Re: Blocking facebook.com: PF or squid?

2013-10-20 Thread Sico Bruins
On Sun, Oct 20, 2013 at 01:04:01AM +0200, Stefan Wollny wrote:

[stuff deleted for brevity]

 I am in a similar situation (squid at home) and I simply have a
 blacklist with lines like these:
 
 doubleclick
 facebook
 scorecardresearch
 
 Works like a charm for me, and no need to look up IP address blocks
 or anything like that. And since I am the only user here there's no
 collateral damage. ;-)
 
 Well: I am personally liable for what leaves my network so this kind of
 'collateral damage' is what I intentionally try to achieve :-) (see the
 reply to myself a few minutes ago)

Uhm, squid only filters incoming traffice...

 May I ask a follow-up question: Did you set up the blacklist within
 squid.conf or did you reference to a separate file?

A bit of both really, I use a seperate file and reference it in squid.conf:

sico@siem2:~grep blacklist /etc/squid/squid.conf   
 
acl blacklist url_regex /etc/squid/blacklist.acl
http_access deny blacklist
sico@siem2:~

The url_regex allows me to specify facebook instead of facebook.com etc.

CU, Sico.

-- 



Re: Chromium package missing from amd64 snapshots

2013-10-20 Thread Fred

On 10/20/13 00:33, Christian Weisgerber wrote:

Fred open...@crowsons.com wrote:


chromium seems to have disappeared from amd64 snapshots packages directory.
Is this a known issue?


Speaking as the amd64 package builder:

It appears to not have been built during the latest snapshot build.
There is no obvious reason in the logs.

It should reappear with the next snapshot.



Okay - thanks for the update, I'll wait for the next snapshot.

Cheers

Fred



Mandatory files in /etc for single-user check for password

2013-10-20 Thread Jiri B
Hi,

first of all my setup is very non-standard.

I'm playing with OpenBSD to have it as much as possible on
read-only filesystem. Everything (till now) works OK but
I have problem with single-user mode. I can't make password
authentication working.

I have following setup:

* all files from /etc are in /mfs/etc
* following files are hardlinks linking the files in /etc and /mfs/etc.
  I do this as these files are used early during boot, before /etc is
  mounted over as ramdisk with proto files being located in /mfs/etc

  boot.conf fstab login.conf master.passwd pwd.db rc rc.conf ttys

So normal boot works, serial console works (boot.conf), mounting filesystems
works (rc, rc.conf, fstab)...

But when I define in /etc/ttys 'insecure' for console, which is used during
single-user, even when I type valid root's password I do not get prompt
to specify shell.

-%-
Enter root password, or ^D to go multi-user
Password:

Oct 20 10:48:43 init: single-user login failed

Password:
-%-

I have in /etc/ttys:

-%-
console /usr/libexec/getty std.9600 vt220 off insecure
-%-

(It seems that it can be 'off'.)

I know this is not standard OpenBSD setup but if anybody could help
what files I'm missing for this early stage (single-user), I would
appreciate.

Otherwise I would hardlink all base OS conf files back to /etc...

jirib



Re: urtwn(4) device timeouts with RTL8188CUS

2013-10-20 Thread Stefan Sperling
On Sat, Oct 19, 2013 at 03:13:35PM -0400, josh wrote:
 I have a USB 802.11n capable dongle that works fine in a netbook[3] but not 
 in a server[2], which is where it was intended.  The sypmtom is a cessation 
 of packet traffic followed by device timeout as described in urtwn(4).  
 A similar problem was mentioned last year[1] on misc@, though the specific 
 Realtek chipset involved was not posted.
 
 I built a kernel with USB_DEBUG which enables URTWN_DEBUG, and while running 
 with that test kernel I could not replicate the problem.  From that test, I 
 understand that timing or a race condition are likely areas of research. It
 aligns also with the slower system [3] not being able to replicate either.
 
 I could use some help as I am unsure how to investigate further.  I tried
 doubling the sc_tx_timer in if_urtwn.c from 5 to 10, with no effect, but 
 that was just a stab in the dark.  Any suggestions for futher tests, or 
 a whack with a cluestick would be welcome.

I have a urtwn that runs quite hot when it exhibits similar problems.
Pulling it out and letting it cool down for a while usually fixes it.
Putting it back in immediately usually results in the same symptoms
right away.

A shot in the dark idea is that our driver might not be handling power
management in a way that the vendor envisioned, so the device runs
too hot and stops working properly.



Re: urtwn(4) device timeouts with RTL8188CUS

2013-10-20 Thread frantisek holop
hmm, on Sat, Oct 19, 2013 at 03:13:35PM -0400, josh said that
 I have a USB 802.11n capable dongle that works fine in a netbook[3] but not 
 in a server[2], which is where it was intended.  The sypmtom is a cessation 
 of packet traffic followed by device timeout as described in urtwn(4).  
 A similar problem was mentioned last year[1] on misc@, though the specific 
 Realtek chipset involved was not posted.
 
 [1] http://marc.info/?t=13466680111r=1w=2

this rang a bell :]
just for the record, the usb dongle mentioned kept
steadily deteriorating until it finally died any moment
i touched it (which happened a lot if the netbook was
in my lap) thus leaving my services..  i'd buy
a different one i guess.

-f
-- 
i'm feeling rather blonde today.



Re: OpenBSD not forwarding to specific sites

2013-10-20 Thread Henning Brauer
* John Tate j...@johntate.org [2013-09-30 20:34]:
 but Facebook is still not working

that's a feature.

-- 
Henning Brauer, h...@bsws.de, henn...@openbsd.org
BS Web Services GmbH, http://bsws.de, Full-Service ISP
Secure Hosting, Mail and DNS Services. Dedicated Servers, Root to Fully Managed
Henning Brauer Consulting, http://henningbrauer.com/



Re: urtwn(4) device timeouts with RTL8188CUS

2013-10-20 Thread Josh Grosse
On Sun, Oct 20, 2013 at 02:32:22PM +0200, Stefan Sperling wrote:
 I have a urtwn that runs quite hot when it exhibits similar problems.
 Pulling it out and letting it cool down for a while usually fixes it.
 Putting it back in immediately usually results in the same symptoms
 right away.

This is my second key from this particular manufacture (EDUP EP-N8508, 
sold by Ariic through Newegg.com).  The first exhibited overheat within
several minutes of insertion and its radio output disabled the local 802.11g 
network for all users.  This second key does not have these DOA sypmtoms.
 
 A shot in the dark idea is that our driver might not be handling power
 management in a way that the vendor envisioned, so the device runs
 too hot and stops working properly.
 
That's a reasonable assumption, even though with two of them my experience
has been a little different. 



Re: urtwn(4) device timeouts with RTL8188CUS

2013-10-20 Thread Josh Grosse
On Sun, Oct 20, 2013 at 02:37:40PM +0200, frantisek holop wrote:
 this rang a bell :]
 just for the record, the usb dongle mentioned kept
 steadily deteriorating until it finally died any moment
 i touched it (which happened a lot if the netbook was
 in my lap) thus leaving my services..  i'd buy
 a different one i guess.

Thanks, but my symptoms are that it works in one platform and not another.
I'm on my second device, under warranty, as the first was DOA.  



Re: Chromium package missing from amd64 snapshots

2013-10-20 Thread Gilbert Sanford
I grabbed it yesterday from the Erlangen Germany mirror :
openbsd.cs.fau.de/pub/OpenBSD/snapshots/packages/amd64/

Gilbert



Re: urtwn(4) device timeouts with RTL8188CUS

2013-10-20 Thread Josh Grosse
On Sun, Oct 20, 2013 at 09:14:12PM +1100, Jonathan Gray wrote:
 Perhaps there is a problem with the via usb controllers.
 If you disable ehci via ukc do you still see the problem?

Unfortunately, USB 2.0 is required.  One of my early tests was to disable 
ehci(4) to force uhci(4) use.  It resulted in a urtwn0: timeout waiting 
for MAC initialization message and no network connectivity at all.

Thanks for thinking of this.



Re: urtwn(4) device timeouts with RTL8188CUS

2013-10-20 Thread Josh Grosse
On Sun, Oct 20, 2013 at 09:12:18AM -0400, I wrote:
 Thanks, but my symptoms are that it works in one platform and not another.
 I'm on my second device, under warranty, as the first was DOA.  

I just tested the server/device combination under Linux, and it functioned
correctly.  This is leaning towards the driver, rather than the hardware. 



newfs_msdos(8) creates faulty filesystems

2013-10-20 Thread David Vasek

Hello,

a filesystem created by newfs_msdos(8) is reported as faulty by 
fsck_msdos(8). And it is indeed. Repeatable. There must be something 
wrong. The media itself (a USB flash drive) doesn't have any issues.


# newfs -t msdos /dev/rsd4i 
/dev/rsd4i: 31224352 sectors in 3903044 FAT32 clusters (4096 bytes/cluster)

bps=512 spc=8 res=32 nft=2 mid=0xf8 spt=63 hds=255 hid=8064 bsec=31285376 
bspf=30493 rdcl=2 infs=1 bkbs=2

# fsck -n /dev/rsd4i
** /dev/rsd4i (NO WRITE)
** Phase 1 - Read and Compare FATs
** Phase 2 - Check Cluster Chains
** Phase 3 - Check Directories
** Phase 4 - Check for Lost Files
Free space in FSInfo block (-1) not correct (3903043)
fix? no
Next free cluster in FSInfo block (2) not free
fix? no
1 files, 3029260 free (3903043 clusters)

# fsck /dev/rsd4i
** /dev/rsd4i
** Phase 1 - Read and Compare FATs
** Phase 2 - Check Cluster Chains
** Phase 3 - Check Directories
** Phase 4 - Check for Lost Files
Free space in FSInfo block (-1) not correct (3903043)
fix? [Fyn] y
Next free cluster in FSInfo block (2) not free
fix? [Fyn] y
1 files, 3029260 free (3903043 clusters)

# fsck /dev/rsd4i 
** /dev/rsd4i

** Phase 1 - Read and Compare FATs
** Phase 2 - Check Cluster Chains
** Phase 3 - Check Directories
** Phase 4 - Check for Lost Files
1 files, 3029260 free (3903043 clusters)


OpenBSD 5.3 (GENERIC.MP) #53: Fri Mar  1 09:34:37 MST 2013
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP

umass1 at uhub0 port 4 configuration 1 interface 0 Kingston DT 101 G2 rev 
2.00/1.00 addr 3
umass1: using SCSI over Bulk-Only
scsibus4 at umass1: 2 targets, initiator 0
sd4 at scsibus4 targ 1 lun 0: Kingston, DT 101 G2, PMAP SCSI0 0/direct 
removable serial.09511642BC81D71A0189
sd4: 15280MB, 512 bytes/sector, 31293440 sectors

# fdisk sd4
Disk: sd4   geometry: 1947/255/63 [31293440 Sectors]
Offset: 0   Signature: 0xAA55
Starting Ending LBA Info:
 #: id  C   H   S -  C   H   S [   start:size ]
---
*0: 0C  0 128   1 -   1947 236  17 [8064:31285376 ] Win95 FAT32L
 1: 00  0   0   0 -  0   0   0 [   0:   0 ] unused
 2: 00  0   0   0 -  0   0   0 [   0:   0 ] unused
 3: 00  0   0   0 -  0   0   0 [   0:   0 ] unused

# disklabel sd4
# /dev/rsd4c:
type: SCSI
disk: SCSI disk
label: DT 101 G2 
duid: 

flags:
bytes/sector: 512
sectors/track: 63
tracks/cylinder: 255
sectors/cylinder: 16065
cylinders: 1947
total sectors: 31293440
boundstart: 0
boundend: 31293440
drivedata: 0

16 partitions:
#size   offset  fstype [fsize bsize  cpg]
  c: 312934400  unused
  i: 31285376 8064   MSDOS

Regards,
David



How to find a file's list of package

2013-10-20 Thread Alex Naumov
Hello,

does anybody know how to find a list of files for some package?
For example, I would like to know which files contains
athn-firmware-1.1p0 package.

Thank you,
Alex



Re: How to find a file's list of package

2013-10-20 Thread Luis Coronado
pkg_info -L packagename

man pkg_info for more details


On Sun, Oct 20, 2013 at 12:49 PM, Alex Naumov posix...@gmail.com wrote:

 Hello,

 does anybody know how to find a list of files for some package?
 For example, I would like to know which files contains
 athn-firmware-1.1p0 package.

 Thank you,
 Alex



Re: How to find a file's list of package

2013-10-20 Thread Alexander Hall

On 10/20/13 20:49, Alex Naumov wrote:

Hello,

does anybody know how to find a list of files for some package?
For example, I would like to know which files contains
athn-firmware-1.1p0 package.

Thank you,
Alex



pkg_info and its man page is (not surprisingly) your friend.

$ pkg_info -L athn-firmware-1.1p0
pkg_info -L athn-firmware-1.1p0
Information for inst:athn-firmware-1.1p0

Files:
/etc/firmware/athn-ar7010
/etc/firmware/athn-ar7010-11
/etc/firmware/athn-ar9271
/etc/firmware/athn-license


/Alexander



Re: How to find a file's list of package

2013-10-20 Thread Philip Guenther
On Sun, Oct 20, 2013 at 11:49 AM, Alex Naumov posix...@gmail.com wrote:
 does anybody know how to find a list of files for some package?
 For example, I would like to know which files contains
 athn-firmware-1.1p0 package.

man pkg_info



Re: How to find a file's list of package

2013-10-20 Thread Marc Espie
On Sun, Oct 20, 2013 at 08:49:27PM +0200, Alex Naumov wrote:
 Hello,
 
 does anybody know how to find a list of files for some package?
 For example, I would like to know which files contains
 athn-firmware-1.1p0 package.

More generally, install pkglocatedb, then you'll be able to look for any
package, any file.



Re: How to find a file's list of package

2013-10-20 Thread Alex Naumov
On Sun, Oct 20, 2013 at 9:04 PM, Marc Espie es...@nerim.net wrote:


 More generally, install pkglocatedb, then you'll be able to look for any
 package, any file.


Thank you Marc! That's exactly what I need.



Re: Best OpenBSD cloud hosting?

2013-10-20 Thread Bryan Vyhmeister
On Wed, Oct 09, 2013 at 08:45:37PM +0200, Antoine Jacoutot wrote:
 I personally use SmartOS and while it is an awesome system, OpenBSD
 does not always behave perfectly well under Solaris KVM.  I've had
 several vdisk related issues.  In my experience, Linux KVM is a better
 container for our OS.

Could you elaborate on this? I've run OpenBSD under SmartOS briefly a
few months ago and it seemed to run just fine on my own test box. Were
you using the virtio(4) drivers? I did have network troubles when I
tried them but that was early this year and using the non-virtio network
setup seemed to work fine. I don't remember what I did for disk
settings. I'll have to look at my backups.

Bryan



Atheros USB wifi TL-WN821N could not read ROM

2013-10-20 Thread Alex Naumov
Hello,

I'm trying to configure Atheros USB wifi on OpenBSD 5.3/i386, but get
firmware-error.


I'm not sure about supporting of this card. It's TL-WN821N.
As I can see here[1][2], uath(4) driver supports Atheros USB 802.11a/b/g,
but not 802.11n [Atheros AR7010+AR9287].

So, after plug it in, I get this:

 dmesg
athn0 at uhub0 port 5 ATHEROS USB WLAN rev 2.00/2.02 addr 2
athn0: failed loadfirmware of file athn-ar7010-11 (error 2)
athn0: could not load firmware

And after installing athn-firmware-1.1p0 and uath-firmware-2.0p0, I get
this:

 dmesg
athn0 at uhub0 port 5 ATHEROS USB WLAN rev 2.00/2.02 addr 2
athn0: bad ROM checksum 0x2c64
athn0: could not read ROM
athn0: could not attach chip

Is it a bug or OpenBSD doesn't support it yet? Or maybe I forgot something?

Thank you,
Alex



[1] http://www.openbsd.org/papers/opencon06-docs/mgp00014.html
[2] http://www.openbsd.org/faq/faq6.html#Wireless



Re: Best OpenBSD cloud hosting?

2013-10-20 Thread Antoine Jacoutot
On Sun, Oct 20, 2013 at 12:36:14PM -0700, Bryan Vyhmeister wrote:
 On Wed, Oct 09, 2013 at 08:45:37PM +0200, Antoine Jacoutot wrote:
  I personally use SmartOS and while it is an awesome system, OpenBSD
  does not always behave perfectly well under Solaris KVM.  I've had
  several vdisk related issues.  In my experience, Linux KVM is a better
  container for our OS.
 
 Could you elaborate on this? I've run OpenBSD under SmartOS briefly a
 few months ago and it seemed to run just fine on my own test box. Were
 you using the virtio(4) drivers? I did have network troubles when I
 tried them but that was early this year and using the non-virtio network
 setup seemed to work fine. I don't remember what I did for disk
 settings. I'll have to look at my backups.

I am often unable to properly shutdown OpenBSD VMs, disks hang.
Using virtio or not does not change that.
I did not look into it very deeply yet so ... But I never saw this issue in 
Linux KVM.

-- 
Antoine



Re: newfs_msdos(8) creates faulty filesystems

2013-10-20 Thread Kenneth Westerback
Neither field is required. 'Free Space' in fsinfo can be -1 or just wrong,
and 'Next Free Cluster' is a  hint only. Hence in either case you can fix
them up, or ignore their incorrectness and the filesystem is still
considered ok.

And since they are not required I guess newfs never bothered to fill them
out correctly.

 Ken






On Sun, Oct 20, 2013 at 2:13 PM, David Vasek va...@fido.cz wrote:

 Hello,

 a filesystem created by newfs_msdos(8) is reported as faulty by
 fsck_msdos(8). And it is indeed. Repeatable. There must be something wrong.
 The media itself (a USB flash drive) doesn't have any issues.

 # newfs -t msdos /dev/rsd4i /dev/rsd4i: 31224352 sectors in 3903044 FAT32
 clusters (4096 bytes/cluster)
 bps=512 spc=8 res=32 nft=2 mid=0xf8 spt=63 hds=255 hid=8064 bsec=31285376
 bspf=30493 rdcl=2 infs=1 bkbs=2

 # fsck -n /dev/rsd4i
 ** /dev/rsd4i (NO WRITE)
 ** Phase 1 - Read and Compare FATs
 ** Phase 2 - Check Cluster Chains
 ** Phase 3 - Check Directories
 ** Phase 4 - Check for Lost Files
 Free space in FSInfo block (-1) not correct (3903043)
 fix? no
 Next free cluster in FSInfo block (2) not free
 fix? no
 1 files, 3029260 free (3903043 clusters)

 # fsck /dev/rsd4i
 ** /dev/rsd4i
 ** Phase 1 - Read and Compare FATs
 ** Phase 2 - Check Cluster Chains
 ** Phase 3 - Check Directories
 ** Phase 4 - Check for Lost Files
 Free space in FSInfo block (-1) not correct (3903043)
 fix? [Fyn] y
 Next free cluster in FSInfo block (2) not free
 fix? [Fyn] y
 1 files, 3029260 free (3903043 clusters)

 # fsck /dev/rsd4i ** /dev/rsd4i
 ** Phase 1 - Read and Compare FATs
 ** Phase 2 - Check Cluster Chains
 ** Phase 3 - Check Directories
 ** Phase 4 - Check for Lost Files
 1 files, 3029260 free (3903043 clusters)


 OpenBSD 5.3 (GENERIC.MP) #53: Fri Mar  1 09:34:37 MST 2013
 
 dera...@i386.openbsd.org:/usr/**src/sys/arch/i386/compile/GENE**RIC.MPhttp://GENERIC.MP

 umass1 at uhub0 port 4 configuration 1 interface 0 Kingston DT 101 G2
 rev 2.00/1.00 addr 3
 umass1: using SCSI over Bulk-Only
 scsibus4 at umass1: 2 targets, initiator 0
 sd4 at scsibus4 targ 1 lun 0: Kingston, DT 101 G2, PMAP SCSI0 0/direct
 removable serial.09511642BC81D71A0189
 sd4: 15280MB, 512 bytes/sector, 31293440 sectors

 # fdisk sd4
 Disk: sd4   geometry: 1947/255/63 [31293440 Sectors]
 Offset: 0   Signature: 0xAA55
 Starting Ending LBA Info:
  #: id  C   H   S -  C   H   S [   start:size ]
 --**--**
 ---
 *0: 0C  0 128   1 -   1947 236  17 [8064:31285376 ] Win95
 FAT32L
  1: 00  0   0   0 -  0   0   0 [   0:   0 ] unused
  2: 00  0   0   0 -  0   0   0 [   0:   0 ] unused
  3: 00  0   0   0 -  0   0   0 [   0:   0 ] unused

 # disklabel sd4
 # /dev/rsd4c:
 type: SCSI
 disk: SCSI disk
 label: DT 101 G2 duid: 
 flags:
 bytes/sector: 512
 sectors/track: 63
 tracks/cylinder: 255
 sectors/cylinder: 16065
 cylinders: 1947
 total sectors: 31293440
 boundstart: 0
 boundend: 31293440
 drivedata: 0

 16 partitions:
 #size   offset  fstype [fsize bsize  cpg]
   c: 312934400  unused
   i: 31285376 8064   MSDOS

 Regards,
 David



Re: Best OpenBSD cloud hosting?

2013-10-20 Thread Bryan Vyhmeister
On Sun, Oct 20, 2013 at 11:13:51PM +0200, Antoine Jacoutot wrote:
 I am often unable to properly shutdown OpenBSD VMs, disks hang.  Using
 virtio or not does not change that.  I did not look into it very
 deeply yet so ... But I never saw this issue in Linux KVM.

Thank you for your response. I'll do testing myself and see if that's
still a problem or what else might be a factor. Thank you.

Bryan



Re: Mandatory files in /etc for single-user check for password

2013-10-20 Thread Stuart Henderson
On 2013-10-20, Jiri B ji...@devio.us wrote:
 Hi,

 first of all my setup is very non-standard.

 I'm playing with OpenBSD to have it as much as possible on
 read-only filesystem. Everything (till now) works OK but
 I have problem with single-user mode. I can't make password
 authentication working.

 I have following setup:

 * all files from /etc are in /mfs/etc
 * following files are hardlinks linking the files in /etc and /mfs/etc.
   I do this as these files are used early during boot, before /etc is
   mounted over as ramdisk with proto files being located in /mfs/etc

   boot.conf fstab login.conf master.passwd pwd.db rc rc.conf ttys

See pwd_mkdb(8).



Re: Mandatory files in /etc for single-user check for password

2013-10-20 Thread Jiri B
On Sun, Oct 20, 2013 at 10:56:34PM +, Stuart Henderson wrote:
 On 2013-10-20, Jiri B ji...@devio.us wrote:
  Hi,
 
  first of all my setup is very non-standard.
 
  I'm playing with OpenBSD to have it as much as possible on
  read-only filesystem. Everything (till now) works OK but
  I have problem with single-user mode. I can't make password
  authentication working.
 
  I have following setup:
 
  * all files from /etc are in /mfs/etc
  * following files are hardlinks linking the files in /etc and /mfs/etc.
I do this as these files are used early during boot, before /etc is
mounted over as ramdisk with proto files being located in /mfs/etc
 
boot.conf fstab login.conf master.passwd pwd.db rc rc.conf ttys
 
 See pwd_mkdb(8).

I'm ashamed :) Thank you very much.

jirib