Re: best userland visibility IDE/ATA hotswap-compatible controller

2007-04-12 Thread jared r r spiegel
On Fri, Apr 06, 2007 at 02:15:34AM -0400, jared r r spiegel wrote:
   poking archives, i have the impression that ami(4) family has the best
   chance of being the card with the greatest degree of userland
   visibility, but wanted to check if that's the case.

  gonna try arc(4) arc-1110

-- 

  jared



Re: Cannot upgrade from 3.8

2007-04-12 Thread Antti Harri

On Thu, 5 Apr 2007, Antti Harri wrote:


GENERIC (tried .MP too):

Last two lines of normal boot with just verbose set:

  pciide probe won

pciide0 at pci0 dev 15 function 0 VIA VT6420 SATA rev 0x80 DMA
(hangs)

Then disable pciide* in ukc makes it hang after uhci2 init.

Then disable pciide* and disable uhci* it finishes kernel
boot and panics because root cannot be mounted.

Then disable uhci* alone and it hangs at pciide.

Can I provide more information to help to solve the issue?


Anyone got any advice regarding the problem? I'm willing
to try the new SATA driver too when/if it becomes available
for my SATA chipset.

I'd really appreciate help, the installation (3.8) is already
unsupported and I'd like to upgrade it without changing any
parts.

PS. kind thanks to those already replied.

--
Antti Harri



Scrub options for bridge interfaces

2007-04-12 Thread carlopmart

Hi all,

 Somebody knows which scrub options do I need to put in pf.conf for bridge 
interfaces? I have an OpenBSD 4.0 fw with one bridge interface and when I try to 
launch cat command on a 18kb file, it stops.


Thanks.

--
CL Martinez
carlopmart {at} gmail {d0t} com



Re: verifying ntp via GPS configuration?

2007-04-12 Thread Marc Balmer

James Hartley wrote:

On 4/11/07, Otto Moerbeek [EMAIL PROTECTED] wrote:

sab0 at ebus0 addr 40-40007f ipl 43: rev 3.2
sabtty0 at sab0 port 0
sabtty1 at sab0 port 1

man sab gives: /dev/ttyh[0-1]

No separate callout device, it looks like.



Thanks for getting back to me.  Specifying /dev/ttyh0 (or /dev/ttyh1) gives
the same results.  I still don't see any sensor when issuing:

# sysctl hw

...nor is anything showing up in /var/log/daemon except for the following
message:

Apr 11 19:16:43 shockley savecore: no core dump

Do you have any other ideas?  Thanks.


When you use cu or tip directly on the serial line, do you see any NMEA 
0183 sentences?


- Marc



Re: verifying ntp via GPS configuration?

2007-04-12 Thread James Hartley
On 4/11/07, Marc Balmer [EMAIL PROTECTED] wrote:

 When you use cu or tip directly on the serial line, do you see any NMEA
 0183 sentences?


Thanks to both you Marc  Otto.  Your comments have helped with a number of
questions.  I'm currently questioning the power supplied to the Garmin which
I will get to tomorrow.  For now, I've gone back to my T43 laptop where I
have a USB Delorme GPS LT-20.  I can now see the sensor as well as NMEA
sentences through cu there.

Three questions.

I'm still not seeing anything appear in /var/log/daemon.  How soon should
log messages appear?

From the archives, I remember a statement made that without a pulse per
second (PPS) signal, a GPS unit would only be able to minimally coordinate
the time through ntpd.  This statement was also made in reference to a USB
unit.  Are PPS signals inherent to all GPS units but are lost through an USB
interface?  Is there something within the NMEA sentence traffic which should
tell me that I have a PPS signal?

Thanks again for your clarifications.



Re: scp problem with remote filename escaping

2007-04-12 Thread Otto Moerbeek
On Thu, 12 Apr 2007, Karel Kulhavy wrote:

 On Wed, Apr 11, 2007 at 10:02:50PM +0100, Stuart Henderson wrote:
  On 2007/04/11 13:41, Bryan Irvine wrote:
   snip
   I agree, spaces in filenames should be avoided. But spaces in
   filenames are legal, so programs need to support that; this seems like
   a case scp was never tested against because no one uses files with
   those names.
   
   I scp'd a file called 'a b' to an openbsd server here, then scp'd it
   back a couple time in different ways.  It worked only when using the
   quotes AND escaping, like so:
   
   scp [EMAIL PROTECTED]:a\ b .
  
  you have to escape to *both* your local shell, and the remote shell
 
 You must not escape to your local shell in case the scp process is called
 directly by e. g. exec() function in C.
 
 If you have to escape to the remote shell, then it should be mentioned
 in man scp. escape and shell don't occur in man scp and remote doesn't
 occur in such a context there.
 
 If I wrote it, I would do it in a way that scp performed the escaping
 for the remote shell automatically. Having to supply a different filename
 depending on where the file is goes against the local-remote transparency
 that scp is attempting at.

What you forget is that scp is implementing the same protocol that rcp
uses. The protocol has a lot of shortcomings. 

See http://www.openssh.com/faq.html#2.10

But it looks like sftp has some problem with spaces in file names
as well.

ie, this fails:

sftp remote:/tmp/a b .

In interactive mode, I can specify get 'a b', that works.

-Otto



Re: wireless ethernet adapters (seeking recommendations)

2007-04-12 Thread Wijnand Wiersma

2007/4/12, Darrin Chandler [EMAIL PROTECTED]:

On Thu, Apr 12, 2007 at 02:18:28AM +0200, Maxime DERCHE wrote:
 A recent thread (04/04/2007) on this list showed that the ralink
 chipsets are well supported by OpenBSD.

If I recall, there was also talk about lower signal strength with
ralink. For an access point this is important, but could be mitigated or
overcome by a high gain antenna.


I have that problem with ural. One stairs up and the signal already goes bad.
Both my laptop and AP are using ural.

If there are developers who whould like to have more information I am
sure willing to provide it.

Wijnand



PF Rules with Interfacenames ...

2007-04-12 Thread Wild Karl-Heinz
I use since the beginning of interface naming
this very nice feature in pf.

e.g.
pass in on lan_if from 10.0.0.1/8 flags S/SA keep state

This rule worked before -current.
Now I had to change the group name of
the interface to lan instead of lan_if.
Now it works again.

Is this a feature or my fault?

There wasn't a problem with the names wan_if, lan_if and dmz_if
before -current.

Thanks for infos.

Regards
Karl-Heinz



Re: wireless ethernet adapters (seeking recommendations)

2007-04-12 Thread Claudio Jeker
On Thu, Apr 12, 2007 at 02:15:45AM +0100, pedro la peu wrote:
  The usual recommendation is ral(4)
 
 Or acx(4), ath(4), rtw(4), rum(4), wi(4).
 

rtw(4) seems to have some issues with hostap. At least it did not send out
beacons. jsg@ may know more (I don't have such a card to play).

I'm a big fan of acx(4) as AP. acx(4) has an excellent radio chip compared
to ral(4) PCI card I used before. There are some high power wi(4) that
make also very nice access points (11b only but strong signal).

-- 
:wq Claudio



Re: PF Rules with Interfacenames ...

2007-04-12 Thread Peter N. M. Hansteen
Wild Karl-Heinz [EMAIL PROTECTED] writes:

 Is this a feature or my fault?

Not sure what you used to do, but you can set group additional names
for interfaces yourself with ifconfig or via hostname.if

-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://www.blug.linux.no/rfc1149/ http://www.datadok.no/ http://www.nuug.no/
First, we kill all the spammers The Usenet Bard, Twice-forwarded tales
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.



Re: verifying ntp via GPS configuration?

2007-04-12 Thread Marc Balmer

James Hartley wrote:

On 4/11/07, Marc Balmer [EMAIL PROTECTED] wrote:


When you use cu or tip directly on the serial line, do you see any NMEA
0183 sentences?



Thanks to both you Marc  Otto.  Your comments have helped with a number of
questions.  I'm currently questioning the power supplied to the Garmin 
which


The Garmin GPS18 LVC needs 5V power supply.  I used a free USB port to 
steal it.



I will get to tomorrow.  For now, I've gone back to my T43 laptop where I
have a USB Delorme GPS LT-20.  I can now see the sensor as well as NMEA
sentences through cu there.

Three questions.

I'm still not seeing anything appear in /var/log/daemon.  How soon should
log messages appear?

 From the archives, I remember a statement made that without a pulse per
second (PPS) signal, a GPS unit would only be able to minimally coordinate
the time through ntpd.  This statement was also made in reference to a USB
unit.  Are PPS signals inherent to all GPS units but are lost through an 
USB
interface?  Is there something within the NMEA sentence traffic which 
should

tell me that I have a PPS signal?


Not all GPS receivers have a PPS signal.  If you use -current, the time 
information is quite precise, even w/o PPS (you will be off by 100-200 
ms).  And no, you will not see in NMEA traffic if there is a PPS signal.


And one last thing:  You need to program you GPS unit to actually issue 
the PPS signal.




Thanks again for your clarifications.



You're welcome, but make sure you read the documentation of your Garmin 
unit.




snmpd hangs on 4.1 looking up hrSWRunTable

2007-04-12 Thread daniele . pilenga
Hi misc@,
while testing the to be released 4.1 I found a problem with the 
snmpd daemon (package is net-snmp-5.1.3p5).

Trying, from another machine a command like this:

snmptable -c public -v 1 1.2.3.4 HOST-RESOURCES-MIB::hrSWRunTable

where 1.2.3.4 is the ip address of the OpenBSD server, the snmpd daemon 
hangs eating all the cpu it can find.

I tried running the daemon as:

snmpd -d -D -f -q -u nobody -g nobody

to see the debug output. The last lines are

snmp_agent: tp-start HOST-RESOURCES-MIB::hrSWRunType, tp-end 
HOST-RESOURCES-MIB::hrSWRunStatus, 
trace: netsnmp_add_varbind_to_cache(): snmp_agent.c, 1806:
snmp_agent: add_vb_to_cache(0x87eab780, 7, 
HOST-RESOURCES-MIB::hrSWRunStatus, 0x872d2180)
trace: snmp_call_callbacks(): callback.c, 176:
callback: START calling callbacks for maj=1 min=12
trace: snmp_call_callbacks(): callback.c, 184:
callback: calling a callback for maj=1 min=12
trace: vacm_in_view(): mibII/vacm_vars.c, 747:
mibII/vacm_vars: vacm_in_view: ver=0, community=public
trace: netsnmp_udp_getSecName(): snmpUDPDomain.c, 744:
netsnmp_udp_getSecName: resolve public, 0x2d06bc0a
trace: netsnmp_udp_getSecName(): snmpUDPDomain.c, 749:
netsnmp_udp_getSecName: compare public, 0x4a0110ac/0x... nope
trace: netsnmp_udp_getSecName(): snmpUDPDomain.c, 749:
netsnmp_udp_getSecName: compare public, 0x2c05bc0a/0x... nope
trace: netsnmp_udp_getSecName(): snmpUDPDomain.c, 749:
netsnmp_udp_getSecName: compare public, 0x2d06bc0a/0x... 
SUCCESS
trace: netsnmp_subtree_find_first(): agent_registry.c, 156:
subtree: looking for subtree for context: 
trace: netsnmp_subtree_find_first(): agent_registry.c, 160:
subtree: found one for: 
trace: vacm_in_view(): mibII/vacm_vars.c, 854:
mibII/vacm_vars: vacm_in_view: sn=anonymousSecName002, 
gn=anonymousGroupName002, vn=anonymousView002
trace: vacm_checkSubtree(): vacm.c, 526:
vacm:checkSubtree: , included
trace: snmp_call_callbacks(): callback.c, 196:
callback: END calling callbacks for maj=1 min=12 (1 called)
trace: netsnmp_add_varbind_to_cache(): snmp_agent.c, 1871:
snmp_agent: tp-start HOST-RESOURCES-MIB::hrSWRunStatus, tp-end 
HOST-RESOURCES-MIB::hrSWRunEntry.8, 
trace: netsnmp_call_handlers(): agent_handler.c, 443:
handler:calling: main handler bulk_to_next
trace: netsnmp_call_handler(): agent_handler.c, 381:
handler:calling: calling handler bulk_to_next for mode GETNEXT
trace: netsnmp_call_handler(): agent_handler.c, 381:
handler:calling: calling handler old_api for mode GETNEXT
trace: header_hrswrunEntry(): host/hr_swrun.c, 378:
host/hr_swrun: var_hrswrunEntry: HOST-RESOURCES-MIB::hrSWRunIndex 0
(index 20 (entry #1) HOST-RESOURCES-MIB::hrSWRunIndex
 saved

at this time there is no other output and the daemon is running at full 
speed.

The same happens on another 4.1 so I don't think it's hw related.

# dmesg | head -2
OpenBSD 4.1-current (GENERIC) #1466: Fri Apr  6 01:36:13 MDT 2007
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC

# snmpd -v

NET-SNMP version:  5.1.3
Web:   http://www.net-snmp.org/
Email: [EMAIL PROTECTED]

Any ideas?

D.



Bridge over gif on 4.1

2007-04-12 Thread Renaud Allard
Hello,

I have a setup like this:

***
router1
hostname.gif0: up tunnel 172.17.0.170 195.16.12.50
hostname.sis0: inet 172.17.0.170 255.255.0.0 NONE
hostname.sis1: up
bridgename.bridge0: add gif0
add sis1
up

ipsec.conf: ike esp proto etherip from 172.17.0.170 to 195.16.12.50

# netstat -nr | tail -2
195.16.12.50/320 172.17.0.170/320 97
195.16.12.50/esp/use/in
172.17.0.170/320 195.16.12.50/320 97
195.16.12.50/esp/require/out

# brconfig


bridge0: flags=41UP,RUNNING
priority 32768 hellotime 2 fwddelay 15 maxage 20 holdcnt 6 proto
rstp
sis1 flags=3LEARNING,DISCOVER
port 2 ifpriority 0 ifcost 0
gif0 flags=3LEARNING,DISCOVER
port 14 ifpriority 0 ifcost 0
Addresses (max cache: 100, timeout: 240):
00:11:85:25:fa:00 sis1 1 flags=0
00:11:85:21:09:40 sis1 1 flags=0
00:30:05:d1:17:58 sis1 1 flags=0
etc

***

router2
hostname.gif0: up tunnel 195.16.12.50 172.17.0.170
hostname.sis0: inet 195.16.12.50 255.255.254.0 NONE
hostname.sis1: up
bridgename.bridge0: add gif0
add sis1
up

ipsec.conf: ike esp proto etherip from 195.16.12.50 to 172.17.0.170

# netstat -nr | tail -2
172.17.0.170/320 195.16.12.50/320 97
172.17.0.170/esp/use/in
195.16.12.50/320 172.17.0.170/320 97
172.17.0.170/esp/require/out

# brconfig
bridge0: flags=41UP,RUNNING
priority 32768 hellotime 2 fwddelay 15 maxage 20 holdcnt 6 proto
rstp
sis1 flags=3LEARNING,DISCOVER
port 2 ifpriority 0 ifcost 0
gif0 flags=3LEARNING,DISCOVER
port 10 ifpriority 0 ifcost 0
Addresses (max cache: 100, timeout: 240):
00:09:6b:45:27:59 sis1 1 flags=0


*


If I do tcpdump -ttt -n -e -vv -i gif0 on both routers, I see some
traffic. But this is only local traffic, no packet is forwarded between
both routers. If I do a tcpdump on the only router between router1 and
router2, I see no traffic except the ipsec negotiation.

I changed net.inet.ip.forwarding=1 and net.inet.etherip.allow=1 but it
did not help.

Is something wrong with my configuration?



Re: undeadly.org down?

2007-04-12 Thread Martin Schröder

2007/4/12, Jason Dixon [EMAIL PROTECTED]:

I noticed this three hours ago and emailed Daniel.  The NS records
for undeadly.org have disappeared from all *ultradns* root
nameservers for .org.  Unfortunately, it's the middle of the night
where he's at, probably dreaming of anything but missing NS records.  :)


UltraDNS is completely down.

Best
  Martin



Re: undeadly.org down?

2007-04-12 Thread Christophe Lucas
jared r r spiegel ([EMAIL PROTECTED]) wrote:
 On Wed, Apr 11, 2007 at 11:48:04PM -0400, Jason Dixon wrote:
 
  Unfortunately, it's the middle of the night  
  where he's at, probably dreaming of anything but missing NS records.  :)
 
   needs more benzedrine :(

Hi guys,

INSOMNIA.BENZEDRINE.CX is down. The problem is here.

Regards,

- Christophe -



Re: GPL is free for forcing people to free code when they publish, not free as in free to do what you want, which is actually what free as in BSD, and real freedom ends at the tip of my nose

2007-04-12 Thread Nick Holland
Jack J. Woehr wrote:
 On Apr 11, 2007, at 2:25 PM, chefren wrote:
 
 Clearly not to death and people here are seriously interested in  
 pro and contra arguments.
 
 Hey, if you young folks still have all that typing power in your  
 fingers, please bang on the
 code for BSD some more!
 

Or finish a few GPL projects.  Or BSD projects.  Or proactively
audit some code.  Or or or...

There is lots of work that can be done to make the world better.
Encouraging the various choirs to preach at each other is
unlikely to change any minds, nor is it going to make the world
better.

Nick.



Re: undeadly.org down?

2007-04-12 Thread Jason Dixon

On Apr 12, 2007, at 6:24 AM, Martin Schrvder wrote:


2007/4/12, Jason Dixon [EMAIL PROTECTED]:

I noticed this three hours ago and emailed Daniel.  The NS records
for undeadly.org have disappeared from all *ultradns* root
nameservers for .org.  Unfortunately, it's the middle of the night
where he's at, probably dreaming of anything but missing NS
records.  :)


UltraDNS is completely down.


Wrong.  The UltraDNS root org servers resolve metabug.org just fine.
I got a response from Daniel that confirms what I reported.  It was a
registration issue and has already been fixed.

--
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net



Dell Latitude D820

2007-04-12 Thread Siju George

Hi,

Is there anyone using a Dell  Latitude D820 with OpenBSD 4.0
and can see both Processors with the bsd.mp kernel?

Also Are you able to run X in

Depth 24
Modes 1024x768

Thankyou so much

Kind Regards

Siju



Re: Dell Latitude D820

2007-04-12 Thread Marco Peereboom
You need 4.1 for that model.  Might even need -current.

On Thu, Apr 12, 2007 at 05:47:03PM +0530, Siju George wrote:
 Hi,
 
 Is there anyone using a Dell  Latitude D820 with OpenBSD 4.0
 and can see both Processors with the bsd.mp kernel?
 
 Also Are you able to run X in
 
 Depth 24
 Modes 1024x768
 
 Thankyou so much
 
 Kind Regards
 
 Siju



Deleting SAs with ipsecctl

2007-04-12 Thread Martin Hedenfalk

Hello misc,

I'm trying to delete individual tunnels with ipsecctl:

This is on the 4.1 snapshots from April 6.
# uname -a
OpenBSD localhost 4.1 GENERIC#1466 i386

First I delete the flows:
# ipsecctl -sf
flow esp in from 10.0.0.0/29 to 0.0.0.0/0 peer 192.168.5.12 srcid  
[EMAIL PROTECTED] dstid test type use
flow esp out from 0.0.0.0/0 to 10.0.0.0/29 peer 192.168.5.12 srcid  
[EMAIL PROTECTED] dstid test type require

# ipsecctl -sf | ipsecctl -d -f-
# ipsecctl -sf
That works fine.

Then I try to delete the SAs:
# ipsecctl -ss
esp tunnel from 192.168.5.5 to 192.168.5.12 spi 0x17661dae auth hmac- 
sha2-256 enc aes
esp tunnel from 192.168.5.12 to 192.168.5.5 spi 0x268063a2 auth hmac- 
sha2-256 enc aes

# ipsecctl -ss | ipsecctl -d -f-
stdin: 1: no authentication key specified
stdin: 2: no authentication key specified
ipsecctl: Syntax error in config file: ipsec rules not loaded
#

What authentication key is needed? How can I remove a specific SA?

I should add that this is on a passive IPsec aggregator with many  
dynamic tunnels from road warrior type peers.


-martin



Re: Dell Latitude D820

2007-04-12 Thread Siju George

On 4/12/07, Kenneth R Westerback [EMAIL PROTECTED] wrote:

On Thu, Apr 12, 2007 at 07:40:38AM -0500, Marco Peereboom wrote:
 You need 4.1 for that model.  Might even need -current.

 On Thu, Apr 12, 2007 at 05:47:03PM +0530, Siju George wrote:
  Hi,
 
  Is there anyone using a Dell  Latitude D820 with OpenBSD 4.0
  and can see both Processors with the bsd.mp kernel?
 
  Also Are you able to run X in
 
  Depth 24
  Modes 1024x768
 
  Thankyou so much
 
  Kind Regards
 
  Siju


Any you probably need to use a kernel with ACPI enabled. At least on
my D620 you do.



Thankyou so much Kenneth for that tip :-)

Kind Regards

Siju



Re: undeadly.org down?

2007-04-12 Thread Dan Farrell
Agreed. I tested the nameservers responsible for hosting that domain as
well at the time of the 'outage' and they responded just fine.

Jason's right, please research your responses before posting to avoid
misinformation.


danno

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of Jason Dixon
Sent: Thursday, April 12, 2007 7:18 AM
To: Christophe Lucas
Cc: OpenBSD Misc
Subject: Re: undeadly.org down?

On Apr 12, 2007, at 4:44 AM, Christophe Lucas wrote:

 jared r r spiegel ([EMAIL PROTECTED]) wrote:
 On Wed, Apr 11, 2007 at 11:48:04PM -0400, Jason Dixon wrote:

 Unfortunately, it's the middle of the night
 where he's at, probably dreaming of anything but missing NS
 records.  :)

   needs more benzedrine :(

 Hi guys,

 INSOMNIA.BENZEDRINE.CX is down. The problem is here.

Wrong.  I tested insomnia numerous times and it resolved fine.  I got
a response from Daniel that confirms what I reported.  It was a
registration issue and has already been fixed.

P.S.  People, quit spreading misinformation.

--
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net



Re: Routerboards (was: Re: Routerboard 532 Bounty)

2007-04-12 Thread Paul de Weerd
On Thu, Apr 12, 2007 at 10:44:10AM -0400, Bret Lambert wrote:
| On Wed, 2007-04-11 at 12:15 -0600, Chris Kuethe wrote:
|  I sent a couple of emails - hey, this sounds like a nice plan, tell
|  me more - and never heard back one way or the other. *shrug* I have a
|
| That's unfortunate; they looked like neat little boxes.
|
| My curiosity was piqued, and I started looking around, and found
| embeddedplanet.com, but that seems to be aimed more at commercial system
| developers than end-users.
|
| So, a question to the list: besides soekris and WRAP boards (and the
| specific board that began the thread), what tiny, non-PC machines are
| out there and useful?

Not really an answer to your question (as it's i386), but I have a
Fabiatech FX5620 w/ a VIA Eden 1GHz CPU and 256MB of RAM. It has 1x
re(4) and 5x (rl). I added a 1GB CF disk as wd0 and a ral(4) for WiFi
access. It's very low power (24V DC @ 1.25A), has serial (no BIOS
support, unfortunately) and completely silent.

Alas, OpenBSD crashes on my machine after some running time for (as
yet) unknown reasons - could very well be this particular machine (if
anyone else on the list has this machine running OpenBSD, let me know)

Cheers,

Paul 'WEiRD' de Weerd

--
[++-]+++.+++[---].+++[+
+++-].++[-]+.--.[-]
 http://www.weirdnet.nl/

[demime 1.01d removed an attachment of type application/pgp-signature]



Re: Bridge over gif on 4.1

2007-04-12 Thread Renaud Allard
When sniffing on gif0 (tcpdump -ttt -n -e -i gif0), I get:
Apr 12 17:28:53.857812
Apr 12 17:28:53.860054
Apr 12 17:28:53.893533
Apr 12 17:28:53.976284
Apr 12 17:28:54.023758
Apr 12 17:28:54.024148
Apr 12 17:28:54.024565
Apr 12 17:28:54.079725
Apr 12 17:28:54.094511
Apr 12 17:28:54.145102

Nothing more. Has someone any idea on why I don't see the packets?

I tried setting the gif0 mtu to 1500 in case this could be a mtu
problem, but I still get the same thing. ARP broadcasts don't seem to
pass through the tunnel.

Renaud Allard wrote:
 Hello,
 
 I have a setup like this:
 
 ***
 router1
 hostname.gif0: up tunnel 172.17.0.170 195.16.12.50
 hostname.sis0: inet 172.17.0.170 255.255.0.0 NONE
 hostname.sis1: up
 bridgename.bridge0:   add gif0
   add sis1
   up
 
 ipsec.conf: ike esp proto etherip from 172.17.0.170 to 195.16.12.50
 
 # netstat -nr | tail -2
 195.16.12.50/320 172.17.0.170/320 97
 195.16.12.50/esp/use/in
 172.17.0.170/320 195.16.12.50/320 97
 195.16.12.50/esp/require/out
 
 # brconfig
 
 
 bridge0: flags=41UP,RUNNING
 priority 32768 hellotime 2 fwddelay 15 maxage 20 holdcnt 6 proto
 rstp
 sis1 flags=3LEARNING,DISCOVER
 port 2 ifpriority 0 ifcost 0
 gif0 flags=3LEARNING,DISCOVER
 port 14 ifpriority 0 ifcost 0
 Addresses (max cache: 100, timeout: 240):
 00:11:85:25:fa:00 sis1 1 flags=0
 00:11:85:21:09:40 sis1 1 flags=0
 00:30:05:d1:17:58 sis1 1 flags=0
   etc
 
 ***
 
 router2
 hostname.gif0: up tunnel 195.16.12.50 172.17.0.170
 hostname.sis0: inet 195.16.12.50 255.255.254.0 NONE
 hostname.sis1: up
 bridgename.bridge0:   add gif0
   add sis1
   up
 
 ipsec.conf: ike esp proto etherip from 195.16.12.50 to 172.17.0.170
 
 # netstat -nr | tail -2
 172.17.0.170/320 195.16.12.50/320 97
 172.17.0.170/esp/use/in
 195.16.12.50/320 172.17.0.170/320 97
 172.17.0.170/esp/require/out
 
 # brconfig
 bridge0: flags=41UP,RUNNING
 priority 32768 hellotime 2 fwddelay 15 maxage 20 holdcnt 6 proto
 rstp
 sis1 flags=3LEARNING,DISCOVER
 port 2 ifpriority 0 ifcost 0
 gif0 flags=3LEARNING,DISCOVER
 port 10 ifpriority 0 ifcost 0
 Addresses (max cache: 100, timeout: 240):
 00:09:6b:45:27:59 sis1 1 flags=0
 
 
 *
 
 
 If I do tcpdump -ttt -n -e -vv -i gif0 on both routers, I see some
 traffic. But this is only local traffic, no packet is forwarded between
 both routers. If I do a tcpdump on the only router between router1 and
 router2, I see no traffic except the ipsec negotiation.
 
 I changed net.inet.ip.forwarding=1 and net.inet.etherip.allow=1 but it
 did not help.
 
 Is something wrong with my configuration?



Re: scp problem with remote filename escaping

2007-04-12 Thread Matthew R. Dempsky
On Thu, Apr 12, 2007 at 10:44:52AM -0400, Dan Farrell wrote:
 Wait, so every time documentation is inaccurate or incomplete or simply
 not to your liking, you're going to call it a bug

``incorrect documentation is a bug''
 --http://www.openbsd.org/papers/opencon06-culture.pdf

 (of the application no less!)?

He never said it was the application's fault, just that `file1',
`file2', ... are shell expanded by the remote host, but the
documentation does not point this out.

How about something like below?  (I don't love the wording, but
hopefully it's a start.)

Index: scp.1
===
RCS file: /cvs/src/usr.bin/ssh/scp.1,v
retrieving revision 1.40
diff -u -r1.40 scp.1
--- scp.1   18 Jul 2006 07:56:28 -  1.40
+++ scp.1   12 Apr 2007 15:47:32 -
@@ -58,6 +58,8 @@
 .Pp
 Any file name may contain a host and user specification to indicate
 that the file is to be copied to/from that host.
+The file name component of such an argument is also passed
+to the specified host's login shell for expansion and splitting.
 Copies between two remote hosts are permitted.
 .Pp
 The options are as follows:



Re: scp problem with remote filename escaping

2007-04-12 Thread Dan Farrell
A bug of what though? He, in fact, did say it was a bug of the
application, but because he felt the documentation was incomplete.

 All the more without an encoding which depends on where the file
actually lies.
Sounds like a bug to me - the escaping for the remote shell is not being
done correctly?

He's not referring to the documentation as the bug, but rather the
application itself, but he derived that from his problem with the
documentation.

If the bug is in the documentation, fine... but address it as such, not
as an accusation of the application itself (which others have
subsequently proven works correctly for what he was attempting to
achieve.)

I'm done splitting hairs,

danno


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of Matthew R. Dempsky
Sent: Thursday, April 12, 2007 11:59 AM
To: OpenBSD
Subject: Re: scp problem with remote filename escaping

On Thu, Apr 12, 2007 at 10:44:52AM -0400, Dan Farrell wrote:
 Wait, so every time documentation is inaccurate or incomplete or
simply
 not to your liking, you're going to call it a bug

``incorrect documentation is a bug''
 --http://www.openbsd.org/papers/opencon06-culture.pdf

 (of the application no less!)?

He never said it was the application's fault, just that `file1',
`file2', ... are shell expanded by the remote host, but the
documentation does not point this out.

How about something like below?  (I don't love the wording, but
hopefully it's a start.)

Index: scp.1
===
RCS file: /cvs/src/usr.bin/ssh/scp.1,v
retrieving revision 1.40
diff -u -r1.40 scp.1
--- scp.1   18 Jul 2006 07:56:28 -  1.40
+++ scp.1   12 Apr 2007 15:47:32 -
@@ -58,6 +58,8 @@
 .Pp
 Any file name may contain a host and user specification to indicate
 that the file is to be copied to/from that host.
+The file name component of such an argument is also passed
+to the specified host's login shell for expansion and splitting.
 Copies between two remote hosts are permitted.
 .Pp
 The options are as follows:



Re: Dell Latitude D820

2007-04-12 Thread Siju George

On 4/12/07, Marco Peereboom [EMAIL PROTECTED] wrote:

You need 4.1 for that model.  Might even need -current.



I installed the Latest Snapshot.

Directory: i386 04/10/0719:03:00

now runing

# uname -a
OpenBSD current.openbsd.local 4.1 GENERIC.MP#1260 i386

It Still Doesn't Detects both CPU's in the .Intel Core Duo T2300 1.67

http://reviews.cnet.com/Dell_Latitude_D820/4507-3121_7-31792100.html

# cat /var/run/dmesg.boot |grep cpu
cpu0: Intel(R) Core(TM)2 CPU T5600 @ 1.83GHz (GenuineIntel 686-class) 1.83 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,CX16,xTPR
cpu0 at mainbus0: (uniprocessor)
#

and the surprising thing

X does not start :-)

feels like going back to iobsd. at least it has good disk support
with ReiserFS;-)  [ again not to troll folks who missed iobsd ftp ISO
downloads, the ISOs will appear soon on the website again, make sure
you come back and check ;-) ]

It would be great if some one can give me a clue where to Go from here now.

1) get the latest current sources
2) build Kernel and Userland from sources and Install them as said in
   http://www.openbsd.org/faq/current.html

and pray X comes up right?

now I should be doing

$cd /usr  cvs checkout -P xenocara

right?

and not XF4

The Xorg log file and Full dmesg are given below.
If some one can help me :-) else i am going Marco's way to iobsd ;-)

( By the way io in my language ( Malayalam ) means Oh My God! What
have you done? or similar said in a shock. The thing you say when a
brick unexpectedly falls on your foot :-) LOL!

Thankyou so much :-)

Kind regards

Siju

Xorg log file is long.
I think the nutshell is given by the following lines in it ?

***
(II) wsfb(1): using default device
(--) Assigning device section with no busID to primary device
(--) Chipset vesa found
(--) Assigning device section with no busID to primary device
(--) Chipset generic found

Fatal server error:
Cannot run in framebuffer mode. Please specify busIDsfor all
framebuffer devices
*
=
# dmesg
OpenBSD 4.1-current (GENERIC.MP) #1260: Fri Apr  6 01:51:07 MDT 2007
   [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC.MP
cpu0: Intel(R) Core(TM)2 CPU T5600 @ 1.83GHz (GenuineIntel 686-class) 1.83 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,CX16,xTPR
real mem  = 1071742976 (1046624K)
avail mem = 970452992 (947708K)
using 4278 buffers containing 53710848 bytes (52452K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+ BIOS, date 12/18/06, BIOS32 rev. 0 @
0xffa10, SMBIOS rev. 2.4 @ 0xf6df0 (64 entries)
bios0: Dell Inc. Latitude D820
pcibios0 at bios0: rev 2.1 @ 0xf/0x1
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfa930/240 (13 entries)
pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82371 ISA and IDE rev 0x00)
pcibios0: PCI bus #13 is the last bus
bios0: ROM list: 0xc/0x1
acpi at mainbus0 not configured
cpu0 at mainbus0: (uniprocessor)
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 Intel 82945GM MCH rev 0x03
ppb0 at pci0 dev 1 function 0 Intel 82945GM PCIE rev 0x03
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 NVIDIA GeForce 7300 Go rev 0xa1
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
azalia0 at pci0 dev 27 function 0 Intel 82801GB HD Audio rev 0x01: irq 11
azalia0: host: High Definition Audio rev. 1.0
azalia0: codec: Sigmatel STAC9220 (rev. 34.1), HDA version 1.0
azalia0: codec: 0x04x/0x14f1 (rev. 0.0), HDA version 0.9
azalia0: codec[1]: No support for modem function groups
azalia0: codec[1]: No audio function groups
audio0 at azalia0
ppb1 at pci0 dev 28 function 0 Intel 82801GB PCIE rev 0x01
pci2 at ppb1 bus 11
ppb2 at pci0 dev 28 function 1 Intel 82801GB PCIE rev 0x01
pci3 at ppb2 bus 12
wpi0 at pci3 dev 0 function 0 Intel PRO/Wireless 3945ABG rev 0x02:
irq 3, address 00:19:d2:bc:22:93
ppb3 at pci0 dev 28 function 2 Intel 82801GB PCIE rev 0x01
pci4 at ppb3 bus 9
bge0 at pci4 dev 0 function 0 Broadcom BCM5752 rev 0x02, BCM5752 A2
(0x6002): irq 5, address 00:19:b9:60:bc:91
brgphy0 at bge0 phy 1: BCM5752 10/100/1000baseT PHY, rev. 0
ppb4 at pci0 dev 28 function 3 Intel 82801GB PCIE rev 0x01
pci5 at ppb4 bus 13
uhci0 at pci0 dev 29 function 0 Intel 82801GB USB rev 0x01: irq 10
uhci1 at pci0 dev 29 function 1 Intel 82801GB USB rev 0x01: irq 11
uhci2 at pci0 dev 29 function 2 Intel 82801GB USB rev 0x01: irq 9
uhci3 at pci0 dev 29 function 3 Intel 82801GB USB rev 0x01: irq 5
ehci0 at pci0 dev 29 function 7 Intel 

Re: Dell Latitude D820

2007-04-12 Thread Otto Moerbeek
On Thu, 12 Apr 2007, Siju George wrote:

 On 4/12/07, Marco Peereboom [EMAIL PROTECTED] wrote:
  You need 4.1 for that model.  Might even need -current.
  
 
 I installed the Latest Snapshot.
 
 Directory: i386   04/10/0719:03:00
 
 now runing
 
 # uname -a
 OpenBSD current.openbsd.local 4.1 GENERIC.MP#1260 i386
 
 It Still Doesn't Detects both CPU's in the .Intel Core Duo T2300 1.67
 
 http://reviews.cnet.com/Dell_Latitude_D820/4507-3121_7-31792100.html
 
 # cat /var/run/dmesg.boot |grep cpu
 cpu0: Intel(R) Core(TM)2 CPU T5600 @ 1.83GHz (GenuineIntel 686-class) 1.83
 GHz
 cpu0:
 FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,CX16,xTPR
 cpu0 at mainbus0: (uniprocessor)
 #

Try enabling acpi: boot -c, then enable acpi. If that works, you can
make it permanent using config -e -o /bsd /bsd

Don't know about X. 
 
 and the surprising thing
 
 X does not start :-)
 
 feels like going back to iobsd. at least it has good disk support
 with ReiserFS;-)  [ again not to troll folks who missed iobsd ftp ISO
 downloads, the ISOs will appear soon on the website again, make sure
 you come back and check ;-) ]
 
 It would be great if some one can give me a clue where to Go from here now.
 
 1) get the latest current sources
 2) build Kernel and Userland from sources and Install them as said in
http://www.openbsd.org/faq/current.html
 
 and pray X comes up right?
 
 now I should be doing
 
 $cd /usr  cvs checkout -P xenocara
 
 right?

Just use the latest snapshot. Check your aperture
(machdep.allowaperture=2) setting and the log file you gave as an
argument. It complains about both in the log. 

-Otto



Re: bcw(4) is gone

2007-04-12 Thread Open Phugu

On 4/11/07, Mike Erdely [EMAIL PROTECTED] wrote:

On Wed, Apr 11, 2007 at 08:20:51PM +0200, Timo Schoeler wrote:
 On Wed, 11 Apr 2007 20:08:44 +0200 Marc Balmer wrote:
   [X] -- communism isn't as bad as the GPL ;)
  [X] marco is a communist
 no; if so, he's as good as communist as George W. Bush as president.

WTF!  What the hell does GPL, communism or GWB have to do with OpenBSD?
Let this thread die.

-ME

/me agrees. This is a list about OpenBSD. Discussion about the GPL
*may* have its
place, but *please* don't interject politics into the discussion.
I dislike the GPL, but calling it communism is useless.



isakmpd multiple tunnels

2007-04-12 Thread Tim Pushor

Hi friends,

I'm looking to add another IPSEC connection to my openbsd 3.9 firewall. 
All examples I've seen are a single connection (phase 1). To support 
multiple vpn's tunnels, is it as simple as adding additional lines under 
[Phase 1] pointing to the new phase1 configuration block?


Thanks!



Re: wireless ethernet adapters (seeking recommendations)

2007-04-12 Thread Niall O'Higgins
On Thu, Apr 12, 2007 at 09:37:31AM +0200, Wijnand Wiersma wrote:
 2007/4/12, Darrin Chandler [EMAIL PROTECTED]:
 On Thu, Apr 12, 2007 at 02:18:28AM +0200, Maxime DERCHE wrote:
  A recent thread (04/04/2007) on this list showed that the ralink
  chipsets are well supported by OpenBSD.
 
 If I recall, there was also talk about lower signal strength with
 ralink. For an access point this is important, but could be mitigated or
 overcome by a high gain antenna.
 
 I have that problem with ural. One stairs up and the signal already goes 
 bad.
 Both my laptop and AP are using ural.
 
 If there are developers who whould like to have more information I am
 sure willing to provide it.

Interesting, I have always found the radio in ural(4) (and rum(4) which
is next-generation chip) to be excellent.  Much better than ral(4) and
even wi(4) in my experience. 

Could you send me a dmesg privately? 



Re: a question kinda pff topic

2007-04-12 Thread Dan Farrell
Before committing to wood, have a look at this implementation... it's
cheap.

http://www.engadget.com/2006/04/11/how-to-rackmount-your-gear-for-cheap/

danno

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of Dave
Sent: Thursday, April 12, 2007 11:38 AM
To: [EMAIL PROTECTED]
Subject: a question kinda pff topic

I have a question not about the software but where you put your network
stuff
has any one built there own rack out of wood I am looking at building my
own.



GRAPE cluster supercomputer + OpenBSD

2007-04-12 Thread Vim Visual

Hi,

my home institute has bought (for me) a cluster of 4 nodes with the
special-purpose hardware called GRAPE; it's for astrophysical
simulations. The cards (the GRAPEs) just calculate the gravitational
forces and accelerate the calculations a lot. In parallel the cluster
can achieve a peak performance of 0.5 Teraflops.

This is the GRAPE card

http://www.metrix.co.jp/grape6A.html

Now... I'd like to install OpenBSD on the cluster, of course... all I
need is in the OS. But our IT department is not that happy... they
want a debian and I'm very crossed.

According to them, there aren't any drivers for the Raid Controller...
Is that true?

Thanks,

Pau



Re: GRAPE cluster supercomputer + OpenBSD

2007-04-12 Thread Nick Guenther

On 4/12/07, Vim Visual [EMAIL PROTECTED] wrote:

This is the GRAPE card

http://www.metrix.co.jp/grape6A.html

Now... I'd like to install OpenBSD on the cluster, of course... all I
need is in the OS. But our IT department is not that happy... they
want a debian and I'm very crossed.

According to them, there aren't any drivers for the Raid Controller...
Is that true?


What RAID? This is a PCI card. It might be that there are no drivers
for the card itself. The webpage says the CD contains an interface
library but doesn't explain that and the link at the bottom is dead.
It might be that the library talks directly to the PCI bus? In that
case it would probably be linux-specific.

It might actually be simpler to go with debian. If you really want
OpenBSD, you could do the data analysis on the debian and pipe it over
a socket to OpenBSD, though depending on your usage this might be a
bottleneck, completely eliminating the use of having hardware
acceleration in the first place.

-Nick



Re: GRAPE cluster supercomputer + OpenBSD

2007-04-12 Thread Matthew R. Dempsky
On Thu, Apr 12, 2007 at 08:12:20PM +0200, Vim Visual wrote:
 According to them, there aren't any drivers for the Raid Controller...
 Is that true?

OpenBSD has drivers for RAID controllers, but you'll need to provide
more details to answer the question of whether OpenBSD has drivers for
your RAID controllers.

Alternatively, just try booting the OpenBSD CD image and see what it
detects.



Re: a question kinda pff topic

2007-04-12 Thread Bill Chmura
On Thu, 12 Apr 2007 11:38:12 -0400
Dave [EMAIL PROTECTED] wrote:

 I have a question not about the software but where you put your network stuff
 has any one built there own rack out of wood I am looking at building my own.
 

Being a fine woodworking freak this was an interesting question.  I have built 
many things our of wood - but I have never built a rack.  I've considered 
making a desktop case out of it once, but that was more for the novelty of it.

   Personally I don't think its a good idea, but was wondering why were 
considering it?  



Re: My hard-to-kill OpenBSD

2007-04-12 Thread Tim
 Date: Thu, 12 Apr 2007 08:48:26 -0700 (PDT)
 From: Obiozor Okeke [EMAIL PROTECTED]
 Subject: Re: My hard-to-kill OpenBSD
 To: Rico Secada [EMAIL PROTECTED], [EMAIL PROTECTED]
 
  I try to  explain to my Linux friends just how
 great a system OpenBSD really is and some people
 just don't get it!  I am MUCH more productive
 because I can go and do more work and a higher
 quality of work without having to tend to or keep
 checking up on a fragile box - I've even had an
 OpenBSD box run strong with a bad memory bank (that
 Linux would not install on)!

I've noticed that to a lot of techies have this attitude:

if it isn't GUI, it's not worth knowing.

I said GUI instead of Windows because now that you can do a lot of 
things with a GUI on Linux, even the Linux people are starting to 
have this attitude, especially newbies.  It's even frustrating to 
teach a newbie the advantages of vi.  Never mind that I would much 
rather talk a computer-illiterate person over the phone on how to 
change a configuration file with vi than any other GUI text editor.

When I first started toying with OpenBSD, I installed it on an old 
system laying around.  Then I got bored and tried to install 
Debian, Red  Hat, NetBSD, and FreeBSD.  All of them could not get 
past the installation routines.  So I put OpenBSD back on.  This 
really isn't a fair story because it was so long ago and I don't 
remember all the details.  But I do remember the impression OpenBSD 
had on me because of this. 

--
Need cash? Click to get an instant cash advance
http://tagline.hushmail.com/fc/CAaCXv1KmERGDiMZuZL4koo1G8xit51z/



Re: a question kinda pff topic

2007-04-12 Thread Jonathan A. Lindsey
I'd just go buy one locally off the inet.  If you use a wooden box, with 
wooden rails; please excuse my ignorance; it would be easy to damage the 
wooden rails with screws and what not, if you end up taking things in 
and out of your rack.  If you use metal rails then your going to end up 
paying over 100 bucks which you can go on ebay and get a cabinet 42U for 
locally.

-Jonathan

Dave wrote:

I have a question not about the software but where you put your network stuff
has any one built there own rack out of wood I am looking at building my own.




Re: a question kinda pff topic

2007-04-12 Thread Douglas Allan Tutty
On Thu, Apr 12, 2007 at 11:38:12AM -0400, Dave wrote:
 I have a question not about the software but where you put your
 network stuff has any one built there own rack out of wood I am
 looking at building my own.
 

Another option is solid used commercial wire racking.  The units take a
lot of load while the wire shelves allow good airflow.  I'm not talking
about the Walmartish clones but stuff used, for example, in commercial
kitchens.

Doug.



Re: a question kinda pff topic

2007-04-12 Thread Dan Farrell
http://cgi.ebay.com/StarTech-com-DuraRak-42U-42-Enclosed-Rack-RK4242BK_W
0QQitemZ220101704596QQihZ012QQcategoryZ20316QQrdZ1QQcmdZViewItem


danno


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of Jonathan A. Lindsey
Sent: Thursday, April 12, 2007 3:47 PM
To: Dave
Cc: [EMAIL PROTECTED]
Subject: Re: a question kinda pff topic

I'd just go buy one locally off the inet.  If you use a wooden box, with

wooden rails; please excuse my ignorance; it would be easy to damage the

wooden rails with screws and what not, if you end up taking things in
and out of your rack.  If you use metal rails then your going to end up
paying over 100 bucks which you can go on ebay and get a cabinet 42U for

locally.
-Jonathan

Dave wrote:
 I have a question not about the software but where you put your
network stuff
 has any one built there own rack out of wood I am looking at building
my own.



rdate(8) manpage clarification

2007-04-12 Thread Maurice Janssen
Hi,

The manpage for rdate(8) uses the -c option in the examples at the
bottom (leap second correction), but the given host (ptbtime1.ptb.de)
doesn't need this.  In fact, I've never come across a time server that
needed -c, but I suppose there are some servers out there that need it.

Anyway, I think it's better to skip the -c option in the examples.

Maurice



Re: carp, 2 router

2007-04-12 Thread Chris Black
FranC'ois Rousseau wrote:
 Hi,

 I have a problem to understand how to dynamically change the route
 destinate to a carp interface.

 I have 2 routers, both have 3 NIC.

 On each router I have:
 1 Nic for the upstream
 1 Nic for the LAN ( 5 carp, no nat)
 1 Nic for inter-router traffic.

 What I want:

 If one of my CARP goes in Backup state or if the cable is unplug,
 every route to those network are automatically redirected to the other
 router.

 Ex:
 Carp on router 1 goes backup so every traffic destinate to those
 network are automatically redirected to the router2 who have the CARP
 Master.  So my router1 can continue to communicate with host on the
 LAN.  (use full to route traffic from my upstream provider)

 Right now, I think is impossible because the route always stay in
 route show regardless of the interface state.

 Any idea how to do this?
Not sure I /totally/ understand your architecture, but I think what you
need is a carp on the upstream.

Chris



Re: My hard-to-kill OpenBSD

2007-04-12 Thread Jordan Klein
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 Tim
 Sent: Thursday, April 12, 2007 1:03 PM
 To: [EMAIL PROTECTED]
 Subject: Re: My hard-to-kill OpenBSD
 

snip

 
 I've noticed that to a lot of techies have this attitude:
 
 if it isn't GUI, it's not worth knowing.
 
 I said GUI instead of Windows because now that you can do a lot of
 things with a GUI on Linux, even the Linux people are starting to
 have this attitude, especially newbies.  It's even frustrating to
 teach a newbie the advantages of vi.  Never mind that I would much
 rather talk a computer-illiterate person over the phone on how to
 change a configuration file with vi than any other GUI text editor.
 
 When I first started toying with OpenBSD, I installed it on an old
 system laying around.  Then I got bored and tried to install
 Debian, Red  Hat, NetBSD, and FreeBSD.  All of them could not get
 past the installation routines.  So I put OpenBSD back on.  This
 really isn't a fair story because it was so long ago and I don't
 remember all the details.  But I do remember the impression OpenBSD
 had on me because of this.
 

It's not only the users.  It's the disto makers, as well.  If you've seen
any current distros of Linux, almost all of them are standardizing on GUI
installs, and GUI management.  In fact, they've gotten to the point where
it's getting much harder to manage them through the command-line, because of
the insane configuration files that redhat, suse, and the others are using
now.

What's worse is that since new sysadmins are not learning the command-line
anymore, they're going to be in a LOT of trouble if the GUI is broken (i.e.,
xorg.conf is misconfigured).  While using a GUI can be useful, having easy,
complete control from a command-prompt is vital.

My OpenBSD install has no X installed, and is fully managed via ssh or
console.  That's the way UNIX was meant to be managed.

-- 
Jordan Klein ~  Beware of dragons
[EMAIL PROTECTED]  ~  for you are crunchy
Solaris / OpenBSD / Linux Admin  ~  and go well with ketchup



building releases for various architectures

2007-04-12 Thread Maurice Janssen
Hi,

Is it possible to have a single src directory that is shared by various
architectures to build releases?

I have a few old computers (vax, hppa, sparc), most of them with quite
small hard disks.  Too small to build the userland.  I also have a i386
with more than enough disk space running as nfs server.
Right now, I have a /export/${arch}/src and /export/${arch}/obj for each
architecture.  Works fine, but most of the contents of the source
directories is the same for each architecture.  Seems like a waste of
resources to keep it separate.

The FAQ mentions building a kernel with a read only source tree, but
nothing about userland.  Is it possible to mount /usr/src read-only and
build the userland?

Thanks,
Maurice



Re: force password changes

2007-04-12 Thread Nick Guenther

On 4/12/07, John N. Brahy [EMAIL PROTECTED] wrote:

What's the best way to force users to change their passwords?


passwd(5), see the change field.

Though I'm curious now, that says seconds since the epoch; is there
any way to make passwords be changed every n weeks without resorting
to scripting modifications to passwd(5)?

-Nick



Re: force password changes

2007-04-12 Thread Darrin Chandler
On Thu, Apr 12, 2007 at 05:27:19PM -0400, Nick Guenther wrote:
 On 4/12/07, John N. Brahy [EMAIL PROTECTED] wrote:
 What's the best way to force users to change their passwords?
 
 passwd(5), see the change field.
 
 Though I'm curious now, that says seconds since the epoch; is there
 any way to make passwords be changed every n weeks without resorting
 to scripting modifications to passwd(5)?

see login.conf(5) :-)

-- 
Darrin Chandler|  Phoenix BSD User Group  |  MetaBUG
[EMAIL PROTECTED]   |  http://phxbug.org/  |  http://metabug.org/
http://www.stilyagin.com/  |  Daemons in the Desert   |  Global BUG Federation



Re: force password changes

2007-04-12 Thread Mike Erdely
On Thu, Apr 12, 2007 at 02:06:24PM -0700, John N. Brahy wrote:
 What's the best way to force users to change their passwords?
Either tell them very forcefully or:
man login.conf(5)

-ME



Re: GRAPE cluster supercomputer + OpenBSD

2007-04-12 Thread Joachim Schipper
On Thu, Apr 12, 2007 at 08:12:20PM +0200, Vim Visual wrote:
 Hi,
 
 my home institute has bought (for me) a cluster of 4 nodes with the
 special-purpose hardware called GRAPE; it's for astrophysical
 simulations. The cards (the GRAPEs) just calculate the gravitational
 forces and accelerate the calculations a lot. In parallel the cluster
 can achieve a peak performance of 0.5 Teraflops.
 
 This is the GRAPE card
 
 http://www.metrix.co.jp/grape6A.html
 
 Now... I'd like to install OpenBSD on the cluster, of course... all I
 need is in the OS. But our IT department is not that happy... they
 want a debian and I'm very crossed.
 
 According to them, there aren't any drivers for the Raid Controller...
 Is that true?

I dunno about the RAID controller, but that overclocked calculator of
yours looks iffy. I don't think its interface library going to work,
unless the library was written in a *very* portable fashion. OpenBSD
doesn't allow random user programs poking random bits of hardware (X
being a notable exception, in most cases).

I'm sure you *could* port the software, but that looks like a lot of
work. And it's not like those boxes will be doing much else than
calculations; just run Debian, isolate them from the net if so inclined
(or allow access only via an (OpenBSD) firewall), and sit at your
favourite OpenBSD spot.

Joachim

-- 
TFMotD: lpq (1) - spool queue examination program



bio not working on dl380 g4 with newer ciss fw

2007-04-12 Thread Kalle Andersson

Hello Misc!
I have a 2 HP DL380 G4 where the ciss bio stuff behaves differently...
Im hoping someone can give me a clue...

box1:
# bioctl ciss0
Volume  Status   Size Device
ciss0 0 Online   293617820160 sd0 RAID5
 0 Online   146811543552 1:0.0   noencl COMPAQ  BD14689BB9  
 1 Online   146811543552 1:1.0   noencl COMPAQ  BD14689BB9  
 2 Online   146811543552 1:2.0   noencl COMPAQ  BD14689BB9  
 3 Hot spare146811543552 1:3.0   noencl COMPAQ  BD14689BB9  

box2:
# bioctl ciss0
bioctl: Can't locate ciss0 device via /dev/bio


Only difference I can see that might have something to do with it is:
box1: ciss0: 1 LD, HW rev 1, FW 2.58/2.58
box2: ciss0: 2 LDs, HW rev 1, FW 2.68/2.68

Is box2's bio not working because the 2.68 FW or that it has two logical drives?
Is FW 2.68 going to be supported or should I try to downgrade (if that
even is possible)?

Full dmesg of both machines follow, box1(working bio) first,
box2(non working bio) second!

Any pointers or clarifications are gladly accepted!



OpenBSD 4.1-current (GENERIC) #7: Thu Apr 12 00:15:21 CEST 2007
   [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Xeon(TM) CPU 3.20GHz (GenuineIntel 686-class) 3.21 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR
real mem  = 2147000320 (2096680K)
avail mem = 1952268288 (1906512K)
using 4278 buffers containing 107474944 bytes (104956K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+ BIOS, date 12/31/99, BIOS32 rev. 0 @
0xf, SMBIOS rev. 2.3 @ 0xec000 (77 entries)
bios0: HP ProLiant DL380 G4
pcibios0 at bios0: rev 2.1 @ 0xf/0x2000
pcibios0: PCI BIOS has 7 Interrupt Routing table entries
pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82801EB/ER LPC rev 0x00)
pcibios0: PCI bus #10 is the last bus
bios0: ROM list: 0xc/0x8000 0xc8000/0x4000! 0xcc000/0x1600 0xee000/0x2000!
acpi at mainbus0 not configured
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 Intel E7520 MCH rev 0x0c
ppb0 at pci0 dev 2 function 0 Intel MCH PCIE rev 0x0c
pci1 at ppb0 bus 2
ppb1 at pci1 dev 0 function 0 Intel PCIE-PCIE rev 0x09
pci2 at ppb1 bus 3
bge0 at pci2 dev 1 function 0 Broadcom BCM5704C rev 0x10, BCM5704 B0
(0x2100): irq 5, address 00:16:35:05:d4:a9
brgphy0 at bge0 phy 1: BCM5704 10/100/1000baseT PHY, rev. 0
bge1 at pci2 dev 1 function 1 Broadcom BCM5704C rev 0x10, BCM5704 B0
(0x2100): irq 5, address 00:16:35:05:d4:a8
brgphy1 at bge1 phy 1: BCM5704 10/100/1000baseT PHY, rev. 0
ppb2 at pci1 dev 0 function 2 Intel PCIE-PCIE rev 0x09
pci3 at ppb2 bus 4
ciss0 at pci3 dev 3 function 0 Compaq Smart Array 64xx rev 0x01: irq 5
ciss0: 1 LD, HW rev 1, FW 2.58/2.58
scsibus0 at ciss0: 1 targets
sd0 at scsibus0 targ 0 lun 0: HP, LOGICAL VOLUME, 2.58 SCSI0 0/direct fixed
sd0: 280015MB, 280015 cyl, 64 head, 32 sec, 512 bytes/sec, 573472305 sec total
ppb3 at pci0 dev 6 function 0 Intel MCH PCIE rev 0x0c
pci4 at ppb3 bus 5
ppb4 at pci4 dev 0 function 0 Intel PCIE-PCIE rev 0x09
pci5 at ppb4 bus 6
ppb5 at pci4 dev 0 function 2 Intel PCIE-PCIE rev 0x09
pci6 at ppb5 bus 10
uhci0 at pci0 dev 29 function 0 Intel 82801EB/ER USB rev 0x02: irq 5
uhci1 at pci0 dev 29 function 1 Intel 82801EB/ER USB rev 0x02: irq 5
uhci2 at pci0 dev 29 function 2 Intel 82801EB/ER USB rev 0x02: irq 5
uhci3 at pci0 dev 29 function 3 Intel 82801EB/ER USB rev 0x02: irq 5
ehci0 at pci0 dev 29 function 7 Intel 82801EB/ER USB2 rev 0x02: irq 5
usb0 at ehci0: USB revision 2.0
uhub0 at usb0
uhub0: Intel EHCI root hub, rev 2.00/1.00, addr 1
uhub0: 8 ports with 8 removable, self powered
ppb6 at pci0 dev 30 function 0 Intel 82801BA AGP rev 0xc2
pci7 at ppb6 bus 1
vga1 at pci7 dev 3 function 0 ATI Rage XL rev 0x27
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
Compaq iLO rev 0x01 at pci7 dev 4 function 0 not configured
Compaq iLO rev 0x01 at pci7 dev 4 function 2 not configured
ichpcib0 at pci0 dev 31 function 0 Intel 82801EB/ER LPC rev 0x02:
24-bit timer at 3579545Hz
pciide0 at pci0 dev 31 function 1 Intel 82801EB/ER IDE rev 0x02:
DMA, channel 0 configured to compatibility, channel 1 configured to
compatibility
atapiscsi0 at pciide0 channel 0 drive 0
scsibus1 at atapiscsi0: 2 targets
cd0 at scsibus1 targ 0 lun 0: HL-DT-ST, CD-ROM GCR-8240N, 2.03 SCSI0
5/cdrom removable
cd0(pciide0:0:0): using PIO mode 4, DMA mode 2
pciide0: channel 1 disabled (no drives)
usb1 at uhci0: USB revision 1.0
uhub1 at usb1
uhub1: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
usb2 at uhci1: USB revision 1.0
uhub2 at usb2
uhub2: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
usb3 at uhci2: USB revision 1.0
uhub3 at usb3
uhub3: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub3: 2 ports with 2 removable, 

Re: safe PF start / restart

2007-04-12 Thread Jakub Głazik

christian johansson napisa3(a):

I had to set up a linux firewall the other day, and I used the iptables
script generating program shorewall.
While pulling my hair over how ugly the iptables stuff (even via shorewall)
is compared to OpenBSDs nice clean PF syntax, I did find one very nice
feature in shorewall - safe restart.

When safe restarting, shorewall will implement all rules in the iptables
config files, then give the user a prompt: keep rules y/n?

If 'yes' the rules are kept and everyone is happy. If 'no', iptables are
disabled and all traffic let in. If no answer then default to answer 'no'
after 60 seconds.
Very useful, even if just for the added peace of mind when applying new
changes.

Is there a ready made script accomplishing this for openbsd / pf?  Or any
plans of building such functionality?



Try sth like this:

pfctl -nf newrules  pfctl -f newfules  sleep 30  pfctl -f oldrules
or
pfctl -f newrules ; sleep 30  pfctl -d

When you hit Ctrl+c during sleep, old rules will not be loaded/pf will 
not be disabled


It's a lazy solution, but works for me, you can use something similar..

--
.: Jakub G3azik,
.: too geek to live, too leet to die ;-)
.: email  jabber: zytekatnuxi.pl



Re: carp, 2 router

2007-04-12 Thread François Rousseau

Well at the end I will have BGP for the upstream provider but this
part work fine so I have not talk about it in my last email.

I have done a fast schema of my setup: http://step.polymtl.ca/~spock/draft.jpg.

The reason I want to use CARP inside is because I want to have a
single gateway on my servers.

The BGP part will take care of annoncing the routes and taking the
good exit point.
The CARP part will take care of the gateway for my servers.

But OSPF is not able to enter the carp route in the routing table...
probably because a route is already there.

thanks,
Francois Rousseau



2007/4/12, Chris Black [EMAIL PROTECTED]:

FranC'ois Rousseau wrote:
 Hi,

 I have a problem to understand how to dynamically change the route
 destinate to a carp interface.

 I have 2 routers, both have 3 NIC.

 On each router I have:
 1 Nic for the upstream
 1 Nic for the LAN ( 5 carp, no nat)
 1 Nic for inter-router traffic.

 What I want:

 If one of my CARP goes in Backup state or if the cable is unplug,
 every route to those network are automatically redirected to the other
 router.

 Ex:
 Carp on router 1 goes backup so every traffic destinate to those
 network are automatically redirected to the router2 who have the CARP
 Master.  So my router1 can continue to communicate with host on the
 LAN.  (use full to route traffic from my upstream provider)

 Right now, I think is impossible because the route always stay in
 route show regardless of the interface state.

 Any idea how to do this?
Not sure I /totally/ understand your architecture, but I think what you
need is a carp on the upstream.

Chris




Re: Install OSSIM in OpenBSD

2007-04-12 Thread Graeme Neilson
Dimitri,

You have to build the server from source and then configure all the separate
parts of the system - web interface, client agents, etc. Its pretty involved
but to compile the server all I had to do was make two changes to the
source:

- defined sb_addr16b in sim-inet.c
- edited out debug struct in sim-container.c

The included documentation on installing from source for Debian should be
enough for you to set up the rest of the system. You probably find it
simpler to set it up without a chrooted apache (man httpd) first and then
try it with a chrooted apache.

Graeme

On 3/31/07, Dimitri [EMAIL PROTECTED] wrote:

   Today and discovered OSSIM and I wanted to install it in my openbsd, but
 port does not exist.
   Some way exists to install it in openbsd 3.9.


   Regards.





 Dimitri.-
 Anti-Linux, I live BSD life
 http://deoxy.spaces.live.com/
 http://deoxyt2.blogspot.com/


 -

 LLama Gratis a cualquier PC del Mundo.
 Llamadas a fijos y msviles desde 1 cintimo por minuto.
 http://es.voice.yahoo.com



Re: building releases for various architectures

2007-04-12 Thread Jacob Yocom-Piatt
Maurice Janssen wrote:
 Hi,

 Is it possible to have a single src directory that is shared by various
 architectures to build releases?

 I have a few old computers (vax, hppa, sparc), most of them with quite
 small hard disks.  Too small to build the userland.  I also have a i386
 with more than enough disk space running as nfs server.
 Right now, I have a /export/${arch}/src and /export/${arch}/obj for each
 architecture.  Works fine, but most of the contents of the source
 directories is the same for each architecture.  Seems like a waste of
 resources to keep it separate.

 The FAQ mentions building a kernel with a read only source tree, but
 nothing about userland.  Is it possible to mount /usr/src read-only and
 build the userland?

   

calling all cars, calling all cars, we have an APB out on a bunch of
FSes that should be on NFS. danger: these FSes may be armed and
dangerous, possibly with extra network latency. use extreme caution and
try to keep them separate if possible!

if you see any with v4, call for donations before apprehending.

cheers,
jake

 Thanks,
 Maurice



Re: a question kinda pff topic

2007-04-12 Thread Adam Hawes
 to summarize matthew 17:20, nothing is impossible, but that
 does not
 mean that doing something that is not impossible is a good
 idea. i would
 recommend not making it out of wood for the following reasons:

Wood burns better than aluminium or steel too... in the unfortunate
event that one of your components ignites.

 tolerance, ease of assembly, load-bearing, re-usability...
 pretty much
 any reason you'd want to use a rack

If you just want an easy way to stack everything out of the way
at home it's probably fine; if you want to do it for any
business then just invest the extra money and rack mount.  It's
not that expensive, really.

 pissing into the wind and expecting it not to get all over you is the
 path of the faithful, so piss away if you're so inclined!

Wear a raincoat if you are so inclined :)  Each to his own.  We're
geeks.  We do things for the sake of doing them.  Why do you think
things like OpenBSD exist?  Not all geeks limit themselves to homebrew
software; some have wider interests and skills :)

A



Re: rdate(8) manpage clarification

2007-04-12 Thread Jason McIntyre
On Thu, Apr 12, 2007 at 10:34:25PM +0200, Maurice Janssen wrote:
 Hi,
 
 The manpage for rdate(8) uses the -c option in the examples at the
 bottom (leap second correction), but the given host (ptbtime1.ptb.de)
 doesn't need this.  In fact, I've never come across a time server that
 needed -c, but I suppose there are some servers out there that need it.
 
 Anyway, I think it's better to skip the -c option in the examples.
 
 Maurice

why? if you need -c, you have it. if you don't, it won;t do any harm to
specify it. as i understand it, -nc is a fair combination.

jmc



Re: carp, 2 router

2007-04-12 Thread Dag Richards

Caveat -- bge? ospf? eh I only know them at the executive brief level.
  carp, stp, static routing I know well enough.


So call router one primary
traffic is coming routes are all up everything is good.

Switch 1 dies, carp  switches master over to router 2 bge2.
If you had carp inside and out, you would be done, router2 bge1 would 
take over your outside ip and traffic would go there.


If I understand your issue:
In the case of the failure
upstream 1 is going to continue to send traffic to router 1, you want 
rtr 1 to then forward traffic to router 2.  Router 2 then hands traffic 
to the internal systems.


OSPF is refusing to add a route showing something like

10.50.4/241xx.1xx.35.1 UGS 00  -   bge0

because you already have

10.50.4.22  00:00:0c:9f:f0:4e  UHLc   0 11351930  -   carp1

or some such



What if you use were to use ifstat to remove the ips from router1 be2
on failure?

If you do this manually will ospf add the routes you desire?



FranC'ois Rousseau wrote:

Well at the end I will have BGP for the upstream provider but this
part work fine so I have not talk about it in my last email.

I have done a fast schema of my setup: 
http://step.polymtl.ca/~spock/draft.jpg.


The reason I want to use CARP inside is because I want to have a
single gateway on my servers.

The BGP part will take care of annoncing the routes and taking the
good exit point.
The CARP part will take care of the gateway for my servers.

But OSPF is not able to enter the carp route in the routing table...
probably because a route is already there.

thanks,
Francois Rousseau



2007/4/12, Chris Black [EMAIL PROTECTED]:

FranC'ois Rousseau wrote:
 Hi,

 I have a problem to understand how to dynamically change the route
 destinate to a carp interface.

 I have 2 routers, both have 3 NIC.

 On each router I have:
 1 Nic for the upstream
 1 Nic for the LAN ( 5 carp, no nat)
 1 Nic for inter-router traffic.

 What I want:

 If one of my CARP goes in Backup state or if the cable is unplug,
 every route to those network are automatically redirected to the other
 router.

 Ex:
 Carp on router 1 goes backup so every traffic destinate to those
 network are automatically redirected to the router2 who have the CARP
 Master.  So my router1 can continue to communicate with host on the
 LAN.  (use full to route traffic from my upstream provider)

 Right now, I think is impossible because the route always stay in
 route show regardless of the interface state.

 Any idea how to do this?
Not sure I /totally/ understand your architecture, but I think what you
need is a carp on the upstream.

Chris




Re: Dell Latitude D820

2007-04-12 Thread Marco Peereboom
You need to enable acpi for smp to work.

On x try:
X -xonfigure
and play with the file a little.  I am almost positive this should work.

On Thu, Apr 12, 2007 at 09:21:37PM +0530, Siju George wrote:
 On 4/12/07, Marco Peereboom [EMAIL PROTECTED] wrote:
 You need 4.1 for that model.  Might even need -current.
 
 
 I installed the Latest Snapshot.
 
 Directory: i386   04/10/0719:03:00
 
 now runing
 
 # uname -a
 OpenBSD current.openbsd.local 4.1 GENERIC.MP#1260 i386
 
 It Still Doesn't Detects both CPU's in the .Intel Core Duo T2300 1.67
 
 http://reviews.cnet.com/Dell_Latitude_D820/4507-3121_7-31792100.html
 
 # cat /var/run/dmesg.boot |grep cpu
 cpu0: Intel(R) Core(TM)2 CPU T5600 @ 1.83GHz (GenuineIntel 686-class) 
 1.83 GHz
 cpu0: 
 FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,CX16,xTPR
 cpu0 at mainbus0: (uniprocessor)
 #
 
 and the surprising thing
 
 X does not start :-)
 
 feels like going back to iobsd. at least it has good disk support
 with ReiserFS;-)  [ again not to troll folks who missed iobsd ftp ISO
 downloads, the ISOs will appear soon on the website again, make sure
 you come back and check ;-) ]
 
 It would be great if some one can give me a clue where to Go from here now.
 
 1) get the latest current sources
 2) build Kernel and Userland from sources and Install them as said in
http://www.openbsd.org/faq/current.html
 
 and pray X comes up right?
 
 now I should be doing
 
 $cd /usr  cvs checkout -P xenocara
 
 right?
 
 and not XF4
 
 The Xorg log file and Full dmesg are given below.
 If some one can help me :-) else i am going Marco's way to iobsd ;-)
 
 ( By the way io in my language ( Malayalam ) means Oh My God! What
 have you done? or similar said in a shock. The thing you say when a
 brick unexpectedly falls on your foot :-) LOL!
 
 Thankyou so much :-)
 
 Kind regards
 
 Siju
 
 Xorg log file is long.
 I think the nutshell is given by the following lines in it ?
 
 ***
 (II) wsfb(1): using default device
 (--) Assigning device section with no busID to primary device
 (--) Chipset vesa found
 (--) Assigning device section with no busID to primary device
 (--) Chipset generic found
 
 Fatal server error:
 Cannot run in framebuffer mode. Please specify busIDsfor all
 framebuffer devices
 *
 =
 # dmesg
 OpenBSD 4.1-current (GENERIC.MP) #1260: Fri Apr  6 01:51:07 MDT 2007
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC.MP
 cpu0: Intel(R) Core(TM)2 CPU T5600 @ 1.83GHz (GenuineIntel 686-class) 
 1.83 GHz
 cpu0: 
 FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,CX16,xTPR
 real mem  = 1071742976 (1046624K)
 avail mem = 970452992 (947708K)
 using 4278 buffers containing 53710848 bytes (52452K) of memory
 mainbus0 (root)
 bios0 at mainbus0: AT/286+ BIOS, date 12/18/06, BIOS32 rev. 0 @
 0xffa10, SMBIOS rev. 2.4 @ 0xf6df0 (64 entries)
 bios0: Dell Inc. Latitude D820
 pcibios0 at bios0: rev 2.1 @ 0xf/0x1
 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfa930/240 (13 entries)
 pcibios0: PCI Interrupt Router at 000:31:0 (Intel 82371 ISA and IDE rev 
 0x00)
 pcibios0: PCI bus #13 is the last bus
 bios0: ROM list: 0xc/0x1
 acpi at mainbus0 not configured
 cpu0 at mainbus0: (uniprocessor)
 pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
 pchb0 at pci0 dev 0 function 0 Intel 82945GM MCH rev 0x03
 ppb0 at pci0 dev 1 function 0 Intel 82945GM PCIE rev 0x03
 pci1 at ppb0 bus 1
 vga1 at pci1 dev 0 function 0 NVIDIA GeForce 7300 Go rev 0xa1
 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
 wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
 azalia0 at pci0 dev 27 function 0 Intel 82801GB HD Audio rev 0x01: irq 11
 azalia0: host: High Definition Audio rev. 1.0
 azalia0: codec: Sigmatel STAC9220 (rev. 34.1), HDA version 1.0
 azalia0: codec: 0x04x/0x14f1 (rev. 0.0), HDA version 0.9
 azalia0: codec[1]: No support for modem function groups
 azalia0: codec[1]: No audio function groups
 audio0 at azalia0
 ppb1 at pci0 dev 28 function 0 Intel 82801GB PCIE rev 0x01
 pci2 at ppb1 bus 11
 ppb2 at pci0 dev 28 function 1 Intel 82801GB PCIE rev 0x01
 pci3 at ppb2 bus 12
 wpi0 at pci3 dev 0 function 0 Intel PRO/Wireless 3945ABG rev 0x02:
 irq 3, address 00:19:d2:bc:22:93
 ppb3 at pci0 dev 28 function 2 Intel 82801GB PCIE rev 0x01
 pci4 at ppb3 bus 9
 bge0 at pci4 dev 0 function 0 Broadcom BCM5752 rev 0x02, BCM5752 A2
 (0x6002): irq 5, address 00:19:b9:60:bc:91
 brgphy0 at bge0 phy 1: BCM5752 10/100/1000baseT PHY, rev. 0
 ppb4 at pci0 dev 28 function 3 Intel 82801GB PCIE rev 0x01
 

Re: bio not working on dl380 g4 with newer ciss fw

2007-04-12 Thread Bill Marquette

On 4/12/07, Kalle Andersson [EMAIL PROTECTED] wrote:

Hello Misc!
I have a 2 HP DL380 G4 where the ciss bio stuff behaves differently...
Im hoping someone can give me a clue...

box1:
# bioctl ciss0
Volume  Status   Size Device
ciss0 0 Online   293617820160 sd0 RAID5
  0 Online   146811543552 1:0.0   noencl COMPAQ  BD14689BB9  
  1 Online   146811543552 1:1.0   noencl COMPAQ  BD14689BB9  
  2 Online   146811543552 1:2.0   noencl COMPAQ  BD14689BB9  
  3 Hot spare146811543552 1:3.0   noencl COMPAQ  BD14689BB9  

box2:
# bioctl ciss0
bioctl: Can't locate ciss0 device via /dev/bio


Only difference I can see that might have something to do with it is:
box1: ciss0: 1 LD, HW rev 1, FW 2.58/2.58
box2: ciss0: 2 LDs, HW rev 1, FW 2.68/2.68

Is box2's bio not working because the 2.68 FW or that it has two logical drives?
Is FW 2.68 going to be supported or should I try to downgrade (if that
even is possible)?


Two logical drives.  Not sure about the firmware version, but the
more than one logical drive issue is in the caveats section of
ciss(4).

--Bill



Re: safe PF start / restart

2007-04-12 Thread Kian Mohageri
On 4/11/07, christian johansson [EMAIL PROTECTED] wrote:

 I had to set up a linux firewall the other day, and I used the iptables
 script generating program shorewall.
 While pulling my hair over how ugly the iptables stuff (even via
 shorewall)
 is compared to OpenBSDs nice clean PF syntax, I did find one very nice
 feature in shorewall - safe restart.

 When safe restarting, shorewall will implement all rules in the iptables
 config files, then give the user a prompt: keep rules y/n?

 If 'yes' the rules are kept and everyone is happy. If 'no', iptables are
 disabled and all traffic let in. If no answer then default to answer 'no'
 after 60 seconds.
 Very useful, even if just for the added peace of mind when applying new
 changes.

 Is there a ready made script accomplishing this for openbsd / pf?  Or any
 plans of building such functionality?

 Christian



FreeBSD has a similar script for ipfw(8) called change_rules.sh.  You could
probably modify it to suit your needs, but I haven't really looked at how it
works, as I don't find it necessary with pf.

http://www.freebsd.org/cgi/cvsweb.cgi/src/share/examples/ipfw/change_rules.sh?annotate=1.2.2.5

-- 
Kian Mohageri



Re: kinda off topic

2007-04-12 Thread Dave
well I am giving up with my ideas that are not working I will just keep my 
eyes open for a prebuilt one on line  at ebay that shiping is not to much.
- Original Message - 
From: Dave [EMAIL PROTECTED]

To: [EMAIL PROTECTED]
Sent: Thursday, April 12, 2007 5:45 PM
Subject: kinda off topic


ok here is a idea  I have a tone of plastic crates from a pervious jobs 
milk

great they are plastic and ventilation should be no problem since they are
full of hole then have the server on top of it its an idea I will try it 
out
tonight yea I am cheap but you get used to it when your in the middle of 
no

where.




Finding a ral(4) cardbus card

2007-04-12 Thread Luke Eckley
I am having a hard time finding a ral(4) cardbus card for my laptop. I
recently bought a Hawking Tech HWC54G - which happens to be acx(4) -
thinking I was buying a Hawking Tech HWC54GR (which is listed as
supported by ral(4)).

Searching ebay.com and pricewatch.com I am only turning up the Belkin
card. I am a little reluctant to purchase that one since ral(4)
states that it supports version 2 only - and dealers never seem to
know what version they are selling and I don't want to take another
gamble.

Does anyone know of any place that sells a ral(4) supported card?
Where did everyone get theirs?

Thanks,
Luke Eckley
http://xifos.org



SuperMicro 6010H with no working nics...

2007-04-12 Thread Jeff Ross

Hi all,

I just purchased a new-to-me SuperMicro 6010H server on eBay.  dmesg 
follows.


The system has two onboard Intel nics that both generic and generic.mp 
see in the dmesg but the nics are unable to find a link when I plug a 
cable in.  I've got network access now through a aue usb to ethernet  
device using the same cable but it throws a lot of errors like this 
aue0: 1 usb errors on intr: IOERROR so I'm not going to want to keep 
using it.


There is a bios upgrade available  that I'll do tomorrow.  In the 
meantime, is there any chance that this might be a mis-configured bios 
setting or something equally simple?  I looked through all of the bios 
options and didn't see anything that looked promising.


Thanks,

Jeff

[EMAIL PROTECTED]:/home/jross $ cat /var/run/dmesg.boot  
OpenBSD 4.1-current (GENERIC) #86: Thu Apr 12 11:34:48 MDT 2007

   [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel Pentium III (GenuineIntel 686-class) 800 MHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE

real mem  = 1073311744 (1048156K)
avail mem = 971952128 (949172K)
using 4278 buffers containing 53788672 bytes (52528K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+ BIOS, date 12/14/00, BIOS32 rev. 0 @ 0xfdb90, 
SMBIOS rev. 2.3 @ 0xf0640 (50 entries)

bios0: Supermicro 370DER
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown, estimated 0:00 hours
apm0: APM get event: interface not connected (3)
apm0: APM get event: interface not connected (3)
apm0: disconnected
apm0: flags b0102 dobusy 0 doidle 0
pcibios0 at bios0: rev 2.1 @ 0xf/0x1
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf5380/144 (7 entries)
pcibios0: PCI Interrupt Router at 000:15:0 (ServerWorks OSB4 rev 0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc/0x8000 0xc8000/0x1000 0xc9000/0x6000 0xcf000/0x1000
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 ServerWorks CNB20HE Host rev 0x23
ppb0 at pci0 dev 0 function 1 ServerWorks CNB20LE Host rev 0x01
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 ATI Mach64 GM rev 0x27
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
pchb1 at pci0 dev 0 function 2 ServerWorks CNB20HE Host rev 0x01
pchb2 at pci0 dev 0 function 3 ServerWorks CNB20HE Host rev 0x01
pci2 at pchb2 bus 2
fxp0 at pci0 dev 4 function 0 Intel 8255x rev 0x08, i82559: irq 11, 
address 00:30:48:11:23:eb

inphy0 at fxp0 phy 1: i82555 10/100 PHY, rev. 4
ahc0 at pci0 dev 5 function 0 Adaptec AIC-7899 U160 rev 0x01: irq 5
scsibus0 at ahc0: 16 targets
sd0 at scsibus0 targ 0 lun 0: QUANTUM, ATLAS10K2-TY184J, DDD6 SCSI3 
0/direct fixed

sd0: 17510MB, 17338 cyl, 5 head, 413 sec, 512 bytes/sec, 35860910 sec total
ahc1 at pci0 dev 5 function 1 Adaptec AIC-7899 U160 rev 0x01: irq 10
scsibus1 at ahc1: 16 targets
fxp1 at pci0 dev 6 function 0 Intel 8255x rev 0x08, i82559: irq 9, 
address 00:30:48:11:23:ec

inphy1 at fxp1 phy 1: i82555 10/100 PHY, rev. 4
piixpm0 at pci0 dev 15 function 0 ServerWorks OSB4 rev 0x50: polling
iic0 at piixpm0
lmenv0 at iic0 addr 0x2d: lm87 rev 4
lmenv1 at iic0 addr 0x2e: lm87 rev 4
pciide0 at pci0 dev 15 function 1 ServerWorks OSB4 IDE rev 0x00: DMA
atapiscsi0 at pciide0 channel 0 drive 0
scsibus2 at atapiscsi0: 2 targets
cd0 at scsibus2 targ 0 lun 0: MATSHITA, CD-ROM CR-177, 7T03 SCSI0 
5/cdrom removable

cd0(pciide0:0:0): using PIO mode 4, DMA mode 2, Ultra-DMA mode 2
ohci0 at pci0 dev 15 function 2 ServerWorks OSB4/CSB5 USB rev 0x04: 
irq 10, version 1.0, legacy support

usb0 at ohci0: USB revision 1.0
uhub0 at usb0
uhub0: ServerWorks OHCI root hub, rev 1.00/1.00, addr 1
uhub0: 4 ports with 4 removable, self powered
isa0 at mainbus0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: PC speaker
spkr0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
biomask f565 netmask ff65 ttymask ffe7
pctr: 686-class user-level performance counters enabled
mtrr: Pentium Pro MTRR support
aue0 at uhub0 port 1
aue0: 3Com 3C460B 10/100 Ethernet Adapter, rev 1.10/1.01, addr 2
aue0: address 00:04:76:00:a2:24
acphy0 at aue0 phy 1: AC_UNKNOWN 10/100 PHY, rev. 0
ahc0: target 0 using 16bit transfers
ahc0: target 0 synchronous at 80.0MHz DT, offset = 0x7f
dkcsum: sd0 matches BIOS drive 0x80
root on sd0a
rootdev=0x400 rrootdev=0xd00 rawdev=0xd02



Re: crunchgen undefined reference

2007-04-12 Thread Dale Rahn
On Thu, Apr 12, 2007 at 02:57:44PM -0700, Luke Cowell wrote:
 Hi, I'm using OpenBSD 4.0 i386 and I'm having some difficulties with  
 crunchgen. Your assistance would be appreciated.
 
 -I've used basically the same conf file and method on a FreeBSD  
 system (so I must be doing something right).
 -I've reduced the conf to include 1 binary - the simpler the better.
 
 Under /usr/local/src (which is empty apart from the conf). Here's a  
 transcript of what I'm trying to do.
 
 # cat cat.conf
 srcdirs /usr/src/bin
 
 progs cat
 
 libs -lc
 
 #crunchgen cat.conf

For ELF platforms use 

# crunchgen -E cat.conf 

this will call 'crunchide -k _crunched_cat_stub cat.lo' later
which will keep to the proper symbol name.

Dale Rahn   [EMAIL PROTECTED]



Re: Finding a ral(4) cardbus card

2007-04-12 Thread Bryan

If your laptop supports MiniPCI, go to

www.kd85.com

Good stuff there...

Wim is a well known person on this list, and can be vouched for by
many.  I bought 3 of the MiniPCI, and they work great...

On 4/13/07, Luke Eckley [EMAIL PROTECTED] wrote:

I am having a hard time finding a ral(4) cardbus card for my laptop. I
recently bought a Hawking Tech HWC54G - which happens to be acx(4) -
thinking I was buying a Hawking Tech HWC54GR (which is listed as
supported by ral(4)).

Searching ebay.com and pricewatch.com I am only turning up the Belkin
card. I am a little reluctant to purchase that one since ral(4)
states that it supports version 2 only - and dealers never seem to
know what version they are selling and I don't want to take another
gamble.

Does anyone know of any place that sells a ral(4) supported card?
Where did everyone get theirs?

Thanks,
Luke Eckley
http://xifos.org




Re: Finding a ral(4) cardbus card

2007-04-12 Thread System Administrator
On 12 Apr 2007 at 19:33, Luke Eckley wrote:

 I am having a hard time finding a ral(4) cardbus card for my laptop. I
 recently bought a Hawking Tech HWC54G - which happens to be acx(4) -
 thinking I was buying a Hawking Tech HWC54GR (which is listed as
 supported by ral(4)).
 
 Searching ebay.com and pricewatch.com I am only turning up the Belkin
 card. I am a little reluctant to purchase that one since ral(4) states
 that it supports version 2 only - and dealers never seem to know what
 version they are selling and I don't want to take another gamble.

From personal experience I can vouch that Belkin F5D7010 v.3001 is also 
a ral(4) card. Interestingly, according to the official Belkin support 
site, that is also the only version of the card supported under Mac OS 
10.3, which gives you a nifty way to confirm compatibility at purchase.

 Does anyone know of any place that sells a ral(4) supported card?
 Where did everyone get theirs?

I got mine at Circuit City, and these are currently on sale at $34.95. 
Unfortunately, they tend to carry up-to-date inventory which probably 
means the Windows-only version 7xxx (again according to official Belkin 
support page)

 Thanks,
 Luke Eckley
 http://xifos.org
 
 

-
System Administrator[EMAIL PROTECTED]
Bitwise Internet Technologies, Inc.
22 Drydock Avenue tel: (617) 737-1837
Boston, MA 02210  fax: (617) 439-4941



using spamd to block outbound spam

2007-04-12 Thread Paolo Supino

Hi

  I have the following problem: I host a group of windows servers that 
run a webapp using IIS6 ASP technology. The webapp was written and is 
maintained by a small private company that develops custom webapps for 
companies. One of the services the webapp does is send out emails 
(nothing amazing until now). The problem is that the webapp isn't 
written securely. The developers keep saying the webapp is secure and 
isn't the problem. Bringing someone from the outside to prove them wrong 
has failed thus far. Showing logs and showing network access also proved 
futile. the webapp is (ab)used by spammers to relay spam emails which 
caused the webapp's IP address to be added to various spam black lists 
:-( I'm sure it's the ASP is the problem because only HTTP and HTTPS are 
accessible on these servers. The website itself is hidden behind a 
firewall and SMTP port isn't reachable. I'm in the process of replacing 
the current firewall (Microtik's RouterOS, a Linux based OS) with 
OpenBSD and I thought of using spamd to block outgoing spam emails. I've 
started reading about spamd and usage scenarios, but thus far only found 
spamd being used on incoming emails. Did anyone use spamd to block 
outgoing spam emails? Is what I want to do possible (in combination PF)?

Other solutions will also be appreciated obviously based on OpenBSD :-)





TIA
Paolo



Re: rdate(8) manpage clarification

2007-04-12 Thread Matthew R. Dempsky
On Thu, Apr 12, 2007 at 10:34:25PM +0200, Maurice Janssen wrote:
 The manpage for rdate(8) uses the -c option in the examples at the
 bottom (leap second correction), but the given host (ptbtime1.ptb.de)
 doesn't need this.

SNTP gives time in UTC, but some sysadmins would prefer to synchronize
their system time to TAI rather than UTC (e.g., so time values
returned by gettimeofday(2) progresses normally during leap seconds).
The -c argument for rdate is intended for their use.

Basic rule of thumb is use -c if and only if you're using a timezone
file under /usr/share/zoneinfo/right/ (i.e., one that includes leap
second info).  Otherwise your clock will most likely be off by 23
seconds.



Re: Routerboard 532 Bounty

2007-04-12 Thread Merv Hammer

On Wed, Apr 11, 2007 at 05:48:56AM +0900, anon trol wrote:


I think I have convinced myself that I want to sponsor an architecture port
effort.  Specifically, I would like to see OpenBSD ported to the Routerboard
532 (IDT MIPS32 4Kc processor).  After STFW, I see that a few other people


If anyone is interested: I have begun work on an OpenBSD port for the
Routerboard 500's.  It's something I have been musing over for some time.
I am currently marinating my senses in IDT/MIPS documentation and have just
a few tentative sketches to-date.  Like most, I am rather severely
limited in the amount of time I can spare and may not be able to offer more
than 10 hours per week for certain periods.  Nevertheless, I will persevere 
and would be delighted to collaborate and liase with anyone who has a similar 
interest in seeing OBSD on the Routerboard family.  


--
Merv 



Re: Finding a ral(4) cardbus card

2007-04-12 Thread Bryan

On 4/13/07, System Administrator [EMAIL PROTECTED] wrote:

On 12 Apr 2007 at 19:33, Luke Eckley wrote:

 I am having a hard time finding a ral(4) cardbus card for my laptop. I
 recently bought a Hawking Tech HWC54G - which happens to be acx(4) -
 thinking I was buying a Hawking Tech HWC54GR (which is listed as
 supported by ral(4)).

 Searching ebay.com and pricewatch.com I am only turning up the Belkin
 card. I am a little reluctant to purchase that one since ral(4) states
 that it supports version 2 only - and dealers never seem to know what
 version they are selling and I don't want to take another gamble.

From personal experience I can vouch that Belkin F5D7010 v.3001 is also
a ral(4) card. Interestingly, according to the official Belkin support
site, that is also the only version of the card supported under Mac OS
10.3, which gives you a nifty way to confirm compatibility at purchase.



Would anyone else consider that a good indicator?  I mean, that would
be great if that was the case all around.  I got to know the return
guy at Best Buy so well, he let me bring my laptop in, and opened
boxes to find wireless for them...  I open 5 different ones before we
had to quit (read: his manager showed up to ask WTF?.)  I hope he
still works there...




 Does anyone know of any place that sells a ral(4) supported card?
 Where did everyone get theirs?

I got mine at Circuit City, and these are currently on sale at $34.95.
Unfortunately, they tend to carry up-to-date inventory which probably
means the Windows-only version 7xxx (again according to official Belkin
support page)