Re: copyright on grdc?

2012-10-17 Thread Ted Unangst
On Tue, Oct 16, 2012 at 13:22, Carson Chittom wrote:
> This is pretty minor, but:
> 
> 1. I just noticed that both grdc.c and grdc.6 (in src/games/grdc)
> say "Copyright 2002 Amos Shapir.  Public domain."  The US
> Copyright Office says[1], essentially, that copyright and public
> domain are mutually exclusive categories.
> 
> 2. I found a message from Theo in the archives from 2003[2] listing
> grdc as one of the items of which the license was clarified
> during an audit.

In this case, the text is somewhat misleading, but means Amos wrote
it, but presumably disavowed the copyright that was once held.

> 3. I vaguely remember that it may not be possible to place
> something in the public domain in some countries.

We don't care about that.  I suppose people in such countries would
not be able to contribute public domain code, but that's their problem,
not ours.



Re: Xwindows unusable after Zapping

2012-10-17 Thread Ted Unangst
On Wed, Oct 17, 2012 at 19:53, patrick keshishian wrote:
> Hi,
> 
> Just ran across something interesting. I installed Oct 15th amd64
> snapshot on my lenovo X120e. While in Xwindows, building some ports,
> the screen went, what I can best describe as "fuzzy". So I did the
> Ctrl+Alt+Backspace (Zap) to have it restarted. It came back with the
> xdm login prompt, but the display showed the left edge of the root
> window starting at about the middle of the screen, wrapping across the
> display until the two window edges met back up in the middle. So what
> to do? Zap again. This time the screen just remains black. more
> Zapping doesn't improve the situation any. So I ssh into the thinkpad
> and restart xdm. That doesn't help either. Rebooting is the only
> solution.

Does this happen if you exit X normally?  Sounds like the same problem
that affects lots of newer machines.



Re: avoiding icmp redirect storm

2012-10-17 Thread Andy Bradford
Thus said "Jose Fragoso" on Wed, 17 Oct 2012 07:39:31 EDT:

> I see a lot of icmp redirect packets in the network using tcpdump.

What's the source of these? Are  you sure they aren't being generated by
your  firewall?  Do you  have  multiple  aliases representing  logically
different subnets on the same interface?

How about the output of netstat -nr -finet and also ifconfig -a?

Andy



Re: OpenBSD-current, any chance to have TU2-ETG (ethernet adapter) working?

2012-10-17 Thread Jonathan Gray
On Wed, Oct 17, 2012 at 09:07:41AM -0600, Theo de Raadt wrote:
> > I just install the last snapshot i386, and plug my Trendnet Ethernet 
> > Adapter (TU2-ETG).
> > When i run this:
> > 
> > (ifconfig axe0 media ; dmesg ; sysctl hw.sensors)
> > 
> > axe0: flags=8802 mtu 1500
> >  lladdr 00:50:b6:4e:5a:c9
> >  priority: 0
> >  media: Ethernet none (none)
> >  supported media:
> >  media none
> 
> I don't see any problem.
> 
> A lot of devices must be configured up, before they will negotiate link.

The phy doesn't attach, your device perhaps needs some different
gpio magic to the one I have.  I you can donate one I'll take a look.



Re: PFSync question

2012-10-17 Thread Bennett Samowich
Our main traffic is 10Gb here so we do move a lot of data.   I just
changed the pfsync interface from using a direct cable leveraging
1Gb's autosense to connecting to a switch.   The interesting thing is
that I seem to have recovered some of my lost throughput performance
since making that change.   Will network speed take a performance hit
if they're having trouble synchronizing state?   I wouldn't have
thought so since the state is created on the primary and then an
update sent to the secondary, right?


On Wed, Oct 17, 2012 at 12:52 PM, Tyler Morgan  wrote:
> On 10/17/2012 8:51 AM, Bennett Samowich wrote:
>>
>> I just had an event that I'm having trouble identifying the root cause.
>> I'm hoping that someone might have encountered this or might be able to
>> point me toward some things to check.
>>
>> Yesterday we had an event where our primary firewall would stop passing
>> traffic.  The only thing short of a reboot that would restore service was
>> to run 'sh /etc/netstart pfsync0'.  Resetting pfsync's physical interface
>> or pulling that cable didn't produce results.  Only resetting the pfsync0
>> virtual interface would restore service.   I'm not even sure what
>> information would be helpful to provide or what other questions to ask.  I
>> also found it odd that the two servers did not show the same number of
>> state entries by a difference of anywhere from 100 to 1000s.  Is this
>> typical?
>>
>> Thanks,
>> Bennett
>
>
> States come and go so depending on the amount of traffic going through the
> router, it could be off by a few hundred, or maybe even a few thousand if
> you do a lot of traffic.
>
> I just counted the states (at the exact same time, several times) on some
> primary/backup CARP routers using pfsync that push a constant 10-20mbit to
> several thousand web clients at any given moment, and the states were within
> about 150 of each other consistently. I would say being off by 1000s is
> indicative of a problem, but if you push a lot of traffic, it might not be.
>
> Anyway, you need to post: a full ifconfig, dmesg, and look through
> /var/log/messages for anything interesting from CARP or pfsync to get
> started.
>
> Also put your pfsync cabling through a cable tester just to double check it.
> I've had a bad pfsync interface cable cause weird problems before. Any
> errors on the interface? netstat -in will tell you about errors, not
> ifconfig it seems.



Re: softraid crypto error

2012-10-17 Thread Alexander Hall
On 10/15/12 11:46, Luis P. Mendes wrote:
> Hi all,
> 
> 
> This problem has been recurrent. Last time I could get eitheen days of
> uptime until I had to hard reboot and then check and correct the filesystem.
> 
> The message displayed is:
> """
> gahcio: stopping the port, softreset slot 31 was still active.
> ahcio: failed to reset port during time out handling, disabling it.
> softraid0: i/o error on block 970965744 and 970965872.
> """
> 
> I'm using OpenBSD 5.2 snapshots from the 16th of September.
> Disk is a Samsung SATA 3.5'' SATA:
> sd0 at scsibus0 targ 0 lun 0:  SCSI3
> 0/direct fixed naa.5f0007064242
> sd0: 953868MB, 512 bytes/sector, 1953523055 sectors
> 
> and the encrypted partition:
> sd1 at scsibus2 targ 1 lun 0:  SCSI2 0/direct
> fixed
> sd1: 922747MB, 512 bytes/sector, 1889787792 sectors
> 
> 
> What can I do to correct this once and for all?

- Choose a better subject (looks like softraid does what it should
  when a disk disappears)
- Don't cut the dmesg

For starters.



Elaboracion de Modelos Financieros con Excel - Analisis e Interpretacion

2012-10-17 Thread Lic. Sue Lopez
Elaboración de Modelos Financieros con Excel - Análisis e Interpretación
Panama 15 de Octubre, 2012

Se demostrará paso a paso técnicas financieras con las herramientas o
características de Excel. Aprenderá a utilizar Excel con el propósito de
desarrollar sus habilidades en una amplia gama de situaciones de toma de
decisiones financieras entre las que figuran, cómo…

- Preparar pronósticos financieros y proyecciones de flujo de efectivo
más exactos
- Simplificar problemas complejos de negocios
- Elaborar estados financieros a partir de una balanza de comprobación
- Crear estados financieros comparativos
- Elaborar flujos de efectivo mediante información exportada de su portal
bancario
- Elaborar estados de resultados con factores variables
- Elaborar un modelo de cálculo del VAN y TIR para sus proyectos de
inversión
- Usar hipervínculos para crear informes directivos en PowerPoint
mediante Excel

Reciba en este momento el folleto completo!

Únicamente responda con su Nombre, Puesto, Empresa y Teléfono, o
Comuníquese al (507) 279-1083 / 279-0258 / 279-0887 en donde con gusto le
atenderé.

Reciba un muy cordial saludo!

Lic. Sue Lopez
Líder de Proyectos

Para des suscribirse de estas invitaciones, solo responda este correo con
el SUBJECT noinv y automáticamente quedará fuera de nuestras listas.



Re: PFSync question

2012-10-17 Thread Bennett Samowich
bah! I missed conveying this point in my haste to send the original
post ( many apologies ).

When the firewalls stopped passing traffic they didn't stop all
together but rather it seemed that anything with established state
continued to pass but anything seeking new state was not passed even
though pflog made it look as if it were.


On Wed, Oct 17, 2012 at 11:51 AM, Bennett Samowich  wrote:
> I just had an event that I'm having trouble identifying the root cause.  I'm
> hoping that someone might have encountered this or might be able to point me
> toward some things to check.
>
> Yesterday we had an event where our primary firewall would stop passing
> traffic.  The only thing short of a reboot that would restore service was to
> run 'sh /etc/netstart pfsync0'.  Resetting pfsync's physical interface or
> pulling that cable didn't produce results.  Only resetting the pfsync0
> virtual interface would restore service.   I'm not even sure what
> information would be helpful to provide or what other questions to ask.  I
> also found it odd that the two servers did not show the same number of state
> entries by a difference of anywhere from 100 to 1000s.  Is this typical?
>
> Thanks,
> Bennett



Re: PFSync question

2012-10-17 Thread Bennett Samowich
Thanks ... dmesg attached for both firewalls.

Basic network configuration is:
* 10Gb LR to external-1 ( default route )
* 1Gb to external-2  ( specific routes )
* 10Gb to dmz
* 10Gb to internal network 1
* 1Gb to internal network 2
* 1Gb pfsync ( currently x-over cable )
* 10Gb trunked to 9 other internal networks


On Wed, Oct 17, 2012 at 12:23 PM, Luis Coronado  wrote:
>
> Devs/gurus will need for other information as well, at least you should
> include dmesg output and how your network is arranged.
>
> -luis
>
>
> On Wed, Oct 17, 2012 at 9:51 AM, Bennett Samowich 
> wrote:
>>
>> I just had an event that I'm having trouble identifying the root cause.
>> I'm hoping that someone might have encountered this or might be able to
>> point me toward some things to check.
>>
>> Yesterday we had an event where our primary firewall would stop passing
>> traffic.  The only thing short of a reboot that would restore service was
>> to run 'sh /etc/netstart pfsync0'.  Resetting pfsync's physical interface
>> or pulling that cable didn't produce results.  Only resetting the pfsync0
>> virtual interface would restore service.   I'm not even sure what
>> information would be helpful to provide or what other questions to ask.
>> I
>> also found it odd that the two servers did not show the same number of
>> state entries by a difference of anywhere from 100 to 1000s.  Is this
>> typical?
>>
>> Thanks,
>> Bennett
OpenBSD 4.9 (GENERIC.MP) #819: Wed Mar  2 06:57:49 MST 2011
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 3475410944 (3314MB)
avail mem = 3368873984 (3212MB)
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.6 @ 0xcf49c000 (84 entries)
bios0: vendor Dell Inc. version "3.0.0" date 01/31/2011
bios0: Dell Inc. PowerEdge R710
acpi0 at bios0: rev 2
acpi0: sleep states S0 S4 S5
acpi0: tables DSDT FACP APIC SPCR HPET DM__ MCFG WD__ SLIC ERST HEST BERT EINJ 
SRAT TCPA SSDT
acpi0: wakeup devices PCI0(S5)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 16 (boot processor)
cpu0: Intel(R) Xeon(R) CPU X5570 @ 2.93GHz, 2926.39 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: apic clock running at 133MHz
cpu1 at mainbus0: apid 0 (application processor)
cpu1: Intel(R) Xeon(R) CPU X5570 @ 2.93GHz, 2926.00 MHz
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG
cpu1: 256KB 64b/line 8-way L2 cache
cpu2 at mainbus0: apid 18 (application processor)
cpu2: Intel(R) Xeon(R) CPU X5570 @ 2.93GHz, 2926.00 MHz
cpu2: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG
cpu2: 256KB 64b/line 8-way L2 cache
cpu3 at mainbus0: apid 2 (application processor)
cpu3: Intel(R) Xeon(R) CPU X5570 @ 2.93GHz, 2926.00 MHz
cpu3: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG
cpu3: 256KB 64b/line 8-way L2 cache
cpu4 at mainbus0: apid 20 (application processor)
cpu4: Intel(R) Xeon(R) CPU X5570 @ 2.93GHz, 2926.00 MHz
cpu4: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG
cpu4: 256KB 64b/line 8-way L2 cache
cpu5 at mainbus0: apid 4 (application processor)
cpu5: Intel(R) Xeon(R) CPU X5570 @ 2.93GHz, 2926.00 MHz
cpu5: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG
cpu5: 256KB 64b/line 8-way L2 cache
cpu6 at mainbus0: apid 22 (application processor)
cpu6: Intel(R) Xeon(R) CPU X5570 @ 2.93GHz, 2926.00 MHz
cpu6: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG
cpu6: 256KB 64b/line 8-way L2 cache
cpu7 at mainbus0: apid 6 (application processor)
cpu7: Intel(R) Xeon(R) CPU X5570 @ 2.93GHz, 2926.00 MHz
cpu7: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,DCA,SSE4.1,SSE4.2,POPCNT,NXE,LONG
cpu7: 256KB 64b/line 8-way L2 cache
cpu8 at mainbus0: apid 17 (application processor)
cpu8: Intel(R) Xeon(R) CPU X5570 @ 2.93GHz, 2926.00 

Re: PFSync question

2012-10-17 Thread Tyler Morgan

On 10/17/2012 8:51 AM, Bennett Samowich wrote:

I just had an event that I'm having trouble identifying the root cause.
I'm hoping that someone might have encountered this or might be able to
point me toward some things to check.

Yesterday we had an event where our primary firewall would stop passing
traffic.  The only thing short of a reboot that would restore service was
to run 'sh /etc/netstart pfsync0'.  Resetting pfsync's physical interface
or pulling that cable didn't produce results.  Only resetting the pfsync0
virtual interface would restore service.   I'm not even sure what
information would be helpful to provide or what other questions to ask.  I
also found it odd that the two servers did not show the same number of
state entries by a difference of anywhere from 100 to 1000s.  Is this
typical?

Thanks,
Bennett


States come and go so depending on the amount of traffic going through 
the router, it could be off by a few hundred, or maybe even a few 
thousand if you do a lot of traffic.


I just counted the states (at the exact same time, several times) on 
some primary/backup CARP routers using pfsync that push a constant 
10-20mbit to several thousand web clients at any given moment, and the 
states were within about 150 of each other consistently. I would say 
being off by 1000s is indicative of a problem, but if you push a lot of 
traffic, it might not be.


Anyway, you need to post: a full ifconfig, dmesg, and look through 
/var/log/messages for anything interesting from CARP or pfsync to get 
started.


Also put your pfsync cabling through a cable tester just to double check 
it. I've had a bad pfsync interface cable cause weird problems before. 
Any errors on the interface? netstat -in will tell you about errors, not 
ifconfig it seems.




Re: turn ipw(4) off when not needed

2012-10-17 Thread Artturi Alm
2012/10/17 Jan Stary :
> This is current/i386 on an IBM Thinkpad T40.
>
> It comes with an ipw(4) wifi interface, which works fine. Anyway,
> the ipw(4) seems to be one of the substantial battery eaters. So
> I would like to not use the interface when running on battery
> and not actually using a wifi connection.
>
> Running 'ifconfig ipw0 down' seems to do that: the antenna icon led
> switches off, and time left (as reported by apm) starts increasing.
> (What would be a more rigorous way to see that the battery is actually
> running off more slowly now, others being equal? The machine doesn't
> have any sensors, as reported by 'sysctl hw').
>
> I would like to let that happen automatically, if only because sometimes
> I forget to do that, and drain the battery considerably faster.
> What is the preffered way to do that? Is ifstated(8) the way?
>
> istated(8) is monitoring the 'interface link state'.
> Is 'no network' recognizable as an interface link state?
> What I would like to recognize with ipw0 is what
> 'no carrier' would be for an ethernet interface:
> is that a good analogy? 'no network' just means
> the interface is not associated to any network,
> not that there isn't a nework around, right?
>
> Now I tend to put
>
>   ifconfig ipw0 | grep 'no network' > /dev/null && ifconfig ipw0 down
>
> into the root's crontab but that seems a bit crude.
>
> Jan
>

Hmm, there used to be sensors on my thinkpad T60,
now sysctl hw.sensors shows me nothing, and sysctl hw
does seem to wait something, i gave up after an half minute and
^C'd my way out of sysctl.


-Artturi



Re: softraid0: sd0 was not shutdown properly

2012-10-17 Thread Josh Grosse
Jan Stary  wrote:

>This is current/i386 on IBM Thinkpad T40.
>I am using a crypto RAID to host my /home partition,
>set up in rc.local as follows:
>
>  RAID=/dev/wd0o
>  HOMEFS=/dev/sd0a
>  echo mounting encrypted /home
>  bioctl -h -v -c C -l $RAID softraid0
>fsck $HOMEFS && mount -v -o rw,softdep,noatime,nodev,nosuid $HOMEFS
>/home
>
>This has worked fine for some weeks. Now after the upgrade
>to current, it says
>
>  softraid0: sd0 was not shutdown properly
>
>The filesystem that lives on sd0a thus created
>is clean and does not need fscking and mounts fine.
>
>sd0 at scsibus2 targ 1 lun 0:  SCSI2 0/direct
>fixed
>sd0: 20354MB, 512 bytes/sector, 41685328 sectors
>
>So everything works except I get this message when setting
>up the partition at boot time. Has something changed in
>the way softraid volumes are handled? In particular, is there
>something that needs to be done now to have the softraid
>'shut down properly'? I shutdown with 'shutdown -h -p now'
>as always, but that gets me this message on the next boot.
>
>   Jan
>
>
>OpenBSD 5.2-current (GENERIC) #36: Sun Oct 14 13:13:06 MDT 2012
>dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
>cpu0: Intel(R) Pentium(R) M processor 1500MHz ("GenuineIntel"
>686-class) 1.50 GHz
>cpu0:
>FPU,V86,DE,PSE,TSC,MSR,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,CFLUSH,DS,ACPI,MMX,FXSR
,SSE,SSE2,TM,PBE,EST,TM2
>real mem  = 267317248 (254MB)
>avail mem = 251985920 (240MB)
>mainbus0 at root
>bios0 at mainbus0: AT/286+ BIOS, date 06/18/07, BIOS32 rev. 0 @
>0xfd750, SMBIOS rev. 2.33 @ 0xe0010 (61 entries)
>bios0: vendor IBM version "1RETDRWW (3.23 )" date 06/18/2007
>bios0: IBM 237382G
>apm0 at bios0: Power Management spec V1.2
>acpi at bios0 function 0x0 not configured
>pcibios0 at bios0: rev 2.1 @ 0xfd6e0/0x920
>pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdea0/272 (15 entries)
>pcibios0: PCI Interrupt Router at 000:31:0 ("Intel 82371FB ISA" rev
>0x00)
>pcibios0: PCI bus #6 is the last bus
>bios0: ROM list: 0xc/0x1 0xd/0x1000 0xd1000/0x1000
>0xdc000/0x4000! 0xe/0x1
>cpu0 at mainbus0: (uniprocessor)
>cpu0: Enhanced SpeedStep 1496 MHz: speeds: 1500, 1400, 1200, 1000, 800,
>600 MHz
>pci0 at mainbus0 bus 0: configuration mode 1 (bios)
>0:31:1: io address conflict 0x5800/0x8
>0:31:1: io address conflict 0x5808/0x4
>0:31:1: io address conflict 0x5810/0x8
>0:31:1: io address conflict 0x580c/0x4
>pchb0 at pci0 dev 0 function 0 "Intel 82855PM Host" rev 0x03
>intelagp0 at pchb0
>agp0 at intelagp0: aperture at 0xd000, size 0x1000
>ppb0 at pci0 dev 1 function 0 "Intel 82855PM AGP" rev 0x03
>pci1 at ppb0 bus 1
>vga1 at pci1 dev 0 function 0 "ATI Radeon Mobility M7" rev 0x00
>wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
>wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
>radeondrm0 at vga1: irq 11
>drm0 at radeondrm0
>uhci0 at pci0 dev 29 function 0 "Intel 82801DB USB" rev 0x01: irq 11
>uhci1 at pci0 dev 29 function 1 "Intel 82801DB USB" rev 0x01: irq 11
>uhci2 at pci0 dev 29 function 2 "Intel 82801DB USB" rev 0x01: irq 11
>ehci0 at pci0 dev 29 function 7 "Intel 82801DB USB" rev 0x01: irq 11
>usb0 at ehci0: USB revision 2.0
>uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1
>ppb1 at pci0 dev 30 function 0 "Intel 82801BAM Hub-to-PCI" rev 0x81
>pci2 at ppb1 bus 2
>2:0:0: mem address conflict 0xb000/0x1000
>2:0:1: mem address conflict 0xb100/0x1000
>cbb0 at pci2 dev 0 function 0 "TI PCI1520 CardBus" rev 0x01: irq 11
>cbb1 at pci2 dev 0 function 1 "TI PCI1520 CardBus" rev 0x01: irq 11
>em0 at pci2 dev 1 function 0 "Intel PRO/1000MT (82540EP)" rev 0x03: irq
>11, address 00:0d:60:7f:83:fa
>ipw0 at pci2 dev 2 function 0 "Intel PRO/Wireless 2100" rev 0x04: irq
>11, address 00:0c:f1:16:9b:b8
>cardslot0 at cbb0 slot 0 flags 0
>cardbus0 at cardslot0: bus 3 device 0 cacheline 0x8, lattimer 0xb0
>pcmcia0 at cardslot0
>cardslot1 at cbb1 slot 1 flags 0
>cardbus1 at cardslot1: bus 6 device 0 cacheline 0x8, lattimer 0xb0
>pcmcia1 at cardslot1
>ichpcib0 at pci0 dev 31 function 0 "Intel 82801DBM LPC" rev 0x01:
>24-bit timer at 3579545Hz
>pciide0 at pci0 dev 31 function 1 "Intel 82801DBM IDE" rev 0x01: DMA,
>channel 0 configured to compatibility, channel 1 configured to
>compatibility
>wd0 at pciide0 channel 0 drive 0: 
>wd0: 16-sector PIO, LBA, 35087MB, 71859186 sectors
>wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
>atapiscsi0 at pciide0 channel 1 drive 0
>scsibus0 at atapiscsi0: 2 targets
>cd0 at scsibus0 targ 0 lun 0:  ATAPI
>5/cdrom removable
>cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
>ichiic0 at pci0 dev 31 function 3 "Intel 82801DB SMBus" rev 0x01: irq
>11
>iic0 at ichiic0
>spdmem0 at iic0 addr 0x50: 256MB DDR SDRAM non-parity PC2700CL2.5
>auich0 at pci0 dev 31 function 5 "Intel 82801DB AC97" rev 0x01: irq 11,
>ICH4 AC97
>ac97: codec id 0x41445374 (Analog Devices AD1981B)
>ac97: codec features headphone, 20 bit DAC, No 3D Stereo
>audio0 at auich0
>"Intel 82801DB Modem" rev 0x01 at pci0 dev 31 function 6 not c

Re: turn ipw(4) off when not needed

2012-10-17 Thread Todd T. Fries
Penned by Jan Stary on 20121017 10:46.55, we have:
| This is current/i386 on an IBM Thinkpad T40.
| 
| It comes with an ipw(4) wifi interface, which works fine. Anyway,
| the ipw(4) seems to be one of the substantial battery eaters. So
| I would like to not use the interface when running on battery
| and not actually using a wifi connection.
| 
| Running 'ifconfig ipw0 down' seems to do that: the antenna icon led
| switches off, and time left (as reported by apm) starts increasing.
| (What would be a more rigorous way to see that the battery is actually
| running off more slowly now, others being equal? The machine doesn't
| have any sensors, as reported by 'sysctl hw').
| 
| I would like to let that happen automatically, if only because sometimes
| I forget to do that, and drain the battery considerably faster.
| What is the preffered way to do that? Is ifstated(8) the way?
| 
| istated(8) is monitoring the 'interface link state'.
| Is 'no network' recognizable as an interface link state?
| What I would like to recognize with ipw0 is what
| 'no carrier' would be for an ethernet interface:
| is that a good analogy? 'no network' just means
| the interface is not associated to any network,
| not that there isn't a nework around, right?
| 
| Now I tend to put
| 
|   ifconfig ipw0 | grep 'no network' > /dev/null && ifconfig ipw0 down
| 
| into the root's crontab but that seems a bit crude.
| 
|   Jan

A slightly less crude way would be to put this there:

ifconfig egress | grep "^ipw0" > /dev/null && { apm | grep 'A/C adapter 
state: connected' || ifconfig ipw0 down; }

because if 'egress' is not on ipw0 you're not using wireless,
and if the A/C adapter state is not connected, you're on battery.

Just sayin' ;-)

| 
| 
| OpenBSD 5.2-current (GENERIC) #36: Sun Oct 14 13:13:06 MDT 2012
| dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
| cpu0: Intel(R) Pentium(R) M processor 1500MHz ("GenuineIntel" 686-class) 1.50 
GHz
| cpu0: 
FPU,V86,DE,PSE,TSC,MSR,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,TM,PBE,EST,TM2
| real mem  = 267317248 (254MB)
| avail mem = 251985920 (240MB)
| mainbus0 at root
| bios0 at mainbus0: AT/286+ BIOS, date 06/18/07, BIOS32 rev. 0 @ 0xfd750, 
SMBIOS rev. 2.33 @ 0xe0010 (61 entries)
| bios0: vendor IBM version "1RETDRWW (3.23 )" date 06/18/2007
| bios0: IBM 237382G
| apm0 at bios0: Power Management spec V1.2
| acpi at bios0 function 0x0 not configured
| pcibios0 at bios0: rev 2.1 @ 0xfd6e0/0x920
| pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdea0/272 (15 entries)
| pcibios0: PCI Interrupt Router at 000:31:0 ("Intel 82371FB ISA" rev 0x00)
| pcibios0: PCI bus #6 is the last bus
| bios0: ROM list: 0xc/0x1 0xd/0x1000 0xd1000/0x1000 
0xdc000/0x4000! 0xe/0x1
| cpu0 at mainbus0: (uniprocessor)
| cpu0: Enhanced SpeedStep 1496 MHz: speeds: 1500, 1400, 1200, 1000, 800, 600 
MHz
| pci0 at mainbus0 bus 0: configuration mode 1 (bios)
| 0:31:1: io address conflict 0x5800/0x8
| 0:31:1: io address conflict 0x5808/0x4
| 0:31:1: io address conflict 0x5810/0x8
| 0:31:1: io address conflict 0x580c/0x4
| pchb0 at pci0 dev 0 function 0 "Intel 82855PM Host" rev 0x03
| intelagp0 at pchb0
| agp0 at intelagp0: aperture at 0xd000, size 0x1000
| ppb0 at pci0 dev 1 function 0 "Intel 82855PM AGP" rev 0x03
| pci1 at ppb0 bus 1
| vga1 at pci1 dev 0 function 0 "ATI Radeon Mobility M7" rev 0x00
| wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
| wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
| radeondrm0 at vga1: irq 11
| drm0 at radeondrm0
| uhci0 at pci0 dev 29 function 0 "Intel 82801DB USB" rev 0x01: irq 11
| uhci1 at pci0 dev 29 function 1 "Intel 82801DB USB" rev 0x01: irq 11
| uhci2 at pci0 dev 29 function 2 "Intel 82801DB USB" rev 0x01: irq 11
| ehci0 at pci0 dev 29 function 7 "Intel 82801DB USB" rev 0x01: irq 11
| usb0 at ehci0: USB revision 2.0
| uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1
| ppb1 at pci0 dev 30 function 0 "Intel 82801BAM Hub-to-PCI" rev 0x81
| pci2 at ppb1 bus 2
| 2:0:0: mem address conflict 0xb000/0x1000
| 2:0:1: mem address conflict 0xb100/0x1000
| cbb0 at pci2 dev 0 function 0 "TI PCI1520 CardBus" rev 0x01: irq 11
| cbb1 at pci2 dev 0 function 1 "TI PCI1520 CardBus" rev 0x01: irq 11
| em0 at pci2 dev 1 function 0 "Intel PRO/1000MT (82540EP)" rev 0x03: irq 11, 
address 00:0d:60:7f:83:fa
| ipw0 at pci2 dev 2 function 0 "Intel PRO/Wireless 2100" rev 0x04: irq 11, 
address 00:0c:f1:16:9b:b8
| cardslot0 at cbb0 slot 0 flags 0
| cardbus0 at cardslot0: bus 3 device 0 cacheline 0x8, lattimer 0xb0
| pcmcia0 at cardslot0
| cardslot1 at cbb1 slot 1 flags 0
| cardbus1 at cardslot1: bus 6

PFSync question

2012-10-17 Thread Bennett Samowich
I just had an event that I'm having trouble identifying the root cause.
I'm hoping that someone might have encountered this or might be able to
point me toward some things to check.

Yesterday we had an event where our primary firewall would stop passing
traffic.  The only thing short of a reboot that would restore service was
to run 'sh /etc/netstart pfsync0'.  Resetting pfsync's physical interface
or pulling that cable didn't produce results.  Only resetting the pfsync0
virtual interface would restore service.   I'm not even sure what
information would be helpful to provide or what other questions to ask.  I
also found it odd that the two servers did not show the same number of
state entries by a difference of anywhere from 100 to 1000s.  Is this
typical?

Thanks,
Bennett



turn ipw(4) off when not needed

2012-10-17 Thread Jan Stary
This is current/i386 on an IBM Thinkpad T40.

It comes with an ipw(4) wifi interface, which works fine. Anyway,
the ipw(4) seems to be one of the substantial battery eaters. So
I would like to not use the interface when running on battery
and not actually using a wifi connection.

Running 'ifconfig ipw0 down' seems to do that: the antenna icon led
switches off, and time left (as reported by apm) starts increasing.
(What would be a more rigorous way to see that the battery is actually
running off more slowly now, others being equal? The machine doesn't
have any sensors, as reported by 'sysctl hw').

I would like to let that happen automatically, if only because sometimes
I forget to do that, and drain the battery considerably faster.
What is the preffered way to do that? Is ifstated(8) the way?

istated(8) is monitoring the 'interface link state'.
Is 'no network' recognizable as an interface link state?
What I would like to recognize with ipw0 is what
'no carrier' would be for an ethernet interface:
is that a good analogy? 'no network' just means
the interface is not associated to any network,
not that there isn't a nework around, right?

Now I tend to put

  ifconfig ipw0 | grep 'no network' > /dev/null && ifconfig ipw0 down

into the root's crontab but that seems a bit crude.

Jan


OpenBSD 5.2-current (GENERIC) #36: Sun Oct 14 13:13:06 MDT 2012
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) M processor 1500MHz ("GenuineIntel" 686-class) 1.50 
GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,TM,PBE,EST,TM2
real mem  = 267317248 (254MB)
avail mem = 251985920 (240MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 06/18/07, BIOS32 rev. 0 @ 0xfd750, SMBIOS 
rev. 2.33 @ 0xe0010 (61 entries)
bios0: vendor IBM version "1RETDRWW (3.23 )" date 06/18/2007
bios0: IBM 237382G
apm0 at bios0: Power Management spec V1.2
acpi at bios0 function 0x0 not configured
pcibios0 at bios0: rev 2.1 @ 0xfd6e0/0x920
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdea0/272 (15 entries)
pcibios0: PCI Interrupt Router at 000:31:0 ("Intel 82371FB ISA" rev 0x00)
pcibios0: PCI bus #6 is the last bus
bios0: ROM list: 0xc/0x1 0xd/0x1000 0xd1000/0x1000 0xdc000/0x4000! 
0xe/0x1
cpu0 at mainbus0: (uniprocessor)
cpu0: Enhanced SpeedStep 1496 MHz: speeds: 1500, 1400, 1200, 1000, 800, 600 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
0:31:1: io address conflict 0x5800/0x8
0:31:1: io address conflict 0x5808/0x4
0:31:1: io address conflict 0x5810/0x8
0:31:1: io address conflict 0x580c/0x4
pchb0 at pci0 dev 0 function 0 "Intel 82855PM Host" rev 0x03
intelagp0 at pchb0
agp0 at intelagp0: aperture at 0xd000, size 0x1000
ppb0 at pci0 dev 1 function 0 "Intel 82855PM AGP" rev 0x03
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 "ATI Radeon Mobility M7" rev 0x00
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
radeondrm0 at vga1: irq 11
drm0 at radeondrm0
uhci0 at pci0 dev 29 function 0 "Intel 82801DB USB" rev 0x01: irq 11
uhci1 at pci0 dev 29 function 1 "Intel 82801DB USB" rev 0x01: irq 11
uhci2 at pci0 dev 29 function 2 "Intel 82801DB USB" rev 0x01: irq 11
ehci0 at pci0 dev 29 function 7 "Intel 82801DB USB" rev 0x01: irq 11
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1
ppb1 at pci0 dev 30 function 0 "Intel 82801BAM Hub-to-PCI" rev 0x81
pci2 at ppb1 bus 2
2:0:0: mem address conflict 0xb000/0x1000
2:0:1: mem address conflict 0xb100/0x1000
cbb0 at pci2 dev 0 function 0 "TI PCI1520 CardBus" rev 0x01: irq 11
cbb1 at pci2 dev 0 function 1 "TI PCI1520 CardBus" rev 0x01: irq 11
em0 at pci2 dev 1 function 0 "Intel PRO/1000MT (82540EP)" rev 0x03: irq 11, 
address 00:0d:60:7f:83:fa
ipw0 at pci2 dev 2 function 0 "Intel PRO/Wireless 2100" rev 0x04: irq 11, 
address 00:0c:f1:16:9b:b8
cardslot0 at cbb0 slot 0 flags 0
cardbus0 at cardslot0: bus 3 device 0 cacheline 0x8, lattimer 0xb0
pcmcia0 at cardslot0
cardslot1 at cbb1 slot 1 flags 0
cardbus1 at cardslot1: bus 6 device 0 cacheline 0x8, lattimer 0xb0
pcmcia1 at cardslot1
ichpcib0 at pci0 dev 31 function 0 "Intel 82801DBM LPC" rev 0x01: 24-bit timer 
at 3579545Hz
pciide0 at pci0 dev 31 function 1 "Intel 82801DBM IDE" rev 0x01: DMA, channel 0 
configured to compatibility, channel 1 configured to compatibility
wd0 at pciide0 channel 0 drive 0: 
wd0: 16-sector PIO, LBA, 35087MB, 71859186 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0:  ATAPI 5/cdrom 
removable
cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
ichiic0 at pci0 dev 31 function 3 "Intel 82801DB SMBus" rev 0x01: irq 11
iic0 at ichiic0
spdmem0 at iic0 addr 0x50: 256MB DDR SDRAM non-parity PC2700CL2.5
auich0 at pci0 dev 31 function 5 "Intel 82801DB AC97" rev 0x01: irq 11, ICH4 
AC97
ac9

softraid0: sd0 was not shutdown properly

2012-10-17 Thread Jan Stary
This is current/i386 on IBM Thinkpad T40.
I am using a crypto RAID to host my /home partition,
set up in rc.local as follows:

  RAID=/dev/wd0o
  HOMEFS=/dev/sd0a
  echo mounting encrypted /home
  bioctl -h -v -c C -l $RAID softraid0
  fsck $HOMEFS && mount -v -o rw,softdep,noatime,nodev,nosuid $HOMEFS /home

This has worked fine for some weeks. Now after the upgrade
to current, it says

  softraid0: sd0 was not shutdown properly

The filesystem that lives on sd0a thus created
is clean and does not need fscking and mounts fine.

sd0 at scsibus2 targ 1 lun 0:  SCSI2 0/direct fixed
sd0: 20354MB, 512 bytes/sector, 41685328 sectors

So everything works except I get this message when setting
up the partition at boot time. Has something changed in
the way softraid volumes are handled? In particular, is there
something that needs to be done now to have the softraid
'shut down properly'? I shutdown with 'shutdown -h -p now'
as always, but that gets me this message on the next boot.

Jan


OpenBSD 5.2-current (GENERIC) #36: Sun Oct 14 13:13:06 MDT 2012
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) M processor 1500MHz ("GenuineIntel" 686-class) 1.50 
GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,TM,PBE,EST,TM2
real mem  = 267317248 (254MB)
avail mem = 251985920 (240MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 06/18/07, BIOS32 rev. 0 @ 0xfd750, SMBIOS 
rev. 2.33 @ 0xe0010 (61 entries)
bios0: vendor IBM version "1RETDRWW (3.23 )" date 06/18/2007
bios0: IBM 237382G
apm0 at bios0: Power Management spec V1.2
acpi at bios0 function 0x0 not configured
pcibios0 at bios0: rev 2.1 @ 0xfd6e0/0x920
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdea0/272 (15 entries)
pcibios0: PCI Interrupt Router at 000:31:0 ("Intel 82371FB ISA" rev 0x00)
pcibios0: PCI bus #6 is the last bus
bios0: ROM list: 0xc/0x1 0xd/0x1000 0xd1000/0x1000 0xdc000/0x4000! 
0xe/0x1
cpu0 at mainbus0: (uniprocessor)
cpu0: Enhanced SpeedStep 1496 MHz: speeds: 1500, 1400, 1200, 1000, 800, 600 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
0:31:1: io address conflict 0x5800/0x8
0:31:1: io address conflict 0x5808/0x4
0:31:1: io address conflict 0x5810/0x8
0:31:1: io address conflict 0x580c/0x4
pchb0 at pci0 dev 0 function 0 "Intel 82855PM Host" rev 0x03
intelagp0 at pchb0
agp0 at intelagp0: aperture at 0xd000, size 0x1000
ppb0 at pci0 dev 1 function 0 "Intel 82855PM AGP" rev 0x03
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 "ATI Radeon Mobility M7" rev 0x00
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
radeondrm0 at vga1: irq 11
drm0 at radeondrm0
uhci0 at pci0 dev 29 function 0 "Intel 82801DB USB" rev 0x01: irq 11
uhci1 at pci0 dev 29 function 1 "Intel 82801DB USB" rev 0x01: irq 11
uhci2 at pci0 dev 29 function 2 "Intel 82801DB USB" rev 0x01: irq 11
ehci0 at pci0 dev 29 function 7 "Intel 82801DB USB" rev 0x01: irq 11
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1
ppb1 at pci0 dev 30 function 0 "Intel 82801BAM Hub-to-PCI" rev 0x81
pci2 at ppb1 bus 2
2:0:0: mem address conflict 0xb000/0x1000
2:0:1: mem address conflict 0xb100/0x1000
cbb0 at pci2 dev 0 function 0 "TI PCI1520 CardBus" rev 0x01: irq 11
cbb1 at pci2 dev 0 function 1 "TI PCI1520 CardBus" rev 0x01: irq 11
em0 at pci2 dev 1 function 0 "Intel PRO/1000MT (82540EP)" rev 0x03: irq 11, 
address 00:0d:60:7f:83:fa
ipw0 at pci2 dev 2 function 0 "Intel PRO/Wireless 2100" rev 0x04: irq 11, 
address 00:0c:f1:16:9b:b8
cardslot0 at cbb0 slot 0 flags 0
cardbus0 at cardslot0: bus 3 device 0 cacheline 0x8, lattimer 0xb0
pcmcia0 at cardslot0
cardslot1 at cbb1 slot 1 flags 0
cardbus1 at cardslot1: bus 6 device 0 cacheline 0x8, lattimer 0xb0
pcmcia1 at cardslot1
ichpcib0 at pci0 dev 31 function 0 "Intel 82801DBM LPC" rev 0x01: 24-bit timer 
at 3579545Hz
pciide0 at pci0 dev 31 function 1 "Intel 82801DBM IDE" rev 0x01: DMA, channel 0 
configured to compatibility, channel 1 configured to compatibility
wd0 at pciide0 channel 0 drive 0: 
wd0: 16-sector PIO, LBA, 35087MB, 71859186 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0:  ATAPI 5/cdrom 
removable
cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
ichiic0 at pci0 dev 31 function 3 "Intel 82801DB SMBus" rev 0x01: irq 11
iic0 at ichiic0
spdmem0 at iic0 addr 0x50: 256MB DDR SDRAM non-parity PC2700CL2.5
auich0 at pci0 dev 31 function 5 "Intel 82801DB AC97" rev 0x01: irq 11, ICH4 
AC97
ac97: codec id 0x41445374 (Analog Devices AD1981B)
ac97: codec features headphone, 20 bit DAC, No 3D Stereo
audio0 at auich0
"Intel 82801DB Modem" rev 0x01 at pci0 dev 31 function 6 not configured
usb1 at uhci0: USB revision 1.0
uhub1 at usb1 "Intel UHCI root hub" rev 1.00/1.00 addr 1
usb2 at uhci1: USB revisio

Re: OpenBSD-current, any chance to have TU2-ETG (ethernet adapter) working?

2012-10-17 Thread Theo de Raadt
> I just install the last snapshot i386, and plug my Trendnet Ethernet 
> Adapter (TU2-ETG).
> When i run this:
> 
> (ifconfig axe0 media ; dmesg ; sysctl hw.sensors)
> 
> axe0: flags=8802 mtu 1500
>  lladdr 00:50:b6:4e:5a:c9
>  priority: 0
>  media: Ethernet none (none)
>  supported media:
>  media none

I don't see any problem.

A lot of devices must be configured up, before they will negotiate link.



Re: spamd and greyscanner help needed..

2012-10-17 Thread Jan Stary
On Oct 17 09:33:28, o...@drijf.net wrote:
> Op 17 okt. 2012 om 09:16 heeft Joakim Aronius  het
> volgende geschreven:
> 
> > * Boudewijn Dijkstra (sp4mtr4p.boudew...@indes.com) wrote:
> >> Op Tue, 16 Oct 2012 22:01:54 +0200 schreef Joakim Aronius
> >> :
> >>
> >>> Any ideas on what I am doing wrong?
> >>
> >> I would guess that there is a mistake in your pf.conf.
> >
> > Yep. I had added a 'log' keyword to the redirect rule for spamd (incoming 25
> -> 8025) to get some 'observability'... Spamlogd caught that log entry and
> immediately whitelisted the sender.. Its a bit unfortunate that it is then not
> possible to log the rdrs but I can live with that.
> 
> 
> To avoid this problem, use another pflog interface for spamlogd. See the man
> page for details.

Exactly. This is why I have pflog1, just for spamlogd to use.
Notice that log interfaces beyond pflog0 do not even exist by default;
but it suffices to have 'up' in /etc/hostname.pflog1



Especialización en Contratos, Nóminas y Seguridad Social

2012-10-17 Thread Ascensión González
Si a veces no recibe nuestro email, añada i...@estupendoscursos.com a su
Libreta de Direcciones
y lo recibirá sin problemas.
Pulse AQUÍ si no lo visualiza correctamente.

GRUPO IOE - UNIVERSIDAD DE ALCALÁ

ESPECIALIZACIÓN  EN CONTRATOS, NÓMINAS Y SEGURIDAD SOCIAL -
UNIVERSIDAD DE ALCALÁ

MODALIDAD NO
PRESENCIAL

TIPOS DE
CONTRATO, GESTIONE EFICAZMENTE LA CONTRATACIÓN Y NÓMINAS,
ANALICE LAS PRESTACIONES, DERECHOS Y GARANTÍAS DE LA SEGURIDAD SOCIAL

MÁS
INFORMACIÓN

Sus datos han sido obtenidos de fuentes de acceso público, en especial,
listines telefónicos, guías de empresas y otros medios de comunicación
titularidad de Fundamental Negocios, S.L. Si no desea que le enviemos
publicidad de cursos de formación, por favor, pulse aquí o envíe un
correo electronico a i...@estupendoscursos.com para solicitar su baja.

[IMAGE]



Re: su and passwd

2012-10-17 Thread Massimo Pignoloni

Hi
you can use "passwd root", after "su", or use "su -" that simulate a 
"full login" and the command "passwd".

Massimo
Il 12/11/2012 16.38, Alessandro Baggi ha scritto:

Hi list,
today, I've logged on my openbsd box, and when I change the root 
password I get this:



$ uname -pmrsv
OpenBSD 5.1 GENERIC.MP#207 amd64 amd64
$ whoami
userlog
$ echo $USER
userlog
$ su
Password:
# passwd
Changing local password for userlog.
New password:
Password unchanged.
# echo $USER
userlog
#


Logging in with an user called "userlog", get su, run passwd as root, 
it says that i'm changing password for userlog.


From manual page I get:


 By default, the environment is unmodified with the exception of 
LOGNAME,

 HOME, SHELL, and USER.  HOME and SHELL are set to the target login's
 default values.  LOGNAME and USER are set to the target login, 
unless the
 target login has a user ID of 0 and the -l flag was not 
specified, in
 which case it is unmodified.  The invoked shell is the target 
login's.

 This is the traditional behavior of su

Running "su -l" works good.

Why if user ID is == 0 or if there's no -l, the $USER will not be set? 
What is the policy?


I've tried this also on OpenBSD 4.9 with same result.

Thanks in advance.

Alessandro.




avoiding icmp redirect storm

2012-10-17 Thread Jose Fragoso
Hi,

 I have a pair of firewalls running Obsd 4.9 and carp
 (in active-passive mode).

 I see a lot of icmp redirect packets in the network using tcpdump.

 I tried to block them with PF (both incomming and outgoing).

 block drop out log quick on $int_if inet proto icmp icmp-type redir
 block drop in log on $int_if inet proto icmp
 pass in on $int_if inet proto icmp icmp-type echoreq


I tried

 net.inet.ip.redirect=0
 net.inet.icmp.rediraccept=0

But still some icmp redirect packets go out through the interface
 where PF should be blocking. The source MAC of the icmp
 redirect packets is that of the $int_if interface.

 So, in short, is there a simple way to block all incomming
 and outgoing icmp redirect packets in a obsd firewall?

 Thanks in advance.

 Regards,

 Jose



Re: spamd and greyscanner help needed..

2012-10-17 Thread Joakim Aronius
* Otto Moerbeek (o...@drijf.net) wrote:
> Op 17 okt. 2012 om 09:16 heeft Joakim Aronius  het
> volgende geschreven:
> > Yep. I had added a 'log' keyword to the redirect rule for spamd (incoming 25
> -> 8025) to get some 'observability'... Spamlogd caught that log entry and
> immediately whitelisted the sender.. Its a bit unfortunate that it is then not
> possible to log the rdrs but I can live with that.
> 
> 
> To avoid this problem, use another pflog interface for spamlogd. See the man
> page for details.
>

Good point, thanks! Will look into that.
/J



Re: Slow VPN Performance

2012-10-17 Thread Michael Sideris
`ping -c10`

(L-VPN --> G-VPN)

PING G.G.G.G (G.G.G.G): 56 data bytes
64 bytes from G.G.G.G: icmp_seq=0 ttl=255 time=17.073 ms
64 bytes from G.G.G.G: icmp_seq=1 ttl=255 time=3.604 ms
64 bytes from G.G.G.G: icmp_seq=2 ttl=255 time=3.666 ms
64 bytes from G.G.G.G: icmp_seq=3 ttl=255 time=3.716 ms
64 bytes from G.G.G.G: icmp_seq=4 ttl=255 time=3.639 ms
64 bytes from G.G.G.G: icmp_seq=5 ttl=255 time=3.685 ms
64 bytes from G.G.G.G: icmp_seq=6 ttl=255 time=3.734 ms
64 bytes from G.G.G.G: icmp_seq=7 ttl=255 time=3.658 ms
64 bytes from G.G.G.G: icmp_seq=8 ttl=255 time=3.707 ms
64 bytes from G.G.G.G: icmp_seq=9 ttl=255 time=3.755 ms
--- G.G.G.G ping statistics ---
10 packets transmitted, 10 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 3.604/5.023/17.073/4.017 ms


(G-VPN --> L-VPN)

PING L.L.L.L (L.L.L.L): 56 data bytes
64 bytes from L.L.L.L: icmp_seq=0 ttl=255 time=3.707 ms
64 bytes from L.L.L.L: icmp_seq=1 ttl=255 time=3.746 ms
64 bytes from L.L.L.L: icmp_seq=2 ttl=255 time=3.677 ms
64 bytes from L.L.L.L: icmp_seq=3 ttl=255 time=3.717 ms
64 bytes from L.L.L.L: icmp_seq=4 ttl=255 time=3.754 ms
64 bytes from L.L.L.L: icmp_seq=5 ttl=255 time=3.670 ms
64 bytes from L.L.L.L: icmp_seq=6 ttl=255 time=3.703 ms
64 bytes from L.L.L.L: icmp_seq=7 ttl=255 time=3.742 ms
64 bytes from L.L.L.L: icmp_seq=8 ttl=255 time=3.654 ms
64 bytes from L.L.L.L: icmp_seq=9 ttl=255 time=3.693 ms
--- L.L.L.L ping statistics ---
10 packets transmitted, 10 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 3.654/3.706/3.754/0.057 ms


It is also worth mentioning that if I send anything from one endpoint
to the other, the speed is ~7.5MB/s. Better than a transfer between 2
nodes from each site but still a bit slow for a 150Mbit/s <--> 1Gbit/s
link.

On Wed, Oct 17, 2012 at 1:36 AM, Kent Fritz  wrote:
> I didn't see anyone reply to this yet, so let me ask a really dumb question:
> what's the round-trip-time between G.G.G.G and L.L.L.L?  Are you running
> into the TCP limits due to this?
>
>
> On Tue, Oct 16, 2012 at 2:43 AM, Michael Sideris  wrote:
>>
>> Hey @misc,
>>
>> --- ENDPOINT INFO ---
>>
>> `dmesg`
>>
>> (G-VPN)
>> OpenBSD 5.1 (GENERIC.MP) #207: Sun Feb 12 09:42:14 MST 2012
>> dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
>> real mem = 2146172928 (2046MB)
>> avail mem = 2074935296 (1978MB)
>> mainbus0 at root
>> bios0 at mainbus0: SMBIOS rev. 2.3 @ 0xfa850 (75 entries)
>> bios0: vendor Dell Computer Corporation version "A03" date 01/04/2006
>> bios0: Dell Computer Corporation PowerEdge SC1425
>> acpi0 at bios0: rev 0
>> acpi0: sleep states S0 S4 S5
>> acpi0: tables DSDT FACP APIC SPCR HPET MCFG
>> acpi0: wakeup devices PCI0(S5) PALO(S5) PXH_(S5) PXHB(S5) PXHA(S5)
>> PICH(S5)
>> acpitimer0 at acpi0: 3579545 Hz, 24 bits
>> acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
>> cpu0 at mainbus0: apid 0 (boot processor)
>> cpu0: Intel(R) Xeon(TM) CPU 2.80GHz, 2800.48 MHz
>> cpu0:
>> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR,NXE,LONG
>> cpu0: 1MB 64b/line 8-way L2 cache
>> cpu0: apic clock running at 200MHz
>> cpu1 at mainbus0: apid 1 (application processor)
>> cpu1: Intel(R) Xeon(TM) CPU 2.80GHz, 2800.11 MHz
>> cpu1:
>> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR,NXE,LONG
>> cpu1: 1MB 64b/line 8-way L2 cache
>> ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
>> ioapic0: misconfigured as apic 0, remapped to apid 2
>> ioapic1 at mainbus0: apid 3 pa 0xfec8, version 20, 24 pins
>> ioapic1: misconfigured as apic 0, remapped to apid 3
>> ioapic2 at mainbus0: apid 4 pa 0xfec80800, version 20, 24 pins
>> ioapic2: misconfigured as apic 0, remapped to apid 4
>> acpihpet0 at acpi0: 14318179 Hz
>> acpimcfg0 at acpi0 addr 0xe000, bus 0-255
>> acpiprt0 at acpi0: bus 0 (PCI0)
>> acpiprt1 at acpi0: bus 1 (PALO)
>> acpiprt2 at acpi0: bus 3 (PXHB)
>> acpiprt3 at acpi0: bus 2 (PXHA)
>> acpiprt4 at acpi0: bus 4 (PICH)
>> acpicpu0 at acpi0
>> acpicpu1 at acpi0
>> ipmi at mainbus0 not configured
>> pci0 at mainbus0 bus 0
>> pchb0 at pci0 dev 0 function 0 "Intel E7520 Host" rev 0x09
>> ppb0 at pci0 dev 2 function 0 "Intel E7520 PCIE" rev 0x09
>> pci1 at ppb0 bus 1
>> ppb1 at pci1 dev 0 function 0 "Intel 6700PXH PCIE-PCIX" rev 0x09
>> pci2 at ppb1 bus 2
>> em0 at pci2 dev 4 function 0 "Intel PRO/1000MT (82541GI)" rev 0x05:
>> apic 3 int 0, address 00:14:22:72:61:c6
>> ppb2 at pci1 dev 0 function 2 "Intel 6700PXH PCIE-PCIX" rev 0x09
>> pci3 at ppb2 bus 3
>> isp0 at pci3 dev 7 function 0 "QLogic ISP2312" rev 0x02: apic 4 int 2
>> isp0: board type 2312 rev 0x2, loaded firmware rev 3.3.19
>> scsibus0 at isp0: 512 targets, WWPN 21e08b1d3fc7, WWNN
>> 20e08b1d3fc7
>> uhci0 at pci0 dev 29 function 0 "Intel 82801EB/ER USB" rev 0x02: apic 2
>> int 

Re: -current X not working, hangs up +dmesg [fixed]

2012-10-17 Thread Gregory Edigarov
On 10/15/2012 04:46 PM, Gregory Edigarov wrote:
> On 10/15/2012 12:45 PM, Gregory Edigarov wrote:
>> On 10/15/2012 12:32 PM, Gregory Edigarov wrote:
>>> Hi,
>>>
>>> After some changes I have X hanging my pc at start.
>>> dmesg for the pc was posted here some time ago, sorry, cannot get it
>>> right now.
>>> For some time, I was able to run it with vesa (it has intel onboard card
>>> currently unsupported)  driver without  any problem. Now I can't. 
> Just in case it helps, I'll post a dmesg from an updated  kernel.
>
The issue was fixed yesterday in the evening. It seems like something
screwed the BIOS settings up.
I've dropped into bios setup on the boot, then just chosen Save and
reboot. Nothing else.
X started right up.
Sorry for the noise...

--
With best regards,
Gregory Edigarov



Re: spamd and greyscanner help needed..

2012-10-17 Thread Otto Moerbeek
Op 17 okt. 2012 om 09:16 heeft Joakim Aronius  het
volgende geschreven:

> * Boudewijn Dijkstra (sp4mtr4p.boudew...@indes.com) wrote:
>> Op Tue, 16 Oct 2012 22:01:54 +0200 schreef Joakim Aronius
>> :
>>
>>> Any ideas on what I am doing wrong?
>>
>> I would guess that there is a mistake in your pf.conf.
>
> Yep. I had added a 'log' keyword to the redirect rule for spamd (incoming 25
-> 8025) to get some 'observability'... Spamlogd caught that log entry and
immediately whitelisted the sender.. Its a bit unfortunate that it is then not
possible to log the rdrs but I can live with that.


To avoid this problem, use another pflog interface for spamlogd. See the man
page for details.

>
> Thx
> /Joakim



Re: spamd and greyscanner help needed..

2012-10-17 Thread Joakim Aronius
* Boudewijn Dijkstra (sp4mtr4p.boudew...@indes.com) wrote:
> Op Tue, 16 Oct 2012 22:01:54 +0200 schreef Joakim Aronius
> :
> 
> >Any ideas on what I am doing wrong?
> 
> I would guess that there is a mistake in your pf.conf.

Yep. I had added a 'log' keyword to the redirect rule for spamd (incoming 25 -> 
8025) to get some 'observability'... Spamlogd caught that log entry and 
immediately whitelisted the sender.. Its a bit unfortunate that it is then not 
possible to log the rdrs but I can live with that. 

Thx
/Joakim



Latest News & Events from Liverpool TownTalk

2012-10-17 Thread Liverpool TownTalk
Liverpool

TownTalk Logo

17th, October Newsletter

www.liverpool.towntalk.co.uk

TownTalk Menu

Hello MRS MISCHELLE LAW

Liverpool Irish Festival

This October see’s the 10th edition of the Liverpool Irish Festival.
Explore the Irish music and culture in the vibrant city of Liverpool.

Liverpool Irish Festival

This October Liverpool will play host to the 10th edition of the
Liverpool Irish Festival. Now considered to be one of the UK’s top Irish
festivals, it features some of the best contemporary and traditional acts
from over the water yet never loses sight of the fact that it’s roots are
amongst that huge slice of Liverpool’s population that can trace it’s
ancestry back to the ‘old country’. Thi [...]

[Read More]

To reach over 12,000 subscribers in next month's Newsletter click here

Wild Planet

It's your last chance to see the Wild Planet exhibition on show at the
World Museum until Sunday 28th October.

Wild Planet

'Wild Planet' is a photographic exhibition showcasing stunning images
from the natural world that highlight the dazzling beauty and diversity
of our planet. The exhibition will feature 80 images chosen by BBC
personality and zoologist Chris Packham from previous years of 'Wildlife
Photographer of the Year'. Highlights include: 'Human Encounter' by Suzi
Eszterhas (USA). A 10-month-old moun [...]

[Read More]

To reach over 12,000 subscribers in next month's Newsletter click here

A Worker Tradition or a Financial Drain?

Would you like a tea or coffee? Whether it’s time out in the kitchen or
sipping a hot brew at your desk, as a nation, we love a tea break. Yet in
a time of economic fragility, can we afford such pleasantries? Is it time
to remove the mugs, cancel the cuppa’s and turn off the kettle for good?

A Worker Tradition or a Financial Drain?

In a time of economic hardship, businesses are increasingly looking for
ways to streamline their processes in a bid to save on costs. This drive
towards increased efficiency can often come at a cost to employees, with
staff pay and facilities being in the firing line. However, whereas
cancelling the staff socials and the Christmas party may save a lump sum,
having on-going staff facilities av [...]

[Read More]

To reach over 12,000 subscribers in next month's Newsletter click here

Lydiate Scouts Car Boot Sale

A friendly Car Boot Sale organised and run by the 1st Lydiate Scout Group
with all proceeds towards the promotion of scouting in Lydiate and
beyond. Full details available at www.lydiatescouts.org.uk/carbootsale
Email contact: c...@lydiatescouts.org.uk

Lydiate Scouts Car Boot Sale

Our sale is located outdoors on the field, but we have indoor heated
facilities including a cafe selling hot and cold snacks and drinks. There
are proper toilets We have space for up to 70 sellers safely parked, with
access for emergency services. We do not block cars in until end of sale,
so you are free to leave when ready to do so. 2012 Dates 24 March 2012 14
April 2012 28 April 2012 [...]

[Read More]

To reach over 12,000 subscribers in next month's Newsletter click here

Liverpool

TownTalk News & Events Alerts
t: 0845 686 5855
e: i...@towntalk.co.uk

Liverpool  TownTalk logo

TownTalk UK on Twitter [IMAGE] [IMAGE]

Please click here to unsubscribe from Liverpool TownTalk Alert Service



Recepcionista de Excelencia..la primera Impresión de su Empresa! 655165

2012-10-17 Thread Ing. Maria Alderete
655165

[IMAGE]

Herramientas Indispensables para una Recepcionista Excepcional
Exclusiva Presentación, 5 de Noviembre, Cd. de México.
¡Evento con Garantía de Satisfacción! Cupo Limitado a 15 participantes.
-Transmita seguridad y calidez con clientes externos e internos.
-Sobresalga como una ejecutiva de alto impacto.
-Proyecte a su empresa con una imagen profesional.
-Incremente sus habilidades de comunicación.
¡Reciba la información completa del taller!
Por favor responda este e-mail con la palabra MÁS INFO o bien apóyenos
enviando los datos siguientes.
Empresa, Nombre, Teléfono, Email y Número de Interesados.
En breve recibirá temario, reseña de expositor y tarifas Preferenciales.
¡Inscríbase y Capacítese! Este mes un 10% de descuento adicional.
Más Información, comentarios o dudas comuníquese a los teléfonos donde
con gusto uno de nuestros ejecutivos le atenderá.
Teléfonos: (0133) 8851-2365, (0133) 8851-2741 con más de 10 líneas.
Creciendo Juntos, Ganamos Todos!
Pms Capacitación Efectiva de México es una empresa especializada en
Capacitación Registrada ante la STPS. D&B D-U-N-S Registered™ D&B
D-U-N-S® Number 816637714
Tip del día: Planea, Evita los problemas de “vivir al momento” y crear
estrategias de último momento. Planea tus objetivos, elige un rumbo y
mantente. Anticipa posibles causales de emergencia y diseña planes de
contingencia previos que permitan conocer rutas a seguir. Esto ayudará a
crear metas en su compañía, compartirlas con su equipo y anticipar
obstáculos.
Frase del día: “Todos piensan en cambiar el mundo, pero nadie piensa en
cambiarse a sí mismo”. León Tolstoi
Copyright (C) 2011, PMS Capacitación Efectiva de México S.C. Derechos
Reservados.
E-Mail MARKETING SERVICE POWERED BY MEDIAMKTOOLS.

Este Mensaje ha sido enviado a misc@openbsd.org como usuario de Pms de
México o bien un usuario le refirió para recibir este boletín.
Como usuario de Pms de México, en este acto autoriza de manera expresa
que Pms de México le puede contactar vía correo electrónico u otros
medios.
ALTO, si en esta ocasión la información recibida no fue de su interés
pero desea recibir información personalizada en relación a otros temas
favor de indicarlo.
Si usted ha recibido este mensaje por error, haga caso omiso de el y de
antemano una sincera disculpa por la molestia, reporte su cuenta
respondiendo este correo con el subject BAJARECEPCION
Unsubscribe to this mailing list, reply a blank message with the subject
UNSUBSCRIBE BAJARECEPCION
Tenga en cuenta que la gestión de nuestras bases de datos es de suma
importancia para nosotros y no es intención de la empresa la
inconformidad del receptor, nuestra intención es promover herramientas de
utilidad para el

[demime 1.01d removed an attachment of type image/jpeg which had a name of 
imagerecepcionista002.jpg]