Re: fsck large filesystem, memory limit problem

2008-05-08 Thread Otto Moerbeek
On Thu, May 08, 2008 at 05:18:26PM -0400, Will wrote: > I did see that, but did not realize that the 1GB limit is not a > user-configurable feature. > > Even so, the FAQ implies that a 2TB filesystem is possible with > default options, which is what I have. It might be the 2TB limit is a little

what is different in socket connection handling ?

2008-05-08 Thread Benoit Chesneau
Hi all, Since 2 months, I'm fighting with couhdb database document server (http://www.couchdb.org) on openbsd but i have "performance" problem while connecting to it : https://issues.apache.org/jira/browse/COUCHDB-40 These problems are specific to openbsd, everything works on other os (bsd, osx o

Re: How to filter based on application protocol being used

2008-05-08 Thread Reyk Floeter
On Fri, May 09, 2008 at 10:40:18AM +0530, Srikant Tangirala wrote: > for all the common protocols? With my little bit > of knowledge what I figure is that we need some > piece of software(s) which understands each protocol > thoroughly, can look at raw packets in real-time > and detect the protocol

Re: n2k8 network hackathon

2008-05-08 Thread Karl Sjodahl - dunceor
On Fri, May 9, 2008 at 2:24 AM, Theo de Raadt <[EMAIL PROTECTED]> wrote: > Perhaps some who watch the commit logs have already figured out that > most of the network developers are currently involved in a week-long > network hackathon in Japan. > > A bit more information about this can be found at

Re: How to filter based on application protocol being used

2008-05-08 Thread Reyk Floeter
On Fri, May 09, 2008 at 10:40:18AM +0530, Srikant Tangirala wrote: > let pf know what to filter and what not? So, is > there some way to ensure that traffic to port 53 > is in fact not from a program like iodine and what > goes to port 80 is only HTTP/HTTPS, and so on > for all the common protocol

How to filter based on application protocol being used

2008-05-08 Thread Srikant Tangirala
Hello All Since many of standard services can be made to listen on any port on the server side, and proxies with custom configuration can be used in cases otherwise, how effective is a firewall if it blocks based on standard service ports? Is there a way in which the application protocols being us

Re: How to copy/pipe console buffert to file?

2008-05-08 Thread rancor
Screen is a awesome tool but it can't capture everything what's happened during boot. The dd-solusion did the trick perfectly, exempt when I put the data into Microsoft Windows because there was a bunch of unwritable characters that I had to take care of. Thanks anyway Regards rancor On Thu, Ma

Re: net-snmp and openbsd

2008-05-08 Thread Parvinder Bhasin
I got it going..finally just removed the package and installed it from ports and it worked like a charm. Still having issues with graphing it using cacti. Any know how...would be great to know. Thx. On May 7, 2008, at 4:15 PM, Aaron Glenn wrote: On Tue, May 6, 2008 at 10:03 PM, Parvinder Bha

Final EUSecWest 2008 Speakers London May 21/22

2008-05-08 Thread Dragos Ruiu
The selected papers for EUSecWest 2008 are: * PhlashDance, discovering permanent denial of service attacks against embedded systems - Rich Smith, HP Labs * Attacking Near Field Communications (NFC) Mobile Phones - Collin Muliner, trifinite * Abusing X.509 certificate features - Alexander K

on K8M800: k8pnow_read_pending_wait: change pending stuck. hangs machine [solved]

2008-05-08 Thread Travers Buda
Posting this so others may find this solution. Recently, my box was hanging. I noticed in my dmesg "k8pnow_read_pending_wait: change pending stuck." Essentially, when reducing the vid and fid (Cool'nQuiet,) something goes awry. I had recently replaced my video card with something else, then som

Re: Thinkpad X41 and tpwireless

2008-05-08 Thread Adam Patterson
Thomas Menari wrote: I have a X41 Tablet, and it has standard Atheros wireless: 04:02.0 Ethernet controller: Atheros Communications, Inc. AR5212 802.11abg NIC (rev 01) Tom. [demime 1.01d removed an attachment of type application/pgp-signature] You have any issues with that card or does it w

Re: tpwireless

2008-05-08 Thread Adam Patterson
Damien Miller wrote: On Thu, 8 May 2008, Adam Patterson wrote: Anyone know of any documentation on tpwireless? Specifically how to "re-set" the bit that it unsets. There isnt a man page and there aren't and switches to cause 'usage' to show up. There are no flags. There is no usage do

Re: tpwireless

2008-05-08 Thread Damien Miller
On Thu, 8 May 2008, Adam Patterson wrote: > Anyone know of any documentation on tpwireless? Specifically how to "re-set" > the bit that it unsets. There isnt a man page and there aren't and switches to > cause 'usage' to show up. There are no flags. There is no usage doc. However, if you edit th

Re: ral(4) hostap plea

2008-05-08 Thread Clint Pachl
James Turner wrote: I've been trying to get my new ral(4) card to work like I would expect it to. I've read through most if not all the talk on misc@ about running these cards in hostap mode. I would really like to replace my wi(4), which works really well, with my new ral(4) and enjoy 11g and

Re: OpenBSD release building systems

2008-05-08 Thread Joachim Schipper
On Fri, May 09, 2008 at 10:39:39AM +1000, Olivier Mehani wrote: > Hi list, > > After reading [0], [1] and [2] once again (it never hurts, hey?), I > started wondering the following. > > We know [3] that big parts of OpenBSD releases, for several > archs, are built in Theo's basement [4]. But what

Re: n2k8 network hackathon

2008-05-08 Thread Gaby vanhegan
On 8 May 2008, at 20:24, Theo de Raadt wrote: > Perhaps some who watch the commit logs have already figured out that > most of the network developers are currently involved in a week-long > network hackathon in Japan. > > A bit more information about this can be found at > http://openbsd.org/hacka

tpwireless

2008-05-08 Thread Adam Patterson
Anyone know of any documentation on tpwireless? Specifically how to "re-set" the bit that it unsets. There isnt a man page and there aren't and switches to cause 'usage' to show up. I'm not completely sure that this is the problem but my X41 does not see the original iwi card that was in there

OpenBSD release building systems

2008-05-08 Thread Olivier Mehani
Hi list, After reading [0], [1] and [2] once again (it never hurts, hey?), I started wondering the following. We know [3] that big parts of OpenBSD releases, for several archs, are built in Theo's basement [4]. But what I have not been able to work out is what version of OpenBSD these machines ar

www.rchaker.com

2008-05-08 Thread IGEE
Hebergement + Domaine Gratuit Economy Plan Features  10 GB Space  300 GB Transfer  500 Email Accounts  No FTP access  10 MySQL Databases  50 Email Forwards  Forums, Blogging, Photos 1300 DH/an Deluxe Plan Features  150 GB Space  1,500 GB Transfer  1,000 Email Accounts  Unlimite

n2k8 network hackathon

2008-05-08 Thread Theo de Raadt
Perhaps some who watch the commit logs have already figured out that most of the network developers are currently involved in a week-long network hackathon in Japan. A bit more information about this can be found at http://openbsd.org/hackathons.html#n2k8 We are in a rather old hotel with an onse

pftop doesn't build with -current

2008-05-08 Thread Chris Smith
After upgrading to -current today pf did not run after building the kernel and rebooting. After building the userland and rebooting that problem is resolved. But now I can no longer build pftop from ports (cvs): ===> Checking files for pftop-0.7 `/usr/ports/

Re: PF Congestion and state table question

2008-05-08 Thread Henning Brauer
* Steve Johnson <[EMAIL PROTECTED]> [2008-05-09 00:25]: > Sorry, I hadn't noticed that I had removed that part of information by > mistake when I split the debug information in a different file. I had been > told about that setting and had seen the thread, which stated around 256MB > per gigabit

Re: ftpchroot root directories

2008-05-08 Thread Joachim Schipper
On Thu, May 08, 2008 at 02:52:50PM -0700, David Newman wrote: > Greetings. I'm setting up ftp access* for a number of users to a directory > structure like this (assume "/" is an alias for the top of the tree): > > Username directory perms > > user1/ rw > user

Re: snmpd

2008-05-08 Thread Brian A. Seklecki
On Thu, 2008-05-08 at 15:22 -0700, Tim Kuijsten wrote: > It looks like there is no info about disk usage, memory usage, load > and other sensor stuff. I have no clue where to find the mibs (locate > mib or locate .txt | grep snmp have no results) or how to load them.. That's all in HOST-RESOURCES-

Re: Post-intrusion forensics

2008-05-08 Thread Joachim Schipper
On Thu, May 08, 2008 at 09:02:48AM -0600, Chris Cameron wrote: > For our Windows/Solaris/Linux servers, we've had PWC say that they're > qualified and able to do post-intrusion forensics on our server(s). > I'm told this will go a long way in making everyone in our company as > well as our customer

snmpd

2008-05-08 Thread Tim Kuijsten
I'm a total noob to snmp and was excited snmpd from Reyk is included in 4.3. I started snmpd with the default config and net-snmp-walked the tree. It looks like there is no info about disk usage, memory usage, load and other sensor stuff. I have no clue where to find the mibs (locate mib or loca

Re: PF Congestion and state table question

2008-05-08 Thread Stuart Henderson
On 2008-05-08, Steve Johnson <[EMAIL PROTECTED]> wrote: > Is the congestion issue that I'm getting considered "normal" under that > type of traffic and with the present hardware? Are there any other > settings that I should look into tweaking? >> CPU states: 0.2% user, 0.0% nice, 1.9% system, 3

Re: PF Congestion and state table question

2008-05-08 Thread Thomas Althoff
What about net.inet.ip.ifq.maxlen ? Try net.inet.ip.ifq.maxlen=2500 at least. I don't recall Henning's rule, search the archive something like X times your number of nics. -Thomas -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Johnson Sent: den

OpenBSD and MSA500

2008-05-08 Thread OpenBSD - Wire Consulting
Hi! Did anyone had success with OpenBSD using one of this beasts. Actually OpenBSD runs on the DL380 nicely, but I was unable to detect the MSA500 Disk Array... Any ideas or it simply isn't supported? dmesg follows thanks, Pedro OpenBSD 4.3 (GENERIC) #698: Wed Mar 12 11:07:05 MDT 2008 [EM

Re: PF Congestion and state table question

2008-05-08 Thread Steve Johnson
Hi, Sorry, I hadn't noticed that I had removed that part of information by mistake when I split the debug information in a different file. I had been told about that setting and had seen the thread, which stated around 256MB per gigabit interface. I had tested from 1000 up to 2500, and althou

Re: gmake error, please help :)

2008-05-08 Thread Louis V. Lambrecht
vatocleti wrote: Louis V. Lambrecht-3 wrote: vatocleti wrote: Hey all, I'm running OpenBSD 4.2/i386 and am booting bsd.mp. I have brought over a linux program that uses gcc as the compiler. I have installed the following sets: - gmake-3.80p1.tgz - gettext-0.14.6p0.tgz - libiconv-1.9

Re: nagios monitoring of a remote openntp service

2008-05-08 Thread Stuart Henderson
On 2008-05-08, Chris Kuethe <[EMAIL PROTECTED]> wrote: > On Thu, May 8, 2008 at 8:52 AM, Brian A. Seklecki ><[EMAIL PROTECTED]> wrote: >> Nagios checks almost never have sufficient debugging mechanisms, and UDP >> services dont send RST+ICMP. > > you should get an ICMP port unreachable if there i

Re: (stupid?) softraid question

2008-05-08 Thread Stuart Henderson
On 2008-05-08, Per olof Ljungmark <[EMAIL PROTECTED]> wrote: > Hi, > Just got 4.3 up and running and saw in dmesg output: > softraid0 at root > > Well, I do not want softraid and did not try to configure it. Can I just > safely ignore the message? Yes.

ftpchroot root directories

2008-05-08 Thread David Newman
Greetings. I'm setting up ftp access* for a number of users to a directory structure like this (assume "/" is an alias for the top of the tree): Username directory perms user1/ rw user2/projects r user3/projects rw user4/ r The FAQ a

Re: fsck large filesystem, memory limit problem

2008-05-08 Thread Will
I did see that, but did not realize that the 1GB limit is not a user-configurable feature. Even so, the FAQ implies that a 2TB filesystem is possible with default options, which is what I have. relevant output of df: Filesystem 512-blocks Used Avail Capacity Mounted on /dev/sd0i 375

PF Congestion and state table question

2008-05-08 Thread Steve Johnson
Hi, After successfully putting into testing the new firewall setup with some of our services, we are seeing some low congestion issues It's not major, but since I'm only throwing it half our expected traffic for the time being, I would have liked it to be at 0. Our setup is a 4.3 i386 (Xeon

Re: fsck large filesystem, memory limit problem

2008-05-08 Thread David J. Stillman
Isn't this the 1GB application limit mentioned in FAQ 14.7 - " By the time one gets to a 2TB file system with default fragment and block sizes, fsck will require 1GB RAM to run, which is the application limit under OpenBSD. Larger fragments and/or blocks will reduce the number of inodes, and al

fsck large filesystem, memory limit problem

2008-05-08 Thread Will
Hello all, I just upgraded to 4.3, and I would like to congratulate the devs on another wonderful release! shutdown -p works and the wbng sensor support was a nice surprise. However, the most useful feature to me was the support for ffs2. I upgraded without a hitch, and repartitioned from a 1tb f

Re: Editing C with...

2008-05-08 Thread Darrin Chandler
On Thu, May 08, 2008 at 10:02:22PM +0200, Marc Balmer wrote: > The nice thing about editors is that we have so many of them to choose > from. > Everyone will be happy, like some prefer blondes, other brunettes ... ;) > > Today one of our servers decided to send one of it's disks to the abyss, > I

Re: Problems going from 4.3-release to -stable

2008-05-08 Thread Pierre Riteau
On Thu, May 08, 2008 at 09:08:54PM +, Mike wrote: > Hello, > > After a fresh install of obsd on a new server, I cannot update my system to > -stable. > > The src has been obtained from cvs in the usual manner. > > Here is the error :- > > # cd /usr/src/sys/arch/sparc64/conf/ > # ls > CVS

Re: uvm_fault after fsck on OpenBSD 3.9

2008-05-08 Thread Kirk Ismay
You can probably test if I'm barking up the right tree or barking mad by booting a 4.3 bsd.rd and see if you can fsck your root partition. Since you appear to have a serial console, I'd try to do this by booting single user, mount -f / (to skip the fsck), start the rest of the system, and copy ov

Re: Problems going from 4.3-release to -stable

2008-05-08 Thread Mike
Ignore that question, the 'obvious' has come and hit me in the face after scratching my head for 4 hours, answer - I have installed 4.2 and not 4.3 hence it wont build Sorry guys! On Thu, 8 May 2008, Mike wrote: Hello, After a fresh install of obsd on a new server, I cannot update my system

Re: Problems going from 4.3-release to -stable

2008-05-08 Thread Maurice Janssen
On Thursday, May 8, 2008 at 21:08:54 +, Mike wrote: >Hello, > >After a fresh install of obsd on a new server, I cannot update my system >to -stable. > >The src has been obtained from cvs in the usual manner. > >Here is the error :- > ># cd /usr/src/sys/arch/sparc64/conf/ ># ls >CVS

eeepc acpi

2008-05-08 Thread Pete Vickers
Hi Matthieu, Just a quick note concerning the eeepc i386-laptop.html entry. I acquired one today, and installed OpenBSD via pxeboot using the builtin ethernet interface. Then I discovered it's not entire acpi that causes panics, it's only acpibat. If you boot -c (or config -e) then:

Problems going from 4.3-release to -stable

2008-05-08 Thread Mike
Hello, After a fresh install of obsd on a new server, I cannot update my system to -stable. The src has been obtained from cvs in the usual manner. Here is the error :- # cd /usr/src/sys/arch/sparc64/conf/ # ls CVS GENERIC.MP RAMDISK RAMDISKU5 GENERIC

Re: How to copy/pipe console buffert to file?

2008-05-08 Thread Joachim Schipper
On Thu, May 08, 2008 at 12:37:47PM +0200, rancor wrote: > Hi > > Is there any way of copy/pipe the information on the console to a file? I > need the same information that I can see of I hold down Ctrl+Shift and using > PageUp/Down when I'm on the console. I'm not using serial, that would be > sim

Re: Editing C with...

2008-05-08 Thread Marc Balmer
The nice thing about editors is that we have so many of them to choose from. Everyone will be happy, like some prefer blondes, other brunettes ... ;) Today one of our servers decided to send one of it's disks to the abyss, I was happy to be able to edit /etc/fstab in ed while in single user m

(stupid?) softraid question

2008-05-08 Thread Per olof Ljungmark
Hi, Just got 4.3 up and running and saw in dmesg output: softraid0 at root Well, I do not want softraid and did not try to configure it. Can I just safely ignore the message? Thanks, --per

Re: gmake error, please help :)

2008-05-08 Thread Philip Guenther
On Thu, May 8, 2008 at 1:05 PM, vatocleti <[EMAIL PROTECTED]> wrote: ... > This worked for me on a different system running the amd64 image, but > trying the same process with the same sets on a i386 (bsd.mp) image, I get > the error...not sure why? amd64 and i386 are NOT interchangeable or compa

Re: Window Manager

2008-05-08 Thread Manuel Wildauer
Fluxbox On Sun, May 04, 2008 at 09:29:42PM -0300, Gonzalo Lionel Rodriguez wrote: > I dont know if it is the place to ask it, but that window manager uses? And > why? > > Regards ---end quoted text---

Re: Editing C with...

2008-05-08 Thread Martin Marcher
On Thu, May 8, 2008 at 4:37 AM, Matthew Szudzik <[EMAIL PROTECTED]> wrote: > And anyway, I'm a minimalist (that's why I run OpenBSD). Really? Funny, I get the feeling that I was forced to be a minimalist for _not_ using OpenBSD the more I discover it... -- http://tumblr.marcher.name http://non

Re: gmake error, please help :)

2008-05-08 Thread vatocleti
Louis V. Lambrecht-3 wrote: > > vatocleti wrote: >> Hey all, >> I'm running OpenBSD 4.2/i386 and am booting bsd.mp. I have brought over >> a >> linux program that uses gcc as the compiler. >> >> I have installed the following sets: >> >> - gmake-3.80p1.tgz >> - gettext-0.14.6p0.tgz >> - libiconv

Re: Thinkpad T42 + OpenBSD 4.3 Freeze

2008-05-08 Thread Gonzalo Lionel Rodriguez
Yes, Its the memory, the memtest freeze just like OpenBSD. Thanks all. Gonzalo. 2008/5/8 Adam Patterson <[EMAIL PROTECTED]>: > Gonzalo Lionel Rodriguez wrote: > > > Sorry, but the 1gb is RAM not a mestick. 1 GB Kingston RAM + 512 MB > > (default) = 1.5 Gb ram the system freeze, with 512 mb ram

Re: gmake error, please help :)

2008-05-08 Thread Andreas Maus
On Thu, May 08, 2008 at 10:22:01AM -0700, vatocleti wrote: > Hey all, Hi. > I'm running OpenBSD 4.2/i386 and am booting bsd.mp. I have brought over a > linux program that uses gcc as the compiler. > > I have installed the following sets: > > - gmake-3.80p1.tgz > - gettext-0.14.6p0.tgz > - libi

Re: gmake error, please help :)

2008-05-08 Thread Louis V. Lambrecht
vatocleti wrote: Hey all, I'm running OpenBSD 4.2/i386 and am booting bsd.mp. I have brought over a linux program that uses gcc as the compiler. I have installed the following sets: - gmake-3.80p1.tgz - gettext-0.14.6p0.tgz - libiconv-1.9.2p3.tgz and when I do a "gmake" I get the following t

Re: Editing C with...

2008-05-08 Thread Marco Peereboom
Or you could just use vim... On May 7, 2008, at 3:12 PM, "overdrive openbsd" <[EMAIL PROTECTED] > wrote: You can always use the name of comand instead keystrokes. Also you can customize these keys and change the defaults (customizable) On Wed, May 7, 2008 at 6:28 PM, Marco Peereboom <[EMAIL

gmake error, please help :)

2008-05-08 Thread vatocleti
Hey all, I'm running OpenBSD 4.2/i386 and am booting bsd.mp. I have brought over a linux program that uses gcc as the compiler. I have installed the following sets: - gmake-3.80p1.tgz - gettext-0.14.6p0.tgz - libiconv-1.9.2p3.tgz and when I do a "gmake" I get the following two errors: - " /bi

Re: nagios monitoring of a remote openntp service

2008-05-08 Thread Chris Kuethe
On Thu, May 8, 2008 at 8:52 AM, Brian A. Seklecki <[EMAIL PROTECTED]> wrote: > Nagios checks almost never have sufficient debugging mechanisms, and UDP > services dont send RST+ICMP. you should get an ICMP port unreachable if there is no UDP service listening. i haven't looked at nagios, but i

Re: Thinkpad T42 + OpenBSD 4.3 Freeze

2008-05-08 Thread Adam Patterson
Gonzalo Lionel Rodriguez wrote: Sorry, but the 1gb is RAM not a mestick. 1 GB Kingston RAM + 512 MB (default) = 1.5 Gb ram the system freeze, with 512 mb ram (default) the system works fine. regards then its probably just a bad stick of memory :/

Re: nagios monitoring of a remote openntp service

2008-05-08 Thread Brian A. Seklecki
On Thu, 2008-05-08 at 14:33 +0200, Pete Vickers wrote: > that works fine: > > $ ~>/usr/local/libexec/nagios/check_ntp_time -H ntp1 > NTP OK: Offset 0.0008395434124 secs|offset=0.000840s; > 60.00;120.00; > > but, I'm trying to verifty the NTP server's health, not that my > monitoring h

Re: Thinkpad T42 + OpenBSD 4.3 Freeze

2008-05-08 Thread Mortheres
Le Thu, 8 May 2008 09:59:22 -0300, "Gonzalo Lionel Rodriguez" <[EMAIL PROTECTED]> a icrit : Hi, > Hi, everyone, i have a problem with my IBM Thinkpad T42 2373 and > OpenBSD 4.3 (stable and current), with 512mb of ram (default) works > fine, when i add 1gb (kingston) the system works fine a few mi

Post-intrusion forensics

2008-05-08 Thread Chris Cameron
For our Windows/Solaris/Linux servers, we've had PWC say that they're qualified and able to do post-intrusion forensics on our server(s). I'm told this will go a long way in making everyone in our company as well as our customers feel better. Partly because it's an outside party verification of wha

Re: Thinkpad T42 + OpenBSD 4.3 Freeze

2008-05-08 Thread Stephan Andre'
On Thursday 08 May 2008 08:59:22 Gonzalo Lionel Rodriguez wrote: > Hi, everyone, i have a problem with my IBM Thinkpad T42 2373 and OpenBSD > 4.3 (stable and current), with 512mb of ram (default) works fine, when i > add 1gb (kingston) the system works fine a few minutes, and then freeze > without

Re: Thinkpad T42 + OpenBSD 4.3 Freeze

2008-05-08 Thread Adam Patterson
Gonzalo Lionel Rodriguez wrote: Hi, everyone, i have a problem with my IBM Thinkpad T42 2373 and OpenBSD 4.3 (stable and current), with 512mb of ram (default) works fine, when i add 1gb (kingston) the system works fine a few minutes, and then freeze without error o message. Here is my dmesg:

System memory available for kernel and PF

2008-05-08 Thread Steve Johnson
Hi, Sorry for asking something else again so soon, but in my previous question, I received a link with a lot of useful information in regards to PF (http://undeadly.org/cgi?action=article&sid=20060927091645). However, one piece of information in that article could create an important issue fo

Re: How to copy/pipe console buffert to file?

2008-05-08 Thread rancor
Thanks! That did the trick =) // rancor On Thu, May 8, 2008 at 1:13 PM, mickey <[EMAIL PROTECTED]> wrote: > On Thu, May 08, 2008 at 10:59:46AM +, mickey wrote: > > On Thu, May 08, 2008 at 12:37:47PM +0200, rancor wrote: > > > Hi > > > > > > Is there any way of copy/pipe the information on t

Re: Problem with state and PF on a 4.3 setup

2008-05-08 Thread Henning Brauer
* Steve Johnson <[EMAIL PROTECTED]> [2008-05-08 14:57]: > Is the state direction tracking something that changed at one point of the > PF development or has it always been like that? it has always been like that. it is the only sane thing to do. once you exceed that little 2 interfaces firewall

Re: nagios monitoring of a remote openntp service

2008-05-08 Thread Stuart Henderson
On 2008/05/08 14:33, Pete Vickers wrote: > > that works fine: > > $ ~>/usr/local/libexec/nagios/check_ntp_time -H ntp1 > NTP OK: Offset 0.0008395434124 > secs|offset=0.000840s;60.00;120.00; > > but, I'm trying to verifty the NTP server's health, not that my > monitoring host is sync'd to

Thinkpad T42 + OpenBSD 4.3 Freeze

2008-05-08 Thread Gonzalo Lionel Rodriguez
Hi, everyone, i have a problem with my IBM Thinkpad T42 2373 and OpenBSD 4.3 (stable and current), with 512mb of ram (default) works fine, when i add 1gb (kingston) the system works fine a few minutes, and then freeze without error o message. Here is my dmesg: OpenBSD 4.3 (GENERIC) #698: Wed Mar

Re: Problem with state and PF on a 4.3 setup

2008-05-08 Thread Steve Johnson
Ah, that explains a lot! Thanks for the information. Yes, what Otto had mentioned was indeed confusing me :-) Especially when I look at the following statement from the faq: http://www.openbsd.org/faq/pf/filter.html#state " When a rule creates state, the first packet matching the rule creates

Re: Editing C with...

2008-05-08 Thread Hannah Schroeter
Hi! On Wed, May 07, 2008 at 04:55:55PM +0100, overdrive openbsd wrote: >I don't want to start a flamewar, but I will say my experience; after >lot of years using vi and vim, I decide 'taste' emacs. Now I can see >that the major part of users those use vi/vim is because they never >tried more than

Re: nagios monitoring of a remote openntp service

2008-05-08 Thread Dave Ewart
On Thursday, 08.05.2008 at 13:29 +0200, Pete Vickers wrote: >>> Has anybody gotten Nagois' check_ntp_* to play nicely with a remote >>> openntp service ? It appears to rely upon services not implemented >>> in openntp ? >> >> openntpd does not listen on port 123 by default: that's what Nagios >>

Re: nagios monitoring of a remote openntp service

2008-05-08 Thread Pete Vickers
that works fine: $ ~>/usr/local/libexec/nagios/check_ntp_time -H ntp1 NTP OK: Offset 0.0008395434124 secs|offset=0.000840s; 60.00;120.00; but, I'm trying to verifty the NTP server's health, not that my monitoring host is sync'd to it. "Notes: This plugin checks the clock offset b

Re: Editing C with...

2008-05-08 Thread Hannah Schroeter
Hi! On Sun, May 04, 2008 at 11:42:53AM -0400, Nick Holland wrote: >ropers wrote: >> 2008/5/4 Nick Holland <[EMAIL PROTECTED]>: >>> "[vim] alters files in unexpected ways", which I consider a >>> major sin. >> I didn't know that, and cursory googling didn't turn up anything >> enlightening. Coul

Re: Problem with state and PF on a 4.3 setup

2008-05-08 Thread Stuart Henderson
On 2008-05-08, Otto Moerbeek <[EMAIL PROTECTED]> wrote: > On Thu, May 08, 2008 at 07:23:41AM -0400, Steve Johnson wrote: > >> Thanks for the information. This is the first time that I've used PF as a >> router based firewall and not with NAT. I didn't know that the state was on >> a per interface

Re: Problem with state and PF on a 4.3 setup

2008-05-08 Thread Henning Brauer
* Otto Moerbeek <[EMAIL PROTECTED]> [2008-05-08 13:47]: > On Thu, May 08, 2008 at 07:23:41AM -0400, Steve Johnson wrote: > > > Thanks for the information. This is the first time that I've used PF as a > > router based firewall and not with NAT. I didn't know that the state was on > > a per inter

Re: nagios monitoring of a remote openntp service

2008-05-08 Thread Stuart Henderson
On 2008-05-08, Pete Vickers <[EMAIL PROTECTED]> wrote: > Has anybody gotten Nagois' check_ntp_* to play nicely with a remote > openntp service ? It appears to rely upon services not implemented > in openntp ? this is against an OpenNTP server; <[EMAIL PROTECTED]:12>$ /usr/local/libexec/nagio

Re: Problem with state and PF on a 4.3 setup

2008-05-08 Thread Otto Moerbeek
On Thu, May 08, 2008 at 07:23:41AM -0400, Steve Johnson wrote: > Thanks for the information. This is the first time that I've used PF as a > router based firewall and not with NAT. I didn't know that the state was on > a per interface basis, and not global to the system. So this means that > un

Re: nagios monitoring of a remote openntp service

2008-05-08 Thread Pete Vickers
Hi, That's not the problem ! - the hosting is correctly listening, and indeed other hosts are correctly syncing to it. It's only the nagios check_ntp_* that doesn't like it. $ ~> grep -i listen /etc/ntpd.conf # Addresses to listen on (ntpd does not listen by default) listen on * $ ~> ps -

Re: Problem with state and PF on a 4.3 setup

2008-05-08 Thread Steve Johnson
Thanks for the information. This is the first time that I've used PF as a router based firewall and not with NAT. I didn't know that the state was on a per interface basis, and not global to the system. So this means that unless I want to allow all outbound traffic from my firewall, I need to h

Re: How to copy/pipe console buffert to file?

2008-05-08 Thread mickey
On Thu, May 08, 2008 at 10:59:46AM +, mickey wrote: > On Thu, May 08, 2008 at 12:37:47PM +0200, rancor wrote: > > Hi > > > > Is there any way of copy/pipe the information on the console to a file? I > > need the same information that I can see of I hold down Ctrl+Shift and using > > PageUp/Dow

Re: How to copy/pipe console buffert to file?

2008-05-08 Thread mickey
On Thu, May 08, 2008 at 12:37:47PM +0200, rancor wrote: > Hi > > Is there any way of copy/pipe the information on the console to a file? I > need the same information that I can see of I hold down Ctrl+Shift and using > PageUp/Down when I'm on the console. I'm not using serial, that would be > sim

Re: nagios monitoring of a remote openntp service

2008-05-08 Thread Dave Ewart
On Thursday, 08.05.2008 at 11:53 +0200, Pete Vickers wrote: > Has anybody gotten Nagois' check_ntp_* to play nicely with a remote > openntp service ? It appears to rely upon services not implemented > in openntp ? openntpd does not listen on port 123 by default: that's what Nagios would use to m

Re: How to copy/pipe console buffert to file?

2008-05-08 Thread Josh Grosse
On Thu, 8 May 2008 12:37:47 +0200, rancor wrote > Hi > > Is there any way of copy/pipe the information on the console to a > file? I need the same information that I can see of I hold down > Ctrl+Shift and using PageUp/Down when I'm on the console. I'm not > using serial, that would be simple b

How to copy/pipe console buffert to file?

2008-05-08 Thread rancor
Hi Is there any way of copy/pipe the information on the console to a file? I need the same information that I can see of I hold down Ctrl+Shift and using PageUp/Down when I'm on the console. I'm not using serial, that would be simple but I'm stuck right on the machine. I'm using OpenBSD 4.3 Best

nagios monitoring of a remote openntp service

2008-05-08 Thread Pete Vickers
Hi, Has anybody gotten Nagois' check_ntp_* to play nicely with a remote openntp service ? It appears to rely upon services not implemented in openntp ? /Pete

OpenBSD 4.3 CD, T-Shirts, Books arrived at ShenZhen, China.

2008-05-08 Thread Zhang Huangbin
Hi, guys. Just want to let you know, it arrived :) - 15 CD sets. - 8 Books (*7, *1). - 5 T-Shirts. It taken about one week from USA -> China. Thanks all people who made this possible. :D -- Best Regards. Zhang Huangbin - OpenBSD 4.2 -release, i386. - RHEL 5.1 Client

Re: Problem with state and PF on a 4.3 setup

2008-05-08 Thread Stuart Henderson
On 2008-05-08, Jon Radel <[EMAIL PROTECTED]> wrote: > > You appear making use of the default pass rule for all your outbound > traffic, as I didn't notice a single rule that applied to outbound > traffic (other than your block port 0, CARP, PFSync, and ping rules). I > don't believe that can be co

Re: Trouble with OpenBSD 4.2 DNS server setup

2008-05-08 Thread Stuart Henderson
On 2008/05/07 19:21, Sam Fourman Jr. wrote: > > > I assume that if I want to host email for 10 different domains I have > > > to have these set > > > > > > allow-recursion { any; }; > > > > This allows anybody to use your nameserver as a resolver (e.g. > > anyone can ask you to lookup domains