Re: qemu speed

2007-10-05 Thread Josh Tolley
On 10/5/07, Gerald Thornberry <[EMAIL PROTECTED]> wrote:
> I've been informed that I was talking out of my hat, as I suspected.
> KQEMU (QEMU accelerator) is a Linux kernel module and, therefore, not
> an option for the OpenBSD.  I'll put my hat back on my head now.

For whatever it's worth, I had to turn kqemu off when trying to run
OpenBSD inside qemu on my fedora box. A helpful #openbsd denizen whose
nick I've forgotten suggested that OpenBSD and most everything else
fails with kqemu.

-Josh



Re: BSD thin client

2007-01-27 Thread Josh Tolley

On 1/27/07, Reiner Jung <[EMAIL PROTECTED]> wrote:

In the next 2 weeks, a free NX client will be released which is runs on
OpenBSD without Linux emulation. All closed source parts from Nomachine
client are rewritten. As there are some parts from original Nomachine
client was used, it will be released under the GPL


That's excellent news! I assume this email list list will hear about it?

-Josh



Re: BSD thin client

2007-01-27 Thread Josh Tolley

On 1/27/07, Joachim Schipper <[EMAIL PROTECTED]> wrote:

Without details, that's about the best I can do. Some things which may
or may not be useful to you:
siteXYtools
some form of binary patching
freeNX, some VNC, or just plain X-over-the-network; or rdesktop,
if you use Windows servers


Along these lines, is there an NX client that works on OpenBSD? I've
played (only briefly) with the only one I've found available, namely
the linux client downloadable from nomachine.com. It starts up under
linux compatibility, but complains that it can't set TCP_NODELAY. I
didn't have the smarts or time to dig further than that. Anyone else?

-Josh



Re: revision control system for system administration

2006-12-19 Thread Josh Tolley

I'm not so convinced it is that complex on a homogeneous OpenBSD
network. OpenBSD is a very manageable system, such as the entire OS
contained in compressed tarballs for easy extraction and the flexible
ports system. Both of these entities are easily scriptable. Then all
there is to worry about is system configs and custom binaries, which can
be easily managed by CVS. A hierarchal CVS structure can be built to
mange global (all nodes in network), group (groups of similar servers),
and single (things specific to a node, like /etc/myname) nodes. You
apply global settings first, overwriting with more specific settings.


For what it's worth, in our various environments (eg. testing,
production, development, etc., each with up to 45 or so servers
running mostly RedHat Advanced Server) as well as for other internal
services we've found CVS and a script to push modifications to
affected servers to perform fairly well. That said, to my knowledge no
one here has spent much time looking at cfengine or other
alternatives, but a move to such a system would probably be viewed
with (guarded) enthusiasm.

-Josh



Re: News From HiFn

2006-07-01 Thread Josh Tolley

Here's what I think is cool: despite the tendency public forums
discussing the subject have of saying "OpenBSD people generally (or
Theo, or someone else specifically) are jerks", those same "jerks"
value freedom enough to write the best-engineered general purpose
operating system available, the world's most widely used ssh
implementation, a high-performance, full-featured BGP daemon, etc.,
and give them away without restriction to those who only spout
epithets back. Whatever your opinions of Hifn and their ilk, thanks to
all you "jerks" out there.



Re: lightweight openbsd

2006-06-26 Thread Josh Tolley

On 6/25/06, Lars Hansson <[EMAIL PROTECTED]> wrote:

You'll have a hard time fitting that on 128Mb. base, etc, man, bsd and bsd.rd
adds up to ~170Mb and I doubt leaving out man and bsd.rd will get it down to
less than 128Mb.


Speaking again from experience, it is possible to get by without
man.tgz, since they are available online. But it's a pain.

-Josh



Re: lightweight openbsd

2006-06-25 Thread Josh Tolley

On 6/24/06, Rogier Krieger <[EMAIL PROTECTED]> wrote:

If you want to install to a 128M CF, I suppose you're limiting
yourself to base39.tgz, etc39.tgz and a few bytes or spare space. I
wonder whether flashdist (as is rather popular on Soekris devices)
would be an easier tool for you.

Citing Google for "flashdist OpenBSD: http://www.nmedia.net/~chris/soekris/


My limited experience has taught me that by default, flashdist not
only removes things you probably won't run on the firewall/NAT boxes
for which it is intended (such as httpd, presumably), but also removes
some stuff that would be very nice for general system administration.
If memory serves, this includes things like passwd(1) and cron(8). In
other words, pay some attention to what flashdist includes and
excludes should you choose to use it. All that said, it was quite
simple to use, and certainly fast. The fact that the boxes I was
setting up when I used flashdist would have benefited more from
careful and considered installation than from fast installation was a
lesson I learned later, and not a shortcoming of flashdist ;)

-Josh



Trouble with auich and Intel 82801DB

2006-06-25 Thread Josh Tolley

I've finally taken the time to look into why sound doesn't work on my
laptop under 3.9 RELEASE. The full dmesg is below, however the part I
think is most relevant is here:

auich0 at pci0 dev 31 function 5 "Intel 82801DB AC97" rev
0x03pci_intr_map: no mapping for pin B

Both auich(4) and the supported hardware page say the 82801DB should
be supported. Any thoughts? Especially if there's no less catastrophic
answer forthcoming, I'm willing to consider things like defective
motherboard; it has given me problems in the past.

-Josh


OpenBSD 3.9 (GENERIC) #617: Thu Mar  2 02:26:48 MST 2006
   [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) M processor 1.60GHz ("GenuineIntel" 686-class) 600 MHz
cpu0: FPU,V86,DE,PSE,TSC,MSR,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,ACPI,
MMX,FXSR,SSE,SSE2,SS,TM,SBF,EST,TM2
cpu0: Enhanced SpeedStep 600 MHz (988 mV): speeds: 1600, 1400, 1200, 1000, 800,
600 MHz
real mem  = 527278080 (514920K)
avail mem = 474095616 (462984K)
using 4278 buffers containing 26468352 bytes (25848K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(00) BIOS, date 04/23/04
apm0 at bios0: Power Management spec V1.2
apm0: AC on, no battery
apm0: flags 30102 dobusy 0 doidle 1
pcibios at bios0 function 0x1a not configured
bios0: ROM list: 0xc/0xd000! 0xcd000/0x1000
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel 82852GM Hub-PCI" rev 0x02
"Intel 82852GM Memory" rev 0x02 at pci0 dev 0 function 1 not configured
"Intel 82852GM Configuration" rev 0x02 at pci0 dev 0 function 3 not configured
vga1 at pci0 dev 2 function 0 "Intel 82852GM AGP" rev 0x02: aperture
at 0xf000, size 0x800
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
"Intel 82852GM AGP" rev 0x02 at pci0 dev 2 function 1 not configured
uhci0 at pci0 dev 29 function 0 "Intel 82801DB USB" rev 0x03: irq 5
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1 at pci0 dev 29 function 1 "Intel 82801DB USB" rev 0x03: irq 4
usb1 at uhci1: USB revision 1.0
uhub1 at usb1
uhub1: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2 at pci0 dev 29 function 2 "Intel 82801DB USB" rev 0x03: irq 7
usb2 at uhci2: USB revision 1.0
uhub2 at usb2
uhub2: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
ehci0 at pci0 dev 29 function 7 "Intel 82801DB USB" rev 0x03: irq 3
ehci0: timed out waiting for BIOS
usb3 at ehci0: USB revision 2.0
uhub3 at usb3
uhub3: Intel EHCI root hub, rev 2.00/1.00, addr 1
uhub3: 6 ports with 6 removable, self powered
ppb0 at pci0 dev 30 function 0 "Intel 82801BAM Hub-to-PCI" rev 0x83
pci1 at ppb0 bus 1
cbb0 at pci1 dev 3 function 0 "Ricoh 5C476 CardBus" rev
0xacpci_intr_map: no mapping for pin A
: couldn't map interrupt
cbb1 at pci1 dev 3 function 1 "Ricoh 5C476 CardBus" rev
0xacpci_intr_map: no mapping for pin B
: couldn't map interrupt
"Ricoh 5C552 Firewire" rev 0x04 at pci1 dev 3 function 2 not configured
rl0 at pci1 dev 4 function 0 "Realtek 8139" rev 0x10: irq 5, address 00:11:2f:64
:11:4b
rlphy0 at rl0 phy 0: RTL internal PHY
iwi0 at pci1 dev 5 function 0 "Intel PRO/Wireless 2200BG" rev 0x05: irq 7, addre
ss 00:0e:35:49:8e:54
ichpcib0 at pci0 dev 31 function 0 "Intel 82801DBM LPC" rev 0x03
pciide0 at pci0 dev 31 function 1 "Intel 82801DBM IDE" rev 0x03: DMA, channel 0
configured to compatibility, channel 1 configured to compatibility
wd0 at pciide0 channel 0 drive 0: 
wd0: 16-sector PIO, LBA48, 38154MB, 78140160 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0:  SCSI0
5/cdrom removable
cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
auich0 at pci0 dev 31 function 5 "Intel 82801DB AC97" rev
0x03pci_intr_map: no mapping for pin B
"Intel 82801DB Modem" rev 0x03 at pci0 dev 31 function 6 not configured
isa0 at ichpcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pms0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pms0 mux 0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: 
spkr0 at pcppi0
npx0 at isa0 port 0xf0/16: using exception 16
pcic0 at isa0 port 0x3e0/2 iomem 0xd/65536
pcic0 controller 0:  has sockets A and B
pcmcia0 at pcic0 controller 0 socket 0
pcmcia1 at pcic0 controller 0 socket 1
pcic0: irq 9, polling enabled
biomask edfd netmask edfd ttymask 
pctr: 686-class user-level performance counters enabled
mtrr: Pentium Pro MTRR support
atu0 at uhub0 port 1 configuration 1 interface 0
atu0: Linksys WUSB11, rev 1.10/1.00, addr 2, address 00:06:25:b0:cb:b5
dkcsum: wd0 matches BIOS drive 0x80
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302


Re: Status of tomcat on OpenBSD

2006-05-30 Thread Josh Tolley

> From: Jeremy Huiskamp <[EMAIL PROTECTED]>
> Date: May 29, 2006 11:46:07 PM EDT (CA)
> To: "Leonardo Rodrigues" <[EMAIL PROTECTED]>
> Subject: Re: Status of tomcat on OpenBSD
>
> And failing that, vanilla tomcat usually just requires an unpack
> and run, so long as you've got java installed properly.  In case
> you wanted to go with something from the 5.5 series...
>
> I haven't tried it on openbsd but the packaging changes don't look
> that extensive so you could probably apply them yourself to any
> version.


I've run 5.5 by just unpacking it without problems on a simple
application. I couldn't get data sources to work properly on 5.0
(certainly user error and not a problem with the package -- I was just
too pressed for time to figure it out).

-Josh



Re: Evaluating load average

2006-05-03 Thread Josh Tolley

On 5/3/06, Will H. Backman <[EMAIL PROTECTED]> wrote:

I'm looking for some hints on evaluating load average.  I have a new
system that is showing load averages over .50 most of the time, but I
don't see that it is doing much according to systat vmstat.  I figured
that this machine would be way overpowered for the job it is doing.
Is load average (like what is displayed in uptime) really a good
indicator?
What tips do people have for profiling?

-- Will


I've only really used load average in the context of what the load
average has been historically. It's not too great for tuning specific
performance bottlenecks (deciding it's time to get a faster disk, for
example) because too many components are involved in the calculation,
but if you happen to keep track of the typical load average
historically, and one day you notice that the load average is five
times higher than it ever has been in the past, you know something's
working harder than normal.

-Josh



Re: (OT: PostgreSQL vs MySQL)

2006-04-07 Thread Josh Tolley
On 4/7/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
> As to losing data, I suspect you'd lose a lot more
> from PostgreSQL than MySQL on a failing hard drive.

Any particular reason for that suspicion? I ask out of genuine
interest, and I promise I don't want to start a flame war.

-Josh



Re: OpenBSD hardware router

2006-02-03 Thread Josh Tolley
On 2/3/06, Chris Zakelj <[EMAIL PROTECTED]> wrote:
> Has anyone ever actually pushed a Soekris all out to see when it begins
> to choke?  If so, where did it/they top out?  It's great to remind us
> yanks that our residential broadband sucks compared to EUR and asia, but
> as you say, we'll catch up eventually.

I wish I knew actual numbers, but I know that I had two net4801's as
endpoints of an IPsec tunnel, each on 1.5 Mbit/s lines running OpenBSD
3.5 or 3.6. Someone started pushing a big file across the line, and
suddenly one of the routers dropped off the internet because it had no
CPU left after trying to handle all the encrypting and decrypting.
Again, I don't know how much traffic that really amounted to --
however fast two boxes can go across good 1.5 Mbit lines and 40 miles
of southern California. Turning on altq and capping the bandwidth
available to that tunnel fixed the problem (though it made some users
unhappy when they couldn't transfer their files as quickly). All that
being said, we 1) didn't have an encryption accelerator in the box and
2) didn't really spend any time doing performance tuning on it, so
someone who worked at it could probably get more out of it.

-Josh Tolley



Re: Oracle, anyone?

2005-12-06 Thread Josh Tolley
On 12/5/05, J.C. Roberts <[EMAIL PROTECTED]> wrote:
> On Sun, 4 Dec 2005 21:57:15 -0700, Josh Tolley <[EMAIL PROTECTED]>
> wrote:
>
> >OpenBSD is written for uses
> >where freedom, stability, adherence to standards, and security are the
> >top concerns
>
> You are pontificating your personal opinions on why OpenBSD is written
> and what OpenBSD is used for to Ted Unangst?

Point taken. What I expressed in that email was my interpretation of
the "Free, Functional, and Secure" mantra. I'd be fairly worried for
someone that was trying to run Oracle on OpenBSD in a production
environment; just trying to make it run out of personal interest or
whatever worries me much less. All that being said, whether anyone
chooses to make decisions based on what worries me personally is their
own matter.

-Josh



Re: Oracle, anyone?

2005-12-04 Thread Josh Tolley
Running oracle on any unsupported platform is probably not the best
idea, not only because you won't get support, but also because running
it on a more secure platform will still leave you with lots of holes;
in other words, you're going to need something in front of the box to
protect it anyway. Of course, "the more layers of defense, the better"
is an excellent mantra, but unfortunately much of the time there are
considerations other than just security. OpenBSD is written for uses
where freedom, stability, adherence to standards, and security are the
top concerns (and things like performance, or accessibility to those
who are only interested in reading their email and nothing else, for
instance, aren't as high on the list). If having support is a concern,
or if being able to get it up and running more or less quickly is a
concern, OpenBSD isn't the platform for Oracle. They've got lots of
little things they do in their installer to make sure you're running a
platform they like (for instance, Fedora (an unsupported platform) is
almost identical to RedHat Advanced Server (a supported platform), yet
by default Oracle won't install on it (specifically because it checks
RedHat's /etc/redhat-release file to see what system it's being
installed on). In short, there likely will be lots of little
work-arounds you'll have to deal with to get the install to work in
the first place. All that being said, should lack of support, the
extra time it will take, and the other issues that have been brought
up not be issues for you, 1) lucky you, and 2) I for one would be very
interested in whether or not you get it working.

-Josh



Re: Hardware RAID

2005-11-12 Thread Josh Tolley
On 11/10/05, Jason Dixon <[EMAIL PROTECTED]> wrote:
>
> There are a number of examples and projects online.  The Soekris
> lists are a fountain of good information.  Personally, I like the
> flashdist project.
>
> http://www.nmedia.net/~chris/soekris/
>
> --
> Jason Dixon
> DixonGroup Consulting
> http://www.dixongroup.net

Flashdist is quick and easy. One important thing to remember, however,
is stated right on their homepage: "It is designed to install a
minimal version of OpenBSD with features for networking". The last
time I used flashdist, the bits that were stripped out included
utilities for user management, cron, and some other stuff I would have
very much liked to have available, but which I hadn't read the
instructions thoroughly enough to have configured into the system
originally. It's kinda a pain to install some of those pieces after
the initial installation is done and the router is up and running, so
make sure to configure what you want to have in yout system as you're
running the flashdist scripts.

-Josh



Re: congrats on OpenBSD SAN... one little question

2005-10-21 Thread Josh Tolley
On 10/21/05, Bob Beck <[EMAIL PROTECTED]> wrote:
> > i can certainly see how this would be annoying from a
> > scalability standpoint, but how often are you changing user
> > storage limits? it would, however, be most convenient to just
> > have one huge-ass partition :).
> >
>
> Annoying from a scalability standpoint? gimme a break.  one huge
> filesystem is annoying from a scalablility standpoint.

For what little it's worth, I'm with Bob on this. If whatever you're
running *must* be on one big partition, scalability will be a pain.
Once you fill the partition, you've got to expand it somehow (never a
simple thing, even with "PartitionMagic" or whatever). If, on the
other hand, your system can deal with many small partitions, making
the available storage space bigger is merely a matter of adding a new
partition somewhere and linking it in the right place. Even in cases
where you do need more space on a partition, it's much easier to move
the data to a larger partition if "larger" means "> 100 GB" instead of
"> 1 TB".

-Josh Tolley



Re: How scared should I be of "atactl: ATA command timed out"

2005-08-26 Thread Josh Tolley
On 8/26/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
> I have had the same thing happen...and renenabling smart has fixed it. The
> resulting problem is that a reboot will make the drive forget it was
> enabled and you'll have to do it again. I haven't figure out what that
> means yet ;) Anyone know 
> --
> Allie Daneman
> Allnix,LLC.
> http://www.allnix.net
> 
> On Fri, August 26, 2005 10:04, Josh Tolley wrote:
> > One of my cronjobs, as suggested in the atactl manpage, is the
> > following, designed to email me if my soekris gets disk errors (it's a
> > disk-based install, not a flash-based one).
> >
> > 0 * * * * /sbin/atactl /dev/wd0c smartstatus > /dev/null
> >
> > Typically, and as expected, this doesn't end up sending me anything.
> > However this morning I got this in my inbox:
> >
> > atactl: ATA command timed out
> >
> > How worried should I be about this? I've run the same command again
> > today, without it reporting any errors, and this is the first error of
> > this kind I've seen. Google and archives didn't help much, and I'm not
> > a disk guru. Thanks in advance.
> >
> > -Josh
> 

"Re"-enabling SMART?  That's odd... it's already enabled, even after
the error reported this morning...

# atactl /dev/wd0c identify
Model: TOSHIBA MK3021GAS, Rev: GA124A, Serial #: 846E5279T
Device type: ATA, fixed
Cylinders: 16383, heads: 16, sec/track: 63, total sectors: 58605120
Device capabilities:
ATA standby timer values
IORDY operation
IORDY disabling
Device supports the following standards:
ATA-1 ATA-2 ATA-3 ATA-4 ATA-5
Master password revision code 0xfffe
Device supports the following command sets:
NOP command
READ BUFFER command
WRITE BUFFER command
Host Protected Area feature set
Read look-ahead
Write cache
Power Management feature set
Security Mode feature set
SMART feature set
Flush Cache command
Device Configuration Overlay feature set
Set Max security extension commands
Advanced Power Management feature set
SMART self-test
SMART error logging
Device has enabled the following command sets/features:
NOP command
READ BUFFER command
WRITE BUFFER command
Host Protected Area feature set
Read look-ahead
Write cache
Power Management feature set
SMART feature set
Flush Cache command
Device Configuration Overlay feature set
Advanced Power Management feature set
#

That being said, I also haven't seen the error show up again.



How scared should I be of "atactl: ATA command timed out"

2005-08-26 Thread Josh Tolley
One of my cronjobs, as suggested in the atactl manpage, is the
following, designed to email me if my soekris gets disk errors (it's a
disk-based install, not a flash-based one).

0 * * * * /sbin/atactl /dev/wd0c smartstatus > /dev/null

Typically, and as expected, this doesn't end up sending me anything.
However this morning I got this in my inbox:

atactl: ATA command timed out

How worried should I be about this? I've run the same command again
today, without it reporting any errors, and this is the first error of
this kind I've seen. Google and archives didn't help much, and I'm not
a disk guru. Thanks in advance.

-Josh



Bandwidth measurement on enc0

2005-08-25 Thread Josh Tolley
I have to think this has been asked before, but Googling and
archive-searching didn't show me anything enlightening. I'd like to
measure bandwidth on my enc0 interface. I can easily monitor the
physical interfaces on my routers using netstat or snmp, but all the
statistics for enc0 (and pflog0, and pfsync0) are zero. Ok, so I can't
monitor bandwidth on virutal interfaces -- I can understand that. The
next most obvious option is to set up something like tcpdump and a few
other things to count packets on enc0, or to count esp packets on my
external interface, or even to count packets on the internal interface
headed to the network on the other side of the tunnel, or something.
That's certainly possible, and not terribly daunting, but I was hoping
someone had a better solution (where better = "here's a command that
pulls a counter from the kernel" or "this package makes the value
available over snmp" or even "here's the script I use"). I appreciate
any pointers anyone is willing to give.

-Josh



Re: ftp-proxy's -S option has no effect

2005-07-22 Thread Josh Tolley
On 7/20/05, Josh Tolley <[EMAIL PROTECTED]> wrote:
> So I have an FTP server behind a pf firewall running generic 3.6, and
> am trying to run ftp-proxy in reverse mode. Active transfers work, but
> passive ones don't.
  
> So I found out about the -S option, which I understand is supposed to
> change the 127,0,0,1 in the 227 response above to xxx.xxx.xxx.xxx. So
> I added that to inetd.conf, HUP'd inetd, and got exactly the same
> response. Any suggestions?

Not to reply to my own post, but since I didn't get any other replies,
I dove into the code. I'd like to know what the -S option is really
supposed to do, 'cause I think I've misunderstood it. I added the
following change just after drop_privs()

1108a1109,
>   if ((src_addr.s_addr != 0) && ReverseMode)
>   proxy_sa.sin_addr = src_addr;
>

I've no idea if the change would be good for "general purpose" use,
but it seems to work for me. Now, I get the proper response to the
PASV command -- the server IP transmitted to PASV is the one I passed
to the -S parameter.

-Josh Tolley



ftp-proxy's -S option has no effect

2005-07-20 Thread Josh Tolley
So I have an FTP server behind a pf firewall running generic 3.6, and
am trying to run ftp-proxy in reverse mode. Active transfers work, but
passive ones don't. I'm quite sure the firewall rules are right,
because of the active transfers working, and because I can see the
problem in the FTP logs. Here's the deal:

/etc/inetd.conf
127.0.0.1:8022  stream  tcp   nowait  root  /usr/libexec/ftp-proxy
ftp-proxy -t 300 -S xxx.xxx.xxx.xxx -R yyy.yyy.yyy.yyy

For what it's worth, I have another ftp-proxy set up in inetd.conf to
run on port 8021 to proxy internal FTP clients. yyy is my FTP server's
internal address, xxx is my firewall's external address. I started
testing without the -S option and found that whenever I tried to go
into passive mode, the server said I should open data connections to
127.0.0.1, as follows:


Remote system type is UNIX.
Using binary mode to transfer files.
ftp> passive
Passive mode on.
ftp> ls
227 Entering Passive Mode (127,0,0,1,239,211)
ftp: connect: Connection refused

So I found out about the -S option, which I understand is supposed to
change the 127,0,0,1 in the 227 response above to xxx.xxx.xxx.xxx. So
I added that to inetd.conf, HUP'd inetd, and got exactly the same
response. Any suggestions?

I'm sure ftp-proxy is running my connection. pgrep ftp-proxy finds an
ftp-proxy process when I log in with my ftp client, which goes away
when I exit the ftp client again. ps auxw | grep `pgrep ftp-proxy`
shows me the command line that ftp-proxy instance was started with,
and it shows the -S option along with all the other options. fstat -p
`pgrep ftp-proxy` returns a list of open handles, including sockets
connected to my ftp server and to my home IP address. So as far as I
can tell, ftp-proxy is running fine, but ignoring -S. Is there
something obvious I've missed? Any suggestions are much appreciated.

-Josh



Re: OpenBSD log server

2005-07-12 Thread Josh Tolley
> On Sunday 10 July 2005 06:13 pm, Steve Shockley wrote:
> > Qv6 wrote:
> > > I have set up an OBSD firewall to replace my PIX, and configured it
> > > to log to an OBSD log server - a loghost. I'll like to set up a web
> > > interface to monitor the logs using msyslog (with mysql and php).
> > > Has anyone on this list done something similar and if so, what
> > > syslog utility did you use.
> >
> > I used syslog-ng and a very modified php-syslog-ng.  I wanted to use
> > postgresql, and started out thinking I'd just convert php-syslog-ng
> > to use pgsql, but then found a bunch of bugs and holes, and some
> > *really* bad HTML.  I fixed it up, fixed most of the bugs, and used
> > Pear DB for the database interface so it's not database-specific.

I'm also using mysql, syslog-ng and a slightly modified php-syslog-ng.
It works nicely, though provided enough time there are a lot of
changes to php-syslog-ng I'm thinking of setting up, in particular to
give me all kinds of spiffy reports cutting out all the cruft our
Windows domain likes to spit out.

-Josh



Re: openbsd list fckery

2005-06-04 Thread Josh Tolley
> > > I do like the installer though, I'm serious.

> > I'm right in the middle of installing 3.7 via serial port B on a Sun
> > I LOVE the OpenBSD installer.

> I really have to second this. The OpenBSD installer is great. 

I had to laugh when I overheard two friends who typically work with
Windows OSs comparing how fast they'd been able to install a server
OS. I subsequently went and installed a test web server in under 10
minutes (after which I started messing around, hosed a bunch of stuff,
and had to spend the next 10 minutes installing again)

-Josh



Re: Summer of Code ?

2005-06-03 Thread Josh Tolley
Perhaps I'm misunderstanding the intent of your email, but I'll bite.
I'm a CS student (nearly graduated) with a job, family, and
programming projects on the side, but one of my dreams would be to be
able to, say, write drivers (provided hardware manufacturers ever
release docs...) and I'd love to learn how. My first goal, though,
would have to be getting more proficient in C and making sure I can
use it effectivley on OpenBSD.

So as I said, perhaps I'm barking up the wrong tree, but where do I
start? What resources are there? I love the man pages, but so far as
I've seen anyway, there's not a place where I can begin to say "Here's
step 1 of 1549 in writing a driver". Nor is there a place I've seen
that says, "This needs to be written, wouldn't take tons of
experience, but takes time no one has wanted to spend on it -- go to".
Can you offer suggestions?

I appreciate any help you can give, even if it's just "RTFM". Thanks.

-Josh Tolley

On 6/3/05, Bob Beck <[EMAIL PROTECTED]> wrote:
> I'd have no problem coming up with or supervising a few projects for
> students like this, unfortunately, they aren't taking other projects
> anymore...
> 
> -Bob
> 
> 
> * Dunceor . <[EMAIL PROTECTED]> [2005-06-02 23:45]:
> > I'm actually tryin to do some of the NetBSD projects to OpenBSD
> > directly, without caring about the google contest.
> > I still think it's a good motivation for a student to spend alot of hours 
> > on it.
> > But in the end, nobody should code on suchs projects for the money,
> > but for the fun.
> >
> > I got a few plans as I said, I just need to do some research around it.
> >
> > // Dunceor
> >
> > On 6/3/05, Ted Unangst <[EMAIL PROTECTED]> wrote:
> > > On Fri, 3 Jun 2005, Dunceor . wrote:
> > >
> > > > > Ed White wrote:
> > > > > > http://code.google.com/summerofcode.html
> > > > > >
> > > > > > Where is OpenBSD ?
> > >
> > > why is your email two days late?
> > >
> > > > Well I think it's a great oppertunity to let a student dive into the
> > > > OS and they would probobly continue to work on the project afterwards.
> > > > I saw that and missed OpenBSD also.
> > > > They had some nice projects over at NetBSD actually.
> > >
> > > it's not like a bsd rsync, or a better ffs, or ... wouldn't help openbsd
> > > either.
> > >
> > > hell, go do something for openbsd, port to netbsd, claim the money.
> > >
> > >
> > > --
> > > all we're waiting for is for something worth waiting for
> >
> 
> --
> Bob Beck   Computing and Network Services
> [EMAIL PROTECTED]   University of Alberta
> True Evil hides its real intentions in its street address.