadly comment: "ACPI really should die, and everyone
involved in its creation should be hunted down and tortured for the rest
of eternity, what a total clusterfuck it is."

Here is my dmesg, acpidump and lspci -vv from Ubuntu livecd.

http://devio.us/~cleancode/dmesg.txt

http://devio.us/~cleancode/acpidump.txt
http://devio.us/~cleancode/acpidump_SL510.tar

http://devio.us/~cleancode/ubuntu_lspcivv.txt

-
Tomas Vavrys



Re: Patch for mtree (the "-X" flag)

2010-06-30 Thread Ingo Schwarze
Hi Teemu,

Teemu Rinta-aho wrote on Wed, Jun 30, 2010 at 12:51:17PM +0300:

> I need the "-X" flag for mtree on OpenBSD to exclude certain paths.
> So, I ported the functionality from NetBSD. Seems to work for me.

Personally, i'm not holding a strong opinion whether or not we
should have that functionality.

> I was just thinking, whether anyone else cares about such patch, and
> what is the process if I want to propose some new (/ported) code
> to OpenBSD.

When you have a patch to the base system, just post it to t...@.
Include *short* remarks
 - what it does, and what it's useful for
 - when adding options to or changing options of system commands,
   whether POSIX say anything about it, and what the situation on
   other platforms is, a far as you know;
   NetBSD, FreeBSD, Solaris and Linux are most interesting,
   but other systems may be relevant, too.

The worst that might happen to you is that it might get shot down
as "not useful, we don't want non-standard extensions".  But when
people consider it useful and well-written, chances are somebody
will commit it.

In case you get no feedback, try to find out who is actively
working on the code, for example using cvsweb, and contact one
or two developers directly, in this case probably mill...@.

> Or, should I create an optional package (mtreex?),

Definitely not:  Almost nobody will use it.

> or, should I just keep this to myself?

Only in case others don't like it.  ;-)

Yours,
  Ingo



Re: Patch for mtree (the "-X" flag)

2010-06-30 Thread Teemu Rinta-aho
On Jun 30, 2010, at 5:47 PM, Bret S. Lambert wrote:

> The standard way of doing so is to mail the patch (inline) to tech@

Thanks. I will do that once I check and test a bit more.

>> Or, should I create an optional package (mtreex?), or, should
>> I just keep this to myself?
> 
> That would be bizarre.

Which one? :-)

Teemu



Re: Patch for mtree (the "-X" flag)

2010-06-30 Thread Bret S. Lambert
On Wed, Jun 30, 2010 at 12:51:17PM +0300, Teemu Rinta-aho wrote:
> Hi all,
> 
> I need the "-X" flag for mtree on OpenBSD to exclude certain paths.
> So, I ported the functionality from NetBSD. Seems to work for me.
> 
> I was just thinking, whether anyone else cares about such patch, and
> what is the process if I want to propose some new (/ported) code
> to OpenBSD.

The standard way of doing so is to mail the patch (inline) to tech@

> 
> Or, should I create an optional package (mtreex?), or, should
> I just keep this to myself?

That would be bizarre.

> 
> BR,
> Teemu



Re: Which netbook for OpenBSD

2010-06-30 Thread czarkoff
Tomas Bodzar  wrote:

> Hmm I found that there is Broadcom WiFi which is not supported in
> OpenBSD as stated in FAQ. It will be hard to find something as I want
> functional everything including camera :D I don't know why they don't
> use just UVC cameras.

I had a Dell Inspiron 1721 laptop with exactly BCM4312. It was managed by bwi
driver but suffered from performance issues: while being acceptable for
surfing the web, it was just too buggy to download a long file.

--
Dmitrij D. Czarkoff



Re: Load balancing incoming trafic with BGP

2010-06-30 Thread BARDOU Pierre
Sorry, it's a typo. The real RIB :

On router A "bgpctl sh rib" :
Flags   destination gateway lpref   med aspath  
origin
AI*>217.109.108.0/240.0.0.0 100 0   
i
AI*>217.109.108.128/25  0.0.0.0 100 0   
i
On ISP router A "bgpctl sh rib" :
Flags   destination gateway lpref   med aspath  
origin
AI*>217.109.108.0/240.0.0.0 100 0   65001   
i
AI*>217.109.108.128/25  0.0.0.0 100 0   65001 65001 65001 65001 
65001   i

--
Cordialement,
Pierre BARDOU


-Message d'origine-
De : Stuart Henderson [mailto:s...@spacehopper.org]
Envoyi : mardi 29 juin 2010 17:13
@ : misc@openbsd.org
Objet : Re: Load balancing incoming trafic with BGP

On 2010-06-29, BARDOU Pierre  wrote:
> Hello,
>
> I did this on router A :
>
> network 217.109.108.0/24
> network 217.109.108.128/25
>
> neigbor...
>
> allow from any
> match to any prefix 217.109.108.128/25 set prepend-self 5
>
> On router A "bgpctl sh rib" :
>
> Flags destination gateway lpref   med aspath  
> origin
> AI*>  217.109.108.0/240.0.0.0 100 0   
> i
> AI*>  217.109.108.128/24  0.0.0.0 100 0   
> i
>
> On ISP router A "bgpctl sh rib" :
>
> Flags destination gateway lpref   med aspath  
> origin
> AI*>  217.109.108.0/240.0.0.0 100 0   65001   
> i
> AI*>  217.109.108.128/24  0.0.0.0 100 0   65001 65001 65001 65001 
> 65001   i
>
> Everything is fine :)


Hmm, that's wierd, the received routes are /24!



Скорая компьютерная помощь

2010-06-30 Thread Corporation style
~~~
   Jnlo|~repm{e sqksch b c.Jhebe h jhebqjni nak`qrh 
~~~ 


  - @anmemrqjne naqksfhb`mhe oepqnm`k|m{u jnlo|~repnb, qepbepnb h knj`k|m{u 
qerei. G`jk~wemhe dncnbnp`. Nr 400 cpm/leqv (1-i leqv naqksfhb`mh - 
ae...@rmn!);
  - Opnthk`jrhweqjhe p`anr{ q b{egdnl qoevh`khqr` opnbndrq 3 (hkh ankee) p`g` 
b leqv;
  - @mrhbhpsqm` dh`cmnqrhj`, sd`kemhe bhpsqnb;
  - Sqr`mnbj` h onddepfj` onwrnb{u, t`iknb{u, replhm`k|m{u qepbepnb (Windows 
2003/FreeBSD);
  - Npc`mhg`vh mnb{u p`anwhu leqr, lndepmhg`vh h p`qxhpemhe jnlo|~repmncn 
o`pj` h knj`k|mni qerh;
  - Onqr`bj` k~ancn nthqmncn nanpsdnb`mh (qepbep{, mnsrasjh, oephtephimne 
nanpsdnb`mhe, qerebne nanpsdnb`mhe, nthqm{e @RQ), qanpj` OJ;
  - Opnd`f` qepbepnb qnaqrbemmni qanpjh, Supermicro, HP, DELL, Fujitsu-Siemens;
  - Opnd`f` qerebncn nanpsdnb`mh;
  - Opnd`f` khvemghnmmncn opncp`llmncn naeqoewemh Microsoft h dp.;
  - Qngd`mhe opnejr`, lnmr`f h m`qrpnij` knj`k|m{u h reketnmm{u qerei;
  - Onqrpnemhe nthq` q ;
  - Opnbedemhe hmbemr`phg`vhh rejsyei HR-hmtp`qrpsjrsp{;
  - Pelnmr jnlo|~repnb, dh`cmnqrhj`, `ocpeid, opnbedemhe opnthk`jrhweqjhu p`anr;
  - Sqr`mnbj` NQ Windows (q dhqrphasrhb` g`j`gwhj`), nthqm{u 
opncp`ll,namnbkemhi;
  - Sqr`mnbj` h onddepfj` Windows Server, FreeBSD (DNS, DHCP, FTP, Active 
Directory, GPO, Proxy Server, Terminal Services, Squid, Sendmail, IPFW, NAT);
  - Chaj` qhqrel` qjhdnj dk onqrnmm{u jkhemrnb h npc`mhg`vhi;
  - Dnqr`bj` rnb`p`;
 

Rek: .044~  -503~35-81
Om-Or. 9.30 - 19.00
Qa-Bq.  On dncnbnpemmnqrh



= = = = =


guljli
nbblaot

zqhbq
cgawf

kxqbapq
cqtxa



Re: Zend Framework & pear-PHPUnit2 on OpenBSD

2010-06-30 Thread Fred Crowson
On 30 June 2010 08:53, Stuart Henderson  wrote:
>
> Talk to the port's maintainer.
>
>

ok, will do thanks.

Fred



Re: Which netbook for OpenBSD

2010-06-30 Thread Tomas Bodzar
Hmm I found that there is Broadcom WiFi which is not supported in
OpenBSD as stated in FAQ. It will be hard to find something as I want
functional everything including camera :D I don't know why they don't
use just UVC cameras.

On Wed, Jun 30, 2010 at 12:47 PM,   wrote:
> Tomas Bodzar  wrote:
>
>> Someone knows if this machine
>> http://shop.lenovo.com/us/notebooks/ideapad/s-series/s12 B (on the left
>> side with VIA stuff) is running with OpenBSD? Can't find anything in
>> marc.info or via Google. Just bunch of Linux sources. Anyway HW looks
>> somewhat ok.
>
> 1. It has a resolution of 1280x800, which might be a way too much for an
> openchrome X.org driver.
>
> 2. This might be somehow helpful:
>
http://old.nabble.com/Hardware-compatibility-question-:-VIA-VX-800-chipset-td
23779124.html
>
> 3. When I was using bcm driver for the last time, it was slow and buggy.
But
> that was on 4.4 release.
>
> 4. VIA Nano isn't much popular. While some improvements in support of this
> platform took place in 4.7, You'll have to keep in mind that not so many
> developpers own the hardware like Yours.
>
> --
> Dmitrij D. Czarkoff
>



--
bIf youbre good at something, never do it for free.bB bThe Joker



Question about VLAN interfaces and SNMP Stats

2010-06-30 Thread rhsv6
Hi,

Probably a very silly question, but I just need to confirm my 
understanding.

When pulling stats off a VLAN interface, do the in/out figures 
reflect the traffic values flowing to/from the attached subnet (my 
understanding), or do they also include traffic figures flowing 
to/from other interfaces on the BSD box.

To illustrate, let's say I've got a BSD router with an ISP VLAN 
interface.

Do the in/out stats on that interface only correlate to traffic 
to/from the ISP or will they also include traffic originating from 
other interfaces on the BSD box that have traffic flows going 
to/from the VLAN interface.

As I said, probably very easy question, but I would like to be sure 
!

Thanks



Re: Which netbook for OpenBSD

2010-06-30 Thread czarkoff
Tomas Bodzar  wrote:

> Someone knows if this machine
> http://shop.lenovo.com/us/notebooks/ideapad/s-series/s12  (on the left
> side with VIA stuff) is running with OpenBSD? Can't find anything in
> marc.info or via Google. Just bunch of Linux sources. Anyway HW looks
> somewhat ok.

1. It has a resolution of 1280x800, which might be a way too much for an
openchrome X.org driver.

2. This might be somehow helpful:
http://old.nabble.com/Hardware-compatibility-question-:-VIA-VX-800-chipset-td23779124.html

3. When I was using bcm driver for the last time, it was slow and buggy. But
that was on 4.4 release.

4. VIA Nano isn't much popular. While some improvements in support of this
platform took place in 4.7, You'll have to keep in mind that not so many
developpers own the hardware like Yours.

--
Dmitrij D. Czarkoff



Patch for mtree (the "-X" flag)

2010-06-30 Thread Teemu Rinta-aho
Hi all,

I need the "-X" flag for mtree on OpenBSD to exclude certain paths.
So, I ported the functionality from NetBSD. Seems to work for me.

I was just thinking, whether anyone else cares about such patch, and
what is the process if I want to propose some new (/ported) code
to OpenBSD.

Or, should I create an optional package (mtreex?), or, should
I just keep this to myself?

BR,
Teemu



pfctl -a anchorname -F all does not clear states AND pfctl -anchorname -F states clears all states even ones not created by rules in "anchorname"

2010-06-30 Thread Siju George
Hi,

I have been playing with anchors lately and I am missing some thing.

The machine is "4.7 GENERIC#558 i386"

The pf.conf is



int_if="vr0"
ext_ifA="sk0"
ext_ifT="vr1"

set loginterface sk0
set skip on lo

match out on $ext_ifA inet from $int_if:network \
to any nat-to ($ext_ifA)
match out on $ext_ifT inet from $int_if:network \
to any nat-to ($ext_ifT)

block in log (all)

anchor atelonly
load anchor atelonly from "/etc/pf-confs/anchor-atelonly"

anchor tataonly
anchor atelandtata

pass in log (all, to pflog1) on $int_if

=

Now the firewall is running on these rules



# pfctl -sr
match out on sk0 inet from 172.16.0.0/12 to any nat-to (sk0) round-robin
match out on vr1 inet from 172.16.0.0/12 to any nat-to (vr1) round-robin
block drop in log (all) all
anchor "atelonly" all
anchor "tataonly" all
anchor "atelandtata" all
pass in log (all, to pflog1) on vr0 all flags S/SA keep state

# pfctl -sA
  atelandtata
  atelonly
  tataonly
# pfctl -a atelandtata -sr
# pfctl -a tataonly -sr
# pfctl -a atelonly -sr
pass out log (all, to pflog2) quick on sk0 all flags S/SA keep state
#

==

I have the following pflog interfaces

===

pflog1: flags=41 mtu 33200
priority: 0
groups: pflog
pflog2: flags=141 mtu 33200
priority: 0
groups: pflog
pflog3: flags=141 mtu 33200
priority: 0
groups: pflog
pflog4: flags=41 mtu 33200
priority: 0
groups: pflog
pflog0: flags=141 mtu 33200
priority: 0
groups: pflog

=

in pflog2 I can see the traffic passing out through sk0 to the
internet. Fine :-)

now I run the following commands to stop traffic to the internet
through sk0 and use the second internet connection instead.
So my idea is to

1) change the default route to that of the second internet connection by

#route change -inet default 1ss.2ee.1ff.1

2) Load the ahcnor tataonly with rules from


# cat /etc/pf-confs/anchor-tataonly

ext_ifT="vr1"

pass out log (all, to pflog3) quick on $ext_ifT
=

by

#pfctl -a tataonly -f "/etc/pf-confs/anchor-tataonly"

3) clear rules and states created by them from anchor "atelonly" by

#pfctl -a atelonly -F all

Now  I execute the following commands and these are the outputs

===
# route change -inet default 121.247.145.1
change net default: gateway 121.247.145.1
# pfctl -a tataonly -f "/etc/pf-confs/anchor-tataonly"
# pfctl -a atelonly -F all
rules cleared
0 tables deleted.
#
==

Now according to the pfctl man page

-F allFlush all of the above.   ( i.e including states )

 -a anchor
 Apply flags -f, -F, and -s only to the rules in the specified
 anchor.

So as said the rules in the anchor atelonly is flushed

=

# pfctl -sr
match out on sk0 inet from 172.16.0.0/12 to any nat-to (sk0) round-robin
match out on vr1 inet from 172.16.0.0/12 to any nat-to (vr1) round-robin
block drop in log (all) all
anchor "atelonly" all
anchor "tataonly" all
anchor "atelandtata" all
pass in log (all, to pflog1) on vr0 all flags S/SA keep state
# pfctl -a atelonly -sr
# pfctl -a tataonly -sr
pass out log (all, to pflog3) quick on vr1 all flags S/SA keep state
#
=

and I can see traffic going out to the internet through vr1 on pflog3

but there is still traffic going out through the insternet through sk0
which can be seen in pflog2.

So I guess the states made by those rules in the anchor "atelonly"
were not cleared?

How do I clear only those states?

I now tried

doing a

## pfctl -a atelonly -F states
1469 states cleared

before doing

# pfctl -a atelonly -F all

then I lose my ssh connection with the firewall :-(
Is it because it clears all the states instead on the ones created by
"-a atelonly" ?

How do I flush just the states created by an anchor ruleset when I flush them?

anchor "atelandtata" holds nothing now but if I do a

#pfctl -a atelandtata -ss

it shows all the states.

but the man page says

  -a anchor
 Apply flags -f, -F, and -s only to the rules in the specified
 anchor.

Am I misunderstanding the wordings by some means?
Could some one please explain?

Thanks :-)

--Siju



Re: Which netbook for OpenBSD

2010-06-30 Thread Tomas Bodzar
Someone knows if this machine
http://shop.lenovo.com/us/notebooks/ideapad/s-series/s12  (on the left
side with VIA stuff) is running with OpenBSD? Can't find anything in
marc.info or via Google. Just bunch of Linux sources. Anyway HW looks
somewhat ok.

On Tue, Jun 29, 2010 at 4:29 AM, Anthony J. Bentley
 wrote:
>> b...@brodewicz.pl wrote:
>> > Hi.
>> >
>> > I'm planning to buy a netbook and I wonder which one is the best choice
for
>> > running OpenBSD?
>> > Any sugestion?
>> >
>> > Thanks
>>
>> I have a MSI Wind U100; works nicely (only the integrated webcam is not
>> supported).
>>
>> When buying a netbook be sure to try it out in a shop before, because
>> some have very small keys. IMHO the U100 is just right ...
>
> Do be careful and don't assume that different models will work. For
> example, I have a MSI Wind U123, whose wireless (realtek rtl8187se)
> does _not_ work. Trying out a physical machine is best.
>
> Another bad part you should avoid but is common in netbooks is Intel
> GMA500 graphics, which currently has no support. Doesn't even work on
> Linux without a (buggy, crashy) binary blob driver.
>
> OpenBSD 4.7-current (GENERIC.MP) #22: Thu Jun B 3 16:41:49 MDT 2010
> B  B dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
> cpu0: Intel(R) Atom(TM) CPU N280 @ 1.66GHz ("GenuineIntel" 686-class) 1.67
GHz
> cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,A
CPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,TM2,SSSE3,xTPR,PDCM
,MOVBE
> real mem B = 1062502400 (1013MB)
> avail mem = 1019363328 (972MB)
> mainbus0 at root
> bios0 at mainbus0: AT/286+ BIOS, date 02/08/08, SMBIOS rev. 2.4 @ 0x3f607010
(45 entries)
> bios0: vendor American Megatrends Inc. version "4.6.3" date 02/23/2009
> bios0: MICRO-STAR INTERNATIONAL CO., LTD MS-N033
> acpi0 at bios0: rev 2
> acpi0: tables DSDT FACP APIC SSDT SSDT SSDT
> acpi0: wakeup devices P0P2(S4) PEGP(S4) USB0(S1) USB1(S1) USB2(S1) USB3(S1)
EHCI(S1) MC97(S4) P0P1(S4) P0P4(S4) P0P5(S4) P0P6(S4) P0P7(S4) P0P8(S4)
P0P9(S4)
> acpitimer0 at acpi0: 3579545 Hz, 24 bits
> acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
> cpu0 at mainbus0: apid 0 (boot processor)
> cpu0: apic clock running at 166MHz
> cpu1 at mainbus0: apid 1 (application processor)
> cpu1: Intel(R) Atom(TM) CPU N280 @ 1.66GHz ("GenuineIntel" 686-class) 1.67
GHz
> cpu1:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,A
CPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,TM2,SSSE3,xTPR,PDCM
,MOVBE
> ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
> acpiprt0 at acpi0: bus 0 (PCI0)
> acpiprt1 at acpi0: bus -1 (P0P2)
> acpiprt2 at acpi0: bus 1 (P0P4)
> acpiprt3 at acpi0: bus -1 (P0P5)
> acpiprt4 at acpi0: bus 2 (P0P6)
> acpiprt5 at acpi0: bus -1 (P0P7)
> acpiprt6 at acpi0: bus -1 (P0P8)
> acpiprt7 at acpi0: bus -1 (P0P9)
> acpiec0 at acpi0
> acpicpu0 at acpi0: C3, C2, C1, PSS
> acpicpu1 at acpi0: C3, C2, C1, PSS
> acpitz0 at acpi0: critical temperature 100 degC
> acpiac0 at acpi0: AC unit online
> acpibat0 at acpi0: BAT1 model "MS-N033
> " serial
> B type LION
> B oem "MSI Corp.
> "
> acpibtn0 at acpi0: LID0
> acpibtn1 at acpi0: PWRB
> acpibtn2 at acpi0: SLPB
> acpivideo0 at acpi0: IGD_
> acpivout0 at acpivideo0: CRT_
> acpivout1 at acpivideo0: LCD_
> bios0: ROM list: 0xc/0xea00! 0xcf000/0x1000
> cpu0: Enhanced SpeedStep 1667 MHz: speeds: 1333, 1067, 800 MHz
> pci0 at mainbus0 bus 0: configuration mode 1 (bios)
> pchb0 at pci0 dev 0 function 0 "Intel 82945GME Host" rev 0x03
> vga1 at pci0 dev 2 function 0 "Intel 82945GME Video" rev 0x03
> wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
> wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
> intagp0 at vga1
> agp0 at intagp0: aperture at 0xc000, size 0x1000
> inteldrm0 at vga1: apic 2 int 16 (irq 11)
> drm0 at inteldrm0
> "Intel 82945GM Video" rev 0x03 at pci0 dev 2 function 1 not configured
> azalia0 at pci0 dev 27 function 0 "Intel 82801GB HD Audio" rev 0x02: apic 2
int 16 (irq 11)
> azalia0: codecs: Realtek ALC888
> audio0 at azalia0
> ppb0 at pci0 dev 28 function 0 "Intel 82801GB PCIE" rev 0x02: apic 2 int 16
(irq 11)
> pci1 at ppb0 bus 1
> re0 at pci1 dev 0 function 0 "Realtek 8101E" rev 0x02: RTL8102E (0x3480),
apic 2 int 16 (irq 11), address 00:24:21:62:f5:5d
> rlphy0 at re0 phy 7: RTL8201L 10/100 PHY, rev. 1
> ppb1 at pci0 dev 28 function 2 "Intel 82801GB PCIE" rev 0x02: apic 2 int 18
(irq 10)
> pci2 at ppb1 bus 2
> "Realtek 8187SE" rev 0x22 at pci2 dev 0 function 0 not configured
> uhci0 at pci0 dev 29 function 0 "Intel 82801GB USB" rev 0x02: apic 2 int 23
(irq 5)
> uhci1 at pci0 dev 29 function 1 "Intel 82801GB USB" rev 0x02: apic 2 int 19
(irq 3)
> uhci2 at pci0 dev 29 function 2 "Intel 82801GB USB" rev 0x02: apic 2 int 18
(irq 10)
> uhci3 at pci0 dev 29 function 3 "Intel 82801GB USB" rev 0x02: apic 2 int 16
(irq 11)
> ehci0 at pci0 dev 29 function 7 "Intel 82801GB USB" rev 0x02: apic 2 int 23
(irq 5)
> usb0 at ehci0: 

Re: OpenBSD Makes Other Things Better (Advocacy)

2010-06-30 Thread Stuart Henderson
On 2010-06-26, Jean-Francois  wrote:
> Le jeudi 24 juin 2010 00:56:09, Daniel Melameth a icrit :
>> While most of us already know how the subject rings true, I still found the
>> following from REBOL's CTO's public blog post interesting nonetheless (I've
>> never used REBOL):
>>
>> "This was an interesting build, because it exposed a unique bug due to the
>> more secure methods of memory allocation on OpenBSD. Debugging it took some
>> time but was worth the effort. The bug has now been fixed and will be part
>> of the A100 releases for all platforms."
>>
>> The minor blog post is available at http://www.rebol.net/r3blogs/0321.html.
>
> By the way, thanks a lot for higlighting this wonderful language. And it is
> very likely that I use it in the future for creating some utilities.

note that it's binary-only; the OpenBSD binary they provide is i386-only
and dynamically linked against OpenBSD 4.0 libraries...



Re: Zend Framework & pear-PHPUnit2 on OpenBSD

2010-06-30 Thread Stuart Henderson
In gmane.os.openbsd.misc, you wrote:
> Hi Misc@
>
> Is any one using PHPUnit for regression testing on OpenBSD?
>
> I'm successfully running the Zend Framework on OpenBSD 4.7 and
> would like to integrate PHPUnit for testing, I've installed the
> pear-PHPUnit2-2.1.6p1 package, but it doesn't seem to include the
> phpunit.php script - I'm sure I'm missing something obvious
>
> Any clues appreciated.
>
> thanks
>
> Fred
>
>

Talk to the port's maintainer.