Re: Help installing on a Sunfire 280R

2008-04-14 Thread Mark Kettenis
Date: Sun, 13 Apr 2008 14:41:48 -0700 From: Don Fanning [EMAIL PROTECTED] Did exactly as described (altering for my settings which were 21 for sbus and 22 for pci). Here is what I currently get: luphy3 at hme2 phy 1: LU6612 10/100 PHY, rev. 1 Sun PCIO EBus2 rev 0x01 at pci1 dev 3

4.3 hangs on Intel Celeron

2008-04-14 Thread Gregory Edigarov
Hello, Everybody. see dmesg in attachment it was rebuilt from sources i got from cvs last week. Hangs after some time of inactivity, when something heavy (like thunderbird) starts up, or just waking up from being swapped after quite a period of inactivity. Let me know, if you need some more

tcl-8.4 and tk-8.4 manpages

2008-04-14 Thread Úlfar M . E . Johnson
I would like to thank all those who replied to my enquiry. The openbsd mailing list is an excellent mailing list, and its members are a great help to all those searching for answers to their questions about openbsd. I want to add want I can, so I am writing the answer to my question in order to

Re: Got 'em !

2008-04-14 Thread Pierre-Emmanuel André
Le Thu, 10 Apr 2008 10:29:26 +0200, Paul de Weerd [EMAIL PROTECTED] a icrit : Hi all, The new 4.3 CD set has just arrived here in Zurich, Switzerland ! I've put up a pic on http://www.weirdnet.nl/images/openbsd43set.jpg .. looking very cool yet again ;) Thanks to all the developers for

Re: authpf: allowing both ipv4 and ipv6 traffic

2008-04-14 Thread Paul de Weerd
On Mon, Apr 14, 2008 at 12:55:17PM +0200, Almir Karic wrote: | On Sun, Apr 13, 2008 at 7:45 PM, Barry Commander | [EMAIL PROTECTED] wrote: | Hi | In order to allow wireless clients both IPv4 and IPv6 access to my wireless | access point (protected with authpf) | do I need to have them login

Re: carp and STP and layer2 security

2008-04-14 Thread Jordi Espasa Clofent
i have finally taken the time to quickly write up what you need to do on your switches when using carp and/or STP. comments welcome. http://bulabula.org/carp-and-stp-meet-switch-security.html Good info Henning. Currently I've a two PF-based bridges (OpenBSD 4.2) and I get redundacy with RSTP

PCI-Express gigabit NIC recommendations/warnings?

2008-04-14 Thread seanm
Hi misc@, I'd be grateful for any recent recommendations or warnings wrt currently available GigE NICs for core vlanning/routing/filtering. (Archives contain various previous related threads, but most recent posts are from a few years ago, so I thought it'd be worthwhile asking for

Re: authpf: allowing both ipv4 and ipv6 traffic

2008-04-14 Thread Stuart Henderson
On 2008-04-14, Almir Karic [EMAIL PROTECTED] wrote: On Sun, Apr 13, 2008 at 7:45 PM, Barry Commander [EMAIL PROTECTED] wrote: Hi In order to allow wireless clients both IPv4 and IPv6 access to my wireless access point (protected with authpf) do I need to have them login as authpf twice?

Re: authpf: allowing both ipv4 and ipv6 traffic

2008-04-14 Thread Almir Karic
On Mon, Apr 14, 2008 at 2:59 PM, Stuart Henderson [EMAIL PROTECTED] wrote: On 2008-04-14, Almir Karic [EMAIL PROTECTED] wrote: On Sun, Apr 13, 2008 at 7:45 PM, Barry Commander [EMAIL PROTECTED] wrote: Hi In order to allow wireless clients both IPv4 and IPv6 access to my wireless

Re: PCI-Express gigabit NIC recommendations/warnings?

2008-04-14 Thread Stuart Henderson
On 2008-04-14, seanm [EMAIL PROTECTED] wrote: Catalyst 3750s for distribution/access (yes, I know...). I could use the Intel SX NIC closest to our current copper NICs, but now's a good time to consider alternative cards if they offer better stability/robustness/performance (and especially

Re: CARP and pfsync weird behaviour

2008-04-14 Thread openbsd firewall
Hello, Some news about this... If I change vhid on the backup node this problem doesn't occurs since the ARP for the master node is still in cache and backup node now has a different mac address for the carp interfaces. Of course changing vhid and IP doesn't give any trouble at all. It seems the

Customs Shipment Data

2008-04-14 Thread Tradespy
o;? Dear Misc, Shipment Reports of Actual Buyers Suppliers and prices of any product from Export Import of US Customs, UK Customs, China Customs and India Customs are available for subscription. Please contact us for Free demo report on your Products. Thanking you and looking forward to hear

cacti on obsd 4.2

2008-04-14 Thread sonjaya
Dear all I try install cacti 0.8.7b in my obsd 4.2 , i using rrdtool 1.0.49 and get error in cacti like this bellow: RRDTool Version ERROR: Installed RRDTool version does not match configured version. Please visit the Configuration Settings and select the correct RRDTool Utility

Re: CARP and pfsync weird behaviour

2008-04-14 Thread Stuart Henderson
On 2008-04-14, openbsd firewall [EMAIL PROTECTED] wrote: Some news about this... If I change vhid on the backup node this problem doesn't occurs since the ARP for the master node is still in cache and backup node now has a different mac address for the carp interfaces. Of course changing vhid

phy and config -e

2008-04-14 Thread Need Coffee
I'd like to use GENERIC.MP on a couple of boxes that share bge1 with a built-in service processor for remote management, but when the kernel boots, it locks up the SP). I understand this is normal. Using config -e, I have disabled bge* and added a custom bge0 that attaches fine. The problem is

4.2 and em(4)

2008-04-14 Thread Joe Warren-Meeks
Hey guys, I have a pair of firewalls running fully patched OpenBSD 4.2. These are DL140s and i have the optional quad gigabit ethernet card in them. Now, whenever I use the GENERIC kernel, all is well. However, if I switch to the GENERIC.MP kernel I lose connectivity and get em0: watchdog

Re: 4.2 and em(4)

2008-04-14 Thread Jordi Espasa Clofent
Hey guys, I have a pair of firewalls running fully patched OpenBSD 4.2. These are DL140s and i have the optional quad gigabit ethernet card in them. Now, whenever I use the GENERIC kernel, all is well. However, if I switch to the GENERIC.MP kernel I lose connectivity and get em0: watchdog

Re: 4.2 and em(4)

2008-04-14 Thread Joe Warren-Meeks
On Mon, Apr 14, 2008 at 05:38:21PM +0200, Jordi Espasa Clofent wrote: Hey there, According several messages I've read from Henning or Daniel in present and @pf list, there are not any benefits in run PF with MP kernels (and multi-processor boxes, of course). Even you can get a poor

Re: 4.2 and em(4)

2008-04-14 Thread Jordi Espasa Clofent
If the box was only doing pf stuff, then that would be correct. If you were to put a bunch of ftp-proxys on there too, then MP would help, no? I understand the same as you: in that specific case the MP could be useful. -- Thanks, Jordi Espasa Clofent

Re: cacti on obsd 4.2

2008-04-14 Thread Stuart Henderson
On 2008-04-14, sonjaya [EMAIL PROTECTED] wrote: I try install cacti 0.8.7b in my obsd 4.2 , i using rrdtool 1.0.49 and get error in cacti like this bellow: RRDTool Version ERROR: Installed RRDTool version does not match configured version. Please visit the Configuration Settings and

Re: constant barrage from rfc 1918 addresses source port 6293

2008-04-14 Thread Chris Smith
On Thursday 10 April 2008, Lord Sporkton wrote: It is possible that its not really ment for you, but perhaps your modem, something along the lines of a modem checkin? I took a tcpdump and they are all TCP RST packets. Further investigation shows that the destination ports match state entries

Re: 4.2 and em(4)

2008-04-14 Thread Stuart Henderson
On 2008-04-14, Joe Warren-Meeks [EMAIL PROTECTED] wrote: If the box was only doing pf stuff, then that would be correct. If you were to put a bunch of ftp-proxys on there too, then MP would help, no? very little, the bulk data handling is done in kernel by nat/rdr rules added to the anchors,

Need help reporting kernel panic

2008-04-14 Thread Dag Richards
Understand that I am not (quite) reporting a panic without a ps and trace. I had kernel panic this weekend on my standby vpn firewall, this is the third time this has happened in the last 300 days or so, always with the same panic. I run with ddb.log=1 I ran ps and trace expecting the output

Re: 4.3 hangs on Intel Celeron

2008-04-14 Thread Whyzzi
I hate to add to this thread, but I'm running a similar system and experiencing similar hangs, albeit on 4.2 release. Realing kind of annoying because all I want from this system is to be a SQUID server, and when the box crashes, the hard disk light will stay on like it's throttling the hard drive

Re: CARP and pfsync weird behaviour

2008-04-14 Thread openbsd firewall
If I configure all carp interfaces via command line (removed the hostname.if carps) after machine is rebooted this problem doesn't happen ! :O This is crazy and I'm out of ideas for now. I was playing with carpdemote and state transition from master to backup and vice-versa works fine. It's

Re: Need help reporting kernel panic

2008-04-14 Thread Josh Grosse
On Mon, 14 Apr 2008 08:57:55 -0700, Dag Richards wrote Then I performed a boot dump, I have drwxrwx--- 2 root wheel 512 Apr 14 07:53 ./ drwxr-xr-x 25 root wheel 512 Aug 28 2007 ../ -rw--- 1 root wheel 2 Apr 14 07:51 bounds -rw--- 1 root wheel

Re: Got 'em

2008-04-14 Thread Dave Anderson
The 4.3 CD set arrived today near Boston, Mass. Dave -- Dave Anderson [EMAIL PROTECTED]

Re: Got 'em

2008-04-14 Thread Peter N. M. Hansteen
One more 4.3 CDs package spotted: mine reached my mailbox in Bergen, Norway today. - P -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/ Remember to set the evil bit on all malicious network traffic

Re: Got 'em

2008-04-14 Thread Bren Smith
4.3 package arrived this morning in Grass Valley, California. Thanks to all!!! -- Bren Smith [EMAIL PROTECTED]

Re: Old CDs

2008-04-14 Thread Bryan Irvine
On Fri, Apr 11, 2008 at 3:27 PM, Tom Geman [EMAIL PROTECTED] wrote: Hello, I have been purchasing OpenBSD since version 2.7 was released. I usually buy two each time and leave one unopened. I also started to purchase versions prior to 2.7 to complete my collection. Unfortunately I will

Re: Need help reporting kernel panic

2008-04-14 Thread Dag Richards
Josh Grosse wrote: On Mon, 14 Apr 2008 08:57:55 -0700, Dag Richards wrote Then I performed a boot dump, I have drwxrwx--- 2 root wheel 512 Apr 14 07:53 ./ drwxr-xr-x 25 root wheel 512 Aug 28 2007 ../ -rw--- 1 root wheel 2 Apr 14 07:51 bounds

Re: Got 'em

2008-04-14 Thread Todd Alan Smith
I received mine this past Saturday, April 12th! I'm in Madison, Wisconsin, US. Perfect timing, too, as I've nearly finished Peter's pf book. My thanks to the whole OpenBSD team. OpenBSD rocks!

2 carp devices for same IP on same host (with 2 nics)

2008-04-14 Thread Mikael Kermorgant
Hello, I'm working on testing this network topology : http://kgt.free.fr/objectif-net2.png I'm focusing on the inside side of fw1, which is linked (red cables) to ifw1 and ifw2 for high availability. These 2 nics are pcn2 and pcn3. I've configured them this way : pcn2 : 10.1.1.11 pcn3 :

Re: RDR question

2008-04-14 Thread Dorian Büttner
Monah Baki schrieb: rdr on $ext_if proto tcp from 192.168.2.0/24 to any port 80 - \ 127.0.0.1 port 5000 You changed the 'to'-part from 'to $ext_if' to 'to any', yes, but you also modified the 'rdr on' device to $ext_if. Why not leave it $int_if as before? Should work here?

ifstated and dhclient

2008-04-14 Thread Tom Geman
Hello, I have a webserver that obtains its external static IP via dhclient from my ISP. I actually have two webservers, one is a master and one a slave. Using carp on the internal network side I am able to have two definable and detectable states for each webserver, master and slave which is

Re: 2 carp devices for same IP on same host (with 2 nics)

2008-04-14 Thread Tom Geman
pcn2 : 10.1.1.11 pcn3 : 10.1.1.12 # cat /etc/hostname.carp1 inet 10.1.1.1 255.255.255.0 10.1.1.255 vhid 2 carpdev pcn2 advskew 0 # cat /etc/hostname.carp2 inet 10.1.1.1 255.255.255.0 10.1.1.255 vhid 2 carpdev pcn3 advskew 10 When I start the network, carp1 gets MASTER role but carp2 is on

Re: 4.2 and em(4)

2008-04-14 Thread scott
We've found the best gateway box -- pf, sshd for ssh -w vpn and ipsec clients, spamd, etc. -- is non-MP, as follows. A) Use a box with the fastest memory bandwidth (and latency) your budget -- cash or time spent scrounging -- can afford/acquire. (e.g. on a P-III 1 GHz machine, we saw meaningful

Re: constant barrage from rfc 1918 addresses source port 6293

2008-04-14 Thread Chris Smith
I did find the following thread - users with the same problem: http://www.globalaffairs.org/forum//showthread.php?t=51413 However, not really any resolution. -- Chris

Re: 2 carp devices for same IP on same host (with 2 nics)

2008-04-14 Thread Mikael Kermorgant
What's the point behind this setup ? It doesn't make any sense! John Well, it makes some sort of sense for me (but as I'm no expert, could be a sweet dream :) ) so it's best I try to share what I'm looking for : There are 2 level of firewalls : 1st with fw1 fw2 protects from internet and

How secure is OpenBSD really

2008-04-14 Thread Jernej Makovsek
Hi. I`m considering switching from Linux to OpenBSD because of the security of course. Now I wanted to be sure that I will finally be able to protect my box with smart encryption etc. (smart because anybody can write an encryption program, but few think about data that remains in RAM (even after

Re: 2 carp devices for same IP on same host (with 2 nics)

2008-04-14 Thread Mikael Kermorgant
On Mon, Apr 14, 2008 at 11:16 PM, Tom Geman [EMAIL PROTECTED] wrote: Problem is that carp2 never gets MASTER when I take down pcn2... I have never tried the setup you are proposing, but something doesn't seem right. Shouldn't both NICs belong to the same carp1? What happens if you

Re: 4.2 and em(4)

2008-04-14 Thread Mikael Kermorgant
Hello, I'd like to jump on what you said about separate buses because I haven't looked at this before. You made me curious to understand this dmesg output : cpu0 at mainbus0 pci0 at mainbus0 bus 0: configuration mode 1 (no bios) pchb0 at pci0 dev 0 function 0 Intel 82Q965 Host rev 0x02 agp0 at

SSD drives: performance gain

2008-04-14 Thread Jacob Yocom-Piatt
am considering acquiring some machines with SSD drives, e.g. thinkpad X300, and was interested to hear about any experiences with openbsd on an SSD drive. the reduction in latency and load times is attractive, but i'd like to hear some about some real world experiences before doling out

Re: How secure is OpenBSD really

2008-04-14 Thread Ted Unangst
On 4/14/08, Jernej Makovsek [EMAIL PROTECTED] wrote: Now with this post I don`t want to start any wars. I know that nothing is bullet proof and so on but as a wannabe OBSD user I`m just interested in if this compromise was analysed and especially how the code has changed from then, what

Re: SSD drives: performance gain

2008-04-14 Thread Travers Buda
* Jacob Yocom-Piatt [EMAIL PROTECTED] [2008-04-14 18:52:06]: am considering acquiring some machines with SSD drives, e.g. thinkpad X300, and was interested to hear about any experiences with openbsd on an SSD drive. the reduction in latency and load times is attractive, but i'd like to

Re: SSD drives: performance gain

2008-04-14 Thread Aaron Glenn
On Mon, Apr 14, 2008 at 4:52 PM, Jacob Yocom-Piatt [EMAIL PROTECTED] wrote: am considering acquiring some machines with SSD drives, e.g. thinkpad X300, and was interested to hear about any experiences with openbsd on an SSD drive. speaking (er, typing) with about zero research done, I'd say

From james Adamati

2008-04-14 Thread James Adamati
Hi, How are you doing today? My name is James Adamati I live in London and work in a financial institution here in United Kingdom. There is a potential transaction relating to a dormant account of one of our deceased customers, which I would like us to handle the fund actualization together.

Re: SSD drives: performance gain

2008-04-14 Thread Daniel Anderson
I am using a Memtech AT2515-2048 (2GB) drive with a Soekris 4801, and have been very happy. Boot is on-par with just about any ATA drive. I set it up for limited writes out of longevity concerns which I imagine are not well-founded in the case of SSD. It's a router..not a desktop, so my speed

X60 Tablet Wacom, Atheros 5213 others

2008-04-14 Thread Vadim Jukov
Hello all. A few days ago finally I almost fell-in-love - got ThinkPad X60 Tablet. WinXP partition resized to 15GB, OpenBSD installed... And here we begin: - GENERIC and GENERIC.MP work OK (Opera still crashes on MP as usual... well, my hopes belong to gnash today). - All network works fine

Re: Which chips for gigabit ethernet cards are the most OpenBSD friendly and stable?

2008-04-14 Thread Allen
Hi Jonathan, This has been discussed *extensively* on the list. You can no doubt read the archives for more detail. I've run bge and em based cards for many, many moons and both have served me quite well. I'm sure others have done more testing than I have but if I had to pick which was

Re: SSD drives: performance gain

2008-04-14 Thread Robert Blacquiere
Hi, On Mon, Apr 14, 2008 at 06:52:06PM -0500, Jacob Yocom-Piatt wrote: am considering acquiring some machines with SSD drives, e.g. thinkpad X300, and was interested to hear about any experiences with openbsd on an SSD drive. I'me currenty on the road (train) with OpenBSD 4.3 on X300.