Re: Received 5.1 CD in Northern California

2012-05-01 Thread Martin Toft
I've just received the 5.1 CD set in Denmark :-)

Ordered from OpenBSD Europe.

Thanks for yet another release of my favorite OS.

Martin



Re: OpenBSD 4.8 can't find CD drive on Dell Latitude E6500

2010-11-10 Thread Martin Toft
On Wed, Nov 10, 2010 at 08:24:29AM +0100, Leslie Jensen wrote:
 http://www.eskk.nu/gallery/?album=/bios/picture=IMAG0115.jpgfullsize=0

 Please advise me on what you think would be the best setting. Keeping in  
 mind that I do not want to corrupt data on the hard drive.

A year ago I used a Dell E6400 for work, and it seems like your E6500
has the same hard drive options. As far as I remember, I was able to
install OpenBSD 4.7 (-ish, a snapshot at the time) on its hard drive
when it was set to use AHCI. However, in AHCI-mode the cdrom drive
wasn't found. Changing from IRRT to AHCI and trying a install will
probably corrupt your data.

I gave up running OpenBSD on the laptop, as there was no X Video
Extension support for its NVIDIA graphics... Even a somewhat mighty Core
2 Duo isn't enough for software scaling.

Martin



Java plugin not detected by Firefox

2010-06-30 Thread Martin Toft
Hi misc@

I run a less than one week old -current, together with JDK 1.6 (built
from ports) and Firefox 3.6.3.  As the subject states, Firefox does not
detect the Java plugin found in JDK.

  $ pkg_info | grep -e firefox -e jdk
  jdk-1.5.0.16p2  Java2(TM) Standard Edition Dev Kit v1.5.0.16
  jdk-1.6.0.03p9  Java2(TM) Standard Edition Dev Kit v1.6.0.03
  mozilla-firefox-3.6.3p2 redesign of Mozilla's browser component

The build of JDK 1.6 depended on 1.5, which is why the latter is
installed.  I have tried symlinks to the plugin in four different
locations, one at a time, without success: ~/.mozilla/plugins,
/usr/local/lib/mozilla/plugins, /usr/local/mozilla-firefox/plugins, and
/usr/local/lib/mozilla-plugins/.  The former three are mentioned in
/usr/local/mozilla-firefox/README.OpenBSD and the latter is mentioned in
the install message for JDK.

The plugin exists:

  $ pwd
  /usr/local/jdk-1.6.0/jre/plugin/i386/ns7
  $ ls -l libjavaplugin_oji.so 
  -rwxr-xr-x  1 root  bin  266285 Jun 29 13:41 libjavaplugin_oji.so

A symlink example:

  $ pwd  
  /home/mt/.mozilla/plugins
  $ ls -l libjavaplugin_oji.so 
  lrwxr-xr-x  1 mt  users  61 Jun 30 18:58 libjavaplugin_oji.so - 
/usr/local/jdk-1.6.0/jre/plugin/i386/ns7/libjavaplugin_oji.so

The about:plugins page in Firefox keeps claiming that no plugins are
installed.  I have tried loading a website with a Java applet, and it is
true that Java-support is not enabled.

Additionally, I have tried starting Firefox with a fresh profile, I have
tried the plugin from JDK 1.5, and I have tried changing the
java.default_java_location_{others,solaris} keys in about:config.  None
of the attempts helped.  I tried /usr/local/jdk-1.6.0 and
/usr/local/jdk-1.6.0/jre for the keys' value.

Can anyone spot whether I am doing something wrong?

Thanks!

Martin



Re: Java plugin not detected by Firefox

2010-06-30 Thread Martin Toft
Never mind.  Kenneth R Westerback replied (thanks!):

 Java plugin does not work since Firefox 3.6.x changes the connection
 mechanism and requires newer Java. Licensing issues so far prevent
 getting Java updated. If you need Java, you need to stay with 3.5.x

And people keep telling me Java is free...



Re: OpenBSD 4.7 pictures

2010-05-13 Thread Martin Toft
http://pics.martintoft.dk/Events/OpenBSD%204.7%2020100508/dscn2548.jpg

:-D



Re: Recommended mini-PCI wireless cards

2009-12-30 Thread Martin Toft
On Wed, Dec 30, 2009 at 05:53:05PM -0500, nixlists wrote:
 Hi. What's recommended as far as recent mini PCI wireless cards go -
 compatibility and performance-wise? I'd like to upgrade my laptop from
 a /g to an /n card. Which n cards do you use and find fast/having good
 reception?

AFAIK, there isn't any n support in the ieee802.11 stack yet. Search for
recent mails from Damien Bergamini to {cvs,mi...@openbsd.org.



Re: Recommended laptop

2009-12-22 Thread Martin Toft
On Tue, Dec 22, 2009 at 08:33:43AM +0100, Tomas Bodzar wrote:
 Don't know about Thinkpads, but Dell E6400 works great. But it's
 around 950 $ or so.

IMHO, the E6400 is too big to carry around often. Other than that it
feels okay quality-wise. Do not get the edition with an NVIDIA graphics
card, if you want, e.g., XV (overlay video) support (it requires their
binary blob driver, which is only available for Windows, Linux and
FreeBSD, AFAIK). The laptop's otherwise fast Core 2 Duo processor is not
able to software scale videos to fullscreen smoothly.



Re: Dell Latitude E6400 'sluggish' keyboard response with ACPI enabled

2009-10-04 Thread Martin Toft
On Sat, Oct 03, 2009 at 05:14:15PM -0500, Marco Peereboom wrote:
 This fixes it.  I need to come up with a way to get this in the tree
 without breaking IBM T21.
 
 ...

Thank you very much, Marco. I can't wait to try the diff. Unfortunately,
I don't have time today or tomorrow, so you'll have to wait for
potential feedback...

Rogier: I experience the same thing. Among a couple of other dmesg@
mails, I sent the following mail in August:

- Forwarded message from Martin Toft m...@martintoft.dk -

Date: Wed, 5 Aug 2009 11:31:09 +0200
From: Martin Toft m...@martintoft.dk
To: dm...@openbsd.org
Subject: Re: Dell Latitude E6400, everything works, had to switch disk 
controller to ATA (from IRR) in BIOS to detect disk

Some things I've discovered since I sent the dmesg:

- The cdrom drive isn't detected when the disk controller is set to ATA
  in BIOS. This is also the case in Ubuntu Linux 9.04 (I dual-boot
  OpenBSD and Ubuntu).
- The laptop's keyboard is very annoying in OpenBSD. With about 10-20
  second intervals, either single key presses are lost or a key press is
  repeated 5-10 times. My guess is that it's an USB keyboard, and
  OpenBSD is probably not powering down (or up) the relevant USB
  controller properly in connection with halt (or boot). It's a wild
  guess, of course.

As a non-expert, I unfortunately have no solution for the keyboard
problem. I'm ready to test anything sent in my direction.

Thanks for a great OS.

Best regards,
Martin

- End forwarded message -



Re: Presentation tool

2009-08-26 Thread Martin Toft
Vim is also an option :-)

Example presentation:

  1. wget  http://www.thecamp.dk/wiki/images/2/22/Slides.vim 
http://www.thecamp.dk/wiki/images/0/0c/Vim2007tc.txt
  2. Open a terminal and resize it to 80x25
  2. vim -u Slides.vim Vim2007tc.txt
 Use K to open/close major topics and zo/zc til open/close minor
 topics...

Martin



Re: Presentation tool

2009-08-26 Thread Martin Toft
On Wed, Aug 26, 2009 at 12:52:27PM +0200, Martin Toft wrote:
   2. vim -u Slides.vim Vim2007tc.txt

s/2/3/ ... need coffee!



Re: Control noise of harddisk

2009-08-15 Thread Martin Toft
Try adding 'atactl wd0 apmdisable' to /etc/rc.local. It should get rid
of clicking sounds...



Re: Realtek urtw(4) driver and hostap mode

2009-08-11 Thread Martin Toft
On Tue, Aug 11, 2009 at 05:17:33PM +0200, Piotrek Kapczuk wrote:
 Errr ... Maybe I was not specific enough. I'm talking about 'man 4
 urtw'. How can it be driver independent ?

'Adapter independent' might be more correct.

 I've just checked and I also see in 'urtw(4)' manpage that driver can
 operate in IBSS ad-hoc mode, but I can't do it.

Maybe the situation is: The driver can with most adapters, but, for some
reason, not with your particular adapter.

AFAIK, hostap mode is crappy with most drivers, since they doesn't vary
the sending strength (AKA 'power saving') and the clients expect this.
It might be easier and better to buy a blackbox access point device,
connect it to your OpenBSD box and make it act as a bridge.

Martin



Re: slow network thread

2009-06-06 Thread Martin Toft
On Sat, Jun 06, 2009 at 04:05:49PM +0200, Jan Klemkow wrote:
 I've a problem with the network speed.
 If I download the a file with openbsd,
 it has only a speed round about 250 kBit/s
 
 I could start several downloads with the same speed.
 So that a program like aget has a speed from 600 till 900.

See http://www.openbsd.org/faq/faq6.html#Tuning (particularly section
6.6.4) and
http://marc.info/?l=openbsd-miscw=2r=1s=sendspace+recvspaceq=b



Re: ping asking for root privilege.

2009-05-23 Thread Martin Toft
On Sat, May 23, 2009 at 05:36:30PM -0300, Christiano Farina Haesbaert wrote:
 I've update my base system and now everytime I ping something it gives
 me a permission denied, if I run as root, averything is fine.

You have done something wrong during your update. ping must be setuid:

-r-sr-xr-x  1 root  bin  176888 May 10 04:39 /sbin/ping



Re: ping asking for root privilege.

2009-05-23 Thread Martin Toft
On Sat, May 23, 2009 at 10:54:41PM +0200, Martin Toft wrote:
 ping must be setuid:

...and owned by root. Mike is probably onto something ;-)



Re: slow httpd on 4.4

2009-04-18 Thread Martin Toft
On Sun, Apr 19, 2009 at 02:43:02AM +0300, Angelin Lalev wrote:
 OpenBSD + httpd (the included apache 1.3) on the same machine (P4 2,4)
 gives me only 20Kbit/sec traffic on 100Mbit Ethernet which is rather
 weird and actually had me checking cables, switches and duplex modes.
 It seems that everything is ok with them.
 
 Is it possible this limitation to be result of some OpenBSD
 configuration option that I'm missing?

IME, no. The in-base httpd with default configuration is able to
saturate at least 100 Mbps on my slow VIA EPIA EN12000EG (1.2 GHz CPU)
system.



Re: vi line wrap.

2009-04-16 Thread Martin Toft
On Thu, Apr 16, 2009 at 09:59:29AM -0400, Stuart VanZee wrote:
 How does one turn off the line wrap in OpenBSD's version of vi?  My
 linux friends say :set nowrap but nowrap doesn't seem to exist in
 the version of vi that ships with OpenBSD

The vi on your Friends' Linux-boxes is probably just an alias for vim,
since wrap/nowrap is not supported in vi (see ':help wrap' in vim).
OpenBSD ships with a real vi.



Re: installation

2009-03-28 Thread Martin Toft
On Sat, Mar 28, 2009 at 06:46:54PM +0530, Sameer Desai wrote:
 The partitions are definitely there. they show in linux. I can't mount
 them on it.
 The partition is flagged active too.
 And it is the only OS on the disk

Remove GRUB from the MBR of the external disk using 'fdisk -u device'
as Stefan wrote.



Re: Annoying sounds with auvia and mpd

2009-01-20 Thread Martin Toft
On Tue, Jan 20, 2009 at 11:08:30AM +, Jacob Meuser wrote:
 sorry for the delay.  can you see if this fixes the problem?
 
 something of a guess, but the addition of S/PDIF support is the only
 change that fits the timeline of when it was working and when
 the problem started.  (and if you look at ac97.c just a few lines down
 from this patch, you'll see the XXX-is-this-right? comment I added
 when bringing in S/PDIF support from NetBSD ...)

Yep, I see the comment, and I agree that it sure sounds like something
that could cause the problem that I experience.

My off-list reply to Jacob:

Hi and thanks for remembering me :-)

Unfortunately, it does not fix the problem. I'm still able to reproduce
the faulty situation (high pitched noise together with the music,
continueing after the music has been stopped) using mpd and mplayer.

Martin



Re: Router ping one way only

2009-01-20 Thread Martin Toft
What happens when you ping from the OpenBSD router? Does any of the
other equipment reply?

The Ubuntu machine's firewall settings can be seen by running 'sudo
iptables -L -v -n'. Are you sure it doesn't block incoming ICMP
requests?

Martin



Re: Router ping one way only

2009-01-20 Thread Martin Toft
On Tue, Jan 20, 2009 at 02:25:33PM -0800, duxbuz wrote:
 Thanks for reply. Both of you.

No problem. I think it will be easy to point out the problem, if you
post more details:

- ifconfig, 'route -n show -inet', 'pfctl -sr' and 'pfctl -sn' on the
  router.
- ifconfig and 'route -n' on the Ubuntu machine.
- Something like the above on the Windows machine(s).

Check that you haven't made a typo somewhere wrt. the 172.16.x.y
addresses and associated netmasks.

Martin



Re: Router ping one way only

2009-01-20 Thread Martin Toft
It just looks like your Vista laptop does not reply to ICMP requests for
some reason. As this is a Windows specific problem, I will not try to
solve it. Your tcpdump shows that the laptop uses the router perfectly
fine as a gateway to reach the world, i.e. if the laptop responded with
an ICMP reply, the reply would end up the right place.

Martin



Hard drive load cycle count

2009-01-18 Thread Martin Toft
Hi misc@

Inspired by http://it.slashdot.org/article.pl?sid=09/01/17/2127254 and
https://bugs.launchpad.net/ubuntu/+source/acpi-support/+bug/59695 I've
looked into the hard drive load cycle count on my 5-6 months old Asus
Eee PC1000H laptop. The launchpad link recommends that a disk has no
more than ~15 load cycles per hour, which indicates that my disk might
be in danger:

  $ sudo smartctl -a /dev/wd0c | grep Load_Cycle_Count
  193 Load_Cycle_Count0x0032   065   065   000Old_age   Always  
 -   71198
  $ sudo smartctl -a /dev/wd0c | grep Power_On_Hours
9 Power_On_Hours  0x0032   100   100   000Old_age   Always  
 -   823
  $ calc 71198/823
  ~86.51032806804374240583

Does anyone have some suggestions for how to tune this? I've looked in
the FAQ, smartctl(8) and atactl(8). The apmset option of atactl looks
promising, but the power management levels are not explained in enough
detail to be useful (IMHO).

If somebody can argue why I shouldn't be concerned about the load cycle
count, I'm also very interested :-)

The controller and disk in my machine:

  pciide0 at pci0 dev 31 function 2 Intel 82801GBM SATA rev 0x02: DMA, 
channel 0 wired to compatibility, channel 1 wired to compatibility
  wd0 at pciide0 channel 0 drive 0: ST980811AS
  wd0: 16-sector PIO, LBA48, 76319MB, 156301488 sectors
  wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5

  $ sudo smartctl -a /dev/wd0c | grep -A 11 INFO
  === START OF INFORMATION SECTION ===
  Model Family: Seagate Momentus 5400.3
  Device Model: ST980811AS
  Serial Number:5LYB0R9F
  Firmware Version: 3.ALC
  User Capacity:80,026,361,856 bytes
  Device is:In smartctl database [for details use: -P show]
  ATA Version is:   7
  ATA Standard is:  Exact ATA specification draft version not indicated
  Local Time is:Sun Jan 18 16:24:14 2009 CET
  SMART support is: Available - device has SMART capability.
  SMART support is: Enabled

Martin



Re: Hard drive load cycle count

2009-01-18 Thread Martin Toft
On Sun, Jan 18, 2009 at 11:47:30AM -0500, Ted Unangst wrote:
 rodin:~ grep ata /etc/rc.local
 atactl sd0 apmdisable

Thanks. Don't know why I didn't think of that.



Re: Hard drive load cycle count

2009-01-18 Thread Martin Toft
Related to the topic:

Owners of Western Digital Green Power drives might find this forum
thread interesting:

http://www.silentpcreview.com/forums/viewtopic.php?t=51401

WARNING: WD Green Power drives may kill themselves

Martin



Re: Only one headphone jack working - good or bad?

2009-01-06 Thread Martin Toft
On Tue, Jan 06, 2009 at 09:29:37PM +, Jacob Meuser wrote:
 so azalia users please let your voice be heard.  would you find it
 annoying when playing *only* mono or stereo to have all outputs play
 the audio, or would you like that?

Please excuse me if I have interpreted the question wrongly. I would
like to (continue to) have the possibility to mute my laptop's speakers
while using headphones. Otherwise other passengers are forced to listen
to my music when I use the laptop as a portable music player on a bus or
train.

Thanks for all your work!

Martin



Re: Python in base?

2008-12-27 Thread Martin Toft
On Sat, Dec 27, 2008 at 04:04:01PM +0100, Jordi Espasa Clofent wrote:
 Are there some plans to include python in base system (as Perl is at
 present)?

... the people in charge don't like it ...
http://marc.info/?l=openbsd-miscm=121171346816874w=2



Re: Etherchannel OpenBSD?

2008-12-23 Thread Martin Toft
On Mon, Dec 22, 2008 at 03:52:33PM +, Stuart Morgan wrote:
 Hi all,
 
 Does anyone known if trunk(4) supports Cisco Etherchannel?
 
 I have a 3500XL with the following port configuration:
 
 interface FastEthernet0/22
 port group 1
 switchport trunk encapsulation dot1q
 switchport mode trunk
 interface FastEthernet0/24
 port group 1
 switchport trunk encapsulation dot1q
 switchport mode trunk
 !

FWIW, I've successfully setup a 2x100 Mbps trunk between two D-Link
DGE-530T network cards (sk(4)) in an OpenBSD -current (November 2008)
box and two cobber ports in a Cisco 2924XL.

With regard to the switch, I just added port group X to both
interfaces. I don't have access to the OpenBSD box anymore, but I made a
hostname.trunkY roughly similar to the following:

!ifconfig skZ up
!ifconfig skW up
!ifconfig trunkY trunkport skZ trunkport skW address netmask netmask

Martin



Annoying sounds with auvia and mpd

2008-12-14 Thread Martin Toft
Hi

I'm using mpd and ncmpc to play music on my headless server equipped
with a VIA EN12000EG motherboard (auvia soundcard). It's running
-current built yesterday and the most recent mpd package from
ftp://mirrors.nic.funet.fi/pub/OpenBSD/snapshots/packages/i386
(mpd-0.13.2p2).

Sometimes when I play a song, some very loud shrieking sounds are heard
together with the chosen song. If I stop the player, the annoying sounds
sometimes keep on playing (forever). Stopping and starting a song a few
times helps and I'm eventually able to play a song without the shrieking
sounds.

I updated the machine yesterday, because I hoped the problem would go
away, i.e. I also had the problem with a one or two month old -current.

I will try mplayer tonight. I cannot install the mplayer package due to
wrong minor in stdc++, so I'll have to build the port. Before
upgrading, mplayer showed the same symptoms as mpd.

What can I do to diagnose the problem?

dmesg and list of installed packages are attached.

Thanks!

Martin


dmesg:

OpenBSD 4.4-current (GENERIC) #0: Sat Dec 13 23:57:32 CET 2008
r...@sprott.obsd.dk:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: VIA Esther processor 1200MHz (CentaurHauls 686-class) 1.20 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,CMOV,PAT,CFLUSH,ACPI,MMX,FXSR,SSE,SSE2,TM,SBF,SSE3,EST,TM2
cpu0: RNG AES AES-CTR SHA1 SHA256 RSA
real mem  = 469266432 (447MB)
avail mem = 445353984 (424MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 06/22/06, BIOS32 rev. 0 @ 0xf9360, SMBIOS 
rev. 2.3 @ 0xf0800 (25 entries)
apm0 at bios0: Power Management spec V1.2 (slowidle)
apm0: AC on, battery charge unknown
acpi at bios0 function 0x0 not configured
pcibios0 at bios0: rev 2.1 @ 0xf/0xc4f4
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfc450/160 (8 entries)
pcibios0: bad IRQ table checksum
pcibios0: PCI BIOS has 8 Interrupt Routing table entries
pcibios0: PCI Exclusive IRQs: 5 10 11
pcibios0: PCI Interrupt Router at 000:17:0 (VIA VT8237 ISA rev 0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc/0xfc00 0xd/0x8000! 0xd8000/0x1000
cpu0 at mainbus0: (uniprocessor)
cpu0: RNG AES AES-CTR SHA1 SHA256 RSA
cpu0: RNG AES AES-CTR SHA1 SHA256 RSA
cpu0: Enhanced SpeedStep 1200 MHz (860 mV): speeds: 1200, 1000, 800, 600, 400 
MHz
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 VIA CN700 Host rev 0x00
viaagp0 at pchb0v3, 
agp0 at viaagp0: aperture at 0xe800, size 0x1000
pchb1 at pci0 dev 0 function 1 VIA CN700 Host rev 0x00
pchb2 at pci0 dev 0 function 2 VIA CN700 Host rev 0x00
pchb3 at pci0 dev 0 function 3 VIA PT890 Host rev 0x00
pchb4 at pci0 dev 0 function 4 VIA CN700 Host rev 0x00
pchb5 at pci0 dev 0 function 7 VIA CN700 Host rev 0x00
ppb0 at pci0 dev 1 function 0 VIA VT8377 AGP rev 0x00
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 VIA S3 Unichrome PRO IGP rev 0x01
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
VIA VT6306 FireWire rev 0x80 at pci0 dev 13 function 0 not configured
vge0 at pci0 dev 14 function 0 VIA VT612x rev 0x11: irq 10, address 
00:40:63:e8:84:6d
ciphy0 at vge0 phy 1: CS8201 10/100/1000TX PHY, rev. 2
pciide0 at pci0 dev 15 function 0 VIA VT6420 SATA rev 0x80: DMA
pciide0: using irq 11 for native-PCI interrupt
wd0 at pciide0 channel 0 drive 0: SAMSUNG HD501LJ
wd0: 16-sector PIO, LBA48, 476940MB, 976773168 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
wd1 at pciide0 channel 1 drive 0: SAMSUNG HD501LJ
wd1: 16-sector PIO, LBA48, 476940MB, 976773168 sectors
wd1(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 5
pciide1 at pci0 dev 15 function 1 VIA VT82C571 IDE rev 0x06: ATA133, channel 
0 configured to compatibility, channel 1 configured to compatibility
pciide1: channel 0 disabled (no drives)
pciide1: channel 1 disabled (no drives)
uhci0 at pci0 dev 16 function 0 VIA VT83C572 USB rev 0x81: irq 5
uhci1 at pci0 dev 16 function 1 VIA VT83C572 USB rev 0x81: irq 5
uhci2 at pci0 dev 16 function 2 VIA VT83C572 USB rev 0x81: irq 11
ehci0 at pci0 dev 16 function 4 VIA VT6202 USB rev 0x86: irq 10
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 VIA EHCI root hub rev 2.00/1.00 addr 1
viapm0 at pci0 dev 17 function 0 VIA VT8237 ISA rev 0x00
iic0 at viapm0
spdmem0 at iic0 addr 0x50: 512MB DDR2 SDRAM non-parity PC2-3200CL5
auvia0 at pci0 dev 17 function 5 VIA VT8233 AC97 rev 0x60: irq 10
ac97: codec id 0x56494182 (VIA Technologies 82)
ac97: codec features 18 bit DAC, 18 bit ADC, No 3D Stereo
audio0 at auvia0
skc0 at pci0 dev 20 function 0 D-Link Systems DGE-530T B1 rev 0x11, Yukon 
Lite (0x9): irq 11
sk0 at skc0 port A: address 00:17:9a:7b:c2:a1
eephy0 at sk0 phy 0: 88E1011 Gigabit PHY, rev. 5
usb1 at uhci0: USB revision 1.0
uhub1 at usb1 VIA UHCI root hub rev 1.00/1.00 addr 1
usb2 at uhci1: USB revision 1.0
uhub2 at usb2 VIA UHCI root hub rev 1.00/1.00 addr 1
usb3 at uhci2: USB revision 1.0
uhub3 at usb3 VIA UHCI root hub rev 1.00/1.00 addr 1

Re: Annoying sounds with auvia and mpd

2008-12-14 Thread Martin Toft
On Sun, Dec 14, 2008 at 10:41:51AM +, Jacob Meuser wrote:
 try the cat  /dev/audio  /dev/zero test in faq13

  # cat  /dev/audio  /dev/zero  
  [1] 21502
  # audioctl play.{seek,samples,errors}
  play.seek=57600
  play.samples=652800
  play.errors=0
  # audioctl play.{seek,samples,errors}
  play.seek=57600
  play.samples=940800
  play.errors=0
  # audioctl play.{seek,samples,errors}
  play.seek=57600
  play.samples=1209600
  play.errors=0
  # audioctl play.{seek,samples,errors}
  play.seek=57600
  play.samples=1593600
  play.errors=0
  # audioctl play.{seek,samples,errors}
  play.seek=48000
  play.samples=1910400
  play.errors=0
  # kill %1
  # fg
  cat  /dev/audio  /dev/zero 
  Terminated 

Nothing but silence during the test. No shreiking sounds.

 also try the regress test in src/regress/sys/dev/audio

  # ./autest
  ulinear:8...mono(s 8000 c 8146 e 1.8%)...stereo(s 8000 c 8025 e 0.3%)
  mulaw:8*...mono(s 8000 c 4061 e 97.0%)...stereo(s 8000 c 4006 e 99.7%)
  alaw:8*...mono(s 8000 c 4061 e 97.0%)...stereo(s 8000 c 4006 e 99.7%)
  slinear:8*...mono(s 8000 c 8149 e 1.8%)...stereo(s 8000 c 8025 e 0.3%)
  slinear_le:16...mono(s 8000 c 8026 e 0.3%)...stereo(s 8000 c 8013 e 0.2%)
  ulinear_le:16*...mono(s 8000 c 8025 e 0.3%)...stereo(s 8000 c 8012 e 0.2%)
  slinear_be:16*...mono(s 8000 c 8025 e 0.3%)...stereo(s 8000 c 8012 e 0.2%)
  ulinear_be:16*...mono(s 8000 c 8026 e 0.3%)...stereo(s 8000 c 8013 e 0.2%)

The test produces a lot of different, noisy sounds. I guess that is the
expected behaviour. When it's done, the sound card keeps playing an
annoying, shreiking sound, like the sound I hear when trying to play
music with mpd. I was able to stop it by running

  # cat  /dev/audio  /dev/zero 
  [1] 27452
  # kill %1
  # fg
  cat  /dev/audio  /dev/zero 
  Terminated 

If I run the above commands a couple of times I'm able to get it into
the shreiking mode again.

 see if those produce the shreiking sound
 
 is this new(ish)?  you said you had the problem a month or two old
 -current, but before that?

Before running the old -current that I mentioned, I ran 4.3-stable on
the machine. The problem never occured with 4.3-stable.

I'm able to configure it to use all the ordinary rates:

  # audioctl play.rate  
  play.rate=48000
  # audioctl play.rate=44100
  play.rate: - 44100
  # audioctl play.rate=22050
  play.rate: - 22050
  # audioctl play.rate=8000 
  play.rate: - 8000

I remember that with 4.3-stable I was only able to use 48000 and had to
force mpd and mplayer to use 48000.

I've now built and installed mplayer, and the problem also exists with
mplayer. If I start mplayer 4-5 times (every time stopping it by typing
q after a few seconds), the sound card suddenly goes mad and plays
shreiking sounds together with the music. When I quit, the music stops
but the shreiking sounds continue. This is with and without -s 48000,
it makes no difference.

I'm ready to try anything you can think of :-)

Thanks in advance.

I might be a bit slow answering your mails, because I'm practically
living at the university at the moment, strugling to finish some project
work.

Martin


$ mixerctl -av
outputs.master=231,231 volume
outputs.master.mute=off  [ off on ]
outputs.mono=255 volume
outputs.mono.mute=off  [ off on ]
outputs.mono.source=mixerout  [ mixerout mic ]
outputs.surround=255,255 volume
outputs.surround.mute=on  [ off on ]
outputs.center=255 volume
outputs.center.mute=on  [ off on ]
outputs.lfe=255 volume
outputs.lfe.mute=on  [ off on ]
inputs.spkr=255 volume
inputs.spkr.mute=off  [ off on ]
inputs.phone=191 volume
inputs.phone.mute=on  [ off on ]
inputs.mic=191 volume
inputs.mic.mute=on  [ off on ]
inputs.mic.preamp=off  [ off on ]
inputs.mic.source=mic0  [ mic0 mic1 ]
inputs.line=191,191 volume
inputs.line.mute=on  [ off on ]
inputs.cd=191,191 volume
inputs.cd.mute=off  [ off on ]
inputs.video=255,255 volume
inputs.video.mute=off  [ off on ]
inputs.aux=191,191 volume
inputs.aux.mute=on  [ off on ]
inputs.dac=191,191 volume
inputs.dac.mute=off  [ off on ]
record.source=mic  [ mic cd video aux line mixerout mixeroutmono phone ]
record.volume=255,255 volume
record.volume.mute=off  [ off on ]
outputs.extamp=off  [ off on ]
outputs.spdif=off  [ off on ]



Re: Annoying sounds with auvia and mpd

2008-12-14 Thread Martin Toft
On Sun, Dec 14, 2008 at 04:58:34PM +0100, Martin Toft wrote:
...
 shreiking sounds together with the music. When I quit, the music stops
 but the shreiking sounds continue. This is with and without -s 48000,
 it makes no difference.

-srate 48000, of course.



Re: Annoying sounds with auvia and mpd

2008-12-14 Thread Martin Toft
A small follow-up:

The problem only occurs when opening the audio device. If I queue a
number of tracks in mpd's playlist and let it play, then it does not
suddenly start making noise from one track to the next. It only happens
when I manually start a track (and only sometimes). I suspect that mpd
does not close the audio device between tracks if it is playing from its
playlist, and that is probably why the problem does not occur in that
setting.

Martin



Re: sendmail and PF

2008-12-02 Thread Martin Toft
On Mon, Dec 01, 2008 at 11:40:17AM -0700, Jay Torrini wrote:
 Just need to know what to let in.
 
 ext_if=dc0
 trusted = REMOVED
 webports = { http }
 table blockedips persist file /etc/pf.blockedip.conf
 
 set block-policy return
 set optimization aggressive
 scrub in all
 
 antispoof for $ext_if
 
 pass in quick on $ext_if inet proto tcp from $trusted to $ext_if port ssh
 
 block in log (all) all
 
 block in quick from blockedips
 
 pass in on $ext_if proto tcp from any to $ext_if port $webports
 
 pass in on $ext_if inet proto tcp from any to any port domain
 pass in on $ext_if inet proto tcp from any to any port smtp

You have nothing that creates states for connections being made in the
outgoing direction. I am not completely certain, but something like
pass out before other filtering rules should make your day :-)

It would also be cleaner if you deleted quick from the ssh rule and
moved it down to the domain and smtp rules... IMHO.

Just remember that filtering is last matching rule wins, and you will
rarely need the quick keyword.

Martin



Re: Wondering about openbsd way to update for patches.

2008-11-22 Thread Martin Toft
On Sat, Nov 22, 2008 at 06:52:14AM -0600, Javier Vasquez wrote:
 I read in the documentation that if there are fixes, they come through
 patches, and then to keep things simple, the easiest fastest way is
 to keep the whole stable source tree up to date with patches, which
 imply initial compilation + recompiling any time a patch arise...
 
 I'm wondering whether this would mean lots of compilation time, which
 in this small machine might take too much...
 
 So it's true there's no binary way to keep the system patched, right?

Correct wrt. -stable.

You could, however, use a another, faster machine to build -stable
releases. This machine could be a virtual machine that you start up
the few times it is needed...

Martin



Re: pre-orders

2008-10-08 Thread Martin Toft
On Tue, Oct 07, 2008 at 11:25:27PM -0600, Theo de Raadt wrote:
 Anyone got one of the posters yet?
 
 I've gotten one of the first ones (of course).
 
 Shiny, shiny, shiny.

I saw it at Wim's booth at Open Source Days in the past weekend. Indeed
shiny :-)

Wim even promised that I could have it, if I went by the booth when the
conference ended. Unfortunately, I was busy cleaning up the building at
that point and forgot about it...



Re: dmesg ASUS EEEPC 1000H

2008-09-15 Thread Martin Toft
On Mon, Sep 15, 2008 at 10:26:26PM +0200, Sven Wolf wrote:
 Hi,
 
 I've successfully installed -current on a ASUS EEEPC 1000H (via an usb
 stick).
 At the moment lii doesn't detect the wired lan adapter: Attansic
 Technology L1E rev 0xb0 but maybe there will be a patch in the future...
 For the LAN connection I've used an USB adapter: axe0 at uhub0 port 2
 configuration 1 interface 0 Cisco-Linksys USB200M v2
 
 If you have any question just contact me. I've tried to install some
 packages but it seems that libiconv-1.12 is broken in the current snaphot :(
 
 
 Best regards,
 Sven

Hi Sven

I've done almost the same thing with my Eee PC1000H :-D

Only almost, though, as I'm tracking -current instead of running a
snapshot. I installed a snapshot using an USB cdrom drive, checked out
the -current source and built it. I know snapshots are the the best way
to test things, but I did it this way to be able to hack around with the
source and test patches (as much as time and competence allow me to).

I'm writing this mail on the Eee laptop, connected to the world through
a Linksys USB200M v2 USB Ethernet adaptor :-)

Don't you experience problems with the wireless Ralink RT2790 network
device? I've had it working in 2-3 boots right after I got the laptop
and never since. From dmesg:

  ral0 at pci3 dev 0 function 0 Ralink RT2790 rev 0x00: irq 11ral0: timeout 
waiting for NIC to initialize

If you wonder how to unmute the sound card, try this:

  mixerctl outputs.speaker2.eapd=on

(see also mixerctl.conf(5))

I have attached the mail that I sent to [EMAIL PROTECTED] a while ago.

Martin


- Forwarded message from Martin Toft [EMAIL PROTECTED] -

Date: Thu, 4 Sep 2008 21:21:45 +0200
From: Martin Toft [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Asus Eee PC 1000H laptop

Notable things that work:
- Boots without problems every time.
- Sound.
- USB.
- X (it detects everything automatically and Just Works(tm)).
- Touchpad.

Things that doesn't work or only work partially:
- APM. AC is detected, but battery charge is unknown.
- LAN (Attansic Technology L1E rev 0xb0). I have tried forcing it to use
  lii(4) but it fails init with can't get MAC address-ish.
- WLAN (Ralink RT2790). I have had it working in about two boots out of
  approx 30. I haven't found a pattern. I'm multibooting with the
  preinstalled Windows at the moment, and maybe it has something to do
  with the way Windows handles the card.

I have included dmesg and pcidump -v. Thanks for everyting!

You're welcome to contact me if you need me to test something or want
more info.

If you want an entry for the i386-laptop page, I'm eager to write one
and make my dmesg available somewhere.


dmesg
=

OpenBSD 4.4-current (GENERIC) #2: Thu Sep  4 01:33:19 CEST 2008
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Atom(TM) CPU N270 @ 1.60GHz (GenuineIntel 686-class) 1.60 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,TM2,xTPR
real mem  = 1064529920 (1015MB)
avail mem = 1020891136 (973MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 07/11/08, BIOS32 rev. 0 @ 0xf0010, SMBIOS 
rev. 2.5 @ 0xf0700 (30 entries)
bios0: vendor American Megatrends Inc. version 0901 date 07/11/2008
bios0: ASUSTeK Computer INC. 1000H
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
acpi at bios0 function 0x0 not configured
pcibios0 at bios0: rev 3.0 @ 0xf/0x1
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf8770/176 (9 entries)
pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82801GBM LPC rev 0x00)
pcibios0: PCI bus #5 is the last bus
bios0: ROM list: 0xc/0xec00!
cpu0 at mainbus0
cpu0: unknown Enhanced SpeedStep CPU, msr 0x060f0c2406000c24
cpu0: using only highest and lowest power states
cpu0: Enhanced SpeedStep 1600 MHz (1276 mV): speeds: 1600, 800 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 Intel 82945GME Host rev 0x03
vga1 at pci0 dev 2 function 0 Intel 82945GME Video rev 0x03
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
agp0 at vga1: aperture at 0xd000, size 0x1000
Intel 82945GM Video rev 0x03 at pci0 dev 2 function 1 not configured
azalia0 at pci0 dev 27 function 0 Intel 82801GB HD Audio rev 0x02: irq 5
azalia0: codec[s]: Realtek/0x0269
audio0 at azalia0
ppb0 at pci0 dev 28 function 0 Intel 82801GB PCIE rev 0x02: irq 5
pci1 at ppb0 bus 4
ppb1 at pci0 dev 28 function 1 Intel 82801GB PCIE rev 0x02: irq 10
pci2 at ppb1 bus 3
Attansic Technology L1E rev 0xb0 at pci2 dev 0 function 0 not configured
ppb2 at pci0 dev 28 function 3 Intel 82801GB PCIE rev 0x02: irq 11
pci3 at ppb2 bus 1
ral0 at pci3 dev 0 function 0 Ralink RT2790 rev 0x00: irq 11ral0: timeout 
waiting for NIC to initialize
uhci0 at pci0 dev 29 function 0 Intel 82801GB USB rev 0x02: irq 3
uhci1 at pci0 dev 29 function 1

Re: dmesg ASUS EEEPC 1000H

2008-09-15 Thread Martin Toft
On Mon, Sep 15, 2008 at 11:58:59PM +0200, Martin Toft wrote:
 Don't you experience problems with the wireless Ralink RT2790 network
 device? I've had it working in 2-3 boots right after I got the laptop
 and never since. From dmesg:
 
   ral0 at pci3 dev 0 function 0 Ralink RT2790 rev 0x00: irq 11ral0: timeout 
 waiting for NIC to initialize

The following recipe fixed the device:

1. Disable wlan in bios.
2. Boot into OpenBSD. The blue led is now off and a ral device is not
   found.
3. Enable wlan in bios.
4. Boot into OpenBSD.

Result:

  ral0 at pci3 dev 0 function 0 Ralink RT2790 rev 0x00: irq 11, address 
00:15:af:e4:cd:1d
  ral0: MAC/BBP RT2872 (rev 0x0200), RF RT2720 (1T2R)

  # ifconfig ral0 chan
  ral0: flags=8802BROADCAST,SIMPLEX,MULTICAST mtu 1500
  lladdr 00:15:af:e4:cd:1d
  groups: wlan
  media: IEEE802.11 autoselect (DS1)
  status: no network
  ieee80211: nwid  100dBm
  nwid Alisa chan 11 bssid 00:0e:2e:f5:8f:f7 74dB 54M 
privacy,short_slottime 
  nwid mt chan 11 bssid 00:0f:cb:fa:45:98 72dB 54M 
privacy,short_preamble,spectrum_mgmt,short_slottime 
  nwid Baasch chan 3 bssid 00:15:e9:0b:1b:26 72dB 54M 
privacy,short_preamble,short_slottime 
  nwid Lujoba chan 1 bssid 00:1d:0f:e2:51:8a 72dB 54M 
privacy,short_preamble,short_slottime 
  nwid 0x00 chan 11 bssid 00:1d:7e:e3:43:b7 
72dB 54M privacy,short_slottime 
  nwid SA chan 11 bssid 00:21:29:99:8f:6f 70dB 54M 
privacy,short_slottime 

Martin



Re: Ethernet (and sound?) doesn't work on my new notebook

2008-08-23 Thread Martin Toft
On Sat, Aug 23, 2008 at 07:01:21PM +0200, thacrazze wrote:
 No idea for my problem?

A quick glance at sis(4) (man sis) and http://www.openbsd.org/i386.html
(the section Gigabit Ethernet Adapters) indicates that your SiS 191
network card just isn't supported.



Re: cwm default window placement

2008-08-16 Thread Martin Toft
On Sat, Aug 16, 2008 at 07:24:24PM +0200, Earin Gregor wrote:
 My question now is about default placement of windows.
 I do start a few applications via my .xsession file. Most notably an xterm
 and xclock.
 Is it now possible to place those applications per default at a specific
 location?
 For xterm I'd like it to be at the left edge and then maximised vertical
 (C-M-=)
 And the xclock would be nice in the right upper corner and always raised
 above other applications.
 
 Is there a way do get such a behaviour?

See the section Geometry Specifications in X(7).

(man X, /GEOenter)

Both xterm and xlock accepts the standard X Toolkit options.

Martin



Re: cwm default window placement

2008-08-16 Thread Martin Toft
On Sat, Aug 16, 2008 at 07:34:18PM +0200, Martin Toft wrote:
 Both xterm and xlock accepts the standard X Toolkit options.

Do'h... s/xlock/xclock/ and s/accepts/accept/



Re: cwm default window placement

2008-08-16 Thread Martin Toft
On Sat, Aug 16, 2008 at 08:04:51PM +0200, Earin Gregor wrote:
 Only question still remains: Is there a way to keep one
 window/application always raised above others? Would be nice in my
 case for xclock :-)

Try this:

  In ~/.cwmrc:

gap 0 34 0 0
ignore xclock

  In ~/.xinitrc or ~/.xsession (startx or xdm, I use a symlink...):

xsetroot -solid black 
xclock -geometry -0-0 -d -strftime '%H:%M %b %d %Y' -update 1 
exec cwm

  In ~/.Xdefaults:

xclock*background: black
xclock*foreground: green

Martin



Re: Trying to compile cwm on Linux

2008-08-01 Thread Martin Toft
On Thu, Jul 24, 2008 at 10:35:36PM +0200, Martin Toft wrote:
 On Thu, Jul 24, 2008 at 02:20:22PM -0600, Theo de Raadt wrote:
  +#define strlcpy(dst, src, size) (strncpy((dst), (src), (size) - 1))
  +#define strlcat(dst, src, size) (strncat((dst), (src), (size) - 1))
  
  That is utterly and completely wrong.  
 
 Yep, I'm a noob when it comes to these kinds of things. I'll look into
 it.

And so I did. Travelling and other work delayed me though.

The result: http://martintoft.dk/?p=cwm

Martin



Re: make ls not show dot-files as root

2008-07-28 Thread Martin Toft
On Mon, Jul 28, 2008 at 07:07:55PM -0400, Ted Unangst wrote:
 On 7/28/08, Jesus Sanchez [EMAIL PROTECTED] wrote:
   Can I make ls to NOT show
   the hidden files (.xinitrc , .vimrc, etc) when
   using as Root??
 
 ls *
 ls | grep -v ^.

You need to escape the dot... e.g. grep -v ^\\\.

 sudo -u nobody ls
 find . -name [abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ]* 
 -maxdepth 1 -print0 | xargs -0 ls -Cd | sed 's/\.\///g'



Re: make ls not show dot-files as root

2008-07-28 Thread Martin Toft
On Tue, Jul 29, 2008 at 01:16:22AM +0200, Martin Toft wrote:
 You need to escape the dot... e.g. grep -v ^\\\.

Two backslashes is enough. My attempt at being a smart ass failed :-)



Re: Trying to compile cwm on Linux

2008-07-24 Thread Martin Toft
On Wed, Jul 23, 2008 at 10:55:01PM +0200, Martin Toft wrote:
 I'm trying to compile cwm (/usr/xenocara/app/cwm) on Linux, as I would
 like to use this very supreme window manager on all my non-OpenBSD
 systems as well. The version of cwm that I'm working with is from
 yesterday's -current (23rd of July, 2008). The Linux distribution is
 Ubuntu Feisty.
[..]

oga@ and jsg@ pointed me to byacc - thanks! There is some yacc specific
constructs in cwm's parser that bison doesn't support.

To address the mail from [EMAIL PROTECTED]: I think this _is_
OpenBSD related (opposed to Linux related), as there might be other
OpenBSD users, like me, who want to use cwm on their non-OpenBSD boxes
as well, and Linux-only users hardly know about the cwm in OpenBSD.

The following is an attempt to make a simple guide.


OpenBSD's cwm window manager on Ubuntu Linux


1. Install the following packages:

   byacclibxext-dev
   libexpat1-devlibxft-dev
   libfontconfig1-dev   libxrender-dev
   libxau-dev   xlibs-dev
   libxdmcp-dev zlib1g-dev

   You might also need to install cvs and xterm (xterm is the default
   terminal for cwm to start when one types ctrl+alt+enter).

2. Pick an anonymous CVS server close to you:
   http://www.openbsd.org/anoncvs.html#CVSROOT

3. Checkout cwm as of July 24, 2008:

   $ export CVSROOT=(what you picked in step 2)
   $ cvs -q -d$CVSROOT checkout -D 2008-07-24 xenocara/app/cwm
   U xenocara/app/cwm/LICENSE
   U xenocara/app/cwm/Makefile
   [..]
   U xenocara/app/cwm/xmalloc.c
   U xenocara/app/cwm/xutil.c
   $ cd xenocara/app/cwm

4. Patch the source using cwm-linux.patch (attached inline further
   down):

   $ patch  cwm-linux.patch
   patching file calmwm.c
   patching file calmwm.h
   patching file conf.c
   patching file headers.h
   patching file kbfunc.c
   patching file parse.y

5. Generate the parser using byacc:

   $ byacc -d parse.y 
   $ mv y.tab.c parse.c

6. Compile and link:

   $ for i in *.c; do gcc -I /usr/include/freetype2 -c $i; done
   $ gcc -lXft -lXrender -lX11 -lXau -lXdmcp -lXext -lfontconfig -lexpat 
-lfreetype -lz -o cwm *.o

7. Enjoy:

   $ ls -l cwm
   -rwxr-xr-x 1 mt mt 83963 2008-07-24 21:21 cwm


Corrections and flames are most welcome :-)

Martin


cwm-linux.patch:

--- calmwm.c.orig   2008-07-23 15:25:38.0 +0200
+++ calmwm.c2008-07-23 15:25:51.0 +0200
@@ -317,7 +317,7 @@
errno = save_errno;
 }
 
-__dead void
+void
 usage(void)
 {
extern char *__progname;
--- calmwm.h.orig   2008-07-23 15:25:30.0 +0200
+++ calmwm.h2008-07-23 15:25:45.0 +0200
@@ -312,7 +312,7 @@
 voidx_setup(void);
 char   *x_screenname(int);
 voidx_setupscreen(struct screen_ctx *, u_int);
-__dead void usage(void);
+voidusage(void);
 
 struct client_ctx  *client_find(Window);
 voidclient_setup(void);
--- conf.c.orig 2008-07-24 18:20:14.0 +0200
+++ conf.c  2008-07-24 18:37:49.0 +0200
@@ -464,9 +464,9 @@
if (strchr(name, '-') == NULL)
substring = name;
 
-   current_binding-button = strtonum(substring, 1, 3, errstr);
-   if (errstr)
-   warnx(number of buttons is %s: %s, errstr, substring);
+   current_binding-button = strtoll(substring, NULL, 10);
+   if (errno || current_binding-button  1 || current_binding-button  3)
+   warn(invalid number or out of range: %s, substring);
 
conf_mouseunbind(c, current_binding);
 
--- headers.h.orig  2008-07-24 16:52:46.0 +0200
+++ headers.h   2008-07-24 19:08:23.0 +0200
@@ -52,4 +52,8 @@
 
 #include err.h
 
+#define strlcpy(dst, src, size) (strncpy((dst), (src), (size) - 1))
+#define strlcat(dst, src, size) (strncat((dst), (src), (size) - 1))
+#define TAILQ_END(head) NULL
+
 #endif /* _CALMWM_HEADERS_H_ */
--- kbfunc.c.orig   2008-07-24 19:04:56.0 +0200
+++ kbfunc.c2008-07-24 19:04:15.0 +0200
@@ -345,7 +345,7 @@
FILE*fp;
char*buf, *lbuf, *p, *home;
char hostbuf[MAXHOSTNAMELEN], filename[MAXPATHLEN];
-   char cmd[256];
+   char cmd[256], buffer[1024];
int  l;
size_t   len;
 
@@ -361,7 +361,9 @@
 
TAILQ_INIT(menuq);
lbuf = NULL;
-   while ((buf = fgetln(fp, len))) {
+   while (!feof(fp)) {
+   buf = fgets(buffer, sizeof(buffer), fp);
+   len = strlen(buf);
if (buf[len - 1] == '\n')
buf[len - 1] = '\0';
else {
--- parse.y.orig2008-07-23 15:44:14.0 +0200
+++ parse.y 2008-07-24 18:31:47.0 +0200
@@ -379,11 +379,9 @@
const char *errstr = NULL;
 
*p = '\0

Re: Trying to compile cwm on Linux

2008-07-24 Thread Martin Toft
On Thu, Jul 24, 2008 at 02:20:22PM -0600, Theo de Raadt wrote:
 +#define strlcpy(dst, src, size) (strncpy((dst), (src), (size) - 1))
 +#define strlcat(dst, src, size) (strncat((dst), (src), (size) - 1))
 
 That is utterly and completely wrong.  

Yep, I'm a noob when it comes to these kinds of things. I'll look into
it.



Trying to compile cwm on Linux

2008-07-23 Thread Martin Toft
I'm trying to compile cwm (/usr/xenocara/app/cwm) on Linux, as I would
like to use this very supreme window manager on all my non-OpenBSD
systems as well. The version of cwm that I'm working with is from
yesterday's -current (23rd of July, 2008). The Linux distribution is
Ubuntu Feisty.

I have installed the following development packages:

  libexpat1-dev   libxft-dev
  libfontconfig1-dev  libxrender-dev
  libxau-dev  xlibs-dev
  libxdmcp-devzlib1g-dev
  libxext-dev

All .c files build without errors:

  $ for i in *.c; do gcc -I /usr/include/freetype2 -c $i; done
  conf.c: In function `conf_unbind':
  conf.c:403: warning: comparison between pointer and integer
  conf.c: In function `conf_mouseunbind':
  conf.c:493: warning: comparison between pointer and integer
  kbfunc.c: In function `kbfunc_ssh':
  kbfunc.c:364: warning: assignment makes pointer from integer without a cast

  $ ls *.o
  calmwm.o  font.o   input.o   mousefunc.o  util.o xutil.o
  client.o  grab.o   kbfunc.o  screen.o xevents.o
  conf.ogroup.o  menu.osearch.o xmalloc.o

I then try to use bison and run into trouble:

  $ bison -d --yacc parse.y 
  $ mv y.tab.c parse.c
  $ gcc -I /usr/include/freetype2 -c parse.c
  parse.y:88: error: conflicting types for `YYSTYPE'
  parse.y:65: error: previous declaration of `YYSTYPE' was here
  parse.y: In function `yyparse':
  parse.y:86: error: request for member `v' in something not a structure or 
union
  parse.y:86: error: request for member `v' in something not a structure or 
union
  parse.y:86: error: request for member `v' in something not a structure or 
union
  parse.y:87: error: request for member `v' in something not a structure or 
union
  parse.y:88: error: request for member `v' in something not a structure or 
union
  parse.y:92: error: request for member `v' in something not a structure or 
union
  parse.y:93: error: request for member `v' in something not a structure or 
union
  parse.y:98: error: request for member `v' in something not a structure or 
union
  parse.y:99: error: request for member `v' in something not a structure or 
union
  parse.y:104: error: request for member `v' in something not a structure or 
union
  parse.y:107: error: request for member `v' in something not a structure or 
union
  parse.y:113: error: request for member `v' in something not a structure or 
union
  parse.y:113: error: request for member `v' in something not a structure or 
union
  parse.y:114: error: request for member `v' in something not a structure or 
union
  parse.y:115: error: request for member `v' in something not a structure or 
union
  parse.y:121: error: request for member `v' in something not a structure or 
union
  parse.y:121: error: request for member `v' in something not a structure or 
union
  parse.y:122: error: request for member `v' in something not a structure or 
union
  parse.y:123: error: request for member `v' in something not a structure or 
union
  parse.y:129: error: request for member `v' in something not a structure or 
union
  parse.y:131: error: request for member `v' in something not a structure or 
union
  parse.y:134: error: request for member `v' in something not a structure or 
union
  parse.y:137: error: request for member `v' in something not a structure or 
union
  parse.y:141: error: request for member `v' in something not a structure or 
union
  parse.y:147: error: request for member `v' in something not a structure or 
union
  parse.y:150: error: request for member `v' in something not a structure or 
union
  parse.y:153: error: request for member `v' in something not a structure or 
union
  parse.y:153: error: request for member `v' in something not a structure or 
union
  parse.y:154: error: request for member `v' in something not a structure or 
union
  parse.y:155: error: request for member `v' in something not a structure or 
union
  parse.y:158: error: request for member `v' in something not a structure or 
union
  parse.y:159: error: request for member `v' in something not a structure or 
union
  parse.y:160: error: request for member `v' in something not a structure or 
union
  parse.y:161: error: request for member `v' in something not a structure or 
union
  parse.y:164: error: request for member `v' in something not a structure or 
union
  parse.y:164: error: request for member `v' in something not a structure or 
union
  parse.y:165: error: request for member `v' in something not a structure or 
union
  parse.y:166: error: request for member `v' in something not a structure or 
union
  parse.y: In function `yyerror':
  parse.y:183: error: request for member `lineno' in something not a structure 
or union
  parse.y: In function `lgetc':
  parse.y:265: error: request for member `lineno' in something not a structure 
or union
  parse.y: In function `yylex':
  parse.y:326: error: request for member `lineno' in something not a structure 
or union
  parse.y:360: error: request for member `v' in something 

Re: pf - antispoof and alias ip addresses

2008-07-15 Thread Martin Toft
On Tue, Jul 15, 2008 at 10:17:47PM +0200, [EMAIL PROTECTED] wrote:
 Hi,
 Want to know if antispoof also include the alias ip address(es) off
 the given interface?

It does:

  $ sudo ifconfig lo0 alias 1.2.3.4 netmask 255.255.255.255
  $ ifconfig lo0   
  lo0: flags=8049UP,LOOPBACK,RUNNING,MULTICAST mtu 33204
  groups: lo
  inet 127.0.0.1 netmask 0xff00
  inet6 ::1 prefixlen 128
  inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
  inet 1.2.3.4 netmask 0x
  $ sudo cat /etc/pf.conf 
  antispoof for lo0
  $ sudo pfctl -e -f /etc/pf.conf 
  pf enabled
  $ sudo pfctl -sr
  block drop in on ! lo0 inet from 127.0.0.0/8 to any
  block drop in on ! lo0 inet from 1.2.3.4 to any
  block drop in on ! lo0 inet6 from ::1 to any

Martin



Re: X font sizes

2008-07-14 Thread Martin Toft
On Mon, Jul 14, 2008 at 06:49:43PM +0200, Michael wrote:
 sometime between the June 25 snapshot and today something in X changed. 
 Font sizes of some programms (like Konsole, Psi, xclock when using 
 -render) are much larger then before.

http://marc.info/?l=openbsd-miscm=121372109126372w=2

Martin



Re: OT: Dissertation ideas for my degree

2008-06-20 Thread Martin Toft
On Thu, Jun 19, 2008 at 06:01:24PM +0100, Edd Barrett wrote:
 TeX isnt as dead as you think.

After studying two years at a Department of Mathematical Sciences and
helping a lot of the staff with LaTeX-related stuff while there, I can
certainly second that.

Due to the myriad of packages people use, I think it'll be a
never-ending job to create good tools to convert between LaTeX/TeX and
e.g. XML. In my experience, people care _a lot_ about typography and
will not settle with a mediocre conversion result.

Martin



Re: simple PF question

2008-06-20 Thread Martin Toft
On Fri, Jun 20, 2008 at 02:10:52PM -0700, Robert Gilaard wrote:
 Hi folks,
 
 All the time I had the following entries in my pf.conf for my Desktop
 system.
 However, as I've bought this pf book that was lately released, I begin
 to suspect that these rules are way to liberal.
 
 If I only want to be able to browse the web and maybe use ssh-client,
 how should I rewrite the rules so that only those ports are open
 (80,443 and 22)?
 
 I guess i'm looking forward to a RTFM answer, but hey, I wouldn't ask
 if I knew how to write them.
 
 The best I could guess is:
 
 pass out on $int_if proto tcp from any to any port 80 modulate state
 flags S/SA
 
 But I don't know if this is correct.
 
 Brgds
 Robert

If it's just a simple workstation with a single user, I see no reason
for restricting outgoing traffic. If you really want this, remember to
also allow DNS queries (port 53, tcp+udp).

Let me point you to some of Peter Hansteen's goodies:

  http://home.nuug.no/~peter/pf/en/minimal-ruleset.html

(you should also click Next when you get to the bottom of that page)

The full table of contents:

  http://home.nuug.no/~peter/pf/en/

Martin



anoncvs.se.openbsd.org: No space left on device

2008-06-16 Thread Martin Toft
Hi misc@

I get the following error message when updating the xenocara module from
anoncvs.se.openbsd.org:

  $ echo $CVSROOT
  [EMAIL PROTECTED]:/cvs
  $ pwd 
  /usr/xenocara
  $ sudo cvs -q -d$CVSROOT up -Pd
  Password:
  unable to write, file Makefile.in
  No space left on device

I had no problem updating src from the same server. I guess the error
message is sent by the server, as I'm not running out of space on my
laptop:

  $ df -h | head -n 2
  FilesystemSizeUsed   Avail Capacity  Mounted on
  /dev/wd0a 9.8G5.2G4.1G56%/

I sent the following mail to [EMAIL PROTECTED] (the maintainers of
anoncvs.se.openbsd.org) five days ago, but I haven't heard from them:

--- start of mail quote ---

Date: Wed, 11 Jun 2008 10:38:48 +0200
From: Martin Toft [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Problem with anoncvs.stacken.kth.se

Hi Stacken staff

I think anoncvs.stacken.kth.se needs more disk space to work properly:

  [EMAIL PROTECTED]:/usr/xenocara$ export [EMAIL PROTECTED]:/cvs
  [EMAIL PROTECTED]:/usr/xenocara$ sudo cvs -q -d$CVSROOT up -Pd
  unable to write, file configure
  No space left on device

There is approx 4 GB available on my computer and a cvs update from
anoncvs1.ca.openbsd.org works fine.

Thanks for a great service!

Best regards,
Martin

--- end of mail quote ---

Anybody else experiencing the problem or am I the only one?

Martin



Re: Here's a trivial question. . .

2008-06-12 Thread Martin Toft
On Thu, Jun 12, 2008 at 02:29:41AM -0700, Sean Kamath wrote:
 Why is sendmail in /usr/src/gnu/usr.sbin?
 
 sendmail is patently not a GNU application, and has a modified  
 Berkeley license?
 
 Just askin'.
 
 Sean

http://marc.info/?l=openbsd-miscm=101014364523299w=2

Martin



Re: Kernel developers guide/tutorial

2008-06-11 Thread Martin Toft
On Wed, Jun 11, 2008 at 02:09:46PM -0700, Don Hiatt wrote:
 [ Pardon if this email was repeated.
   Sadly, I'm using Outlook and you know the rest :-) ]
 
 Can anyone point me to a kernel developers guide or tutorial?
 Something that explains how to write a hello world type device driver
 and such. Anything to bootstrap me a bit. ;-)
 
 Cheers!
 
 don

Jonathan Gray's presentation at OpenCON 2006:

http://www.openbsd.org/papers/opencon06-drivers/index.html

Martin



Re: My ntpd isn't starting on OBSD 4.3?

2008-05-01 Thread Martin Toft
On Thu, May 01, 2008 at 01:06:41PM -0700, Ed Flecko wrote:
 Hi folks,
 O.K., I'm stumped.
 
 I've just installed 4.3, and I have the typical:
 
 ntpd_flags=-s entry in /etc/rc.conf.local
 
 and
 
 # sync to a single server
 128.9.176.30

AFAIK, you need server before the address, i.e.:

server 128.9.176.30

 # use a random selection of 8 public stratum 2 servers
 # see http://support.ntp.org/bin/view/Servers/NTPPoolServers
 # servers pool.ntp.org
 
 in /etc/ntpd.conf, and ntpd isn't starting on boot.
 
 Am I missing something unique to 4.3?
 
 Thank you.



Re: 32G SSD - Poor Performance on 4.3

2008-04-29 Thread Martin Toft
Highlights from a recent comparison:

http://hardware.slashdot.org/hardware/08/04/29/1528205.shtml

Save your money seems to be the answer at the moment.



Re: RAID 1 in production environment

2008-03-28 Thread Martin Toft
On Fri, Mar 28, 2008 at 11:49:01AM +0100, Jordi Espasa Clofent wrote:
 Hi all,
 
 I need a RAID-1 (mirroring) for production environment.
 
 ?Should I use RAIDFrame or softraid?
 
 The reliability is the main request feature.

AFAIK, not all features of softraid are finished yet. However, it
appears that the developers themselves do not trust raidframe, so maybe
you should stay away from that too. No easy answer :-|

Search the archives for the status of softraid.

Martin



Re: PCI Gigabit card suggestion?

2008-02-25 Thread Martin Toft
On Mon, Feb 25, 2008 at 11:48:27AM +1100, Sunnz wrote:
 Thanks for the suggestions guys, I'll be getting a DLink DGE-530T
 sk(4) tomorrow, will be how it goes!

FWIW, I'm very satisfied with my two DGE-530Ts on OpenBSD (as reported
at least once on this list earlier):

  skc1 at pci2 dev 9 function 0 D-Link Systems DGE-530T B1 rev 0x11, Yukon 
Lite (0x9): irq 4
  sk1 at skc1 port A: address 00:17:9a:7b:c2:e8
  skc2 at pci2 dev 10 function 0 D-Link Systems DGE-530T B1 rev 0x11, Yukon 
Lite (0x9): irq 7
  sk2 at skc2 port A: address 00:17:9a:7b:c5:70

They are placed in my dormitory's gateway and have transmitted approx
155 TB since April 1, 2007 :-)  (the day we started creating graphs with
RRDtool etc.)

Martin



Re: em(4) diff that needs testing.

2008-02-19 Thread Martin Toft
On Mon, Feb 18, 2008 at 04:43:59PM -0500, Brad wrote:
 On Thursday 14 February 2008 00:34:54 Brad wrote:
  The following diffs adds support for the Intel ICH9 Ethernet chipsets.
  There is also a small change in here that affects the ICH8 chipsets.
  Please test this with any em(4) adapters but especially with ICH8 and
  ICH9. Please provide a dmesg.
 
 This could still use more testing from additional users.

I would like to test it on my Thinkpad T41, but I don't know whether it
will help you or not:

OpenBSD 4.2-current (GENERIC) #2: Wed Feb  6 23:03:09 CET 2008
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) M processor 1600MHz (GenuineIntel 686-class) 1.60 
GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,TM,SBF,EST,TM2
real mem  = 535785472 (510MB)
avail mem = 510173184 (486MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 04/19/05, BIOS32 rev. 0 @ 0xfd750, SMBIOS 
rev. 2.33 @ 0xe0010 (61 entries)
bios0: vendor IBM version 1RETDKWW (3.16 ) date 04/19/2005
bios0: IBM 2373NG9
apm0 at bios0: Power Management spec V1.2
apm0: battery life expectancy 100%
apm0: AC on, battery charge high
acpi at bios0 function 0x0 not configured
pcibios0 at bios0: rev 2.1 @ 0xfd6e0/0x920
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdea0/272 (15 entries)
pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82371FB ISA rev 0x00)
pcibios0: PCI bus #6 is the last bus
bios0: ROM list: 0xc/0x1 0xdc000/0x4000! 0xe/0x1
cpu0 at mainbus0
cpu0: Enhanced SpeedStep 1600 MHz (1484 mV): speeds: 1600, 1400, 1200, 1000, 
800, 600 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 Intel 82855PM Host rev 0x03
agp0 at pchb0: aperture at 0xd000, size 0x1000
ppb0 at pci0 dev 1 function 0 Intel 82855PM AGP rev 0x03
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 ATI Radeon Mobility M9 Lf rev 0x02
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
uhci0 at pci0 dev 29 function 0 Intel 82801DB USB rev 0x01: irq 11
uhci1 at pci0 dev 29 function 1 Intel 82801DB USB rev 0x01: irq 11
uhci2 at pci0 dev 29 function 2 Intel 82801DB USB rev 0x01: irq 11
ehci0 at pci0 dev 29 function 7 Intel 82801DB USB rev 0x01: irq 11
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1
ppb1 at pci0 dev 30 function 0 Intel 82801BAM Hub-to-PCI rev 0x81
pci2 at ppb1 bus 2
cbb0 at pci2 dev 0 function 0 TI PCI4520 CardBus rev 0x01: irq 11
cbb1 at pci2 dev 0 function 1 TI PCI4520 CardBus rev 0x01: irq 11
em0 at pci2 dev 1 function 0 Intel PRO/1000MT (82540EP) rev 0x03: irq 11, 
address 00:11:25:44:6c:4a
ral0 at pci2 dev 2 function 0 Ralink RT2561S rev 0x00: irq 11, address 
00:12:0e:61:81:1c
ral0: MAC/BBP RT2561C, RF RT5225
cardslot0 at cbb0 slot 0 flags 0
cardbus0 at cardslot0: bus 3 device 0 cacheline 0x8, lattimer 0xb0
pcmcia0 at cardslot0
cardslot1 at cbb1 slot 1 flags 0
cardbus1 at cardslot1: bus 6 device 0 cacheline 0x8, lattimer 0xb0
pcmcia1 at cardslot1
ichpcib0 at pci0 dev 31 function 0 Intel 82801DBM LPC rev 0x01: 24-bit timer 
at 3579545Hz
pciide0 at pci0 dev 31 function 1 Intel 82801DBM IDE rev 0x01: DMA, channel 0 
configured to compatibility, channel 1 configured to compatibility
wd0 at pciide0 channel 0 drive 0: WDC WD1200BEVE-11UYT0
wd0: 16-sector PIO, LBA48, 114473MB, 234441648 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: HL-DT-ST, DVD-ROM GDR8083N, 0K04 SCSI0 5/cdrom 
removable
cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
ichiic0 at pci0 dev 31 function 3 Intel 82801DB SMBus rev 0x01: irq 11
iic0 at ichiic0
spdmem0 at iic0 addr 0x50: 512MB DDR SDRAM non-parity PC2700CL2.5
auich0 at pci0 dev 31 function 5 Intel 82801DB AC97 rev 0x01: irq 11, ICH4 
AC97
ac97: codec id 0x41445374 (Analog Devices AD1981B)
ac97: codec features headphone, 20 bit DAC, No 3D Stereo
audio0 at auich0
Intel 82801DB Modem rev 0x01 at pci0 dev 31 function 6 not configured
usb1 at uhci0: USB revision 1.0
uhub1 at usb1 Intel UHCI root hub rev 1.00/1.00 addr 1
usb2 at uhci1: USB revision 1.0
uhub2 at usb2 Intel UHCI root hub rev 1.00/1.00 addr 1
usb3 at uhci2: USB revision 1.0
uhub3 at usb3 Intel UHCI root hub rev 1.00/1.00 addr 1
isa0 at ichpcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pms0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pms0 mux 0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: PC speaker
spkr0 at pcppi0
aps0 at isa0 port 0x1600/31
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
biomask effd netmask effd ttymask 
mtrr: Pentium Pro MTRR support
softraid0 at root
root on wd0a swap on wd0b dump on wd0b
auich0: measured ac97 link rate at 46201 Hz, 

Re: Proxy between pop3s and pop3-only speaking blob?

2008-02-19 Thread Martin Toft
On Tue, Feb 19, 2008 at 07:46:01AM -0800, Jon wrote:
 Here at work we're using an old version of Gordano Messaging Suite which 
 only supports POP3, running on Redhat. The only way to get POP3s (if we 
 can) is to upgrade to a newer version but we want to migrate to OpenBSD 
 eventually. What tool(s) (that will work best with OpenBSD when we move 
 over) would be ideal to run on the same machine to translate pop3 and 
 pop3s or fetch the mail from Gordano then offer it via pop3s?

I use stunnel to wrap ssl around pop3. There's a package for OpenBSD.

http://www.stunnel.org/
http://www.openbsd.org/4.2_packages/i386/stunnel-4.20.tgz-long.html

Martin



Re: arp: attempt to overwrite entry for 10.0.0.2 on sis0 by 00:30:cd:00:00:78 on sis2

2008-01-16 Thread Martin Toft
On Wed, Jan 16, 2008 at 12:28:53PM +0200, Jussi Peltola wrote:
 On Wed, Jan 16, 2008 at 10:27:10PM +1300, [EMAIL PROTECTED] wrote:
  I seem to be getting a fair few of these on my firewall recently,
  looking like arp cache poisoning. it may be related to me losing
  service occasionally.
  
  I can't see how i could get pf to filter on what is effectively a
  lower level protocol.
  
  what other options do i have?
 
 Static ARP?

A smart way to do it, IMHO:

1. Create a file, e.g. /etc/arp.permanent, with lines like these:

10.0.0.2 01:23:45:67:89:ab permanent
10.0.0.3 12:34:56:78:9a:bc permanent
...

2. Add this somewhere in /etc/rc.local:

if [ -r /etc/arp.permanent ]; then
echo -n ' arp'; /usr/sbin/arp -F -f /etc/arp.permanent \
 /dev/null 21
fi

Remember to do something similar on the other hosts to protect both
ways.

Martin



Re: cwm: root window unavailable

2008-01-14 Thread Martin Toft
On Sat, Jan 12, 2008 at 08:32:50PM +0100, Martin Toft wrote:
 Hi,
 
 when starting X (and thereby cwm due to my .xinitrc), I get the
 following error:
 
 cwm: root window unavailable - perhaps another wm is running?
 
 It happens right after boot up, where I'm sure no other wm is running.
 My computer boots up without starting e.g. xdm and I type startx to
 launch X.

For the archive: I've solved the problem.

cwm echoes the error message above and terminates if xbindkeys is
running. My solution at the moment is to not use xbindkeys...

Martin



Re: cwm: root window unavailable

2008-01-14 Thread Martin Toft
On Mon, Jan 14, 2008 at 03:54:33PM +0100, Jan Stary wrote:
 On Jan 14 14:55:32, Martin Toft wrote:
  cwm echoes the error message above and terminates if xbindkeys is
  running. My solution at the moment is to not use xbindkeys...
 
 This is strange. I am running xbindkeys and it never bothered cwm (or
 any other WM). This is my ~/.xinitrc:
[snip]

After a bit of poking around, I've discovered that the error only occurs
if I define one or more short cuts using xbindkeys that use the same
keys as the short cuts in cwm do. I guess this behaviour should be
expected, even though I was confused about cwm's error message.

I had this short cut for starting firefox in .xbindkeysrc:

firefox
  control + alt + q

After replacing q with b (b for browser ;-)), xbindkeys and cwm are
friends again.

Jan: You ask how I start xbindkeys -- if you still want to know, my
.xinitrc is attached inline in my original mail.

Martin



Re: cwm: root window unavailable

2008-01-13 Thread Martin Toft
On Sat, Jan 12, 2008 at 08:32:50PM +0100, Martin Toft wrote:
 Hi,
 
 when starting X (and thereby cwm due to my .xinitrc), I get the
 following error:
 
 cwm: root window unavailable - perhaps another wm is running?
 
 It happens right after boot up, where I'm sure no other wm is running.
 My computer boots up without starting e.g. xdm and I type startx to
 launch X.

I can add that twm works fine (I've temporarily substituted exec cwm
with exec twm in my .xinitrc), so I guess the problem is attributeable
to cwm. Of course, it might also be attributeable to the user in front
of the computer -- me :-)

Martin



cwm: root window unavailable

2008-01-12 Thread Martin Toft
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi,

when starting X (and thereby cwm due to my .xinitrc), I get the
following error:

cwm: root window unavailable - perhaps another wm is running?

It happens right after boot up, where I'm sure no other wm is running.
My computer boots up without starting e.g. xdm and I type startx to
launch X.

The problem appeared after I updated my kernel, userland and xenocara
using CVS from a two week old -current to the latest -current. I built
everything approximately according to the instructions in release(8):

$ export [EMAIL PROTECTED]:/cvs
$ cd /usr/src
$ cvs -q -d$CVSROOT up -Pd
$ cd xenocara
$ cvs -q -d$CVSROOT up -Pd
$ cd /usr/ports
$ cvs -q -d$CVSROOT up -Pd
$ cd /usr/src/sys/arch/i386/conf
$ sudo config GENERIC
$ cd ../compile/GENERIC
$ sudo make depend
$ sudo make
$ sudo make install
$ sudo rm -rf /usr/obj/*
$ cd /usr/src
$ sudo make obj
$ cd etc
$ env DESTDIR=/ sudo make distrib-dirs
$ cd ..
$ sudo make build
(reboot)
$ cd /usr/src/xenocara
$ sudo make bootstrap
$ sudo make obj
$ sudo make build
$ sudo pkg_add -vui
(reboot)

I have tried to rebuild and reinstall cwm without luck:

$ cd /usr/src/xenocara/app/cwm
$ sudo make clean
$ sudo make
$ sudo make install

I have browsed the Web CVS, but, as far as I can see, none of the
commits to cwm during the last two weeks should cause the problem.

Do you have any suggestions for things that I can try to solve the
problem? I have attached my dmesg, Xorg.0.log, xorg.conf and .xinitrc
inline. I don't know why, but the X log doesn't mention the error
message that I see in the console (cwm: root window unavailable -
perhaps another wm is running?).

Thanks in advance.

Martin


Attachments:

dmesg:

OpenBSD 4.2-current (GENERIC) #0: Sat Jan 12 14:59:54 CET 2008
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) M processor 1600MHz (GenuineIntel 686-class) 1.60 
GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,TM,SBF,EST,TM2
real mem  = 535785472 (510MB)
avail mem = 510181376 (486MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 04/19/05, BIOS32 rev. 0 @ 0xfd750, SMBIOS 
rev. 2.33 @ 0xe0010 (61 entries)
bios0: vendor IBM version 1RETDKWW (3.16 ) date 04/19/2005
bios0: IBM 2373NG9
apm0 at bios0: Power Management spec V1.2
apm0: battery life expectancy 100%
apm0: AC on, battery charge high
acpi at bios0 function 0x0 not configured
pcibios0 at bios0: rev 2.1 @ 0xfd6e0/0x920
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdea0/272 (15 entries)
pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82371FB ISA rev 0x00)
pcibios0: PCI bus #6 is the last bus
bios0: ROM list: 0xc/0x1 0xdc000/0x4000! 0xe/0x1
cpu0 at mainbus0
cpu0: Enhanced SpeedStep 1600 MHz (1484 mV): speeds: 1600, 1400, 1200, 1000, 
800, 600 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 Intel 82855PM Host rev 0x03
agp0 at pchb0: aperture at 0xd000, size 0x1000
ppb0 at pci0 dev 1 function 0 Intel 82855PM AGP rev 0x03
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 ATI Radeon Mobility M9 Lf rev 0x02
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
uhci0 at pci0 dev 29 function 0 Intel 82801DB USB rev 0x01: irq 11
uhci1 at pci0 dev 29 function 1 Intel 82801DB USB rev 0x01: irq 11
uhci2 at pci0 dev 29 function 2 Intel 82801DB USB rev 0x01: irq 11
ehci0 at pci0 dev 29 function 7 Intel 82801DB USB rev 0x01: irq 11
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1
ppb1 at pci0 dev 30 function 0 Intel 82801BAM Hub-to-PCI rev 0x81
pci2 at ppb1 bus 2
cbb0 at pci2 dev 0 function 0 TI PCI4520 CardBus rev 0x01: irq 11
cbb1 at pci2 dev 0 function 1 TI PCI4520 CardBus rev 0x01: irq 11
em0 at pci2 dev 1 function 0 Intel PRO/1000MT (82540EP) rev 0x03: irq 11, 
address 00:11:25:44:6c:4a
ral0 at pci2 dev 2 function 0 Ralink RT2561S rev 0x00: irq 11, address 
00:12:0e:61:81:1c
ral0: MAC/BBP RT2561C, RF RT5225
cardslot0 at cbb0 slot 0 flags 0
cardbus0 at cardslot0: bus 3 device 0 cacheline 0x8, lattimer 0xb0
pcmcia0 at cardslot0
cardslot1 at cbb1 slot 1 flags 0
cardbus1 at cardslot1: bus 6 device 0 cacheline 0x8, lattimer 0xb0
pcmcia1 at cardslot1
ichpcib0 at pci0 dev 31 function 0 Intel 82801DBM LPC rev 0x01: 24-bit timer 
at 3579545Hz
pciide0 at pci0 dev 31 function 1 Intel 82801DBM IDE rev 0x01: DMA, channel 0 
configured to compatibility, channel 1 configured to compatibility
wd0 at pciide0 channel 0 drive 0: WDC WD1200BEVE-11UYT0
wd0: 16-sector PIO, LBA48, 114473MB, 234441648 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: HL-DT-ST, DVD-ROM GDR8083N, 0K04 SCSI0 5/cdrom 

Re: Mysterious transfer speed differences

2007-11-07 Thread Martin Toft
On Wed, Nov 07, 2007 at 09:18:21PM +, Tony Sarendal wrote:
[snip]
 What is the tcp windowsize of your machine ?
 OpenBSD in default install runs with window size of 16k, which in the
 aprox 40ms
 RTT seen in the trace about gives a theoretical max of ~400kByte/sec.
 
 If you increase that to the 64k your linux boxes probably run that
 would give ~ 1600kByte/sec.

I used the default window size of 16k, but in the future I'll certainly
choose something greater:

[EMAIL PROTECTED]:~$ sudo sysctl net.inet.tcp.recvspace=65536
net.inet.tcp.recvspace: 16384 - 65536
[EMAIL PROTECTED]:~$ sudo sysctl net.inet.tcp.sendspace=65536
net.inet.tcp.sendspace: 16384 - 65536
[EMAIL PROTECTED]:~$ wget -O /dev/null http://obsd.dk/50MB
--22:51:46--  http://obsd.dk/50MB
   = `/dev/null'
Resolving obsd.dk... 87.230.22.203
Connecting to obsd.dk|87.230.22.203|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 52,428,800 (50M) [text/plain]

100%[] 52,428,800 1.28M/sETA 
00:00

22:52:25 (1.27 MB/s) - `/dev/null' saved [52428800/52428800]

[EMAIL PROTECTED]:~$ sudo sysctl net.inet.tcp.recvspace=131072
net.inet.tcp.recvspace: 65536 - 131072
[EMAIL PROTECTED]:~$ sudo sysctl net.inet.tcp.sendspace=131072
net.inet.tcp.sendspace: 65536 - 131072
[EMAIL PROTECTED]:~$ wget -O /dev/null http://obsd.dk/50MB
--22:52:46--  http://obsd.dk/50MB
   = `/dev/null'
Resolving obsd.dk... 87.230.22.203
Connecting to obsd.dk|87.230.22.203|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 52,428,800 (50M) [text/plain]

100%[] 52,428,800 1.52M/sETA 
00:00

22:53:19 (1.50 MB/s) - `/dev/null' saved [52428800/52428800]

That solved the mystery :-)  Thank you very much.

Martin



Re: OpenBSD isakmpd and pf vs Cisco PIX or ASA

2007-11-04 Thread Martin Toft
On Mon, Nov 05, 2007 at 01:29:05AM +0100, Cabillot Julien wrote:
 Have you try openbsd 4.2 ? PF have been really improved in this
 release.

 On Nov 5, 2007 1:09 AM, Chris Bullock [EMAIL PROTECTED] wrote:

  We have been using OpenBSD my entire IT career, 5 1/2 years, I like
  the way its easy to roll out, configure and the cost the most.
 
  I would like an honest opinion of the group.  We have customers that
  maintain their own firewalls and VPNs and it appears to us that that
  those sites seem to transmit data quicker than the sites that we
  maintain with OpenBSD firewalls and VPNs, assuming identical
  bandwidth.  We have an OpenBSD VPN/firewall at our main site, so
  realistically, all of our data does transpose OpenBSD before it
  ultimately hits our network.
 
  My question is should I consider a non OpenBSD solutions, ie Cisco
  devs or should I attempt to tweak my existing boxes?
  Regards,
  Chris

Besides trying 4.2 (you should definitely do that), two other things
might be considered:

1. VPN is computationally heavy -- is your hardware fast enough?

2. Try playing with queueing in PF to handle some types of traffic
   faster than others. AFAIK, it is normal to find this kind of
   configuration in commercial, black-box solutions, disguised as buzzy
   slogans like Built-in QoS Super-Routing :-)

Just my two cents.

Martin



Re: Great 4.2 song!

2007-10-17 Thread Martin Toft
On Wed, Oct 17, 2007 at 11:17:13AM -0700, Florin Andrei wrote:
 Anybody can put a .flac or even .wav.gz copy for me on a server
 somewhere?  My CD is scratched about 2/3 into the song. :-(

Maybe that would violate the copyright on the song... but I don't
know...

The public mp3 and ogg versions are very high quality (in my ears). You
can download the 4.2 song here:

ftp://ftp.openbsd.org/pub/OpenBSD/songs/song42.ogg

Martin

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]



Re: OpenBSD current: XF4 or xenocara?

2007-10-16 Thread Martin Toft
On Sun, Oct 14, 2007 at 11:16:18PM +0200, Martin Toft wrote:
 I would like to upgrade from a snapshot to current. I know my way
 around kernel, userland and ports, but I'm a bit confused with regard
 to XF4 versus xenocara. I would like to try out xenocara -- should I
 follow section 5.3 in the FAQ
 (http://www.openbsd.org/faq/faq5.html#Bld) and checkout (using cvs)
 the XF4 module or should I checkout the xenocare module?

For the archives: release(8) answers my question. It appears to be the
most up-to-date building documentation.

Martin

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]



OpenBSD current: XF4 or xenocara?

2007-10-14 Thread Martin Toft
I would like to upgrade from a snapshot to current. I know my way around
kernel, userland and ports, but I'm a bit confused with regard to XF4
versus xenocara. I would like to try out xenocara -- should I follow
section 5.3 in the FAQ (http://www.openbsd.org/faq/faq5.html#Bld) and
checkout (using cvs) the XF4 module or should I checkout the xenocare
module?

Feel free to direct me to any information that I might have missed. I
have googled, visited www.xenocare.org and read mbalmer's article on
Undeadly: http://undeadly.org/cgi?action=articlesid=2006071016

Martin

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]



Re: OpenBSD current: XF4 or xenocara?

2007-10-14 Thread Martin Toft
On Sun, Oct 14, 2007 at 11:16:18PM +0200, Martin Toft wrote:
 I would like to upgrade from a snapshot to current. I know my way
 around kernel, userland and ports, but I'm a bit confused with regard
 to XF4 versus xenocara. I would like to try out xenocara -- should I
 follow section 5.3 in the FAQ
 (http://www.openbsd.org/faq/faq5.html#Bld) and checkout (using cvs)
 the XF4 module or should I checkout the xenocare module?

 Feel free to direct me to any information that I might have missed. I
 have googled, visited www.xenocare.org and read mbalmer's article on
 Undeadly: http://undeadly.org/cgi?action=articlesid=2006071016

I apologize for the xenocare typo, of course it should have been
xenocara everywhere.

Martin

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]



Re: OpenBSD current: XF4 or xenocara?

2007-10-14 Thread Martin Toft
On Mon, Oct 15, 2007 at 12:28:36AM +0300, Antti Harri wrote:
 On Sun, 14 Oct 2007, Martin Toft wrote:

  I would like to upgrade from a snapshot to current.

 Any particular reason? Why not just use the snapshots?

Even though I haven't created any patches for OpenBSD yet, I like to
have the possibility to hack on the system. I have also experienced
situations, where I simply thought Hmm, how do they do that? and it
was nice to just open the source code directly from my hard drive in my
favourite editor.

I don't run -current on servers or other critical boxes. This is my
laptop -- my development box. It's not important to me that it works all
the time.

  I would like to try out xenocara

 It's included in the snapshots.

  should I follow section 5.3 in the FAQ
  (http://www.openbsd.org/faq/faq5.html#Bld) and checkout (using cvs)
  the XF4 module or should I checkout the xenocare module?

 Xenocara.

Thanks for the answers.

Martin

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]



Re: Show your appreciation and get your 4.2 DVD

2007-09-06 Thread Martin Toft
On Thu, Sep 06, 2007 at 07:03:48PM -0400, Daniel Ouellet wrote:
 So, what are you waiting for...
 
 Go do it!

Done! :-)

Thanks for the reminder and thanks to all the hardworking developers.

Best regards,
Martin



Re: mc doesn't work on console

2007-07-26 Thread Martin Toft
On Thu, Jul 26, 2007 at 10:19:10AM +0200, Karel Kulhavy wrote:
 If I try to start mc (midnight commander) on a text console I get a
 black screen with one horizontal blue strip 1 char thick 2 chars from
 the bottom of the screen. It doesn't seem to work and behaves
 unpredictably. For example if I type ls, instead of a list of files
 I get the whole screen blue.  If I type reset, the terminal doesn't
 start looking like a terminal again.
 
 The screen is default VGA 80x25 after bootup.
 
 Are you experiencing the same problem? In xterm it works fine.
 
 CL

With TERM=xterm-color I experience what you describe.  With TERM=vt220
it works just fine (albeit in black and white).

Martin



Re: extracting iso

2007-07-19 Thread Martin Toft
On Thu, Jul 19, 2007 at 10:36:24AM +0200, Paul de Weerd wrote:
 On Thu, Jul 19, 2007 at 04:45:31PM +0800, Jay Jesus Amorin wrote:
  is there a tool/way to extract an iso file  to a directory?
 
   vnconfig -c /dev/svnd0 YOUR.ISO
   mount /dev/svnd0c /mnt
 
 Read the manpage for vnconfig(8) for more details.
 
 Paul 'WEiRD' de Weerd

It is also in the FAQ:

http://www.openbsd.org/faq/faq14.html#MountImage

Martin



Re: Very low sound

2007-07-09 Thread Martin Toft
FWIW, I used another computer, audacity and a piece of male-male
mini-jack cable to optimize the volumes on my ThinkPad T41 :-)  It
sounds silly, but it worked quite well.  It may not help you much,
though, if you can't turn up your volumes any further.

My audio card:

auich0 at pci0 dev 31 function 5 Intel 82801DB AC97 rev 0x01: irq 11, ICH4 
AC97

The resulting volumes:

outputs.master=255,255
inputs.dac=159,159

Martin



Re: Very low sound

2007-07-09 Thread Martin Toft
On Mon, Jul 09, 2007 at 09:26:08PM +, Jacob Meuser wrote:
 On Mon, Jul 09, 2007 at 08:10:51PM +0200, Martin Toft wrote:
  FWIW, I used another computer, audacity and a piece of male-male
  mini-jack cable to optimize the volumes on my ThinkPad T41 :-)  It
  sounds silly, but it worked quite well.  It may not help you much,
  though, if you can't turn up your volumes any further.
  
  My audio card:
  
  auich0 at pci0 dev 31 function 5 Intel 82801DB AC97 rev 0x01: irq 11, 
  ICH4 AC97
  
  The resulting volumes:
  
  outputs.master=255,255
  inputs.dac=159,159
 
 is that really the highest setting auich will allow for inputs.dac?

Yes. If I increase inputs.dac beyond this point, the music output gets
more and more distorted (confirmed by looking at the outputted sound
waves).  Above approx 175 the distortion becomes clear (at least in my
ears and with my particular equipment).

Martin



Re: Bad performance on ThinkPad T41 (-current checked out on July 1)

2007-07-03 Thread Martin Toft
On Tue, Jul 03, 2007 at 04:32:13PM +1000, Jonathan Gray wrote:
 Include the output of 'atactl wd0' perhaps you have something like
 caching turned off.  Also you can't hope for similiar results if you
 use different programs on both systems.

Disk I/O is the only test where I use different programs (hdparm and
dd), as I couldn't find a port/package of hdparm for OpenBSD.  Still, I
think the results are so different that they set of alarm bells --
8.5-8.7 MB/s vs. 45-46 MB/s.

Thanks for your interest my case.

Here is the output from atactl wd0. It looks like I have caching
turned on (read look-ahead and write cache):

Model: WDC WD1200BEVE-11UYT0, Rev: 01.04A01, Serial #:  WD-WXE407324062
Device type: ATA, fixed
Cylinders: 16383, heads: 16, sec/track: 63, total sectors: 234441648
Device capabilities:
ATA standby timer values
IORDY operation
IORDY disabling
Device supports the following standards:
ATA-1 ATA-2 ATA-3 ATA-4 ATA-5 ATA-6 ATA-7 
Master password revision code 0xfffe
Device supports the following command sets:
NOP command
READ BUFFER command
WRITE BUFFER command
Host Protected Area feature set
Read look-ahead
Write cache
Power Management feature set
Security Mode feature set
SMART feature set
Flush Cache Ext command
Flush Cache command
Device Configuration Overlay feature set
48bit address feature set
Automatic Acoustic Management feature set
Set Max security extension commands
Advanced Power Management feature set
DOWNLOAD MICROCODE command
IDLE IMMEDIATE with UNLOAD FEATURE
SMART self-test
SMART error logging
Device has enabled the following command sets/features:
NOP command
READ BUFFER command
WRITE BUFFER command
Host Protected Area feature set
Read look-ahead
Write cache
Power Management feature set
SMART feature set
Flush Cache Ext command
Flush Cache command
Device Configuration Overlay feature set
48bit address feature set
Advanced Power Management feature set
DOWNLOAD MICROCODE command

Martin



Re: Bad performance on ThinkPad T41 (-current checked out on July 1)

2007-07-03 Thread Martin Toft
On Tue, Jul 03, 2007 at 10:20:18PM +1000, Jonathan Gray wrote:
 On Tue, Jul 03, 2007 at 01:49:09PM +0200, Martin Toft wrote:
  Disk I/O is the only test where I use different programs (hdparm and
  dd), as I couldn't find a port/package of hdparm for OpenBSD.
  Still, I think the results are so different that they set off alarm
  bells -- 8.5-8.7 MB/s vs. 45-46 MB/s.
 
 Well at least use dd in both cases and use the same kinds of buffered
 or unbuffered devices/files.
 
 I imagine the results will be diferrent if you dd from a file to
 /dev/null for example.

You're absolutely right.  On OpenBSD, dd'ing a file actually gives an OK
result:

$ dd if=KNOPPIX_V5.0.1CD-2006-09-25-DA.iso of=/dev/null
1433280+0 records in
1433280+0 records out
733839360 bytes transferred in 22.626 secs (32432248 bytes/sec)

30.93 MB/s that is.  As I can't figure out how to mount my OpenBSD
partitions on KNOPPIX, I can't do the same test in that environment.
Thanks for pointing out that the previous comparison was unfair. 

It seems that I can't really be disappointed with my OpenBSD disk I/O
now, only the system's number crunching abilities.  I would like to
remind you, that I could squeeze a lot more CPU power out of the laptop
with OpenBSD -current about a month ago, so in some way, I suspect that
some crucial code has been changed in the meantime.

Martin



Bad performance on ThinkPad T41 (-current checked out on July 1)

2007-07-02 Thread Martin Toft
I have run -current on my ThinkPad T41 laptop for nearly a year, and
until now it has worked really well.  Recently I bought a new disk for
the machine and in connection with this I reinstalled OpenBSD using the
most recent snapshot and then updated the system to -current.  Unlike
before, I now experience really bad performance.  I have tried to
document this with a series of small tests.  The tests are run both on
OpenBSD 4.1-current (GENERIC), checked out and built on July 1, and on
KNOPPIX (V5.0.1CD-2006-09-25-DA), booted from CD.

If you have any suggestions for tuning the performance of my system,
please let me know.  Also, if the bad performance is due to some
mistakes that I've made, please throw some bricks at me.

You can browse the dmesgs and tests here: http://obsd.dk/bertha-tests
Direct link to OpenBSD dmesg:
http://obsd.dk/bertha-tests/dmesg.openbsd.txt
Direct link to KNOPPIX dmesg:
http://obsd.dk/bertha-tests/dmesg.knoppix.txt

Situation: The laptop is called bertha.  I have a normal PC called kaffe
that I use as remote end for the network benchmarks.  The two machines
are connected through a 100 Mbps switch.

Highlights:
1. When scp'ing the KNOPPIX .iso from kaffe to bertha:/dev/null running
   OpenBSD, the transfer rate is only 4.4 MB/s.  When running KNOPPIX,
   it's 9.9 MB/s.
2. Running OpenBSD, the disk's read rate is only 8.5-8.7 MB/s.  When
   running KNOPPIX, it's 45-46 MB/s.
3. The numbers from openssl speed when running KNOPPIX are 5-12 times
   higher than the numbers from running OpenBSD.
4. When doing a netcat TCP transfer at full speed (approx 11.6 MB/s)
   from kaffe:/dev/zero to bertha:/dev/null running OpenBSD, the CPU is
   only 18% idle. When running KNOPPIX, it's 77% idle.

Martin



No i partition when connecting camera to USB

2007-05-30 Thread Martin Toft
When connecting a Nikon Coolpix L10 camera to my laptop via USB, no i
partition shows up:

  $ sudo disklabel sd0
  disklabel: warning, DOS partition table with no valid OpenBSD partition
  # /dev/rsd0c:
  type: SCSI
  disk: SCSI disk
  label: DSC COOLPIX L10 
  flags:
  bytes/sector: 512
  sectors/track: 63
  tracks/cylinder: 255
  sectors/cylinder: 16065
  cylinders: 250
  total sectors: 4019904
  rpm: 3600
  interleave: 1
  trackskew: 0
  cylinderskew: 0
  headswitch: 0   # microseconds
  track-to-track seek: 0  # microseconds
  drivedata: 0 

  16 partitions:
  # sizeoffset  fstype [fsize bsize  cpg]
c:   4019904 0  unused  0 0  # Cyl 0 -   
250*

Obviously I cannot mount /dev/sd0i:

  $ sudo mount -t msdos /dev/sd0i /mnt/flashmem
  mount_msdos: /dev/sd0i on /mnt: Device not configured

fdisk shows:

  $ sudo fdisk sd0
  Disk: sd0   geometry: 250/255/63 [4019904 Sectors]
  Offset: 0   Signature: 0xAA55
   Starting   Ending   LBA Info:
   #: idC   H  S -C   H  S [   start:  size   ]
  
   0: 060   3 55 -  250  95 37 [ 243: 4022029 ] DOS  32MB  
   1: 000   0  0 -0   0  0 [   0:   0 ] unused  
   2: 000   0  0 -0   0  0 [   0:   0 ] unused  
   3: 000   0  0 -0   0  0 [   0:   0 ] unused  

Is there anything I can do to get the i partition to show up? I have no
problems using the camera in FreeBSD 6.2 and Windows XP.

dmesg follows (camera connect lines are at the bottom). Please ask if
you need me to supply more info.

Best regards,
Martin


OpenBSD 4.1-current (GENERIC) #2: Mon May 28 21:36:52 CEST 2007
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) M processor 1600MHz (GenuineIntel 686-class) 1.60 
GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,TM,SBF,EST,TM2
real mem  = 535785472 (510MB)
avail mem = 509038592 (485MB)
mainbus0 (root)
bios0 at mainbus0: AT/286+ BIOS, date 04/19/05, BIOS32 rev. 0 @ 0xfd750, SMBIOS 
rev. 2.33 @ 0xe0010 (61 entries)
bios0: IBM 2373NG9
apm0 at bios0: Power Management spec V1.2
apm0: battery life expectancy 100%
apm0: AC on, battery charge high
apm0: flags 30102 dobusy 0 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xfd6e0/0x920
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfdea0/272 (15 entries)
pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82371FB ISA rev 0x00)
pcibios0: PCI bus #6 is the last bus
bios0: ROM list: 0xc/0x1 0xd/0x1000 0xd1000/0x1000 0xdc000/0x4000! 
0xe/0x1
acpi at mainbus0 not configured
cpu0 at mainbus0
cpu0: Enhanced SpeedStep 1600 MHz (1484 mV): speeds: 1600, 1400, 1200, 1000, 
800, 600 MHz
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 Intel 82855PE Hub rev 0x03
ppb0 at pci0 dev 1 function 0 Intel 82855PE AGP rev 0x03
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 ATI Radeon Mobility M9 Lf rev 0x02
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
uhci0 at pci0 dev 29 function 0 Intel 82801DB USB rev 0x01: irq 11
uhci1 at pci0 dev 29 function 1 Intel 82801DB USB rev 0x01: irq 11
uhci2 at pci0 dev 29 function 2 Intel 82801DB USB rev 0x01: irq 11
ehci0 at pci0 dev 29 function 7 Intel 82801DB USB rev 0x01: irq 11
usb0 at ehci0: USB revision 2.0
uhub0 at usb0
uhub0: Intel EHCI root hub, rev 2.00/1.00, addr 1
uhub0: 6 ports with 6 removable, self powered
ppb1 at pci0 dev 30 function 0 Intel 82801BAM Hub-to-PCI rev 0x81
pci2 at ppb1 bus 2
cbb0 at pci2 dev 0 function 0 TI PCI4520 CardBus rev 0x01: irq 11
cbb1 at pci2 dev 0 function 1 TI PCI4520 CardBus rev 0x01: irq 11
em0 at pci2 dev 1 function 0 Intel PRO/1000MT (82540EP) rev 0x03: irq 11, 
address 00:11:25:44:6c:4a
ral0 at pci2 dev 2 function 0 Ralink RT2561S rev 0x00: irq 11, address 
00:12:0e:61:81:1c
ral0: MAC/BBP RT2561C, RF RT5225
cardslot0 at cbb0 slot 0 flags 0
cardbus0 at cardslot0: bus 3 device 0 cacheline 0x8, lattimer 0xb0
pcmcia0 at cardslot0
cardslot1 at cbb1 slot 1 flags 0
cardbus1 at cardslot1: bus 6 device 0 cacheline 0x8, lattimer 0xb0
pcmcia1 at cardslot1
ichpcib0 at pci0 dev 31 function 0 Intel 82801DBM LPC rev 0x01: 24-bit timer 
at 3579545Hz
pciide0 at pci0 dev 31 function 1 Intel 82801DBM IDE rev 0x01: DMA, channel 0 
configured to compatibility, channel 1 configured to compatibility
wd0 at pciide0 channel 0 drive 0: FUJITSU MHT2040AH
wd0: 16-sector PIO, LBA, 38154MB, 78140160 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: HL-DT-ST, DVD-ROM GDR8083N, 0K04 SCSI0 5/cdrom 
removable
cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
ichiic0 at pci0 dev 31 function 3 Intel 82801DB SMBus 

Re: No i partition when connecting camera to USB

2007-05-30 Thread Martin Toft
On Wed, May 30, 2007 at 05:09:55PM +0200, Martin Toft wrote:
[snip]
 umass0 detached

Ups... my cutting in the dmesg has been revealed. The above line is a
leftover from connecting/disconnecting the camera several times. NB: It
didn't help.

 umass0 at uhub2 port 1 configuration 1 interface 0
 umass0: NIKON NIKON DSC COOLPIX L10, rev 2.00/0.00, addr 2
 umass0: using ATAPI over Bulk-Only
 scsibus1 at umass0: 2 targets
 sd0 at scsibus1 targ 1 lun 0: NIKON, DSC COOLPIX L10,  SCSI0 0/direct 
 removable
 sd0: 1962MB, 250 cyl, 255 head, 63 sec, 512 bytes/sec, 4019904 sec total

Best regards,
Martin



Re: No i partition when connecting camera to USB

2007-05-30 Thread Martin Toft
On Wed, May 30, 2007 at 05:09:55PM +0200, Martin Toft wrote:
 When connecting a Nikon Coolpix L10 camera to my laptop via USB, no i
 partition shows up:
[snip]

Thanks to krw@, the cause of the problem has been found! Yay! :)

The msdos partition on my camera's flash memory extends past the end of
the device. OpenBSD therefore refused to make the fake i label, as this
condition is checked for in /usr/src/sys/arch/i386/i386/disksubr.c (line
193). After having commented out the check, rebuilt and installed a new
kernel, I can now use my camera with OpenBSD. disklabel now warns me:

  $ sudo disklabel sd0
  [snip]
  16 partitions:
  # sizeoffset  fstype [fsize bsize  cpg]
c:   4019904 0  unused  0 0  # Cyl 0 -   
250*
i:   4022029   243   MSDOS   # Cyl 0*-   
250*
  disklabel: partition i: partition extends past end of unit

The simple change:

--- /usr/src/sys/arch/i386/i386/disksubr.c.orig Wed May 30 21:19:37 2007
+++ /usr/src/sys/arch/i386/i386/disksubr.c  Wed May 30 21:23:54 2007
@@ -190,8 +190,6 @@
 
if (dp2-dp_typ == DOSPTYP_OPENBSD)
continue;
-   if (letoh32(dp2-dp_size)  lp-d_secperunit)
-   continue;
if (letoh32(dp2-dp_start)  lp-d_secperunit)
continue;
if (letoh32(dp2-dp_size) == 0)

I know it's not an optimal situation, but this is the way the in-camera
software formatted the flash memory.

Best regards,
Martin



Re: No i partition when connecting camera to USB

2007-05-30 Thread Martin Toft
On Wed, May 30, 2007 at 09:28:27PM +0200, Martin Toft wrote:
 I know it's not an optimal situation, but this is the way the
 in-camera software formatted the flash memory.

Discard that. The camera formats the flash memory just fine, and after
several attempts I still cannot reproduce the situation. I'm pretty sure
the bad partition was made in some approved way, though -- I didn't
create it by issuing creative numbers to fdisk!

Martin



Re: ssh tunnel device forwarding dies occasionally

2007-05-22 Thread Martin Toft
On Mon, May 21, 2007 at 12:50:05AM +0200, Martin Toft wrote:
 On Sun, May 20, 2007 at 12:02:11PM -0700, Myk Taylor wrote:
  I used to have this problem as well. It went away when I upgraded
  the remote endpoint (your AP, in this model) to OpenSSH_4.5p1.
 
 Okay. Thanks for the advice :)
 
 I'll try to test it during the next couple of days or so and report
 back here, if it also solves the problem for me. First, I need to
 figure out a setup to test it in, as 4.4p1 is the newest for OpenWrt
 at the moment.  I'm thinking in the lines of establishing the tunnel
 to a recent OpenBSD box on the AP's WAN-side (running an open WLAN
 for a while...).
 
 Martin

As promised I will report back...

My test was concluded after only 167MB of random data:

  $ scp testbox:testdata /dev/null
  testdata  83%  167MB   0.0KB/s -stalled -

Instead of my AP, I used an available FreeBSD box with OpenSSH 4.5p1 as
remote endpoint for the tunnel -- the problem didn't disappear. The
testbed:

Laptop  --WLAN--  AP  --LAN--  FreeBSD box  --LAN--  Internet

I think I will drop it now and look into IPSec or OpenVPN. That way I
will also avoid TCP-over-TCP problems. I am pretty sure that it isn't
TCP-over-TCP problems that I am fighting against in my ssh-based VPN
setup, as my ssh control connection doesn't die -- only the tunnel
device forwarding part. Not only are the connections through the tunnel
stalled, it is also not possible to establish new connections through
it.

Martin



Re: setting up ssh tunnel/vpn

2007-05-20 Thread Martin Toft
On Sun, May 20, 2007 at 07:19:50PM +0200, Steffen Sch|tz wrote:
 You can try man ssh and then search
 for the section SSH-BASED VIRTUAL PRIVATE NETWORKS

 Steffen

Nice section actually -- I just used the trial and error way of getting
it right, as I hadn't discovered that section of the manual.

As the OP now have got some useful answers, I'll diverge a bit from the
original subject. Darren, Jason, and Steffen: Do any of you use
ssh-based virtual private networks, and, if yes, what are your
experiences? I ask, as I have a problem with mine (ssh occasionally
stops forwarding tunnel traffic). I posted to misc@ about it yesterday:

http://marc.info/?l=openbsd-miscm=117962544826309w=2

Best regards,
Martin

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]



Re: ssh tunnel device forwarding dies occasionally

2007-05-20 Thread Martin Toft
On Sun, May 20, 2007 at 12:02:11PM -0700, Myk Taylor wrote:
 I used to have this problem as well. It went away when I upgraded the
 remote endpoint (your AP, in this model) to OpenSSH_4.5p1.

Okay. Thanks for the advice :)

I'll try to test it during the next couple of days or so and report back
here, if it also solves the problem for me. First, I need to figure out
a setup to test it in, as 4.4p1 is the newest for OpenWrt at the moment.
I'm thinking in the lines of establishing the tunnel to a recent OpenBSD
box on the AP's WAN-side (running an open WLAN for a while...).

Martin

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]



Re: www.openbsd.org (and vs openbsd.org)

2007-05-10 Thread Martin Toft
On Wed, May 09, 2007 at 06:33:19PM -0600, Theo de Raadt wrote:
  1. www.openbsd.org replies with Forbidden at the moment -- but I
  guess most people already know.

 www.openbsd.org is a mirror on a good network connection.

 at the moment it is recovering from having eaten itself.

Thanks for your answer.

Nobody answered my second question though :) Maybe nobody knows the
answer? :)
Summary: I was once told not to use openbsd.org; it was said that
www.openbsd.org was the only valid site (ignoring mirror sites). Is this
just bullshit?

Again, sorry for the noise (especially if it is just bullshit...). Now
that I've started a thread about it, I feel I have to complete the
quest.

Martin

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]



Re: www.openbsd.org (and vs openbsd.org)

2007-05-10 Thread Martin Toft
Thanks for all your answers. Sorry for creating all that fuss -- I
should have interpreted Theo's answer correctly.

Martin

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]



www.openbsd.org (and vs openbsd.org)

2007-05-09 Thread Martin Toft
Two small things:

1. www.openbsd.org replies with Forbidden at the moment -- but I guess
most people already know.

2. Long time ago I was told that I shouldn't use openbsd.org, as it
wasn't/isn't the official site. I was told to always use the www
subdomain. Maybe this was just some people pulling my chain, however, I
remember having discovered small differences between the two sites (for
more than a year ago, though). The two names point to different
addresses (this may mean nothing or everything). Please enlighten me :)

Sorry for the noise.

Martin

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]



Re: manual install mrtg

2007-04-02 Thread Martin Toft
On Tue, Apr 03, 2007 at 12:01:06AM +0800, [EMAIL PROTECTED] wrote:
 guys you have some idea where could i get on how to manully install
 mrtg?  except from google ;) coz i've been searching that already for
 several days but i have no luck. i found that tutorial once at
 bsdvault but that site is already not available.

pkg_add mrtg

Afterwards, read
http://oss.oetiker.ch/mrtg/doc/mrtg-unix-guide.en.html#configuration

/Martin

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]



Re: Router performance on OpenBSD and OpenBGPD

2007-02-24 Thread Martin Toft
On Thu, Feb 22, 2007 at 01:03:30PM -0800, Karsten McMinn wrote:
 On 2/21/07, Alex Thurlow [EMAIL PROTECTED] wrote:
  Oops, forgot that part.  At 325Mbps, we do about 60,000pps, so that
  puts us at about 360,000pps needed for 2Gbps.
 
 You'll have a hard time finding benches for that. To date, the best
 reported is 150k pps which was on the intel E7520 chipset. That was
 using em drivers. You're safest best for the most performance possible
 would likely be using the intel 5000 chipset (i.e. SuperMicro X7DB*
 motherboards) coupled with SysKonnect SK-9S* line of network cards.
 Its probably a safe bet that you'll be capable of 200K pps, but beyond
 that is anyones guess.

Assuming correct choice of hardware can get you half way to the goal,
wouldn't it be an idea to buy two or more machines and use CARP
loadbalancing? Or isn't this possible when we are talking BGP?

Regards,
Martin



Re: pf examples needed

2007-01-16 Thread Martin Toft
On Tue, Jan 16, 2007 at 09:32:02AM -0500, Charles Farinella wrote:
 I have an OpenBSD 3.9 machine with a public IP providing NAT and
 firewalling for our internal network.  It has 3 interfaces:
 
 dc0: public ip from internet X.X.X.25
 dc1: 192.168.100.x to internal network.  This works well.
 dc2: 192.168.200.x -- to Windows server.
 
 I need to allow public access to the Windows server connected to dc2
 (one port only).  Currently I have a private network address assigned
 to dc2 and a public one (X.X.X.26) assigned to the machine connected
 to it.

You should put a private 192.168.200.x IP address on the Windows box,
not a global X.X.X.26 address. Afterwards, do a simple port forwarding
(redirection in pf language) at the OpenBSD box, e.g.

rdr on dc0 proto tcp from any to (dc0) port $wbpp - $wbip
pass in on dc0 inet proto tcp from any to $wbip port $wbpp flags S/SA \
keep state

where $wbip is the private IP address of the Windows box and $wbpp is
the port you want to redirect to the Windows box (wbpp = 'Windows box
public port'). I guess the rules could be combined into a single 'rdr
pass' rule but I like it this way...

Remember to set up a default route on the Windows box (it should of
course use the OpenBSD box as its default route).

Regards,
Martin

 I need to know how to access the X.X.X.26 machine from the internet.
 My attempts at redirecting with pf rules haven't been successful so
 far, and I'm not sure that's how I should be approaching it.
 
 I've been playing with this for a few days, and am kind of lost, so
 any advice, pointers to docs, examples, etc. would be very much
 appreciated.
 
 thanks,
 
 --charlie



Re: pf examples needed

2007-01-16 Thread Martin Toft
On Tue, Jan 16, 2007 at 04:44:03PM +0100, Martin Toft wrote:
 On Tue, Jan 16, 2007 at 09:32:02AM -0500, Charles Farinella wrote:
  I have an OpenBSD 3.9 machine with a public IP providing NAT and
  firewalling for our internal network.  It has 3 interfaces:
  
  dc0: public ip from internet X.X.X.25 dc1: 192.168.100.x to internal
  network.  This works well.  dc2: 192.168.200.x -- to Windows
  server.
  
  I need to allow public access to the Windows server connected to dc2
  (one port only).  Currently I have a private network address
  assigned to dc2 and a public one (X.X.X.26) assigned to the machine
  connected to it.
 
 You should put a private 192.168.200.x IP address on the Windows box,
 not a global X.X.X.26 address. Afterwards, do a simple port forwarding
 (redirection in pf language) at the OpenBSD box, e.g.
 
 rdr on dc0 proto tcp from any to (dc0) port $wbpp - $wbip
 pass in on dc0 inet proto tcp from any to $wbip port $wbpp flags \
 S/SA keep state
 
 where $wbip is the private IP address of the Windows box and $wbpp is
 the port you want to redirect to the Windows box (wbpp = 'Windows box
 public port'). I guess the rules could be combined into a single 'rdr
 pass' rule but I like it this way...
 
 Remember to set up a default route on the Windows box (it should of
 course use the OpenBSD box as its default route).
 
 Regards,
 Martin
 
  I need to know how to access the X.X.X.26 machine from the internet.
  My attempts at redirecting with pf rules haven't been successful so
  far, and I'm not sure that's how I should be approaching it.

Hmm, sorry, I didn't take the above paragraph into account before. If
you decide to try my earlier advice, you should add X.X.X.26 as an alias
to the dc0 interface and replace (dc0) with X.X.X.26 in the rdr rule.

Regards,
Martin

  I've been playing with this for a few days, and am kind of lost, so
  any advice, pointers to docs, examples, etc. would be very much
  appreciated.
  
  thanks,
  
  --charlie



Re: pf examples needed

2007-01-16 Thread Martin Toft
On Tue, Jan 16, 2007 at 12:23:45PM -0500, Charles Farinella wrote:
 Thanks to all for the help.
 
 Martin Toft wrote:
 On Tue, Jan 16, 2007 at 09:32:02AM -0500, Charles Farinella wrote:
 I have an OpenBSD 3.9 machine with a public IP providing NAT and
 firewalling for our internal network.  It has 3 interfaces:
 
 dc0: public ip from internet X.X.X.25
 dc1: 192.168.100.x to internal network.  This works well.
 dc2: 192.168.200.x -- to Windows server.
 
 I need to allow public access to the Windows server connected to dc2
 (one port only).  Currently I have a private network address
 assigned to dc2 and a public one (X.X.X.26) assigned to the machine
 connected to it.
 
 You should put a private 192.168.200.x IP address on the Windows box,
 not a global X.X.X.26 address. Afterwards, do a simple port
 forwarding (redirection in pf language) at the OpenBSD box, e.g.
 
 I currently have it set up like this:
 
 dc0 = X.X.X.25
 dc2 = 192.168.200.254
 test_box = 192.168.25.123
 services = { ssh, smtp, http, https }
 
 I have the following in my pf.conf:
 rdr pass on dc0 proto tcp from any to X.X.X.25 port 80 -
 192.168.25.122 port 80
 
 If I ssh into the X.X.X.25 box I can access the test_box on port 80.
 I cannot access X.X.X.25 port 80 however.

You can't access X.X.X.25 port 80 from the OpenBSD box itself, as the
redirection happens on the dc0 interface. That's OK and shouldn't be
thought of as a problem.

 I've been using pfctl -f /etc/pf.conf to reload my rules.  I see no 
 reference in my pflog to any attempts to access port 80 on X.X.X.25.

That's probably because you don't log anything.

 Remember to set up a default route on the Windows box (it should of
 course use the OpenBSD box as its default route).
 
 Routing tables
 
[snip]
 
 Is this correct?

Sorry, but I can't answer that, as I can't figure out how your machines
are connected etc... I'm very confused about all your machines,
interfaces (dc0, dc1, dc2, ne3), and networks (192.168.100.x,
192.168.200.x, 192.168.25.x, X.X.X).

Regards,
Martin

 Thanks again.
 
 --charlie



Re: Merchandise idea: OpenBSD mug

2007-01-14 Thread Martin Toft
On Sat, Jan 13, 2007 at 10:23:11PM -0600, Samurai Chef wrote:
 There has been quite a bit of response so far, that's very
 encouraging.  Thank you to all who have responded so far.

 Here is what I am planning on ordering: white coffee cups with puffy
 and OpenBSD logo wraped around the cup.  planning on using the logo
 from http://www.openbsd.org/art/puffy/puflogh1000X248.gif.

Nice, sign me up for one of those.

 pint glasses with the wirehead puffy logo from
 http://www.openbsd.org/images/tshirt-23.gif

 if sales go well with those two items, i will expand the merchandise
 selections.

 portions of the sales will be donated back to the project.

 if anyone has information about the artist for these logos, please
 forward that information as I need higher quality images for good
 imprinting.

 thanks again everyone.

The same to you.

Regards,
Martin

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]



Re: Merchandise idea: OpenBSD mug

2007-01-14 Thread Martin Toft
On Mon, Jan 15, 2007 at 01:11:24AM +0100, Marc Balmer wrote:
 How about thinking if he is allowed to use the (copyrighted) artwork
 for commercial use?

 Did he get the permissions? Does he have an OK from the copyright
 owner to market these mugs using a copyrighted artwork?

All those questions are the reason why I would have loved the project
itself to take action and sell mugs :)

Regards,
Martin

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]



Merchandise idea: OpenBSD mug

2007-01-12 Thread Martin Toft
Hi,

I think it would be awesome, if it was possible to buy an OpenBSD mug
from the online ordering system at www.openbsd.org. I would definitely
buy one together with the 4.1 cd-set.

I imagine the mug with Cartoon Puffy on the one side and the OpenBSD
logo on the other side (see http://www.openbsd.org/art4.html if you
don't know what I'm babbling about). Of course, that's just how I
imagine the mug :)

Yes, I know places like cafepress, thinkgeek, and spreadshirt.de, and
please, you should only take this mail for what it is - a merchandise
idea! I don't need people telling me to go to one of the other places to
design my own mug.

Regards,
Martin

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]



Re: PF state problem

2006-11-12 Thread Martin Toft

Stuart Henderson wrote:

On 2006/11/12 11:24, Gerald Holl wrote:

pass in on $ext_if proto tcp to ($ext_if) port 22
pass out on $ext_if proto { tcp, udp, icmp } from any to any modulate state

So long, from two of my PCs outside the network I can connect to the ssh 
service but from exactly one PC it does not work because I get no 
response back from the ssh server. If I add 'keep state' to the pass in 
rule it works.
Why do I need 'keep state' although the pass out rule already defines 
'modulate state'? As I mentioned above: it works for all of my PCs 
outside except for one.


modulate state is creating state from a packet after the connection
setup, which doesn't have all the relevant information to validate the
sequence numbers correctly. You should use flags S/SA keep state or
...modulate state on all your rules unless there's a special reason
to do otherwise (quite unlikely).


Since the OP is using 4.0, this might be of interest: flags S/SA keep 
state is default [0].


[0] http://archives.neohapsis.com/archives/openbsd/2006-10/0549.html

Regards,
Martin



Re: PF state problem

2006-11-12 Thread Martin Toft

Martin Toft wrote:
Since the OP is using 4.0, this might be of interest: flags S/SA keep 
state is default [0].


[0] http://archives.neohapsis.com/archives/openbsd/2006-10/0549.html


Hmm, sorry, I didn't read it right. It's only in -current.

Regards,
Martin



  1   2   >