Re: cd boot panic on 5.0 but not 4.9 or earlier
On Sat, Nov 19, 2011 at 5:44 PM, quartz qua...@sneakertech.com wrote: first off, apologies if this is a known issue. I didn't see anything relevant in the release notes/changes, and nothing came up in a google search. I have an older pentium 3 machine. 450mhz cpu, 100mhz bus, intel sun river 440bx motherboard, 128mb of ram (of which something like 12 are being used for the onboard video). generic seagate 10gb ata drive connected with one ribbon cable, cd drive connected with another. no pci cards or other addons. a couple days ago I tried to install 5.0 release via the install50.iso I downloaded off a mirror. however, the installer doesn't get very far. it completely loads the ram disk, but then it kernel panics instantly with a 'trap type 6'. no messages about found hardware or anything, it prints out the copyright message and the panic message all in one swift motion. I don't even get enough text to scroll the disk prompt off the top of the screen. nothing I do changes this behavior. I have tried the following: - typing boot -c at the boot prompt (still panics) - disabling different combinations of things in the bios - swapping cd drives - swapping ata cables - swapping which ata port the cd was connected to - swapped ram - ran a memtest overnight - verified the checksum on the install50.iso - tried booting from cd50.iso now, the fun part is that this only happens with 5.0, I can boot and install off the 4.9 and 4.5 'install##.iso' cds just fine. I don't have the knowledge or hardware to try and debug this via serial, and I can't try booting off a floppy because I threw out all my floppy drives years ago. I can give a dmesg from 4.9 if people think it might help. dmesg can only help. also, periodically try newer snapshots.
What is wrong with this pf config
I am having troubles with this pf configuration, it seems when loaded
nothing can access my server on the internal interface for the LAN, I
cannot see why, and it's pretty much based off the very standard
example in the OpenBSD faq.
When I unload the configuration, I can access the DNS server on the
firewall running this configuration. It seems to forward everything
through to the Internet, but blocks DNS which makes it pretty useless.
I've looked at it at least five times...
[john@baal ~$ cat /etc/pf.conf
int_if=xl0
ext_if=tun0
rothbard=10.0.0.10
baal=10.0.0.2
smass=10.0.0.1
tcp_services={22}
icmp_types=echoreq
set block-policy return
set loginterface $ext_if
set skip on lo
match out on egress inet from !(egress:network) to any nat-to (egress:0)
block in log
pass out quick
antispoof quick for { lo $int_if }
pass in on egress inet proto tcp from any to (egress) \
port $tcp_services
#After this goes forwarded ports... Probably just use ssh tunnels.
pass in inet proto icmp all icmp-type $icmp_types
What is wrong?
Also can you tell me how to do this so it only needs to load once, and
not be loaded by a shell script after userland pppoe successfully
connects?
--
www.johntate.org
Re: What is wrong with this pf config
On Mon, Nov 21, 2011 at 3:45 AM, John Tate j...@johntate.org wrote:
I am having troubles with this pf configuration, it seems when loaded
nothing can access my server on the internal interface for the LAN, I
cannot see why, and it's pretty much based off the very standard
example in the OpenBSD faq.
assuming your internal net is connected to int_if: none of your rules
even mention your local network and you block by default, so yeah
if int_if isn't part of the int net, please rename the macro to avoid
confusion
When I unload the configuration, I can access the DNS server on the
firewall running this configuration. It seems to forward everything
through to the Internet, but blocks DNS which makes it pretty useless.
I've looked at it at least five times...
[john@baal ~$ cat /etc/pf.conf
int_if=xl0
ext_if=tun0
rothbard=10.0.0.10
baal=10.0.0.2
smass=10.0.0.1
tcp_services={22}
icmp_types=echoreq
set block-policy return
set loginterface $ext_if
set skip on lo
match out on egress inet from !(egress:network) to any nat-to (egress:0)
you're not passing these packets
block in log
pass out quick
antispoof quick for { lo $int_if }
pass in on egress inet proto tcp from any to (egress) \
B B B B port $tcp_services
i highly doubt you are setting up a public dns server intentionally.
if this is the case, make it clear that you are
#After this goes forwarded ports... Probably just use ssh tunnels.
pass in inet proto icmp all icmp-type $icmp_types
What is wrong?
you need to read the docs on pf. your rules make no sense
Also can you tell me how to do this so it only needs to load once, and
not be loaded by a shell script after userland pppoe successfully
connects?
--
www.johntate.org
More burning issues...
I am having troubles using cdio as described in the manual: http://www.openbsd.org/faq/faq13.html#burnCD I am using a DVD-RW. With dvd+rw-tools I had no troubles blanking the disk. [john@rothbard ~$ cdio -f cd0c tao backup.iso cdio: The media can't be written in TAO mode The manual page `man 1 cdio` seems to lack and clear direction for a mode which works. -- www.johntate.org
Re: More burning issues...
Nevermind. On Mon, Nov 21, 2011 at 8:10 PM, John Tate j...@johntate.org wrote: I am having troubles using cdio as described in the manual: http://www.openbsd.org/faq/faq13.html#burnCD I am using a DVD-RW. With dvd+rw-tools I had no troubles blanking the disk. [john@rothbard ~$ cdio -f cd0c tao backup.iso cdio: The media can't be written in TAO mode The manual page `man 1 cdio` seems to lack and clear direction for a mode which works. -- www.johntate.org -- www.johntate.org
Re: More burning issues...
On Nov 21 20:10:57, John Tate wrote: I am having troubles using cdio as described in the manual: http://www.openbsd.org/faq/faq13.html#burnCD I am using a DVD-RW. With dvd+rw-tools I had no troubles blanking the disk. Good. Because that's the first thing the DVD writing section of that FAQ recommends, which you would know if you actually read it. Basically, the process is very similar to writing CD-R(W)s. The software used, however, is different. At the moment, the best option is growisofs from the sysutils/dvd+rw-tools package.
Re: More burning issues...
On Mon, Nov 21, 2011 at 10:10 AM, John Tate j...@johntate.org wrote: I am having troubles using cdio as described in the manual: http://www.openbsd.org/faq/faq13.html#burnCD I am using a DVD-RW. With dvd+rw-tools I had no troubles blanking the disk. [john@rothbard ~$ cdio -f cd0c tao backup.iso cdio: The media can't be written in TAO mode sudo cdrecord -v -blank=fast sudo cdrecord -v -tao driveropts=burnfree backup.iso The manual page `man 1 cdio` seems to lack and clear direction for a mode which works. -- www.johntate.org
Re: pppoe
On Monday, November 21, 2011 7:57 AM, Jan Stary h...@stare.cz wrote: On Nov 21 12:37:37, John Tate wrote: I am setting up an OpenBSD firewall, and have everything working but I am using userland pppoe. I am not sure if it ever became an official part of OpenBSD, but I've heard there might be kernel level pppoe support. Is there kernel level pppoe support? Or is the cybersphere filling my head with dreams? Is http://www.openbsd.org/faq/faq6.html#PPP a part of cybersphere? PPP?!?!?!? Aughugh, hsss, hs. It hurts usss it hurts uss! Take it away take it away!!! LOL Sorry, you have my sympathy...
Database email e marketing
ATTENZIONE!!! Torino Edizioni Novita' del mese Vendita e scambio banner Disponibile anche la vendita di domini Il nostro team si allarga abbiamo anche tecnici specializzati nello sviluppo di siti web e nel design del sito se lo possedete, contattaci per info! 7 Liste e-mail 7 e-mail marketing 7 e-book 7 Invii DEM 7 Editoria 7 Pubblicita' CLICCA QUI ENTRA SUBITO! Liste indirizzi e-mail Settore Turismo (Hotel, Bb, Agriturismi, Ristoranti, agenzie di viaggio ecc.) Agenzie immobiliari Comuni new Utenti Privati Settore Automobili (autofficine, assistenza, concessionarie) Settore Liberi professionisti (Medici, Avv, Commercialisti, Ing, Geom, Arch) Liste di Aziende per Regioni (aziende del Veneto, del Lazio, della Sicilia, dellEmilia Romagna, della Toscana, della Lombardia, e della tua Regione) Vedi tutte le offerte sul nostro sito Richiedi il settore di tuo interesse Alcuni Esempi: Lista 9.000 Ristoranti italiani 50euro iva incl. Lista 10.000 Liberi professionisti 65euro iva incl. Ogni nominativo con Ragione sociale, indirizzo postale, numero telefonico, citta', provincia, regione, indirizzo e-mail Ogni nominativo comprende Ragione sociale, indirizzo postale, numero telefonico, citta', provincia, regione, indirizzo e-mail Novita' Utilizza le nostre liste per inviare il tuo catalogo cartaceo e' possibile acquistare anche solo una o piu' regioni o singole province Richiedi DEMO del file e Preventivo Senza impegno Per qualsiasi informazione e per acquistare i pacchetti non esitare a contattarci oppure lasciateci i vostri recapiti e saremo noi a contattarvi. Qualora non intendesse ricevere ulteriori comunicazioni, La preghiamo di inviare una risposta a questo indirizzo con la scritta CANCELLAMI. Torino Edizioni Richiedi subito un preventivo contattaci ENTRA SUBITO E INVACI I DETTAGLI DELLA TUA RICHIESTA
correct netmask on carp interfaces
Hi, I'm a bit confused on setting appropriate netmask on carp interface when the carpdev has an IP address. Till yesterday (following http://openbsd.org/faq/pf/carp.html#failover) my carp interfaces had the same netmask as the carpdev interfaces: em1: (no inet adddress) vlanXX: vlan: 102 priority: 0 parent interface: em1 inet xxx.xxx.xxx.18 netmask 0xfff8 broadcast xxx.xxx.xxx.23 carp0: carp: MASTER carpdev vlanXX inet xxx.xxx.xxx.20 netmask 0xfff8 broadcast xxx.xxx.xxx.23 I've read this from Henning http://marc.info/?l=openbsd-miscm=123464537104366w=2 so I tried to switch to /32 netmask on the carp interfaces # ifconfig carp0 xxx.xxx.xxx.20/32 But now I get Nov 21 11:45:09 fw /bsd: carp0: state transition: BACKUP - MASTER Nov 21 11:45:09 fw /bsd: arp_rtrequest: bad gateway value Nov 21 11:45:10 fw /bsd: carp1: state transition: BACKUP - MASTER Nov 21 11:45:10 fw /bsd: arp_rtrequest: bad gateway value every time the state changes on each firewall. Apart from this I don't see any other problem. Is this normal behavior? Should I change back to the /29 netmask? regards, Giannis
Use posifx + courrier-imap + quota
Hello, I'm under openbsd 4.9 and i'm using postifx + courrier-imap from long time. I want to use quota on my system but i have some troubles with the maildirmake command. When i use maildirmake -q xs folder the command hang up and don(t give me back the hand). When i use the same command without the -q i can create the folder. Have got somme idea ..? Thank's Bruno. -- Sallanches Data Network (SDN) Pour l'Internet des internautes
Use posifx + courrier-imap + quota
Hello, I'm under openbsd 4.9 and i'm using postifx + courrier-imap from long time. I want to use quota on my system but i have some troubles with the maildirmake command. When i use maildirmake -q xs folder the command hang up and don(t give me back the hand). When i use the same command without the -q i can create the folder. Have got somme idea ..? Thank's Bruno. -- Sallanches Data Network (SDN) Pour l'Internet des internautes
OpenBSD-5.0 current on Samsung serie 9 - what works and what does not
(sorry for the possible repost) Hi, I just finished putting -current on a fresh new Samsung 900x3a. For people who are interested in purchasing this model, here is a small report of what works and what does not. Well, most things works just fine (wired networking, sound keys, backlit keyboard, etc). The problems I spotted (more or less annoying) : - wireless does not work (Intel Centrino Advanced-N 6030, some problems with the firmware, details below) - xenocara works but only with the vesa driver at 1024x768 resolution (should be 1366x768, Sandybridge graphics). At this resolution display is distorted and not really usable - suspend works, but screen stay blank after resume (the machine is still running and I can blindly type to manually reboot) - brightness control does not work, backlit keyboard control either. (I'll make clean bugs reports quickly) Machine is still in my possession so I can provide additional information. $ sudo ifconfig iwn0 nwid ? chan 3 wpakey ??? iwn0: fatal firmware error firmware error log: error type = UNKNOWN (0x1999) program counter = 0x00013638 source line = 0x012F error data = 0x00010095 branch link = 0x0001362C0001362C interrupt link = 0xC15E time= 28147 driver status: tx ring 0: qid=0 cur=0 queued=0 tx ring 1: qid=1 cur=0 queued=0 tx ring 2: qid=2 cur=0 queued=0 tx ring 3: qid=3 cur=0 queued=0 tx ring 4: qid=4 cur=2 queued=0 tx ring 5: qid=5 cur=0 queued=0 tx ring 6: qid=6 cur=0 queued=0 tx ring 7: qid=7 cur=0 queued=0 tx ring 8: qid=8 cur=0 queued=0 tx ring 9: qid=9 cur=0 queued=0 tx ring 10: qid=10 cur=0 queued=0 tx ring 11: qid=11 cur=0 queued=0 tx ring 12: qid=12 cur=0 queued=0 tx ring 13: qid=13 cur=0 queued=0 tx ring 14: qid=14 cur=0 queued=0 tx ring 15: qid=15 cur=0 queued=0 tx ring 16: qid=16 cur=0 queued=0 tx ring 17: qid=17 cur=0 queued=0 tx ring 18: qid=18 cur=0 queued=0 tx ring 19: qid=19 cur=0 queued=0 rx ring: cur=2 802.11 state 0 iwn0: crystal calibration failed iwn0: could not initialize hardware $ dmesg OpenBSD 5.0-current (GENERIC.MP) #0: Sun Nov 20 02:42:28 CET 2011 r...@rbm.my.domain:/usr/src/sys/arch/i386/compile/GENERIC.MP cpu0: Intel(R) Core(TM) i5-2467M CPU @ 1.60GHz (GenuineIntel 686-class) 1.60 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,NXE,LONG,SSE3,PCLMUL,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,x2APIC,POPCNT,AES,XSAVE,AVX,LAHF real mem = 2864168960 (2731MB) avail mem = 2807226368 (2677MB) mainbus0 at root bios0 at mainbus0: AT/286+ BIOS, date 07/16/11, BIOS32 rev. 0 @ 0xfc000, SMBIOS rev. 2.6 @ 0xe0850 (62 entries) bios0: vendor Phoenix Technologies Ltd. version 06HL date 07/16/2011 bios0: SAMSUNG ELECTRONICS CO., LTD. 90X3A acpi0 at bios0: rev 2 acpi0: sleep states S0 S1 S3 S4 S5 acpi0: tables DSDT FACP SLIC SSDT ASF! HPET APIC MCFG SSDT SSDT UEFI UEFI UEFI acpi0: wakeup devices P0P1(S4) GLAN(S4) HDEF(S4) PXSX(S4) RP01(S4) PXSX(S4) RP02(S4) PXSX(S4) RP03(S4) PXSX(S4) RP04(S4) PXSX(S4) RP05(S4) PXSX(S4) RP06(S4) PXSX(S4) RP07(S4) PXSX(S4) RP08(S4) PEG0(S4) PEGP(S4) PEG1(S4) PEG2(S4) PEG3(S4) PWRB(S4) acpitimer0 at acpi0: 3579545 Hz, 24 bits acpihpet0 at acpi0: 14318179 Hz acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: apic clock running at 99MHz cpu1 at mainbus0: apid 1 (application processor) cpu1: Intel(R) Core(TM) i5-2467M CPU @ 1.60GHz (GenuineIntel 686-class) 1.60 GHz cpu1: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,NXE,LONG,SSE3,PCLMUL,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,x2APIC,POPCNT,AES,XSAVE,AVX,LAHF cpu2 at mainbus0: apid 2 (application processor) cpu2: Intel(R) Core(TM) i5-2467M CPU @ 1.60GHz (GenuineIntel 686-class) 1.60 GHz cpu2: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,NXE,LONG,SSE3,PCLMUL,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,x2APIC,POPCNT,AES,XSAVE,AVX,LAHF cpu3 at mainbus0: apid 3 (application processor) cpu3: Intel(R) Core(TM) i5-2467M CPU @ 1.60GHz (GenuineIntel 686-class) 1.60 GHz cpu3: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,NXE,LONG,SSE3,PCLMUL,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,x2APIC,POPCNT,AES,XSAVE,AVX,LAHF ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins acpimcfg0 at acpi0 addr 0xf800, bus 0-63 acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus -1 (P0P1) acpiprt2 at acpi0: bus 1 (RP01) acpiprt3 at acpi0: bus -1 (RP02) acpiprt4 at acpi0: bus -1 (RP03) acpiprt5 at acpi0: bus 2 (RP04) acpiprt6 at acpi0: bus 3 (RP05) acpiprt7 at
libfreetype.so.18.1 missing?
Hi, Is libfreetype.so.18.1 missing from xbase50.tgz (latest snapshot 20/11/11) on purpose? regards, Giannis
Re: Which version of Firefox most secure?
On Mon, Nov 21, 2011 at 07:26:38AM +0100, Tomas Bodzar wrote: AdSuck from packages/ports and whitelist mode (need some work from start to allow JS/cookies only for pages you really want) and runs superb Well, I feel like an idiot. Never thought of that. I really hate some of the crap that pops up. Thanks
DNS Google ?
Hi DNS Google NS 1 : 8.8.8.8NS 2 : 8.8.4.4 Good alternative or Bad alternative ? Best regards
Re: Which version of Firefox most secure?
On Mon, Nov 21, 2011 at 10:57:42AM -0600, Chris Bennett wrote: On Mon, Nov 21, 2011 at 07:26:38AM +0100, Tomas Bodzar wrote: AdSuck from packages/ports and whitelist mode (need some work from start to allow JS/cookies only for pages you really want) and runs superb Well, I feel like an idiot. Never thought of that. I really hate some of the crap that pops up. Thanks Trying to make in -current ports I get error: Missing library for ldns=0.0 Where do I get that?
Re: DNS Google ?
Good alternative: OpenBSD + unbound hvom .org [hvom@gmail.com] wrote: Hi DNS Google NS 1 : 8.8.8.8NS 2 : 8.8.4.4 Good alternative or Bad alternative ? Best regards -- There are only three sports: bullfighting, motor racing, and mountaineering; all the rest are merely games. - E. Hemingway
Re: Which version of Firefox most secure?
On Mon, Nov 21, 2011 at 11:38:42AM -0600, Chris Bennett wrote: On Mon, Nov 21, 2011 at 10:57:42AM -0600, Chris Bennett wrote: On Mon, Nov 21, 2011 at 07:26:38AM +0100, Tomas Bodzar wrote: AdSuck from packages/ports and whitelist mode (need some work from start to allow JS/cookies only for pages you really want) and runs superb Well, I feel like an idiot. Never thought of that. I really hate some of the crap that pops up. Thanks Trying to make in -current ports I get error: Missing library for ldns=0.0 Where do I get that? Update your full ports tree, and the pkg_* tools.
Re: libfreetype.so.18.1 missing?
On 21/11/11 16:05, Kapetanakis Giannis wrote: Hi, Is libfreetype.so.18.1 missing from xbase50.tgz (latest snapshot 20/11/11) on purpose? regards, Giannis Snapshot from 21/11/11 fixes it Giannis
Re: cd boot panic on 5.0 but not 4.9 or earlier
here's the dmesg from a 4.9 install. this is with everything in the bios turned on, and two ethernet cards installed. I'm downloading both the 11/16 and 11/20 snapshot install50 from my mirror, I'll test them out later tonight. --- OpenBSD 4.9 (GENERIC) #671: Wed Mar 2 07:09:00 MST 2011 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel Pentium III (GenuineIntel 686-class, 512KB L2 cache) 449 MHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PSE36,MMX,FXSR,SSE real mem = 133656576 (127MB) avail mem = 121405440 (115MB) mainbus0 at root bios0 at mainbus0: AT/286+ BIOS, date 04/03/00, BIOS32 rev. 0 @ 0xfdb70, SMBIOS rev. 2.1 @ 0xf0d50 (45 entries) bios0: vendor Intel Corp. version 4S4R100A.86A.0017.P10.0004031558 date 04/03/00 bios0: Intel Corporation SR440BX apm0 at bios0: Power Management spec V1.2 apm0: AC on, battery charge unknown acpi at bios0 function 0x0 not configured pcibios0 at bios0: rev 2.1 @ 0xf/0x1 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf65f0/176 (9 entries) pcibios0: PCI Interrupt Router at 000:07:0 (Intel 82371FB ISA rev 0x00) pcibios0: PCI bus #1 is the last bus bios0: ROM list: 0xc/0x8000 cpu0 at mainbus0: (uniprocessor) pci0 at mainbus0 bus 0: configuration mode 1 (bios) pchb0 at pci0 dev 0 function 0 Intel 82443BX AGP rev 0x03 intelagp0 at pchb0 agp0 at intelagp0: aperture at 0xf800, size 0x400 ppb0 at pci0 dev 1 function 0 Intel 82443BX AGP rev 0x03 pci1 at ppb0 bus 1 vga1 at pci1 dev 0 function 0 NVIDIA Riva TNT rev 0x04 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) piixpcib0 at pci0 dev 7 function 0 Intel 82371AB PIIX4 ISA rev 0x02 pciide0 at pci0 dev 7 function 1 Intel 82371AB IDE rev 0x01: DMA, channel 0 wired to compatibility, channel 1 wired to compatibility wd0 at pciide0 channel 0 drive 0: ST310211A wd0: 16-sector PIO, LBA, 9541MB, 19541088 sectors wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2 pciide0: channel 1 disabled (no drives) uhci0 at pci0 dev 7 function 2 Intel 82371AB USB rev 0x01: irq 10 piixpm0 at pci0 dev 7 function 3 Intel 82371AB Power rev 0x02: polling iic0 at piixpm0 spdmem0 at iic0 addr 0x50: 64MB SDRAM non-parity PC100CL2 spdmem1 at iic0 addr 0x51: 64MB SDRAM non-parity PC100CL2 eap0 at pci0 dev 12 function 0 Ensoniq AudioPCI97 rev 0x06: irq 9 ac97: codec id 0x43525903 (Cirrus Logic CS4297 rev 3) ac97: codec features headphone, 18 bit DAC, 18 bit ADC, No 3D Stereo audio0 at eap0 midi0 at eap0: AudioPCI MIDI UART dc0 at pci0 dev 15 function 0 ADMtek AN983 rev 0x11: irq 5, address 00:a0:24:a9:db:e5 ukphy0 at dc0 phy 1: Generic IEEE 802.3u media interface, rev. 1: OUI 0x000749, model 0x0001 xl0 at pci0 dev 16 function 0 3Com 3c905B 100Base-TX rev 0x30: irq 10, address 00:50:da:b7:e5:7c exphy0 at xl0 phy 24: 3Com internal media interface isa0 at piixpcib0 isadma0 at isa0 com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo pckbc0 at isa0 port 0x60/5 pckbd0 at pckbc0 (kbd slot) pckbc0: using irq 1 for kbd slot wskbd0 at pckbd0: console keyboard, using wsdisplay0 pcppi0 at isa0 port 0x61 spkr0 at pcppi0 lpt0 at isa0 port 0x378/4 irq 7 npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16 usb0 at uhci0: USB revision 1.0 uhub0 at usb0 Intel UHCI root hub rev 1.00/1.00 addr 1 biomask fd45 netmask fd65 ttymask fdff mtrr: Pentium Pro MTRR support vscsi0 at root scsibus0 at vscsi0: 256 targets softraid0 at root root on wd0a swap on wd0b dump on wd0b
Re: DNS Google ?
On 11/21/2011 12:35 PM, hvom .org wrote: Hi DNS Google NS 1 : 8.8.8.8NS 2 : 8.8.4.4 Good alternative or Bad alternative ? Best regards It's a Good Thing to remember when setting up a system, as they are easy-to-remember emergency DNS resolvers, though I wouldn't recommend that for production. If you set up 500 machines with Google for DNS resolution...what do you do if Google decides to get out of that business? or finds it not profitable so doesn't maintain it well (other than get a heck of a lot of phone calls, that is). Better to simply run your own DNS resolver. OpenBSD makes that trivial in the basic system. For small offices where I set up an OpenBSD firewall, I always set up a local DNS resolver, too, usually on the firewall. It Just Works. If the firewall goes down, no point in worrying about (external) DNS resolution, so no need for additional redunancy. My DNS local resolvers never seems to go down and are never overloaded; I can't say the same about most ISPs. If putting the DNS resolver on the firewall is not appropriate, you need redundancy, though a pair of machines serving DNS via CARP may be better than the standard two separate IP addresses for many/most machines needing DNS services. Really, the only place where OpenBSD enters this question is OpenBSD does make it really easy and relatively safe to run a DNS Resolver, so one (or several) less reason not to. Nick.
USB WD HDD 1.5Tb read/write for files larger than 2048mb
Gentlemen. I'm puzzled. I had been solving an issue for some time yesterday and today, solved it but there has arisen a bigger question than I actually had during the solving. Yesterday I reinstalled the system on my Lenovo G565. I had some big movie files, development directories and so on which I decided to store all temporarily on my 1.5Tb USB WD HDD. I just copied to that USB HDD all those files, 3, 4, 2.5 Gb and the like, without any problem. After I've got through the installation and configuration procedure of the new system, I mounted back the USB HDD and started copying back those big files (I mean first of all the files bigger than 2048mb), but none of them would. The copy procedure stuck on the mark of 2048mb with an error couldn't find the source file and wouldn't go further. The error popped up both by copying in midnight commander and by the cp command; the kernel was the default vendor kernel. Today I rebuilt the kernel and the issue - well - it just dissipated... Is there anybody to happen to know which option from the kernel configuration influences on resolving this issue with the USB port? Thanks for help in clearing it out. Vitali ### my kernel config ### machine i386 include ../../../conf/GENERIC maxusers100 # estimated number of users option USER_PCICONF# user-space PCI configuration option KVM86 # Kernel Virtual 8086 emulation option USER_LDT# user-settable LDT; see i386_set_ldt(2) option APERTURE# in-kernel aperture driver for XFree86 option COMPAT_LINUX# binary compatibility with Linux option PROCFS # /proc option NTFS# NTFS support config bsd swap generic mainbus0 at root cpu0at mainbus? bios0 at mainbus0 ioapic* at mainbus? apm0at bios0 flags 0x # flags 0x0101 to force protocol version 1.1 acpi0 at bios? mpbios0 at bios0 pcibios0 at bios0 flags 0x # use 0x30 for a total verbose ipmi0 at mainbus? disable # IPMI vmt0at mainbus? # VMware Tools esm0at mainbus? # Dell Embedded Server Management amdmsr0 at mainbus? # MSR access for AMD Geode LX CPUs with GP acpitimer* at acpi? acpihpet* at acpi? acpiac* at acpi? acpibat*at acpi? acpibtn*at acpi? acpicpu*at acpi? acpiec* at acpi? acpimadt0 at acpi? acpimcfg* at acpi? acpiprt*at acpi? acpitz* at acpi? acpivideo* at acpi? acpivout* at acpivideo? option MULTIPROCESSOR # Multiple processor support cpu*at mainbus? option PCIVERBOSE option EISAVERBOSE option USBVERBOSE isa0at mainbus0 isa0at pcib? isa0at amdpcib? isa0at gscpcib? isa0at glxpcib? eisa0 at mainbus0 pci*at mainbus0 pchb* at pci? # PCI-Host bridges ppb*at pci? # PCI-PCI bridges pci*at ppb? pci*at pchb? pcib* at pci? # PCI-ISA bridge amdpcib* at pci?# AMD 8111 LPC bridge gscpcib* at pci?# NS Geode SC1100 PCI-ISA bridge gpio* at gscpcib? glxpcib* at pci?# AMD CS5536 PCI-ISA bridge gpio* at glxpcib? kate* at pci? # AMD K8 temperature sensor km* at pci? # AMD K10 temperature sensor amas* at pci? disable # AMD memory configuration # National Semiconductor LM7[89] and compatible hardware monitors lm0 at isa? port 0x290 piixpm* at pci? # Intel PIIX power management iic*at piixpm? it* at isa? port 0x2e # ITE IT8705F, IT8712F, IT8716F, it* at isa? port 0x4e # IT8718F, IT8726F and SiS SiS950 # monitors and watchdog timer # PCI PCMCIA controllers pcic* at pci? # PCMCIA bus support pcmcia* at pcic? # USB Controllers ehci* at pci? # Enhanced Host Controller uhci* at pci? # Universal Host Controller (Intel) ohci* at pci? # Open Host Controller # USB bus support usb*at ehci? usb*at uhci? usb*at ohci? # USB devices uhub* at usb? # USB Hubs uhub* at uhub?# USB Hubs umass* at uhub?# USB Mass Storage devices uhidev* at uhub?# Human Interface Devices ums*at uhidev? # USB mouse wsmouse* at ums? mux 0 uhid* at uhidev? # USB generic HID support uvideo* at uhub?# USB video video* at uvideo? sdhc* at pci? # SD Host Controller sdmmc* at sdhc?# SD/MMC bus npx0at isa? port 0xf0 irq 13# math coprocessor isadma0 at isa? isapnp0 at isa? option WSDISPLAY_COMPAT_USL# VT handling option WSDISPLAY_COMPAT_RAWKBD # provide raw scancodes;
Cielo - Cadastre-se e concorra.
http://www.pontoxp.com/wp-content/uploads/2010/10/PROMOCAO-OUROCARD-E-CIELO .jpg Promogco Cielo Comprando 30 reais com o seu Cartco de Cridito na rede Cielo, vocj concorre a 2340 vale-compras de 100, 200, 300 e 400 reais instantaneamente, 10 prjmios de 5 mil no zltimo sorteio e ainda 100 mil como prjmio final. http://malasprontasmaster.com/ Cadastre-se -- Esta mensagem foi verificada pelo sistema de antivmrus e acredita-se estar livre de perigo.
Re: What is wrong with this pf config
Hi,
Please read again : http://www.openbsd.org/faq/pf/example1.html
Or you can take a look here : http://mouedine.net/ruleset5.aspx
Cheers,
Wesley
On Mon, 21 Nov 2011 19:15:06 +1100, John Tate j...@johntate.org wrote:
I am having troubles with this pf configuration, it seems when loaded
nothing can access my server on the internal interface for the LAN, I
cannot see why, and it's pretty much based off the very standard
example in the OpenBSD faq.
When I unload the configuration, I can access the DNS server on the
firewall running this configuration. It seems to forward everything
through to the Internet, but blocks DNS which makes it pretty useless.
I've looked at it at least five times...
[john@baal ~$ cat /etc/pf.conf
int_if=xl0
ext_if=tun0
rothbard=10.0.0.10
baal=10.0.0.2
smass=10.0.0.1
tcp_services={22}
icmp_types=echoreq
set block-policy return
set loginterface $ext_if
set skip on lo
match out on egress inet from !(egress:network) to any nat-to (egress:0)
block in log
pass out quick
antispoof quick for { lo $int_if }
pass in on egress inet proto tcp from any to (egress) \
port $tcp_services
#After this goes forwarded ports... Probably just use ssh tunnels.
pass in inet proto icmp all icmp-type $icmp_types
What is wrong?
Also can you tell me how to do this so it only needs to load once, and
not be loaded by a shell script after userland pppoe successfully
connects?
x100e : amd : openbsd 5.0 : built-in video camera problems
hello, my system (dmesg below) has a built-in video camera on the display. the region around the video camera heats up phenomenally, it happens everytime, irrespective of whether i use it for 2 minutes or 2 hours. anything i could do to help the systems guys resolve this problem? thank you. OpenBSD 5.0 (GENERIC) #43: Wed Aug 17 10:10:52 MDT 2011 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC cpu0: AMD Athlon(tm) Neo Processor MV-40 (AuthenticAMD 686-class, 512KB L2 cache) 1.60 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,SSE3,CX16 real mem = 1877331968 (1790MB) avail mem = 1836568576 (1751MB) mainbus0 at root bios0 at mainbus0: AT/286+ BIOS, date 02/11/10, BIOS32 rev. 0 @ 0xfdba0, SMBIOS rev. 2.5 @ 0xf0b30 (43 entries) bios0: vendor LENOVO version 6XET33WW (1.12 ) date 02/11/2010 bios0: LENOVO 3508A16 acpi0 at bios0: rev 2 acpi0: sleep states S0 S3 S4 S5 acpi0: tables DSDT FACP TCPA SSDT APIC MCFG HPET SLIC acpi0: wakeup devices PB5_(S5) OHC0(S3) OHC1(S3) OHC2(S3) OHC3(S3) OHC4(S3) P2P_(S5) LID_(S3) acpitimer0 at acpi0: 3579545 Hz, 32 bits acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: apic clock running at 199MHz ioapic0 at mainbus0: apid 1 pa 0xfec0, version 21, 24 pins acpimcfg0 at acpi0 addr 0xe000, bus 0-3 acpihpet0 at acpi0: 14318180 Hz acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus 2 (PB5_) acpiprt2 at acpi0: bus 4 (P2P_) acpiprt3 at acpi0: bus 1 (AGP_) acpiec0 at acpi0 acpicpu0 at acpi0: C3, C2, PSS acpitz0 at acpi0: critical temperature is 92 degC acpibtn0 at acpi0: PWRB acpibtn1 at acpi0: SLPB acpithinkpad0 at acpi0 acpiac0 at acpi0: AC unit online acpibat0 at acpi0: BAT1 model 42T4789 serial 10259 type LION oem LGC 11 acpibtn2 at acpi0: LID_ bios0: ROM list: 0xc/0xec00 0xcf000/0x1000 cpu0: PowerNow! K8 1597 MHz: speeds: 1600 800 MHz pci0 at mainbus0 bus 0: configuration mode 1 (bios) pchb0 at pci0 dev 0 function 0 AMD RS780 Host rev 0x00 ppb0 at pci0 dev 1 function 0 AMD RS780 PCIE rev 0x00 pci1 at ppb0 bus 1 vga1 at pci1 dev 5 function 0 ATI Radeon HD 3200 rev 0x00 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) radeondrm0 at vga1: apic 1 int 18 drm0 at radeondrm0 ppb1 at pci0 dev 5 function 0 AMD RS780 PCIE rev 0x00: apic 1 int 17 pci2 at ppb1 bus 2 re0 at pci2 dev 0 function 0 Realtek 8168 rev 0x03: RTL8168D/8111D (0x2800), apic 1 int 17, address c8:0a:a9:1b:bb:04 rgephy0 at re0 phy 7: RTL8169S/8110S PHY, rev. 2 ppb2 at pci0 dev 6 function 0 AMD RS780 PCIE rev 0x00: apic 1 int 18 pci3 at ppb2 bus 3 Realtek 8192SE rev 0x10 at pci3 dev 0 function 0 not configured ahci0 at pci0 dev 17 function 0 ATI SBx00 SATA rev 0x00: apic 1 int 22, AHCI 1.1 scsibus0 at ahci0: 32 targets sd0 at scsibus0 targ 0 lun 0: ATA, ST9320325AS, 0020 SCSI3 0/direct fixed naa.5000c5001eeca42f sd0: 305245MB, 512 bytes/sector, 625142448 sectors ohci0 at pci0 dev 18 function 0 ATI SB700 USB rev 0x00: apic 1 int 16, version 1.0, legacy support ohci1 at pci0 dev 18 function 1 ATI SB700 USB rev 0x00: apic 1 int 16, version 1.0, legacy support ehci0 at pci0 dev 18 function 2 ATI SB700 USB2 rev 0x00: apic 1 int 17 usb0 at ehci0: USB revision 2.0 uhub0 at usb0 ATI EHCI root hub rev 2.00/1.00 addr 1 ohci2 at pci0 dev 19 function 0 ATI SB700 USB rev 0x00: apic 1 int 18, version 1.0, legacy support ehci1 at pci0 dev 19 function 2 ATI SB700 USB2 rev 0x00: apic 1 int 19 usb1 at ehci1: USB revision 2.0 uhub1 at usb1 ATI EHCI root hub rev 2.00/1.00 addr 1 piixpm0 at pci0 dev 20 function 0 ATI SBx00 SMBus rev 0x3c: SMI iic0 at piixpm0 spdmem0 at iic0 addr 0x51: 2GB DDR2 SDRAM non-parity PC2-5300CL5 SO-DIMM azalia0 at pci0 dev 20 function 2 ATI SBx00 HD Audio rev 0x00: apic 1 int 16 azalia0: codecs: Conexant/0x5066 audio0 at azalia0 pcib0 at pci0 dev 20 function 3 ATI SB700 ISA rev 0x00 ppb3 at pci0 dev 20 function 4 ATI SB600 PCI rev 0x00 pci4 at ppb3 bus 4 pchb1 at pci0 dev 24 function 0 AMD AMD64 0Fh HyperTransport rev 0x00 pchb2 at pci0 dev 24 function 1 AMD AMD64 0Fh Address Map rev 0x00 pchb3 at pci0 dev 24 function 2 AMD AMD64 0Fh DRAM Cfg rev 0x00 kate0 at pci0 dev 24 function 3 AMD AMD64 0Fh Misc Cfg rev 0x00: core rev DH-G2 usb2 at ohci0: USB revision 1.0 uhub2 at usb2 ATI OHCI root hub rev 1.00/1.00 addr 1 usb3 at ohci1: USB revision 1.0 uhub3 at usb3 ATI OHCI root hub rev 1.00/1.00 addr 1 usb4 at ohci2: USB revision 1.0 uhub4 at usb4 ATI OHCI root hub rev 1.00/1.00 addr 1 isa0 at pcib0 isadma0 at isa0 pckbc0 at isa0 port 0x60/5 pckbd0 at pckbc0 (kbd slot) pckbc0: using irq 1 for kbd slot wskbd0 at pckbd0: console keyboard, using wsdisplay0 pms0 at pckbc0 (aux slot) pckbc0: using irq 12 for aux slot wsmouse0 at pms0 mux 0 pcppi0 at isa0 port 0x61 spkr0 at pcppi0 npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16 mtrr: Pentium Pro MTRR support umass0 at uhub1 port 1 configuration 1
Re: cd boot panic on 5.0 but not 4.9 or earlier
ok, so whatever was wrong has fixed itself sometime between release and 11/16, because both the 11/16 and 11/20 install50 snapshot images boot fine. how safe are those two images? would it be ok to run on a production system or should I wait for the official 5.0 stable branch?
Re: cd boot panic on 5.0 but not 4.9 or earlier
On Mon, Nov 21, 2011 at 10:09 PM, quartz qua...@sneakertech.com wrote: ok, so whatever was wrong has fixed itself sometime between release and 11/16, because both the 11/16 and 11/20 install50 snapshot images boot fine. how safe are those two images? would it be ok to run on a production system or should I wait for the official 5.0 stable branch? those images are far past 5.0. many run snapshots on their daily use computers/laptops/servers. It all depends on what production means to you. If you have to ask that question, you probably should stick to running official releases for a while until you are more comfortable with OBSD. Glad, things resolved for you. --patrick
Re: cd boot panic on 5.0 but not 4.9 or earlier
On 11/22/11 01:09, quartz wrote: ok, so whatever was wrong has fixed itself sometime between release and 11/16, because both the 11/16 and 11/20 install50 snapshot images boot fine. how safe are those two images? would it be ok to run on a production system or should I wait for the official 5.0 stable branch? Only you can truly determine if the snapshot is safe for your production use. Even with a -stable version of OpenBSD I test stuff *and* have the last version machine ready to re- deploy if something goes wonky. I've been running -current on my laptop for 10 years now, and all of my production machines are -current as well. I always build up a new machine and test it, then do whatever changes are needed to be able to deploy it, and go... I've never had a problem, but I've always tested things first. The key to success here is 1) testing, and 2) the ability to quickly drop back to the previous version if things go awry. -current is always evolving and is always getting better, with the exception of occasional problem, which you found. Overall though, OpenBSD is the only op system I've trusted its development version for actual use. The only time -current is NOT to be trusted is in the middle of a Hackathon, where you can watch commits flying in. Watch, but wait till its over before you decide to use it for anything critical. ;-) --STeve Andre'
Suggest a good website ^o^
Do_not_be_left_behind_by_others_Discover_how_i_made_thousands_of_dollars_online_Watch_the_video_to_see_the_proofhttp://BZ9.com/LethalCommissionPlease_Click_The_Link
Re: Giving java apps more memory
On 11/19/11 05:27, John Tate wrote: There is no manpage for ulimit. It's in ksh(1) (and I'd suspect in other shell's man pages too)
USB WD HDD 1.5Tb read/write for files larger than 2048mb
Gentlemen. I'm puzzled. I had been solving an issue for some time yesterday and today, solved it but there has arisen a bigger question than I actually had during the solving. Yesterday I reinstalled the system on my Lenovo G565. I had some big movie files, development directories and so on which I decided to store all temporarily on my 1.5Tb USB WD HDD. I just copied to that USB HDD all those files, 3, 4, 2.5 Gb and the like, without any problem. After I've got through the installation and configuration procedure of the new system, I mounted back the USB HDD and started copying back those big files (I mean first of all the files bigger than 2048mb), but none of them would. The copy procedure stuck on the mark of 2048mb with an error couldn't find the source file and wouldn't go further. The error popped up both by copying in midnight commander and by the cp command; the kernel was the default vendor kernel. Today I rebuilt the kernel and the issue - well - it just dissipated... Is there anybody to happen to know which option from the kernel configuration influences on resolving this issue with the USB port? Thanks for help in clearing it out. Vitali ### my kernel config ### machine B B B B i386 include B B B B ../../../conf/GENERIC maxusers B B B B 100 B B B B B B B B B B # estimated number of users option B B B B B USER_PCICONF B B # user-space PCI configuration option B B B B B KVM86 B B B B B # Kernel Virtual 8086 emulation option B B B B B USER_LDT B B B B # user-settable LDT; see i386_set_ldt(2) option B B B B B APERTURE B B B B # in-kernel aperture driver for XFree86 option B B B B B COMPAT_LINUX B B # binary compatibility with Linux option B B B B B PROCFS B B B B B # /proc option B B B B B NTFS B B B B B B # NTFS support config B B B B B bsd B B swap generic mainbus0 at root cpu0 B B at mainbus? bios0 B at mainbus0 ioapic* at mainbus? apm0 B B at bios0 flags 0x B # flags 0x0101 to force protocol version 1.1 acpi0 B at bios? mpbios0 at bios0 pcibios0 at bios0 flags 0x B # use 0x30 for a total verbose ipmi0 B at mainbus? disable B B # IPMI vmt0 B B at mainbus? B B B B B B # VMware Tools esm0 B B at mainbus? B B B B B B # Dell Embedded Server Management amdmsr0 at mainbus? B B B B B B # MSR access for AMD Geode LX CPUs with GP acpitimer* B B B at acpi? acpihpet* B B B at acpi? acpiac* B B B B at acpi? acpibat* B B B B at acpi? acpibtn* B B B B at acpi? acpicpu* B B B B at acpi? acpiec* B B B B at acpi? acpimadt0 B B B at acpi? acpimcfg* B B B at acpi? acpiprt* B B B B at acpi? acpitz* B B B B at acpi? acpivideo* B B B at acpi? acpivout* B B B at acpivideo? option B B B B B MULTIPROCESSOR B # Multiple processor support cpu* B B B B B B at mainbus? option B B B B B PCIVERBOSE option B B B B B EISAVERBOSE option B B B B B USBVERBOSE isa0 B B at mainbus0 isa0 B B at pcib? isa0 B B at amdpcib? isa0 B B at gscpcib? isa0 B B at glxpcib? eisa0 B at mainbus0 pci* B B at mainbus0 pchb* B at pci? B B B B B B B B # PCI-Host bridges ppb* B B at pci? B B B B B B B B # PCI-PCI bridges pci* B B at ppb? pci* B B at pchb? pcib* B at pci? B B B B B B B B # PCI-ISA bridge amdpcib* at pci? B B B B B B B B # AMD 8111 LPC bridge gscpcib* at pci? B B B B B B B B # NS Geode SC1100 PCI-ISA bridge gpio* B at gscpcib? glxpcib* at pci? B B B B B B B B # AMD CS5536 PCI-ISA bridge gpio* B at glxpcib? kate* B at pci? B B B B B B B B # AMD K8 temperature sensor km* B B at pci? B B B B B B B B # AMD K10 temperature sensor amas* B at pci? disable B B B B # AMD memory configuration # National Semiconductor LM7[89] and compatible hardware monitors lm0 B B at isa? port 0x290 piixpm* at pci? B B B B B B B B B B B B # Intel PIIX power management iic* B B at piixpm? it* B B at isa? port 0x2e B B B B B B B # ITE IT8705F, IT8712F, IT8716F, it* B B at isa? port 0x4e B B B B B B B # IT8718F, IT8726F and SiS SiS950 B B B B B B B B B B B B B B B B B B B B # monitors and watchdog timer # PCI PCMCIA controllers pcic* B at pci? # PCMCIA bus support pcmcia* at pcic? # USB Controllers ehci* B at pci? B B B B B B B B B B B B # Enhanced Host Controller uhci* B at pci? B B B B B B B B B B B B # Universal Host Controller (Intel) ohci* B at pci? B B B B B B B B B B B B # Open Host Controller # USB bus support usb* B B at ehci? usb* B B at uhci? usb* B B at ohci? # USB devices uhub* B at usb? B B B B B B B B # USB Hubs uhub* B at uhub? B B B B B B B B # USB Hubs umass* B at uhub? B B B B B B B B # USB Mass Storage devices uhidev* at uhub? B B B B B B B B # Human Interface Devices ums* B B at uhidev? B B B B B B B # USB mouse wsmouse* at
Re: DNS Google ?
Chris, why would you suggest unbound instead of bind? Which advantages do you see? Thanks, Manuel -- Hana wa sakuragi, hito wa bushi From: Chris Cappuccio ch...@nmedia.net To: hvom .org hvom@gmail.com Cc: misc@openbsd.org Sent: Monday, November 21, 2011 7:02 PM Subject: Re: DNS Google ? Good alternative: OpenBSD + unbound
