Re: Most secure Operating-System?
Wide architecture support (x86, x64, mainframes) AFAIK it doesn't run on current mainframes. Only IBM's various OS's run on mainframes, as IBM has a corner on that mainframe market. Not true. Several Linux distros run and are supported on mainframes. Debian, SuSE, Fedora, RedHat etc. There was even a Slackware port. I consider that hardware abuse but it does work. Really none of the OS that run on desktops or servers can exploit what a mainframe is designed to do, it really doesn't make sense to use them. However a mainframe running VM with hundreds or thousands of Linux guests does make sense. It's green since it replaces many servers and uses less power and takes up less space.
Re: q
I found this computer in a city trash can here in the Great White North when I went to my current employer to apply for work. It was dirty and dusty, with no hard drive. I cleaned it up and although the on-board SATA wouldn't function, I hooked up an IDE disk and it's now running OpenBSD quite nicely. Yesterday I just installed a 6-port SATA 2 PCI Host Card w/ RAID and another couple of NICS. I'm composing a new pf.conf file for a new home network. I don't think I care to use the on-board VIA VT6105 RhineIII networking chip. I currently have a wireless home router, but I want to experiment with using OpenBSD for a gateway. I think I'm wanting to set up something along the lines of what's on pg. 43 of The Book of PF, by Hansteen. I'm also wondering if I could use my current 4-port router as a switch and perhaps still use it for wireless purposes. I would like to see if I can use the wireless for the wife's computer, but if I have to run an ethernet cable, I would try that. By the way, I've run pfSense in the past, but I feel it's important to understand to a fine degree what my network is doing and not doing. So on this 10/100 network, I'd have one nic connected to the internet and one nic to feed to wireless router acting as a switch for internal network. OpenBSD would be serving DHCP. If I can get this going, I might save up for a gigabit network card, then I have to ask myself if I need to run a newer system to take advantage of gigabit speeds. I'm seeing a bunch of information for pf.conf on the web, but I'm studying through Hansteen's book and the man page very carefully. I'm not in a rush to roll out this OpenBSD gateway. It's tempting to just copy and paste, but I'm going to study The Book of PF more, and I just started reading Absolute OpenBSD, by Lucas. regards, Daniel Villarreal On Mon, Sep 5, 2011 at 10:15 PM, alexandr knyazev alexandr.dot.knya...@gmail.com wrote: Hi, Like a questioner, may i ask you one question. Is there some history about hardware which you get for free from users. For example, may be you sold some tower or slim for food at the begging. I don't ask you what now, but it's too interest and will be great to see some page, where you track your hardware which you sent to community to help, etc. I mean, some funny history about such hardware, which you get, but didn't know what to do with it. OR I mean, some funny history about such hardware, which you was getting, but was not knew what to do with it. -Sorry for my bad English. Some what you change for beer or something. Could you share your personal experience around this at start of project? When you were alone, but something already have gave result. Some people have sent you help... Some hardware. What did you do with it? I think about some project at mobile industry, only with open source and reciprocity, some hippy's world where i can work in full power, and do not think so much about money, new hardware, by and for users. Anonymously, without connect to any corporations or goverment structure. Your skills, experience and some wishes will be great for me. For example, some people sent eight iPhone's the second generation to me . I will sell seven at one time, when i am a developer of some cross-platform systems. As I can see, you already meet such situation. So, some page, where is the hardware, what happens, who have burned it already, why, etc, its would be popular part of openbsd site. With history by photos, comments, some logs. Did you you think like me? Greetings.
Re: terminal descriptions for AMD/Intel consoles
wsvt25 is part of upstream ncurses and AFAIK is meant to be the terminfo description for wscons vt220 emulation. I would base any improved entries on it, either as changes (if they are always right) or addons like eg screen-bce. Upstream ncurses has taken changes to wsvt25 before. I at least would be pretty reluctant to include full terminfo entries as local changes in OpnBSD. If possible try to get them upstream. I think changing /etc/ttys is unlikely to happen, there are systems out there with ancient/crappy terminfo databases and it is easy just to change it yourself if you want. On Sun, Sep 04, 2011 at 09:00:56PM +0400, Alexei Malinin wrote: Paolo Aglialoro wrote: Didn't know about the TERM variable pass over ssh... ...anyway, on those systems with many screen consoles like i386/amd64, one could have a tty with vt220 to go ssh and another to deal correctly with keyboard, that would be cool. So, still having that layout inside terminals list could be way interesting (after all, many people prefer pressing Home, End and Del instead of Ctrl-A/E/D). The only question would be for those systems which do not support this like sparc64 (even if, I know, the question was born around amd64, but then the philosophy would become extensible...): does tmux inherit the TERM variable in the virual sessions opened or is there some degree of freedom? Paolo Aglialoro wrote: Does your config correctly support keys like Home, End, Del? It would be then really interesting to have it inside term options, whether or not default, but at least as choice. Christian Weisgerber wrote: wsvt25 is a better description, but if you log into a non-OpenBSD system that terminal name may be unknown. Do you mean that if I log into a non-OpenBSD system wsvt25 may be unknown? What I mean is this: You log into the OpenBSD console with TERM=wsvt25. Things are fine. Then from within this session you ssh to a non-OpenBSD system where wsvt25 is not known. $ vi vi: No terminal database found $ less WARNING: terminal is not fully functional Etc. I think that: - wsvt25 may be unknown to the remote system (as Christian wrote above) as well as pccon - pccon can be included in termtypes.master (the last is constantly changing) so that people will have a choice (as proposed above by Paolo) - we can leave vt220 as the default terminal in /etc/ttys, wait a several years until the changes of termtypes.master spread widely enough, and then think about changing the default terminal for OpenBSD -- Alexei Malinin On Sat, Sep 3, 2011 at 12:42 PM, Stuart Henderson s...@spacehopper.orgwrote: On 2011-09-02, Alexei Malinin alexei.mali...@mail.ru wrote: Stuart Henderson wrote: On 2011-09-02, Alexei Malinin alexei.mali...@mail.ru wrote: Christian Weisgerber wrote: but if you log into a non-OpenBSD system that terminal name may be unknown. terminal descriptions proposed by me are intended for OpenBSD consoles only (these descriptions are of questionable value in other systems) Do you never ssh or telnet from OpenBSD to another type of system? of course I do ssh/telnet to other systems, I understand Christian's notice, I mean that my terminal descriptions are of questionable value for other systems _consoles_ ssh and telnet pass the TERM variable to other systems. If you are using a TERM which the other system doesn't understand, they will fall back to a dumb terminal, which can be very annoying. There are workarounds but they can be annoying too. So, while it might be useful to have this in termcap (or adjust the existing wsvt* console entries which may perhaps be a better option), it doesn't seem sensible to set it by default in /etc/ttys.
Re: My thoughts on OpenBSD - is advocacy working ?
Well exotic? Melkus RS 2000 (http://www.melkus-sportwagen.de) Regards Philipp On Thu, 01 Sep 2011, Daniel Villarreal wrote: Seeing and hearing that Lamborghini was a pleasant surprise. I'd also be interested in checking out one of the Tesla motor cars. Daniel, what you think is a nice exotic sports car ? Me gusta tambiC)n discutir alimentaciC3n. So maybe OpenBSD isn't all flashy and gaudy like that Lamborghini, but then I wasn't concentrating on that. Saludos, Daniel Villarreal On Thu, Sep 1, 2011 at 6:37 AM, Daniel Gracia lists.d...@electronicagracia.com wrote: You guys aren't serious, are you? Lambos are shiny and fast crap that gets on fire easily -almost the same for any italian car/bike out on the market; maybe not Fiat-. And that's just the opposite OpenBSD seeks. VirtualBox solving a problem? Not in my world. El 01/09/2011 11:55, Tobias Crefeld escribiC3: Am Wed, 31 Aug 2011 14:48:56 -0400 schrieb Daniel Villarrealyclwebmaster@gmail.**comyclwebmas...@gmail.com : ... http://youcanlinux.wordpress.**com/my-thoughts-on-openbsd/http://youcanlinux .wordpress.com/my-thoughts-on-openbsd/ [..] through, Although one canb t convert a Ford car to a Lamborghini motorcar, you can transform your computer to a high-performance machine. [..] ...your comparison works in another way as well: A Lamborghini is a car like Jaguar, etc. that you never would use as your primary transportation tool as every repair will take a unpredictable amount of time at specialised garages that are 300 miles away. But OpenBSD is not needing special treatment. I'm using stable on several computers, not wanting to get into using -current just yet. Should I infer from your statements that -current is that unpredictable ? Your primary vehicle will be something that is reliable, commonly used and well supported. Especially if you need it to make money with it. I believe that one of the major disadvantages of OpenBSD is the lack of installation support / guarantee by hardware suppliers. This could smash your whole roll-out timetable, so our multi purpose trucks will always run an Enterprise Linux. So just do research on the internet. Granted, it may not be possible to use a given operating system on the latest hardware, but then people and corporations (legally persons as well, in U.S. jurisprudence) should contribute hardware to the developers for testing. Imagine what you could do with OpenBSD on an HP n90, hmm. Yeah, old hardware, but still. But no doubt: Some applications like packet filtering / manipulation, ALG or routing run pretty smart on OpenBSD. Meanwhile we circumvent the problems caused by the lack of hardware supplier's support by abstracting hardware dependencies with the help of virtualizing platforms like VirtualBox (offering some OpenBSD-templates) or ProxMox (KVM / Other). Regards, Tobias. I don't like virtualization from a technical standpoint, if I have the resources to run natively. I only recently started using Virtualbox on my family's computer for testing purposes. That computer needs to be ready at all times. Does it work ? Yes, it's even speedier than I expected. I'd rather have a rack in my computing area with dedicated hardware. For the time being, I just use a bunch of hard drives, a mix of IDE and SATA. The only thing is, this core2 system isn't capable of hot-swapping, at least that wasn't on the list of features. I'm not anxious to test that feature at this time. I don't want to take a chance on breaking it again. MfG, Daniel -- When I grow up, I want to be an honest lawyer so things like that can't happen. -- Richard Nixon as a boy (on the Teapot Dome scandal) () asccii ribbon campaign - against HTML e-mail /\ www.asciiribbon.org- against proprietary attachments
Re: Most secure Operating-System?
On Tue, Sep 6, 2011 at 3:21 AM, Dave U. Random anonym...@anonymitaet-im-inter.net wrote: Wide architecture support (x86, x64, mainframes) AFAIK it doesn't run on current mainframes. Only IBM's various OS's run on mainframes, as IBM has a corner on that mainframe market. Not true. Several Linux distros run and are supported on mainframes. Debian, SuSE, Fedora, RedHat etc. There was even a Slackware port. I consider that hardware abuse but it does work. Really none of the OS that run on desktops or servers can exploit what a mainframe is designed to do, it really doesn't make sense to use them. However a mainframe running VM with hundreds or thousands of Linux guests does make sense. It's green since it replaces many servers and uses less power and takes up less space. You are absolutely right. But like you said, the Linuxes running on it are unhelpful as they don't take advantage of all the excellent hardware features present. I consider them as toy OS after all these years even if they are officially supported by IBM. IBM can't integrate all the goodies else they will cannibalize and kill the OS/360 lineage OS'en. thanks
Cybercafe SW for OpenBSD
Hi all, I'm looking for a software that allows internet navigation to employees on a ticket basis, i.e. they connect wirelessly to an open access point then they get IP from this OpenBSD machine which sends back a screen on their browsers with userid and password and they can navigate till the issued ticked expires (like 2 years, 1 day, etc.). I found nothing by googling around, only stuff for linux like zencafe. Does anybody have any clue about it? It would be great having OpenBSD and PF as an engine for that Thanks Paolo
IBM x3250M3, no SAS support running OpenBSD 5.0 snapshot
Hi, Please find below the results of dmesg and sysctl hw.sensors commands on a new IBM x3250M3, MN: 4252-K3G. This server comes with a ServeRaid M1015 SAS adapter and an Adaptec 1045 SAS adapter has been added to support an external tape library. The ServRAID M1015 is based on LSISAS2008 chipset. See: IBM Redbooks | ServeRAID M1015 SAS/SATA Controller for System x http://www.redbooks.ibm.com/abstracts/tips0740.html None of the SAS adapter is recognized by OpenBSD 5.0 snapshot 2011/08/17, running from an USB key to do these tests. This server is now running Ubuntu 11.04 in production, but I may stop it and run OpenBSD to do some tests if it may help someone. -- Laurent Salle lsa...@aventin.com -- OpenBSD 5.0 (GENERIC.MP) #63: Wed Aug 17 10:14:30 MDT 2011 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP RTC BIOS diagnostic error 80clock_battery real mem = 4248875008 (4052MB) avail mem = 4121645056 (3930MB) mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.5 @ 0x7f6b9000 (53 entries) bios0: vendor IBM Corp. version -[GYE148AUS-1.11]- date 02/09/2011 bios0: IBM 81Y7618 acpi0 at bios0: rev 2 acpi0: sleep states S0 S1 S5 acpi0: tables DSDT FACP TCPA APIC MCFG SLIC HPET SSDT SSDT ERST DMAR acpi0: wakeup devices PCIB(S4) POP3(S4) POP1(S4) POP6(S4) POP5(S4) PEX1(S4) PEX2(S4) PEX3(S4) PEX4(S4) PEX5(S4) EHI1(S3) EHI2(S3) PWRB(S3) acpitimer0 at acpi0: 3579545 Hz, 24 bits acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: Intel(R) Xeon(R) CPU X3430 @ 2.40GHz, 2394.37 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,POPCNT,NXE,LONG cpu0: 256KB 64b/line 8-way L2 cache cpu0: apic clock running at 132MHz cpu1 at mainbus0: apid 2 (application processor) cpu1: Intel(R) Xeon(R) CPU X3430 @ 2.40GHz, 2393.99 MHz cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,POPCNT,NXE,LONG cpu1: 256KB 64b/line 8-way L2 cache cpu2 at mainbus0: apid 4 (application processor) cpu2: Intel(R) Xeon(R) CPU X3430 @ 2.40GHz, 2393.99 MHz cpu2: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,POPCNT,NXE,LONG cpu2: 256KB 64b/line 8-way L2 cache cpu3 at mainbus0: apid 6 (application processor) cpu3: Intel(R) Xeon(R) CPU X3430 @ 2.40GHz, 2393.99 MHz cpu3: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,POPCNT,NXE,LONG cpu3: 256KB 64b/line 8-way L2 cache ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins acpimcfg0 at acpi0 addr 0x8000, bus 0-255 acpihpet0 at acpi0: 14318179 Hz acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus 36 (PCIB) acpiprt2 at acpi0: bus 26 (POP3) acpiprt3 at acpi0: bus -1 (POP1) acpiprt4 at acpi0: bus -1 (POP6) acpiprt5 at acpi0: bus 31 (POP5) acpiprt6 at acpi0: bus 1 (PEX1) acpiprt7 at acpi0: bus 6 (PEX2) acpiprt8 at acpi0: bus 11 (PEX3) acpiprt9 at acpi0: bus 16 (PEX4) acpiprt10 at acpi0: bus 21 (PEX5) acpicpu0 at acpi0: PSS acpicpu1 at acpi0: PSS acpicpu2 at acpi0: PSS acpicpu3 at acpi0: PSS acpibtn0 at acpi0: PWRB ipmi at mainbus0 not configured cpu0: Enhanced SpeedStep 2393 MHz: speeds: 2394, 2261, 2128, 1995, 1862, 1729, 1596, 1463, 1330, 1197 MHz pci0 at mainbus0 bus 0 pchb0 at pci0 dev 0 function 0 Intel Core DMI rev 0x11 ppb0 at pci0 dev 3 function 0 Intel Core PCIE rev 0x11: msi pci1 at ppb0 bus 26 vendor Adaptec, unknown product 0x0450 (class mass storage subclass SAS, rev 0x02) at pci1 dev 0 function 0 not configured ppb1 at pci0 dev 5 function 0 Intel Core PCIE rev 0x11: msi pci2 at ppb1 bus 31 vendor Symbios Logic, unknown product 0x0073 (class mass storage subclass RAID, rev 0x03) at pci2 dev 0 function 0 not configured Intel Core Management rev 0x11 at pci0 dev 8 function 0 not configured Intel Core Scratch rev 0x11 at pci0 dev 8 function 1 not configured Intel Core Control rev 0x11 at pci0 dev 8 function 2 not configured Intel Core Misc rev 0x11 at pci0 dev 8 function 3 not configured Intel Core QPI Link rev 0x11 at pci0 dev 16 function 0 not configured Intel Core QPI Routing rev 0x11 at pci0 dev 16 function 1 not configured ehci0 at pci0 dev 26 function 0 Intel 3400 USB rev 0x05: apic 8 int 19 usb0 at ehci0: USB revision 2.0 uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1 ppb2 at pci0 dev 28 function 0 Intel 3400 PCIE rev 0x05: msi pci3 at ppb2 bus 1 ppb3 at pci0 dev 28 function 4 Intel 3400 PCIE rev 0x05: msi pci4 at ppb3 bus 6 ppb4 at pci4 dev 0 function 0 unknown vendor 0x101b product 0x0452 rev 0x01 pci5 at ppb4 bus 7 vga1 at pci5 dev
Re: Cybercafe SW for OpenBSD
On Tue, Sep 6, 2011 at 1:44 PM, Paolo Aglialoro paol...@gmail.com wrote: Hi all, I'm looking for a software that allows internet navigation to employees on a ticket basis, i.e. they connect wirelessly to an open access point then they get IP from this OpenBSD machine which sends back a screen on their browsers with userid and password and they can navigate till the issued ticked expires (like 2 years, 1 day, etc.). I found nothing by googling around, only stuff for linux like zencafe. Does anybody have any clue about it? It would be great having OpenBSD and PF as an engine for that Thanks Paolo You can try with Chillispot: http://www.chillispot.info/ OpenBSD port here: http://www.geeklan.co.uk/files/chillispot-1_0-openbsd_port-mk2.tar.gz Ciao, David
Re: Cybercafe SW for OpenBSD
On 2011-09-06 13:44, Paolo Aglialoro wrote: Hi all, I'm looking for a software that allows internet navigation to employees on a ticket basis, i.e. they connect wirelessly to an open access point then they get IP from this OpenBSD machine which sends back a screen on their browsers with userid and password and they can navigate till the issued ticked expires (like 2 years, 1 day, etc.). I found nothing by googling around, only stuff for linux like zencafe. Does anybody have any clue about it? It would be great having OpenBSD and PF as an engine for that I have no good software recommendations to make, but the term you probably want to google for is captive portal. Regards, /Benny -- internetlabbet.se / work: +46 8 551 124 80 / Words must Benny Lofgren/ mobile: +46 70 718 11 90 / be weighed, / fax:+46 8 551 124 89/not counted. /email: benny -at- internetlabbet.se
Re: Cybercafe SW for OpenBSD
Thank you a lot for all your nice suggestions, at the moment pfsense with captive portal looks like the best compromise (at least having PF). Also zeroshell could fill up the bill although it's no BSD. I've been reading through Chillispot docz, it looks like abandonware and also kinda messy to set up as there should also be webserver, radius and X radius client setup looks like kinda messy right now, but thanks the same.
Re: Cybercafe SW for OpenBSD
On 06/09/2011 13:03, David Coppa wrote: You can try with Chillispot:http://www.chillispot.info/ OpenBSD port here: http://www.geeklan.co.uk/files/chillispot-1_0-openbsd_port-mk2.tar.gz Chillispot is long dead I'm not sure that port will even work now as so much has changed since I made that, try coovachilli which was built on chillispot instead. http://coova.org/CoovaChilli Sevan
Master's Thesis
Hi all, For my thesis I want to work on something that will be useful. OpenBSD is an OS I greatly admire for its integrity in terms of both licensing and software quality and is a project I want to work on/contribute to. I have two project ideas and wanted to hear if these sounded like something useful to the community at large and if there are any project suggestions that you may have. * An evaluation of the various data structures used by the kernel to see if improvements can be made either in terms of security and/or efficiency. Chris Okasaki's book Purely Functional Data Structures will be strong source of inspiration. * A tool to statically analyze OpenBSD catered to OpenBSD coding conventions. Something along the lines of splint etc. Thoughts/suggestions are much appreciated. Best regards, Adam Britt
Re: OpenOSPF + CARP
Le 05/09/2011 19:30, Stuart Henderson a icrit :
On 2011-09-05, Mathieu Blancmathieu.bl...@smile.fr wrote:
So the ingoing traffic goes into bsd1, and the servers now use bsd2 to
go out.
Is it not a problem ? In terms of firewalling for example (keep state ?
will bsd2 authorize the trafic which is initiated by bsd1 ? maybe with
the help of pfsync ??)
pfsync(4) can handle this if you use 'defer', see the pfsync manpage,
but this is normally only desirable for load-balancing.
I read the manpage, and it seems to match exactly with what i want to do :
Where more than one firewall might actively handle packets, e.g. with
certain ospfd(8), bgpd(8) or carp(4) configurations, it is beneficial to
defer transmission of the initial packet of a connection. The pfsync
state insert message is sent immediately; the packet is queued until
either this message is acknowledged by another system, or a timeout has
expired.
This is for load-sharing between 2 firewalls, you don't want it for a
typical setup with 1 active and 1 passive firewall as it delays things
If I take my previous example :
Network A [interconnection with others routers] = 192.168.1.0/24
(configured on em0, and carp0)
presumably you are announcing the networks behind bsd1/bsd2 over
ospf to your other routers; so I don't think carp0 is useful.
Network B [network with servers] = 172.16.1.0/24 (configured on em1, and
carp1, used by servers for default gateway)
em2 is for pfsync.
The ospfd.conf is very simple.
bsd1# ifconfig -A
em0: flags=8b43UP,BROADCAST,RUNNING,PROMISC,ALLMULTI,SIMPLEX,MULTICAST
inet 192.168.1.1 netmask 0xff00 broadcast 192.168.1.255
em1: flags=8b43UP,BROADCAST,RUNNING,PROMISC,ALLMULTI,SIMPLEX,MULTICAST
inet 172.16.1.1 netmask 0xff00 broadcast 172.16.1.255
em2: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
inet 172.16.99.1 netmask 0xfffc broadcast 172.16.99.3
pfsync0: flags=41UP,RUNNING mtu 1500
pfsync: syncdev: em2 syncpeer: 172.16.99.2 maxupd: 128 defer: off
carp0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
carp: MASTER carpdev em0 vhid 170 advbase 1 advskew 80
inet 192.168.1.100 netmask 0xff00 broadcast 192.168.1.255
carp1: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST mtu 1500
carp: MASTER carpdev em1 vhid 171 advbase 1 advskew 120
inet 172.16.1.100 netmask 0xff00 broadcast 172.16.1.255
bsd1# cat /etc/ospfd.conf
area 0.0.0.0 {
interface em0
interface em1
interface carp0 { passive }
interface carp1 { passive }
}
I would:-
remove interface carp0 { passive } from ospfd.conf
remove interface em1 from ospfd.conf
ospfctl reload
ifconfig carp0 destroy
rm /etc/hostname.carp0
Wow !
It works like a charm ;)
I now have just *one* route to Network B on my routers (routers in
Network A) : the IP of bsd1 (192.168.1.1 in my example), which is
currently master.
If I do a carp demote on bsd1, the route change to bsd2 (192.168.1.1).
So there is no problem like I mentionned last time (ingoing traffic goes
to bsd1 and outgoing traffic by bsd2).
Thank you very much for your help ! It's exactly what I tried to do :)
Mathieu
Re: ikev2
On Mon, Sep 5, 2011 at 09:15, Wesley M. open...@e-solutions.re wrote: Is there someone who have already tried a vpn using ikev2 with EAP-MSCHAP-V2 support ? I may be wrong about this, but I think iked is still under active development, which is why you may not be getting replies (also fairly likely that it works fine and the M$ client is horribly broken). http://marc.info/?l=openbsd-miscm=127564809105256w=2 I'm still quite excited to see development happening though :)
Soekris lan1641 and Jetway J7F4K-1G5D
Has anyone else used this board with this mobo and experienced the same issues as described below? http://www.itxdepot.com/xcart/product.php?productid=1910cat=44019page=1 http://soekris.com/products/lan1641.html I have tried both 4.9 and recent 5.0 snapshots but nothing earlier yet. OpenBSD sees the card and it's interfaces correctly as sis0-3, they can successfully pull a dhcp lease or assign a static address. dhcp installs the correct default route or you can assign manually. When you go to ping. you get. send to: ping: Host is down I have made sure that pf is disabled and ip forwarding is turned off to see if these were causing any issues but it has no issues with it. Tried this card with the same motherboard using Mint Linux and it was fine. Any help/insight would be appreciated.
essential reading for beginning OpenBSD users
I consider the following to be essential reading for beginning OpenBSD users... Absolute FreeBSD, 2nd Edition information by Michael W. Lucas... http://www.nostarch.com/abs_bsd2.htm Don't forget the Book of PF, 2nd Edition by Peter N.M. Hansteen ... http://nostarch.com/pf2.htm Over the years I've spent a lot of money on O'Reilly GNU/Linux books, but the 1st ed. versions of the above books astound me with their clarity in explaining very technical concepts in an easy-to-understand manner. I never before considered technical computer writing to be elegantly handled, but combined with the man pages, the documentation is simply superb. Usually I wouldn't even consider buying a newer version of a computer book I already have, but I will be buying the second editions of said books when I can. Thanks for your efforts! Daniel Villarreal On Tue, Sep 6, 2011 at 7:12 AM, Amit Kulkarni amitk...@gmail.com wrote: Lucas is bringing out a 2nd edition of absolute openbsd, which i am gonna buy ...
Re: essential reading for beginning OpenBSD users
On Tue, 6 Sep 2011 10:27:22 -0400 Daniel Villarreal yclwebmas...@gmail.com wrote: I consider the following to be essential reading for beginning OpenBSD users... Absolute FreeBSD, 2nd Edition information by Michael W. Lucas... http://www.nostarch.com/abs_bsd2.htm Don't forget the Book of PF, 2nd Edition by Peter N.M. Hansteen ... http://nostarch.com/pf2.htm Over the years I've spent a lot of money on O'Reilly GNU/Linux books, but the 1st ed. versions of the above books astound me with their clarity in explaining very technical concepts in an easy-to-understand manner. I never before considered technical computer writing to be elegantly handled, but combined with the man pages, the documentation is simply superb. Usually I wouldn't even consider buying a newer version of a computer book I already have, but I will be buying the second editions of said books when I can. Thanks for your efforts! Daniel Villarreal On Tue, Sep 6, 2011 at 7:12 AM, Amit Kulkarni amitk...@gmail.com wrote: Lucas is bringing out a 2nd edition of absolute openbsd, which i am gonna buy I consider the best: man afterboot man hier :DD jirib
Re: essential reading for beginning OpenBSD users
On 06/09/2011 15:27, Daniel Villarreal wrote: I consider the following to be essential reading for beginning OpenBSD users... Absolute FreeBSD, 2nd Edition information by Michael W. Lucas... http://www.nostarch.com/abs_bsd2.htm ^ Wrong OS, though Michael Lucas is working on the 2nd edition of Absolute OpenBSD atm. Sevan
Re: essential reading for beginning OpenBSD users
http://www.amazon.com/Absolute-OpenBSD-Unix-Practical-Paranoid/dp/1886411999 ! 2011/9/6 Daniel Villarreal yclwebmas...@gmail.com I consider the following to be essential reading for beginning OpenBSD users... Absolute FreeBSD, 2nd Edition information by Michael W. Lucas... http://www.nostarch.com/abs_bsd2.htm Don't forget the Book of PF, 2nd Edition by Peter N.M. Hansteen ... http://nostarch.com/pf2.htm Over the years I've spent a lot of money on O'Reilly GNU/Linux books, but the 1st ed. versions of the above books astound me with their clarity in explaining very technical concepts in an easy-to-understand manner. I never before considered technical computer writing to be elegantly handled, but combined with the man pages, the documentation is simply superb. Usually I wouldn't even consider buying a newer version of a computer book I already have, but I will be buying the second editions of said books when I can. Thanks for your efforts! Daniel Villarreal On Tue, Sep 6, 2011 at 7:12 AM, Amit Kulkarni amitk...@gmail.com wrote: Lucas is bringing out a 2nd edition of absolute openbsd, which i am gonna buy ...
Re: Cybercafe SW for OpenBSD
On Tue, 6 Sep 2011 15:23:14 +0200 Paolo Aglialoro wrote: Thank you a lot for all your nice suggestions, at the moment pfsense with captive portal looks like the best compromise (at least having PF). Also zeroshell could fill up the bill although it's no BSD. You could do it yourself with php and authpf.
Re: My thoughts on OpenBSD - is advocacy working ?
Thanks, that's very interesting. Melkus Sportwagen GmbH is offering an RS 2000 for only 109.900 EUR. The RS 1000 had a 2-stroke engine. I bet that gets some attention. I was just studying production-line methods of Daimler AG's Mercedes-Benz SLS Gullwing and Automobili Lamborghini Holding Spa's MurciC)lago. Whereas an Italian worker unceremoniously tossed the wiring harness into the motorcar, the Germans moved the wiring harness on a tray to the motorcar and gently placed it into the car. While both motorcars were basically crafted and, no doubt there is great accountability with such a small workforce, the Germans used teams of people and the one person putting the motor together personally puts his name on the motor with a metal tag. I found the German innovation very impressive, for example, just to name a few... 1. The use of carbon-fiber for transmitting power from the motor to the axle(s). 2. The use of special production equipment to tighten many critical motor bolts all at once. Daniel On Tue, Sep 6, 2011 at 6:49 AM, Philipp Westphal ph.westp...@arcor.dewrote: Well exotic? Melkus RS 2000 (http://www.melkus-sportwagen.de) Regards Philipp Seeing and hearing that Lamborghini was a pleasant surprise. I'd also be interested in checking out one of the Tesla motor cars... Daniel, what you think is a nice exotic sports car ? ...
Re: Cybercafe SW for OpenBSD
I recommend you read Chapter 4, Wireless Networks Made Easy, but see the most recent version... http://www.nostarch.com/abs_bsd2.htm available for download from the publisher... http://www.nostarch.com/download/PF04.pdf regards, Daniel Villarreal On Tue, Sep 6, 2011 at 7:44 AM, Paolo Aglialoro paol...@gmail.com wrote: Hi all, I'm looking for a software that allows internet navigation to employees on a ticket basis, i.e. they connect wirelessly to an open access point then they get IP from this OpenBSD machine which sends back a screen on their browsers with userid and password and they can navigate till the issued ticked expires (like 2 years, 1 day, etc.). I found nothing by googling around, only stuff for linux like zencafe. Does anybody have any clue about it? It would be great having OpenBSD and PF as an engine for that Thanks Paolo
Re: My thoughts on OpenBSD - is advocacy working ?
WHERE ARE THE DIFFS? On Tue, Sep 06, 2011 at 11:34:04AM -0400, Daniel Villarreal wrote: Thanks, that's very interesting. Melkus Sportwagen GmbH is offering an RS 2000 for only 109.900 EUR. The RS 1000 had a 2-stroke engine. I bet that gets some attention. I was just studying production-line methods of Daimler AG's Mercedes-Benz SLS Gullwing and Automobili Lamborghini Holding Spa's MurciC)lago. Whereas an Italian worker unceremoniously tossed the wiring harness into the motorcar, the Germans moved the wiring harness on a tray to the motorcar and gently placed it into the car. While both motorcars were basically crafted and, no doubt there is great accountability with such a small workforce, the Germans used teams of people and the one person putting the motor together personally puts his name on the motor with a metal tag. I found the German innovation very impressive, for example, just to name a few... 1. The use of carbon-fiber for transmitting power from the motor to the axle(s). 2. The use of special production equipment to tighten many critical motor bolts all at once. Daniel On Tue, Sep 6, 2011 at 6:49 AM, Philipp Westphal ph.westp...@arcor.dewrote: Well exotic? Melkus RS 2000 (http://www.melkus-sportwagen.de) Regards Philipp Seeing and hearing that Lamborghini was a pleasant surprise. I'd also be interested in checking out one of the Tesla motor cars... Daniel, what you think is a nice exotic sports car ? ...
Re: essential reading for beginning OpenBSD users
I'm sorry. See here for how to get a 25% discount on an electronic version of Absolute OpenBSD: UNIX for the Practical Paranoid. http://www.michaelwlucas.com/getting-my-books You could always search online for a used copy. Thanks for the correction, Daniel Villarreal On Tue, Sep 6, 2011 at 10:59 AM, Sevan / Venture37 ventur...@gmail.comwrote: On 06/09/2011 15:27, Daniel Villarreal wrote: I consider the following to be essential reading for beginning OpenBSD users... Absolute FreeBSD, 2nd Edition information by Michael W. Lucas... http://www.nostarch.com/abs_**bsd2.htmhttp://www.nostarch.com/abs_bsd2.htm ^ Wrong OS, though Michael Lucas is working on the 2nd edition of Absolute OpenBSD atm. Sevan
Re: essential reading for beginning OpenBSD users
Es tut mir Leid ! Danke, Daniel On Tue, Sep 6, 2011 at 10:59 AM, R0me0 *** knight@gmail.com wrote: http://www.amazon.com/Absolute-OpenBSD-Unix-Practical-Paranoid/dp/1886411999! 2011/9/6 Daniel Villarreal yclwebmas...@gmail.com I consider the following to be essential reading for beginning OpenBSD users... Absolute FreeBSD, 2nd Edition information by Michael W. Lucas... http://www.nostarch.com/abs_bsd2.htm Don't forget the Book of PF, 2nd Edition by Peter N.M. Hansteen ... http://nostarch.com/pf2.htm Over the years I've spent a lot of money on O'Reilly GNU/Linux books, but the 1st ed. versions of the above books astound me with their clarity in explaining very technical concepts in an easy-to-understand manner. I never before considered technical computer writing to be elegantly handled, but combined with the man pages, the documentation is simply superb. Usually I wouldn't even consider buying a newer version of a computer book I already have, but I will be buying the second editions of said books when I can. Thanks for your efforts! Daniel Villarreal On Tue, Sep 6, 2011 at 7:12 AM, Amit Kulkarni amitk...@gmail.com wrote: Lucas is bringing out a 2nd edition of absolute openbsd, which i am gonna buy ...
Re: Master's Thesis
On 6 September 2011 10:30, Adam Britt a...@kadmia.com wrote: Hi all, For my thesis I want to work on something that will be useful. OpenBSD is an OS I greatly admire for its integrity in terms of both licensing and software quality and is a project I want to work on/contribute to. I have two project ideas and wanted to hear if these sounded like something useful to the community at large and if there are any project suggestions that you may have. * An evaluation of the various data structures used by the kernel to see if improvements can be made either in terms of security and/or efficiency. Chris Okasaki's book Purely Functional Data Structures will be strong source of inspiration. * A tool to statically analyze OpenBSD catered to OpenBSD coding conventions. Something along the lines of splint etc. Thoughts/suggestions are much appreciated. Best regards, Adam Britt A deep study of all the SMP mechanisms employed by the major OSes, like OpenBSD, DragonFlyBSD, FreeBSD and Linux. This can help in improving the SMP support in the near future, removing the big lock and such...
Re: essential reading for beginning OpenBSD users
On 09/06/11 22:44, jirib wrote: On Tue, 6 Sep 2011 10:27:22 -0400 Daniel Villarrealyclwebmas...@gmail.com wrote: I consider the following to be essential reading for beginning OpenBSD users... Absolute FreeBSD, 2nd Edition information by Michael W. Lucas... http://www.nostarch.com/abs_bsd2.htm Don't forget the Book of PF, 2nd Edition by Peter N.M. Hansteen ... http://nostarch.com/pf2.htm Over the years I've spent a lot of money on O'Reilly GNU/Linux books, but the 1st ed. versions of the above books astound me with their clarity in explaining very technical concepts in an easy-to-understand manner. I never before considered technical computer writing to be elegantly handled, but combined with the man pages, the documentation is simply superb. Usually I wouldn't even consider buying a newer version of a computer book I already have, but I will be buying the second editions of said books when I can. Thanks for your efforts! Daniel Villarreal On Tue, Sep 6, 2011 at 7:12 AM, Amit Kulkarniamitk...@gmail.com wrote: Lucas is bringing out a 2nd edition of absolute openbsd, which i am gonna buy I consider the best: man afterboot man hier :DD jirib The FAQ then Theo's e-mail. :)
Re: Cybercafe SW for OpenBSD
The actual book link should have been... Book of PF, 2nd Edition: A No-Nonsense Guide to the OpenBSD Firewall by Peter N.M. Hansteen http://www.nostarch.com/pf2.htm The chapter link was correct, i.e. http://www.nostarch.com/download/PF04.pdf Daniel Villarreal On Tue, Sep 6, 2011 at 11:41 AM, Daniel Villarreal yclwebmas...@gmail.comwrote: I recommend you read Chapter 4, Wireless Networks Made Easy, but see the most recent version... http://www.nostarch.com/abs_bsd2.htm available for download from the publisher... http://www.nostarch.com/download/PF04.pdf regards, Daniel Villarreal On Tue, Sep 6, 2011 at 7:44 AM, Paolo Aglialoro paol...@gmail.com wrote: Hi all, I'm looking for a software that allows internet navigation to employees on a ticket basis, i.e. they connect wirelessly to an open access point then they get IP from this OpenBSD machine which sends back a screen on their browsers with userid and password and they can navigate till the issued ticked expires (like 2 years, 1 day, etc.). I found nothing by googling around, only stuff for linux like zencafe. Does anybody have any clue about it? It would be great having OpenBSD and PF as an engine for that Thanks Paolo
Re: Master's Thesis
I wonder what the OpenBSD developers think about the info I refer to here... http://youcanlinux.wordpress.com/category/software/ ... A deep study of all the SMP mechanisms employed by the major OSes, like OpenBSD, DragonFlyBSD, FreeBSD and Linux. This can help in improving the SMP support in the near future, removing the big lock and such...
Re: Cybercafe SW for OpenBSD
This is also entirely possible with Squid. You could simply use basic authentication so that you can keep an open wireless access point and people would have to authenticate in order to surf the web or do anything. Create a temporary account for each customer and add an expiration time? To: misc@openbsd.org Sent: Tuesday, September 6, 2011 9:07 AM Subject: Re: Cybercafe SW for OpenBSD On Tue, 6 Sep 2011 15:23:14 +0200 Paolo Aglialoro wrote: Thank you a lot for all your nice suggestions, at the moment pfsense with captive portal looks like the best compromise (at least having PF). Also zeroshell could fill up the bill although it's no BSD. You could do it yourself with php and authpf.
Re: essential reading for beginning OpenBSD users
Daniel Villarreal yclwebmas...@gmail.com writes: I consider the following to be essential reading for beginning OpenBSD users... Absolute FreeBSD, 2nd Edition information by Michael W. Lucas... http://www.nostarch.com/abs_bsd2.htm As others have pointed out already, Michael is working on the second edition of The Absolute OpenBSD. My guesstimate is that it will be ready some time next year. In the meantime, he's working on an ebook about OpenSSH that may be of interest to misc@ readers. Don't forget the Book of PF, 2nd Edition by Peter N.M. Hansteen ... http://nostarch.com/pf2.htm Thanks very much for the mention! I hope to come back soonish with more useful material. But please keep in mind that those books would not have existed without the efforts of Theo and the other OpenBSD developers. I would urge anyone who has found my scribblings useful or entertaining to go to http://www.openbsd.org/orders.html and buy items, send donations (and yes, drag your boss and his credit card along too), that's the most direct route to helping OpenBSD development along. - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ Remember to set the evil bit on all malicious network traffic delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.
smtp-vilter bug/feature?
Irene killed my firewall/web server/mail sever, so I'm in the process of recreating its setup with the current 4.9 release. I was running into a problem with making smtp-vilter (installed from a package) work the way I expected it to work. Specifically, the virus backend via clamav and the spam backend via spam assassin worked fine but I could never get the attachment backend to work. I kept getting the following message in maillog whenever I sent an unwanted attachment: Sep 2 12:54:52 mushmouth smtp-vilter[32388]: failed to replace message body After banging my head for a couple of days (I did search google and the mailing list without luck) I was able to trace the error message to line 1817 of engine.c: if ((virus_strategy == STRATEGY_NOTIFY_RECIPIENT) || (error_strategy == STRATEGY_NOTIFY_RECIPIENT) || (spam_strategy == STRATEGY_NOTIFY_RECIPIENT) || (unwanted_strategy == STRATEGY_NOTIFY_RECIPIENT)) desc.xxfi_flags |= SMFIF_CHGBODY; It turns out that for unwanted content, when smtp-vilter registers with sendmail, it never sets the change body flag because STRATEGY_NOTIFY_RECIPIENT is not an allowed strategy for unwanted content. I made the following change then rebuilt and re-installed, and things seem to work as expected. if ((virus_strategy == STRATEGY_NOTIFY_RECIPIENT) || (error_strategy == STRATEGY_NOTIFY_RECIPIENT) || (spam_strategy == STRATEGY_NOTIFY_RECIPIENT) || (unwanted_strategy == STRATEGY_MARK)) desc.xxfi_flags |= SMFIF_CHGBODY; It seems like a bug to me, but then again the code is a bit complex and I don't fully understand it. I was just wondering if anybody had any thoughts about this fix. I don't know if this will effect anything. Anyway, reading code is very educational and I did learn a few things in the process. Aaron
You have 1 new message in \'Inbox\'
You have 1 new security update! Access your account and update your account to resolve the problem. Secure account log in Keep yourself secure This email was sent automatically please do not respond
Re: essential reading for beginning OpenBSD users
On Tue, 6 Sep 2011 10:27:22 -0400, Daniel Villarreal wrote: I consider the following to be essential reading for beginning OpenBSD users... Absolute FreeBSD, 2nd Edition information by Michael W. Lucas... http://www.nostarch.com/abs_bsd2.htm Don't forget the Book of PF, 2nd Edition by Peter N.M. Hansteen ... http://nostarch.com/pf2.htm Over the years I've spent a lot of money on O'Reilly GNU/Linux books, but the 1st ed. versions of the above books astound me with their clarity in explaining very technical concepts in an easy-to-understand manner. I never before considered technical computer writing to be elegantly handled, but combined with the man pages, the documentation is simply superb. Usually I wouldn't even consider buying a newer version of a computer book I already have, but I will be buying the second editions of said books when I can. Thanks for your efforts! Daniel Villarreal On Tue, Sep 6, 2011 at 7:12 AM, Amit Kulkarni amitk...@gmail.com wrote: Lucas is bringing out a 2nd edition of absolute openbsd, which i am gonna buy ... Although now a bit dated Secure Architectures with OpenBSD by Brandon Palmer and Jose Nazario is a good read. Most of the general Unix stuff in the book is very applicable even though I believe the book was released when OpenBSD 3.8 was out. For the OpenBSD specific stuff you'll probably want to compare with the man pages or FAQ.
Re: IBM x3250M3, no SAS support running OpenBSD 5.0 snapshot
On 2011-09-06, Laurent Salle lsa...@aventin.com wrote:
The ServRAID M1015 is based on LSISAS2008 chipset. See:
Please try this; run 'make' in sys/dev/pci after applying and
then build a kernel, then you can copy it to a usb stick and
see if it picks up the drives.
(SAS 9240 naming is from pci.ids).
Index: pcidevs
===
RCS file: /cvs/src/sys/dev/pci/pcidevs,v
retrieving revision 1.1619
diff -u -p -r1.1619 pcidevs
--- pcidevs 4 Sep 2011 09:26:05 - 1.1619
+++ pcidevs 6 Sep 2011 19:56:00 -
@@ -3915,6 +3915,7 @@ product SYMBIOS SAS2116_2 0x0065 SAS2116
product SYMBIOS SAS2308_3 0x006e SAS2308
product SYMBIOS SAS20040x0070 SAS2004
product SYMBIOS SAS20080x0072 SAS2008
+product SYMBIOS SAS92400x0073 SAS9240
product SYMBIOS SAS2108_3 0x0074 SAS2108
product SYMBIOS SAS2108_4 0x0076 SAS2108
product SYMBIOS SAS2108_5 0x0077 SAS2108
Index: mpii.c
===
RCS file: /cvs/src/sys/dev/pci/mpii.c,v
retrieving revision 1.48
diff -u -p -r1.48 mpii.c
--- mpii.c 29 Aug 2011 12:42:18 - 1.48
+++ mpii.c 6 Sep 2011 19:56:00 -
@@ -2098,7 +2098,8 @@ static const struct pci_matchid mpii_dev
{ PCI_VENDOR_SYMBIOS, PCI_PRODUCT_SYMBIOS_SAS2208_6 },
{ PCI_VENDOR_SYMBIOS, PCI_PRODUCT_SYMBIOS_SAS2308_1 },
{ PCI_VENDOR_SYMBIOS, PCI_PRODUCT_SYMBIOS_SAS2308_2 },
- { PCI_VENDOR_SYMBIOS, PCI_PRODUCT_SYMBIOS_SAS2308_3 }
+ { PCI_VENDOR_SYMBIOS, PCI_PRODUCT_SYMBIOS_SAS2308_3 },
+ { PCI_VENDOR_SYMBIOS, PCI_PRODUCT_SYMBIOS_SAS9240 }
};
int
Re: smtp-vilter bug/feature?
This is a port, not part of the OpenBSD base system. You should take this up with the port maintainer and the author of smtp-vilter. Aaron Jackson [jack...@msrce.howard.edu] wrote: Irene killed my firewall/web server/mail sever, so I'm in the process of recreating its setup with the current 4.9 release. I was running into a problem with making smtp-vilter (installed from a package) work the way I expected it to work. Specifically, the virus backend via clamav and the spam backend via spam assassin worked fine but I could never get the attachment backend to work. I kept getting the following message in maillog whenever I sent an unwanted attachment: Sep 2 12:54:52 mushmouth smtp-vilter[32388]: failed to replace message body After banging my head for a couple of days (I did search google and the mailing list without luck) I was able to trace the error message to line 1817 of engine.c: if ((virus_strategy == STRATEGY_NOTIFY_RECIPIENT) || (error_strategy == STRATEGY_NOTIFY_RECIPIENT) || (spam_strategy == STRATEGY_NOTIFY_RECIPIENT) || (unwanted_strategy == STRATEGY_NOTIFY_RECIPIENT)) desc.xxfi_flags |= SMFIF_CHGBODY; It turns out that for unwanted content, when smtp-vilter registers with sendmail, it never sets the change body flag because STRATEGY_NOTIFY_RECIPIENT is not an allowed strategy for unwanted content. I made the following change then rebuilt and re-installed, and things seem to work as expected. if ((virus_strategy == STRATEGY_NOTIFY_RECIPIENT) || (error_strategy == STRATEGY_NOTIFY_RECIPIENT) || (spam_strategy == STRATEGY_NOTIFY_RECIPIENT) || (unwanted_strategy == STRATEGY_MARK)) desc.xxfi_flags |= SMFIF_CHGBODY; It seems like a bug to me, but then again the code is a bit complex and I don't fully understand it. I was just wondering if anybody had any thoughts about this fix. I don't know if this will effect anything. Anyway, reading code is very educational and I did learn a few things in the process. Aaron -- the preceding comment is my own and in no way reflects the opinion of the Joint Chiefs of Staff
Re: IBM x3250M3, no SAS support running OpenBSD 5.0 snapshot
On 2011-09-06, Laurent Salle lsalle at aventin.com wrote: The ServRAID M1015 is based on LSISAS2008 chipset. See: ah, it's been pointed out this would be mfi(4). Output from pcidump -vxx would probably be helpful..
Re: Soekris lan1641 and Jetway J7F4K-1G5D
On Tue, 6 Sep 2011 10:27:11 -0400, James Abercromby wrote: Has anyone else used this board with this mobo and experienced the same issues as described below? http://www.itxdepot.com/xcart/product.php?productid=1910cat=44019page=1 http://soekris.com/products/lan1641.html I have tried both 4.9 and recent 5.0 snapshots but nothing earlier yet. OpenBSD sees the card and it's interfaces correctly as sis0-3, they can successfully pull a dhcp lease or assign a static address. dhcp installs the correct default route or you can assign manually. When you go to ping. you get. send to: ping: Host is down I have made sure that pf is disabled and ip forwarding is turned off to see if these were causing any issues but it has no issues with it. Tried this card with the same motherboard using Mint Linux and it was fine. Any help/insight would be appreciated. I have one in a BGP router, (not with your mobo - we use a Soekris Net5501) and it runs fine in a very busy hosting site. I forget what version of OpenBSD is on it but it is on the list for an upgrade in the very near future. All IPs are static. Actually there are two identical units, one being a warm spare. Both have worked since their pre-install run up. Sorry I can't think what would cause your problem. *** NOTE *** Please DO NOT CC me. I am subscribed to the list. Mail to the sender address that does not originate at the list server is tarpitted. The reply-to: address is provided for those who feel compelled to reply off list. Thankyou. Rod/ --- This life is not the real thing. It is not even in Beta. If it was, then OpenBSD would already have a man page for it.
Firefox 6
Without having an endless crab session about Firefox, I'd like to know if Firefox 6 seems any better for you. Firefox 4+ seems to not just leak memory, but hemorrhage it. In 5 I routinely hit the 2G data limit. FF6 is better in this regard it seems, but freezes the system in fits of reallocing memory, freezing OpenBSD for seconds at a time. FF 3.6.xx seemed much better to me. Are others seeing FF6 as not much better? I see Landry just committed 6.0.2 so I'm going to try that, but I don't have a lot of hope. --STeve Andre'
Re: Firefox 6
On Tue, Sep 6, 2011 at 2:56 PM, STeve Andre' and...@msu.edu wrote: In 5 I routinely hit the 2G data limit. FF6 is better in this regard it seems, but freezes the system in fits of reallocing memory, freezing OpenBSD for seconds at a time. Ditto on both counts. FF6 doesn't run out of memory as often as FF5, but these moments where it can't do anything while realloc'ing are nearly as annoying.
Re: Firefox 6
Without having an endless crab session about Firefox, I'd like to know if Firefox 6 seems any better for you. Firefox 4+ seems to not just leak memory, but hemorrhage it. In 5 I routinely hit the 2G data limit. FF6 is better in this regard it seems, but freezes the system in fits of reallocing memory, freezing OpenBSD for seconds at a time. FF 3.6.xx seemed much better to me. Are others seeing FF6 as not much better? I see Landry just committed 6.0.2 so I'm going to try that, but I don't have a lot of hope. try FF7 b4 from his git repo http://rhaalovely.net/cgit/mozilla-firefox/commit/?h=beta FF7 is the first FF release which pays serious attention to those memory bugs, so it might help you. takes about 2-4 hrs to compile on amd64.
Re: Firefox 6
On Tue, Sep 6, 2011 at 6:20 PM, Amit Kulkarni amitk...@gmail.com wrote: B Without having an endless crab session about Firefox, I'd like to know if Firefox 6 seems any better for you. B Firefox 4+ seems to not just leak memory, but hemorrhage it. B In 5 I routinely hit the 2G data limit. B FF6 is better in this regard it seems, but freezes the system in fits of reallocing memory, freezing OpenBSD for seconds at a time. FF 3.6.xx seemed much better to me. Are others seeing FF6 as not much better? B I see Landry just committed 6.0.2 so I'm going to try that, but I don't have a lot of hope. try FF7 b4 from his git repo http://rhaalovely.net/cgit/mozilla-firefox/commit/?h=beta FF7 is the first FF release which pays serious attention to those memory bugs, so it might help you. takes about 2-4 hrs to compile on amd64. 2-4 hrs to build? When it finishes compiling there will be already firefox 8!
cwm autogroup confusion
I'm trying to put one xterm in a different autogroup. This xterm's relevant properties (via xprop) are: WM_CLASS(STRING) = xterm, XTerm WM_NAME(STRING) = largexterm The relevant portion of my .cwmrc is: autogroup 1 xterm,XTerm autogroup 3 largexterm,XTerm With this, largexterm is always put in autogroup 1. What am I missing? Thanks.
La asistente Indispensable Compradora, Seminario Premier
[IMAGE] Pms Capacitacisn Efectiva de Mixico presenta un evento premier especialmente diseqado para Asistentes y Secretarias Ejecutivas La Asistente Compradora Indispensable. Zltimos lugares, exclusiva presentacisn: 27 de Septiembre en la Ciudad de Mixico con un horario de 09:00 a 08:00 pm. Lo estara acompaqado nuestro Conferencista Internacional: Lic. Ariel Valero Cruz Traemos los mejores eventos para usted, conozca los beneficios de capacitarse con los mejores! Empresa Registrada ante la STPS Reg. COLG640205CP30005 Smguenos en Twitter@pmscapacitacion o bien en Facebook PMS de Mixico !Solicite Mayores Informes! Por favor responda este e-mail con los datos siguientes. Empresa: Nombre: Telifono: Email: Nzmero de Interesados: En breve recibira la informacisn completa de este inigualable evento. Comunmquese a los telifonos y con gusto uno de nuestros ejecutivos le atendera. Telifonos: (0133) 8851-2365, (0133) 8851-2741, (0133) 1568-4647. Copyright (C) 2011, PMS Capacitacisn Efectiva de Mixico S.C. Derechos Reservados. PMS de Mixico, El logo de PMS de Mixico son marcas registradas. ADVERTENCIA PMS de Mixico no cuenta con alianzas estratigicas de ningzn tipo dentro de la Republica Mexicana. NO SE DEJE ENGAQAR - DIGA NO A LA PIRATERIA. Todos los logotipos, marcas comerciales e imagenes son propiedad de sus respectivas corporaciones y se utilizan con fines informativos solamente. Este Mensaje ha sido enviado a misc@openbsd.org /span como usuario de Pms de Mixico o bien un usuario le refiris para recibir este boletmn. Como usuario de Pms de Mixico, en este acto autoriza de manera expresa que Pms de Mixico le puede contactar vma correo electrsnico u otros medios. Si usted ha recibido este mensaje por error, haga caso omiso de el y reporte su cuenta respondiendo este correo con el subject BAJAASISTENTE Unsubscribe to this mailing list, reply a blank message with the subject UNSUBSCRIBE BAJAASISTENTE Tenga en cuenta que la gestisn de nuestras bases de datos es de suma importancia y no es intencisn de la empresa la inconformidad del receptor. [demime 1.01d removed an attachment of type image/jpeg which had a name of imageasiste001.jpg]
Re: Firefox 6
On Tue, Sep 6, 2011 at 7:29 PM, Abel Abraham Camarillo Ojeda acam...@verlet.org wrote: FF7 is the first FF release which pays serious attention to those memory bugs, so it might help you. takes about 2-4 hrs to compile on amd64. 2-4 hrs to build? When it finishes compiling there will be already firefox 8! I used to work with a guy who had access to the netscape source code. Apparently they don't really understand how to build a project - a single change *ANYWHERE* would require a complete rebuild. That took overnight... Makefiles are for wimps, apparently. -- http://www.glumbert.com/media/shift http://www.youtube.com/watch?v=tGvHNNOLnCk This officer's men seem to follow him merely out of idle curiosity. -- Sandhurst officer cadet evaluation. Securing an environment of Windows platforms from abuse - external or internal - is akin to trying to install sprinklers in a fireworks factory where smoking on the job is permitted. -- Gene Spafford learn french: http://www.youtube.com/watch?v=30v_g83VHK4
Re: My thoughts on OpenBSD - is advocacy working ?
Hi, On 7 September 2011 01:34, Daniel Villarreal yclwebmas...@gmail.com wrote: Thanks, that's very interesting. Melkus Sportwagen GmbH is offering an RS 2000 for only 109.900 EUR. The RS 1000 had a 2-stroke engine. I bet that gets some attention. I was just studying production-line methods of Daimler AG's Mercedes-Benz SLS Gullwing and Automobili Lamborghini Holding Spa's MurciC)lago. I'm glad Mercedes are careful about things. Unfortunately this is not the case for BMW, at least not their motorcycles. eg. with the F650GS single-cylinder bikes up to 2003 had a known problem where the front wheel would occasionally separate from the rest of the bike. This is a fairly major problem to have, and IIRC at least one lady ended up with a badly broken leg as a direct result. BMW's response was to do warranty replacements on the broken bikes, admit no fault under any circumstances, yet the 2004 model suddenly had a new design for the lower fork legs... There was no safety recall issued. Most of the BMW dealers I've spoken to haven't even noticed the difference in the forks, nevermind actually known about the problems. They seem to be great at building engines, and their bikes have wonderful switchgear[1], and they have never hesitated to depart radically from the motorcycling norm (look at their suspension designs!), but often the final implementation of their good ideas is utterly woeful. Thinking about the above highlighted for me the aspect of OpenBSD that attracted me. It's not enough to have good ideas. Implementation quality and subsequent maintenance/support matters just as much, if not more. John [1] yeah, seems like such a small thing... but it's the first thing I notice whenever I ride a Japanese bike. Switchgear quality = awful
Re: Firefox 6
switched to xxxterm + adsuck which works every release better and better. Just some IIS pages are not running because of authentication issues which seems related to webkit. So probably chrome has some plugin for that as no issues in chrome at all On 9/7/11, bofh goodb...@gmail.com wrote: On Tue, Sep 6, 2011 at 7:29 PM, Abel Abraham Camarillo Ojeda acam...@verlet.org wrote: FF7 is the first FF release which pays serious attention to those memory bugs, so it might help you. takes about 2-4 hrs to compile on amd64. 2-4 hrs to build? When it finishes compiling there will be already firefox 8! I used to work with a guy who had access to the netscape source code. Apparently they don't really understand how to build a project - a single change *ANYWHERE* would require a complete rebuild. That took overnight... Makefiles are for wimps, apparently. -- http://www.glumbert.com/media/shift http://www.youtube.com/watch?v=tGvHNNOLnCk This officer's men seem to follow him merely out of idle curiosity. -- Sandhurst officer cadet evaluation. Securing an environment of Windows platforms from abuse - external or internal - is akin to trying to install sprinklers in a fireworks factory where smoking on the job is permitted. -- Gene Spafford learn french: http://www.youtube.com/watch?v=30v_g83VHK4
Re: Firefox 6
On Wed, Sep 7, 2011 at 1:20 AM, Amit Kulkarni amitk...@gmail.com wrote: Without having an endless crab session about Firefox, I'd like to know if Firefox 6 seems any better for you. Firefox 4+ seems to not just leak memory, but hemorrhage it. In 5 I routinely hit the 2G data limit. FF6 is better in this regard it seems, but freezes the system in fits of reallocing memory, freezing OpenBSD for seconds at a time. Fwiw, i have firefox running since mid-august, and it takes 250mb of memory. Never hit the 2G limit, be it 4, 5, 6 on amd64 or i386. FF 3.6.xx seemed much better to me. Then just use www/firefox36. Are others seeing FF6 as not much better? I see Landry just committed 6.0.2 so I'm going to try that, but I don't have a lot of hope. Point releases are security updates... try FF7 b4 from his git repo http://rhaalovely.net/cgit/mozilla-firefox/commit/?h=beta Or packages : http://dawn.rhaalovely.net/stuff/amd64/ http://dawn.rhaalovely.net/stuff/i386/ Landry
