Re: hardware: Sun x2100 test results

2006-02-23 Thread Srebrenko Sehic
On 2/22/06, Jonathan Gray [EMAIL PROTECTED] wrote: 2) nfe(4) shows a constant 100/interrupts a seconds without having a link; only configured with ifconfig nfe0 127.0.0.1 255.0.0.0; it also has the same interrupt rate when configured normally This should be fixed in -current by damien.

Re: Intel SRCS16 RAID Controller Card

2006-02-23 Thread edgarz
Hi! Some days ago i asked about similar RAID controller. Also i asked to intel, they said that in SCSI RAID controllers they uses LSI chips. SRCU42L is suported. Sevan / Venture37 wrote: Hi Guys Can anyone confirm if the Intel SRCS16 controller is compatible with OpenBSD, It seems from the

Intel SRCS16 RAID Controller Card

2006-02-23 Thread Alexey E. Suslikov
[EMAIL PROTECTED] wrote: Hi Guys Can anyone confirm if the Intel SRCS16 controller is compatible with OpenBSD, It seems from the freebsd amr (4) man page that this is a MegaRAID controller. Sevan DO YOU SEE these controllers  MegaRAID SCSI 320-1E  MegaRAID SCSI 320-2E

Re: Intel SRCU42L

2006-02-23 Thread Alexey E. Suslikov
browse archives: any information about any LSI-based controller would apply to your SRCU42 as it is LSI by nature. edgarz wrote: Thanks Alexey :) Maybe you have expirience with this controller? I'm interested in performance of this model :) Alexey E. Suslikov wrote: [EMAIL PROTECTED]

IPsec NAT

2006-02-23 Thread Erik Hanspers
Hello, I was recently asked to setup a VPN tunnel, where I was told to use a Local-ID other than my internal net, as that was already in use at the peer. I saw some discussions on the list regarding this, where a solution was given along the lines of set up isakmpd with the requested net,

http://www.papamike.ca/tutorials/pub/obsd_ipsec.html#openbsd

2006-02-23 Thread Didier Wiroth
http://www.papamike.ca/tutorials/pub/obsd_ipsec.html#openbsd

LSI MEGARAID 150-4 bioctl/dmesg

2006-02-23 Thread Alexey E. Suslikov
this bioctl/dmesg were dumped from box using cheap LSI MEGARAID 150-4 (4-port Serial ATA RAID controller). it is ami(4) too. $ sudo bioctl ami0 Password: Volume Status Size Device ami0 0 Online 240063086592 sd0 RAID5 0 Online80021028864 0:0.0 noencl

dns caching server error

2006-02-23 Thread Roberto Pereyra
Hi A simple question. How to enable dns server to only make dns cache service to my LAN ? I running OpenBSD 3.7 and with: named_flags= in rc.conf.local but I have this output : server1# dig @127.0.0.1 yahoo.com ; DiG 9.3.0 @127.0.0.1 yahoo.com ;; global options: printcmd ;; connection

Re: dns caching server error

2006-02-23 Thread Roberto Pereyra
Yes, this is my resolv.conf: lookup file bind nameserver 127.0.0.1 roberto 2006/2/23, Timo Schoeler [EMAIL PROTECTED]: thus Roberto Pereyra spake: Hi A simple question. How to enable dns server to only make dns cache service to my LAN ? I running OpenBSD 3.7 and with:

Re: Intel SRCU42L

2006-02-23 Thread Federico Giannici
We have a couple of PCs with Intel SRCU42L that are recognised as gdt0 with OpenBSD AMD64 3.8 GENERIC. And they work perfectly. Here it is the relevant part of the dmsg: gdt0 at pci0 dev 13 function 0 Intel GDT RAID rev 0x00: irq 5 dpmem eff0 2-bus 1 cache device gdt0: ver 222, cache on,

Re: Intel SRCU42L

2006-02-23 Thread Alexey E. Suslikov
waa-haa-haa! :)) looks like Intel does it's job well: sales different cards based on different vendors' chipsets under the same brand. anyway, gdt(4) is supported too. with minus of bioctl. my dmesg for SRCU42X can be found here http://marc.theaimsgroup.com/?l=openbsd-techm=111667421201209w=2

Newsletter della 9� settimana 2006

2006-02-23 Thread Borghi Toscani News
[IMAGE] [IMAGE] Borghi Toscani | E - mail | Registrati | Inserisci un locale | Meteo | News [IMAGE] NUOVI INSERIMENTI Newsletter della 9B0 settimana 2006 LINK CONSIGLIATI Le Coste LAST MINUTE IN TOSCANA OFFERTE SOGGIORNI IN TOSCANA OFFERTE LAST MINUTE FIRENZE Last Minute Abetone

Re: Pf questions for larger implementation

2006-02-23 Thread Diana Eichert
On Thu, 23 Feb 2006, Ryan McBride wrote: SNIP In my opinion if you're talking about NATing 750 Windows boxes doing regular Windows-type things, you're going to want to at least at crank the limits on states and turn on adaptive timeouts; I wouldn't go any further than that unless you run into

Re: dns caching server error

2006-02-23 Thread Roberto Pereyra
Thanks to all, I solved this issue. The dns server is behind a firewall and I don't NAT enable for this server .. I very stupid I know .. :) roberto 2006/2/23, Roberto Pereyra [EMAIL PROTECTED]: Yes, this is my resolv.conf: lookup file bind nameserver 127.0.0.1 roberto

Re: writev() on a nonblocking Unix-domain SOCK_STREAM socket

2006-02-23 Thread Henning Brauer
* Alexander Farber [EMAIL PROTECTED] [2006-02-21 16:59]: do I need to retry writev() on a nonblocking Unix-domain SOCK_STREAM socket or will it always write out the exact number of bytes I wanted? it will tell you wether it wrote out both. on non-blocking sockets you have to account for partial

Re: writev() on a nonblocking Unix-domain SOCK_STREAM socket

2006-02-23 Thread Henning Brauer
* Henning Brauer [EMAIL PROTECTED] [2006-02-23 15:11]: * Alexander Farber [EMAIL PROTECTED] [2006-02-21 16:59]: do I need to retry writev() on a nonblocking Unix-domain SOCK_STREAM socket or will it always write out the exact number of bytes I wanted? it will tell you wether it wrote out

Re: auto-adding bad hosts to a table

2006-02-23 Thread Szechuan Death
Daniel Ouellet wrote: Ray Lai wrote: I thought you meant you could do something like: block in log-table zombie to port 25 where zombie is updated automatically. If you read on the PF and look at what I send you, you will see that bad-ssh IS updated automatically. That's what the

Re: auto-adding bad hosts to a table

2006-02-23 Thread Chris Smith
On Wednesday 22 February 2006 16:48, Daniel Ouellet wrote: If you read on the PF and look at what I send you, you will see that bad-ssh IS updated automatically. That's what the line: (max-src-conn-rate 5/30, overload bad_ssh flush global) does. After 5 connection in 30 seconds, the IP

Re: auto-adding bad hosts to a table

2006-02-23 Thread Chris Smith
On Wednesday 22 February 2006 15:37, Ray Lai wrote: Do ``block in log on port 25'' and listen to pflog0 to add bad hosts. Bit of a openBSD n00b here. How would I go about listening to pflog0? I thought that required tcpdump running. What I want it running continuously on a small, dedicated

Re: Obtaining virtual MAC associated with a Carp interface

2006-02-23 Thread Stuart Henderson
On 2006/02/23 10:16, Kevin Taylor wrote: Short question: How can I obtain the virtual MAC associated with a given carp interface from the command line on that server? 00:00:5e:00:01:XX where XX is VRID in hex.

basic fail-over mechanism for home networking.

2006-02-23 Thread daviad
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dear misc readers. i have soekris box to do basic nat/rdr on my home networking, one comp is a squid proxy server and a client machines http requests are redirected to that machine trough soekris box. now i would like to have some kind of basic

Re: auto-adding bad hosts to a table

2006-02-23 Thread Chris Smith
On Wednesday 22 February 2006 16:19, Stuart Henderson wrote: recent (preferably -current/snapshot ports) smtp-vilter handles this quite nicely. Thanks but it's probably not a solution in this case. I'm not that experienced with openBSD but I'm a bit leery about running -current on a dedicated

NetBSD imported iSCSI framework

2006-02-23 Thread Alexey E. Suslikov
quote from http://www.netbsd.org/Changes/#iscsi-target 22 Feb 2006 - NetBSD iSCSI Status and HOWTOs (top) Alistair G. Crooks has recently added support for an iSCSI target to NetBSD, and written HOWTOs for using it. iSCSI is specified in RFC 3720 and describes a method for encapsulating SCSI

Re: auto-adding bad hosts to a table

2006-02-23 Thread Bob Beck
* Chris Smith [EMAIL PROTECTED] [2006-02-23 09:34]: On Wednesday 22 February 2006 15:37, Ray Lai wrote: Do ``block in log on port 25'' and listen to pflog0 to add bad hosts. Bit of a openBSD n00b here. How would I go about listening to pflog0? I thought that required tcpdump running.

Re: basic fail-over mechanism for home networking.

2006-02-23 Thread Bob Beck
two boxes at home, carped and pfsynced. Primary runs your squid, backup either runs a backup squid yourself, or does an rdr for the connections to it to the isp's proxy. -Bob * [EMAIL PROTECTED] [EMAIL PROTECTED] [2006-02-23 09:40]: -BEGIN PGP SIGNED MESSAGE- Hash:

Re: auto-adding bad hosts to a table

2006-02-23 Thread Szechuan Death
Chris Smith wrote: But with max-src-conn-rate aren't you actually allowing connections? The first I want to do is block connections, not allow them. Will use of max-src-conn-rate work with a block? With attempted connections that never get allowed? A block rule will just block all

Re: auto-adding bad hosts to a table

2006-02-23 Thread Chris Smith
On Thursday 23 February 2006 11:40, Bob Beck wrote: Bit of a openBSD n00b here. How would I go about listening to pflog0? I thought that required tcpdump running. What I want it running continuously on a small, dedicated firewall box (concerned about processing power as well as security)?

Generate MAC for a given carp interface

2006-02-23 Thread Kevin Taylor
For future reference, here is the script I generated to provide a MAC address for a given carp interface. Much thanks to Stuart Henderson in answering my original question on this topic. This is no rocket science, but it might save a few people 2 minutes in the future. -Kevin #!/usr/bin/perl

Re: auto-adding bad hosts to a table

2006-02-23 Thread Martin Schröder
On 2006-02-23 12:07:03 -0500, Chris Smith wrote: --- How would I go about listening to pflog0? I http://www.openbsd.org/faq/pf/logging.html IOW, from your experience, is tcpdump safe in this scenario and is it's overhead minimal?

Re: network distributed storage with windows?

2006-02-23 Thread A Rossi
This has plenty to do with OpenBSD, the central server is OpenBSD and getting it to play nice with windows has to do with it also. Henning Brauer wrote: this has nothing to do with openbsd. please take it elsewhere. * Daniel A. Ramaley [EMAIL PROTECTED] [2006-02-21 03:42]: On

Info on major/minor device mappings for device drivers

2006-02-23 Thread Andrew Smith
I know you are going to tell me to rtfm, it's bound to be in there but I can't find anything relevant here so assume I'm stupid and please point me at something obvious :P I have just become acquainted with the differences between FreeBSD and OpenBSD by porting over the ubtbcmfw driver which

Simple question about appletalk

2006-02-23 Thread Gabriel George POPA
I need to put a laptop running Mac OS X (10.3 I think) in my OpenBSD powered network - OpenBSD router/firewall. The problem is that I don't know if I need Appletalk or not installed (I have an urgent problem that must be solved with this laptop, but it's not mine and I haven't worked

Re: network distributed storage with windows?

2006-02-23 Thread A Rossi
Thank you all and good night! Chris Zakelj wrote: A Rossi wrote: Hi, I've been hired by a client to perform a number of network services for him, most of which are completely unrelated to my topic. Now, onto my topic: He asked me if I could partition all of his

Re: Simple question about appletalk

2006-02-23 Thread Bryan Allen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Feb 23, 2006, at 1:52 PM, Gabriel George POPA wrote: I need to put a laptop running Mac OS X (10.3 I think) in my OpenBSD powered network - OpenBSD router/firewall. The problem is that I don't know if I need Appletalk or not

Re: Info on major/minor device mappings for device drivers

2006-02-23 Thread Ted Unangst
On 2/23/06, Andrew Smith [EMAIL PROTECTED] wrote: Looking at the counterpart driver for this device (ubt) I can't see any reference to major, minor device numbers so I picked something more obvious. the wd driver and I can't figure out how this maps to major number 16 at all. (it's been a long

Re: basic fail-over mechanism for home networking.

2006-02-23 Thread Joachim Schipper
reformatted for 80 columns On Thu, Feb 23, 2006 at 06:04:31PM +0200, [EMAIL PROTECTED] wrote: Dear misc readers. i have soekris box to do basic nat/rdr on my home networking, one comp is a squid proxy server and a client machines http requests are redirected to that machine trough soekris

Re: trunk in interface groups?

2006-02-23 Thread Henning Brauer
* Per-Olov Sj?holm [EMAIL PROTECTED] [2006-02-23 22:08]: Hi misc Saw a post from june 2005 by Henning regarding the work he and Ryan did on code cleanup and the addition code of interface groups. I think I am on my way to abuse these groups as simple alias to make PF totaly independant from

Re: make build | securelevel=2

2006-02-23 Thread Theo de Raadt
On 1/26/06, Joachim Schipper [EMAIL PROTECTED] wrote: I agree with your assessment - but disallowing mounts in securelevel 2 fixes the most obvious attack (that anybody with even a little UNIX no, it fixes nothing. root can alter processes' memory. you gain *nothing* by preventing

3.8 mountd -n

2006-02-23 Thread Will H. Backman
Trying to get OS X to mount an openbsd nfs share. I can force OS X to use reserved ports by using mount_nfs -P from the command line, but users mounting from the finder don't have that option. OpenBSD man page for mountd says that there is an -n option to allow mounting from unreserved ports,

Re: 3.8 mountd -n

2006-02-23 Thread Will H. Backman
Will H. Backman wrote: Trying to get OS X to mount an openbsd nfs share. I can force OS X to use reserved ports by using mount_nfs -P from the command line, but users mounting from the finder don't have that option. OpenBSD man page for mountd says that there is an -n option to allow

openbsd 3.9beta -- panic when installing to IDE on soekris net4801

2006-02-23 Thread scorch
hi, i've moved 1 net4801 from openbsd 3.8 to 3.9beta (snap feb 20) successfully. this one uses only CF for storage runs happily. next stage is running the same beast from a 20GB IDE - tested known good in a spare laptop. i boot from tftp, using PXEBOOT/DHCP. unfortunately i get a panic

Can net-snmp show the interface description for ifAlias?

2006-02-23 Thread andrew fresh
Is it possible to get net-snmp's snmpd to return an interface description for ifAlias[1]? If so, how? I am sure that it is, but I am hoping that someone has an example because I am not sure how to figure out how to match it to the interfaces ifIndex value. It looks like net-snmp 5.2 there is

Re: Simple question about appletalk

2006-02-23 Thread Bryan Irvine
Sorry for the top-post but there jsut wasn't anywhere appropriate for a snip type of thing. If the laptop only needs www access no appletalk is needed. Appletalk is purely a file serving mechanism, like samba or nfs. If you need appletalk it's pretty easy to set up on OpenBSD. --Bryan On

Re: OpenSparc T1

2006-02-23 Thread Theo de Raadt
No this is only processor documentation. http://marc.theaimsgroup.com/?l=openbsd-miscm=113398028623246w=2 Let me be clear. Imagine if we only had processor documentation for Intel-based machines: This is what a real i386 dmesg would look like. Look carefully. And I am not making a joke.

Re: network distributed storage with windows?

2006-02-23 Thread ober
Once again, openafs would allow you to make every windows box a server hosting data in a flat named space setup. There is now a port in current for setting up a master server. -Ober Richard Chesler: [Reading a piece of paper] The first rule of Fight Club is you don't talk about Fight Club?

Re: ADSL modem intern

2006-02-23 Thread Theo de Raadt
Are there any plans to import ueaglectl to OpenBSD? http://damien.bergamini.free.fr/ueagle/ The whole idea is to one day fix this so that it can just work automatically, using ifconfig. Please read a posting about 2 weeks ago by dlg comparing bioctl to ifconfig. Please google for it.

Re: Can net-snmp show the interface description for ifAlias?

2006-02-23 Thread andrew fresh
On Thu, Feb 23, 2006 at 05:51:24PM -0700, andrew fresh wrote: Is it possible to get net-snmp's snmpd to return an interface description for ifAlias[1]? If so, how? Well, nevermind, it got my interest up so here is a way that works. It doesn't check for bad input as well as it probably should.

Re: OpenSparc T1

2006-02-23 Thread Adam
On Thu, 23 Feb 2006 19:59:05 -0700 Theo de Raadt [EMAIL PROTECTED] wrote: No this is only processor documentation. http://marc.theaimsgroup.com/?l=openbsd-miscm=113398028623246w=2 Let me be clear. Imagine if we only had processor documentation for Intel-based machines: Its actually

Re: OpenSparc T1

2006-02-23 Thread Theo de Raadt
Its actually not only processor documentation though. Its docs for the new sun4v arch, specifically so people can port operating systems to it. Operating systems run on the hypervisor, not on the hardware. http://opensparc.sunsource.net/specs/Hypervisor-api-current-draft.pdf That

Re: OpenSparc T1

2006-02-23 Thread Adam
On Thu, 23 Feb 2006 21:08:26 -0700 Theo de Raadt [EMAIL PROTECTED] wrote: Its actually not only processor documentation though. Its docs for the new sun4v arch, specifically so people can port operating systems to it. Operating systems run on the hypervisor, not on the hardware.

PHP5 patch for FastCGI support.

2006-02-23 Thread openbsd_misc
Has anyone successfully gotten the patch provided by Frank Denis (of PureFTPD), found here: ftp://ftp.c9x.org/OpenBSD/misc/php5-fastcgi.patch to actually patch php5? If so, could you please lend a little insight in how you managed to do so. Thanks. -- [EMAIL PROTECTED] --

Re: OpenSparc T1

2006-02-23 Thread Siju George
On 2/24/06, Adam [EMAIL PROTECTED] wrote: On Thu, 23 Feb 2006 21:08:26 -0700 Theo de Raadt [EMAIL PROTECTED] wrote: Its actually not only processor documentation though. Its docs for the new sun4v arch, specifically so people can port operating systems to it. Operating systems run on

Re: python2.4 glitch

2006-02-23 Thread Tony Sterrett
On Wed, Feb 22, 2006 at 03:21:38AM -0800, Tony Sterrett wrote: I just compiled python2.4 which recommended for Zope 2.9.0. There a small glitch in configure. You'll get an error like below. Its late so just all reference to define_xopen_source starting around 1488. this has to do with select.

Re: OpenSparc T1

2006-02-23 Thread Theo de Raadt
We don't even have any documentation for Sun's ethernet chipsets, even the old gem found in machines which showed up on the market about 8-10 years ago. Let alone their newer chipsets, or their pci chipsets. And largely we suspect we don't get documentation because it would show how buggy their