Re: [semi-OT] Can anyone recommend an OpenBSD-compatible colour laser printer?

2009-04-05 Thread marrandy
On Sunday 05 April 2009 14:11:24 STeve Andre' wrote:
 On Sunday 05 April 2009 14:02:39 Marc Balmer wrote:
  Am 05.04.2009 um 19:44 schrieb ropers:

 
  we use some quite cheap HP printers with OpenBSD.  Since you have an
  aversion
  to HP, I did not look up the number.
 
  They work nicely with LaTeX and cost in the $300-400 range I've been
  told.

 Marc, I'd appreciate the model number(s) of the HP printers.  I'm getting
 ready to make some dual-boot systems, and these folks all want printers.

 Seems that this might make a good faq entry, if it isn't already there(?).

 Thanks,

 --STeve Andre'

HP have been actively working on drivers for a decade.

All the one's I have ever tried on Linux have worked fine.

I had a HP-Office Jet Rx40i and now a HP color laserjet 2840.

I use/d them for printing, scanning and now faxing.

They work great.

Install the HPLIP Device Manager.

You can find printer support info on HP's here.

http://hplipopensource.com/hplip-web/index.html



Re: Yahoo! mail and OpenBSD greylisting

2008-12-22 Thread marrandy
On Sunday 21 December 2008 23:30:49 Girish Venkatachalam wrote:
 Hello folks,

 I am unable to manually whitelist yahoo! mail sender IP addresses since
 yahoo! does not play well with greylisting.

 However I can whitelist gmail, aol, hotmail, rediff and so on since they
 publish SPF records.

 Is there a way to determine the IP addresses yahoo! uses for sending
 mail?

 I can think of possibly modifying the greyscanner perl script to look
 for patterns and whitelist.

 Any ideas?

 Thanks.

 -Girish

66.94.237.0/24 # Yahoo Groups servers (common pool, no retry)
66.100.210.82 # Groupwise?
66.135.209.0/24 # Ebay (for time critical alerts)
66.135.197.0/24 # Ebay (common pool)
66.162.216.166 # Groupwise?
66.218.66.0/24 # Yahoo Groups servers (common pool, no retry)
66.218.67.0/24 # Yahoo Groups servers (common pool, no retry)
66.218.69.0/24 # Yahoo Groups servers (common pool, no retry)



Re: Yahoo! mail and OpenBSD greylisting

2008-12-22 Thread marrandy
On Monday 22 December 2008 04:45:34 you wrote:
 On 2008-12-22, Girish Venkatachalam girishvenkatacha...@gmail.com wrote:
  However I can whitelist gmail, aol, hotmail, rediff and so on since they
  publish SPF records.
 
  Is there a way to determine the IP addresses yahoo! uses for sending
  mail?

 dnswl.org; either use the whole list, or grep out yahoo's addresses.


Yes, that's a really good one - thanks for the info



PF and the old SIP issue

2008-11-19 Thread marrandy
First, I've googled, searched the logs, found some small SIP stuff etc. but am 
interested in peoples opinions on successfull larger scale SIP use via PF.

Intro.

OpenBSD PF firewall consisting of ext, DMZ, internal/private interfaces. 
VOIP server sitting in the DMZ.
Multiple (pick any number, 5, 10, 100) SIP phones in the private LAN.
Multiple mobile (pick any number, 5, 10, 100) SIP phones anywhere in the USA.
(NOTE: Mobile means they are carried and plugged in anywhere, but are 
programmed with the static IP gateway address.

How would you create a working pf.conf file so everything  'just works'.

I have found this to be very problematic.

Any ideas ?

Regards...Martin



Re: PF and the old SIP issue

2008-11-19 Thread marrandy
On Wednesday 19 November 2008 09:07:31 you wrote:
  OpenBSD PF firewall consisting of ext, DMZ, internal/private interfaces.
  VOIP server sitting in the DMZ.
  Multiple (pick any number, 5, 10, 100) SIP phones in the private LAN.
  Multiple mobile (pick any number, 5, 10, 100) SIP phones anywhere in the
  USA. (NOTE: Mobile means they are carried and plugged in anywhere, but
  are programmed with the static IP gateway address.
 
  How would you create a working pf.conf file so everything  'just works'.


Here we go


 What do you mean exactly by just works? Are the external phones
 supposed to talk with the internal phones? 


Not directly, they go through the server

 Do the internal phones have 
 public or private addresses? 


Private interface so private address

 Are you using RTP/RTCP for audio? Are the 
 audio streams phone-to-phone or are you using media anchoring on your
 VoIP server? 

The server is currently in the private lan, but if we wan't to take outside 
calls, we need to move it into the DMZ.

 What VoIP server are you using? 

Asterisk, test server


 Does it use TCP and/or  
 UDP for SIP signalling? What is the port range used on the SIP phones
 for RTP/RTCP?

Standard ports.  The SIP phones register with the asterisk box. 

 There's a lot more info required before one can draw up some
 appropriate pf configuration file. Also, AFAIK there is currently now
 ftp-proxy-like application available for SIP for pf, so you won't be
 able to use pf as an ALG or dynamic firewall for your SIP traffic.
 You'll have to determine all your possible call flows, analyze the
 potential ports used (SIP and RTP/RTCP) for each of these call flows,
 and then prepare a pf.conf that caters to all of these.

Sounds like a lot of work.  I need to go and hit the asterisk list.

I'll let you know if I find anything out.



Re: PF and the old SIP issue

2008-11-19 Thread marrandy
On Wednesday 19 November 2008 11:24:39 Mikel Lindsaar wrote:

 FWIW I run about 8 asterisk servers behind openbsd firewalls.  I have found
 the most non-problematic way to run them has been by using the asterisk
 servers as a SIP proxy for your SIP clients and making sure that
 canreinvite in asterisk is turned off, this increases your load on the
 asterisk server, but I haven't found that to be a real problem.

SNIP

 YMMV and of course... tweak it to your own requirements.

 Mikel


Hi Mike.

Great..thanks.

Been out of IT for a year or so pretty much.  Trying to get back in and up to 
speed again.  I'm looking at extra sources of info now.

Will let you know once I put the asterisk in the DMZ, the private LAN SIP 
phones talking to each other and via the asterisk, each other, then look at 
the external SIP phones.

Thanks again.



Re: More ammunition for the Blob fight

2006-10-17 Thread marrandy
On Monday 16 October 2006 18:48, you wrote:
 On Monday 16 October 2006 17:13, you wrote:
  Linux: NVIDIA Binary Graphics Driver Exploit
 
  http://kerneltrap.org/node/7228
  http://www.rapid7.com/advisories/R7-0025.jsp

 None of this is new; here's what(apprently)  Linus Torvalds said back in
 1999:

 Basically, I want people to know that when they use binary-only modules,
 it's THEIR problem. I want people to know that in their bones, and I want
 it shouted out from the rooftops. I want people to wake up in a cold sweat
 every once in a while if they use binary-only modules.

Here's the link

http://lwn.net/1999/0211/a/lt-binary.html

-- 
Regards...Martin



Re: More ammunition for the Blob fight

2006-10-17 Thread marrandy
On Tuesday 17 October 2006 09:49, bofh wrote:

  Here's the link
 
  http://lwn.net/1999/0211/a/lt-binary.html

 Hmm...  The only thing I saw was that he expects to get to kernel version
 5.6.71 in two years?  8-)

What are you expecting... a word for word quote of the OpenBSD point of view.

This is back in 1999 and although Linus allowed them, it is obvious he didn't 
like them and didn't support them for the obvious reasons and stated some 
issues in no uncertain terms.   The sooner all the open source people get on 
the same page, instead of pulling in different directions over the blob/api 
documentatiion issue, the better.

You didn't see:-

I _refuse_ to even consider tying my hands over some binary-only module

extra layers decrease readability, and sometimes make for performance
   problems.  The readability thing is actually the larger beef I had
   with this: I just don't want to see drivers start using some strange
   wrapper format that has absolutely nothing to do with how they work

I _want_ people to expect that interfaces change. I _want_ people to
   know that binary-only modules cannot be used from release to release.
   I want people to be really really REALLY aware of the fact that when
   they use a binary-only module, they tie their hands

Basically, I want people to know that when they use binary-only modules,
it's THEIR problem.  I want people to know that in their bones, and I
want it shouted out from the rooftops.  I want people to wake up in a
cold sweat every once in a while if they use binary-only modules

I refuse to be at the mercy of any binary-only module

Basically, blobs (binaries) are bad.  They go against the whole  'open source'  
philosophy (being binaries) there is no open source.  They may be a necessary 
evil until the API docs are opened up, but they are still evil.

-- 
Regards...Martin



Re: More ammunition for the Blob fight

2006-10-16 Thread marrandy
On Monday 16 October 2006 17:13, you wrote:
 Linux: NVIDIA Binary Graphics Driver Exploit

 http://kerneltrap.org/node/7228
 http://www.rapid7.com/advisories/R7-0025.jsp


None of this is new; here's what(apprently)  Linus Torvalds said back in 1999:

Basically, I want people to know that when they use binary-only modules, it's 
THEIR problem. I want people to know that in their bones, and I want it 
shouted out from the rooftops. I want people to wake up in a cold sweat every 
once in a while if they use binary-only modules. 

-- 
Regards...Martin



Intel and Licensing

2006-10-02 Thread marrandy
Dear Mr. Awad.

It has come to my attention, yet again, that intel, despite its claims of 
being Open Source friendly, is again failing to produce pertient API 
information for its products and restrictive licencing, terms and conditions.
This goes against the whole priciple of open source in all its forms and 
unfortunately, I no longer purchase your products or recommend them to anyone 
else and will continue to use other suppliers until you change this policy.

As you are probably aware, there are several open source products e.g. Linux, 
OpenBSD, FreeBSD, NetBSD and others.  Further, there are different licenses 
ie. BSD, Apache, GPL etc.
Despite the different licencing policies, all the open source projects need  
the same thing.

The key component is that source should be open.  If you can't provide source 
then API's have to be open (no licencing, agreements, restrictions etc.) so 
they can write efficient and reliable drivers for your products, which I 
should note, is a free service to your company.

In the case of OpenBSD, one of the most efficient and secure OS's, below is an 
outake from their policy page, which you should take the time to read in 
full.
http://www.openbsd.org/policy.html

Because the OpenBSD copyright imposes no conditions beyond those imposed by 
the Berkeley copyright, OpenBSD can hope to share the same wide distribution 
and applicability as the Berkeley distributions. It follows however, that 
OpenBSD cannot include material which includes copyrights which are more 
restrictive than the Berkeley copyright, or must relegate this material to a 
secondary status, i.e. OpenBSD as a whole is freely redistributable, but some 
optional components may not be.

A number of applications have been culled from OpenBSD because of licensing 
issues.

A lot of people on different projects do a lot of work getting intel products 
to work, for very little thanks and usually no money.  Do NOT make it harder 
for them than it already is and do NOT squander the good will of the open 
source community as they are IT professionals with a large networking base 
and you will rapidly find your products being rejected at companies and data 
centers, which is something neither you, your management or your shareholders 
will appreciate in the long run.

I hope you, as a company, will take the time to learn what the open source 
community needs and expects, and will create a consistent and open framework 
that meets ALL their needs.

When this happens, I will gladly reconsider the purchase and recommendation of 
intel products.

-- 
Regards...Martin



Re: Open source support for Intel wifi chipsets

2006-10-01 Thread marrandy
On Sunday 01 October 2006 12:14, Theo de Raadt wrote:
 I believe that [EMAIL PROTECTED] is another person who
 is involved.

 These people will try to tell you that there are parts of the
 firmware that Intel does not own.  They'll say that positively about
 two of the firmwares, and want you believe that is the case for all
 three.  Then you can read the distribution agreement that they want
 open source vendors to sign, because I just can't figure out how to
 tie Intel does not own all of the stuff in the firmware to we
 must take these specific rights that we list away from you.


Hello Theo (and all the list users).

You know, this has been an ongoing issue for years.  Keeps on coming up on the 
list every 3 or 4 months and the result is the same.

As far as I am concerned, yes we can email and complain, but they are so 
arrogant that nothing will change.

Why don'y we just :-

1)   Not buy any more intel products

2)   List products from manufacturers that do help us

3)   Tell everyone ref 1) and 2)

4)   Instead of continuing emailing intel, email all the other opensource 
projects sharing the experience and suggest to them that they follow the same 
as above ie. 1), 2) and 3).

5)  yes, people can still email intel, but just like adaptek, personally, I 
think it's a waste of time.  they are too big and too  'full of themselves'  
to care.  There are plenty of competing products around.  Why should we beat 
ourselves up on this.

I'm a consumer (whether it is business or personal is irrelevent).  I pay for 
products.  I can take my business, and my money, elsewhere.

I want to know from the OpenBSD community, which products are best supported, 
which are the best (less cpu load, more bandwidth ie. more efficient etc.).

I am really not interested in intel, adaptek and their games anymore.

I am interested in SATA syatems for low-level use and SAS (Serial attached 
SCSI) for high level use using OpenBSD and other open systems so I want to 
know about good and bad motherboards, RAID cards, hard drives etc.

I'm surprised the drivers haven't been withdrawn from the CVS yet.

Time to move on


-- 
Regards...Martin



Re: Serial ATA raid

2006-09-29 Thread marrandy
On Friday 29 September 2006 09:09, Francois Slabbert wrote:
 hi misc,

 i'm looking to purchase a sata raid controller, and have shortlisted it
 down to two models for no particular reason other than the controllers
 being supported by openbsd, being 'afordable',compatible with the
 equipment i already have and available in a third world country. the two
 options i have is the intel srcs16 and the lsi megaraid sata-6, is there
 a clear winner between the two with regards to using it on openbsd - the
 array will be used for the archiving 'valuable' data.

 thanks in advance


On a similar thought, what are the recomended SAS (serial attached SCSI) 
cards/manufacturers for OpenBSD ?  Still LSI ?

Anyone want to share their experience with motherboards and systems with SAS ?

-- 
Regards...Martin



Re: Forum-Software, good and secure, on OpenBSD systems?

2006-09-14 Thread marrandy
On Tuesday 12 September 2006 21:49, Don Koch wrote:
 On Tue, 12 Sep 2006 23:39:53 +

 Deanna Phillips wrote:
  Michael Schmidt writes:
   which experiences or what knowledge are/is available
   concerning good and secure forum-software known to run under
   OpenBSD?  I am interested in feedback on this.

Hi.

Been away so I'm coming into this long thread late.

The Two I have heard most about from a good security record are :-

webgui - has 5 secunia advisories the last Two years.

CPG Dragonfly has 4 secunia advisories the last Two years.

You might want to try one of them.

phpbb in comparison has 35 secunia advisories the last Two years.

I haven't used either yet.  I would be interested in hearing from other people 
about good secure CMS's, as I will likely be needing one at the end of the 
year.  

-- 
Regards...Martin



Re: Looking for general info on OpenBSD

2006-08-24 Thread marrandy
On Thursday 24 August 2006 10:51, you wrote:
  And dammit don't top post. You're using outlook aren't you? God, fuck
  outlook. Fuck outlook and it's shitty non-standard look let's pretend
  the reply button is the forward button design. And then that forces
  you into top posting because otherwise it looks like the way the
  message looks now.
 
  Have a nice day,
  -Nick


It has nothing to do with outlook per se, it's user education and discipline.
(I usually (unless company policy forces me to) use something else when in 
windows ie. pagasus or eudora).
If you think about it, it's easier and more intuitive to go down the page from 
the top than from the bottom upwards.  People who top post, also fail to edit 
when they bottom post.

Don't use/ditch any mailer that doesn't quote properly.

Use the down arrow, drag, highlight and delete extraneous text.  Add  SNIP 
appropriately, if you want to warn people that text has been deleted or page 
down if it is short.

Intersperse comments if you want to make multiple answers to questions or 
comments, if not bottom post.

Remove signatures and footers.

Actually, starting at the top makes sense.  Unfortunately, people are too lazy 
to edit.  
(or claim they are to busy)

 I'm forced to use Outlook at work (don't get me started, I hate it), as
 I'm sure a few others here are... I've tried a few crappy add-ons that
 will reverse the top-posting nature of Outlook, and they have all
 failed. If anyone knows an actual working tool to fix this crappy nature
 of Outlook I would be most appreciative.

 Dan Farrell
 Applied Innovations
 [EMAIL PROTECTED]

-- 
Regards...Martin



Re: Looking for general info on OpenBSD

2006-08-24 Thread marrandy
On Thursday 24 August 2006 12:48, you wrote:


 Would this not qualify as a signature and/or footer?

 Other than that, I agree with Marco's comment.

I only bothered to respond with some comments and advice as this issue keeps 
coming up every few months.

I left it in on purpose.  Are you always incredibly anal.

Don't post to me directly.  I am on the list.

-- 
Regards...Martin



Re: News From HiFn

2006-06-29 Thread marrandy
On Thursday 29 June 2006 18:45, you wrote:
 Howdy misc@

 Though I stayed out of the last public fiasco regarding HiFn here on the
 misc@ list, I privately contacted the people I know at the company. I
 didn't reply just to Hank Cohen who posted here on misc@ but I also
 included the VP of engineering (Russ Dietz), the CEO (Chris Kebner) and
 the VP of marketing (Tom Moore).

 I just got a call this afternoon from Tom Moore to let me know they've
 set up an anon FTP site (no registration) with their documentation:

 ftp://ftp.hifn.com


When I click on the .txt or .doc files, it throws up a username/password 
requester.

Perhaps you can tell them about that.
-- 
Regards...Martin



Re: News From HiFn

2006-06-29 Thread marrandy
On Thursday 29 June 2006 20:35, you wrote:
 On Fri, 30 Jun 2006 02:15:17 +0200, Tobias Ulmer [EMAIL PROTECTED]

 wrote:
 On Thu, Jun 29, 2006 at 07:57:41PM -0400, marrandy wrote:
  On Thursday 29 June 2006 18:45, you wrote:
 
  When I click on the .txt or .doc files, it throws up a username/password
  requester.
 
  Perhaps you can tell them about that.
  --
  Regards...Martin
 
 I can download stuff just fine with ftp -a ftp.hifn.com
 
 Probably your anonymous password didn't include a '@' sign? Some ftp
 servers reject these.
 
 Tobias

 Most all anon FTP servers ask for an email address as the password for
 the anonymous account and many check the password input to make sure
 it's a valid email format, namely including an @ and a dot.

 JCR


I was using firefox and also tried konqueror.

Just tried it again and it worked fine in both browsers.

???

Don't know what changed.


-- 
Regards...Martin



Re: soekris

2006-03-23 Thread marrandy
On Thursday 23 March 2006 13:08, you wrote:

SNIP

 Other than that, my system performs very well on a small lan and I am
 very happy.  Here is my df:

 Filesystem SizeUsed   Avail Capacity  Mounted on
 /dev/wd0a  118M   21.7M   90.0M19%/
 mfs:30147  7.8M100K7.3M 1%/tmp

 Notice I am using a memory/RAM filesystem for any writing it needs to do.


Why isn't /var listed in MFS ?

Logs etc

Regards...Martin



Re: soekris

2006-03-23 Thread marrandy
On Thursday 23 March 2006 15:41, you wrote:

  Why isn't /var listed in MFS ?
 
  Logs etc

 # ls -lh /var
 lrwxr-xr-x  1 root  wheel 8B Dec 16 21:28 /var - /tmp/var

I was wondering if you had done something like that.

Hows it holding up with only 7.8MB for both /tmp and /var ?

Any crashes or anything ?

Regards...Martin



VIA fanless 1GHz

2006-03-01 Thread marrandy
Has anyone tried VIA Eden fanless at 1GHz yet or the new Eden-N or NL (Luke 
series) yet ?  If so, how did they perform.

Also I have found a dual, eden fanless 1GHz.

http://www.crn.com/sections/testcenter/whitebox/whitebox.jhtml?articleId=173402172



Re: VIA fanless 1GHz

2006-03-01 Thread marrandy
On Wednesday 01 March 2006 15:33, you wrote:
 Has anyone tried VIA Eden fanless at 1GHz yet or the new Eden-N or NL (Luke
 series) yet ?  If so, how did they perform.

 Also I have found a dual, eden fanless 1GHz.

 http://www.crn.com/sections/testcenter/whitebox/whitebox.jhtml?articleId=17
3402172

I doubt there are boards out for the new 1.5GHz fanless yet though.  But if 
you don't ask...

http://www.itnewsonline.com/showstory.php?storyid=2440scatid=3contid=2



Re: VIA fanless 1GHz

2006-03-01 Thread marrandy
On Wednesday 01 March 2006 16:28, Martin Schrvder wrote:
 On 2006-03-01 15:33:21 -0500, marrandy wrote:
  Also I have found a dual, eden fanless 1GHz.

  ^^^
  Sure?


That's what it says

The VT310-DP supports the x86 architecture and is powered by two 1GHz VIA 
Eden-N processors. The board supports up to 2 Gbytes of memory in two slots. 
 The VT310-DP motherboard uses very little power. Combined, the two 1GHz VIA 
Eden-N processors draw a maximum of 14 watts.


 Onboard I/O Connectors 1 4-pin CPU fan and 2 3-pin chassis fan

 http://www.via.com.tw/en/products/mainboards/mini_itx/vt_310dp/index.jsp

It says it on your link as well

The VT-310DP Mini-ITX Board boasts dual VIA Eden-N NanoBGA Processors



 3 NICs :-)

 Best
 Martin



Re: VIA fanless 1GHz

2006-03-01 Thread marrandy
On Wednesday 01 March 2006 16:28, Martin Schrvder wrote:
 On 2006-03-01 15:33:21 -0500, marrandy wrote:
  Also I have found a dual, eden fanless 1GHz.

  ^^^
  Sure?


Or were you talking about the fanless part.

With power consumption so low, the need for cooling fans is eliminated, 


 Onboard I/O Connectors 1 4-pin CPU fan and 2 3-pin chassis fan

 http://www.via.com.tw/en/products/mainboards/mini_itx/vt_310dp/index.jsp

the VIA VT310 DP enables the development of a wealth of high density, low 
power consumption, fanless, and embedded applications

 3 NICs :-)

 Best
 Martin



Re: VIA fanless 1GHz

2006-03-01 Thread marrandy
On Wednesday 01 March 2006 16:33, Martin Schrvder wrote:
 http://www.epiacenter.com/modules.php?name=Contentpa=showpagepid=82

 has a review with pictures (note the fan) and benchmarks.

I don't see one.  Just a large black clip-on heatsink.  Fans have a power 
connector and I don't see one going off to the motherboard.

It also says

the VIA VT310 DP enables the development of a wealth of high density, low 
power consumption, fanless, and embedded applications

 Best
 Martin



Re: VIA fanless 1GHz

2006-03-01 Thread marrandy
On Wednesday 01 March 2006 18:30, you wrote:

 Look at page 3.  Also note the mobo comes with fan pins labelled cpu
 fan.  Perhaps with a large enough, or well enough desinged heat sink, or
 if the cpu's are clocked down far enough, the fan isn't necessary.

Just read the whole article...hmm...interesting

http://www.epiacenter.com/pictures/news/2006/epia_cn.jpg

Now that is a heatsink.

I'm looking for a fanless VIA with the Padlock crypto system and was hoping 
someone may already have practical experience with recent versions.

Regards...Martin



LE-564 embedded single board computer (Via EDEN)

2006-01-23 Thread marrandy
Treid it with a Hitachi micro-drive (Compact Flash fitting).  It works but I 
see pciide errors listed below.  Is this fixable ?
I have seen the FAQ entry on pciide, but obviously, it isn't a cable issue as 
there isn't one.
NOTE:  pciide0:0:0: bus-master DMA error: missing interrupt, status=0x21

Missing interrupt ?

---

OpenBSD 3.8 (GENERIC) #138: Sat Sep 10 15:41:37 MDT 2005
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: VIA Samuel 2 (CentaurHauls 686-class) 533 MHz
cpu0: FPU,DE,TSC,MSR,MTRR,PGE,MMX
real mem  = 259629056 (253544K)
avail mem = 230023168 (224632K)
using 3194 buffers containing 13082624 bytes (12776K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(51) BIOS, date 11/24/03, BIOS32 rev. 0 @ 
0xfb590
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
apm0: flags 70102 dobusy 1 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xf/0xdef4
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfde50/160 (8 entries)
pcibios0: PCI Exclusive IRQs: 5 9 10 11
pcibios0: PCI Interrupt Router at 000:07:0 (VIA VT82C596A ISA rev 
0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc/0xc000
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 VIA VT8601 PCI rev 0x05
ppb0 at pci0 dev 1 function 0 VIA VT82C601 AGP rev 0x00
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 Trident CyberBlade i1 rev 0x6a
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
pcib0 at pci0 dev 7 function 0 VIA VT82C686 ISA rev 0x40
pciide0 at pci0 dev 7 function 1 VIA VT82C571 IDE rev 0x06: ATA100, 
channel
 0 configured to compatibility, channel 1 configured to compatibility 
wd0 at
 pciide0 channel 0 drive 0: HMS360604D5CF00
wd0: 32-sector PIO, LBA, 3906MB, 7999488 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
pciide0: channel 1 disabled (no drives)
uhci0 at pci0 dev 7 function 2 VIA VT83C572 USB rev 0x1a: irq 10
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: VIA UHCI root hub, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1 at pci0 dev 7 function 3 VIA VT83C572 USB rev 0x1a: irq 10
usb1 at uhci1: USB revision 1.0
uhub1 at usb1
uhub1: VIA UHCI root hub, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
viaenv0 at pci0 dev 7 function 4 VIA VT82C686 SMBus rev 0x40
em0 at pci0 dev 16 function 0 Intel PRO/1000MT (82540EM) rev 0x02: 
irq 9,
 address: 00:03:1d:02:5d:1f fxp0 at pci0 dev 17 function 0 Intel 
82557 rev
 0x10, i82551: irq 5, address 00:03:1d:02:5d:20 inphy0 at fxp0 phy 1: 
i82555
 10/100 PHY, rev. 4
fxp1 at pci0 dev 18 function 0 Intel 82557 rev 0x10, i82551: irq 10,
 address 00:03:1d:02:5d:21 inphy1 at fxp1 phy 1: i82555 10/100 PHY, 
rev. 4
fxp2 at pci0 dev 19 function 0 Intel 82557 rev 0x10, i82551: irq 11,
 address 00:03:1d:02:5d:22 inphy2 at fxp2 phy 1: i82555 10/100 PHY, 
rev. 4
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pmsi0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pmsi0 mux 0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: PC speaker
spkr0 at pcppi0
sysbeep0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
biomask e545 netmask ef65 ttymask ffe7
pctr: user-level cycle counter enabled
wd0(pciide0:0:0): timeout
type: ata
c_bcount: 512
c_skip: 0
pciide0:0:0: bus-master DMA error: missing interrupt, status=0x21
wd0c: device timeout reading fsbn 0 (wd0 bn 0; cn 0 tn 0 sn 0), 
retrying
wd0(pciide0:0:0): timeout
type: ata
c_bcount: 512
c_skip: 0
pciide0:0:0: bus-master DMA error: missing interrupt, status=0x21
wd0: transfer error, downgrading to Ultra-DMA mode 1
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 1
wd0c: device timeout reading fsbn 0 (wd0 bn 0; cn 0 tn 0 sn 0), 
retrying
wd0(pciide0:0:0): timeout
type: ata
c_bcount: 512
c_skip: 0
pciide0:0:0: bus-master DMA error: missing interrupt, status=0x21
wd0: transfer error, downgrading to Ultra-DMA mode 0
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 0
wd0c: device timeout reading fsbn 0 (wd0 bn 0; cn 0 tn 0 sn 0), 
retrying
wd0(pciide0:0:0): timeout
type: ata
c_bcount: 512
c_skip: 0
pciide0:0:0: bus-master DMA error: missing interrupt, status=0x21
wd0: transfer error, downgrading to DMA mode 2
wd0(pciide0:0:0): using PIO mode 4, DMA mode 2
wd0c: device timeout reading fsbn 0 (wd0 bn 0; cn 0 tn 0 sn 0), 
retrying
wd0: soft error (corrected)
wd0(pciide0:0:0): timeout
type: ata
c_bcount: 512
c_skip: 0
pciide0:0:0: bus-master DMA error: missing interrupt, 

Re: Security Mailing List

2006-01-09 Thread marrandy
On Monday 09 January 2006 11:02, Jasper Lievisse Adriaanse wrote:
 On Mon, 09 Jan 2006 09:05:19 -0600

 Kenny Mann [EMAIL PROTECTED] wrote:
  I thought the security-announce mailing list would have sent an email
  out about the 3.8 errata, but I was wrong. I found out on undeadly.org.
  Is their such an OpenBSD mailing list that would send an email out when
  posts are added onto the errata?
  If so, it might be nice to place a link somewhere on the errata page
  showing where someone can sign up (or perhaps the FAQ?).
 
  Or am I just that blind and didn't/can't see it?
 
  Thanks!
  Kenny Mann


I'm on the list as well and haven't received anything.  

Todd C. Miller 2005-07-22 20:11 was the last email.

Almost 6-months (5 1/2) without a security patch.  Assuming they are 
continuing to test and look for bugs with the same fervor as they always 
have, this is quite an achievement.  Previous releases from 2.7 to 3.6 
averaged 19.5 security patches.

I would like to thank all the people who contribute to OpenBSD for their 
continual great work and dedication to the project.  It is very much 
appreciated.

Regards and best wishes...Martin



Re: Time on amd64

2006-01-03 Thread marrandy
On Tuesday 03 January 2006 15:16, Ted Unangst wrote:
 are you running ntpd?  are you running ntpd with the kernel adjtime
 patch i posted to tech a few days ago?

 On 1/1/06, Cyrus Lopez [EMAIL PROTECTED] wrote:
  I have a machine with a sempron64 and it seems that time is a tad bit too
  fast. Every minute it skips ahead about 15-20 seconds. After about 10
  minutes it's several minutes ahead of the real time. For now I've set a
  cron job to rdate time.nist.gov every 5 minutes. This is on OpenBSD 3.8
  with the generic kernel and no other special modifications. Is there
  anything I can possibly do to fix this little glitch (perhaps something
  via sysctl?) or is it a problem in the code somewhere? Any help would be
  greatly appreciated, thanks.
 
 
  - Cyrus


I missed your original post.  What is the make/model of the computer.  There 
is a known issue on some machines with the clock running fast with AMD/ATI on 
Linux.  It *might* be the same with OpenBSD.

Gateway MX7515m

AMD/ATI bug - clock runs at double speed

http://bugzilla.kernel.org/show_bug.cgi?id=3927

I used  -  noapictimer at boot  on my Linux notebook to fix the issue.

Not sure that's going to help.  But if it is a hardware issue, that may be 
enough of a start for a developer to help.

Provide your hardware info.

Regards...Martin



Re: A great article ( found on the OpenBSD site)

2005-11-01 Thread marrandy
On Tuesday 01 November 2005 11:31, you wrote:
 On 11/1/05, Bob DeBolt [EMAIL PROTECTED] wrote:
  Greets
 
  I certainly found it worth a read.
 
  http://www.computerworld.com.au/index.php/id;1375194866;fp;16;fpid;0

 quote:
 My experience is that if something has to be done, just do it - don't
 ask! They will thank you later, he said.

 hmm!! interesting... :)

 one question though - is this the same Mark Uemura from
 www.openbsd-support.com?

 thanks for pointing out the article!!

 -jf


what is the via based box they are using here

http://www.openbsd-support.com/jp/en/htm/mgp/tokyopc05/mgp5.html



RAID cards

2005-10-30 Thread marrandy
Hello.

Ref the new bioctl RAID management inteface.

Has the Dell perc3/dc and the megaraid elite 1600 been tested and proved to 
work as I need to get a machine with supported RAID.

Regards...Martin