Re: pf tag goes missing post sshd tcp decapsulization

2008-03-06 Thread Konrad
So sorry its not a propper diff anymore but this is what i've done: --- sys.bak/kern/uipc_socket.c Wed Mar 5 21:11:31 2008 +++ sys/kern/uipc_socket.c Thu Mar 6 06:50:29 2008 @@ -48,6 +48,8 @@ #include sys/resourcevar.h #include sys/pool.h +#include net/pfvar.h + void

From James Adamati

2008-03-06 Thread James Adamati
Hi, How are you doing today? My name is James Adamati I live in London and work in a financial institution here in United Kingdom. There is a potential transaction relating to a dormant account of one of our deceased customers, which I would like us to handle the fund actualization together.

Re: The Dilbert Problem...

2008-03-06 Thread openbsd
On Wed, Mar 05, 2008 at 04:25:08PM +0100, ropers wrote: snip NB: As for the number of open tabs, Firefox 2.0.0.x is a real sieve when it comes to memory. It leaks and leaks and leaks... The upcoming Firefox 3 is reportedly going to be a major step forward, but I haven't tried it yet. The

GENERIC.MP - DELL PowerEdge 2950 works OK

2008-03-06 Thread Dongsheng Song
OpenBSD 4.3 (GENERIC.MP) #1579: Tue Mar 4 15:00:17 MST 2008 [EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 2142175232 (2042MB) avail mem = 2068545536 (1972MB) mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.4 @ 0x7fb9c000 (64 entries) bios0: vendor Dell Inc. version

Regarding MTU values on 802.1q trunked physical interfaces (and more)

2008-03-06 Thread George Paschos
Hello all, I am a bit confused regarding the MTU value of the physical ethernet interfaces when there are vlan child interfaces configured, in regard to avoid unneeded fragmentation: ifconfig shows an MTU of 1500 for both the parent and the vlan interface. Should I increase by hand the mtu of

Re: select outgoing route depending on souce interface (net)

2008-03-06 Thread Giancarlo Razzolini
Jon Rubio escreveu: Giancarlo Razzolini wrote: Selective routing uses the route-to directive from pf. It's quite simple to use and, to achieve what you want, a simple rule like this should solve (the macros are wrong, was lazy to look them every time :): pass in on $dmz_if route-to

GENERIC - DELL PowerEdge 2950 works OK

2008-03-06 Thread Dongsheng Song
OpenBSD 4.3 (GENERIC) #1365: Tue Mar 4 14:47:58 MST 2008 [EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC real mem = 2142175232 (2042MB) avail mem = 2068672512 (1972MB) mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.4 @ 0x7fb9c000 (64 entries) bios0: vendor Dell Inc. version 2.0.1

Re: select outgoing route depending on souce interface (net)

2008-03-06 Thread Jon Rubio
Giancarlo Razzolini wrote: Selective routing uses the route-to directive from pf. It's quite simple to use and, to achieve what you want, a simple rule like this should solve (the macros are wrong, was lazy to look them every time :): pass in on $dmz_if route-to ($isp2_iface $ips2_gw)

More then 1 dhcrelay process on 1 router

2008-03-06 Thread Guido Tschakert
Hello folks short: will 2 (or more) dhcrelay work on one router without problems long: I have a router connected to 3 networks: a.b.1.0/24 connected to if1, a.b.2.0/24 connceted to if2, a.b.3.0/24 connected to if3. Lets say I have a dhcpd on a.b.1.1 Is it possible to start the two dhcrelay

write cache on scsi

2008-03-06 Thread Jose Fragoso
Hi all, Is there a straight-forward way to know if write cache is enabled on a SCSI disk? I installed 4.2 (both i386 and amd64) on a ibm x-series 336, and a simple mv of src.tar.gz from a dir to another in the same filesystem takes more than 10 seconds. 0m10.49s real 0m0.00s user 0m0.10s system

Re: More then 1 dhcrelay process on 1 router

2008-03-06 Thread Guido Tschakert
Guido Tschakert schrieb: Hello folks short: will 2 (or more) dhcrelay work on one router without problems long: I have a router connected to 3 networks: a.b.1.0/24 connected to if1, a.b.2.0/24 connceted to if2, a.b.3.0/24 connected to if3. Lets say I have a dhcpd on a.b.1.1 Is it

NT 6 profile missing from PF /etc/pf.os on 4.3, 4.2

2008-03-06 Thread Lars Noodén
I've compared /etc/pf.os on 4.2 and 4.3 and they seem to both be missing fingerprints for blocking/filtering Windows NT 6 packets. Has a fingerprint been identified? Regards, -Lars

Re: floppy.fs

2008-03-06 Thread Hannah Schroeter
Hi! On Tue, Mar 04, 2008 at 11:22:11PM -0700, Paul Greidanus wrote: I'm just wondering how many people out there are using the floppy.fs installer still? I'm wondering if it would be a worthwhile thought to expand past the 1.44Mb limit for the CD and .rd install options if there are features

Re: select outgoing route depending on souce interface (net)

2008-03-06 Thread Jon Rubio
Giancarlo Razzolini wrote: Yep, you need a reply-to rule. I'll not write one here, but basically, you do the rdr rule for incoming traffic as you normally would. But in the pass rule, you say that this rule will reply-to, to the isp2. If you do not make a reply-to rule, the requests get to

Re: The Insecurity output - improving the SNR

2008-03-06 Thread Richard Wilson
Further to my earlier posting, the following diff may be of use to people running anoncvs mirrors. Its utterly trivial, but the mantra goes, where's the diff, so I thought why not. Si1entDave --- securitySun Mar 11 01:31:52 2007 +++ security.newThu Mar 6 13:17:02 2008 @@ -35,7

Re: carp startup timing issues

2008-03-06 Thread Henning Brauer
* Clifford Bailey [EMAIL PROTECTED] [2008-03-05 16:45]: Hi, I have a puzzling issue with carp which I wondered whether anyone knew the answer to. I have two carp + pf + pfsync (on openbsd 4.2) boxes in a standard failover configuration (master and backup designated by advskew values). When

Re: pf tag goes missing post sshd tcp decapsulization

2008-03-06 Thread Henning Brauer
replying in public, since there are at least two people hacking on that * Konrad [EMAIL PROTECTED] [2008-03-06 10:26]: So sorry its not a propper diff anymore but this is what i've done: unfortunatly this is not enough. it messes the refcounting. the tagname2tag routing keeps a refcount for the

Re: write cache on scsi

2008-03-06 Thread Stuart Henderson
On 2008-03-06, Jose Fragoso [EMAIL PROTECTED] wrote: Is there a straight-forward way to know if write cache is enabled on a SCSI disk? # scsi -f /dev/rsd0c -m 8 and look at WCE But I don't think that's your problem. I installed 4.2 (both i386 and amd64) on a ibm x-series 336, and a simple

how I can save ddb trace information.

2008-03-06 Thread Jorge Medina
Hi list: I have a panic with mp kernel, when panic launch me to ddb prompt I execute ps and trace but i don't know how save the dump information.

Re: floppy.fs

2008-03-06 Thread arthur
Regarding the new stuffs may be added to the floppy, personally I'd like to see more NIC drivers. I used to boot floppy to install my P2 PC but later when I install a P4 (Asus P4P800 MB) I had to use CD since the floppy doesn't have sk drive. Arthur

Re: how I can save ddb trace information.

2008-03-06 Thread Girish Venkatachalam
On 12:16:31 Mar 06, Jorge Medina wrote: Hi list: I have a panic with mp kernel, when panic launch me to ddb prompt I execute ps and trace but i don't know how save the dump information. man crash(8) man savecore(8) You have type ddb boot dump -Girish -- unix soi qui mal y pense UNIX

Re: carp startup timing issues

2008-03-06 Thread Clifford Bailey
Hi Henning, Thanks for your response. Yes, your understanding of spanning tree is the same as mine (I meant turn ON portfast at the end, not turn off sorry!) I realize that enabling portfast is a solution, but I am still very puzzled by why the server pauses when portfast is off as I don't think

Re: write cache on scsi

2008-03-06 Thread Jose Fragoso
Hi, Stuart! Thanks for the hint. # scsi -f /dev/rsd0c -m 8 IC: 0 ABPF: 0 CAP: 0 DISC: 1 SIZE: 0 WCE: 0 MF: 0 RCD: 0 Demand Retention Priority: 0 Write Retention Priority: 0 Disable Pre-fetch Transfer Length: 65535 Minimum Pre-fetch: 0 Maximum Pre-fetch: 65535 Maximum Pre-fetch

Re: how I can save ddb trace information.

2008-03-06 Thread Stuart Henderson
On 2008-03-06, Jorge Medina [EMAIL PROTECTED] wrote: I have a panic with mp kernel, when panic launch me to ddb prompt I execute ps and trace but i don't know how save the dump information. First see if your machine preserves dmesg between boots. Not all machines do, but it's worth checking

Re: The Dilbert Problem...

2008-03-06 Thread ropers
On 06/03/2008, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: On Wed, Mar 05, 2008 at 04:25:08PM +0100, ropers wrote: snip NB: As for the number of open tabs, Firefox 2.0.0.x is a real sieve when it comes to memory. It leaks and leaks and leaks... The upcoming Firefox 3 is

Re: write cache on scsi

2008-03-06 Thread Stuart Henderson
On 2008-03-06, Jose Fragoso [EMAIL PROTECTED] wrote: Hi, Stuart! Thanks for the hint. # scsi -f /dev/rsd0c -m 8 IC: 0 ABPF: 0 CAP: 0 DISC: 1 SIZE: 0 WCE: 0 MF: 0 RCD: 0 Demand Retention Priority: 0 Write Retention Priority: 0 Disable Pre-fetch Transfer Length: 65535 Minimum

Re: how I can save ddb trace information.

2008-03-06 Thread Jorge Medina
On 3/6/08, Girish Venkatachalam [EMAIL PROTECTED] wrote: On 12:16:31 Mar 06, Jorge Medina wrote: Hi list: I have a panic with mp kernel, when panic launch me to ddb prompt I execute ps and trace but i don't know how save the dump information. man crash(8) man savecore(8) You

Re: how I can save ddb trace information.

2008-03-06 Thread Janjaap van Velthooven
On Thu, Mar 06, 2008 at 09:10:02PM +0530, Girish Venkatachalam wrote: On 12:16:31 Mar 06, Jorge Medina wrote: Hi list: I have a panic with mp kernel, when panic launch me to ddb prompt I execute ps and trace but i don't know how save the dump information. man crash(8) man savecore(8)

Re: write cache on scsi

2008-03-06 Thread Marco Peereboom
On Thu, Mar 06, 2008 at 04:32:38PM +, Stuart Henderson wrote: On 2008-03-06, Jose Fragoso [EMAIL PROTECTED] wrote: Hi, Stuart! Thanks for the hint. # scsi -f /dev/rsd0c -m 8 IC: 0 ABPF: 0 CAP: 0 DISC: 1 SIZE: 0 WCE: 0 MF: 0 RCD: 0 Demand Retention Priority: 0

Re: Compile bind on 4.2 fails - no acceptable grep in path

2008-03-06 Thread Tom Van Looy
Ehr, I did cvs-updated the source and rebuilt the kernel. But then after reboot, make world failed so I zipped up the sources and extracted them again from CD. That's exactly what happened. I still don't see what's wrong. My /usr/bin/grep has the same md5sum as the one from base.tgz =

Re: select outgoing route depending on souce interface (net)

2008-03-06 Thread Jon Rubio
Giancarlo Razzolini wrote: Yep, you need a reply-to rule. I'll not write one here, but basically, you do the rdr rule for incoming traffic as you normally would. But in the pass rule, you say that this rule will reply-to, to the isp2. If you do not make a reply-to rule, the requests get to

Re: write cache on scsi

2008-03-06 Thread Jose Fragoso
Hi, $ cat top load averages: 0.12, 0.12, 0.0814:30:38 21 processes: 20 idle, 1 on processor CPU states: 0.0% user, 0.0% nice, 0.0% system, 0.1% interrupt, 99.8% idle Memory: Real: 8216K/145M act/tot Free: 856M Swap: 0K/1024M used/tot PID USERNAME PRI NICE SIZE RES STATEWAIT

Singularity OS

2008-03-06 Thread Adrian Fisher
Hello chaps :) I just saw this on the net about a new OS from M$ called Singularity. What do you think of it thus far? http://www.pcpro.co.uk/news/174267/microsoft-releases-robust-new-operating-system.html

OpenBSD storage server

2008-03-06 Thread RS
Hi, I am planning to build an OpenBSD storage server for home use. I was wondering if I could get some advice before I buy the hard disks. I am looking at either a couple of Samsung 750GB spinpoint's or the 1TB Seagate Barracuda. I understand AHCI support was added to 4.2 and I'd like to know if

From Adamati James

2008-03-06 Thread James Adamati
Hi, How are you doing today? My name is James Adamati I live in London and work in a financial institution here in United Kingdom. There is a potential transaction relating to a dormant account of one of our deceased customers, which I would like us to handle the fund actualization together.

Re: pf tag goes missing post sshd tcp decapsulization

2008-03-06 Thread Konrad
Hey so now I changed the tagging from tcp_output to ip_output. I also put an pf_tag_unref to so_free and sosetopt (in case that there is allready a tag set). I couldn't see a reason for a pf_tag_unref in the so_accept because the socket could be reused. Thanks to Henning for the ideas! Any

Re: More then 1 dhcrelay process on 1 router

2008-03-06 Thread Clint Pachl
Guido Tschakert wrote: Hello folks short: will 2 (or more) dhcrelay work on one router without problems long: I have a router connected to 3 networks: a.b.1.0/24 connected to if1, a.b.2.0/24 connceted to if2, a.b.3.0/24 connected to if3. Lets say I have a dhcpd on a.b.1.1 Is it possible to

Re: Singularity OS

2008-03-06 Thread Henry Sieff
DELURK The OS is coded in an extension of C# - rather than more simple C or C++ - to avoid the flaws of today's operating systems, such as their susceptibility to buffer overruns from worms or viruses. Hahahahahahahahahaha! I needed that laugh. LURK On Thu, Mar 6, 2008 at 10:25 AM, Adrian

Re: OpenBSD storage server

2008-03-06 Thread Stuart Henderson
On 2008-03-06, RS [EMAIL PROTECTED] wrote: I am planning to build an OpenBSD storage server for home use. I was wondering if I could get some advice before I buy the hard disks. I am looking at either a couple of Samsung 750GB spinpoint's or the 1TB Seagate Barracuda. I understand AHCI

Re: Singularity OS

2008-03-06 Thread 代表 Erik Harmon
Thank God someone is writing an OS with dependability and security in mind. Erik On Thu, Mar 6, 2008 at 12:25 PM, Adrian Fisher [EMAIL PROTECTED] wrote: Hello chaps :) I just saw this on the net about a new OS from M$ called Singularity. What do you think of it thus far?

Re: pf tag goes missing post sshd tcp decapsulization

2008-03-06 Thread Can Erkin Acar
Hey so now I changed the tagging from tcp_output to ip_output. I also put an pf_tag_unref to so_free and sosetopt (in case that there is allready a tag set). I couldn't see a reason for a pf_tag_unref in the so_accept because the socket could be reused. Thanks to Henning for the ideas!

Re: problems with hoststated and relayd

2008-03-06 Thread Sebastian Reitenbach
Reyk Floeter [EMAIL PROTECTED] wrote: btw., did you test it with the latest code from -current? the sparch64 was installed from a snapshot not very long ago: OpenBSD 4.2-current (GENERIC.MP) #113: Wed Feb 13 20:47:18 MST 2008 [EMAIL PROTECTED]:/usr/src/sys/arch/sparc64/compile/GENERIC.MP the

Re: pf tag goes missing post sshd tcp decapsulization

2008-03-06 Thread Konrad
Nice, you probably want to keep the application/kernel tag name spaces distinct though. Otherwise it would be easy for any local user/program to mess with pf.conf generated tags and bypass filtering etc. It could be as easy as adding a prefix (APP_ ?) to all application generated tags.

Re: Singularity OS

2008-03-06 Thread Vikas N Kumar
The OS is written in Managed code and designed by managers :) On Thu, Mar 6, 2008 at 3:42 PM, Henry Sieff [EMAIL PROTECTED] wrote: DELURK The OS is coded in an extension of C# - rather than more simple C or C++ - to avoid the flaws of today's operating systems, such as their susceptibility

Re: Singularity OS

2008-03-06 Thread Andrés
I wonder if anyone actually took a look to the code before opening his/her mouth. Note that I don't trust Microsoft either, but giving that Singularity is not planned to be a successor to Windows, but a research experiment, makes me think it _can_ be good.

Re: Singularity OS (O/T Trolling)

2008-03-06 Thread Rod Whitworth
On Thu, 6 Mar 2008 22:27:49 +, Andris wrote: I wonder if anyone actually took a look to the code before opening his/her mouth. Note that I don't trust Microsoft either, but giving that Singularity is not planned to be a successor to Windows, but a research experiment, makes me think it _can_

Re: Regarding MTU values on 802.1q trunked physical interfaces (and more)

2008-03-06 Thread openbsd misc
-Urspr|ngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von George Paschos Gesendet: Donnerstag, 6. Mdrz 2008 11:47 An: misc@openbsd.org Betreff: Regarding MTU values on 802.1q trunked physical interfaces (and more) Hello all, I am a bit confused

Re: Would a crypto-accelerators help WEP on Soekris?

2008-03-06 Thread beck
Quoting Andre Pierre [EMAIL PROTECTED]: Hi all, I have been turning a Soekris Net 4801 box into a wireless access point. I saw that one can get a crypto-accelerator card from Soekris Engineering that plugs into the free PCI slot on the 4801. One quick (silly) question. Under OpenBSD 4.2 would

Re: pf tag goes missing post sshd tcp decapsulization

2008-03-06 Thread Can Erkin Acar
Nice, you probably want to keep the application/kernel tag name spaces distinct though. Otherwise it would be easy for any local user/program to mess with pf.conf generated tags and bypass filtering etc. It could be as easy as adding a prefix (APP_ ?) to all application generated

Re: pf tag goes missing post sshd tcp decapsulization

2008-03-06 Thread Stuart Henderson
On 2008-03-06, Can Erkin Acar [EMAIL PROTECTED] wrote: I am not sure how you could to change the 'kernel' tag names and become transparent/compatible at the same time. It wouldn't work anyway, then the app could set it's tag to KERNEL_whatever and the conflict would still exist..

Re: floppy.fs

2008-03-06 Thread Edd Barrett
Alright Theo and misc@, On Wed, Mar 5, 2008 at 6:55 PM, Theo de Raadt [EMAIL PROTECTED] wrote: There is one thing that some people out there could work on. Noone in our group is currently working on it, and it would be nice. I had another idea recently. I need to disable apm for proper

Re: how I can save ddb trace information.

2008-03-06 Thread Giancarlo Razzolini
Jorge Medina escreveu: Hi list: I have a panic with mp kernel, when panic launch me to ddb prompt I execute ps and trace but i don't know how save the dump information. I do enable booting from serial console and then use minicom, or something, to get it. My regards, -- Giancarlo Razzolini

Re: select outgoing route depending on souce interface (net)

2008-03-06 Thread Giancarlo Razzolini
Jon Rubio escreveu: --- 4.) Responses to incoming Web server (DMZ net) must be reply through ISP2 (172.31.0.21 -- 172.31.0.254 -- 80.25.145.194 -- 80.25.145.193 -- ISP2). ERROR!! Packages are send back through ISP1

Re: OpenBSD storage server

2008-03-06 Thread Douglas A. Tutty
On Thu, Mar 06, 2008 at 01:41:43PM -0500, RS wrote: looking at either a couple of Samsung 750GB spinpoint's or the 1TB Seagate Barracuda. Only based on my personal experience, I keep boxes around forever (or at least until gcc stops supporting them) so I keep drives until they die of old age.

problems building xenocara in 4.2 stable inside lndir'ed shadow directory when actual source is read only?

2008-03-06 Thread Don Jackson
Hello, I try to keep one tree of stable source (on a NAS), and build releases for various architectures from that source tree. I've learned the hard way that the best(only) way to build a release is to create a shadow directory for the src using lndir, which makes symlinks to the target files in

Re: umsm(4) device attaches to ugen(4) instead

2008-03-06 Thread Aaron Glenn
On Wed, Mar 5, 2008 at 3:26 PM, Travers Buda [EMAIL PROTECTED] wrote: I suspected that it may attach to umsm if it was not activated. Anyhow, good luck with the usbdevs, I can crank you out a kernel if you need it. ahh, fair enough. anyway, simply changing 0x0018 to 0x0218 in usbdevs.h

Re: OpenBSD storage server

2008-03-06 Thread Richard Daemon
On Thu, Mar 6, 2008 at 4:31 PM, bofh [EMAIL PROTECTED] wrote: On Thu, Mar 6, 2008 at 3:42 PM, Stuart Henderson [EMAIL PROTECTED] wrote: On 2008-03-06, RS [EMAIL PROTECTED] wrote: I'll be using a cheap Athlon X2 / 1GB / Gig ethernet / mATX board to complete the setup. I will

Re: OpenBSD storage server

2008-03-06 Thread bofh
On Thu, Mar 6, 2008 at 9:38 PM, Richard Daemon On an OpenBSD mailing list you're recommending OpenSolaris? Why not at least FreeBSD with ZFS? ;-) Right tool for the right job. FreeBSD's zfs implementation still has issues the last I looked. If all you want is a box of drives, zfs is

Compile jdk 1.5 on amd64 run out of memory

2008-03-06 Thread Dongsheng Song
When I compile jdk 1.5 on amd64 as root, dmesg report: warning: resource shortage: 1 pages of swap lost extent_alloc_subregion: can't allocate region descriptor extent_alloc_subregion: can't allocate region descriptor extent_alloc_subregion: can't allocate region descriptor

multiple connections to GPS device?

2008-03-06 Thread James Hartley
Is it possible to watch the NMEA traffic originating from a USB GPS device *while* attached via nmeaattach(8)? Once nmeaattach(8) has attached to the device, any subsequent connection attempted via cu(1) fails with an all ports busy message. The manpage for cu(1) states that connections are

Re: multiple connections to GPS device?

2008-03-06 Thread Chris Kuethe
On Thu, Mar 6, 2008 at 11:01 PM, James Hartley [EMAIL PROTECTED] wrote: Is it possible to watch the NMEA traffic originating from a USB GPS device *while* attached via nmeaattach(8)? no Once nmeaattach(8) has attached to the device, any subsequent connection attempted via cu(1) fails with

Re: multiple connections to GPS device?

2008-03-06 Thread James Hartley
On Thu, Mar 6, 2008 at 11:19 PM, Chris Kuethe [EMAIL PROTECTED] wrote: On Thu, Mar 6, 2008 at 11:01 PM, James Hartley [EMAIL PROTECTED] wrote: Is there some other manner in which I can tap into this connection? ports/misc/gpsd This looks really cool! Am I correct to assume that I can run