Which crypto card for Soekris 4801?

2007-01-15 Thread Heinrich Rebehn
Hi all, which crypto cards actually work in a soekris 4801 under OpenBSD? I thought about bying a vpn1411, but have read about problems with corrupted mac, which don't seem to be resolved so far. This is a bit confusing: http://www.openbsd.org/i386.html states that the board is supported, so

Re: Which crypto card for Soekris 4801?

2007-01-15 Thread Christopher Snell
On 1/15/07, Heinrich Rebehn [EMAIL PROTECTED] wrote: Hi all, which crypto cards actually work in a soekris 4801 under OpenBSD? You're going to have a hard time finding supported Mini-PCI cards, other than the HiFn stuff. Instead, check out the Commel motherboards:

MD5 sum of /bsd on freshly installed system/?

2007-01-15 Thread Gregory Edigarov
Hello, It would be greatly appreciated if somebody can make an md5 checksum of the generic kernel. Need to check that as my OpenBSD 4.0 install hangs while booting at the very early stage. I was trying to install my openbsd on a reletively old pc, all went just fine. I.e. I've boot from

Re: MD5 sum of /bsd on freshly installed system/?

2007-01-15 Thread Clint Pachl
Gregory Edigarov wrote: It would be greatly appreciated if somebody can make an md5 checksum of the generic kernel. Need to check that as my OpenBSD 4.0 install hangs while booting at the very early stage. # this is for i386 because you said old PC MD5 (bsd) =

Re: MD5 sum of /bsd on freshly installed system/?

2007-01-15 Thread Stas Myasnikov
Hello, It would be greatly appreciated if somebody can make an md5 checksum of the generic kernel. MD5 (/bsd) = e8f67a2fd90f98d5b4edee9fe837c2fd MD5 (/bsd.mp) = 63906960ed483599175af5c21bbcffe7 MD5 (/bsd.rd) = 9b39a3f3d938fb906f2bf59bcface97f

Re: Which crypto card for Soekris 4801?

2007-01-15 Thread Christian Ney
Hi Heinrich, I thought about bying a vpn1411, but have read about problems with corrupted mac, which don't seem to be resolved so far. This is a bit confusing: http://www.openbsd.org/i386.html states that the board is supported, so does the soekris website. However:

Re: MD5 sum of /bsd on freshly installed system/?

2007-01-15 Thread Woodchuck
On Mon, 15 Jan 2007, Gregory Edigarov wrote: Hello, It would be greatly appreciated if somebody can make an md5 checksum of the generic kernel. Need to check that as my OpenBSD 4.0 install hangs while booting at the very early stage. The kernel embeds information that is different each

Re: Which crypto card for Soekris 4801?

2007-01-15 Thread Stuart Henderson
On 2007/01/15 09:39, Heinrich Rebehn wrote: I thought about bying a vpn1411, but have read about problems with corrupted mac, which don't seem to be resolved so far. I only remember seeing posts about problems with encryption in user processes, not the kernel. If it is indeed reliable with

Debugging an OpenBSD/vax-only resource leak

2007-01-15 Thread Moritz Grimm
Hi, a strange issue is affecting the system monitor I wrote. It's working fine everywhere (i386, sparc*, amd64, other OSes on various archs), except on OpenBSD/vax (-current snapshot as of Jan 5th, same with 4.0-release) running inside simh-vax. It leaks huge amounts of memory there, and

Need: dmesg from Intel D850GB Motherboard

2007-01-15 Thread Gregory Edigarov
Hi List, I know it is very old motherboard, but... May be somebody has it under OpenBSD. dmesg from 4.0 GENERIC /bsd would be highly appreciated. Thanks a lot. -- With best regards, Gregory Edigarov

pkg_add, ftp and external ftp proxy connection problem

2007-01-15 Thread Didier Wiroth
Hello, (I'm using 4.0-stable) We have a ftp proxy which I can't bypass with the standard openbsd ftp command. Every pkg_add commands, or any fetch commands in the ports system, fail when it tries to fetch some file via ftp:// sites. I tried every possible combination of the ftp_proxy

Re: Friendly registrar

2007-01-15 Thread Marcos Laufer
Checck www.ipv4domains.com out , donates to OpenBSD monthly, small company but big expectations ! Bye! - Original Message - From: Jean-Daniel Beaubien [EMAIL PROTECTED] To: misc@openbsd.org Sent: Sunday, January 14, 2007 5:41 PM Subject: Friendly registrar Hi everyone, I'm about to

Re: pkg_add, ftp and external ftp proxy connection problem

2007-01-15 Thread Stuart Henderson
On 2007/01/15 13:57, Didier Wiroth wrote: The NCFTP client works with the following 2 options: #type 1: Connect to firewall host, but send USER [EMAIL PROTECTED] firewall-type=1 firewall-host=a.b.c.d Unfortunately NCFTP is of no use with pkg_add or the ports system as it does not support

Re: Merchandise idea: OpenBSD mug

2007-01-15 Thread Samurai Chef
On 1/14/07, Constantine A. Murenin [EMAIL PROTECTED] wrote: Read the archives. Theo explained here the copyright law many times, specifically to your situation about the use of artwork -- unless you are explicitly given the right to sell you don't have such a right [1]. Period, this is misc@

Re: pkg_add, ftp and external ftp proxy connection problem

2007-01-15 Thread Didier Wiroth
Stuart Henderson wrote: On 2007/01/15 13:57, Didier Wiroth wrote: The NCFTP client works with the following 2 options: #type 1: Connect to firewall host, but send USER [EMAIL PROTECTED] firewall-type=1 firewall-host=a.b.c.d Unfortunately NCFTP is of no use with pkg_add or the ports system as

Re: pkg_add, ftp and external ftp proxy connection problem

2007-01-15 Thread Stuart Henderson
On 2007/01/15 15:21, Didier Wiroth wrote: Thank you but it does not work. *** Error code 1 Stop in /usr/ports/net/no-ip (line 2124 of /usr/ports/infrastructure/mk/bsd.port.mk). You did say pkg_add not ports... Ports don't use -o - (you can probably just use FETCH_CMD=ncftpget for them).

Re: Which crypto card for Soekris 4801?

2007-01-15 Thread Heinrich Rebehn
Christian Ney wrote: Hi Heinrich, I thought about bying a vpn1411, but have read about problems with corrupted mac, which don't seem to be resolved so far. This is a bit confusing: http://www.openbsd.org/i386.html states that the board is supported, so does the soekris website. However:

Re: Which crypto card for Soekris 4801?

2007-01-15 Thread Heinrich Rebehn
Christopher Snell wrote: On 1/15/07, Heinrich Rebehn [EMAIL PROTECTED] wrote: Hi all, which crypto cards actually work in a soekris 4801 under OpenBSD? You're going to have a hard time finding supported Mini-PCI cards, other than the HiFn stuff. Instead, check out the Commel motherboards:

Re: Which crypto card for Soekris 4801?

2007-01-15 Thread Stuart Henderson
On 2007/01/15 17:25, Heinrich Rebehn wrote: Thanks for your reply. Performance is of course relative. ATM i am getting 7 Mbit/s via OpenVPN measured with iperf. This is somewhat less than my WLAN can handle (54 Mbit/s) 54 Mbit/s is before protocol overhead; actual throughput is a bit less

Re: Which crypto card for Soekris 4801?

2007-01-15 Thread Martin Schröder
2007/1/15, Heinrich Rebehn [EMAIL PROTECTED]: getting 7 Mbit/s via OpenVPN measured with iperf. This is somewhat less than my WLAN can handle (54 Mbit/s) and also less than the speed of the HDD (~70 Mbit/s). So a working VPN1411 would really help. If your HDD does only 70 M_bit_/s, you should

Problems with IPsec NAT-T

2007-01-15 Thread johannes
Hi, I've setup an OpenBSD 4.0 (release) server to accept incoming IPsec connections (using isakmpd). As long as the clients are not behind a NAT things work great. However, as soon as NAT-T comes into play, things stop working. In order to diagnose to problem I tried to perform a

Re: 202 days Uptime in OpenBSD 3.6

2007-01-15 Thread Alexander Bochmann
...on Thu, Jan 11, 2007 at 08:42:35AM +0100, Marc Balmer wrote: hmm, why are people so proud of their uptimes when it only show they don't care for their systems? Bah, uptimes (is it that time of the year again?)... Last login: Sun Jan 7 19:22:19 2007 from xxx OpenBSD 2.3 (LOCAL) #0:

Re: ThinkPad z61p: ar5_register_timeout

2007-01-15 Thread Karsten McMinn
On 1/11/07, Allan Wind [EMAIL PROTECTED] wrote: Dear List, I am getting the following with OpenBSD 4.0 (amd64) on a ThinkPad z61p (core 2 duo) when booting either the default bsd or bsd.mp kernel: ... ath0 at pc3 dev 0 function 0 Atheros AR5212 (IBM MiniPCI) rev 0x01: irq 11 NMI ...

pf.conf(5) and on inferface group

2007-01-15 Thread Maxim Bourmistrov
Hi! I see from the pf-code it is possible to use interfacegroup with on option, like: pass on egress all keep state but it is not documented. Maxim.

Re: Which crypto card for Soekris 4801?

2007-01-15 Thread Christian Ney
No, i don't. I want to use the box as a fileserver at home and have the WLAN traffic encrypted with IPsec or OpenVPN. I do not know how robust both of them are w.r.t to intermittent corrupted mac errors. Unrecoverable hangs during file transfers would of course be quite annyoing. Maybe i will

Re: 202 days Uptime in OpenBSD 3.6

2007-01-15 Thread Darren Spruell
On 1/15/07, Alexander Bochmann [EMAIL PROTECTED] wrote: ...on Thu, Jan 11, 2007 at 08:42:35AM +0100, Marc Balmer wrote: hmm, why are people so proud of their uptimes when it only show they don't care for their systems? Bah, uptimes (is it that time of the year again?)... Last login: Sun

Re: Merchandise idea: OpenBSD mug

2007-01-15 Thread Greg Thomas
On 1/15/07, Samurai Chef [EMAIL PROTECTED] wrote: On 1/14/07, Constantine A. Murenin [EMAIL PROTECTED] wrote: Read the archives. Theo explained here the copyright law many times, specifically to your situation about the use of artwork -- unless you are explicitly given the right to sell you

Re: pf.conf(5) and on inferface group

2007-01-15 Thread Maxim Bourmistrov
discard :) On Monday 15 January 2007 18:55, Maxim Bourmistrov wrote: Hi! I see from the pf-code it is possible to use interfacegroup with on option, like: pass on egress all keep state but it is not documented. Maxim.

Re: Which crypto card for Soekris 4801?

2007-01-15 Thread Joe
Stuart Henderson wrote: The systems using VIA processors are very much faster even without hardware AES support since they have a better PCI system; the models with accelerated encryption do so by using new CPU instructions, rather than a device which must be accessed over the PCI bus. There's

mixed (compile from source, binary update) approach

2007-01-15 Thread Patrick Useldinger
Hi, I expected that this question had come up many times before but I didn't find anything in the archives, so here I go. My understanding is that OpenBSD version updates can only be done with binaries. Likewise, for additional application installation, packages i.e. binaries are favored

Re: Is this possible or not ?

2007-01-15 Thread S t i n g r a y
Hello Stuart Well during the past few days i was busy trying to make it work , i upgraded to version 4.0 also changed all the Ethernet cards .as according to some mailing lists this error comes cause of some Ethernet nic's. only changing the CPU is left , now gonna try make it work on a SEP

Re: Is this possible or not ?

2007-01-15 Thread Stuart Henderson
On 2007/01/15 11:04, S t i n g r a y wrote: Well during the past few days i was busy trying to make it work , i upgraded to version 4.0 try a -current snapshot (or, if you know how, apply the diff mentioned here http://article.gmane.org/gmane.os.openbsd.bugs/9125 and rebuild).

Re: mixed (compile from source, binary update) approach

2007-01-15 Thread Darren Spruell
On 1/15/07, Patrick Useldinger [EMAIL PROTECTED] wrote: My understanding is that OpenBSD version updates can only be done with binaries. Likewise, for additional application installation, packages i.e. binaries are favored over ports i.e. compiling from source. Version up_grades_ (one

Re: 202 days Uptime in OpenBSD 3.6

2007-01-15 Thread Joachim Schipper
On Mon, Jan 15, 2007 at 11:20:27AM -0700, Darren Spruell wrote: On 1/15/07, Alexander Bochmann [EMAIL PROTECTED] wrote: ...on Thu, Jan 11, 2007 at 08:42:35AM +0100, Marc Balmer wrote: hmm, why are people so proud of their uptimes when it only show they don't care for their systems?

Re: Merchandise idea: OpenBSD mug

2007-01-15 Thread L. V. Lammert
On Mon, 15 Jan 2007, Greg Thomas wrote: On 1/15/07, Samurai Chef [EMAIL PROTECTED] wrote: On 1/14/07, Constantine A. Murenin [EMAIL PROTECTED] wrote: Read the archives. Theo explained here the copyright law many times, Thanks for the information. I failed to search the archives for

Re: Merchandise idea: OpenBSD mug

2007-01-15 Thread Clint Pachl
Tom Beard wrote: Samurai Chef wrote: I'll do it. I'll order some and announce here. I'll set up a ebay store for the merchandise. contact me with requests. I'd take a few if you got them done. Me too. Is that eBay store setup? Like someone all ready mentioned, it would be

Re: Friendly registrar

2007-01-15 Thread Karl R. Balsmeier
I have been using domainpeople.com mainly because they are canadian, (e.g. not greedy and impossible to get in touch with like many registrars in my own country, and home of the coolest open source OS project on the planet). they are easy to get in touch with (they have a phone number

Re: Thinkpad Fingerprint Sensors

2007-01-15 Thread Christopher Snell
Sorry for the thread revival but this looks interesting. These guys claim to have a GPL'ed driver for the fingerprint reader: http://sourceforge.net/projects/thinkfinger Chris On 12/13/06, Chris Kuethe [EMAIL PROTECTED] wrote: On 12/13/06, Marc Balmer [EMAIL PROTECTED] wrote: * Michael

Re: 202 days Uptime in OpenBSD 3.6

2007-01-15 Thread Karl R. Balsmeier
Joachim Schipper wrote: On Mon, Jan 15, 2007 at 11:20:27AM -0700, Darren Spruell wrote: On 1/15/07, Alexander Bochmann [EMAIL PROTECTED] wrote: ...on Thu, Jan 11, 2007 at 08:42:35AM +0100, Marc Balmer wrote: hmm, why are people so proud of their uptimes when it only show they

Re: 202 days Uptime in OpenBSD 3.6

2007-01-15 Thread Olivier Meyer
What really matters is the security of the applications you are running(httpd, sshd, sendmail,...). If you keep those up to date, the kernel really does not matter. If you look at http://openbsd.org/security.html, most of the openbsd bugs really are in openssh, the c library, or are a local

Re: openbsd 4.0 installation: kernel hangup

2007-01-15 Thread Michel Hubert
Hi, trying to install or upgrade OpenBSD 4.0 release does not seem to work on Fujitsu Siemens Primergy P200 machines with an Adaptec 2100S RAID controller. While booting up, the kernel hangs at: --- screen copy --- usb0 at ohci0: USB revision 1.0 uhub0 at usb0 uhub0: ServerWorks OHCI root hub,

State table not recovering on CARP backup machine

2007-01-15 Thread Christopher Snell
Hi All, We saw a strange issue today with two of our CARP'ed firewalls. At two different points in the afternoon, the state table suddenly jumped from it's normal level of around 30,000 entries to the limit of 200,000 entries. As expected, no new states could be created. We drove to our

Groklaw artical about the BSD license

2007-01-15 Thread Jean-Daniel Beaubien
Groklaw has an article about some misconceptions of the BSD license http://www.groklaw.net/article.php?story=20070114093427179 I am curious what people on this list (with the proper knowledge) think about the correctnessof the article. Jd

Re: Groklaw artical about the BSD license

2007-01-15 Thread Adriaan
On 1/16/07, Jean-Daniel Beaubien [EMAIL PROTECTED] wrote: Groklaw has an article about some misconceptions of the BSD license http://www.groklaw.net/article.php?story=20070114093427179 I am curious what people on this list (with the proper knowledge) think about the correctnessof the article.

database/postgresql, update to PostgreSQL 8.2.x series

2007-01-15 Thread Marc Balmer
some time in the (near?) future I will update our port of the PostgreSQL database to version 8.2.x. We currently have version 8.1.x in the tree, so the update will require you to do a database dump prior to the update and a restore after it. please make sure to read the release notes at

Re: State table not recovering on CARP backup machine

2007-01-15 Thread Kian Mohageri
On 1/15/07, Christopher Snell [EMAIL PROTECTED] wrote: Has anybody experienced sudden surges of state entries like this? Denial of service attack perhaps? There has been a surge of SYN scanning from machines on our network that were affected by the Symantec hole. That created a few thousand

APCUPSD on 4.0

2007-01-15 Thread Steve B
I recently acquired an old APC Smart1400 with a real serial port from a defunct ISP. I've run APCUPSD before with a simple BackUPS but would now like to take advantage of the ncurses powerflute tool and the cgi components for the web tools. Has anyone compiled these options successfully on 4.0? My

Re: openbsd 4.0 installation: kernel hangup

2007-01-15 Thread Mike Erdely
Michel Hubert wrote: Get stuck on the same place on IBM x335 using Adaptec 2100S RAID controller when installing 4.0. Worked well on OpenBSD 3.7 Is that controler still supported? Working for me... OpenBSD 4.0 (GENERIC.MP) #1: Thu Nov 16 18:35:23 EST 2006 [EMAIL

Re: Groklaw artical about the BSD license

2007-01-15 Thread Travers Buda
On Mon, 15 Jan 2007 23:21:52 -0500 Jean-Daniel Beaubien [EMAIL PROTECTED] wrote: Groklaw has an article about some misconceptions of the BSD license http://www.groklaw.net/article.php?story=20070114093427179 I am curious what people on this list (with the proper knowledge) think about the

Re: Groklaw artical about the BSD license

2007-01-15 Thread Greg Thomas
On 1/15/07, Travers Buda [EMAIL PROTECTED] wrote: On Mon, 15 Jan 2007 23:21:52 -0500 Jean-Daniel Beaubien [EMAIL PROTECTED] wrote: Groklaw has an article about some misconceptions of the BSD license http://www.groklaw.net/article.php?story=20070114093427179 I am curious what people on this