anoncvs update ?

2010-12-29 Thread Indunil Jayasooriya
Hi list,


After downloading tree from anoncvs server, a few days later, I ran below 2
commands to update it.

# cd /usr/src  cvs -q up -rOPENBSD_4_8 -Pd


nothing returned. I think it is uptodate.

then, hit below command.

# cd /usr/ports  cvs -q up -rOPENBSD_4_8 -Pd

it returned below OUTPUT. Could you pls explain, what is P and What is U
displaying in front?

P net/tor/Makefile
U net/tor/distinfo
P textproc/libxml/Makefile
U textproc/libxml/patches/patch-xpath_c
P x11/dbus/Makefile
U x11/dbus/patches/patch-dbus_dbus-marshal-validate_c
U x11/dbus/patches/patch-dbus_dbus-marshal-validate_h
U x11/dbus/patches/patch-dbus_dbus-message-factory_c
U x11/dbus/patches/patch-doc_dbus-specification_xml


-- 
Thank you
Indunil Jayasooriya



anoncvs update ?

2010-12-29 Thread Vivien MOREAU
Wednesday 29 Dec 2010 ` 13:45 (+0530), Indunil Jayasooriya a icrit :

 Could you pls explain, what is P and What is U displaying in
 front?

Please read the cvs(1) manual. :-)

-- 
Sent from my iMug.



Re: anoncvs update ?

2010-12-29 Thread Indunil Jayasooriya
  Could you pls explain, what is P and What is U displaying in
  front?



 Please read the cvs(1) manual. :-)


Yes, thank you very much. I am reading. I fount what I want. Pls see below.
I can go ahead. Thanks once again for your support.


taken from the OUTPUT of  *man 1 cvs*


update keeps you informed of its progress by printing a line for
  each file, prefaced with one of the characters to indicate the
  status of the file:



  U fileThe file has been brought up to date with respect to the
 repository.  This is done for any file that exists in the
 repository but not in your source, and for files that you
 haven't changed but are not the most recent versions
 available in the repository.

   P fileAs but instead of transferring the entire file a patch
 containing the required changes were sent.

   A fileThe file has been added to your private copy of the
sources,
 and will be added to the source repository when you run on
 the file.  This is a reminder to you that the file needs to
 be committed.

   R fileThe file has been removed from your private copy of the
 sources, and will be removed from the source repository
when
 you run on the file.  This is a reminder to you that the
file
 needs to be committed.

   M fileThe file has been modified in your working directory.  can
 indicate one of two states for a file you're working on:
 either there were no modifications to the same file in the
 repository, so that your file remains as you last saw it;
or
 there were modifications in the repository as well as in
your
 copy, but they were merged successfully, without conflict,
in
 your working directory.

C fileA conflict has been detected while trying to merge your
 changes to file with changes from the source repository.
 file (the copy in your working directory) is now the result
 of merging the two versions; an unmodified copy of your
file
 is also in your working directory, with the name
 `.#file.version', where version is the revision that your
 modified file started from.  (Note that some systems
 automatically purge files that begin with  if they have not
 been accessed for a few days.  If you intend to keep a copy
 of your original file, it is a very good idea to rename
it.)

   ? filefile is in your working directory, but does not correspond
to
 anything in the source repository, and is not in the list
of
 files for cvs to ignore (see the description of the -I
 option).






-- 
Thank you
Indunil Jayasooriya



Tea is the ties of friendship

2010-12-29 Thread tzydtzwa
One day, wandering in Chinatown, suddenly listen to melodious sound, follow 
it,found it's from a Chinese teahouse, curious I enter and look around, and the 
dignified gril inside playing,environment of elegant,noble,primitive simplicity 
deeply attracted me,since that in spare time I like to sipping tea and reading 
in there,and browse their website www.newpastoral.com,I often forget to go home 
because waiter exquisite tea art and humanized service . Spring autumn comes 
after,tea made up my love-fate with the girl playing in the Chinese 
teahouse,also fostered me tea habit of daily will, now we have 50s and still I 
healthy in body,clear thinking, charming style.



spamd in a cloud setup?

2010-12-29 Thread Girish Venkatachalam
Dear folks,

OpenBSD's spamd is a network level spam filter and consequently we
need the MX records to point to spamd
before it hits our mail server thereby achieving bandwidth protection
as well as spam protection.

This is really fantastic.

Now the issue is this.

Since MX records do not understand TCP port numbers, we cannot have
different MX records point to different
 SMTP servers on the same IP address.

The reason this is a problem is that assume that I have to run
spamd(8) against 100 domains. Do I need to have
100 different IP addresses in my cloud?

I hope the question makes sense. Sorry for sounding confusing.

-Girish

-- 
Gayatri Hitech

http://gayatri-hitech.com
gir...@gayatri-hitech.com



Re: spamd in a cloud setup?

2010-12-29 Thread Gregory Edigarov
On Wed, 29 Dec 2010 16:22:33 +0530
Girish Venkatachalam girishvenkatacha...@gmail.com wrote:

 Dear folks,
 
 OpenBSD's spamd is a network level spam filter and consequently we
 need the MX records to point to spamd
 before it hits our mail server thereby achieving bandwidth protection
 as well as spam protection.
 
 This is really fantastic.
 
 Now the issue is this.
 
 Since MX records do not understand TCP port numbers, we cannot have
 different MX records point to different
  SMTP servers on the same IP address.
 
 The reason this is a problem is that assume that I have to run
 spamd(8) against 100 domains. Do I need to have
 100 different IP addresses in my cloud?
 
 I hope the question makes sense. Sorry for sounding confusing.

don't see the problem,
setup your mx records for all your zones to something like:
IN  MX 10   mail
mailIN  A 192.168.0.1

then make spamd  listen on the address, and you're done. 

-- 
With best regards,
Gregory Edigarov



Re: spamd in a cloud setup?

2010-12-29 Thread SJP Lists
On 29 December 2010 22:35, Gregory Edigarov g...@bestnet.kharkov.ua wrote:
 On Wed, 29 Dec 2010 16:22:33 +0530
 Girish Venkatachalam girishvenkatacha...@gmail.com wrote:

 Dear folks,

 OpenBSD's spamd is a network level spam filter and consequently we
 need the MX records to point to spamd
 before it hits our mail server thereby achieving bandwidth protection
 as well as spam protection.

 This is really fantastic.

 Now the issue is this.

 Since MX records do not understand TCP port numbers, we cannot have
 different MX records point to different
  SMTP servers on the same IP address.

 The reason this is a problem is that assume that I have to run
 spamd(8) against 100 domains. Do I need to have
 100 different IP addresses in my cloud?

 I hope the question makes sense. Sorry for sounding confusing.

 don't see the problem,
 setup your mx records for all your zones to something like:
IN  MX 10   mail
 mailIN  A 192.168.0.1

 then make spamd  listen on the address, and you're done.

 --
 With best regards,
Gregory Edigarov

This raises the PTR problem.

Only one of those domains is going to have records that match forward
and reverse?  If not, some anti-SPAM gateways will drop.


Shane



Re: spamd in a cloud setup?

2010-12-29 Thread SJP Lists
On 29 December 2010 22:47, SJP Lists sjp.li...@flashbsd.net wrote:
 On 29 December 2010 22:35, Gregory Edigarov g...@bestnet.kharkov.ua
wrote:
 On Wed, 29 Dec 2010 16:22:33 +0530
 Girish Venkatachalam girishvenkatacha...@gmail.com wrote:

 Dear folks,

 OpenBSD's spamd is a network level spam filter and consequently we
 need the MX records to point to spamd
 before it hits our mail server thereby achieving bandwidth protection
 as well as spam protection.

 This is really fantastic.

 Now the issue is this.

 Since MX records do not understand TCP port numbers, we cannot have
 different MX records point to different
  SMTP servers on the same IP address.

 The reason this is a problem is that assume that I have to run
 spamd(8) against 100 domains. Do I need to have
 100 different IP addresses in my cloud?

 I hope the question makes sense. Sorry for sounding confusing.

 don't see the problem,
 setup your mx records for all your zones to something like:
IN  MX 10   mail
 mailIN  A 192.168.0.1

 then make spamd  listen on the address, and you're done.

 --
 With best regards,
Gregory Edigarov

 This raises the PTR problem.

 Only one of those domains is going to have records that match forward
 and reverse?  If not, some anti-SPAM gateways will drop.

Sorry, what I meant to say, is If so, some anti-SPAM gateways will
drop connections that don't match forward and reverse.



Re: spamd in a cloud setup?

2010-12-29 Thread Paul de Weerd
On Wed, Dec 29, 2010 at 10:47:11PM +1100, SJP Lists wrote:
| This raises the PTR problem.
| 
| Only one of those domains is going to have records that match forward
| and reverse?  If not, some anti-SPAM gateways will drop.

How so ?

a.example.com.  IN  MX  10  mx.example.com.
b.example.com.  IN  MX  10  mx.example.com.
c.example.com.  IN  MX  10  mx.example.com.
d.example.com.  IN  MX  10  mx.example.com.
mx.example.com. IN  A   192.0.2.1
mx.example.com. IN  2001:db8::1
1.2.0.192.in-addr.arpa. IN  PTR mx.example.com.
1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.   
IN  PTR mx.example.com.

Why does your MX have to live in the same zone as what it's MX'ing
for ?

Paul 'WEiRD' de Weerd

-- 
[++-]+++.+++[---].+++[+
+++-].++[-]+.--.[-]
 http://www.weirdnet.nl/ 



Re: spamd in a cloud setup?

2010-12-29 Thread Peter N. M. Hansteen
Girish Venkatachalam girishvenkatacha...@gmail.com writes:

 Since MX records do not understand TCP port numbers, we cannot have
 different MX records point to different
  SMTP servers on the same IP address.

 The reason this is a problem is that assume that I have to run
 spamd(8) against 100 domains. Do I need to have
 100 different IP addresses in my cloud?

You've tried to solve the lack of IP addresses problem by running SMTP
servers on alternative ports on the same host.  If shortage of IP
addresses is the hardest problem to solve, it's probably easier to
make a working setup if you go for virtual domains (search for
$yourMTA virtual domains).

That said, running spamd in front of hundreds of different boxes all
doing their own SMTP stuff is very doable too, if you have enough
routable IP addresses.

- Peter
-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
Remember to set the evil bit on all malicious network traffic
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.



Re: spamd in a cloud setup?

2010-12-29 Thread Peter N. M. Hansteen
SJP Lists sjp.li...@flashbsd.net writes:

 Only one of those domains is going to have records that match forward
 and reverse?  If not, some anti-SPAM gateways will drop.

That would only be much of a problem if the outbound mail server is
the same as the MX.  The two do not need to be identical.  Then again,
geeks like us are the only ones who ever do a

$ dig domain.com mx

and there's no real embarrasment in having your domain's mail handled
elsewhere.  I'd take several domains with identical MX records any day
over outgoing SMTP without proper reverse lookup.

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
Remember to set the evil bit on all malicious network traffic
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.



Speciale epifania 2011

2010-12-29 Thread bayrit bijoux
BUONO OMAGGIO
VALIDO PER RICEVERE UNA COPPIA DI ORECCHINI IN BRONZO.

PER RICEVERE QUESTO OMAGGIO BASTA REGISTRARVI
NEL NOSTRO SITO WWW.BAYRIT.COM
SARA' NOSTRA CURA SPEDIRE L'OMAGGIO ALL'INDIRIZZO INDICATO IN FASE DI
REGISTRAZIONE.
IL PRESENTE BUONO NON E' LEGATO A NESSUN TIPO DI ACQUISTO VELATO E/O DI
COMODO.
IL MODELLO DEGLI ORECCHINI SARA' SPEDITO CASUALMENTE TRA L'ASSORTIMENTO
DESTINATO A QUESTA PROMOZIONE.

BAYRIT BIJOUX BIGIOTTERIE
LA SEMPLICITA' DEL PARTICOLARE
VIA SPAGNA 19 - PALERMO
i...@bayrit.com  www.bayrit.com




Le informazioni contenute nella presente comunicazione e i relativi allegati
possono essere riservate e sono, comunque, destinate esclusivamente alle
persone o alla Societ` sopraindicati. La diffusione, distribuzione e
copiatura del documento trasmesso da parte di qualsiasi soggetto diversi dal
destinatario h proibita, sia ai sensi dell'art. 616 c.p., che ai sensi del
D. Lgs. n. 196/2003. Se avete ricevuto questo messaggio per errore, vi
preghiamo di distruggerlo e di informarci immediatamente
 inviando un messaggio all'indirizzo e-mail: i...@bayrit.com


Ti ricordiamo che il tuo indirizzo mail h stato iscritto volonatariamente a
questa newsletter,
oppure ricavato da elenchi di pubblico dominio, comunque se non ti interessa
piy ricevere
queste mail e manda una mail con oggetto Unsubscribe a i...@bayrit.com
oppure rispondi semplicemente a questa mail con oggetto Unsubscribe



Re: spamd in a cloud setup?

2010-12-29 Thread Henning Brauer
* Girish Venkatachalam girishvenkatacha...@gmail.com [2010-12-29 11:52]:
 Since MX records do not understand TCP port numbers, we cannot have
 different MX records point to different
  SMTP servers on the same IP address.
 
 The reason this is a problem is that assume that I have to run
 spamd(8) against 100 domains. Do I need to have
 100 different IP addresses in my cloud?

either you're not telling us something or have a misunderstanding or i
dunno. why do the mx records for different domains have to be different?

domain1 MX 10 a.mx.isp.com
domain1 MX 20 b.mx.isp.com
domain1 MX 30 c.mx.isp.com
domain2 MX 10 a.mx.isp.com
domain2 MX 20 b.mx.isp.com
domain2 MX 30 c.mx.isp.com
domain3 MX 10 a.mx.isp.com
domain3 MX 20 b.mx.isp.com
domain3 MX 30 c.mx.isp.com

i run mailservers for hundreds or thousands (too lazy to check atm)
domains that way.

-- 
Henning Brauer, h...@bsws.de, henn...@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting



confusion over getrusage(2)

2010-12-29 Thread patsy
Hello list,

I have written a program and would like to trace its memory usage as it runs 
and output the data to a file for easy logging/comparison/graphing.

getrusage(2) looks as though it would be appropriate for this. Unfortunately I 
seem to be misunderstanding how it should be used, since I would not expect the 
program below to output five 0's, yet it does on 4.8-release (i386) and a 
slightly out of date 4.8-current (amd64).

Could somebody give me a hint as to where my misunderstanding lies or how else 
I might track the memory usage of my program?

Many thanks,
Patsy



#include stdio.h
#include sys/time.h
#include sys/resource.h

int main()
{
struct rusage val;
int retval;
long buf[1];

retval = getrusage(RUSAGE_SELF, val);

printf(retval = %d\n, retval);
printf(mem = %ld\n, val.ru_maxrss);
printf(mem = %ld\n, val.ru_ixrss);
printf(mem = %ld\n, val.ru_idrss);
printf(mem = %ld\n, val.ru_isrss);

return 0;
}



Re: confusion over getrusage(2)

2010-12-29 Thread Michael Grigoni
On 29 Dec 2010 at 14:25, patsy wrote:

 Hello list,
 
 I have written a program and would like to trace its memory usage as it runs 
 and output the data to a file for easy logging/comparison/graphing.
 
 getrusage(2) looks as though it would be appropriate for this. Unfortunately 
 I seem to be misunderstanding how it should be used, since I would not expect 
 the program below to output five 0's, yet it does on 4.8-release (i386) and a 
 slightly out of date 4.8-current (amd64).
 
 Could somebody give me a hint as to where my misunderstanding lies or how 
 else I might track the memory usage of my program?
 
 Many thanks,
 Patsy
 
 
 
 #include stdio.h
 #include sys/time.h
 #include sys/resource.h
 
 int main()
 {
   struct rusage val;
   int retval;
   long buf[1];
 
   retval = getrusage(RUSAGE_SELF, val);
 
   printf(retval = %d\n, retval);
   printf(mem = %ld\n, val.ru_maxrss);
   printf(mem = %ld\n, val.ru_ixrss);
   printf(mem = %ld\n, val.ru_idrss);
   printf(mem = %ld\n, val.ru_isrss);
 
   return 0;
 }
 

Got my attention -- discovered a missing declaration in 
/usr/include/sys/resource.h
on my SVR4 system -- added it from Solaris, compiled your program, an on SVR4
I get:

# ./rusage
retval = 0
mem = 0
mem = 0
mem = 0
mem = 0

Anyway, I appreciate discovering the omission for the structure declaration in 
the
header file (not obsd however)

Michael



what kind of virtualization is available on OpenBSD?

2010-12-29 Thread S Mathias
If i'm using OpenBSD as Desktop OS, what kind of virtualization solutions do i 
have?

Can anyone point to some howtos/docs regarding it? [for a beginner :\]



Does anybody know a PeerGuardian like app?

2010-12-29 Thread S Mathias
Are there any programs blocking ip, and has frequently updated lists, like the 
peerguardian on windows?

sorry for the question, but i looking for this kind of application :O

Thank you, and a happy christmas!



Re: acpi woes Gateway LT31

2010-12-29 Thread patrick keshishian
On Tue, Dec 28, 2010 at 6:47 PM, Mike Larkin mlar...@azathoth.net wrote:
 On Tue, Dec 28, 2010 at 06:42:12PM -0800, Mike Larkin wrote:
 On Mon, Dec 27, 2010 at 12:18:56PM -0800, patrick keshishian wrote:
  Hi,
 
  I am having a few issues with this laptop including not being able to
  make it sleep/suspend and/or wake up. Who are the right (interested)
  people I should/can send acpidump to? Anything else I should include?
 
  zzz will seemingly attempt to suspend the box. But it doesn't fully
  finish (I assume) leaving the display screen on, but at this point the
  box is hung. Can't ssh to it or ping it. I think caps-lock will toggle
  on/off the caps-lock light, but nothing else responds. Only choice is
  to hold down the power button for 4 seconds for a hard restart.

 Edit sys/dev/acpi.c, search for pci_dopm. Change the assignment from
 1 to 0 and rebuild your kernel.


 er. That was supposed to read /sys/dev/acpi/acpi.c

That seems to have done the trick! So what does this mean? I now see
your check-in comment (dev/pci/ppb.c -r1.46), but question that comes
to mind is whether this variable should be toggle-able at run time?

Thanks,
--patrick






 -ml

 
  Also, the built-in weefee card will hang the box on `ifconfig athn0
scan`.
 
  Thanks,
  --patrick
 
 
 
  OpenBSD 4.8-current (GENERIC) #379: Tue Dec 21 19:17:45 MST 2010
  dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC
  real mem = 1876754432 (1789MB)
  avail mem = 1812852736 (1728MB)
  mainbus0 at root
  bios0 at mainbus0: SMBIOS rev. 2.4 @ 0xf10d0 (17 entries)
  bios0: vendor Phoenix Technologies LTD version v1.3201 date 06/18/2009
  bios0: Gateway LT31
  acpi0 at bios0: rev 2
  acpi0: sleep states S0 S3 S4 S5
  acpi0: tables DSDT FACP APIC MCFG HPET BOOT SLIC
  acpi0: wakeup devices PB5_(S5) OHC1(S3) OHC2(S3) EHCI(S3) HDAU(S3)
  acpitimer0 at acpi0: 3579545 Hz, 32 bits
  acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
  cpu0 at mainbus0: apid 0 (boot processor)
  cpu0: AMD Athlon(tm) Processor L110, 1197.21 MHz
  cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS
H,MMX,FXSR,SSE,SSE2,SSE3,CX16,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW
  cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB
  64b/line 16-way L2 cache
  cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully
associative
  cpu0: DTLB 32 4KB entries fully associative, 8 4MB entries fully
associative
  cpu0: apic clock running at 199MHz
  ioapic0 at mainbus0: apid 1 pa 0xfec0, version 21, 24 pins
  acpihpet0 at acpi0: 14318180 Hz
  acpiprt0 at acpi0: bus 0 (PCI0)
  acpiprt1 at acpi0: bus -1 (PB3_)
  acpiprt2 at acpi0: bus -1 (PB4_)
  acpiprt3 at acpi0: bus 3 (PB5_)
  acpiprt4 at acpi0: bus 4 (PB6_)
  acpiprt5 at acpi0: bus -1 (PB7_)
  acpiprt6 at acpi0: bus 9 (P2P_)
  acpiprt7 at acpi0: bus 1 (AGP_)
  acpiec0 at acpi0
  acpicpu0 at acpi0: C3, C2
  acpitz0 at acpi0: critical temperature 100 degC
  acpiac0 at acpi0: AC unit offline
  acpibat0 at acpi0: BAT1 model UM09B44 serial 210 type LION oem SONY
  acpibtn0 at acpi0: LID_
  acpibtn1 at acpi0: SLPB
  acpibtn2 at acpi0: PWRB
  acpivideo0 at acpi0: VGA_
  acpivout0 at acpivideo0: LCD_
  acpivout1 at acpivideo0: CRT1
  acpivout2 at acpivideo0: TV__
  acpivout3 at acpivideo0: DFP1
  pci0 at mainbus0 bus 0
  pchb0 at pci0 dev 0 function 0 ATI RS690 Host rev 0x00
  ppb0 at pci0 dev 1 function 0 ATI RS690 PCIE rev 0x00
  pci1 at ppb0 bus 1
  vga1 at pci1 dev 5 function 0 ATI Radeon X1250 IGP rev 0x00
  wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
  wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
  ppb1 at pci0 dev 5 function 0 ATI RS690 PCIE rev 0x00
  pci2 at ppb1 bus 3
  re0 at pci2 dev 0 function 0 Realtek 8101E rev 0x02: RTL8102EL
  (0x2480), apic 1 int 17 (irq 5), address 00:23:8b:ef:3a:a7
  rlphy0 at re0 phy 7: RTL8201L 10/100 PHY, rev. 1
  ppb2 at pci0 dev 6 function 0 ATI RS690 PCIE rev 0x00
  pci3 at ppb2 bus 4
  athn0 at pci3 dev 0 function 0 Atheros AR9285 rev 0x01: apic 1 int
  18 (irq 11), address 00:26:5e:0f:bc:3a
  athn0: AR9285 rev 2 (1T1R), ROM rev 13
  ahci0 at pci0 dev 18 function 0 ATI SB600 SATA rev 0x00: apic 1 int
  22 (irq 11), AHCI 1.1
  scsibus0 at ahci0: 32 targets
  sd0 at scsibus0 targ 0 lun 0: ATA, TOSHIBA MK2555GS, FG00 SCSI3
0/direct fixed
  sd0: 238475MB, 512 bytes/sec, 488397168 sec total
  ohci0 at pci0 dev 19 function 0 ATI SB600 USB rev 0x00: apic 1 int
  16 (irq 10), version 1.0, legacy support
  ohci1 at pci0 dev 19 function 1 ATI SB600 USB rev 0x00: apic 1 int
  17 (irq 5), version 1.0, legacy support
  ohci2 at pci0 dev 19 function 3 ATI SB600 USB rev 0x00: apic 1 int
  17 (irq 5), version 1.0, legacy support
  ohci3 at pci0 dev 19 function 4 ATI SB600 USB rev 0x00: apic 1 int
  18 (irq 11), version 1.0, legacy support
  ehci0 at pci0 dev 19 function 5 ATI SB600 USB2 rev 0x00: apic 1 int
  19 (irq 11)
  usb0 at ehci0: USB revision 2.0
  uhub0 at usb0 ATI EHCI root hub rev 2.00/1.00 addr 1
  piixpm0 

Re: what kind of virtualization is available on OpenBSD?

2010-12-29 Thread Jiri B.
On Wed, Dec 29, 2010 at 07:48:24AM -0800, S Mathias wrote:
If i'm using OpenBSD as Desktop OS, what kind of virtualization solutions do i 
have?

Can anyone point to some howtos/docs regarding it? [for a beginner :\]

You forgot to make your homework - check /usr/ports/emulators.

jirib



Re: confusion over getrusage(2)

2010-12-29 Thread Philip Guenther
On Wed, Dec 29, 2010 at 6:25 AM, patsy open...@ethernull.org wrote:
 I have written a program and would like to trace its memory usage as it runs
and output the data to a file for easy logging/comparison/graphing.

 getrusage(2) looks as though it would be appropriate for this. Unfortunately
I seem to be misunderstanding how it should be used, since I would not expect
the program below to output five 0's, yet it does on 4.8-release (i386) and a
slightly out of date 4.8-current (amd64).

 Could somebody give me a hint as to where my misunderstanding lies or how
else I might track the memory usage of my program?
...
printf(mem = %ld\n, val.ru_maxrss);
printf(mem = %ld\n, val.ru_ixrss);
printf(mem = %ld\n, val.ru_idrss);
printf(mem = %ld\n, val.ru_isrss);

Support for those four members of struct rusage, as well as the
ru_nswap member, is not implemented in OpenBSD.

You can get the RSS value reported by ps (and top, etc) by using
kvm_getproc2(), presumably with the KERN_PROC_PID op to request just
the process you care about; the RSS value is is in the p_vm_rssize
member.


Philip Guenther



Re: Does anybody know a PeerGuardian like app?

2010-12-29 Thread Joachim Schipper
On Wed, Dec 29, 2010 at 08:04:14AM -0800, S Mathias wrote:
 Are there any programs blocking ip, and has frequently updated lists,
 like the peerguardian on windows?
 
 sorry for the question, but i looking for this kind of application :O

Five minutes' research shows that PeerGuardian is mainly used to block
access to/from IP addresses believed to belong to anti-piracy groups.

http://en.wikipedia.org/wiki/PeerGuardian mentions that certain
programs, including apparently net/ktorrent, can use these lists
directly. Otherwise, the format looks simple enough - write a ten-line
program in your language of choice and stuff the addresses into a pf
table.

Let's be honest, though: public blacklists won't be terribly effective
in hiding the fact that you're pirating stuff.

Joachim

-- 
TFMotD: times (3) - process times
http://www.joachimschipper.nl/



security(8) setuid checks and space character in file name

2010-12-29 Thread MERIGHI Marcus
security(8) reports 
``/home/XXX/Daten/Edv/macs/macs-home/Library/Application''
as ``Setuid additions:'' where the real file name is
``/home/XXX/Daten/Edv/macs/macs-home/Library/Application Support/\
ProxyOnOff/proxyOnOffTool''

I have found the source of the wrong file name report to be in line 437
of /etc/security:
``egrep -av '^[bc]' $LIST | join -o $FIELDS2 -110 -210 -v2 \
/dev/null -  $TMP1'',

with join having space (and tab) characters as field separators and thus
ignoring after first space characters found in field 10.

No quick fix that comes to my mind, using -t to join(1) would help only
if the output of ls(1) in line 430 would be changed to not contain space
characters as output separators. 

Is this known and if yes, would a patch to the man page be accepted?

And no, I do not use space characters voluntarily in file names. It is a
back up of an osx system.



Re: acpi woes Gateway LT31

2010-12-29 Thread Mike Larkin
On Wed, Dec 29, 2010 at 09:33:40AM -0800, patrick keshishian wrote:
 On Tue, Dec 28, 2010 at 6:47 PM, Mike Larkin mlar...@azathoth.net wrote:
  On Tue, Dec 28, 2010 at 06:42:12PM -0800, Mike Larkin wrote:
  On Mon, Dec 27, 2010 at 12:18:56PM -0800, patrick keshishian wrote:
   Hi,
  
   I am having a few issues with this laptop including not being able to
   make it sleep/suspend and/or wake up. Who are the right (interested)
   people I should/can send acpidump to? Anything else I should include?
  
   zzz will seemingly attempt to suspend the box. But it doesn't fully
   finish (I assume) leaving the display screen on, but at this point the
   box is hung. Can't ssh to it or ping it. I think caps-lock will toggle
   on/off the caps-lock light, but nothing else responds. Only choice is
   to hold down the power button for 4 seconds for a hard restart.
 
  Edit sys/dev/acpi.c, search for pci_dopm. Change the assignment from
  1 to 0 and rebuild your kernel.
 
 
  er. That was supposed to read /sys/dev/acpi/acpi.c
 
 That seems to have done the trick! So what does this mean? I now see
 your check-in comment (dev/pci/ppb.c -r1.46), but question that comes
 to mind is whether this variable should be toggle-able at run time?
 

No, the right thing to do is not power off pci(4) and ppb(4) if they don't
support the feature. IIRC this machine has a ppb(4) that doesn't support
power management. I know what to do but have not yet written a diff.

-ml

 Thanks,
 --patrick
 
 
 
 
 
 
  -ml
 
  
   Also, the built-in weefee card will hang the box on `ifconfig athn0 
   scan`.
  
   Thanks,
   --patrick
  
  
  
   OpenBSD 4.8-current (GENERIC) #379: Tue Dec 21 19:17:45 MST 2010
   ? ? dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC
   real mem = 1876754432 (1789MB)
   avail mem = 1812852736 (1728MB)
   mainbus0 at root
   bios0 at mainbus0: SMBIOS rev. 2.4 @ 0xf10d0 (17 entries)
   bios0: vendor Phoenix Technologies LTD version v1.3201 date 06/18/2009
   bios0: Gateway LT31
   acpi0 at bios0: rev 2
   acpi0: sleep states S0 S3 S4 S5
   acpi0: tables DSDT FACP APIC MCFG HPET BOOT SLIC
   acpi0: wakeup devices PB5_(S5) OHC1(S3) OHC2(S3) EHCI(S3) HDAU(S3)
   acpitimer0 at acpi0: 3579545 Hz, 32 bits
   acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
   cpu0 at mainbus0: apid 0 (boot processor)
   cpu0: AMD Athlon(tm) Processor L110, 1197.21 MHz
   cpu0: 
   FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,SSE3,CX16,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW
   cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB
   64b/line 16-way L2 cache
   cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully 
   associative
   cpu0: DTLB 32 4KB entries fully associative, 8 4MB entries fully 
   associative
   cpu0: apic clock running at 199MHz
   ioapic0 at mainbus0: apid 1 pa 0xfec0, version 21, 24 pins
   acpihpet0 at acpi0: 14318180 Hz
   acpiprt0 at acpi0: bus 0 (PCI0)
   acpiprt1 at acpi0: bus -1 (PB3_)
   acpiprt2 at acpi0: bus -1 (PB4_)
   acpiprt3 at acpi0: bus 3 (PB5_)
   acpiprt4 at acpi0: bus 4 (PB6_)
   acpiprt5 at acpi0: bus -1 (PB7_)
   acpiprt6 at acpi0: bus 9 (P2P_)
   acpiprt7 at acpi0: bus 1 (AGP_)
   acpiec0 at acpi0
   acpicpu0 at acpi0: C3, C2
   acpitz0 at acpi0: critical temperature 100 degC
   acpiac0 at acpi0: AC unit offline
   acpibat0 at acpi0: BAT1 model UM09B44 serial 210 type LION oem SONY
   acpibtn0 at acpi0: LID_
   acpibtn1 at acpi0: SLPB
   acpibtn2 at acpi0: PWRB
   acpivideo0 at acpi0: VGA_
   acpivout0 at acpivideo0: LCD_
   acpivout1 at acpivideo0: CRT1
   acpivout2 at acpivideo0: TV__
   acpivout3 at acpivideo0: DFP1
   pci0 at mainbus0 bus 0
   pchb0 at pci0 dev 0 function 0 ATI RS690 Host rev 0x00
   ppb0 at pci0 dev 1 function 0 ATI RS690 PCIE rev 0x00
   pci1 at ppb0 bus 1
   vga1 at pci1 dev 5 function 0 ATI Radeon X1250 IGP rev 0x00
   wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
   wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
   ppb1 at pci0 dev 5 function 0 ATI RS690 PCIE rev 0x00
   pci2 at ppb1 bus 3
   re0 at pci2 dev 0 function 0 Realtek 8101E rev 0x02: RTL8102EL
   (0x2480), apic 1 int 17 (irq 5), address 00:23:8b:ef:3a:a7
   rlphy0 at re0 phy 7: RTL8201L 10/100 PHY, rev. 1
   ppb2 at pci0 dev 6 function 0 ATI RS690 PCIE rev 0x00
   pci3 at ppb2 bus 4
   athn0 at pci3 dev 0 function 0 Atheros AR9285 rev 0x01: apic 1 int
   18 (irq 11), address 00:26:5e:0f:bc:3a
   athn0: AR9285 rev 2 (1T1R), ROM rev 13
   ahci0 at pci0 dev 18 function 0 ATI SB600 SATA rev 0x00: apic 1 int
   22 (irq 11), AHCI 1.1
   scsibus0 at ahci0: 32 targets
   sd0 at scsibus0 targ 0 lun 0: ATA, TOSHIBA MK2555GS, FG00 SCSI3 
   0/direct fixed
   sd0: 238475MB, 512 bytes/sec, 488397168 sec total
   ohci0 at pci0 dev 19 function 0 ATI SB600 USB rev 0x00: apic 1 int
   16 (irq 10), version 1.0, legacy support
   ohci1 at pci0 dev 19 function 1 ATI SB600 USB rev 0x00: apic 1 int
   17 (irq 5), version 

Re: security(8) setuid checks and space character in file name

2010-12-29 Thread Ingo Schwarze
Hi Marcus,

MERIGHI Marcus wrote on Wed, Dec 29, 2010 at 07:43:08PM +0100:

 security(8) reports 
 ``/home/XXX/Daten/Edv/macs/macs-home/Library/Application''
 as ``Setuid additions:'' where the real file name is
 ``/home/XXX/Daten/Edv/macs/macs-home/Library/Application Support/\
 ProxyOnOff/proxyOnOffTool''
 
 I have found the source of the wrong file name report to be in line 437
 of /etc/security:
 ``egrep -av '^[bc]' $LIST | join -o $FIELDS2 -110 -210 -v2 \
 /dev/null -  $TMP1'',
 
 with join having space (and tab) characters as field separators and thus
 ignoring after first space characters found in field 10.

Hmm, i consider that a bug in security(8).

 No quick fix that comes to my mind, using -t to join(1) would help only
 if the output of ls(1) in line 430 would be changed to not contain space
 characters as output separators. 

That idea is not bad.
Maybe, one could use sed(1) or awk(1) to translate the first ten spaces
to null bytes before the join, then translate them back before output,
if needed.  Or something similar.

I should probably have a closer look.

 Is this known

It was news to me, at least.

 and if yes, would a patch to the man page be accepted?

Fixing bugs is better than documenting them, in particular in security(8).

 And no, I do not use space characters voluntarily in file names.
 It is a back up of an osx system.

You have mount(8)ed that file system -o nodev,noexec - right?
In that case, there is no point in running the suid checks on it.
Consider using SUIDSKIP as documented in security(8).

Yours,
  Ingo



Re: Does anybody know a PeerGuardian like app?

2010-12-29 Thread Jiri B.
On Wed, Dec 29, 2010 at 07:04:18PM +0100, Joachim Schipper wrote:
Five minutes' research shows that PeerGuardian is mainly used to block
access to/from IP addresses believed to belong to anti-piracy groups.

Any list with govs ip ranges sorted by countries? :)

jirib



Re: security(8) setuid checks and space character in file name

2010-12-29 Thread Ingo Schwarze
Ingo Schwarze wrote on Wed, Dec 29, 2010 at 08:37:16PM +0100:
 MERIGHI Marcus wrote on Wed, Dec 29, 2010 at 07:43:08PM +0100:
 
 security(8) reports 
 ``/home/XXX/Daten/Edv/macs/macs-home/Library/Application''
 as ``Setuid additions:'' where the real file name is
 ``/home/XXX/Daten/Edv/macs/macs-home/Library/Application Support/\
 ProxyOnOff/proxyOnOffTool''
 
 I have found the source of the wrong file name report to be in line 437
 of /etc/security:
 ``egrep -av '^[bc]' $LIST | join -o $FIELDS2 -110 -210 -v2 \
 /dev/null -  $TMP1'',
 
 with join having space (and tab) characters as field separators and thus
 ignoring after first space characters found in field 10.

 Hmm, i consider that a bug in security(8).
 
 No quick fix that comes to my mind, using -t to join(1) would help only
 if the output of ls(1) in line 430 would be changed to not contain space
 characters as output separators. 

 That idea is not bad.
 Maybe, one could use sed(1) or awk(1) to translate the first ten spaces
 to null bytes before the join, then translate them back before output,
 if needed.  Or something similar.

That didn't work.  It turned out the null byte can only be used as
a delimiter by utilities explicitly supporting it (like xargs(1)),
not by random utilities like join(1).  And any other replacement
runs a risk to be contained in file names as well.

 I should probably have a closer look.

I have posted a patch using another approach to tech@:

  http://marc.info/?l=openbsd-techm=129366420512212

It's not pretty, though.



Re: spamd in a cloud setup?

2010-12-29 Thread SJP Lists
On Wednesday, 29 December 2010, Paul de Weerd we...@weirdnet.nl wrote:
 On Wed, Dec 29, 2010 at 10:47:11PM +1100, SJP Lists wrote:
 | This raises the PTR problem.
 |
 | Only one of those domains is going to have records that match forward
 | and reverse?  If not, some anti-SPAM gateways will drop.

 How so ?

 a.example.com.  IN  MX  10  mx.example.com.
 b.example.com.  IN  MX  10  mx.example.com.
 c.example.com.  IN  MX  10  mx.example.com.
 d.example.com.  IN  MX  10  mx.example.com.
 mx.example.com. IN  A   192.0.2.1
 mx.example.com. IN  2001:db8::1
 1.2.0.192.in-addr.arpa. IN  PTR mx.example.com.
 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.  
IN  PTR mx.example.com.

 Why does your MX have to live in the same zone as what it's MX'ing
 for ?

 Paul 'WEiRD' de Weerd

 --
[++-]+++.+++[---].+++[+
 +++-].++[-]+.--.[-]
  http://www.weirdnet.nl/


Ah yes, true.  Spoke too soon!  Appologies!