Re: ftp: -: short write on current when using pkg_add on ftp mirrors

2006-07-29 Thread Andreas Bartelt

Hi,

I'm still using the binary snapshot from July, 25th.

maybe this strange problem is related to the other problem:
tar -czvpf folder.tar.gz folder/
tar: Failed write to archive volume: 1: Broken pipe

'tar -cvpf ...' (without compression) works without problems.

Could this problem be related to the short write problem during 
pkg_add? How can I fix it?


regards,
Andreas



Re: ftp: -: short write on current when using pkg_add on ftp mirrors

2006-07-29 Thread Bryan Irvine

I'm not sure what snapshot I'm using.  I updated from CVS and compiled
it all from scratch...probably 2 or 3 days ago.  I noticed the same
problem, but was able to get around it using the C shell.

--Bryan



On 7/29/06, Andreas Bartelt [EMAIL PROTECTED] wrote:

Hi,

I'm still using the binary snapshot from July, 25th.

maybe this strange problem is related to the other problem:
 tar -czvpf folder.tar.gz folder/
tar: Failed write to archive volume: 1: Broken pipe

'tar -cvpf ...' (without compression) works without problems.

Could this problem be related to the short write problem during
pkg_add? How can I fix it?

regards,
Andreas




xf86OpenConsole: KDENABIO failed (Operation not permitted)

2006-07-29 Thread John L. Scarfone
I'm getting this on the latest Zaurus snap when running startx.
The X sets installed are a couple of months old which I suppose could
be the problem but there are currently no Zaurus X sets in snaps.

-- 
ajBAY294Lm5ldA==



PF redirect to another IP on LAN

2006-07-29 Thread elaconta.com Webmaster
Hi

I've just successfully configured an OpenBSD bridge with two NICs to
separate and filter traffic between our private LAN (192.168.1.0/24) and
our router (192.168.1.120).
I've given an IP address to one of the NICs (192.168.1.121) on the
bridge and am running a Bind caching nameserver on it. Now, the next
thing we'd need to do would be to redirect any traffic that comes
throught the bridge destined to IP address 192.168.1.121 port 80 to
another server in the LAN (192.168.1.103 port 80).
From what i understand, this entails using PF and the rdr statement. Any
ideas on how to do this successfully? Thanks.

--
Elaconta.com webmaster
--



serving DNS: the chicken and the egg

2006-07-29 Thread Jacob Yocom-Piatt
i've decided to stop using zoneedit.com for DNS services since i can't get the
DNS A record TTL set properly for one of my domains using their services.
however, i am confused about how to make this work. the registrar that i keep my
domains with allows me to list the nameservers for the domain, but it does not
allow me to list IPs for the nameservers. if i'm serving DNS from the same
domain/IP that i want to list DNS records for, how do i get the registrar to
point to my DNS server?

i'm to understand this has to do with glue records, but i'm still working on how
to do this. the domain in question is a .US domain. any advice is appreciated.

cheers,
jake



Re: serving DNS: the chicken and the egg

2006-07-29 Thread Jacob Yocom-Piatt
problem solved. had to add my nameserver in the hosts section of the 
registrar.

 Original message 
Date: Sat, 29 Jul 2006 09:33:41 -0500 (CDT)
From: Jacob Yocom-Piatt [EMAIL PROTECTED]  
Subject: serving DNS: the chicken and the egg  
To: misc@openbsd.org

i've decided to stop using zoneedit.com for DNS services since i can't get the
DNS A record TTL set properly for one of my domains using their services.
however, i am confused about how to make this work. the registrar that i keep 
my
domains with allows me to list the nameservers for the domain, but it does not
allow me to list IPs for the nameservers. if i'm serving DNS from the same
domain/IP that i want to list DNS records for, how do i get the registrar to
point to my DNS server?

i'm to understand this has to do with glue records, but i'm still working on 
how
to do this. the domain in question is a .US domain. any advice is appreciated.

cheers,
jake



Re: serving DNS: the chicken and the egg

2006-07-29 Thread Rob Gault
You first need to register your server as a DNS with your registrar
before you can set it as an authoritative server.  

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of Jacob Yocom-Piatt
Sent: Saturday, July 29, 2006 10:34 AM
To: misc@openbsd.org
Subject: serving DNS: the chicken and the egg

i've decided to stop using zoneedit.com for DNS services since i can't
get the
DNS A record TTL set properly for one of my domains using their
services.
however, i am confused about how to make this work. the registrar that i
keep my
domains with allows me to list the nameservers for the domain, but it
does not
allow me to list IPs for the nameservers. if i'm serving DNS from the
same
domain/IP that i want to list DNS records for, how do i get the
registrar to
point to my DNS server?

i'm to understand this has to do with glue records, but i'm still
working on how
to do this. the domain in question is a .US domain. any advice is
appreciated.

cheers,
jake



Re: PF redirect to another IP on LAN

2006-07-29 Thread Peter Blair

man pf.conf

Secondly, it's been discussed numerous times on the list that bridges
have their place (I use them in production environments at our data
centre) but you'll find filtering a bridge much more difficult than
filtering a NAT.

On 7/29/06, elaconta.com Webmaster [EMAIL PROTECTED] wrote:

Hi

I've just successfully configured an OpenBSD bridge with two NICs to
separate and filter traffic between our private LAN (192.168.1.0/24) and
our router (192.168.1.120).
I've given an IP address to one of the NICs (192.168.1.121) on the
bridge and am running a Bind caching nameserver on it. Now, the next
thing we'd need to do would be to redirect any traffic that comes
throught the bridge destined to IP address 192.168.1.121 port 80 to
another server in the LAN (192.168.1.103 port 80).
From what i understand, this entails using PF and the rdr statement. Any
ideas on how to do this successfully? Thanks.

--
Elaconta.com webmaster
--




Re: PF redirect to another IP on LAN

2006-07-29 Thread elaconta.com Webmaster
Peter Blair escreveu:
 man pf.conf

 Secondly, it's been discussed numerous times on the list that bridges
 have their place (I use them in production environments at our data
 centre) but you'll find filtering a bridge much more difficult than
 filtering a NAT.

 On 7/29/06, elaconta.com Webmaster [EMAIL PROTECTED] wrote:
 Hi

 I've just successfully configured an OpenBSD bridge with two NICs to
 separate and filter traffic between our private LAN (192.168.1.0/24) and
 our router (192.168.1.120).
 I've given an IP address to one of the NICs (192.168.1.121) on the
 bridge and am running a Bind caching nameserver on it. Now, the next
 thing we'd need to do would be to redirect any traffic that comes
 throught the bridge destined to IP address 192.168.1.121 port 80 to
 another server in the LAN (192.168.1.103 port 80).
 From what i understand, this entails using PF and the rdr statement. Any
 ideas on how to do this successfully? Thanks.

 --
 Elaconta.com webmaster
 --




Wouldn't this do the trick?

rdr on rl1 proto tcp from any to 192.168.1.121 port 80 - 192.168.1.103

This bridge has IP address 192.168.1.121 configured in one of the NIC's,
so isn't the above like saying:

Redirect any port 80 traffic originally meant for me to 192.168.1.103

Or is there something i'm not considering here?

--
Elaconta.com webmaster
--



Re: 3.9 freeze

2006-07-29 Thread Pedro Martelletto
Any news on this?

-p.



Re: PF redirect to another IP on LAN

2006-07-29 Thread Kian Mohageri
 Wouldn't this do the trick?

 rdr on rl1 proto tcp from any to 192.168.1.121 port 80 - 192.168.1.103

 Redirect any port 80 traffic originally meant for me to 192.168.1.103



Yes, but why are you asking if you already have the answer?  As stated in
the man page, your traffic will also need to pass filter evaluation AFTER
the redirect rule is processed.  Can't you just test that line?

Kian



Re: 3.9 freeze

2006-07-29 Thread Federico Giannici

Pedro Martelletto wrote:

Any news on this?


I cannot declare that the problem is solved... but I had no more freezes 
since I'm using a custom GENERIC kernel with doubled NKMEMPAGES_MAX 
and maxusers, both with the i386 and the amd64 machines.


But consider that this happened only 7 and 10 days ago...


Bye.

--
___
__
   |-  [EMAIL PROTECTED]
   |ederico Giannici  http://www.neomedia.it
___



Re: 3.9 freeze

2006-07-29 Thread Federico Giannici

Federico Giannici wrote:

Pedro Martelletto wrote:

Any news on this?


I cannot declare that the problem is solved... but I had no more freezes 
since I'm using a custom GENERIC kernel with doubled NKMEMPAGES_MAX 
and maxusers, both with the i386 and the amd64 machines.


But consider that this happened only 7 and 10 days ago...


I have to add that both machines have a lot of memory (2GB) and often a 
lot of processes running.



Bye.

--
___
__
   |-  [EMAIL PROTECTED]
   |ederico Giannici  http://www.neomedia.it
___



Re: PF redirect to another IP on LAN

2006-07-29 Thread elaconta.com Webmaster
Kian Mohageri escreveu:
 Wouldn't this do the trick?

 rdr on rl1 proto tcp from any to 192.168.1.121 port 80 - 192.168.1.103

 Redirect any port 80 traffic originally meant for me to 192.168.1.103
 



 Yes, but why are you asking if you already have the answer?  As stated in
 the man page, your traffic will also need to pass filter evaluation AFTER
 the redirect rule is processed.  Can't you just test that line?

 Kian



   
If i knew that was the correct answer, of course i wouldn't have asked
:) As for passing the filter evaluation, i'll disable the PF filters and
test just this redirecting rule then.

Thanks.

-
Elaconta.com webmaster
-



SATA DVD Support?

2006-07-29 Thread J Moore
I'm building a systeme  considering a SATA DVD drive (Plextor 
PX-755SA). Anyone used one of these in a recent version of OpenBSD, or 
have any other thoughts on SATA DVD compatibility?

Thnx,
Jay



Re: SATA DVD Support?

2006-07-29 Thread Jacob Yocom-Piatt
 Original message 
Date: Sat, 29 Jul 2006 13:24:06 -0500
From: J Moore [EMAIL PROTECTED]  
Subject: SATA DVD Support?  
To: misc@openbsd.org

I'm building a systeme  considering a SATA DVD drive (Plextor 
PX-755SA). Anyone used one of these in a recent version of OpenBSD, or 
have any other thoughts on SATA DVD compatibility?


i've got a SATA DVD drive in this machine and it doesn't get recognized in the
dmesg:

pciide0 at pci1 dev 11 function 0 CMD Technology SiI3112 SATA rev 0x02: DMA
pciide0: using irq 11 for native-PCI interrupt
pciide0: port 0: device present, speed: 1.5Gb/s
wd0 at pciide0 channel 0 drive 0: ST3200822AS
wd0: 16-sector PIO, LBA48, 190782MB, 390721968 sectors
wd0(pciide0:0:0): using BIOS timings, Ultra-DMA mode 6
VV
pciide0: port 1: device present, speed: 1.5Gb/s
^^
pciide1 at pci0 dev 9 function 0 NVIDIA nForce2 IDE rev 0xa2: DMA, channel 0
configured to compatibility, channel 1 configured to compatibility
wd1 at pciide1 channel 0 drive 0: Maxtor 6L300R0
wd1: 16-sector PIO, LBA48, 286188MB, 586114704 sectors
wd1(pciide1:0:0): using PIO mode 4, Ultra-DMA mode 6
pciide1: channel 1 disabled (no drives)

it seems to detect that a device is present, but not any more than that.

i am to understand that SATA DVD/CD-ROM drives are relatively rare. i have a
plextor 712-SA or something like that.

Thnx,
Jay



Re: VPN help needed: OpenBSD in the corporate environment instead of Linux

2006-07-29 Thread jeraklo
After summarizing all the clues I think I'll give a
chance to OpenVPN + OpenBSD 3.9 combination primarily
due to questionable quality of windows clients
IPsec+IP stack (as I said in my first post - windows
clients will comprise about 99% of all my VPN client
base).  

The differentiation between OS (OpenBSD) and the
service (OpenVPN package) will be clearly stated to
the upper management, including OpenBSD's proactive-
and overall security reputation. Also, as this VPN
service will be added to our existing service
monitoring framework, and as the great majority of
clients will be our own system administrators (VPN
will be used for remote access in the case of
interventions), this combination should probably
suffice. The VPN service will not be sold to external
clients.

Thanks to everyone for valuable opinions and comments!

j.
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 



getmicrouptime/microuptime undefined reference to `microuptime'

2006-07-29 Thread Adam PAPAI

Hi,

I'm lookin for a solution on getting the system uptime via syscall.

I tried to use the microuptime/getmicrouptime but every time I intended 
to compile it, I got the following error:


/tmp//ccy16835.o(.text+0x20): In function `main':
: undefined reference to `microuptime'
collect2: ld returned 1 exit status

I included the appropriate headers:
#include stdio.h
#include sys/time.h

I didn't find other funtions to get the uptime for a system. Did I miss 
something? (library or something)


Thanks in advance

--
Adam PAPAI
D i g i t a l Influence
http://www.digitalinfluence.hu
E-mail: [EMAIL PROTECTED]
Phone: +36 30 33-55-735 (Hungary)
Phone: +49 176-67264167 (Germany)



Re: getmicrouptime/microuptime undefined reference to `microuptime'

2006-07-29 Thread Adam PAPAI

Adam PAPAI wrote:

Hi,

I'm lookin for a solution on getting the system uptime via syscall.


Hm. It seems sysctl(3) could tell me the uptime.

#include sys/param.h
#include sys/sysctl.h

Thanks anyway :)

--
Adam PAPAI
D i g i t a l Influence
http://www.digitalinfluence.hu
E-mail: [EMAIL PROTECTED]
Phone: +36 30 33-55-735 (Hungary)
Phone: +49 176-67264167 (Germany)



Re: SATA DVD Support?

2006-07-29 Thread J Moore
On Sat, Jul 29, 2006 at 01:34:41PM -0500, the unit calling itself Jacob 
Yocom-Piatt wrote:
  Original message 
 
 I'm building a systeme  considering a SATA DVD drive (Plextor 
 PX-755SA). Anyone used one of these in a recent version of OpenBSD, or 
 have any other thoughts on SATA DVD compatibility?
 
 i've got a SATA DVD drive in this machine and it doesn't get recognized in the
 dmesg:
 
 pciide0 at pci1 dev 11 function 0 CMD Technology SiI3112 SATA rev 0x02: DMA
 pciide0: using irq 11 for native-PCI interrupt
 pciide0: port 0: device present, speed: 1.5Gb/s
 wd0 at pciide0 channel 0 drive 0: ST3200822AS
 wd0: 16-sector PIO, LBA48, 190782MB, 390721968 sectors
 wd0(pciide0:0:0): using BIOS timings, Ultra-DMA mode 6
 VV
 pciide0: port 1: device present, speed: 1.5Gb/s
 ^^
 pciide1 at pci0 dev 9 function 0 NVIDIA nForce2 IDE rev 0xa2: DMA, channel 0
 configured to compatibility, channel 1 configured to compatibility
 wd1 at pciide1 channel 0 drive 0: Maxtor 6L300R0
 wd1: 16-sector PIO, LBA48, 286188MB, 586114704 sectors
 wd1(pciide1:0:0): using PIO mode 4, Ultra-DMA mode 6
 pciide1: channel 1 disabled (no drives)
 
 it seems to detect that a device is present, but not any more than that.
 
 i am to understand that SATA DVD/CD-ROM drives are relatively rare. i have a
 plextor 712-SA or something like that.

The PX-755SA is very similar to the 712SA, so I'm guessing that the 755 
won't work either. I would have guessed that OpenBSD supported SATA DVD 
drives, but the Platforms page suggests support is very limited - I 
guess that squelches plans for a SATA HDD as well :( 

Too bad... the SATA drives are a lot faster  relieve cable clutter.

Thanks,
Jay



Re: SATA DVD Support?

2006-07-29 Thread Rogier Krieger

On 7/29/06, J Moore [EMAIL PROTECTED] wrote:

I guess that squelches plans for a SATA HDD as well :(


If by that you mean you expect OpenBSD to not support SATA HDDs, I can
happily assure you you're wrong. OpenBSD supports various SATA
controllers (such as your SiI 3112, the SiI 3114, etc.). I yet have to
encounter a SATA HDD it does not support.

Regarding SATA DVD drives, I have no experience with those (as in: I
have yet to encounter them) so I cannot tell you whether they should
work or not.

Cheers,

Rogier

--
If you don't know where you're going, any road will get you there.



Re: Nagios check_bioctl available

2006-07-29 Thread Wijnand Wiersma

2006/7/29, andrew fresh [EMAIL PROTECTED]:

One thing I ran into is that bioctl needs to run as root to get access
to /dev/bio, even for read only access.  Is there a way to query bioctl
without needing root?


Well, I think you only need the status of the drives and that is
availlable using sysctl hw.sensors in current (you already mentioned
sysctl). A monitoring system should not use the capabilities of
bioctl, it just needs to know the status and report that.

Now that I think of it, I should add support to the upwatch monitoring
system too, but I am not that lucky to have hardware to actually test
it :-)

Wijnand