Re: msk(4) with SK-9S91: Can not set 1000baseSX Single Mode Fiber Media Type

2007-01-30 Thread Rolf Sommerhalder
Hi Mark Most likely something is not quite right with the eephy(4) driver. eephy_status() in sys/dev/mii/eephy.c seems to be a candidate for closer examination. It appears to fall through the if() clause and does the else part, although we have a NIC with MIIF_IS_1000X :

Re: PF rules for outgoing FTP from firewall

2007-01-30 Thread Darren Spruell
On 1/30/07, Steve Williams <[EMAIL PROTECTED]> wrote: Hi, I have a Sunfire V120, sparc64, OpenBSD 3.9 performing NAT and assorted firewall duties. It is working 100%, including proxying ftp requests from the internal network. Today I went to do an FTP directly from the server (perl CPAN), and

Re: spamd openbsd 4.0 query

2007-01-30 Thread RW
On Sun, 28 Jan 2007 19:19:09 +, John wrote: >The only other thing I'm trying to find out now is whether whitelist.txt >can use domains rather than dotted quads No. It doesn't do DNS as it is a fast lightweight single purpose MTA-like daemon. Besides which: Are you expecting to trust the domai

PF rules for outgoing FTP from firewall

2007-01-30 Thread Steve Williams
Hi, I have a Sunfire V120, sparc64, OpenBSD 3.9 performing NAT and assorted firewall duties. It is working 100%, including proxying ftp requests from the internal network. Today I went to do an FTP directly from the server (perl CPAN), and it failed. Looking at blocked packets, I see that

Re: No HD DMA? (Was: Harddisk slow)

2007-01-30 Thread Jonathan Gray
On Tue, Jan 30, 2007 at 08:50:53AM +0100, Heinrich Rebehn wrote: > > attaching the drive to a notebook via a IDE/USB converter easily yields > 20 MB/s. So the drive *is* faster. While i could live with 8 MB/s i > cannot accept the high CPU usage. It seems to make the installed crypto > accelera

Re: spamd openbsd 4.0 query

2007-01-30 Thread John
On Sat, Jan 27, 2007 at 12:39:42PM -0500, Josh Grosse wrote: > > # is automatically maintained by spamd(8) and related apps. > # is automatically maintained by spamd(8) and related apps. > # is a manually maintained whitelist > > table persist > table persist > table persist file "/etc/whi

Regarding your submission to the job entitled Information Security Engineer - Sydney

2007-01-30 Thread resume-thanks
We received your application for the job entitled 'Information Security Engineer - Sydney'. However, this job requires that you include an English resume. Please resubmit your application with an English resume. Our thanks, Google Staffing

Re: dmesg and fdisk do not match about usb external disk

2007-01-30 Thread Nick Holland
frantisek holop wrote: > hi there, > > please compare the following for my external usb disk: > > amaaq> sudo fdisk sd0 > Disk: sd0 geometry: 60801/255/63 [976768065 Sectors] > Offset: 0 Signature: 0xAA55 > Starting Ending LBA Info: > #: idC H S -C H

Re: msk(4) with SK-9S91: Can not set 1000baseSX Single Mode Fiber Media Type

2007-01-30 Thread Mark Kettenis
Hi Rolf, Most likely something is not quite right with the eephy(4) driver. The 88E1112 PHY apparently supports both copper and fiber, and I think it should automatically switch over to fiber, but apparently it doesn't. Could you test some diffs for me on that machine? Mark

Re: msk(4) with SK-9S91: Can not set 1000baseSX Single Mode Fiber Media Type

2007-01-30 Thread Henning Brauer
* Rolf Sommerhalder <[EMAIL PROTECTED]> [2007-01-30 21:48]: > Two identically configured SUN V210, each equipped with a SK-9S91 PCI > NIC (single port, single mode fiber 1 Gbit/s), run -current snapshot > dated 20 Jan 07 > The kernel detects those fiber NICs, besides the four on-board bge, > see dm

Re: SVND -k and -K ERRATUM

2007-01-30 Thread Ted Unangst
On 1/30/07, Don Smith <[EMAIL PROTECTED]> wrote: I looked at the source code. In /src/sys/dev/vnd.c, it has the lines: blf_ecb_encrypt(vnd->sc_keyctx, iv, sizeof(iv)); if (encrypt) blf_cbc_encrypt(vnd->sc_keyctx, iv, addr, bsize); This looks like it encrypt

Re: Mounting FreeBSD partitions on OpenBSD

2007-01-30 Thread Ted Unangst
On 1/30/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: I'm trying to mount my FreeBSD partitions in OpenBSD. OpenBSD has no problem finding, reading and writing to the root partition for FreeBSD but doesn't see the other partitions(/home, /usr, /var). I know I have to manually edit the disklabe

Re: some basic problems

2007-01-30 Thread Nickolay A. Burkov
On Wed, Jan 31, 2007 at 05:52:51AM +0800, ronald jiang wrote: > obsd 4.0 i386 without X on an ibm thinkpad t30 > > a. How to map alt to meta? It's already find in ksh, but not in emacs. > b. My hard disk really has more then 10 thounds cylinders, but fdisk allows > 1024 at most... > c. emacs22 co

Re: msk(4) with SK-9S91: Can not set 1000baseSX Single Mode Fiber Media Type

2007-01-30 Thread Rolf Sommerhalder
On 1/30/07, Siegbert Marschall <[EMAIL PROTECTED]> wrote: try media 1000baseT mediaopt full-duplex , 1G fiberlinks should be always fullduplex, rest ist not relevant since it's purely a hardware- question. wonder how the thing got it's head on 100BaseTX... apart from that it's a good idea to te

some basic problems

2007-01-30 Thread ronald jiang
obsd 4.0 i386 without X on an ibm thinkpad t30 a. How to map alt to meta? It's already find in ksh, but not in emacs. b. My hard disk really has more then 10 thounds cylinders, but fdisk allows 1024 at most... c. emacs22 compiling encounter an error which says "don't know how to make faces.elc"

some basic questions

2007-01-30 Thread ronald jiang
obsd 4.0 i386 without X on an ibm thinkpad t30 a. How to map Alt to Meta? In ksh, Alt really works as meta, but in emcas it doesn't (esc as meta). b. When compile emacs22, it encounters an error, what say: "... don't know how to make faces.elc\n Error code 2" c. adduser within group wheel, b

Re: msk(4) with SK-9S91: Can not set 1000baseSX Single Mode Fiber Media Type

2007-01-30 Thread Siegbert Marschall
Hi, > # ifconfig -m msk0 > msk0: flags=8843 mtu 1500 > lladdr 00:00:5a:72:fc:58 > media: Ethernet autoselect (100baseTX half-duplex) > status: no carrier > supported media: > media none > media 10baseT > media 10baseT

msk(4) with SK-9S91: Can not set 1000baseSX Single Mode Fiber Media Type

2007-01-30 Thread Rolf Sommerhalder
Hello misc, Two identically configured SUN V210, each equipped with a SK-9S91 PCI NIC (single port, single mode fiber 1 Gbit/s), run -current snapshot dated 20 Jan 07 The kernel detects those fiber NICs, besides the four on-board bge, see dmesg below. After boot, the msk0 come up in autoselect me

Re: Problem routing 10.x.x.x networks through a firewall

2007-01-30 Thread John Brahy
On 1/30/07, John Brahy <[EMAIL PROTECTED]> wrote: On 1/30/07, Will H. Backman <[EMAIL PROTECTED]> wrote: > John Brahy wrote: > > Hello, > > > > I am having a problem routing IP traffic on my network. my firewall > > has three interfaces. > > > > | > > +-+--+ > > | P2P - t1 | > > |

Re: Problem routing 10.x.x.x networks through a firewall

2007-01-30 Thread John Brahy
On 1/30/07, Will H. Backman <[EMAIL PROTECTED]> wrote: John Brahy wrote: > Hello, > > I am having a problem routing IP traffic on my network. my firewall > has three interfaces. > > | > +-+--+ > | P2P - t1 | > | router | > | 10.1.2.1 | > +-+--+ > | > +-+-

Re: Problem routing 10.x.x.x networks through a firewall

2007-01-30 Thread Will H. Backman
John Brahy wrote: Hello, I am having a problem routing IP traffic on my network. my firewall has three interfaces. | +-+--+ | P2P - t1 | | router | | 10.1.2.1 | +-+--+ | +-+--+ | 10.1.2.2 | | router | | 10.1.3.1 | +-+--+ | +-+--

dmesg and fdisk do not match about usb external disk

2007-01-30 Thread frantisek holop
hi there, please compare the following for my external usb disk: amaaq> sudo fdisk sd0 Disk: sd0 geometry: 60801/255/63 [976768065 Sectors] Offset: 0 Signature: 0xAA55 Starting Ending LBA Info: #: idC H S -C H S [ start: size ]

Re: Problem routing 10.x.x.x networks through a firewall

2007-01-30 Thread Cristiano Deana
2007/1/30, John Brahy <[EMAIL PROTECTED]>: I have net.ip.forwarding=1 and my pf.conf is completely empty right now. From the 10.1.1.100 client, I can't ping the internet from 10.1.11.100, but I can from my firewall. Is there anything special I have to do to route private networks? Here's the ipv

Problem routing 10.x.x.x networks through a firewall

2007-01-30 Thread John Brahy
Hello, I am having a problem routing IP traffic on my network. my firewall has three interfaces. | +-+--+ | P2P - t1 | | router | | 10.1.2.1 | +-+--+ | +-+--+ | 10.1.2.2 | | router | | 10.1.3.1 | +-+--+ | +-+--+ +---+

Re: Atheros WIFI card can scan, but can't connect.

2007-01-30 Thread Travers Buda
* Ido Admon <[EMAIL PROTECTED]> [2007-01-30 15:24:48]: > > Have already tried that... I try again just for the sake of hoping it > works... > > > > Any other ideas? > > From your dmesg: > > ath0 at pci1 dev 8 function 0 "Atheros AR5212" rev 0x01: apic 2 int 12 (irq > 12) > ath0: AR5213 7.9 phy

Re: http load balancing with pf (apache access log)

2007-01-30 Thread Rui Miguel Silva Seabra
Ter, 2007-01-30 C s 16:44 +0100, Pierre-Yves Ritschard escreveu: > On Tue, 30 Jan 2007 15:20:42 + > Rui Miguel Silva Seabra <[EMAIL PROTECTED]> wrote: > > Promising, it does say that it's now part of the OpenBSD system, but > > sine when? CURRENT? I can't seem to find it in the 4.0 CD's... > >

Re: Atheros WIFI card can scan, but can't connect.

2007-01-30 Thread Ido Admon
> Have already tried that... I try again just for the sake of hoping it works... > > Any other ideas? From your dmesg: ath0 at pci1 dev 8 function 0 "Atheros AR5212" rev 0x01: apic 2 int 12 (irq 12) ath0: AR5213 7.9 phy 4.5 rf2112a 5.6, FCC2A*, address 00:0f:b5:4f:3f:42 See http://marc.theaim

Re: OpenBSD's bind: CVE-2007-0493 and CVE-2007-0494

2007-01-30 Thread Travers Buda
* Martin Schr?der <[EMAIL PROTECTED]> [2007-01-30 16:19:04]: > 2007/1/30, Dimitry Andric <[EMAIL PROTECTED]>: > >This was fixed on 2007-01-25: > > In stable? > > Best > Martin > No. Release and stable are using 9.3.2-P1. Things of interest include named -v and /usr/src/usr.sbin/bind/version.

Re: ftp docs directory

2007-01-30 Thread Marti Martinez
And to answer my own question, its back five minutes later. On 1/30/07, Marti Martinez <[EMAIL PROTECTED]> wrote: I'm guessing there's a simple answer to this, but what happened to the docs directory on the FTP server that holds the single page versions of the FAQ and PF guide -- the links from

ftp docs directory

2007-01-30 Thread Marti Martinez
I'm guessing there's a simple answer to this, but what happened to the docs directory on the FTP server that holds the single page versions of the FAQ and PF guide -- the links from the online FAQ page aren't working? Marti -- Systems Programmer, Senior Electrical & Computer Engineering The Univ

Re: SDL game crashing

2007-01-30 Thread Michael
Hi, Edd Barrett schrieb: > Have you tried building it with debug symbols (-g) and then running it > through gdb? Thanks for your answer but the problem was already officially solved by the reverting to an older version of usr/libexec/loader.c The previous changes that were made to usr/libexec/lo

Re: SDL game crashing

2007-01-30 Thread Edd Barrett
On 1/28/07, Michael <[EMAIL PROTECTED]> wrote: Hi, I compiled and installed version 0.2.8.2.1 of the armagetronad game client (with default configure). (http://www.armagetronad.net/) When I play it on OpenBSD 4.0 it just works, but the game crashes every single time with 4.0-current when I die.

Re: http load balancing with pf (apache access log)

2007-01-30 Thread Pierre-Yves Ritschard
On Tue, 30 Jan 2007 15:20:42 + Rui Miguel Silva Seabra <[EMAIL PROTECTED]> wrote: > Ter, 2007-01-30 `s 14:25 +0100, Pierre-Yves Ritschard escreveu: > > On Tue, 30 Jan 2007 13:06:00 + > > Rui Miguel Silva Seabra <[EMAIL PROTECTED]> wrote: > > > > > By the way, what do you use/recommend in

Mounting FreeBSD partitions on OpenBSD

2007-01-30 Thread roger
I'm trying to mount my FreeBSD partitions in OpenBSD. OpenBSD has no problem finding, reading and writing to the root partition for FreeBSD but doesn't see the other partitions(/home, /usr, /var). I know I have to manually edit the disklabel to add those partitions. My problem is that the disklabel

Re: OpenBSD's bind: CVE-2007-0493 and CVE-2007-0494

2007-01-30 Thread Martin Schröder
2007/1/30, Dimitry Andric <[EMAIL PROTECTED]>: This was fixed on 2007-01-25: In stable? Best Martin

Re: http load balancing with pf (apache access log)

2007-01-30 Thread Rui Miguel Silva Seabra
Ter, 2007-01-30 C s 14:25 +0100, Pierre-Yves Ritschard escreveu: > On Tue, 30 Jan 2007 13:06:00 + > Rui Miguel Silva Seabra <[EMAIL PROTECTED]> wrote: > > > By the way, what do you use/recommend in order to manage the webserver > > pool? 1 test/min (in cron for instance) is too large a value fo

Re: OpenBSD's bind: CVE-2007-0493 and CVE-2007-0494

2007-01-30 Thread Dimitry Andric
Stephan A. Rickauer wrote: > CVE-2007-0493: If recursion is enabled, a remote attacker can > dereference a freed fetch context causing the daemon to abort / crash. > > CVE-2007-0494: By sending specific DNS query responses with multiple > RRSETS attackers could cause BIND to exit abnormally. > >

Re: httpd corrupted after "make build"?

2007-01-30 Thread Joachim Schipper
On Tue, Jan 30, 2007 at 01:37:49PM +0100, Sebastian Rother wrote: > Hello everybody, > > I`ve build oBSD from source after my mashined crashed (HW fault). > > I did fetched the src again via anoncvs to prevent that the system gets > build from corrupt sources. > > Well I did the usual 'cvs -q ge

Re: http load balancing with pf (apache access log)

2007-01-30 Thread Joachim Schipper
On Mon, Jan 29, 2007 at 05:36:12PM +0100, Marian Hettwer wrote: > Pierre-Yves Ritschard schrieb: > >On Mon, 29 Jan 2007 17:20:50 +0100 > >Marian Hettwer <[EMAIL PROTECTED]> wrote: > > > >>Which would mean, I send a SYN to my load balancer, which forwards > >>the SYN to one of my webservers, and the

Re: ACPI tests on a Jetway J7F2 board

2007-01-30 Thread Mark Zimmerman
Not to belabor this thread too much more, but if you peruse the openchrome-users mailing list for a bit, you will see that these boards are developing a reputation for hard lockups under linux, so it is not just me. The developing consesnus over there is that the only way to prevent lockups is to d

Re: Atheros WIFI card can scan, but can't connect.

2007-01-30 Thread Sunnz
Please CC to [EMAIL PROTECTED] too if it works in the future... I had to use FreeBSD on this wireless machine for the time being. 2007/1/31, Ido Admon <[EMAIL PROTECTED]>: > Have already tried that... I try again just for the sake of hoping it works... > > Any other ideas? From your dmesg:

Re: http load balancing with pf (apache access log)

2007-01-30 Thread Pierre-Yves Ritschard
On Tue, 30 Jan 2007 13:06:00 + Rui Miguel Silva Seabra <[EMAIL PROTECTED]> wrote: > By the way, what do you use/recommend in order to manage the webserver > pool? 1 test/min (in cron for instance) is too large a value for many > use cases, so what would be best in your opinion? > > It's likel

Re: http load balancing with pf (apache access log)

2007-01-30 Thread Stuart Henderson
On 2007/01/30 13:06, Rui Miguel Silva Seabra wrote: > By the way, what do you use/recommend in order to manage the webserver > pool? hoststated.

Re: http load balancing with pf (apache access log)

2007-01-30 Thread Rui Miguel Silva Seabra
Seg, 2007-01-29 C s 09:54 -0700, Bob Beck escreveu: > I'm not using NAT, my load balancer looks like this: > > web2# more /etc/pf/webmail_servers (...) > pf.conf: > > table persist file "/etc/pf/webmail_servers" > WEBMAIL_IP = "{129.128.98.89}" > rdr pass on $ext_if proto tcp to $WEBMAIL_IP

Re: SVND -k and -K ERRATUM

2007-01-30 Thread Don Smith
I looked at the source code. In /src/sys/dev/vnd.c, it has the lines: blf_ecb_encrypt(vnd->sc_keyctx, iv, sizeof(iv)); if (encrypt) blf_cbc_encrypt(vnd->sc_keyctx, iv, addr, bsize); This looks like it encrypts the key using the iv of all zeroes. True, it do

httpd corrupted after "make build"?

2007-01-30 Thread Sebastian Rother
Hello everybody, I`ve build oBSD from source after my mashined crashed (HW fault). I did fetched the src again via anoncvs to prevent that the system gets build from corrupt sources. Well I did the usual 'cvs -q get -rOPENBSD_4_0 src' and started the build. After the build was finished I tried

Re: OpenBSD 3.9 (i386) and mount_udf - big problem

2007-01-30 Thread Pedro Martelletto
On Tue, Jan 30, 2007 at 11:46:31AM +, Andreas Kahari wrote: > udf_mountfs(): 0, 1 Okay, I know how to fix this. The problem is, unless you volunteer to test a whole set of diffs, some of which will probably crash your box, I need access to the disc. Another problem is, I don't have any DVD dri

Re: OpenBSD 3.9 (i386) and mount_udf - big problem

2007-01-30 Thread Andreas Kahari
udf_mountfs(): 0, 1 On 30/01/07, Pedro Martelletto <[EMAIL PROTECTED]> wrote: Andreas, On Tue, Jan 30, 2007 at 09:55:28AM +, Andreas Kahari wrote: > The patch will make the machine not lock up, but it still doesn't > mount the DVD disc. This time, I get no messages from the kernel in > /va

Re: New routing ideas for OpenBSD ;) (Was: Is Theo still hiking ????)

2007-01-30 Thread Brian Candler
On Mon, Jan 29, 2007 at 04:09:41PM +, Jeroen Massar wrote: > >> There is *NO* demand from anyone for giving /48's to customers. It is > >> only a suggestion. > > > > Talking again about RIPE policy, section 5.4.1 requires /48, or larger for > > very large subscribers. Exceptions are made to al

Re: OpenBSD 3.9 (i386) and mount_udf - big problem

2007-01-30 Thread Pedro Martelletto
Andreas, On Tue, Jan 30, 2007 at 09:55:28AM +, Andreas Kahari wrote: > The patch will make the machine not lock up, but it still doesn't > mount the DVD disc. This time, I get no messages from the kernel in > /var/log/messages, but I get the error message "mount_udf: mount: > Invalid argument

Re: OpenBSD 3.9 (i386) and mount_udf - big problem

2007-01-30 Thread Andreas Kahari
On 29/01/07, Pedro Martelletto <[EMAIL PROTECTED]> wrote: Andreas, On Mon, Jan 29, 2007 at 09:45:14AM +, Andreas Kahari wrote: > I had the same problem ("FSD does not lie within the partition!" when > trying to mount a UDF DVD disc). I applied the patch below from Pedro > to a current i386

OpenBSD's bind: CVE-2007-0493 and CVE-2007-0494

2007-01-30 Thread Stephan A. Rickauer
CVE-2007-0493: If recursion is enabled, a remote attacker can dereference a freed fetch context causing the daemon to abort / crash. CVE-2007-0494: By sending specific DNS query responses with multiple RRSETS attackers could cause BIND to exit abnormally. Is this of relevance also for OpenBSD's

ADI 1988b Sound Device

2007-01-30 Thread Sam Fourman Jr.
hello Misc@ Would someone know if this sound device that is on several new Asus boards is supported in OpenBSD? unless someone knows otherwise I don't think FreeBSD has support either http://www.analog.com/UploadedFiles/Data_Sheets/AD1988A_1988B.pdf Sam Fourman Jr.

Istanbul - Skopje Flights by MAT Macedonian Airlines / MAT Makedonya Havayollari Üsküp - Istanbul Uçuslarina Basliyor ......

2007-01-30 Thread ZENITH Air Services
[EMAIL PROTECTED] address book`unuza kaydedin, ZENITH E-posta size ulassin. for ENGLISH version click here [IMAGE] [IMAGE] [IMAGE] 1 Subat`tan itibaren her pazartesi, persembe, cumartesi ISTANBUL - \SK\P (Skopje) Makedonya`nin milli havayolu olan MAT Macedonian Airlines filosundaki modern Boe

Re: http load balancing with pf (apache access log)

2007-01-30 Thread Paul de Weerd
On Tue, Jan 30, 2007 at 09:09:46AM +0100, Marian Hettwer wrote: | | requests go like this: | origin -> balancer -> destination | | replies like this: | destination -> origin This sounds a lot like what certain loadbalancers call "DSR" or "Direct Server Return". Basically, this is layer 2 NAT'ing.

Re: http load balancing with pf (apache access log)

2007-01-30 Thread Marian Hettwer
Hej Stuart, Stuart Henderson schrieb: On 2007/01/29 16:21, Marian Hettwer wrote: Is there any possible way to get the real ip addresses in my apache access log? Readers who didn't see the earlier posts about setting this up, they're here: http://marc.theaimsgroup.com/?l=openbsd-misc&m=1169052

Re: http load balancing with pf (apache access log)

2007-01-30 Thread Marian Hettwer
Henning Brauer schrieb: * Marian Hettwer <[EMAIL PROTECTED]> [2007-01-29 18:46]: Ah... there we go. I can't setup the webservers with their default gateway to my load balancer. The boxes are dedicated servers and I have no possibility to change the network settings. These are rented servers (d

Re: http load balancing with pf (apache access log)

2007-01-30 Thread Marian Hettwer
Hej Bob, Bob Beck schrieb: * Marian Hettwer <[EMAIL PROTECTED]> [2007-01-29 09:49]: Hi OpenBSD'lers, I'm about to use OpenBSD's pf(4) for load balancing some webservers. So far, everything is looking just perfect. Compared to pound, pf(4) is incredibly fast with few CPU and memory usage. So