Re: Misc questionning about DNS

2015-01-14 Thread Stuart Henderson
On 2015-01-13, sven falempin wrote: > Dear OpenBSD users, > > Recently unbound made his way in base, pushing the complex bind/named > out for our own good. > > I would like to internally and externally solve some domain names > differently (so some service are accessible from inside and outside >

Re: missing packages for SPARC

2015-01-14 Thread Stuart Henderson
On 2015-01-13, Jeremy Evans wrote: > On Tue, Jan 13, 2015 at 12:58 PM, Riccardo Mottola < > riccardo.mott...@libero.it> wrote: > >> do we really need bash to build ruby? and... why ruby for subversion? not >> counting shells one ends up having perl, python, tcl and ruby! what a mess. > > > You do

Re: Misc questionning about DNS

2015-01-14 Thread Kapetanakis Giannis
On 14/01/15 02:33, Jason Adams wrote: On 01/13/2015 01:26 PM, sven falempin wrote: Dear OpenBSD users, Recently unbound made his way in base, pushing the complex bind/named out for our own good. I would like to internally and externally solve some domain names differently (so some service are

Re: OpenBSD on Intel Galileo

2015-01-14 Thread Stuart Henderson
On 2015-01-13, Patrick Wildt wrote: > Hi, > > Yes, it’s kinda possible. I tried that early 2014 or so. You need to have > some kind of EFI-Grub2 on an sdcard iirc. Then you exit the in-built grub, > open the EFI shell and have it boot grub2. > > Using kopenbsd you can try to load an OpenBSD ker

Re: Misc questionning about DNS

2015-01-14 Thread Craig Skinner
On 2015-01-13 Tue 16:26 PM |, sven falempin wrote: > > I would like to internally and externally solve some domain names > differently (so some service are accessible from inside and outside > without some fancy NAT or worse), I found out 'some' call this setup a > 'split-dns', often use for inter

Re: integrity of commercial CD set

2015-01-14 Thread Enos D'Andrea
On 12/01/2015 20:34, Theo de Raadt wrote: >> Please how is one supposed to verify the integrity of an official >> OpenBSD 5.6 commercial CD set, bought on the OpenBSD store and >> received by physical mail? [...] > > Each directory on the CD is signed using signify and the 5.6 keys > listed at

Re: integrity of commercial CD set

2015-01-14 Thread Mihai Popescu
> Thanks, but I was hoping for a method that would also verify the CD boot > process, and that would not require downloading and installing a second > image or trusting the CD to verify itself. Next time, it is better to ask what you hope for. You asked how to check and you got the answer, then yo

Re: integrity of commercial CD set

2015-01-14 Thread Stefan Sperling
On Wed, Jan 14, 2015 at 10:49:01AM +0100, Enos D'Andrea wrote: > Thanks, but I was hoping for a method that would also verify the CD boot > process, and that would not require downloading and installing a second > image or trusting the CD to verify itself. Bootstrapping trust is always going to be

Re: OpenBSD on Intel Galileo

2015-01-14 Thread Patrick Wildt
> Am 14.01.2015 um 09:43 schrieb Stuart Henderson : > > On 2015-01-13, Patrick Wildt wrote: >> Hi, >> >> Yes, it’s kinda possible. I tried that early 2014 or so. You need to have >> some kind of EFI-Grub2 on an sdcard iirc. Then you exit the in-built grub, >> open the EFI shell and have it bo

usb ehci errors in 5.6-stable

2015-01-14 Thread Evgeny Zhavoronkov
Hi, All! I get these errors when actively use usb wifi adapter Jan 14 16:08:57 t4 /bsd: 0x4f4e5155 Jan 14 16:08:57 t4 /bsd: usb_insert_transfer: xfer=0xfe821cb7c348 not busy 0x4f4e5155 Jan 14 16:08:57 t4 last message repeated 1006 times Jan 14 16:08:57 t4 /bsd: athn0: could not wakeup chip Jan

Re: Misc questionning about DNS

2015-01-14 Thread sven falempin
On Wed, Jan 14, 2015 at 4:41 AM, Craig Skinner wrote: > On 2015-01-13 Tue 16:26 PM |, sven falempin wrote: >> >> I would like to internally and externally solve some domain names >> differently (so some service are accessible from inside and outside >> without some fancy NAT or worse), I found out

Re: integrity of commercial CD set

2015-01-14 Thread Enos D'Andrea
On 14/01/2015 12:24, Stefan Sperling wrote: > Bootstrapping trust is always going to be hard no matter what we do > and how hard we try. [...] Now the answer has become "buy a CD > and cross-check it with signify" and it's still not enough. [...] "Buying a CD" in my case includes a 5.000 mile t

Re: usb ehci errors in 5.6-stable

2015-01-14 Thread Fred
On 01/14/15 12:37, Evgeny Zhavoronkov wrote: Hi, All! I get these errors when actively use usb wifi adapter Jan 14 16:08:57 t4 /bsd: 0x4f4e5155 Jan 14 16:08:57 t4 /bsd: usb_insert_transfer: xfer=0xfe821cb7c348 not busy 0x4f4e5155 Jan 14 16:08:57 t4 last message repeated 1006 times Jan 14 16:

Re: usb ehci errors in 5.6-stable

2015-01-14 Thread Evgeny Zhavoronkov
> On 01/14/15 12:37, Evgeny Zhavoronkov wrote: > >Hi, All! > > > >I get these errors when actively use usb wifi adapter > >Jan 14 16:08:57 t4 /bsd: 0x4f4e5155 > >Jan 14 16:08:57 t4 /bsd: usb_insert_transfer: xfer=0xfe821cb7c348 > >not busy 0x4f4e5155 > >Jan 14 16:08:57 t4 last message repeated

Re: [wip] Firefox 35.0rc3

2015-01-14 Thread RD Thrush
On 01/13/15 16:26, Landry Breuil wrote: [ .. snip .. ] >> On 1/10/15, Landry Breuil wrote: [ .. snip .. ] >> >> Interesting, your cpu doesnt have SSSE3 nor SSE4.1, while binutils/the >> configure script detects so.. that might explain why it built here and >> not on your ma

Re: ARM Firewall Hardware

2015-01-14 Thread Jonathan Gray
On Tue, Jan 13, 2015 at 06:52:00PM +0100, Christer Solskogen wrote: > On Tue, Jan 13, 2015 at 5:45 PM, Jonathan Gray wrote: > > > > Your earlier mail had a different load address than what I'd expect. > > Try 0x1880 > > Same. I've tried the following staring adresses: 0x1060 - > 0x188

Re: How to Selectively route DESTINATIONS via wan1_gw and via wan2_gw

2015-01-14 Thread lilit-aibolit
On 01/14/2015 07:19 AM, Indunil Jayasooriya wrote: Hi misc, I have /etc/ip_list1 file containing some destinations. format of /etc/ip_list1 is given below. 1.2.3.4 1.6.3.0/24 I want to route ALL DESTINATIONS listed in /etc/ip_list1 via wan1_gw. The rest of trafficc , I want to route via w

Re: Symon on 5.6

2015-01-14 Thread Predrag Punosevac
Steve Shockley wrote: > I've installed Symon/Symux/Syweb on a 5.6 machine for testing. > Symon+Symux are up and running. I installed apache-httpd-openbsd (at > least until I'm familiar with httpd), set up the virtual host, and I ran > > the chroot enable script from rrdtool. > > When I view c

Re: integrity of commercial CD set

2015-01-14 Thread Theo de Raadt
> >> Please how is one supposed to verify the integrity of an official > >> OpenBSD 5.6 commercial CD set, bought on the OpenBSD store and > >> received by physical mail? [...] > > > > Each directory on the CD is signed using signify and the 5.6 keys > > listed at http://www.openbsd.org/56.html

Alix3d2 + AR9280 wireless access point performance

2015-01-14 Thread Ján Kušniar
Hello, I've set up a small wifi AP using alix 3d2 computer board and Mikrotik R52nM mini PCI wireless adapter. Works great except for wireless throughput. It's running 5.6 stable, usual AP setup (wifi adapter in hostap mode, dhcpd, nat in pf). No sysctls or anything not mentioned in FAQ was modifi

Re: integrity of commercial CD set

2015-01-14 Thread martin
"Enos D'Andrea" wrote: > On 14/01/2015 12:24, Stefan Sperling wrote: > > > Bootstrapping trust is always going to be hard no matter what we do > > and how hard we try. [...] Now the answer has become "buy a CD > > and cross-check it with signify" and it's still not enough. [...] > > > > "Buyi

Re: integrity of commercial CD set

2015-01-14 Thread Stefan Sperling
On Wed, Jan 14, 2015 at 02:32:07PM +0100, Enos D'Andrea wrote: > "Buying a CD" in my case includes a 5.000 mile trip through multiple > "five-eyes" nations, whose overzealous three letter agencies officially > intercept physical shipments to install backdoors and hardware implants.

Re: integrity of commercial CD set

2015-01-14 Thread Christian Weisgerber
On 2015-01-14, mar...@martinbrandenburg.com wrote: >> "Buying a CD" in my case includes a 5.000 mile trip through multiple >> "five-eyes" nations, whose overzealous three letter agencies officially >> intercept physical shipments to install backdoors and hardware implants. > > Where have you hea

Re: integrity of commercial CD set

2015-01-14 Thread martin
Christian Weisgerber wrote: > On 2015-01-14, mar...@martinbrandenburg.com > wrote: > > >> "Buying a CD" in my case includes a 5.000 mile trip through multiple > >> "five-eyes" nations, whose overzealous three letter agencies officially > >> intercept physical shipments to install backdoors and

Re: Alix3d2 + AR9280 wireless access point performance

2015-01-14 Thread Stefan Sperling
On Wed, Jan 14, 2015 at 04:40:00PM +0100, Ján Kušniar wrote: > Hello, > > I've set up a small wifi AP using alix 3d2 computer board and Mikrotik > R52nM mini PCI wireless adapter. Works great except for wireless > throughput. It's running 5.6 stable, usual AP setup (wifi adapter in > hostap mode,

Re: Alix3d2 + AR9280 wireless access point performance

2015-01-14 Thread Christian Weisgerber
On 2015-01-14, Ján Kušniar wrote: > Even though it's running 54Mbit 802.11g, I can't get over ~15Mbit/s. Uh, what figures do you expect? Those "54 Mbit/s" are raw modem speed. You'll never get throughput anywhere close to that. I get ~20 Mbit/s between my OpenBSD laptop with iwn(4) and a D-Li

Re: integrity of commercial CD set

2015-01-14 Thread Theo de Raadt
> > On 2015-01-14, mar...@martinbrandenburg.com > > wrote: > > > > >> "Buying a CD" in my case includes a 5.000 mile trip through multiple > > >> "five-eyes" nations, whose overzealous three letter agencies officially > > >> intercept physical shipments to install backdoors and hardware implants

Re: integrity of commercial CD set

2015-01-14 Thread Jack Woehr
Theo de Raadt wrote: Finding them inside the global shipping system is easier than you think One of the joys of growing old is watching the really bad sci fi you read as a youth all come true :) -- Jack Woehr # "There's too much emphasis on things Box 51, Golden CO 80402 # lik

Re: ARM Firewall Hardware

2015-01-14 Thread Christer Solskogen
On Wed, Jan 14, 2015 at 3:39 PM, Jonathan Gray wrote: > I've updated the kernel at > http://jsg.id.au/openbsd/bsd.IMX.umg > And we have lift-off! ## Booting kernel from Legacy Image at 1080 ... Image Name: boot Created: 2015-01-14 14:13:27 UTC Image Type: ARM Linux Kernel

Re: integrity of commercial CD set

2015-01-14 Thread Richard Thornton
I bought a can of this paint from a hardware store up in Lake Louise last week. On Wed, 14 Jan 2015, Theo de Raadt wrote: On 2015-01-14, mar...@martinbrandenburg.com wrote: "Buying a CD" in my case includes a 5.000 mile trip through multiple "five-eyes" nations, whose overzealous three

Re: integrity of commercial CD set

2015-01-14 Thread Theo de Raadt
> I bought a can of this paint from a hardware store up in Lake Louise last > week. We already knew that.

Re: usb ehci errors in 5.6-stable

2015-01-14 Thread Fred
On 01/14/15 13:13, Evgeny Zhavoronkov wrote: On 01/14/15 12:37, Evgeny Zhavoronkov wrote: Hi, All! I get these errors when actively use usb wifi adapter Jan 14 16:08:57 t4 /bsd: 0x4f4e5155 Jan 14 16:08:57 t4 /bsd: usb_insert_transfer: xfer=0xfe821cb7c348 not busy 0x4f4e5155 Jan 14 16:08:57

Re: Alix3d2 + AR9280 wireless access point performance

2015-01-14 Thread Christian Weisgerber
On 2015-01-14, Stefan Sperling wrote: > 15Mbit/s sounds as if it maxes out at 18Mbit/s (the highest QPSK rate) > and never switches to OFDM rates (24 - 54 Mbit/s). IEEE 802.11 still uses a shared medium and CSMA/CA, right? (Wikipedia says so.) So the transfer between two nodes is effectively h

Re: Alix3d2 + AR9280 wireless access point performance

2015-01-14 Thread jkusn...@gmail.com
2015-01-14 17:41 GMT+01:00 Stefan Sperling > OpenBSD's implementation of rate adaptation is basic. It's possible > that you'll see the AP sending data frames at less than 54Mbit/s under > normal conditions. You'll probably see better results with other OSs > since they have better tuned wifi stac

Re: Alix3d2 + AR9280 wireless access point performance

2015-01-14 Thread Stefan Sperling
On Wed, Jan 14, 2015 at 08:24:02PM +, Christian Weisgerber wrote: > On 2015-01-14, Stefan Sperling wrote: > > > 15Mbit/s sounds as if it maxes out at 18Mbit/s (the highest QPSK rate) > > and never switches to OFDM rates (24 - 54 Mbit/s). > > IEEE 802.11 still uses a shared medium and CSMA/CA

What exactly is sigtramp?

2015-01-14 Thread Stefan Berger
hello, at [1], I read something about 'Sigtramp separation' within the W^X transition. I only know that this sigtramp-page (?) is used to jump back into the kernel when a signal arrives. My question is, what exactly is this signal trampoline? Why do I need it? Why was it on the Stack

Re: What exactly is sigtramp?

2015-01-14 Thread Philip Guenther
On Wed, Jan 14, 2015 at 3:10 PM, Stefan Berger wrote: > at [1], I read something about 'Sigtramp separation' within > the W^X transition. I only know that this sigtramp-page (?) is > used to jump back into the kernel when a signal arrives. > > My question is, what exactly is this signal trampoli

Re: What exactly is sigtramp?

2015-01-14 Thread Theo de Raadt
> at [1], I read something about 'Sigtramp separation' within > the W^X transition. I only know that this sigtramp-page (?) is > used to jump back into the kernel when a signal arrives. > > My question is, what exactly is this signal trampoline? That is not what the slides say. > Why do I

Re: What exactly is sigtramp?

2015-01-14 Thread Richard Thornton
See page 159 of the recent second edition of McKusick's book on the BSD kernel. It's FreeBSD centric, but its the same concepts. On Jan 14, 2015 6:31 PM, "Theo de Raadt" wrote: > > at [1], I read something about 'Sigtramp separation' within > > the W^X transition. I only know that this sigtra

Re: Symon on 5.6

2015-01-14 Thread Steve Shockley
On 1/14/2015 9:47 AM, Predrag Punosevac wrote: and I ran the chroot enable script from rrdtool. As documented in the rrdtool pkg-readme, you must do: /usr/local/share/examples/rrdtool/rrdtool-chroot enable You should look under /usr/local/share/doc/pkg-readmes/, it comes with a *lot* of OpenB

Re: integrity of commercial CD set

2015-01-14 Thread Enos D'Andrea
On 14/01/2015 17:03, mar...@martinbrandenburg.com wrote: > [...] you trust Theo and OpenBSD because you have no better option. > Don't pretend you increase your security by proving the software came > from a source you can't prove is trustworthy. [...] More than Theo himself, what makes me trust O

Re: usb ehci errors in 5.6-stable

2015-01-14 Thread Evgeny Zhavoronkov
On Wed, Jan 14, 2015 at 19:35 +, Fred wrote: > On 01/14/15 13:13, Evgeny Zhavoronkov wrote: > >>On 01/14/15 12:37, Evgeny Zhavoronkov wrote: > >>>Hi, All! > >>> > >>>I get these errors when actively use usb wifi adapter > >>>Jan 14 16:08:57 t4 /bsd: 0x4f4e5155 > >>>Jan 14 16:08:57 t4 /bsd: usb_

New x86, 4,5W Hardware Fit-PC Fillet

2015-01-14 Thread Jan Lambertz
Hi, as i am always searching for new (low power) hardware, today i found something new. It sounds quite nice for running openbsd as a router/firewall. It is possible that not everything is supported right now in openbsd but the low power and number of nics made me smile. It might be availiable aro

Re: Symon on 5.6

2015-01-14 Thread Christoph Borsbach
On Wed, Jan 14, 2015 at 21:24:15 -0500, Steve Shockley wrote: > On 1/14/2015 9:47 AM, Predrag Punosevac wrote: > >>and I ran > >>the chroot enable script from rrdtool. > > >As documented in the rrdtool pkg-readme, you must do: > >/usr/local/share/examples/rrdtool/rrdtool-chroot enable > > > >You s