Re: OpenBSD 4.0 vulnerable?

2006-11-03 Thread Bert Koelewijn
Thanks Brad! ;=) Bert Koelewijn wrote: Hi, Are all security patches applied to MAIN, already applied to the OPENBSD_4_0 stable branche? If not, does this have any security consequences? Thanks, Bert

Re: OpenBSD as a PDC on a windows network

2006-11-03 Thread Rainer Giedat
On Thu, Nov 02, 2006 at 09:24:49AM -0700, Jeff Ross wrote: Rainer Giedat wrote: Hi Stuart, On Wed, Nov 01, 2006 at 04:59:21PM -0500, stuartv wrote: This project is all part of my devious plan to gradually convert to an all (or at least mostly) OpenBSD environment here at work (psst...

Re: building kernel for new release in previous stable system

2006-11-03 Thread Joachim Schipper
On Fri, Nov 03, 2006 at 09:49:01AM +0500, Igor Goldenberg wrote: Hello. Will it be possible to build GENERIC kernel for the next OpenBSD release 4.1 using release or stable 4.0 system (with comp40.tgz set installed)? I need this to know to decide put /usr on raid or not. Because if /usr

Re: CPU selection

2006-11-03 Thread J.C. Roberts
On Thu, 02 Nov 2006 22:03:05 -0800, Alexander Lind [EMAIL PROTECTED] wrote: RAID, kiddo. It's more complex. It is something else that can go wrong. And...it DOES go wrong. Either believe me now, or wish you believed me later. Your call. I spent a lot of time profiting from people who

wpi fail to load firmware

2006-11-03 Thread Massimo Lusetti
I'm really happy since i can now try to work with the wpi(4) on my laptop. I freshly installed 4.0 and got wpi0 at pci5 dev 0 function 0 Intel PRO/Wireless 3945ABG rev 0x02: irq 10, address 00:13:02:18:e5:b2 but as soon as i try ifconfig wpi0 up and the driver try to load the firware i got wpi0:

Re: CPU selection

2006-11-03 Thread ropers
On 03/11/06, Alexander Lind [EMAIL PROTECTED] wrote: what complexity? RAID, kiddo. It's more complex. It is something else that can go wrong. And...it DOES go wrong. Either believe me now, or wish you believed me later. Your call. I spent a lot of time profiting from people who

Re: Large scale deployments

2006-11-03 Thread Joachim Schipper
On Thu, Nov 02, 2006 at 08:10:50PM -0500, Michael Lockhart wrote: All, Here's a question that I wanted to pose to the OpenBSD community about managing and maintaining a large number of OpenBSD systems in the field. To provide some background, we currently have 650+ OpenBSD 3.2 systems in

Re: building kernel for new release in previous stable system

2006-11-03 Thread Pierre-Yves Ritschard
Another solution would be, once 4.1 gets out to unpack the base41.tgz, etc41.tgz and comp41.tgz into /usr/somewhere then unpack or checkout using cvs the 4.1 kernel sources in there as well. Once you are in this situation you can chroot to this new fake 4.1 system: chroot /usr/somewhere /bin/sh

Re: building kernel for new release in previous stable system

2006-11-03 Thread Stuart Henderson
On 2006/11/03 11:34, Pierre-Yves Ritschard wrote: Another solution would be, once 4.1 gets out to unpack the base41.tgz, etc41.tgz and comp41.tgz into /usr/somewhere then unpack or checkout using cvs the 4.1 kernel sources in there as well. Nice idea, and it works sometimes, but only when

Re: wpi fail to load firmware

2006-11-03 Thread Massimo Lusetti
On Fri, 2006-11-03 at 10:56 +0100, Massimo Lusetti wrote: If i can do anything to help you debug this problem, please let me know, I'll try. Could be this related? CVSROOT:/cvs Module name:src Changes by: [EMAIL PROTECTED] 2006/11/01 04:25:01 Modified files:

Re: building kernel for new release in previous stable system

2006-11-03 Thread Pierre-Yves Ritschard
* Stuart Henderson ([EMAIL PROTECTED]) wrote: On 2006/11/03 11:34, Pierre-Yves Ritschard wrote: Another solution would be, once 4.1 gets out to unpack the base41.tgz, etc41.tgz and comp41.tgz into /usr/somewhere then unpack or checkout using cvs the 4.1 kernel sources in there as well.

Transfer an install (part thereof) to another machine

2006-11-03 Thread Uwe Dippel
[And I did read FAQ Chapter 14 forth and back] I have a working install on sd0. There are plenty of data on separate partitions on sd0 that I don't need, but it's a good install. Therefore I'd like to transfer the system only to sd1. dd if=/dev/rsd0c of=/dev/rsd1c transfers the whole disc. Which

Re: CPU selection

2006-11-03 Thread Rod.. Whitworth
On Fri, 3 Nov 2006 11:04:03 +0100, ropers wrote: Repeat after me: Complexity is the worst enemy of security. Secure systems should be cut to the bone and made as simple as possible. There is no substitute for simplicity. (Schneier) RAID is wonderful in theory. But it ain't so easy to escape bad

Re: Transfer an install (part thereof) to another machine

2006-11-03 Thread Nick Holland
Uwe Dippel wrote: [And I did read FAQ Chapter 14 forth and back] I have a working install on sd0. There are plenty of data on separate partitions on sd0 that I don't need, but it's a good install. Therefore I'd like to transfer the system only to sd1. dd if=/dev/rsd0c of=/dev/rsd1c

pf with one network interface

2006-11-03 Thread Larkine
Hello, I got a laptop with the operating system FreeBSD 6.1 with router firewall netgear and an ADSL modem to connect on the internet. I would like to setup a personnal firewall on my computer and I choose OpenBSD pf. The only network interface is ndis0. The filtering method is quite simple :

Re: Transfer an install (part thereof) to another machine

2006-11-03 Thread Jason McIntyre
On Fri, Nov 03, 2006 at 07:05:58AM -0500, Nick Holland wrote: Adding another question: man restore says: # newfs /dev/rrp0g eagle # mount /dev/rp0g /mnt # cd /mnt # restore rf /dev/rst8 I don't understand 'eagle'; man newfs didn't give me much of a clue. yikes. No idea. I'm

Marvell Yukon 88E8053 on Apple Mac mini (hanging system)

2006-11-03 Thread Tasmanian Devil
Hello! :-) I try to use OpenBSD 4.0 on an Apple Mac mini (Intel, bought last month, latest Boot ROM version MM11.0055.B05, latest SMC version 1.3f4). Installation from CD works fine without configuring the network, but as soon as I try to bring the network card up, the system hangs as described

Re: Transfer an install (part thereof) to another machine

2006-11-03 Thread Otto Moerbeek
On Fri, 3 Nov 2006, Jason McIntyre wrote: On Fri, Nov 03, 2006 at 07:05:58AM -0500, Nick Holland wrote: Adding another question: man restore says: # newfs /dev/rrp0g eagle # mount /dev/rp0g /mnt # cd /mnt # restore rf /dev/rst8 I don't understand 'eagle'; man newfs

Re: wpi fail to load firmware

2006-11-03 Thread Sam Fourman Jr.
I have some random time out errors on wpi, with a new leveno 3000 N100 768 Notebook but it generally works Sam Fourman Jr. On 11/3/06, Massimo Lusetti [EMAIL PROTECTED] wrote: On Fri, 2006-11-03 at 10:56 +0100, Massimo Lusetti wrote: If i can do anything to help you debug this problem,

Re: Large scale deployments

2006-11-03 Thread Bob Beck
* Michael Lockhart [EMAIL PROTECTED] [2006-11-02 18:33]: All, Wrap your bloody lines! Here's a question that I wanted to pose to the OpenBSD community about managing and maintaining a large number of OpenBSD systems in the field. To provide some background, we currently have

Re: building kernel for new release in previous stable system

2006-11-03 Thread Igor Goldenberg
Thanks for the ideas! And if I understand correctly the most easy and safe way to build custom kernel for a new release is to temporary setup this release on any computer (maybe even under virtual machine) and build the kernel there. And then use generated kernel instead of bundled one for the

Re: CPU selection

2006-11-03 Thread Alexander Lind
Thanks, I do stand corrected. Next time I spec out firewalls, I will keep your arguments in mind for sure, they do make a lot of sense. Alec J.C. Roberts wrote: On Thu, 02 Nov 2006 22:03:05 -0800, Alexander Lind [EMAIL PROTECTED] wrote: RAID, kiddo. It's more complex. It is something

Re: Via C7 fully supported?

2006-11-03 Thread Stuart Henderson
On 2006/11/03 09:26, Edward A. Gardner wrote: At 07:12 31-10-2006, Diana Eichert wrote: The problem or unfortunate feature of both of these is that the only path between the NICs and memory is a single shared PCI. EMB-5840 has 64/66 the MB-06047 I spotted the other month has PCI-Express

Re: Via C7 fully supported?

2006-11-03 Thread Edward A. Gardner
At 07:12 31-10-2006, Diana Eichert wrote: On Tue, 31 Oct 2006, Tom Cosgrove wrote: Although they're not yet available, Wim is hoping to sell http://www.liantec.com/product/emboard/EMB-5740.htm soon. See http://www.kd85.com/liantec.html. Thanks Tom look like a more interesting choice

Re: building kernel for new release in previous stable system

2006-11-03 Thread Jason Murray
On Fri, November 3, 2006 0:10, Theo de Raadt said: Will it be possible to build GENERIC kernel for the next OpenBSD release 4.1 using release or stable 4.0 system (with comp40.tgz set installed)? That would be a bit hard, since 4.1 is about 6 months away. But I get your drift. Can you use

Re: oBSD 4.0 remote installation - Is Yaifo dead?

2006-11-03 Thread Mike Erdely
[EMAIL PROTECTED] wrote: Could somebody send me yaifo 0.2 so that I propably can make the changes to the code by myself? http://erdelynet.com/downloads/yaifo-0.2.tgz

help with uaudio device

2006-11-03 Thread Will H. Backman
I'm trying to get an external usb audio device working on 4.0 release: uaudio0 at uhub1 port 2 configuration 1 interface 0: FORTEMEDIA FM1083, rev 1.10/0.01, addr 2 uaudio0: ignored audio interface with 2 endpoints uaudio0: audio rev 1.00, 5 mixer controls audio1 at uaudio0 I'm a little

Re: Large scale deployments

2006-11-03 Thread Bill Maas
On Fri, 2006-11-03 at 08:45 -0700, Bob Beck wrote: * Michael Lockhart [EMAIL PROTECTED] [2006-11-02 18:33]: All, Wrap your bloody lines! I agree Here's a question that I wanted to pose to the OpenBSD community about managing and maintaining a large number of OpenBSD systems

4.0 errata

2006-11-03 Thread Mark Zimmerman
Greetings: I just upgraded to 4.0 (without incident) and copied in the new source trees from the CD. A cvs update to the 4.0 patch branch brought in a number of changes that look suspiciously like some of the latest 3.9 errata entries. And yet, the 4.0 errata page is empty. This seems odd. Was

Re: Nintendo Wifi Connector and Nintendo DS (WEP)

2006-11-03 Thread Sam Fourman Jr.
Does OpenBSD accually run on a Nintendo DS? is it a i386? or ARM? Sam Fourman Jr. On 11/2/06, Sam Fourman Jr. [EMAIL PROTECTED] wrote: Would it be too much trouble to post the entire dmesg from the Nintendo DS? Sam Fourman Jr. On 11/2/06, Guido Tschakert [EMAIL PROTECTED] wrote: Damian

Re: help with uaudio device

2006-11-03 Thread Matthias Kilian
On Fri, Nov 03, 2006 at 08:11:55AM -0500, Will H. Backman wrote: I did try pointing /dev/audio at /dev/audio1, but xmms just said that there was permissions denied on /dev/audio. You did run MAKEDEV(1) to create /dev/audio1 and friends, didn't you? Ciao, Kili -- Inches. An

Re: 4.0 errata

2006-11-03 Thread Marco Peereboom
s has been brought up every other day. Read the archives please. On Fri, Nov 03, 2006 at 12:06:25PM -0700, Mark Zimmerman wrote: Greetings: I just upgraded to 4.0 (without incident) and copied in the new source trees from the CD. A cvs update to the 4.0 patch branch brought in a number of

Re: 4.0 errata

2006-11-03 Thread Josh Grosse
On Fri, Nov 03, 2006 at 12:06:25PM -0700, Mark Zimmerman wrote: Greetings: I just upgraded to 4.0 (without incident) and copied in the new source trees from the CD. A cvs update to the 4.0 patch branch brought in a number of changes that look suspiciously like some of the latest 3.9 errata

Re: oBSD 4.0 remote installation - Is Yaifo dead?

2006-11-03 Thread Mike Erdely
Mike Erdely wrote: [EMAIL PROTECTED] wrote: Could somebody send me yaifo 0.2 so that I propably can make the changes to the code by myself? http://erdelynet.com/downloads/yaifo-0.2.tgz I'm talking to myself now, but ... I've posted some patches that enable you to run YaifO under 3.9 and 4.0.

How much traffic can it route?

2006-11-03 Thread Der Engel
Hi, I have a doubt about if OpenBSD/PF can NAT 40Mbits with a simple rule set and like 60 redirects. The box has a xeon proc and two integrated NICs, one fxp and a bge, can it handle it? Thanks

NICs on C7 cards, was Re: Via C7 fully supported?

2006-11-03 Thread gwes
Edward A. Gardner wrote: Admittedly the price of gigabit NICs has come down to where I'd rather see them than 100mbit NICs. They have advantages even if unable to run at full speed. But running multiple gigabit links full speed, these boards won't. Sigh. Unless the 10/100 chips have

Re: How much traffic can it route?

2006-11-03 Thread gwes
Der Engel wrote: I have a doubt about if OpenBSD/PF can NAT 40Mbits with a simple rule set and like 60 redirects. The box has a xeon proc and two integrated NICs, one fxp and a bge, can it handle it? How many packets per second? Or, how big are the packets? The fxp would be the bottleneck

Re: How much traffic can it route?

2006-11-03 Thread Josh Keister
You really need to offer more information. The packet per second metric is more relevant than bit/s. How many packets? Best, Josh On 11/3/06, Der Engel [EMAIL PROTECTED] wrote: Hi, I have a doubt about if OpenBSD/PF can NAT 40Mbits with a simple rule set and like 60 redirects. The box has a

Re: How much traffic can it route?

2006-11-03 Thread Stuart Henderson
On 2006/11/03 16:02, gwes wrote: Der Engel wrote: I have a doubt about if OpenBSD/PF can NAT 40Mbits with a simple rule set and like 60 redirects. The box has a xeon proc and two integrated NICs, one fxp and a bge, can it handle it? How many packets per second? Or, how big are the

Re: How much traffic can it route?

2006-11-03 Thread Alexander Lind
Absolutely. Alec Der Engel wrote: Hi, I have a doubt about if OpenBSD/PF can NAT 40Mbits with a simple rule set and like 60 redirects. The box has a xeon proc and two integrated NICs, one fxp and a bge, can it handle it? Thanks

Re: OpenBSD Audio series other than bsdtalk ?

2006-11-03 Thread Damian Wiest
On Tue, Oct 31, 2006 at 11:09:17PM -0500, Jason Dixon wrote: On Oct 31, 2006, at 9:44 PM, Damian Wiest wrote: On Tue, Oct 31, 2006 at 05:10:25PM +, Douglas Hunter wrote: NYCBSDCon2006 now has its talks available in MP3 and with slides in pdf from

Re: Nintendo Wifi Connector and Nintendo DS (WEP)

2006-11-03 Thread Damian Wiest
On Fri, Nov 03, 2006 at 12:56:07PM -0600, Sam Fourman Jr. wrote: Does OpenBSD accually run on a Nintendo DS? is it a i386? or ARM? Sam Fourman Jr. The OP's not running OpenBSD on the DS, he's trying to connect his DS to an OpenBSD server with a Nintendo Wi-Fi adapter plugged in. I'll

4.0 areca install

2006-11-03 Thread Robert George Ababurko
I am just getting back into using OpenBSDI see that 4.0 has more support for the Areca SATA RAID cards, but do ot list them in the supported devices list. It just has a note showong 4.0 features. That said, when installing 4.0 on my machine with an Areca sata raid controller (ARC-1110), it

Re: 4.0 areca install

2006-11-03 Thread Marcus Popp
On 2006-11-03T15:09, Robert George Ababurko wrote: I am just getting back into using OpenBSDI see that 4.0 has more support for the Areca SATA RAID cards, but do ot list them in the supported devices list. It just has a note showong 4.0 features. That said, when installing 4.0 on my

Re: building kernel for new release in previous stable system

2006-11-03 Thread Nick Holland
Igor Goldenberg wrote: Thanks for the ideas! And if I understand correctly the most easy and safe way to build custom kernel for a new release is to temporary setup this release on any computer (maybe even under virtual machine) and build the kernel there. And then use generated kernel

Re: 4.0 areca install

2006-11-03 Thread David Gwynne
On 04/11/2006, at 9:09 AM, Robert George Ababurko wrote: I am just getting back into using OpenBSDI see that 4.0 has more support for the Areca SATA RAID cards, but do ot list them in the supported devices list. It just has a note showong 4.0 features. That said, when installing 4.0

Re: building kernel for new release in previous stable system

2006-11-03 Thread Joachim Schipper
On Fri, Nov 03, 2006 at 12:27:14PM -0500, Jason Murray wrote: On Fri, November 3, 2006 0:10, Theo de Raadt said: Will it be possible to build GENERIC kernel for the next OpenBSD release 4.1 using release or stable 4.0 system (with comp40.tgz set installed)? That would be a bit hard,

FTP problem

2006-11-03 Thread Der Engel
Hi, Having this ftp problem with a 3.9 box, the box has one external interface and two internal interfaces each one for different subnets, the PF conf is very simple, my problem is after a while clients can't access ftp, in either subnet, rebooting the box fixes the problem but then after a

Re: FTP problem

2006-11-03 Thread Der Engel
Ok, i ran ftp-proxy command and ftp access started working again for the clients, that solves the rebooting part :) my pf.conf: # macros ext_if=fxp0 int_if=xl0 int_if2=bge0 both={xl0 bge0} tcp_services={ 22 80 113 } icmp_types=echoreq # options set block-policy return set loginterface $ext_if

Re: Nintendo Wifi Connector and Nintendo DS (WEP)

2006-11-03 Thread Arnaud Bergeron
On 11/3/06, Sam Fourman Jr. [EMAIL PROTECTED] wrote: Does OpenBSD accually run on a Nintendo DS? No, unless someone has a hidden port. is it a i386? or ARM? ARM. Sam Fourman Jr. -- I'm trying to launch the internet; so I open a terminal and go percent sign 'Internet' at the prompt and

Re: Nintendo Wifi Connector and Nintendo DS (WEP)

2006-11-03 Thread Sam Fourman Jr.
I guess i was mistaken , I had thought that the OpenBSD support for armish http://www.openbsd.org/armish.html would also include devices like the Nintendo DS I guess there must be a Gap in my Knowledge :) Sam Fourman Jr. On 11/3/06, Arnaud Bergeron [EMAIL PROTECTED] wrote: On 11/3/06, Sam

need help configuring X on tibook

2006-11-03 Thread Ben Calvert
my {archive,google}-fu isn't up to this task, so i have to bother the list about this. I'm trying to get X working in more than 8bit on a 400mhz tiBook, and can't find a good modeline/hsync/vrefresh. Xorg -configure produces nothing useful. Thanks, Ben