Re: What is our ultimate goal??

2008-02-23 Thread Siegbert Marschall
On Fri, Feb 22, 2008 at 07:43:05PM +, Jacob Meuser wrote: On Fri, Feb 22, 2008 at 03:01:40PM +0100, Marc Espie wrote: On Thu, Feb 21, 2008 at 04:18:42PM +0100, Miod Vallat wrote: SO now do you want FireEngine? Or rather SMPng networking? Or would you like

carp and load balancing

2008-02-23 Thread Bogdan Plevit
Hi list! I'm trying to setup a couple of test fw/routers with carp running Openbsd 4.2 release . Because of the differences in network topology i would like to use both arp balancing and ip balancing (ip balancing on $external net and arp balancing on $localnet ). I tried doing it but

Re: Dynamic Routing - BGP + OSPF

2008-02-23 Thread Stuart Henderson
On 2008-02-23, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I noticed that the two firewalls do not forward there iBGP learned routes to one another. Is this intended/expected behavior? Yes, you should probably read up a bit about BGP, and why you need a full mesh of i-BGP

Re: Updates for old releases

2008-02-23 Thread Maurice Janssen
On Friday, February 22, 2008 at 12:07:43 +, Edd wrote: On Fri, Feb 22, 2008 at 10:33:00AM +0100, Maurice Janssen wrote: About a year ago I started to create regular builds of the -stable trees (the two supported trees). You can use them, if you trust me ;-) You can find links to some

Re: ThinkPad : X freezes on exit...

2008-02-23 Thread Mayuresh Kathe
On Sat, Feb 23, 2008 at 1:14 PM, Richard Toohey [EMAIL PROTECTED] wrote: On 23/02/2008, at 8:29 PM, Mayuresh Kathe wrote: Hi, I've got a ThinkPad R61i (dmesg at the bottom of mail). I configured X using 'X -configure', it showed a nice 1024x768 X startup screen, but when I did

Re: ham,Re: ham,Re: Monitoring Bandwidth Usage, based on ports, service, client, etc.

2008-02-23 Thread Stuart Henderson
On 2008-02-16, Stuart Henderson [EMAIL PROTECTED] wrote: I have an untested port for nfdump* [..] * it's for -current and is here if you're interested: http://spacehopper.org/openbsd/nfdump.tgz This is updated for the new nfdump release with fixes for macppc/arm (thanks eric@ for letting me

Re: Remote Admin Card - Dell DRAC or HP ILO2 ?

2008-02-23 Thread Nick Nauwelaerts
On Fri, 22 Feb 2008 11:36:58 -0500 Steve Shockley [EMAIL PROTECTED] wrote: Joe Warren-Meeks wrote: I thought you only needed the license if you used higher resolutions than a basic console. If you are just using text mode on the console, then they work excellently. ILO2 can't do KVM at

Web Traffic forwarding, PF and NC

2008-02-23 Thread elaconta.com Webmaster
Greetings I've got a cable modem that forwards ports 80,110,25 to an internal host (192.168.1.121) Email (POP and SMTP) is hosted on 192.168.1.121, but recent changes have forced me to move the webserver to another machine (192.168.1.126), which means i have to somehow forward port 80 traffic

Big stack HUGE coredump

2008-02-23 Thread Alexander Nasonov
Hi, If I set a core limit to unlimited and a stack limit to 32768, then run a program with indefinite recursion, the system would generate 8G coredump file. Here we go: $ uname -a OpenBSD obx1000 4.2 GENERIC#375 i386 $ ulimit -a time(cpu-seconds)unlimited file(blocks) unlimited

Re: ThinkPad : X freezes on exit...

2008-02-23 Thread Matthieu Herrb
On Sat, Feb 23, 2008 at 8:29 AM, Mayuresh Kathe [EMAIL PROTECTED] wrote: Hi, I've got a ThinkPad R61i (dmesg at the bottom of mail). I configured X using 'X -configure', it showed a nice 1024x768 X startup screen, but when I did 'Ctrl+Alt+Backspace' to get back to my console X just

IPSec tunnel problem

2008-02-23 Thread Alexey Vatchenko
Hi guys! I'm trying to configure IPSec tunnel between home gateway and office gateway. Home gateway has dynamic IP, office gateway has static IP. The problem is when home gateway establishes IPSec tunnel with office gateway, computers from office network cannot connect to office gateway

pf tag/tagging and packages from localhost

2008-02-23 Thread Stefan Schulze Frielinghaus
Hello, I'm running OpenBSD 4.2-stable on a firewall with four interfaces. The settings are relative strict and default everything is blocked (block log all). While beside the packet filter also spamd is running the localhost needs to update the blacklists via spamd-setup. A rule like this allows

libc.so.39.3

2008-02-23 Thread Jay Hart
On base OpenBSD 4.2. What package should I install to get the above library? Thanks, Jay

Re: libc.so.39.3

2008-02-23 Thread Brian A. Seklecki
It would be in the base.tgz in release 3.9 You may have upgraded and an old binary may be linked against the old version. Try making a symlink. On Sat, 2008-02-23 at 14:07 -0500, Jay Hart wrote: On base OpenBSD 4.2. What package should I install to get the above library? Thanks, Jay

Re: libc.so.39.3

2008-02-23 Thread Josh Grosse
On Sat, Feb 23, 2008 at 02:07:58PM -0500, Jay Hart wrote: On base OpenBSD 4.2. What package should I install to get the above library? Thanks, Jay 1. It's not a package, libc is in the baseNN.tgz fileset. 39.3 is the fileset for OpenBSD 4.0. You are obviously attempting to use an

Re: libc.so.39.3

2008-02-23 Thread Theo de Raadt
It would be in the base.tgz in release 3.9 You may have upgraded and an old binary may be linked against the old version. Try making a symlink. No, do not make a symbolic link. There are a variety of reasons why library numbers get cranked, and most of them relate to stopping very subtle

Re: libc.so.39.3

2008-02-23 Thread Antti Harri
On Sat, 2008-02-23 at 14:07 -0500, Jay Hart wrote: On base OpenBSD 4.2. What package should I install to get the above library? On Sat, 23 Feb 2008, Brian A. Seklecki wrote: It would be in the base.tgz in release 3.9 No, it's in 4.0 unless I'm mistaken.

Re: Web Traffic forwarding, PF and NC

2008-02-23 Thread Stefan Kell
Hello, On Sat, 23 Feb 2008, elaconta.com Webmaster wrote: Greetings ...snip... rdr on $ext_if proto tcp from any to 192.168.1.121 port 80 - 127.0.0.1 port 5000 ...snip I'm running OpenBSD 3.9 (i386) on both machines. why not rdr directly to your internal webserver instead of 127.0.0.1?

Re: Big stack HUGE coredump

2008-02-23 Thread Stefan Kell
Hello, just curious: what problem do you want to correct? 8GB coredump is surely a big file but so is ulimit -s 32768. This ulimit means 32768 x 1024 bytes for stack as you probably know and this is the exact amount which is shown in the coredump (33.554.432 = 32768x1024). Regards Stefan

Re: libc.so.39.3

2008-02-23 Thread Brian A. Seklecki
On Sat, 2008-02-23 at 12:30 -0700, Theo de Raadt wrote: No, do not make a symbolic link. Right, for the record and mail archives, a symlink would only be a temp solution and is not guaranteed (likely even) to solve the problem. Obviously, Jay is not working on in a production environment,

Watching the prgress of dd if=drive1 of=drive2

2008-02-23 Thread Jon
I'm using dd to clone a drive. How can I watch the progress of this or see the transfer rate in real time?

Re: Web Traffic forwarding, PF and NC

2008-02-23 Thread Stuart Henderson
On 2008-02-23, Stefan Kell [EMAIL PROTECTED] wrote: Hello, On Sat, 23 Feb 2008, elaconta.com Webmaster wrote: Greetings ...snip... rdr on $ext_if proto tcp from any to 192.168.1.121 port 80 - 127.0.0.1 port 5000 ...snip I'm running OpenBSD 3.9 (i386) on both machines. why not rdr

Re: Watching the prgress of dd if=drive1 of=drive2

2008-02-23 Thread Brian A. Seklecki
On Sat, 2008-02-23 at 12:15 -0800, Jon wrote: I'm using dd to clone a drive. How can I watch the progress of this or see the transfer rate in real time? http://www.openbsd.org/cgi-bin/cvsweb/src/bin/dd/dd.c?rev=1.15content-type=text/x-cvsweb-markup main(int argc, char *argv[])

Re: Watching the prgress of dd if=drive1 of=drive2

2008-02-23 Thread Brian A. Seklecki (Mobile)
On Sat, 2008-02-23 at 12:15 -0800, Jon wrote: I'm using dd to clone a drive. How can I watch the progress of this or see the transfer rate in real time? It should accept SIGINFO (control+G) on most terminals. You may also be able to compile progress(1) ~BAS IMPORTANT: This message

Re: Watching the prgress of dd if=drive1 of=drive2

2008-02-23 Thread Steve McConville
On 23/02/2008, Jon [EMAIL PROTECTED] wrote: I'm using dd to clone a drive. How can I watch the progress of this or see the transfer rate in real time? Try sending it a SIGINFO (as it says in the man page). -- steev http://www.daikaiju.org.uk/~steve/

Re: Watching the prgress of dd if=drive1 of=drive2

2008-02-23 Thread Pierre Riteau
On Sat, Feb 23, 2008 at 9:15 PM, Jon [EMAIL PROTECTED] wrote: I'm using dd to clone a drive. How can I watch the progress of this or see the transfer rate in real time? From the manpage: If dd receives a SIGINFO (see the ``status'' argument for stty(1)) sig- nal, the current input

Re: Web Traffic forwarding, PF and NC

2008-02-23 Thread elaconta.com Webmaster
Stefan Kell wrote: Hello, On Sat, 23 Feb 2008, elaconta.com Webmaster wrote: Greetings ...snip... rdr on $ext_if proto tcp from any to 192.168.1.121 port 80 - 127.0.0.1 port 5000 ...snip I'm running OpenBSD 3.9 (i386) on both machines. why not rdr directly to your internal webserver

Re: Web Traffic forwarding, PF and NC

2008-02-23 Thread Stefan Kell
Hello, On Sat, 23 Feb 2008, Stuart Henderson wrote: On 2008-02-23, Stefan Kell [EMAIL PROTECTED] wrote: Hello, On Sat, 23 Feb 2008, elaconta.com Webmaster wrote: Greetings ...snip... rdr on $ext_if proto tcp from any to 192.168.1.121 port 80 - 127.0.0.1 port 5000 ...snip I'm running

Re: libc.so.39.3

2008-02-23 Thread Jay Hart
thanks for the hands-up. For right now I've made the sym link while I get the box production ready. I intend to install latest version of the app (APCUPSD) on the box, once I get all the patches applied, and my environment settled. Speaking of patches, I see that there is some problem trying to

Re: Web Traffic forwarding, PF and NC

2008-02-23 Thread Stefan Kell
Hello, On Sat, 23 Feb 2008, elaconta.com Webmaster wrote: Stefan Kell wrote: Hello, On Sat, 23 Feb 2008, elaconta.com Webmaster wrote: Greetings ...snip... rdr on $ext_if proto tcp from any to 192.168.1.121 port 80 - 127.0.0.1 port 5000 ...snip I'm running OpenBSD 3.9 (i386) on both

Re: Web Traffic forwarding, PF and NC

2008-02-23 Thread elaconta.com Webmaster
Stefan Kell wrote: Hello, On Sat, 23 Feb 2008, elaconta.com Webmaster wrote: Stefan Kell wrote: Hello, On Sat, 23 Feb 2008, elaconta.com Webmaster wrote: Greetings ...snip... rdr on $ext_if proto tcp from any to 192.168.1.121 port 80 - 127.0.0.1 port 5000 ...snip I'm running OpenBSD

Re: Watching the prgress of dd if=drive1 of=drive2

2008-02-23 Thread Alexey Vatchenko
On 2008-02-23, Brian A. Seklecki (Mobile) [EMAIL PROTECTED] wrote: It should accept SIGINFO (control+G) on most terminals. Isn't it control+T? -- Alexey Vatchenko http://www.bsdua.org

upgrading to 4.3-beta

2008-02-23 Thread Chris
I have upgraded my 4.2-release to 4.3-beta. But I am a bit confused as I cannot see snmpd.conf, relayd in /etc. However, I can see them in /usr/src/etc/. When I login it says, 4.3-beta and uname -amp shows 4.3 GENERIC #1. I followed: http://cvs.openbsd.org/faq/current.html#20071125 and then,

Re: upgrading to 4.3-beta

2008-02-23 Thread Theo de Raadt
I have upgraded my 4.2-release to 4.3-beta. But I am a bit confused as I cannot see snmpd.conf, relayd in /etc. However, I can see them in /usr/src/etc/. When I login it says, 4.3-beta and uname -amp shows 4.3 GENERIC #1. I followed: http://cvs.openbsd.org/faq/current.html#20071125 and then,

004_pf.patch path not correct for 4.2

2008-02-23 Thread Jay Hart
I see that there is some problem trying to apply patch 004 (the pf patch) under 4.2. Looks like there was some discussion late in Mov 07 about fixing the patch to correct for wrong path / missing directory tree in the patch. I've updated the index line (changed it from sys to src, but I still

Thank you: Re: Watching the prgress of dd if=drive1 of=drive2

2008-02-23 Thread Jon
I solved the problem with (I believe it was) the first response out of the four or five I got almost immediately. I got four _separate_ completely valid solutions and this has pointed me on some learning paths here. This mailing list is awesome. Thank you.

Re: Watching the prgress of dd if=drive1 of=drive2

2008-02-23 Thread Hannah Schroeter
Hi! On Sat, Feb 23, 2008 at 09:31:00PM +, Alexey Vatchenko wrote: On 2008-02-23, Brian A. Seklecki (Mobile) [EMAIL PROTECTED] wrote: It should accept SIGINFO (control+G) on most terminals. Isn't it control+T? By default it isn't mapped at all. So use stty status ^t, for example, before

Re: DHCP client failure with cable modem

2008-02-23 Thread Sean Malloy
On Fri, Feb 22, 2008 at 10:16:18PM -0800, David Murphy wrote: --- johan beisser [EMAIL PROTECTED] wrote: Ok. When you initially plug in the modem side interface, what does it see? Do a basic tcpdump, and watch the traffic for the dhcp assignment. Secondly, could you forward your

Re: Web Traffic forwarding, PF and NC

2008-02-23 Thread Stefan Kell
Hello, Original-Nachricht Datum: Sat, 23 Feb 2008 21:29:06 + Von: elaconta.com Webmaster [EMAIL PROTECTED] An: Stefan Kell [EMAIL PROTECTED] CC: misc@openbsd.org Betreff: Re: Web Traffic forwarding, PF and NC Stefan Kell wrote: Hello, On Sat, 23 Feb 2008,

Re: 004_pf.patch path not correct for 4.2

2008-02-23 Thread Richard Toohey
On 24/02/2008, at 10:44 AM, Jay Hart wrote: I see that there is some problem trying to apply patch 004 (the pf patch) under 4.2. Looks like there was some discussion late in Mov 07 about fixing the patch to correct for wrong path / missing directory tree in the patch. I've updated the

Re: Thank you: Re: Watching the prgress of dd if=drive1 of=drive2

2008-02-23 Thread Brian A. Seklecki (Mobile)
On Sat, 2008-02-23 at 13:46 -0800, Jon wrote: on some learning paths here. This mailing list is awesome. Thank you. just remember that when 4.3 CD pre-release-sales are announced :) IMPORTANT: This message contains confidential information and is intended only for the individual named. If

Re: Web Traffic forwarding, PF and NC

2008-02-23 Thread Stuart Henderson
On 2008-02-23, elaconta.com Webmaster [EMAIL PROTECTED] wrote: What service(s) would i need to run on 192.168.1.121 to make it useable as a gateway (router) to 192.168.1.126? Would just: # *sysctl net.inet.ip.forwarding=1* enable it as a router? Yes. But do be aware of the ICMP redirect

Re: 004_pf.patch path not correct for 4.2

2008-02-23 Thread Jay Hart
On 24/02/2008, at 10:44 AM, Jay Hart wrote: I see that there is some problem trying to apply patch 004 (the pf patch) under 4.2. Looks like there was some discussion late in Mov 07 about fixing the patch to correct for wrong path / missing directory tree in the patch. I've updated the

Re: Web Traffic forwarding, PF and NC

2008-02-23 Thread elaconta.com Webmaster
Stefan Kell wrote: Hello, Original-Nachricht Datum: Sat, 23 Feb 2008 21:29:06 + Von: elaconta.com Webmaster [EMAIL PROTECTED] An: Stefan Kell [EMAIL PROTECTED] CC: misc@openbsd.org Betreff: Re: Web Traffic forwarding, PF and NC Stefan Kell wrote:

Re: 004_pf.patch path not correct for 4.2

2008-02-23 Thread Stuart Henderson
On 2008-02-23, Jay Hart [EMAIL PROTECTED] wrote: I see that there is some problem trying to apply patch 004 (the pf patch) under 4.2. Looks like there was some discussion late in Mov 07 about fixing the patch to correct for wrong path / missing directory tree in the patch. I just checked-out

Re: Watching the prgress of dd if=drive1 of=drive2

2008-02-23 Thread STeve Andre'
On Saturday 23 February 2008 15:15:21 Jon wrote: I'm using dd to clone a drive. How can I watch the progress of this or see the transfer rate in real time? It doesn't. dd only reports stats at the end. man dd for more info. --STeve Andre'

Re: Web Traffic forwarding, PF and NC

2008-02-23 Thread Jussi Peltola
On Sat, Feb 23, 2008 at 10:58:00PM +0100, Stefan Kell wrote: The webserver (192.168.1.126) is directly connected to the cable modem, as is the 192.168.1.121 server. What service(s) would i need to run on 192.168.1.121 to make it useable as a gateway (router) to 192.168.1.126? Would

Re: 004_pf.patch path not correct for 4.2

2008-02-23 Thread Richard Toohey
On 24/02/2008, at 11:15 AM, Jay Hart wrote: On 24/02/2008, at 10:44 AM, Jay Hart wrote: I see that there is some problem trying to apply patch 004 (the pf patch) under 4.2. Looks like there was some discussion late in Mov 07 about fixing the patch to correct for wrong path / missing

Re: 004_pf.patch path not correct for 4.2

2008-02-23 Thread Jay Hart
On 24/02/2008, at 11:15 AM, Jay Hart wrote: On 24/02/2008, at 10:44 AM, Jay Hart wrote: I see that there is some problem trying to apply patch 004 (the pf patch) under 4.2. Looks like there was some discussion late in Mov 07 about fixing the patch to correct for wrong path / missing

Cannot install 4.3-beta firefox from snapshots/packages/amd64

2008-02-23 Thread Mark Zimmerman
Greetings: I just installed the latest amd64 snapshot and wanted to test some packages. Firefox will not install due to a chain of dependencies stretching back to glitz which requires libGL.6. The snapshot I installed this morning has libGL.7. Since the snapshots/packages/amd64 directory is over

Re: upgrading to 4.3-beta

2008-02-23 Thread johan beisser
I On Feb 23, 2008, at 1:26 PM, Chris wrote: I have upgraded my 4.2-release to 4.3-beta. But I am a bit confused as I cannot see snmpd.conf, relayd in /etc. However, I can see them in /usr/src/etc/. When I login it says, 4.3-beta and uname -amp shows 4.3 I've been using mergemaster(8) to

Re: 004_pf.patch path not correct for 4.2 RESOLVED

2008-02-23 Thread Jay Hart
On 24/02/2008, at 11:15 AM, Jay Hart wrote: On 24/02/2008, at 10:44 AM, Jay Hart wrote: I see that there is some problem trying to apply patch 004 (the pf patch) under 4.2. Looks like there was some discussion late in Mov 07 about fixing the patch to correct for wrong path / missing

Re: 004_pf.patch path not correct for 4.2

2008-02-23 Thread Jay Hart
On 2008-02-23, Jay Hart [EMAIL PROTECTED] wrote: I see that there is some problem trying to apply patch 004 (the pf patch) under 4.2. Looks like there was some discussion late in Mov 07 about fixing the patch to correct for wrong path / missing directory tree in the patch. I just checked-out

Re: Big stack HUGE coredump

2008-02-23 Thread Alexander Nasonov
Stefan Kell wrote: just curious: what problem do you want to correct? 8GB coredump is surely a big file but so is ulimit -s 32768. This ulimit means 32768 x 1024 bytes for stack as you probably know and this is the exact amount which is shown in the coredump (33.554.432 = 32768x1024). 8G is

Re: Updates for old releases

2008-02-23 Thread Antonio Lobato
great! thank you all for the help. right now Im compiling the source for openbsd 4.0 stable (at least the last, since it is no linger maintained) I know it is better to use 4.2, but it does not depends only of my opnion, I'm configuring the firewall for a customer, and now I can at most make

changing bash prompt escape sequences

2008-02-23 Thread Jay Hart
I use bash as my shell. I'm trying to set the bash prompt to display: ttyC1 [EMAIL PROTECTED] I've created a .bashrc in the users home directory (in this case root), and used the following line: PS1=\l [EMAIL PROTECTED] # When I login as root, or any other user for that matter, the default

Re: Updates for old releases

2008-02-23 Thread johan beisser
On Feb 23, 2008, at 5:44 PM, Antonio Lobato wrote: I know it is better to use 4.2, but it does not depends only of my opnion, I'm configuring the firewall for a customer, and now I can at most make a advice. Advise them to use 4.2. There are significant speed improvements to pf, among

Re: changing bash prompt escape sequences

2008-02-23 Thread johan beisser
On Feb 23, 2008, at 6:29 PM, Jay Hart wrote: I use bash as my shell. I'm trying to set the bash prompt to display: ttyC1 [EMAIL PROTECTED] I've created a .bashrc in the users home directory (in this case root), and used the following line: PS1=\l [EMAIL PROTECTED] # So, what happens

Re: changing bash prompt escape sequences

2008-02-23 Thread Jay Hart
On Feb 23, 2008, at 6:29 PM, Jay Hart wrote: I use bash as my shell. I'm trying to set the bash prompt to display: ttyC1 [EMAIL PROTECTED] I've created a .bashrc in the users home directory (in this case root), and used the following line: PS1=\l [EMAIL PROTECTED] # So, what happens

Re: changing bash prompt escape sequences

2008-02-23 Thread johan beisser
On Feb 23, 2008, at 7:35 PM, Jay Hart wrote: I've looked at or modified every file in roots and one users home directory without having the prompt displayed upon initial login. Once I login, and run 'bash', the prompt will be displayed as I set it. This leads me to believe that I have an

Re: Cannot install 4.3-beta firefox from snapshots/packages/amd64

2008-02-23 Thread johan beisser
On Feb 23, 2008, at 2:54 PM, Mark Zimmerman wrote: I just installed the latest amd64 snapshot and wanted to test some packages. Firefox will not install due to a chain of dependencies stretching back to glitz which requires libGL.6. The snapshot I installed this morning has libGL.7. Since the

Net-SNMP keep died unexpectedly

2008-02-23 Thread Insan Praja SW
Hi Misc@, I'm currently using a patched net-snmp-5.4p1 (patch came from packetmischief.ca) on an 4.2 AMD64 box. It seem that snmpd stopped unexpectedly over and over again, I can't figured out why because for about 1 minute it works just fine. Maybe someone on the list can point me the problem or