Re: sshd idle session

2006-11-22 Thread Wood, Russell
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Clint Pachl Sent: Wednesday, 22 November 2006 2:41 PM Cc: misc@openbsd.org Subject: Re: sshd idle session atstake atstake wrote: I am using ssh (OpenSSH_4.4, OpenSSL 0.9.7j) on OpenBSD4.0. I want

Re: ktrace interpretation

2006-11-22 Thread Artur Grabowski
Olivier Meyer [EMAIL PROTECTED] writes: Most of what you see is the libc setting up default signal stuff. After the ELF is loaded mprotect is used to make the area executable, so when EIP is set to the starting point, the program does not SEGV. Erm. No. Sorry, not correct at all. Wouldn't it

Re: Weird behaviour of KDM

2006-11-22 Thread Laurence Tratt
On Wed, Nov 22, 2006 at 08:19:33AM +0100, Dr. Harry Knitter wrote: sometimes I get the right resolution (1280x1024) sometimes only standard vga (600x480). How can I tweak my system to get a reliable KDM with a resolution of 1280x1024? I'm not sure exactly when, but at some point something

Re: boot question

2006-11-22 Thread Uwe Dippel
On Mon, 20 Nov 2006 19:34:04 +0800, Uwe Dippel wrote: Now I plug a complete install as hard disc - which boots nicely when it is the only drive - as hd1. This is what happens: OpenBSD/i386 BOOT 2.10 boot boot hd1a:/bsd booting hd1a:/bsd: hd1a:/bsd: Inappropriate file type or format

Re: symon and pfq

2006-11-22 Thread Mark Prins
On Tuesday 21 November 2006 21:04, Martin Schrvder wrote: symon/symux is 2.72 on 3.9 I can't get the pfq resources working. :-( I've had this problem since somewhere post 3.8-ish; I've had a brief look and poke but no solution. [EMAIL PROTECTED]

Re: symon and pfq

2006-11-22 Thread Martin Schröder
2006/11/22, Mark Prins [EMAIL PROTECTED]: I've had this problem since somewhere post 3.8-ish; I've had a brief look and poke but no solution. So my configuration is correct and pfq is simply broken? Best Martin

Re: screen resolution problem(was: X configuration)

2006-11-22 Thread Oliver Fuchs
Hi, I have the problem here on my i386: with running startx or startkde I receive always the resolution 1400x1050 with 75Hz on my ATI Radeon 9600. But I can change the resolution in kde to [EMAIL PROTECTED] - so that is not the problem. I do not know why my modelines are not accepted: See my

Serial Console Installation - CDs available ?

2006-11-22 Thread Uwe Dippel
[follow-up on my earlier post on 'mixed' bootloaders] Now, what I propose to myself: install via serial console by leaving the cd40 in the drive and boot with serial console to it. (It is difficult for me to access my boxes out there, but someone can always insert a CDROM for me). So far, I (read

Re: Small patch for faq4.html

2006-11-22 Thread Karel Kulhavy
On Tue, Nov 21, 2006 at 02:10:00PM -0600, Matthew R. Dempsky wrote: On Tue, Nov 21, 2006 at 10:10:28AM +0100, Karel Kulhavy wrote: A small patch to make sure the reader understands the faq4.html is also the place to read when upgrading. Do you really think after comparing the OpenBSD

Re: Weird behaviour of KDM

2006-11-22 Thread Tony Abernethy
Laurence Tratt On Wed, Nov 22, 2006 at 08:19:33AM +0100, Dr. Harry Knitter wrote: sometimes I get the right resolution (1280x1024) sometimes only standard vga (600x480). How can I tweak my system to get a reliable KDM with a resolution of 1280x1024? I'm not sure exactly when, but at

dlopen + LD_BIND_NOW [was: Re: ktrace interpretation]

2006-11-22 Thread Philip Guenther
On 22 Nov 2006 09:52:09 +0100, Artur Grabowski [EMAIL PROTECTED] wrote: ... There are two problems with this. One is that memory is protected from writing, that's why there are those calls to mprotect all over the place. The other problem is that dynamic binding isn't reentrant, we don't want

Re: Small patch for faq4.html

2006-11-22 Thread Otto Moerbeek
On Wed, 22 Nov 2006, Karel Kulhavy wrote: On Tue, Nov 21, 2006 at 02:10:00PM -0600, Matthew R. Dempsky wrote: On Tue, Nov 21, 2006 at 10:10:28AM +0100, Karel Kulhavy wrote: A small patch to make sure the reader understands the faq4.html is also the place to read when upgrading.

Re: Small patch for faq4.html

2006-11-22 Thread Shane J Pearson
On 22/11/2006, at 10:27 PM, Karel Kulhavy wrote: I have ordered, because perceived OpenBSD as cool at that time. Now I don't see OpenBSD as cool anymore. The motivation for buying more is away. I am considering switching back to Gentoo on next major problem because the illusion of

Re: Serial Console Installation - CDs available ?

2006-11-22 Thread Paul de Weerd
On Wed, Nov 22, 2006 at 06:58:33PM +0800, Uwe Dippel wrote: | [follow-up on my earlier post on 'mixed' bootloaders] | | Now, what I propose to myself: install via serial console by leaving the | cd40 in the drive and boot with serial console to it. (It is difficult for | me to access my boxes out

CD orders to Turkey?

2006-11-22 Thread Soner Tari
Those who live in Turkey and purchased OpenBSD CDs in the past using the ordering web page, did you have any problems with Turkish customs processing? Were you able to receive your CDs safe and sound? Because I'm planning to order a 4.0 CD set to an address in Turkey. (I know first-hand stories

Re: pflogd: Failed to initialize: /dev/bpf0

2006-11-22 Thread Joachim Schipper
On Sun, Nov 19, 2006 at 10:11:36AM +0800, Uwe Dippel wrote: On Sat, 18 Nov 2006 21:07:57 +0100, Joachim Schipper wrote: No clue, but upgrading is a good idea and this is what it looks like on my box: [...] It doesn't look different on mine ... and the upgrade will happen hopefully

Re: screen resolution problem(was: X configuration)

2006-11-22 Thread Uwe Dippel
On Wed, 22 Nov 2006 10:42:41 +0100, Oliver Fuchs wrote: with running startx or startkde I receive always the resolution 1400x1050 with 75Hz on my ATI Radeon 9600. But I can change the resolution in kde to [EMAIL PROTECTED] - so that is not the problem. I do not know why my modelines are not

problem with bridging, cannot ping other hosts

2006-11-22 Thread Reza Muhammad
Hi guys, I have an OpenBSD router at home and the clients are connected through a wired interface (fxp0) as well as wireless interface (ral0 running in HostAP mode). Previously, wired network has a different network then the wireless network, wired network has the address of

Minor bug in admtemp(4) ?

2006-11-22 Thread Antti Harri
Hello, According to the manual I should be seeing only one value: On i386 machines, this driver also supports the Xeon embedded I2C temper- ature probes. In this case, however, only one temperature value is pro- vided. $ /sbin/sysctl hw hw.machine=i386 hw.model=Intel Pentium II Xeon

Re: problem with bridging, cannot ping other hosts

2006-11-22 Thread Reza Muhammad
Actually I do. Clients are able to connect to the router, as well as the Internet (I use NAT). However, clients cannot communicate to other clients. For example, ip 192.168.1.2 (connected through wired interface) and ip 192.168.1.3 (connected through wireless interface) are the clients.

Re: Weird behaviour of KDM

2006-11-22 Thread Dr. Harry Knitter
Am Mittwoch, 22. November 2006 10:59 schrieb Laurence Tratt: On Wed, Nov 22, 2006 at 08:19:33AM +0100, Dr. Harry Knitter wrote: sometimes I get the right resolution (1280x1024) sometimes only standard vga (600x480). How can I tweak my system to get a reliable KDM with a resolution of

BGP communities with OpenBGPD

2006-11-22 Thread Ludovic Collomb
Hi, I use OpenBSD (3.8) / OpenBDGP and it works fine whith 3 ISP. I want to set outbound communutie to influence incoming traffic on 1 peer. Here is the end of my bgpd.conf : - [...] neighbor aaa.bbb.ccc.ddd { remote-as efg descr

Re: [EMAIL PROTECTED]: Re: screen resolution problem(was: X configuration)]

2006-11-22 Thread xternfck
Thanks ti o all who answered: I had to correct the Modeline: ModeLine [EMAIL PROTECTED] 94.50 1024 1076 1172 1376768 769 772 808 +hsync +vsync The @84 was missing. So thank you again Oliver - Forwarded message from Uwe Dippel [EMAIL PROTECTED] - To:

Problem with VPN HA Setup using CARP/SASYNCD

2006-11-22 Thread Pedro Hugo
Hello, I'm trying to build a High Availability IPSEC Tunnel between two OpenBSD Clusters. For a start, is this possible ? For my test, I have the following setup: Desktop1 - VPN Cluster - VPN --- Laptop VPN Cluster has carp interfaces at both sides. I can't find much

Re: BGP communities with OpenBGPD

2006-11-22 Thread Claudio Jeker
On Wed, Nov 22, 2006 at 04:10:27PM +0100, Ludovic Collomb wrote: Hi, I use OpenBSD (3.8) / OpenBDGP and it works fine whith 3 ISP. You should update to 4.0. ospfctl in 4.0 has options to show you incomming and outgoing tables for each neighbor. This makes it easier to figure out what is

Re: raidctl: ioctl (RAIDFRAME_CONFIGURE) failed on 4.0 amd64 for RAID 1 (mirroring)

2006-11-22 Thread Joachim Schipper
On Tue, Nov 21, 2006 at 08:22:20PM -0600, Vijay Sankar wrote: Good day, I took one of my desktops that has two EIDE hard drives and went through the steps I had sent earlier to you and tried to verify that it does work on OpenBSD 4.0. It does work -- almost. I am pretty sure I was booting

strange behaviour of gre(4) tunnel

2006-11-22 Thread Igor Goldenberg
I'm trying to test gre(4) tunnel. Both machines in one LAN. OpenBSD has IP 192.50.51.52, another end - 192.50.51.28. # ifconfig gre0 gre0: flags=9011UP,POINTOPOINT,LINK0,MULTICAST mtu 1476 groups: gre physical address inet 192.50.51.52 -- 192.50.51.28 inet6

Re: Small patch for faq4.html

2006-11-22 Thread [EMAIL PROTECTED]
Karel Kulhavy a icrit : On Tue, Nov 21, 2006 at 02:10:00PM -0600, Matthew R. Dempsky wrote: On Tue, Nov 21, 2006 at 10:10:28AM +0100, Karel Kulhavy wrote: A small patch to make sure the reader understands the faq4.html is also the place to read when upgrading. Do you really

spamd

2006-11-22 Thread M...
Hello. First I am new to using spamd. I have a spare IP address that is sometimes used for outbound stuff (keep state) - it is not listed anywhere in DNS, so nobody should be touching any of the 65535 ports unless they are scanning me, trying to connect to windows ports, etc. ignoring icmp, is

Bind performance

2006-11-22 Thread Mark Bucciarelli
I have seen some benchmarking stat's on Bind [1] and NSD that compare FreeBSD 6.1 to 4.11, and 4.11 kick 6.1's ass and then wipes up the floor with it. I'm going to be putting a DNS server in production soon and was planning to use FreeBSD, but now I'm wondering if OpenBSD would be a better

Re: strange behaviour of gre(4) tunnel

2006-11-22 Thread Tonnerre LOMBARD
Salut, On Wed, Nov 22, 2006 at 08:52:11PM +0500, Igor Goldenberg wrote: 20:28:38.627914 0:4:23:ce:bb:b4 0:16:cb:a2:8e:c5 0800 122: gre 192.50.51.52 192.50.51.28: [] 192.168.254.254 192.168.254.253: icmp: echo request (id:bd53 seq:44) (ttl 255, id 3713, len 84) (DF) (ttl 64, id 26235, len

Re: Bind performance

2006-11-22 Thread fRANz
On 11/22/06, Mark Bucciarelli [EMAIL PROTECTED] wrote: I understand performance is secondary to security for this project, but I am curious what the numbers are in this specific case. For performance and security too, I suggest you to try djbdns instead bind: http://cr.yp.to/djbdns.html

Re: Modemsupport?

2006-11-22 Thread Emilio Perea
On Tue, Oct 24, 2006 at 08:23:06PM -0400, STeve Andre' wrote: I have a cardbus modem that I've used for years. The relevant line in the dmesg data is pccom3 at pcmcia1 function 0 U.S. Robotics, XJ/CC1560, Megahertz 56kbps \ Modem port 0xa3f8/8: ns16550a, 16 byte fifo I started to reply to

Re: raidctl: ioctl (RAIDFRAME_CONFIGURE) failed on 4.0 amd64 for RAID 1 (mirroring)

2006-11-22 Thread Siju George
On 11/22/06, Joachim Schipper [EMAIL PROTECTED] wrote: On Tue, Nov 21, 2006 at 08:22:20PM -0600, Vijay Sankar wrote: Good day, I took one of my desktops that has two EIDE hard drives and went through the steps I had sent earlier to you and tried to verify that it does work on OpenBSD 4.0.

Re: strange behaviour of gre(4) tunnel

2006-11-22 Thread Igor Goldenberg
2006/11/22, Tonnerre LOMBARD [EMAIL PROTECTED]: Did you set net.inet.gre.allow to 1? Yes. # sysctl net.inet.gre net.inet.gre.allow=1 net.inet.gre.wccp=0

Re: symon and pfq

2006-11-22 Thread CARIS Network Admin
[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote on : 2006/11/22, Mark Prins [EMAIL PROTECTED]: I've had this problem since somewhere post 3.8-ish; I've had a brief look and poke but no solution. So my configuration is correct and pfq is simply broken? I guess; symon will tell if the

Re: Modemsupport?

2006-11-22 Thread Emilio Perea
On Wed, Nov 22, 2006 at 10:29:30AM -0600, Emilio Perea wrote: The relevant dmesg line: Toshiba America, 3CXM056-BNW, 3COM/NoteWorthy 56K Modem \ port 0xa3f8/8: ns16550a, 16 byte fifo Sorry. That should have been: pccom3 at pcmcia1 function 0 Toshiba America, 3CXM056-BNW,\ 3COM/NoteWorthy

Re: Advice on VPN setup with two firewalls

2006-11-22 Thread Albert Chin
On Sat, Nov 11, 2006 at 11:58:14AM +0100, Joachim Schipper wrote: On Fri, Nov 10, 2006 at 02:06:42PM -0600, Albert Chin wrote: Then, from the VPN CLIENT, how would an ssh connection to 192.168.1.1, server A on the internal network behind FW2, work? IPsec would encrypt the packet between

Openswan 2.4.4 on FC5 against OpenBSD 4.0 isakmpd server

2006-11-22 Thread Albert Chin
I'm trying to get an FC5 laptop behind a firewall connected to an OpenBSD 4.0 server running isakmpd (controlled by ipsecctl) with IPsec using CA authentication. The CA authentication seems to be working and I seem to have passed the Phase 1 exchange but am getting stuck in the Phase 2 exchange.

problem with 003_systrace.patch

2006-11-22 Thread martin g
Hello all when i apply this patch system asks me File to patch: what should i enter here Bye

Re: problem with 003_systrace.patch

2006-11-22 Thread Andreas Maus
On 11/22/06, martin g [EMAIL PROTECTED] wrote: Hello all when i apply this patch system asks me File to patch: what should i enter here Hi. Nothing. You are a) not standing in /usr/src (read the first few lines from the patch file) or b) you don't have anythin under /usr/src Andreas.

Re: Bind performance

2006-11-22 Thread Kyle Drake
I've had very good results with MaraDNS, been using it for at least two years now with no problems. Some highlights: Memory based, so it loads all the configuration settings on startup and then jails itself so it cannot write to the FS Small, and FAST - It's been benchmarked as faster than Bind

Re: problem with 003_systrace.patch

2006-11-22 Thread Andreas Maus
On 11/22/06, martin g [EMAIL PROTECTED] wrote: if it is allready patched i have the latest sources. is this possible Nope. If it is already patched you will see something like this: # cd /usr/src # patch -p0 4.0/common/003_systrace.patch Hmm... Looks like a unified diff to me... The text

Re: problem with 003_systrace.patch

2006-11-22 Thread Andreas Maus
On 11/22/06, Andreas Maus [EMAIL PROTECTED] wrote: |And then rebuild your kernel. *ahem* Do you have the kernel sources (sys.tar.gz) installed in /usr/src/sys ? Andreas. -- Hobbes : Shouldn't we read the instructions? Calvin : Do I look like a sissy?

Re: Bind performance

2006-11-22 Thread Stuart Henderson
On 2006/11/22 18:01, fRANz wrote: On 11/22/06, Mark Bucciarelli [EMAIL PROTECTED] wrote: I understand performance is secondary to security for this project, but I am curious what the numbers are in this specific case. For performance and security too, I suggest you to try djbdns instead

Two quick NFS questions

2006-11-22 Thread Matthew R. Dempsky
I'm trying to setup a few diskless Linux machines using an OpenBSD 4.0 machine to provide NFS, and two questions have arisen: First, if I edit a line in /etc/exports, does it suffice to send SIGHUP to mountd on the server and remount the filesystem on the affected clients? If not, what are the

Re: Bind performance

2006-11-22 Thread Claudio Jeker
On Wed, Nov 22, 2006 at 10:43:42AM -0500, Mark Bucciarelli wrote: I have seen some benchmarking stat's on Bind [1] and NSD that compare FreeBSD 6.1 to 4.11, and 4.11 kick 6.1's ass and then wipes up the floor with it. I'm going to be putting a DNS server in production soon and was planning

Re: pflogd: Failed to initialize: /dev/bpf0

2006-11-22 Thread Berk D. Demir
Joachim Schipper wrote: On Sun, Nov 19, 2006 at 10:11:36AM +0800, Uwe Dippel wrote: On Sat, 18 Nov 2006 21:07:57 +0100, Joachim Schipper wrote: No clue, but upgrading is a good idea and this is what it looks like on my box: [...] It doesn't look different on mine ... and the upgrade will

Re: strange behaviour of gre(4) tunnel

2006-11-22 Thread Berk D. Demir
Igor Goldenberg wrote: I'm trying to test gre(4) tunnel. Both machines in one LAN. OpenBSD has IP 192.50.51.52, another end - 192.50.51.28. [... cut ...] First of all, use an empirical methodology. Destroy your gre tunnel with ifconfig gre0 down ifconfig gre0 destroy Clear

Re: Bind performance

2006-11-22 Thread Berk D. Demir
Mark Bucciarelli wrote: And when does performance really start to matter for a DNS server? Say I host 500 web sites and 500 email domains with average traffic, for some value of average. Is a limit of 15,000 DNS queries/second ever going to be a problem? If not, when could it become a

Re: Bind performance

2006-11-22 Thread Henning Brauer
* Berk D. Demir [EMAIL PROTECTED] [2006-11-22 22:04]: Mark Bucciarelli wrote: And when does performance really start to matter for a DNS server? Say I host 500 web sites and 500 email domains with average traffic, for some value of average. Is a limit of 15,000 DNS queries/second ever

Re: Serial Console Installation - CDs available ?

2006-11-22 Thread Paul de Weerd
On Wed, Nov 22, 2006 at 09:40:07PM +0800, Uwe Dippel wrote: | | 2. Does anyone have a cd40.iso for amd64 readily available ? | | Not yet, maybe next week .. try http://www.weirdnet.nl/openbsd/serial | | But I can't wait to get the boxes finally up on dual XEON with amd64 ! OK, i've unslacked and

Re: Bind performance

2006-11-22 Thread Berk D. Demir
Henning Brauer wrote: err... 15k pps is easily reachable well, not on a soekris perhaps I can't reach that value with a Dell OptiPlex GX280 w/ onboard bge(4) MP kernel, net.inet.ip.ifq.maxlen=250, 4.0 or -current, doesn't matter. Collision count increases monotonically. Stops forwarding

Re: Bind performance

2006-11-22 Thread Mark Bucciarelli
On Wed, Nov 22, 2006 at 11:00:17PM +0200, Berk D. Demir wrote: Mark Bucciarelli wrote: And when does performance really start to matter for a DNS server? 15.000 queries/sec seems a bit unrealistic to me. I bet even with 15.000 packets/sec your ethernet cards will create an interrupt

Re: strange behaviour of gre(4) tunnel

2006-11-22 Thread Igor Goldenberg
2006/11/23, Berk D. Demir [EMAIL PROTECTED]: Destroy your gre tunnel with ifconfig gre0 down ifconfig gre0 destroy Done. Clear your ARP table. arp -ad Done. Try to reach 192.50.51.28. For example with ping or telnet to port 22. Then check arp table entry

Re: Bind performance

2006-11-22 Thread Darrin Chandler
Mark Bucciarelli wrote: In any case, it's obvious DNS performance is not something I need to worry about. I think you are correct. You can also add more DNS servers at any point. Simplistic (but sufficient) load balancing and redundancy are trivially easy with DNS. -- Darrin Chandler

Re: Openswan 2.4.4 on FC5 against OpenBSD 4.0 isakmpd server

2006-11-22 Thread Albert Chin
On Wed, Nov 22, 2006 at 12:49:50PM -0600, Albert Chin wrote: I'm trying to get an FC5 laptop behind a firewall connected to an OpenBSD 4.0 server running isakmpd (controlled by ipsecctl) with IPsec using CA authentication. The CA authentication seems to be working and I seem to have passed the

Re: How to get install media?

2006-11-22 Thread Jeff Nelson
On Tue, Nov 21, 2006 at 08:52:17AM +0100, Karel Kulhavy wrote: On Mon, Nov 20, 2006 at 09:23:15AM -0600, Merv Hammer wrote: On Mon, 20 Nov 2006, Karel Kulhavy wrote: [...snip long, pompous rant] Do you have anything technical and/or interesting to say? If you don't, then with all

print japanese by konqueror

2006-11-22 Thread LinuxUser
hi all , i can print japanese by konqueror. i am poor in english . i only write down my doing . 1) my printing environment is next . openbsd:192.168.72.251---LAN---192.168.72.55:LP-9200PS2 here, LP-9200PS2 is a postscript printer . 2) /usr/local/sbin/cups-enable 3) /usr/local/sbin/cupsd

Antigen forwarded attachment

2006-11-22 Thread Antigen_EXCHANGE
The entire message underside, originally sent to you by [EMAIL PROTECTED] ([EMAIL PROTECTED]), has been forwarded to you from the Antigen Quarantine area. This message may have been re-scanned by Antigen and handled according to the appropriate scan job's settings. Entire Message.eml [demime

Antigen forwarded attachment

2006-11-22 Thread Antigen_EXCHANGE
The entire message BUSINESS REPRESENTATIVE WANTED!, originally sent to you by [EMAIL PROTECTED] ([EMAIL PROTECTED]), has been forwarded to you from the Antigen Quarantine area. This message may have been re-scanned by Antigen and handled according to the appropriate scan job's settings.

Antigen forwarded attachment

2006-11-22 Thread Antigen_EXCHANGE
The entire message Re: Marvell Yukon 88E8053 on Apple Mac mini (hanging system), originally sent to you by [EMAIL PROTECTED] ([EMAIL PROTECTED]), has been forwarded to you from the Antigen Quarantine area. This message may have been re-scanned by Antigen and handled according to the appropriate

Re: disks not detected during install

2006-11-22 Thread Patrick Cummings
On 11/10/06, Patrick Cummings [EMAIL PROTECTED] wrote: Hi misc, I'm trying to setup a new openbsd 3.9 install on i386. It worked before on that computer when I installed quickly to test for compatibility, but I needed to finish up some hardware stuff on it and then I wanted to install for

Re: CPU time off by a factor of two

2006-11-22 Thread Uwe Dippel
On Thu, 24 Nov 2005 18:42:40 +0800, Uwe Dippel wrote: Another problem on the Proliant ML350: the time isn't calculated properly. I noticed the problem with (open)ntpd; which continuously wanted to adjust by thousands and tens of thousands of seconds; after only a few hours of running. So I