Re: kernel settings for pf default block

2006-07-05 Thread Nick Guenther
On 7/5/06, Lars Hansson [EMAIL PROTECTED] wrote: On Thursday 06 July 2006 01:35, c.s.r.c.murthy wrote: block all in pf.conf is ok, but it will go away when the rules are flushed for known/unknown reasons. I feel it is desirable to have a kernel parameter that does default blocking when all

Re: kernel settings for pf default block

2006-07-05 Thread Janne Johansson
c.s.r.c.murthy wrote: Hello Matthew, block all in pf.conf is ok, but it will go away when the rules are flushed for known/unknown reasons. I feel it is desirable to have a kernel parameter that does default blocking when all rules are flushed. But the default blocking will go away when the

Re: X not found

2006-07-05 Thread Lawrence Horvath
thats what i was asking, can i just install a small set of libs or do i need to entirely install X On 7/4/06, Peter Blair [EMAIL PROTECTED] wrote: If you have no parts of X installed, then how do you expect to link against it? If you plan to use your OpenBSD machine as a headless X client,

Chillispot on OpenBSD

2006-07-05 Thread Sevan / Venture37
Ok, finally got Chillispot to run on OpenBSD, NetBSD Mac OS X :) http://www.geeklan.co.uk/?p=72 http://www.geeklan.co.uk/files/chillispot-1.0.patch Patch chillispot run make install chilli_LDFLAGS=-lcrypto Unfortunately I haven't written a sample PF config yet, but if you have a look in doc

Bridge wireless and wired networks.

2006-07-05 Thread Jan Johansson
Hello. On my laptop I use trunk(4) failover to switch between wired and wireless networks. It works great. But I think my solution for the router is a bit dirty. Is there a better way? The router has one interface connected to the internet (fxp0) and two interfaces for the internal network (ral0

Re: File Server Advice Required

2006-07-05 Thread Rogier Krieger
On 7/4/06, Joachim Schipper [EMAIL PROTECTED] wrote: On Tue, Jul 04, 2006 at 11:07:37AM -0700, Ginja_Ninja wrote: 3. Ultra secure remote login away from home on the laptop. Run it over IPsec, or OpenVPN if you want to be able to pass broken firewalls. (Note - setting up IPsec on OpenBSD is

Re: kernel settings for pf default block

2006-07-05 Thread Ryan McBride
On Wed, Jul 05, 2006 at 02:36:44AM -0400, Nick Guenther wrote: #pftcl -f all echo block all | pfctl -f - then the switch over to the new ruleset is pretty snappy and hardly enough time for any malicious packets to get through. Flushing the ruleset is totally unneccessary when loading a new

July 4 Snapshot re interface problem?

2006-07-05 Thread Whyzzi
Hey folks just thought I'd UPGRADE to a newer snapshot tonight and now I can't seem to get my re0 network interface to ping (from either the client or from OpenBSD) and/or packet forwarding via PF - although oddly I seems to be able to get receive dhcp queries from it and get a MAC address (but

Re: X not found

2006-07-05 Thread Joachim Schipper
On Wed, Jul 05, 2006 at 12:03:35AM -0700, Lawrence Horvath wrote: thats what i was asking, can i just install a small set of libs or do i need to entirely install X xbase will do for (almost?) all ports. Joachim

Re: Bridge wireless and wired networks.

2006-07-05 Thread kami petersen
Jan Johansson skrev: Hello. On my laptop I use trunk(4) failover to switch between wired and wireless networks. It works great. But I think my solution for the router is a bit dirty. Is there a better way? The router has one interface connected to the internet (fxp0) and two interfaces for the

Re: Preventing password reuse

2006-07-05 Thread Joachim Schipper
On Tue, Jul 04, 2006 at 10:07:53PM -0400, STeve Andre' wrote: On Tuesday 04 July 2006 08:45, Joachim Schipper wrote: On Mon, Jul 03, 2006 at 09:22:59PM -0700, Jeff Simmons wrote: Well, just to play the devil's advocate here ... One of the main functions of any password hygiene program

Re: News From HiFn

2006-07-05 Thread J.C. Roberts
On Tue, 4 Jul 2006 18:48:28 +0200, Joachim Schipper [EMAIL PROTECTED] wrote: On Tue, Jul 04, 2006 at 12:16:45PM -0400, Nick Guenther wrote: On 7/4/06, Peter Blair [EMAIL PROTECTED] wrote: On 6/29/06, J.C. Roberts [EMAIL PROTECTED] wrote: I just got a call this afternoon from Tom Moore to let

Re: Bridge wireless and wired networks.

2006-07-05 Thread Jan Johansson
kami petersen [EMAIL PROTECTED] wrote: well, it should work. however, you should set an address on either of the interfaces that constitutes the bridge, not the bridge itself. but you don't say exactly where you are unsuccessful... It works, I just thought there might be a cleaner solution.

Re: set skip on interface rule doesn't show up in pfctl -sr

2006-07-05 Thread Henning Brauer
* Giancarlo Razzolini [EMAIL PROTECTED] [2006-07-04 16:07]: My question is not only about ftp-proxy, i only used it to exemplify. My question is: if i tag a packet that is entering one interface and in the same rule (rdr pass, for example) i send this packet to an interface which is skipped by

Re: [OpenBGPd] Can a nexthop be set on routes announced as my network ?

2006-07-05 Thread Henning Brauer
* Andrea Cocito [EMAIL PROTECTED] [2006-07-04 13:02]: Looking at the rationale behind that code I found interesting that it does something very similar to what we do here with a shell script: if the main router has one or more sessions down widthdraw its precedence on CARP interfaces.

Re: kernel settings for pf default block

2006-07-05 Thread Henning Brauer
* c.s.r.c.murthy [EMAIL PROTECTED] [2006-07-05 07:25]: block all in pf.conf is ok, but it will go away when the rules are flushed for known/unknown reasons. I feel it is desirable to have a kernel parameter that does default blocking when all rules are flushed. then certainly you want

Re: Bridge wireless and wired networks.

2006-07-05 Thread kami petersen
Jan Johansson skrev: kami petersen [EMAIL PROTECTED] wrote: well, it should work. however, you should set an address on either of the interfaces that constitutes the bridge, not the bridge itself. but you don't say exactly where you are unsuccessful... It works, I just thought there might

Re: News From HiFn

2006-07-05 Thread Peter Blair
Ya, that'd be nice if I ever made it to a prompt to enter 'anonymous', but the connection fails well before that point. $ ping ftp.hifn.com PING ftp.hifn.com (208.10.194.169): 56 data bytes 64 bytes from 208.10.194.169: icmp_seq=0 ttl=117 time=100.851 ms 64 bytes from 208.10.194.169: icmp_seq=1

Re: DDOS attack

2006-07-05 Thread Stephan A. Rickauer
sonjaya wrote: How to blok ddos/Flooding/ssh brute attack with pf . Thanks to ( max-src-nodes 20, max-src-states 1 ) brute forcing just disappeared. Stephan [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

Error building ntpd on -current

2006-07-05 Thread Massimo Lusetti
I just updated from CVS today and cannot do a make build anymore. I successfully installed a booted a GENERIC kernel. OpenBSD 3.9-current (GENERIC) #3: Wed Jul 5 09:38:20 CEST 2006 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel Pentium III (GenuineIntel 686-class) 602

Re: Error building ntpd on -current

2006-07-05 Thread Joachim Schipper
On Wed, Jul 05, 2006 at 03:35:40PM +0200, Massimo Lusetti wrote: I just updated from CVS today and cannot do a make build anymore. I successfully installed a booted a GENERIC kernel. OpenBSD 3.9-current (GENERIC) #3: Wed Jul 5 09:38:20 CEST 2006 [EMAIL

Re: Preventing password reuse

2006-07-05 Thread Matthew R. Dempsky
On Wed, Jul 05, 2006 at 12:24:34PM +0200, Joachim Schipper wrote: Consider five lower-case words chosen from 1024 possibilities each, for instance - this has 50 bits of entropy, roughly equivalent to a 10-character password based on natural language [1]; a little fuzzing and use of capitals

Re: Error building ntpd on -current

2006-07-05 Thread Otto Moerbeek
On Wed, 5 Jul 2006, Joachim Schipper wrote: Seems like your kernel is older than your userland; adjfreq is a rather recent addition. That is not the problem. The problem is that libc is too old. adjfreq() is a new syscall, and as such needs a stub, which is in libc. -Otto Are you

Re: Error building ntpd on -current

2006-07-05 Thread Massimo Lusetti
On Wed, 2006-07-05 at 16:41 +0200, Otto Moerbeek wrote: You probably did not do a make build, but took a shortcut. No at all. I've followed precisely the procedure described here: http://www.openbsd.org/faq/faq5.html as I've always done before, I forgot to mention that the machine was a

Virus Warning

2006-07-05 Thread misc
** 送信したメールからウィルスが検出されました。 日時:07/05/06 22:18:44 [EMAIL PROTECTED] [EMAIL PROTECTED] ウイルス名:W32/MyDoom-O アクション:削除 ** The virus was detected from the received mail. DATE: 07/05/06 22:18:44 From:

pan core dump question

2006-07-05 Thread Didier Wiroth
Hello, (using latest current) I'm using pan 0.14.2 (nntp client). When I try to update the cache of my subscribed newsgroups the application crashes with the following message: GLib-ERROR **: gmem.c:135: failed to allocate 86749427 bytes aborting... Abort trap (core dumped) I'm not a

Re: Some though and more detail

2006-07-05 Thread Ginja_Ninja
Firstly thanks for everyone thought on this. As i say, i am in new waters with this, so getting my head around it all will take to reading and re-reading. For reference though, i intend to run a nano-itx system with a SATA drive. I have taken serious consideration to you suggestion of a

Re: Error building ntpd on -current

2006-07-05 Thread Otto Moerbeek
On Wed, 5 Jul 2006, Massimo Lusetti wrote: On Wed, 2006-07-05 at 16:41 +0200, Otto Moerbeek wrote: You probably did not do a make build, but took a shortcut. No at all. I've followed precisely the procedure described here: http://www.openbsd.org/faq/faq5.html as I've always done

Re: Reading a file that is been written make the system freeze?

2006-07-05 Thread Pedro Martelletto
Do you see anything unusual in the dmesg? -p.

Re: Reading a file that is been written make the system freeze?

2006-07-05 Thread Federico Giannici
Federico Giannici wrote: Pedro Martelletto wrote: On Thu, Jun 22, 2006 at 03:25:41PM +0200, Federico Giannici wrote: Yesterday another PC freezed! It just crashed again! did it freeze or did it crash? I wrote it into the first email: it freezes with no error at all, no network, only

Re: Error building ntpd on -current

2006-07-05 Thread Massimo Lusetti
On Wed, 2006-07-05 at 17:38 +0200, Otto Moerbeek wrote: What is the version of your libc? Check ls -l /usr/lib/libc.so.*, newest version should be 39.2. $ nm /usr/lib/libc.so.39.2 | grep adjfreq 000411f0 T _thread_sys_adjfreq 000411f0 W adjfreq I'm building right now on the second box

Re: Error building ntpd on -current

2006-07-05 Thread Stuart Henderson
On 2006/07/05 18:14, Massimo Lusetti wrote: And if i understand correctly it's right to have that value before the build, i just have to have 39.2 after a successful build, right? No, you get 39.2 from an up-to-date snapshot base39.tgz. sthen:2$ tar tzf

Re: Reading a file that is been written make the system freeze?

2006-07-05 Thread Federico Giannici
Pedro Martelletto wrote: Do you see anything unusual in the dmesg? I cannot see anything strange. Anyway, here it is the dmesg of the web server. The mail server have the same hardware, but started freezing since we installed an X2 CPU and upgraded to 3.9 (MP). I don't know if the freezes

dovecot from ports or from source

2006-07-05 Thread FTP
Hi, the dovecot ports pkg is a bit 'old' but would it make sense to istall this and then make a second installation from the current source? Does the port package come with any specific to OBSD conf files or should I go directly with the source? Thanks George

Re: more: NAT through encryption interface

2006-07-05 Thread Stephen Bosch
Matthew Closson wrote: In setting up about 30 ISPEC tunnels on an OpenBSD box in the past 6 months I had this issue come up with about 4 of the remote peers. Typically it is one of two problems. 1. They have a made a policy level decision somewhere and say they will only route traffic to

Re: Some though and more detail

2006-07-05 Thread Joachim Schipper
On Wed, Jul 05, 2006 at 08:26:45AM -0700, Ginja_Ninja wrote: Firstly thanks for everyone thought on this. As i say, i am in new waters with this, so getting my head around it all will take to reading and re-reading. For reference though, i intend to run a nano-itx system with a SATA

More Upgrading questions

2006-07-05 Thread Rob Baldassano
Hi guys, ANy issue with adding X to an upgrade when the original version on the system did not have it? (I listened to way too much bad advice setting this system up with my co-worker, now I have to fix it) --Rob - Eirik Goransson / Rob Baldassano

tcpdump on enc0

2006-07-05 Thread Stephen Bosch
Does tcpdump work on enc0? -Stephen-

Re: More Upgrading questions

2006-07-05 Thread Spruell, Darren-Perot
From: [EMAIL PROTECTED] ANy issue with adding X to an upgrade when the original version on the system did not have it? (I listened to way too much bad advice setting this system up with my co-worker, now I have to fix it) No. The only thing it does is unpack a distribution set (a bunch

Intel PRO/1000 PT

2006-07-05 Thread Christopher Snell
Hi, Is the Intel PRO/1000 PT still non-functional under our favorite OS? I searced around and found a message from Darrian Hale in late April that said he was having kernel panics with this NIC. Has anything changed? I have some Sun X2100s that I want to use as routers and the only missing bit

Re: Some though and more detail

2006-07-05 Thread Ginja_Ninja
Joachim Schipper wrote: Why the CF? It's slow, and relatively expensive. It's good for embedded systems, but if you already have a huge disk, use that. h I can see your point. Its only a thought at the moment but the reason i am looking in this direction is: If the OS is seperated from

Re: tcpdump on enc0

2006-07-05 Thread Roy Morris
tcpdump -entttv -i enc0 Stephen Bosch wrote: Does tcpdump work on enc0? -Stephen-

Re: tcpdump on enc0

2006-07-05 Thread Marcus Glocker
On Wed, Jul 05, 2006 at 11:10:43AM -0600, Stephen Bosch wrote: Does tcpdump work on enc0? -Stephen- $ man enc The enc interface allows an administrator to see outgoing packets before they have been processed by ipsec(4), or incoming packets after they have been similarly processed, via

Re: tcpdump on enc0

2006-07-05 Thread Stephen Bosch
Marcus Glocker wrote: On Wed, Jul 05, 2006 at 11:10:43AM -0600, Stephen Bosch wrote: Does tcpdump work on enc0? -Stephen- $ man enc The enc interface allows an administrator to see outgoing packets before they have been processed by ipsec(4), or incoming packets after they have been

Re: tcpdump on enc0

2006-07-05 Thread Otto Moerbeek
On Wed, 5 Jul 2006, Stephen Bosch wrote: Does tcpdump work on enc0? Are you really too lazy to read a manual page? -Otto

Re: tcpdump on enc0

2006-07-05 Thread Stephen Bosch
Otto Moerbeek wrote: On Wed, 5 Jul 2006, Stephen Bosch wrote: Does tcpdump work on enc0? Are you really too lazy to read a manual page? Please don't get me started. I have been working on this problem with precious little assistance from folks like you for over a week now, and I've read

Re: Intel PRO/1000 PT

2006-07-05 Thread Daniel Ouellet
Christopher Snell wrote: Hi, Is the Intel PRO/1000 PT still non-functional under our favorite OS? I searced around and found a message from Darrian Hale in late April that said he was having kernel panics with this NIC. Has anything changed? # dmesg OpenBSD 3.9 (GENERIC.MP) #736: Thu Mar 2

Re: More Upgrading questions

2006-07-05 Thread Mike Piety
On Wed, 5 Jul 2006 08:46:52 -0700 (PDT) Rob Baldassano [EMAIL PROTECTED] wrote: Hi guys, ANy issue with adding X to an upgrade when the original version on the system did not have it? (I listened to way too much bad advice setting this system up with my co-worker, now I have to fix it)

Re: tcpdump on enc0

2006-07-05 Thread Stephen Bosch
Otto Moerbeek wrote: On Wed, 5 Jul 2006, Stephen Bosch wrote: Does tcpdump work on enc0? Are you really too lazy to read a manual page? And for the record -- since some people found that question beyond the pale -- I have been tcpdumping enc0 all morning and I am seeing no traffic, inspite

Re: More Upgrading questions

2006-07-05 Thread Josh Grosse
On Wed, Jul 05, 2006 at 10:15:53AM -0700, Spruell, Darren-Perot wrote: From: [EMAIL PROTECTED] ANy issue with adding X to an upgrade when the original version on the system did not have it? (I listened to way too much bad advice setting this system up with my co-worker, now I have

Re: Error building ntpd on -current

2006-07-05 Thread Otto Moerbeek
On Wed, 5 Jul 2006, Massimo Lusetti wrote: On Wed, 2006-07-05 at 17:38 +0200, Otto Moerbeek wrote: What is the version of your libc? Check ls -l /usr/lib/libc.so.*, newest version should be 39.2. $ nm /usr/lib/libc.so.39.2 | grep adjfreq 000411f0 T _thread_sys_adjfreq 000411f0 W

Re: tcpdump on enc0

2006-07-05 Thread Jason Dixon
On Jul 5, 2006, at 1:31 PM, Stephen Bosch wrote: Marcus Glocker wrote: On Wed, Jul 05, 2006 at 11:10:43AM -0600, Stephen Bosch wrote: Does tcpdump work on enc0? -Stephen- $ man enc The enc interface allows an administrator to see outgoing packets before they have been processed by

Re: tcpdump on enc0

2006-07-05 Thread Hans-Joerg Hoexer
On Wed, Jul 05, 2006 at 11:10:43AM -0600, Stephen Bosch wrote: Does tcpdump work on enc0? -Stephen- yes: [EMAIL PROTECTED]:1$ sudo tcpdump -n -i enc0 Password: tcpdump: WARNING: enc0: no IPv4 address assigned tcpdump: listening on enc0, link-type ENC 19:32:49.036465

Re: tcpdump on enc0

2006-07-05 Thread Matthew R. Dempsky
On Wed, Jul 05, 2006 at 11:30:54AM -0600, Stephen Bosch wrote: I am not seeing any traffic on enc0 when using tcpdump, that is why I asked. Are you sure IPsec is being used? Can you see IPsec-processed traffic on the physical interface?

Re: tcpdump on enc0

2006-07-05 Thread Otto Moerbeek
On Wed, 5 Jul 2006, Stephen Bosch wrote: Otto Moerbeek wrote: On Wed, 5 Jul 2006, Stephen Bosch wrote: Does tcpdump work on enc0? Are you really too lazy to read a manual page? And for the record -- since some people found that question beyond the pale -- I have been tcpdumping

Re: More Upgrading questions

2006-07-05 Thread Josh Grosse
On Wed, Jul 05, 2006 at 01:36:40PM -0400, I wrote: In addition, you might need machdep.allowaperture=2, per /etc/X11R6/README. A fairly obvious typo. It should be per /usr/X11R6/README.

Re: 3.9 + ath....panic fixed in -current and can it run G band yet as well ?

2006-07-05 Thread Chris Cappuccio
Allie Daneman [EMAIL PROTECTED] wrote: is why I bought this card ;) Should I shutup and upgrade to -current and/or will G band be supported (maybe 4.0) ? ath0 at pci0 dev 15 function 0 Atheros AR5212 rev 0x01: irq 11 ath0: AR5213 5.9 phy 4.3 rf5112 3.6, FCC2A*, address 00:0b:6b:37:29:87

Re: tcpdump on enc0

2006-07-05 Thread Stephen Bosch
Matthew R. Dempsky wrote: On Wed, Jul 05, 2006 at 11:30:54AM -0600, Stephen Bosch wrote: I am not seeing any traffic on enc0 when using tcpdump, that is why I asked. Are you sure IPsec is being used? Can you see IPsec-processed traffic on the physical interface? Aye, I have other

Re: X not found

2006-07-05 Thread Lawrence Horvath
so how do you install that, i was thinking it would just be # pkg_add /home/music/xbase39.tgz Can't resolve /home/music/xbase39.tgz but that didnt work, how do you install that package? On 7/5/06, Joachim Schipper [EMAIL PROTECTED] wrote: On Wed, Jul 05, 2006 at 12:03:35AM -0700, Lawrence

Re: tcpdump on enc0

2006-07-05 Thread Will H. Backman
Otto Moerbeek wrote: On Wed, 5 Jul 2006, Stephen Bosch wrote: Otto Moerbeek wrote: On Wed, 5 Jul 2006, Stephen Bosch wrote: Does tcpdump work on enc0? Are you really too lazy to read a manual page? And for the record -- since some people found that question

Re: tcpdump on enc0

2006-07-05 Thread Paul de Weerd
On Wed, Jul 05, 2006 at 12:09:49PM -0600, Stephen Bosch wrote: | Otto Moerbeek wrote: | On Wed, 5 Jul 2006, Stephen Bosch wrote: | | Does tcpdump work on enc0? | | Are you really too lazy to read a manual page? | | And for the record -- since some people found that question beyond the | pale

Re: tcpdump on enc0

2006-07-05 Thread Chris Kuethe
On 7/5/06, Stephen Bosch [EMAIL PROTECTED] wrote: Does tcpdump work on enc0? Did you ifconfig enc0 up -- GDB has a 'break' feature; why doesn't it have 'fix' too?

Re: X not found

2006-07-05 Thread Eric Pancer
On Wed, 2006-07-05 at 11:42:22 -0700, Lawrence Horvath wrote... so how do you install that, i was thinking it would just be # pkg_add /home/music/xbase39.tgz Can't resolve /home/music/xbase39.tgz Get the tarballs from a mirror, then... $ su - root # cd / # tar zxpvf /path/to/xbase39.tgz

Re: 3.9 + ath....panic fixed in -current and can it run G band yet as well ?

2006-07-05 Thread Greg Thomas
On 7/4/06, Allie Daneman [EMAIL PROTECTED] wrote: I've been having the panic problem reported by others on stable and saw a post by Reyk that it's fixed in -current. That's awesome, thanks for the fix...but I also wanted to ask if there's work towards getting G band working in the ath driver,

Re: X not found

2006-07-05 Thread Nico Meijer
Hey Lawrence, # pkg_add /home/music/xbase39.tgz Can't resolve /home/music/xbase39.tgz but that didnt work, how do you install that package? cd / tar zxpf /home/music/xbase39.tgz Read http://www.openbsd.org/faq/upgrade39.html. HTH... Nico

Re: X not found

2006-07-05 Thread Adam PAPAI
Lawrence Horvath wrote: so how do you install that, i was thinking it would just be # pkg_add /home/music/xbase39.tgz Can't resolve /home/music/xbase39.tgz gunzip, tar. -- Adam PAPAI D i g i t a l Influence http://www.digitalinfluence.hu E-mail: [EMAIL PROTECTED] Phone: +36 30 33-55-735

Re: X not found

2006-07-05 Thread Daniel A. Ramaley
The file sets that are used to install OpenBSD are not packages even though they end in the tgz extension. Thus, pkg_add doesn't know what to do with it. Try a command like this instead: # cd / # tar -xvpzf /home/music/xbase39.tgz The -v is optional, but make sure you include -p to

NAT before IPsec: final conclusions? what I want to do can't be done without more equipment

2006-07-05 Thread Stephen Bosch
Hi, everybody: First -- thanks to everyone who tried to help me out on this one. It is most appreciated. I apologise if my questions or responses rubbed anyone the wrong way. It wasn't intended. I want to recap the situation because I think that, indeed, what I want to do can't be done. I have

Re: X not found

2006-07-05 Thread Spruell, Darren-Perot
From: [EMAIL PROTECTED] so how do you install that, i was thinking it would just be # pkg_add /home/music/xbase39.tgz Can't resolve /home/music/xbase39.tgz but that didnt work, how do you install that package? You start with the FAQ: http://www.openbsd.org/faq/faq4.html#AddFileSet DS

Re: Question related to automaticly encrypted /tmp /vat/tmp (like swap..?)

2006-07-05 Thread Daniel A. Ramaley
On Tuesday 04 July 2006 11:13, Hannah Schroeter wrote: It *is*. I've done so since a nearly uncountable number of years. Something like this in /etc/fstab helps. /dev/wd0b /tmpmfs rw,-m0,-s204800 0 0 In the past i've always symlinked /tmp to point to /var/tmp.

About soft updates

2006-07-05 Thread Alexander Hall
Hi, I've been trying to find out whether to enable soft updates or not, and I have not really seen any reason not to, other than that it is not enabled by default. In order not to spread (or consume) FUD, I would like to know if soft updates are considered reliable and in which situations,

Re: ichiic0: errors on MP (Sorry about the no subject post!)

2006-07-05 Thread Mark Kettenis
As anyone seen this? No matter what I do I cant stop this from happing. I am at the point of being forced to use another OS that I DONT want to use. Any help would be very much appreciated. As a workaround you could disable ichiic in the kernel config. Use man config for hints on how to

Re: About soft updates

2006-07-05 Thread Josh Grosse
On Wed, Jul 05, 2006 at 11:19:04PM +0200, Alexander Hall wrote: Hi, I've been trying to find out whether to enable soft updates or not, and I have not really seen any reason not to, other than that it is not enabled by default. In order not to spread (or consume) FUD, I would like to

Synaptic touchpad woes:

2006-07-05 Thread Terrance Harris
I am using OpenBSD 3.9 using a Compaq M2105US Laptop with no problems and xorgcfg created a config that supports my touch pad but there is an annoying tap to click issue that I would like to turn off. Thank you for your time.

Re: dovecot from ports or from source

2006-07-05 Thread Joachim Schipper
On Wed, Jul 05, 2006 at 06:37:56PM +0200, FTP wrote: Hi, the dovecot ports pkg is a bit 'old' but would it make sense to istall this and then make a second installation from the current source? Does the port package come with any specific to OBSD conf files or should I go directly with

Re: About soft updates

2006-07-05 Thread Stuart Henderson
On 2006/07/05 23:19, Alexander Hall wrote: I have not really seen any reason not to, other than that it is not enabled by default. Here's one reason you might sometimes not want it: space of deleted files isn't recovered until the delayed updates have been written out. This is particularly

Re: Some though and more detail

2006-07-05 Thread Joachim Schipper
On Wed, Jul 05, 2006 at 10:23:57AM -0700, Ginja_Ninja wrote: Joachim Schipper wrote: Why the CF? It's slow, and relatively expensive. It's good for embedded systems, but if you already have a huge disk, use that. h I can see your point. Its only a thought at the moment but the

Issues with OpenOSPFD in 3.9?

2006-07-05 Thread Andreas Lundin
Hi, I'm about to deploy OpenOSPFD in a live environment and my question goes out to those who have used(or are using) OpenOSPFD that shipped with 3.9. It has been running it a lab enviroment for quite some time with only minor issues. Are there any known issues regarding the version of OpenOSPFD

Re: About soft updates

2006-07-05 Thread Alexander Hall
Josh Grosse wrote: On Wed, Jul 05, 2006 at 11:19:04PM +0200, Alexander Hall wrote: Hi, I've been trying to find out whether to enable soft updates or not, and I have not really seen any reason not to, other than that it is not enabled by default. In order not to spread (or consume) FUD, I

Re: About soft updates

2006-07-05 Thread Alexander Hall
Stuart Henderson wrote: On 2006/07/05 23:19, Alexander Hall wrote: I have not really seen any reason not to, other than that it is not enabled by default. Here's one reason you might sometimes not want it: space of deleted files isn't recovered until the delayed updates have been written

happy upgrade camper

2006-07-05 Thread Randal L. Schwartz
After the heat I took trying to upgrade from 3.7 to 3.8 via source recompile, I took the advice to heart to simply untar some binaries right over the top of my running system, which seemed a lot more scary to me. However, I'm happy to report that my system is now running 3.9 with little if any

Re: Some though and more detail

2006-07-05 Thread Stuart Henderson
On 2006/07/06 00:13, Joachim Schipper wrote: The OS shouldn't use the disk much, but adding CF will make your server more complex, more expensive, and slower. I really don't see the point. OTOH, if files on the HD are only accessed infrequently and the disk is spun down the rest of the time,

Mikrotik's routerboard 44

2006-07-05 Thread Paolo Supino
Hi I'm in the process of building firewall (Obviously it will run OpenBSD) and I need to put in a quad NIC card. There's Intel Quad card that I had a success with in the past but is expensive as hell. I found a company called Mikrotik that makes a Quad NIC card and I'm looking for

Re: happy upgrade camper

2006-07-05 Thread Han Boetes
Consider using this script the next time: http://www.xs4all.nl/~hanb/software/OpenBSD-binary-upgrade/ # Han

Re: 3.9 + ath....panic fixed in -current and can it run G band yet as well ?

2006-07-05 Thread Allie Daneman
Chris Cappuccio([EMAIL PROTECTED])@Wed, Jul 05, 2006 at 12:03:35PM -0700: Allie Daneman [EMAIL PROTECTED] wrote: is why I bought this card ;) Should I shutup and upgrade to -current and/or will G band be supported (maybe 4.0) ? ath0 at pci0 dev 15 function 0 Atheros AR5212 rev 0x01:

Re: Mikrotik's routerboard 44

2006-07-05 Thread Daniel Ouellet
Paolo Supino wrote: Hi I'm in the process of building firewall (Obviously it will run OpenBSD) and I need to put in a quad NIC card. There's Intel Quad card that I had a success with in the past but is expensive as hell. I found a company called Mikrotik that makes a Quad NIC card and I'm

'route to' question

2006-07-05 Thread Peter Blair
Hello lists! (sorry if cross-list posting is frowned upon) I'm setting up a BSD/pf machine that will be working as a binat firewall for a number of hosts on two /28 subnets belonging to the same co-location provider. The BSD machine is already live, working hard for one subnet, and I don't have

Re: 3.9 + ath....panic fixed in -current and can it run G band yet as well ?

2006-07-05 Thread Rod.. Whitworth
On Wed, 5 Jul 2006 18:35:58 -0700, Allie Daneman wrote: if not, then there is more reverse engineering to be done, but it's very slow and painstaking work. I bet...you have any recommendations for Soekris/OpenBSD friendly G band MiniPCI cards ? Man I just bought another ath card too...it may

problems configuring and making nmap 4.11 on OpenBSD 3.9 stable

2006-07-05 Thread Patrick McNamee
I'm running OpenBSD 3.9 stable, arch i386. Also autoconf-2.59. I'd install the nmap package, but it's an older version. When I run ./configure --with-openssl=/usr/sbin/ I get a number of warnings like the following: configure: WARNING: net/if.h: present but cannot be compiled configure: