nfsd send error 55
Hey list, I know this error message has been handled earlier on this list, that post did not contain any useful information for me though, so Im giving it another try. My setup is a OpenBSD 3.7 multi purpose server which acts as a firewall/gateway/file server/whatnot. Then I have a workstation running Debian (Linux 2.6.11) that mounts NFS shares from this server. The server uses a fxp NIC, the workstation a VIA Rhine-II. Now I don't really have any problems with NFS, it performs quite good, it's just a bit annoying that this error message keeps filling up the logs. I have not yet been able to get information on what error 55 really means, this would probably be helpful as a start. I realize this might not even be a problem with OpenBSD, but with Linux NFS, and if this is the case please ignore this post. Any help appreciated Thanks, Joel $(cat /var/run/dmesg.boot) OpenBSD 3.7 (GENERIC) #0: Wed Mar 30 00:04:04 CEST 2005 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel Pentium III (GenuineIntel 686-class, 512KB L2 cache) 548 MHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,SER,MMX,FXSR,SSE cpu0: disabling processor serial number real mem = 402223104 (392796K) avail mem = 359890944 (351456K) using 4278 buffers containing 20213760 bytes (19740K) of memory mainbus0 (root) bios0 at mainbus0: AT/286+(00) BIOS, date 07/19/01, BIOS32 rev. 0 @ 0xfd801 apm0 at bios0: Power Management spec V1.2 apm0: AC on, battery charge unknown pcibios0 at bios0: rev 2.1 @ 0xf/0x1 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf1c50/176 (9 entries) pcibios0: PCI Interrupt Router at 000:02:0 (Intel 82371FB ISA rev 0x00) pcibios0: PCI bus #1 is the last bus bios0: ROM list: 0xc/0x8000 cpu0 at mainbus0 pci0 at mainbus0 bus 0: configuration mode 1 (no bios) pchb0 at pci0 dev 0 function 0 Intel 82443BX AGP rev 0x03 ppb0 at pci0 dev 1 function 0 Intel 82443BX AGP rev 0x03 pci1 at ppb0 bus 1 vga1 at pci1 dev 1 function 0 S3 Trio3D AGP rev 0x01 wsdisplay0 at vga1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) pcib0 at pci0 dev 2 function 0 Intel 82371AB PIIX4 ISA rev 0x02 pciide0 at pci0 dev 2 function 1 Intel 82371AB IDE rev 0x01: DMA, channel 0 wired to compatibility, cha nnel 1 wired to compatibility wd0 at pciide0 channel 0 drive 0: Maxtor 51369U3 wd0: 16-sector PIO, LBA, 12949MB, 26520480 sectors wd1 at pciide0 channel 0 drive 1: MAXTOR 6L060J3 wd1: 16-sector PIO, LBA, 57259MB, 117266688 sectors wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2 wd1(pciide0:0:1): using PIO mode 4, Ultra-DMA mode 2 wd2 at pciide0 channel 1 drive 0: Maxtor 91826U4 wd2: 16-sector PIO, LBA, 17418MB, 35673120 sectors wd3 at pciide0 channel 1 drive 1: Maxtor 6B200P0 wd3: 16-sector PIO, LBA48, 194481MB, 398297088 sectors wd2(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2 wd3(pciide0:1:1): using PIO mode 4, Ultra-DMA mode 2 uhci0 at pci0 dev 2 function 2 Intel 82371AB USB rev 0x01: irq 11 usb0 at uhci0: USB revision 1.0 uhub0 at usb0 uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered Intel 82371AB Power Mgmt rev 0x02 at pci0 dev 2 function 3 not configured fxp0 at pci0 dev 3 function 0 Intel 82557 rev 0x05, i82558: irq 11, address 00:06:29:b0:d1:96 inphy0 at fxp0 phy 1: i82555 10/100 PHY, rev. 0 xl0 at pci0 dev 20 function 0 3Com 3c905B 100Base-TX rev 0x30: irq 10, address 00:50:da:33:a3:d0 exphy0 at xl0 phy 24: 3Com internal media interface isa0 at pcib0 isadma0 at isa0 pckbc0 at isa0 port 0x60/5 pckbd0 at pckbc0 (kbd slot) pckbc0: using irq 1 for kbd slot wskbd0 at pckbd0 (mux 1 ignored for console): console keyboard, using wsdisplay0 pcppi0 at isa0 port 0x61 midi0 at pcppi0: PC speaker sysbeep0 at pcppi0 lpt0 at isa0 port 0x378/4 irq 7 npx0 at isa0 port 0xf0/16: using exception 16 pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo fdc0 at isa0 port 0x3f0/6 irq 6 drq 2 fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec isapnp0 at isa0 port 0x279: read port 0x203 wss1 at isapnp0 Crystal Audio, CSC0100, , WSS/SB port 0x534/4,0x388/4,0x220/16 irq 5 drq 1,0: CS4236/CS 4236B (vers 0) audio0 at wss1 Crystal Audio, CSC010F, , Disabled at isapnp0 not configured Crystal Audio, CSC0110, , CTRL at isapnp0 port 0x120/8 not configured biomask fb45 netmask ff45 ttymask ffc7 pctr: 686-class user-level performance counters enabled mtrr: Pentium Pro MTRR support dkcsum: wd0 matched BIOS disk 80 dkcsum: wd1 matched BIOS disk 81 dkcsum: wd2 matched BIOS disk 82 dkcsum: wd3 matched BIOS disk 83 root on wd0a rootdev=0x0 rrootdev=0x300 rawdev=0x302 WARNING: / was not properly unmounted
Re: Booting off USB-stick emulated as floppy
Alexey E. Suslikov wrote: Hello misc@openbsd.org, some BIOSes unable to represent USB-stick as ordinary hard disk with real geometry. instead of it I see fd1 due machine disk with 1.44M floppy geometry (80/2/18). I have tried to copy over floppy??.fs (which is in 80/2/18 geometry) to USB-stick but it failed to boot. does anybody achieve some success booting using USB- stick emulated as floppy? Thanks. What kind of machine is this? copied over..how? (there's a lot of wrong ways. Few right ways) failed to boot..how? Info... Nick.
openbsd 3.6: gdb + pthreads == no go?
I have had no luck doing anything with gdb / pthreads on openbsd 3.6,
and haven't found any similar complaint in the misc@/tech@ archives.
The sample code that I'm using is attached below.
Is gdb (6.1 ships w/ 3.6) supposed to work with this implementation of
pthreads? Calling 'info threads' while running this code doesn't work,
and neither does 'thread X'.
If memory serves, ps ax should yield a different pid for each thread,
but that does not seem to be the case either. Is my code simply
broken, or do I misunderstand the status of pthreads in 3.6?
Any further pointers or corrections to my code would be greatly
appreciated. Thanks.
ben
---
#include err.h
#include pthread.h
#include stdio.h
#include unistd.h
#define NUM_THREADS 5
static int count = 0;
static pthread_mutex_t mutex;
void *
incr(void *threadid)
{
int id = (int)threadid;
int i, n;
printf(thread %d started: %d\n, id, getpid());
for (i = 0; ; ++i) {
pthread_mutex_lock(mutex);
n = ++count;
pthread_mutex_unlock(mutex);
if (i % id == 0)
sleep(1);
if (n = 1000)
pthread_exit(NULL);
}
}
int
main(int argc, char *argv[])
{
pthread_t threads[NUM_THREADS];
pthread_attr_t attr;
int rc, t;
pthread_attr_init(attr);
pthread_attr_setdetachstate(attr, PTHREAD_CREATE_JOINABLE);
pthread_mutex_init(mutex, NULL);
for(t = 1; t = NUM_THREADS; ++t) {
rc = pthread_create(threads[t], attr, incr, (void *)t);
if (rc)
errx(1, pthread_create);
}
for (t = 0; t NUM_THREADS; ++t)
pthread_join(threads[t], NULL);
pthread_mutex_destroy(mutex);
pthread_attr_destroy(attr);
return (0);
}
Re: OpenBSD 3.7 in a virtualpc-machine
Sevan / Venture37 wrote: I've just tried qemu + qemuX which seems to work well: http://stegefin.free.fr/qemu/qemu.dmg http://cordney.com/QemuX/ Same here. I finally have a functional ver. of OpenBSD 3.7 running on QEMU on my PowerBook. I was not happy, however, with the OpenBSD image that freeoszoo.org had - I had problems running pkg_add and a number of other things I wanted to test. Instead of investigating why, I simply did my own fresh install. I have put up a .gz img file of the 4g image at http://anywheretechnology.com/openbsd/openbsd37.img.gz if anyone is interested (it's about 145MB). The password for root is 0b$d (where 0 is a zero). I installed wget before making the compressed image. Otherwise, it is a vanilla 3.7 install. If I can ever take the time to figure out how to set up a torrent, I'll put that up, too. steve P.S. I finally gave up on Virtual PC. I found some work around sites, but to be honest, I don't have time to work on it if it doesn't work out of the box and QEMU does the job...
Re: Booting off USB-stick emulated as floppy
some BIOSes unable to represent USB-stick as ordinary hard disk with real geometry. instead of it I see fd1 due machine disk with 1.44M floppy geometry (80/2/18). I have tried to copy over floppy??.fs (which is in 80/2/18 geometry) to USB-stick but it failed to boot. does anybody achieve some success booting using USB- stick emulated as floppy? What kind of machine is this? i386 http://www.tyan.com/products/html/tomcati845gl.html BIOS 2.01 copied over..how? (there's a lot of wrong ways. Few right ways) dd if=floppy??.fs of=/dev/rsd0c bs=512 on other box failed to boot..how? Loading:.
Tagging on enc0
Hello list, what4s a good strategy to pass decrypted VPN traffic from roadwarriors on my internal firewall (3.7) interface? The source IP addresses from the roadwarriors are either: (1) a dynamic IP from an arbitrary ISP: Here I could use authpf to dynamically adjust my rules or (2) an internal IP, as several home office users are behind a NAT-T capable router. Here I guess I am out of luck with authpf, as $user_ip would point to the NAT4ed official IP. I could assign the internal IPs and hardcode those into my ruleset as a workaround. While trying to work this out, I came upon a different alternative: Would you consider it reasonably secure to tag VPN traffic on the enc0 interface, and use this tag to pass this traffic on the internal firewall interface? Bad idea? Thanks!
Re: Stephanie for OpenBSD 3.6 released
this message wasn't sent by me; if it was it's probably some mailserver fuckup. there is no stephanie. :) -b. On Sun, 5 Jun 2005, Constantine A. Murenin wrote: On 15/10/04, br1an [EMAIL PROTECTED] wrote: Stephanie for OpenBSD 3.6 is released I got this six-months-old message this evening... Has someone invented a time-machine? :-) Cheers, Constantine.
System freezes - APM Problem?
Hi List Since I updated Kernel to -current my System frequently freezes. I'm not even able to build userland. It freezes on any APM activities like switching off display, reboot or power off. And it also freezes on using special keys (i.e. Fn-Font) Any idea? dmesg is attached. Are there some more informations that I could provide? Marc OpenBSD 3.7-current (GENERIC) #6: Sun Jun 5 17:14:05 CEST 2005 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel Pentium III (GenuineIntel 686-class) 748 MHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE real mem = 536363008 (523792K) avail mem = 482586624 (471276K) using 4278 buffers containing 26923008 bytes (26292K) of memory mainbus0 (root) bios0 at mainbus0: AT/286+(00) BIOS, date 01/21/04, BIOS32 rev. 0 @ 0xffe90 apm0 at bios0: Power Management spec V1.2 apm0: battery life expectancy 48% apm0: AC on, battery charge high, charging, estimated 2:03 hours apm0: flags 30102 dobusy 0 doidle 1 pcibios0 at bios0: rev 2.1 @ 0xf/0x1 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfbc20/192 (10 entries) pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82371 ISA and IDE rev 0x00) pcibios0: PCI bus #4 is the last bus bios0: ROM list: 0xc/0x1 cpu0 at mainbus0 pci0 at mainbus0 bus 0: configuration mode 1 (no bios) pchb0 at pci0 dev 0 function 0 Intel 82815 Hub rev 0x02: rng active, 8Kb/sec ppb0 at pci0 dev 1 function 0 Intel 82815 AGP rev 0x02 pci1 at ppb0 bus 1 vga1 at pci1 dev 0 function 0 ATI Rage 128 Mobility MF rev 0x00 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) ppb1 at pci0 dev 30 function 0 Intel 82801BAM Hub-to-PCI rev 0x02 pci2 at ppb1 bus 2 esa0 at pci2 dev 3 function 0 ESS Maestro 3 rev 0x10: irq 5 ac97: codec id 0x83847609 (SigmaTel STAC9721/23) ac97: codec features 18 bit DAC, 18 bit ADC, SigmaTel 3D audio0 at esa0 xl0 at pci2 dev 6 function 0 3Com 3c556 100Base-TX rev 0x10: irq 10, address 00:00:86:4f:33:7e tqphy0 at xl0 phy 0: 78Q2120 10/100 PHY, rev. 11 3Com V.90 Modem rev 0x10 at pci2 dev 6 function 1 not configured cbb0 at pci2 dev 15 function 0 Texas Instruments PCI4451 CardBus rev 0x00: irq 10 cbb1 at pci2 dev 15 function 1 Texas Instruments PCI4451 CardBus rev 0x00: irq 10 Texas Instruments PCI4451 FireWire rev 0x00 at pci2 dev 15 function 2 not configured cardslot0 at cbb0 slot 0 flags 0 cardbus0 at cardslot0: bus 3 device 0 cacheline 0x8, lattimer 0x20 pcmcia0 at cardslot0 cardslot1 at cbb1 slot 1 flags 0 cardbus1 at cardslot1: bus 4 device 0 cacheline 0x8, lattimer 0x20 pcmcia1 at cardslot1 ichpcib0 at pci0 dev 31 function 0 Intel 82801BAM LPC rev 0x02 pciide0 at pci0 dev 31 function 1 Intel 82801BAM IDE rev 0x02: DMA, channel 0 wired to compatibility, channel 1 wired to compatibility wd0 at pciide0 channel 0 drive 0: FUJITSU MHS2060AT wd0: 16-sector PIO, LBA, 57231MB, 117210240 sectors atapiscsi0 at pciide0 channel 0 drive 1 scsibus0 at atapiscsi0: 2 targets cd0 at scsibus0 targ 0 lun 0: TOSHIBA, DVD-ROM SD-C2402, 1009 SCSI0 5/cdrom removable wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5 cd0(pciide0:0:1): using PIO mode 4, Ultra-DMA mode 2 pciide0: channel 1 ignored (disabled) uhci0 at pci0 dev 31 function 2 Intel 82801BA USB rev 0x02: irq 10 usb0 at uhci0: USB revision 1.0 uhub0 at usb0 uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered isa0 at ichpcib0 isadma0 at isa0 pckbc0 at isa0 port 0x60/5 pckbd0 at pckbc0 (kbd slot) pckbc0: using irq 1 for kbd slot wskbd0 at pckbd0: console keyboard, using wsdisplay0 pms0 at pckbc0 (aux slot) pckbc0: using irq 12 for aux slot wsmouse0 at pms0 mux 0 pcppi0 at isa0 port 0x61 midi0 at pcppi0: PC speaker spkr0 at pcppi0 sysbeep0 at pcppi0 lpt0 at isa0 port 0x378/4 irq 7 npx0 at isa0 port 0xf0/16: using exception 16 pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo fdc0 at isa0 port 0x3f0/6 irq 6 drq 2 fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec biomask ef45 netmask ef45 ttymask ffc7 pctr: 686-class user-level performance counters enabled mtrr: Pentium Pro MTRR support dkcsum: wd0 matched BIOS disk 80 root on wd0a rootdev=0x0 rrootdev=0x300 rawdev=0x302 WARNING: / was not properly unmounted
Re: nfsd send error 55
I had a similar problem with nfs after enabling packet queueing (CBQ) on the interface. I've since disabled queueing on the internal interface as an interim solution, but am planning on installing an additional NIC for nfs stuff. I experienced the nfsd send error 55 with a linux client too. btw, $ grep 55 /usr/src/sys/sys/errno.h #define ENOBUFS 55 /* No buffer space available */ Graham
Re: OpenBSD install gone wild
Sorry wrong list Best Regards, John On 6/5/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Greetings, I've hit sort of a deadend and I'm not sure what to do. I've tried to install OpenBSD with linux on the zaurus and everything was going well until I got to the part of installing the sets. I had previously put the sets in a folder on hdd2, when asked where the files where I entered the appropriate device and got errors, so I suspended the install program and mounted it in the /mnt folder fg'd back into the the install program and put in the path /mnt/op37 and hit enter. I seemed to work so I typed 'all' to install all the sets Everything was going fine until I got alot of Disk full error messages. The screen kept repeating this message so I hit control-C and it rebooted (or I manually rebooted, forgot which). Since the install didn't complete I wasn't surprised that the loader counldn't find /bsd. The problem is when the zaurus trys to load Qtopia it freezes. I see the messages waiting for /hdd3/debroot to be fscked..., waiting for /hdd3/debroot to be mounted..., can't cd to /hdd3/debroot failed and then I get the zaurus splash screen and it just stays there. I double checked rc.rofilesys and it looks valid (used the ipk). I was thinking of how I could have run out of disk space when I had more than enough space allocated. After digging around abit :( I found that the install program began installing the files in hdd2 which is a linux partition. It formatted the right partitions but installed it into the wrong one. Any recommendations on how I can extract bullet from foot? Best Regards, John
Re: apm(8) on Zaurus
On Sun, Jun 05, 2005 at 05:40:51AM +0900, Hiroshi Maruyama wrote: One different thing I did when installing is the following. I went into shell before installing OpenBSD/zaurus to pass options '-h 16 -s 63 -c 7936' with OpenBSD's fdisk, which might not be descrived in the install guide. So far, I'd no problems with the disk layout, but I'll surely watch for potential problems in in the future. Ciao, Kili
Re: apm(8) on Zaurus
On Sat, Jun 04, 2005 at 03:20:54PM -0600, Chris Kuethe wrote: The battery is one of the most braindead I've ever seen. I'm trying to fix battery life prediction right now - not an easy thing as the battery really only gives us voltage, and that's nearly constant until right before the machine dies on you. Doesn't sound funny. Charge it up for a half hour, pop out the battery and wall plug for a minute, put everything back together and boot as normal works for me when I run my zaurus out of power... That helped. Suspend also works, too. Thank you all for your help. Ciao, Kili
pf versus ppp for address translation...
greetings all, i decided to get rid of my horrible all-in-one adsl modem/router/wap and replace with a rather cool openbsd box. i was set on using pf to handle the passing of traffic from the tun interface to the internal private address space, however in the process of writing my ppp.conf I noticed ppp can do the whole NAT thing itself. Do any knowledgeable chaps on this list have an opinion on which is the best to use or perhaps some advantages/disadvantages of using either. thanks for your time poncenby
Eclipse + 3.7
Regards. Is anyone who could install Eclipse from ports or package? I cannot install because jdk install always breaks. :/ pkg error: # pkg_add -vvv eclipse-sdk-gtk2-3.0.1.tgz parsing eclipse-sdk-gtk2-3.0.1 Dependencies for eclipse-sdk-gtk2-3.0.1 resolve to: apache-ant-1.6.2, jdk-1.4.2p0, gtk+2-2.4.14 (todo: jdk-1.4.2p0) eclipse-sdk-gtk2-3.0.1:Can't find jdk-1.4.2p0 /usr/sbin/pkg_add: jdk-1.4.2p0:Fatal error Thats okey because jdk-1.4.2p0 doesn't exists in 3.7 package list. But from ports jdk breaks here: Linking launcher... /usr/ports/devel/jdk/1.4/w-jdk-1.4.2p0/control/build/bsd-i586/hotspot-i586/tmp/bsd_i486_compiler2/product/libjvm.so: warning: vsprintf() is often misused, please use vsnprintf() /usr/ports/devel/jdk/1.4/w-jdk-1.4.2p0/control/build/bsd-i586/hotspot-i586/tmp/bsd_i486_compiler2/product/libjvm.so: warning: strcpy() is almost always misused, please use strlcpy() launcher.o(.text+0x6a9): In function `SetClassPath': /usr/ports/devel/jdk/1.4/w-jdk-1.4.2p0/hotspot/src/os/bsd/launcher/java.c:295: warning: sprintf() is often misused, please use snprintf() launcher.o(.text+0x1348): In function `SetJavaCommandLineProp': /usr/ports/devel/jdk/1.4/w-jdk-1.4.2p0/hotspot/src/os/bsd/launcher/java.c:721: warning: strcat() is almost always misused, please use strlcat() /usr/lib/libstdc++.so.38.0: undefined reference to `_Unwind_Resume_or_Rethrow' /usr/lib/libstdc++.so.38.0: undefined reference to `_Unwind_Resume' /usr/lib/libstdc++.so.38.0: undefined reference to `_Unwind_RaiseException' collect2: ld returned 1 exit status gmake[3]: *** [gamma] Error 1 gmake[3]: Leaving directory `/usr/ports/devel/jdk/1.4/w-jdk-1.4.2p0/control/build/bsd-i586/hotspot-i586/tmp/bsd_i486_compiler2/product' gmake[2]: *** [the_vm] Error 2 gmake[2]: Leaving directory `/usr/ports/devel/jdk/1.4/w-jdk-1.4.2p0/control/build/bsd-i586/hotspot-i586/tmp/bsd_i486_compiler2/product' gmake[1]: *** [product] Error 2 gmake[1]: Leaving directory `/usr/ports/devel/jdk/1.4/w-jdk-1.4.2p0/control/build/bsd-i586/hotspot-i586/tmp' gmake: *** [product] Error 2 *** Error code 2 Any suggestion? -- Adam Papai Digital Influence Inc. E-mail: [EMAIL PROTECTED] Phone: +36 30 33-55-735
Blackbox 0.70?
Hello, I just wrote a nice theme for Blackbox, with [1] as the wallpaper and colors of this image have a central place in theme, on my Debian box. But I tried loading it on OpenBSD 3.7 laptop, I found out it didn't worked. This was due to the fact that, it had been written for Blackbox 0.70, while Blackbox 0.65 is in the ports. Now, converting the configfile would be a pain in the butt, and Blackbox 0.70 isn't in the ports yet. So I was wondering if anyone has succesfully patched and built version 0.70 of Blackbox. -Jasper [1] https://https.openbsd.org/images/tshirt-23.gif -- BSD is designed, Linux is grown; the choice is yours.
Re: Interface groups
* Frank Denis (Jedi/Sector One) [EMAIL PROTECTED] [2005-06-05 22:22]: Since -current changed a bit the way interface groups are working, is there a simple way to emulate the old behavior? Specifically, I have a pptp server using poptop that creates a lot of tun interfaces. But these interfaces are not automatically assigned to an interface group. So is there still a way to match tun* in pf rules? not currently. I plan to bring back the interface class groups for cloned interfaces, tho there is a bit prerequisite work to do (there is no easy way to detect cloned interfaces yet) -- BS Web Services, http://www.bsws.de/ OpenBSD-based Webhosting, Mail Services, Managed Servers, ... Unix is very simple, but it takes a genius to understand the simplicity. (Dennis Ritchie)
Compile time on old i386
I'm running make build on a Pentium 100 with 64M and an old IDE drive. Any guesses as to how long this might take? And, out of curiosity, how fast can a fast i386 box do it?
Re: Security WebCams
I use ZoneMinder (http://www.zoneminder.com/). But have not tried running it on OBSD. But it is a great package. Plus it is OSS and supports a lot of different cameras in various price ranges. -J On 6/3/05, Johan SANCHEZ [EMAIL PROTECTED] wrote: On Fri, 03 Jun 2005 07:19:12 -0500 Dave Feustel [EMAIL PROTECTED] wrote: I have an immediate need for detection of physical intrusion. I would like to have a webcam take and save pictures to disk when there is motion detected in the camera's field of view. Is this doable right now with OpenBSD? Thanks, Dave Feustel Hi Dave, There are several solution like using a netcam like axis ones with a perl script that grab shots to your disk . There is also veo products,especially the veo observer i used it a time coupled to good perl script that save pics to your disk. hope it helps , Johan
OpenNTPd issue
Hello, as I see OpenNPTd doesn't have a seprated mailing list, but we can say it is an OpenBSD-related software, that's why I'm writing here, but actually I use FreeBSD. So, I've installed OpenNTPd from ports collection, and it synchronizes my servers time correctly, but I can't sync to the server. I've tried it with a windows-client, and the error message was the following: The time sample was rejected because: The peer's stratum is less than the host's stratum. I don't know the NTP protocol on depth, but I need a quick solution for this. Do You have any idea why it doesn't work with windows? Unfortunately, I haven't had an opportunity to try it with a unix-like client, maybe this is just some kind of incompatibility. Could You test it please? The server's domain is: time.t-hosting.hu. Regards, Gabor Kvvesdan
Re: Compile time on old i386
On Sunday 05 June 2005 16:46, Richard P. Koett wrote: I'm running make build on a Pentium 100 with 64M and an old IDE drive. Any guesses as to how long this might take? And, out of curiosity, how fast can a fast i386 box do it? I wouldn't be surprised if it took 40 hours. The lack of memory is going to affect things--if you can, stuff 128m in it. My 1.8G p4 laptop can do a make build in about 2 hours. --STeve Andre'
Re: Stephanie for OpenBSD 3.6 released
Constantine A. Murenin [EMAIL PROTECTED] wrote: I got this six-months-old message this evening... Has someone invented a time-machine? :-) yeh.. i got four old messages.. cu JRL -- If you don't remember something, it never existed... If you aren't remembered, you never existed... I don't quite understand what love is like... But if there was someone who liked me, I'd be happy.
Problem compiling wget from ports
I have a problem compiling wget from the ports. Here is the final part of the make output: cc -O2 -pipe -DINET6 -o wget cmpt.o connect.o cookies.o fnmatch.o ftp.o ftp-basic.o ftp-ls.o ftp-opie.o hash.o headers.o host.o html-parse.o html-url.o http.o init.o log.o main.o gen-md5.o gnu-md5.o netrc.o progress.o rbuf.o recur.o res.o retr.o safe-ctype.o snprintf.o url.o utils.o version.o -L/usr/local/lib connect.o(.text+0x1dd): In function `connect_to_one': : undefined reference to `__errno' connect.o(.text+0x1eb): In function `connect_to_one': : undefined reference to `__errno' connect.o(.text+0x1f7): In function `connect_to_one': : undefined reference to `__errno' connect.o(.text+0x219): In function `connect_to_one': : undefined reference to `__errno' connect.o(.text+0x235): In function `connect_to_one': : undefined reference to `__errno' connect.o(.text+0x259): more undefined references to `__errno' follow collect2: ld returned 1 exit status gmake[1]: *** [wget] Error 1 gmake[1]: Leaving directory `/usr/ports/net/wget/w-wget-1.8.2/wget-1.8.2/src' gmake: *** [src] Error 2 *** Error code 2 Stop in /usr/ports/net/wget (line 1769 of /usr/ports/infrastructure/mk/bsd.port.mk). The system is an i386 installed with an almost final 3.7 (the kernel was the same of the release one) and then I made an Upgrade from the official 3.7 CD when arrived. A lot of other ports compiled without any problem. Any hints? Thanks. -- ___ __ |- [EMAIL PROTECTED] |ederico Giannici http://www.neomedia.it ___
Re: Problems with CPU/ARCH specific compilation!?
On Fri, Jun 03, 2005 at 12:53:30PM +0200, the unit calling itself Dunceor . wrote: The OpenBSD developers develop the OS for their needs, not everybody else's needs. You know, I've heard that for years... I'd like to know if that's the project's official position. Curious, Jay
Re: pf versus ppp for address translation...
On 6/5/05, poncenby [EMAIL PROTECTED] wrote: [...] however in the process of writing my ppp.conf I noticed ppp can do the whole NAT thing itself. Thanks for the learning moment: I hadn't known of that option until reading your message. Therefore, feel free to take my words with a grain of salt as I've obviously never tried ppp(8)-based NAT. Do any knowledgeable chaps on this list have an opinion on which is the best to use or perhaps some advantages/disadvantages of using either. As long as I've used pf(4), I've been quite fond of it. It does pretty much all the things I need and quite a bit more while being easy to configure. Using pf instead of ppp for your NAT needs will mainly provide you the benefit of having your configuration in fewer places. Since you may want to deploy some degree of firewalling, sticking with pf.conf may be easier. Also, ppp(8) lives in userland, so I wouldn't be surprised if it were slower than pf(4) in doing its NAT work. That said, maybe pppoe(4) is of use to you as well. If you're on a DSL line, for example. It's relatively new, but I haven't had problems with it yet. Cheers, Rogier -- If you don't know where you're going, any road will get you there.
A Business Case for integrating OpenBSD into IT Infrastructures
Hi All, I recently gave a talk that may interest some. I hope that it could be used by anyone presenting the merits of OpenBSD and related Projects as a business case for the corporate world. The slides can be used by anyone in any manner that would best benefit the Project. I've updated our company website with the presentation. http://www.openbsd-support.com/jp/en/htm/mgp/index.shtml I hope this helps others put forth a good case for OpenBSD in their working environment. Cheers, Mark T. Uemura OpenBSD Support Japan Inc. www.openbsd-support.com
Re: Problems with CPU/ARCH specific compilation!?
On Sun, Jun 05, 2005 at 05:48:14PM -0500, J Moore wrote: On Fri, Jun 03, 2005 at 12:53:30PM +0200, the unit calling itself Dunceor . wrote: The OpenBSD developers develop the OS for their needs, not everybody else's needs. You know, I've heard that for years... I'd like to know if that's the project's official position. We develop what we need, for fun, in our own time. If you are not a person who matches our needs, of course you are going to be dissapointed. Your assumption is that we do this for people like you. - Theo de Raadt, Feb 2002 http://marc.theaimsgroup.com/?l=openbsd-miscm=101467726525911w=2 -- [EMAIL PROTECTED]
Re: A Business Case for integrating OpenBSD into IT Infrastructures
Lots of commentary from you, Steve... is that why you are the one giving the talks? Mark Uemura wrote: I hope this helps others put forth a good case for OpenBSD in their working environment. Overall the presentation is well-done, but I take some exception with some of your conclusions on slide 34. I know when I talk to a vendor and get unrealistic comparisons, mentally that vendor is out the door. DNS: You don't need a dual P3 with 2gb for a DNS server in Windows. If the server isn't an AD controller, that P3/500 would be plenty. If it is an AD controller, then the server size depends on how many users you have, and to offer a good comparison, you'd have to size the OpenBSD machine for Kerberos and LDAP. (Same argument for DHCP, if you run a DHCP server on a dual P3, the server is going to be bored most of the time.) I also noticed you're comparing a PC to a server. For any OS, a real server will generally be a higher quality and more stable than a PC. PCs don't have hot-swap drives or power supplies. Again, this isn't a fair comparison. Remote access: Windows' built-in Remote Desktop is included with the OS, you don't need OpenBSD for that. You couldn't do that over your Intel VPN? Remote Desktop is potentially vulnerable to MITM, but it's probably more secure than an external web site like GoToMyPC. You can also install OpenSSH on your Windows machines and manage them with netsh or a variety of other command-line tools. Wireless: I'm not sure if Server 2003 can act as an AP, I haven't tried setting it up. It can, however, provide 802.1X authentication, which requires less end-user configuration (on Windows clients) than authpf. VPN: Why the hell does everyone hate the included Microsoft VPN? If you run an MS shop, it's easy and cheap. That uses IPsec, ISAKMP and PKI. It also has features to quarantine Windows clients that don't meet your criteria for system security. (Yes, the MS PPTP protocol had some weaknesses, but that was 1998. That'd be like avoiding OpenSSH because the SSH 1.0 protocol had some weaknesses.) Web: I assume you had some talking points here, specifically about privsep and code cleanup in OpenBSD's Apache. The biggest problems with IIS are from admins enabling it when they don't need to, or using IIS when another product would do. The Microsoft developers are even learning to run the web processes as low-privilege processes (Srv 2003 SP1), although third-party developers aren't paying attention. Besides, you can run Apache on Windows, so the core argument is between the trunk Apache and OpenBSD's Apache. IDS: Snort doesn't run on Windows? Firewall: I'm not familiar with Checkpoint, but their web site (http://www.checkpoint.com/products/downloads/firewall-1_datasheet.pdf) says that Checkpoint on Windows requires 256mb RAM and doesn't list processor requirements. Sounds like somebody just wanted to buy a big server. There's no good reason to have two processors in a firewall. Other comments: When you boil it down, the $500 for Server 2003 isn't really all that expensive for a mid-size or large company. CALs can make a difference in large companies, but that doesn't really come in to play here. You've made a good argument for using OpenBSD as a redundant firewall or access point, but that's more Cisco's domain than Microsoft's. Maybe find out if you can set up a redundant file server using OpenBSD/CARP, and compare that to active/passive Windows server clustering. Don't use Micro$oft, it makes you sound like a zealot, and hasn't been funny since 1992. Well, maybe leave it on slide 25, I like it contrasted with ChequePoint. Avoid relying on cheap hardware to make your cost point. OpenBSD runs well on real, modern servers. Managers at mid/large companies aren't going to want to hear about how you pulled machines out of the trash and now the business depends on them, even if they're 4x redundant. Slide 3: The first two paragraphs only preach to the converted. Maybe add a fourth bullet point, Your competitors are probably saving money using it, depending on your audience.
A question related to SCSI-Tape-Drives
Hi everybody, I've an old OnStream ADR2 Tape-Streamer with a 60GB Tape. I didn't used it for a while but I can remember that OpenBSD 3.5/6 was able touse it. Now I assembled the Drive into my router and get some errors. Or lets say: The only mt command wich works is retension. Not even erase will work. So I#ve to figure out what happened. Is the tape too old or is the streamer maybe brocken? I#ve just 1 tape so I can't test the streamer with another tape. I get offen this error: /bsd: st0: cannot set selected mode No matter if I try to erase, to rewind or to dump something to the tape. Another error is: ASC/ASCQ: illegal Field in CDB (Btw. What does that mean?) I read the mt-manpages and the other manpages to but I still can't figure out what's wrong so I would thank you everybody who's able to tell me what's wrong. Kind regards, Sebastian
Re: OpenNTPd issue
On 05/06/05, Kvvesdan Gabor [EMAIL PROTECTED] wrote: actually I use FreeBSD. So, I've installed OpenNTPd from ports collection, and it synchronizes my servers time correctly, but I can't sync to the server. I've tried it with a windows-client, and the error message was the following: The time sample was rejected because: The peer's stratum is less than the host's stratum. OpenNTPD 3.6.1 had some problems with stratum calculations... It was fixed in the latest version, 3.7. Try to use the latest version, 3.7, and then see if the problem still exists. Cheers, Constantine.
Re: A Business Case for integrating OpenBSD into IT Infrastructures
On Sun, Jun 05, 2005 at 10:25:39PM -0400, Steve Shockley wrote: Mark Uemura wrote: Remote access: Windows' built-in Remote Desktop is included with the OS, you don't need OpenBSD for that. You couldn't do that over your Intel VPN? Remote Desktop is potentially vulnerable to MITM, but it's probably more secure than an external web site like GoToMyPC. VPN: Why the hell does everyone hate the included Microsoft VPN? If you run an MS shop, it's easy and cheap. That uses IPsec, ISAKMP and PKI. It also has features to quarantine Windows clients that don't meet your criteria for system security. To start with http://www.schneier.com/pptp.html and also because I for one don't trust *any* security related code that I can't get the source for. I think I'm not alone here by any means. (Yes, the MS PPTP protocol had some weaknesses, but that was 1998. That'd be like avoiding OpenSSH because the SSH 1.0 protocol had some weaknesses.) No. It would be like SSH having well documented fundamental flaws and then a group with a reputation for producing bad code told us that they were all fixed but not letting us look at the code telling us that they are fixed. Fact of the matter is we can look at the OpenSSH code and see if the problems that we know about are fixed or not. You can't do that with closed source. So do you really want to trust your data going over a public network to a vendor with Microsoft's rep for getting crypto and security wrong? I sure as hell know I don't want to. -- BOFH excuse #99: SIMM crosstalk. [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]
