Re: OpenBSD culture?

>Actually two of the top linux kernel developers answered my email >directly to them when I had some questions. There was no ridicule or >belittling. If so, you got ripped off. You should hear us over beer. Oh, and "OpenBSD culture" is when Theo forgets something on the kitchen counter and does

Re: Trying to boot OpenBSD on Juniper Networks J2320.

Since a few people asked in private email, here is the dmesg, including hacked bootloader cruft. This is a few months old, as I haven't had time to play. If anyone is interested in donating any x86-based, Compact Flash-enabled Cisco appliances (ASA 55xx firewalls, 42xx IDS/IPS, etc), let me (j.

Re: Trying to boot OpenBSD on Juniper Networks J2320.

Top-posting because I am lazy... Since those Junipers are pseudo-chassis-based with pluggable cards, I think you are dying on how the backplane is laid out and detected by OpenBSD. In the interim, please make sure that dms@ sees the dmesg, principally for the em(4) interface. For what it's wor

Re: Hardware versus Software RAID

>aac is dogshit. You just insulted dog$h!t.

Re: What might be th cause of "psycho0: correctable DMA error AFAR xxx AFSR xxx" on Sun V100?

>Hi, > >I wonder if there is anything else I could do here to find out what might be >the >problem. > >I get plenty of errors like this on the console: > >psycho0: correctable DMA error AFAR 47b8c200 AFSR 406200ff0080 >psycho0: correctable DMA error AFAR 47b90aa8 AFSR 4062ff00a080 >psycho0

Re: where to order now ?

>Lemme say this, from what >I know, he's gathering evidence ATM, so he can prove he's a worthy >and honest person. What we have here is a Man-In-The-Middle attack injected into the trust model of what is really a social network. I'm interested in seeing this evidence. Was a human version of tc

Re: Sendmail: new one on me..

>Hi everyone. > >I have been using sendmail on my open BSD server for some time now. I >am using smtpvilter with clamwin and spam assassin. I am using TLS >with a self-signed certificate. > >I haven't had an issue for 2 years... then suddenly I get this: >sm-mta[23903]: STARTTLS=client, relay

Re: Need some information...

at im using to transmit the >data though is not the problem, the problem is how to accomplish my goals on >the software side. Any suggestions on that part Jason? > >On Tue, Aug 26, 2008 at 7:42 PM, Jason George <[EMAIL PROTECTED]> wrote: > >> >I have a file based data

Re: Need some information...

>I have a file based database with a mail server and public document >storage. I need to replicate all that data to a server that is >exactly the same but off site from the main one. Storage of the >database is almost always changing and can only be a few seconds out >of sync from the offsite ser

Re: Vlan Tag on Vlan Tag (l2tunneling)

: >> This is beyond expectation, as an openbsd user, I'am blown over since >> now, my so called router/switch is a metro switch.. geez.. I patching >> now, and let's see what happens. > >OT, but what makes a metro switch "metro"? It starts with the liberal use of hair grooming products. Doesn't a

Re: Hardware recommendation for firewalls (more than 4 NICs)

>> >I knew it was a matter of time before the "vlan insecurity" bullshit hit >> >the fan. RTFA. Who says anything about "blindly trusting" switches? >> >If you can't correctly configure VLANs on your switches, and filter on >> >vlan(4) interfaces in PF, you shouldn't be administering production >

Re: Old EmBSD docs

>Sometime ago I had run EmBSD on a little P100 and it served me nicely. Since >its disappearance from the landscape I've been using a stock OpenBSD install >on my home machine. However, I recently acquired a nice little Jetway board >with a PicoPSU and the idea of running EmBSD came to mind again.

Re: Just for info and for dreaming :-) Vaio UX and OpenBSD

>> > Someone tried OpenBSD on this beast? >> > >> > >> > http://www.sonystyle.com/webapp/wcs/stores/servlet/CategoryDisplay?catalogId= >> > 10551&storeId=10151&langId=-1&categoryId=577&parentCategoryId=16154

Re: spamd-setup hangup/timeout settings

>>> My spamd-setup always takes 20-30 minutes on two servers (4.1 and 4.2). >>> This is not normal? When I run it manually; most of the time is >>> spent >>> downloading traplist.gz >>> >>> This morning, I changed the crontab "time /usr/libexec/spamd-setup -d" >>> >>> 4.1 runtimes (minutes): 39,

Re: how to create a sha256 hash

>hi > how to create a sha256 value for file in openbsd ? > > can you please provide the command similar to > >sha1 foobar > >or > >md5 foobar > man cksum

Re: Perpetually Current

>I would like to install OpenBSD *once* and keep it patched and secured for >many years there after (5 - 7 years) in a production environment. Would it >be feasible to get a snapshot today and follow -current for many years w/o >having to reinstall? Basically, this approach would skip -stable and >

Re: openbsd router hardware

>It's also rather difficult to find non-x86-based boards. I was also >reading about these ARM-based units, but haven't ordered samples: >http://www.embeddedarm.com/epc/prod_SBC.htm > FWIW #1 - the port of NetBSD to this ARM platform has already had some cursory looks from a couple of dev

Re: Error updating 4.2 - permission denied

>>> === >>> >>> I have cleared the /usr/src directory and reloaded the tree from the CD, >>> and gone through the >>> whole process again, but get the same error. >>> >> >> This is the second time I've heard of this problem... >> >>

Re: Error Updating 4.2-stable - Permission denied

>oOOps > >It seems someone else has the same error > >http://archives.neohapsis.com/archives/openbsd/2007-12/1903.html > >One solution: > >"However... It seems to work as it should from the anoncvs1.usa.openbsd.org >mirror but *NOT* from my most used mirror which is >anoncvs1.ca.openbsd.org. "

Re: Exclusion caused by SMALL_KERNEL

>Hello, > >having spent most of the evening to understand why >my kernel build suddenly aborted compilation with >a pointer to a missing call "rt_mpath_next", I found >that the "option SMALL_KERNEL" clashes with >"pseudo-device pf 1", and that this was the sole >cause for my failure. My original r

Re: Intel DQ35MP

>Hello, > >I've just installed OpenBSD current on an Intel DQ35MP motherboard with a Quad >processor, this is the >dmesg log. Some devices are not recognized (PCI slot, ethernet, etc) > >OpenBSD 4.2-current (GENERIC) #558: Tue Nov 20 10:36:15 MST 2007 >[EMAIL PROTECTED]:/usr/src/sys/arch/i386/c

Re: drift in ntpd may not catch up on bad clock and keep slipping.

On Tue, 11 Dec 2007, Otto Moerbeek wrote: On Tue, Dec 11, 2007 at 03:10:52AM +, Jason George wrote: I have an older dual P3-800 Compaq server that started losing time very rapidly after upgrading to a -CURRENT snapshot over the weekend. Running anything that threw the machine into a high

Re: drift in ntpd may not catch up on bad clock and keep slipping.

I have an older dual P3-800 Compaq server that started losing time very rapidly after upgrading to a -CURRENT snapshot over the weekend. Running anything that threw the machine into a high (>10% sustained) system percentage caused the clock to lose an incredible amount of time... to the tune of

Re: freeBSD7.0 advertised.

>There is a comic related to the 4.2 release (which I'm too lazy to >find and reference at the moment) in which "puffy" and other related >creatures are in a race. Yes, I know the comic was OpenBSD produced >and centric, but it hit home anyway. > >There is a frame that shows a Daemon (represe

Re: Could Hiawatha replace Apache as in base HTTP server if it's license changed?

>Here is two messages from Hugo Leisink (Hiawatha developer). You'll >note that the first has a newer date than the later, that's because I >delete it, and I asked Hugo to send it to me again :P > >Thought that his words could be useful. Only useful if you are trolling. Hilter. Godwin. Done. >

Re: Code signing in OpenBSD

Since this thread is both TOP and BOTTOM posted, I am going UPPER MIDDLE post. >bofh wrote: >> Code signing by blood. ISAGN. >> >> >> "Sorry marc - had to do it" >> >> > > >what if theo is a "person of interest", has his endpoint surveilled and >his key and passphrase are compromised? if som

Re: Code signing in OpenBSD

>> > Come on... twice a year and get the benefit of not being excluded from >> > company policies which require digital signature of software downloaded >> > through the internet. >> >> It's not really OpenBSD's problem that some companies implement pointless >> "security" policies. > >I'm not dis

Re: A necessary evil: snmpd(8) and snmpctl(8)

>Hi! > >I just imported snmpd(8) and snmpctl(8), an initial attempt to >implement a new SNMP daemon for OpenBSD. SNMP is the "Simple Network >Management Protocol" and it is still very commonly used in corporate >networks, by network vendors, and in network management systems (NMS). > >SNMP is ver

Re: HP Procurve or Soekris w. OpenBSD ?

: >> I was just about to ask about this. I've been very happy with Nexcom >> 1563s as pf firewalls, especially with the disk-on-chip. No moving parts >> is good. (And thanks misc@ for this recommendation.) >> >> But the Nexcoms have only 100Base-T interfaces and now I've got a >> requirement for gi

Re: FOSS Open Hardware Documentation

>> What I would really like to see is SMP for sparc64. Hopefully this >> has become easier now. > >The major requirement for SMP on sparc64 is for some extremely talented >people having both significant interest and copious amounts of free >time. We have Kettenis. As long as I keep tossing him

Re: Sun Blade 1000?

>Hi, > >Has anyone experimented with a Sun Blade 1000? > >I need a new porting machine and a new desktop, so I thought I might >kill 2 birds with one stone. > >Is a dual 900 it quick? I call my 1.6GHz i386 slow, especially as I >have to run eclipse. Infact, you cant run java on sparc64 OpenBSD can

Re: Remote Printing Using CUPS

>Hi all, > >I've already searched on the Internet and also some OpenBSD FAQ >documentation but I could not find anything that could help me. I'd >like to know if CUPS that is packed for OpenBSD has the "Windows >Printer through Samba" option, that could allow remote printing on >Windows machines. I

Re: Security of the keyboard

>> > And guess what. Keyboards use a serial protocol. Which means that >> > there will be slightly different voltage drops in the system varying >> > with the keys you press. ZOMG! OpenBSD provides a side channel for >> > attackers through the sensors framework! >> >> And don't forget the aps(4) s

Re: OpenBSD sucks

>> > Good! You only have to buy a boat then, since you've already got the >> > boat anchor! >> > >> > Miod >> >> This from the man with an mcd(4) hooked up to an isa bus on his >> hp300 That's kinda like a guy with a pierced nipple being >> called a freak by a guy with a pierced penis

Re: Snapshots src/sys tarballs

>Is there a reason snapshots do not currently come with a >src/sys.tar.gz as releases do? I would think this to be quite useful >for people wishing/requiring building their own kernels, and using >snapshots, as it would help to minimize damage from kernel/userland >(and packages) coming out of sync

Re: help needed with routed problem

>The main point here is that I most likely need RIPv1. It used to work >with OpenBSD 4.0. I still need to publish using RIPv1, otherwise I >(actually, the firewall) will not be understood. > >Would the the zebra package be a relatively safe alternative? Use whatever hardware router is common and s

Re: Calgary hackathon need: UPS

>If someone in Calgary has a spare 1000-2000VA UPS which we could >borrow for the duration of the hackathon, we would really appreciate >it. We would need it starting today. > >Thanks. > > Fixed.

Re: solar power / openbsd handheld

>> We have a need for a low power OpenBSD device or handheld that can connect >> to a small SCADA device (serial or USB) to collect some temperature and >> voltage data, plus control one light switch, on a remote solar powered >> wifi repeater tower. > >Soekris 4501 or 4801 would be ideal, they use

Re: OSPF and IPv6

>On Wed, May 02, 2007 at 11:52:11AM +0100, Jon Morby wrote: >> On 1 Mar 2007, at 07:13, Esben Norby wrote: >> >> > On Wednesday 28 February 2007 14:58:49 Jon Morby wrote: >> >> Unless I'm missing something OpenOSPFD doesn't currently seem to >> >> support IPv6 ? >> > >> > IPv6 is not supported cur

Re: OpenBSD speed on desktops

>> > It's therefore not the responsibility of the programmer to check whether >> > the >> > result of optimization is correct. Therefore it's not the optimizations >> > that >> > are source of bugs, but bugs in GCC. >> >> But if you write a program and the user finds it full of bugs, are they >>

Re: No Blob without Puffy

>Jason George wrote: > >> This was sabre-rattling. Daniel made a pre-emptive tactical strike. >> There's a big difference. > >No, there's not a difference. Theo said he was willing to take the >emails public; this Daniel guy took him at his word, and made

Re: No Blob without Puffy

>>> Hi, >>> >>> this is the conversation I had with Theo: >> >> >> You just made private emails public, almost certainly without the permission >> of the other parties involved. > >I dunno, Daniel indicates Theo wrote the following: > >> If you release that poster which uses our slogan in such a

Re: No Blob without Puffy

>Hi, > >this is the conversation I had with Theo: You just made private emails public, almost certainly without the permission of the other parties involved. Please deduct any and all karma points you thought you had.

Re: Important OpenBSD errata

>> > Free Software: "You don't pay back, you pay forward." >> > -- Robert A. Heinlein >> >> I was trying to decide if I should reply, and if so, how. >> >> I looked for your name on the donations list. I don't see it. > >Out of curiosity, when I bought several t-shirts at the

Re: "make release" question for a non developer

> 2) Do I have to modify another file? No. >>> Very much noted. I have been wondering about this too. >> >> it's the 'i want to create my own style ramdisk kernels >> with their own unique "in-the-ramdrive-userland" consisting >> of a different variety of crunch'ed binaries' scenari

Re: Max amount of RAM

>> Hello folks, >> >> I was curious about the maximum amount of RAM an OpenBSD system will >> recognize. Is there any way at all to get it to recognize more? Kernel >> recompile? Sysctl options? >> >> I've browsed through the archives here a bit and have found a few answers >> relating to

Re: bsd.mp on sparc64?

>> >Somebady knows will bsd.mp be (when) on sparc64 prcessors? >> >> Since no developer is currently working on multiprocessor sparc64 >> code, it could be a while. >> >> It's been almost 2 years since I gave Theo the original machines to >> get the Ultrasparc III working, 9 months since Mark K s

Re: bsd.mp on sparc64?

>Somebady knows will bsd.mp be (when) on sparc64 prcessors? Since no developer is currently working on multiprocessor sparc64 code, it could be a while. It's been almost 2 years since I gave Theo the original machines to get the Ultrasparc III working, 9 months since Mark K starting hacking at

Re: Idea for additionnal funding

You're missing the point. OpenBSD is not a non-for-profit organization. OpenBSD is not a for-profit organization. OpenBSD, for all intents and purposes, is Theo de Raadt. This has implications. Period. There is work being done to put into place appropriate legal entities. This is essentiall

Re: Do you virtualize w/OpenBSD as host?

>On 1/22/07, Joachim Schipper <[EMAIL PROTECTED]> wrote: >> Finally, while OpenBSD does not run many virtualization environments, it >> does run *in* most virtualization environments. At least VMWare should >> work, and Xen is being developed [1]. >> >> Joachim >> >> [1] Or might be

Re: Idea for additionnal funding

>Actually I think you're mistaken. IIRC, theo's biggest beef about >non-profits is that it is too much trouble, and he would rather be >coding than handling non-profit related paperwork. > >As a user, I actually think setting up something like a google >sponsored link would be good - they already

Re: Merchandise idea: OpenBSD mug

>You are correct on the money aspect, see my other post. > >I have asked for permission from Theo out of courtesy. I have not >received a reply yet. Once I have that permission and higher quality >artwork I will place the orders. After that, it will take about 10 >days to get the products. Then

Re: OpenBSD dropping individual packets

>Hi > >OpenBSD rocks and I have donated to this great cause :-) > >Hope you can help. So I have the following setup: > > DMZ > | > | >LAN-OpenBSD/PF/Snort?--Internet > >So in a nutshell I want to drop packets (not sessions) that matc

Re: openbsd on cisco hardware?

oot sector /Pete On 13. nov. 2006, at 16.06, Jason George wrote: most PIX boxes are i386 based. IIRC I've booted bsd.rd on them in the past, nothing special except flash boot. pix515e# sh ver ... Hardware: PIX-515E, 64 MB RAM, CPU Pentium II 433 MHz Flash E28F128J3 @ 0xfff0

Re: openbsd on cisco hardware?

>most PIX boxes are i386 based. IIRC I've booted bsd.rd on them in the >past, nothing special except flash boot. > >pix515e# sh ver >... >Hardware: PIX-515E, 64 MB RAM, CPU Pentium II 433 MHz >Flash E28F128J3 @ 0xfff0, 16MB >BIOS Flash AM29F400B @ 0xfffd8000, 32KB >... >0: Ext: Ethernet0

Re: openbsd on cisco hardware?

>i know this is likely not possible for a number of reasons but i figured i'd >ask: are there or have there been any plans to port openbsd to run on cisco >hardware? > >googling for something like this is not very productive since the CARP vs. VRRP >and firewall interoperation links dominate search

Re: OpenBSD 3.9, fxp, SLOW network performance...

>Can anyone help out here please? > > >On Wed, 2006-11-08 at 15:17 +1300, Josh wrote: > >> Hello. Ive got a few openbsd firewalls set up with carp and pfsync >> running on them. >> >> Anyway, basically any transfer that goes thru the firewalls is slow, as >> in 1megabyte per second. >> >> I notic

Re: Sun Niagara supported?

>> Of course, interested parties with large budgets and desire to see >> this work happen are more than free to contact me to have a project >> charter written and a contract signed... >> >I see I see, thanks for the explanation. I hope I didn't get your hopes >up for financing...I am only a p

Re: Sun Niagara supported?

On Mon, 23 Oct 2006, Jean-Daniel Beaubien wrote: Jason George wrote: I'm just wondering if the Niagara chip (by Sun) is supported on OpenBSD Full and proper support of the Ultrasparc III processor is pretty much an implied requirement first... and we're still working on that...

Re: Sun Niagara supported?

>I'm just wondering if the Niagara chip (by Sun) is supported on OpenBSD Full and proper support of the Ultrasparc III processor is pretty much an implied requirement first... and we're still working on that...

Re: Oldest Server you run

>I can't believe people with PIIs and PIIIs even responded to this >thread, however. You GOT to be kidding me...That ain't old. That's >almost as new as I get! Exactly. # sysctl hw hw.machine=sparc hw.model=SUNW,SPARCclassic, TMS390S10 @ 50 MHz, on-chip FPU hw.ncpu=1 hw.byteorder=4321 hw.phys

Re: Sun SMP Hardware [was RE: Version 4.0 release ]

information. No tire-kickers, please. In the meantime, Money, meet Mouth. Sorry to be harsh, but from time to time, the list needs to have this idea pounded solidly back into place in people's minds. --J Jason George, P.Eng. Calgary

Re: anyone know where I can get an IO-DATA USL-5P in the United States?

>Nevermind the sex toy, what beer is that? Big Rock Traditional Ale. http://www.bigrockbeer.com It's what we normally drink, along with Guinness and Wild Rose Brown. It usually gives me a headache in large quanitities... but then again, it might be that it's because I'm usually drinking it with

Re: ho hum

>Another weekend at work: > ># uname -a >SunOS X 5.10 Generic_XX sun4u sparc SUNW,Sun-Fire-15000 ># uname -X >System = SunOS >Node = XX >Release = 5.10 >KernelID = Generic_XX >Machine = sun4u >BusType = >Serial = >Users = >OEM# = 0 >Origin# = 1 >NumCPU = 144 > ># id >uid=0(root)

Re: 4.0 i386 MP/clock issue?

How large is the "real" offset? What happens if you set the time yourself to a value reasonable close to the actual value? About 3.5 hrs... The reason I found the bouncing numbers suspect was that I have a dual-boot XP/OpenBSD laptop for field work. The time reported from the system clock

Re: 4.0 i386 MP/clock issue?

>> I have an older dual P3-800 Compaq DL360 >> Interestingly, the MP kernel does not see the second processor, even >> though the BIOS detects it on power up (second dmesg below). > >interesting. I have such a machine (DL360) and have both CPUs detected >just fine. >I don't remember whether I had

Re: 4.0 i386 MP/clock issue?

How large is the "real" offset? What happens if you set the time yourself to a value reasonable close to the actual value? About 3.5 hrs... The reason I found the bouncing numbers suspect was that I have a dual-boot XP/OpenBSD laptop for field work. The time reported from the system clock i

4.0 i386 MP/clock issue?

I have an older dual P3-800 Compaq DL360 that I'm planning on using as a test platform for Anil's Xen work. It panicked earlier this week while booting the Aug 30 snapshot install kernel (first dmesg below). In private email, Theo gave me the standard PCIBIOS/MPBIOS rant and mentioned Portuga

Re: SunBlade 1500

>I need to install something besides Solaris on some SunBlade >1500's. Lookig at the supported hardware list (under SPARC64) >I don't see this machine listed. > >I was wondering what this issues preventing support on that hardware >are? Lack of support for Ultrasparc III and related glue logic...

Re: OpenBSD and the money

>Understand that OpenBSD does not want to become incorporated, >because of the overheads involved, but I don't understand >why Theo de Raadt does not apply for a "trade name" >http://governmentservices.gov.ab.ca/cr/reg_bus_name.cfm >Trade names cost $10cdn. With a trade name you can >open a bank ac

Re: OpenBSD and the money

>Just out of curiosity, why are you trying to take in money by nickels >and dimes rather than obtaining research grants from the Alberta >government? > >Alberta is rolling in cash, and has specifically stated it wants to >invest in technological research so that it will be in a good position >when

Re: CanSecWest/core06 Vancouver April 3-7

>This conference currently costs $1546 USD! :-( > >what moneybags loser is going to pay up so much just to go >to a conference? > >buy yourself a nice computer, or hell, donate the money to >openbsd.org instead! :-D > >drop a zero or two and it would be worth the trip > Clearly you've never been

Re: ral(4) & how to determine what version of the PCI spec is supported

>Greetings, > >I am considering purchasing an MSI PC54G2 PCI wireless adapter for a >Pentium III machine which will run OBSD 3.7 . > >I note ral(4) states: > >"PCI ral adapters seem to strictly require a system supporting PCI 2.2 >or greater and will likely not work in systems based on older >revis

Re: CARP + Cisco Catalyst

>Hello everyone. > >Let me say up front, I'm no Cisco guru, although I do believe I posess a >sound understanding of networking involving multiple switches and the >potential issues associated with doing so. > >I'm looking at a situation where with the introduction of two machines >employing CARP t

Re: OT: phone line 2 ethernet converters

>> sorry for being off-topic, i am able to rent a pair of twist line (a >> circuit) between my home and and friends one. I wonder if there exist >> and ethernet extender device that could connect an ethernet cable to a >> phone line. It would do no special work, just a raw connection between >> 2 t

Re: OT: phone line 2 ethernet converters

>Dear friends, > >sorry for being off-topic, i am able to rent a pair of twist line (a >circuit) between my home and and friends one. I wonder if there exist >and ethernet extender device that could connect an ethernet cable to a >phone line. It would do no special work, just a raw connection betwe

Re: amd64 >4gb memory won't boot

On 5/19/05, Need Coffee <[EMAIL PROTECTED]> wrote: > I've been searching but can't find anything concrete... amd64.html > and the FAQ's amd64 section do not mention any problems, so I'm > asking here. (I found little bits here and there about this problem > affecting a lot of freenixes but nothing