Re: Network performance

2005-05-24 Thread Johan Sunnerstig
  Hi,
  
   More Mhz. Not crappy nics, get xl,fxp,dc etc. Or maybe 
  gigabit nics like
   em(4).
  I think he has xl and sk in the machine, sk is probably the 
  most decent
  thing one can get at the moment. xl I had quite mixed results 
  in the past,
  so changing that one into another sk might be all the change needed.
  the high irq load points into that direction, sk is a lot 
  better there.
  
   Dont have a crappy mobo chipset and anything over 800 mhz 
  would be able to
   do plenty filterings. I guess a P2 450 could work also..
  yes, but a P2-233 should have enough HP for standard stuff, 
 routing of
  100mbit + some not so complex filtering with normal packet 
  sizes should be
  possible.
  
  one can still stick a celeron 500 into the box, they are very cheap
  on ebay, in case changing the xl to sk is not enough.
  
  
  bye, siggi.
  
 
 Well I was thinking about that, but since the Sun box gives 
 me pretty much
 exactly the same performance, I'm thinking the PCI bus is limiting me.
 After all, it's the only thing that's the same on both boxes, 
 save for the
 lines themselves.
 
 And yeah, the filtering is pretty simple, about 15 rules, few tables,
 nothing fancy at all.
 I'll try and get my hands on a QFE card this week, to see if 
 that helps.
 
 Thanks.
 
 Johan
 

Well, just to follow up on this, the quad card didn't help either.
I guess I'll make one last attempt with only sk cards, but I'm doubting the
cards are the problem by now.

Johan



Re: IMAP servers

2005-05-24 Thread Thorsten Glaser
Gaby vanhegan dixit:

 What IMAP servers do people use for email access?

uw-imapd's imapd for imaps (port 993) access; sendmail with
uw-imapd's dmail/tmail instead of mail.local(8) for delivery
to MBX format mailboxes. Allows concurrent access.

uw-imaps allows reading arbitrary files on the server; I do
not consider this a problem since I can use chmod and chown.
The LP64 bugs in the code however are scary (but fixable).

//mirabile
--
 emacs als auch vi zum Kotzen finde (joe rules) und pine f|r den einzig
 bedienbaren textmode-mailclient halte (und ich hab sie alle ausprobiert).
;)
Hallo, ich bin der Holger (Hallo Holger!), und ich bin ebenfalls
... pine-User, und das auch noch gewohnheitsmd_ig (Oooohhh).  [aus
dasr]



Re: How to debug something like this?

2005-05-24 Thread Wijnand Wiersma
2005/5/24, Gerardo Santana Gsmez Garrido [EMAIL PROTECTED]:
  Well, never really looked at it. But I was dissapointed 2.0s4 was in ports.
 
 My fault. I had been away from the computer for a while for strong
 reasons, ...hard times.

We all forgive you.

  And that port only had mysql support and I don't want mysql on my
  server. If you could add a postgresql flavor :-)
 
 Done. See patch in ports@
 It needs someone to test it though :

I will test it on my workstation as soon as I can.

 It's very straightforward. I'm running it with MySQL. I can help you
 with PostgreSQL.

Thanks.

Wijnand



Re: kernel pppoe problems

2005-05-24 Thread Adam Gleave
In that case, it's likely not a PPPoE problem at all but a name server
resolution, surely? Try adding it back and pinging an ip rather than a
domain, that should tell you.

On 24/05/05, Chris Zakelj [EMAIL PROTECTED] wrote:
 Jason Ackley wrote:

 Is this something that you are able to repeat? E.g. Simply does not work
  without the debug flag and comes up as soon as you add it?
  (just trying to make sure it is the same thing that I have seen)
 
 Getting it working for me didn't include the 'debug' statement... it
 appears that removing lookup file bind from /etc/resolv.conf was the
 magic pill in my case.  I'll try putting that back and adding the debug
 flag tomorrow, and then watching what happens.



--
Adam Gleave
[ OpenBSD 3.7 (GENERIC) #50: Sun Mar 20 00:01:57 MST 2005 ]



Re: IMAP servers

2005-05-24 Thread Thorsten Glaser
Rod.. Whitworth dixit:

You really believe those UW people really can consider something unsafe

It was considered so by the OpenBSD porter. UTSL.

before they clean up their own exploit history? Insane? The sky is
falling! I don't know about many IMAP servers but I know that UW-IMAP
is considered less than favourably in many circles.

Prove an exploit.

which shows you just what a nice guy Crispin is, eh? He really is the
right guy to write RFCs, is he?

Now you're getting personal, eh? Sounds like FUD to me.
By the way, he DOES happen to have invented IMAP.

(yeah, I know, DJB can be a bit of a Grumpy Old Man (to steal the title
of a great TV series from GB) but I'd never take him for stupid. Mark,
on the other hand lets his ego get in the way of reality and secure
programming methods too, it seems to me.

You know, the pine suite (including imapd, mailutil etc.)
is not being written by one man.

Oh, and I've only replied because I think that it is
monoculture which sucks. I've never seen a tool handle
such a variety of both environments and mail formats
as mailutil (libc-client).

bye,
//mirabile
-- 
 emacs als auch vi zum Kotzen finde (joe rules) und pine f|r den einzig
 bedienbaren textmode-mailclient halte (und ich hab sie alle ausprobiert). ;)
Hallo, ich bin der Holger (Hallo Holger!), und ich bin ebenfalls
... pine-User, und das auch noch gewohnheitsmd_ig (Oooohhh).  [aus dasr]



Re: Certified Hardware

2005-05-24 Thread Lars Hansson
On Tue, 24 May 2005 12:49:43 +0200
Habex Tim [EMAIL PROTECTED] wrote:

 We are considering replacing our current CheckPoint FireWall-1 with
 openBSD. However our internal policies require us to have certified
 hardware to run on production systems.

Sera Systems, http://www.serasystems.com/, sells hardware with OpenBSD
on it although I dont know if that qualifies as certified.

---
Lars Hansson



Re: Certified Hardware

2005-05-24 Thread C. Bensend
 I've heard good things about Sera although I've yet to try them out
 personally.

I had nothing but good experiences with Kevin and the folks over
at Sera Systems.  I would not hesitate to recommend them.

Benny


-- 
You come from a long line of scary women. -- Ranger, Three To
   Get Deadly



NIC bonding/trunking/802.3ad

2005-05-24 Thread Hyb
Hi list,

It seems that the topic of 802.3ad support (link
aggregation|bonding|trunking|whatever you want to call it) seems to come
every so often, but is often disregarded on the basis that gigE is now
cheap. I see the redudancy as a much more valuable asset though.

We have been recently building a new installation of 'clustered' machines to
host a managed service. All tiers of the system have n+1 redundancy at both
machine, power and network levels - so all switches are paired/interlinked
and each machine has two physical connections to each ethernet segment,
elimininating all remaining SPOF's. The frontside of our network looks
something like this - http://orb.unmake.net/~hybrid/redundancy_diag.txt

The recent additions to PF, CARP, OSPFD and OpenBGPD have all been godsends
to a company that already extensively utilises OpenBSD in routing/firewall
roles. However this has me stumped. In order for simulteanous switch _and_
machine failure in a diagonal fashion to not produce a total service outage,
each machine must be connected to both switches on either side. Which
obviously they can't without some layer 2/3 co-operation and it's a major
show stopper for us  :[

I understand that I can achieve the NIC failover in a less than ideal way by
adding each pair of interfaces to a bridge and using SPF. However failover
time is slow and I _imageine_ it'll break when I run NAT/CARP/briding atop
of these. Perhaps it's a scenario for ifstated? Any other suggested
workarounds?

I see that NetBSD recently gained .3ad support by way of agr(4). Are there
any plans or interest in porting this into OBSD? Would it be viable?

Many thanks,



Xorg problem with Intel 82852GM on OpenBSD 3.7

2005-05-24 Thread Murat Mamitov
Hello,
i try to resend my demand for aid...

I've installed OpenBSD 3.7 on my HP Compaq NX5000 (with 855GM
chipset). I'd like to use X above, but when i try to launch startx i
recive the follow error:
--
(EE) I810(0): No Video BIOS modes for chosen depth.
(EE) Screen(s) found, but none have a usable configuration.

Fatal server error: no screens found
--

I created xorg.conf with xorgconfig, xorgcfg won't start, with this
last i have the same error.

Help me please.
Thank you very much.

My dmesg:

OpenBSD 3.7 (GENERIC) #50: Sun Mar 20 00:01:57 MST 2005
   [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) M processor 1500MHz (GenuineIntel
686-class) 1.50 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,ACPI,MMX,FXSR,SSE,SSE2,TM,SBF,EST,TM2
cpu0: Enhanced SpeedStep 1500 MHz (1484 mV): speeds: 1500, 1400, 1200,
1000, 800, 600 MHz
real mem  = 527867904 (515496K)
avail mem = 474853376 (463724K)
using 4278 buffers containing 26497024 bytes (25876K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(c3) BIOS, date 02/16/05, BIOS32 rev. 0 @ 0xf
apm0 at bios0: Power Management spec V1.2 (BIOS managing devices)
apm0: battery life expectancy 96%
apm0: AC on, battery charge high
pcibios0 at bios0: rev 2.1 @ 0xf/0x2000
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf0840/160 (8 entries)
pcibios0: bad IRQ table checksum
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf51d0/160 (8 entries)
pcibios0: PCI Exclusive IRQs: 5 10 11
pcibios0: no compatible PCI ICU found: ICU vendor 0x8086 product 0x24cc
pcibios0: PCI bus #3 is the last bus
bios0: ROM list: 0xc/0x1!
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 Intel 82852GM Hub-PCI rev 0x02
Intel 82852GM Memory rev 0x02 at pci0 dev 0 function 1 not configured
Intel 82852GM Configuration rev 0x02 at pci0 dev 0 function 3 not configured
vga1 at pci0 dev 2 function 0 Intel 82852GM AGP rev 0x02: aperture
at 0x9800, size 0x800
wsdisplay0 at vga1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
Intel 82852GM AGP rev 0x02 at pci0 dev 2 function 1 not configured
uhci0 at pci0 dev 29 function 0 Intel 82801DB USB rev 0x01: irq 10
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1 at pci0 dev 29 function 1 Intel 82801DB USB rev 0x01: irq 10
usb1 at uhci1: USB revision 1.0
uhub1 at usb1
uhub1: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2 at pci0 dev 29 function 2 Intel 82801DB USB rev 0x01: irq 10
usb2 at uhci2: USB revision 1.0
uhub2 at usb2
uhub2: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
ehci0 at pci0 dev 29 function 7 Intel 82801DB USB rev 0x01: irq 10
ehci0: EHCI version 1.0
ehci0: companion controllers, 2 ports each: uhci0 uhci1 uhci2
usb3 at ehci0: USB revision 2.0
uhub3 at usb3
uhub3: Intel EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub3: single transaction translator
uhub3: 6 ports with 6 removable, self powered
ppb0 at pci0 dev 30 function 0 Intel 82801BAM Hub-to-PCI rev 0x81
pci1 at ppb0 bus 1
ipw0 at pci1 dev 4 function 0 Intel PRO/2100 3B rev 0x04: irq 11,
address 00:0c:f1:1b:74:36
cbb0 at pci1 dev 6 function 0 vendor Texas Instruments, unknown
product 0xac8e rev 0x00: irq 10
cbb1 at pci1 dev 6 function 1 vendor Texas Instruments, unknown
product 0xac8e rev 0x00: irq 10
vendor Texas Instruments, unknown product 0xac8f (class mass storage
subclass miscellaneous, rev 0x00) at pci1 dev 6 function 3 not
configured
Texas Instruments TSB43AB22 FireWire rev 0x00 at pci1 dev 13
function 0 not configured
bce0 at pci1 dev 14 function 0 Broadcom BCM4401B0 rev 0x02: irq 11,
address 00:08:02:e0:54:4c
bmtphy0 at bce0 phy 1: BCM4401 10/100baseTX PHY, rev. 0
cardslot0 at cbb0 slot 0 flags 0
cardbus0 at cardslot0: bus 2 device 0 cacheline 0x10, lattimer 0x20
pcmcia0 at cardslot0
cardslot1 at cbb1 slot 1 flags 0
cardbus1 at cardslot1: bus 3 device 0 cacheline 0x10, lattimer 0x20
pcmcia1 at cardslot1
ichpcib0 at pci0 dev 31 function 0 Intel 82801DBM LPC rev 0x01
pciide0 at pci0 dev 31 function 1 Intel 82801DBM IDE rev 0x01: DMA,
channel 0 configured to compatibility, channel 1 configured to
compatibility
wd0 at pciide0 channel 0 drive 0: TOSHIBA MK4025GAS
wd0: 16-sector PIO, LBA, 38154MB, 78140160 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: TOSHIBA, DVD-ROM SD-R2512, 1A04 SCSI0
5/cdrom removable
cd0(pciide0:1:0): using PIO mode 4, DMA mode 2
auich0 at pci0 dev 31 function 5 Intel 82801DB 

Re: NIC bonding/trunking/802.3ad

2005-05-24 Thread Niall O'Higgins
On Tue, May 24, 2005 at 02:01:23PM +0100, Hyb wrote:
 It seems that the topic of 802.3ad support (link
 aggregation|bonding|trunking|whatever you want to call it) seems to come
 every so often, but is often disregarded on the basis that gigE is now
 cheap. I see the redudancy as a much more valuable asset though.

speak of the devil! reyk@ got there already ...

http://marc.theaimsgroup.com/?l=openbsd-cvsm=111690466011478w=2



Re: NIC bonding/trunking/802.3ad

2005-05-24 Thread Hyb
- Original Message - 
From: Niall O'Higgins [EMAIL PROTECTED]
To: Hyb [EMAIL PROTECTED]
Cc: misc@openbsd.org
Sent: Tuesday, May 24, 2005 4:06 PM
Subject: Re: NIC bonding/trunking/802.3ad


 speak of the devil! reyk@ got there already ...
 
 http://marc.theaimsgroup.com/?l=openbsd-cvsm=111690466011478w=2

Wow! Perfect.
Thanks for pointing it out and reyk@ for the commit.
We love you, OBSD.

Regards,



Re: Burn Testing

2005-05-24 Thread Niall O'Higgins
On Tue, May 24, 2005 at 04:00:20PM +0100, Gaby vanhegan wrote:
 I have acquired some second-hand dual processor servers with the 
 intention of putting OpenBSD with on them.  I have put Debian on one of 
 them and FreeBSD on another, and am pounding them as hard as I can with 
 setiathome to see if they fall over.

[EMAIL PROTECTED] touches pretty narrow parts of the system, doesn't it?
CPU-bound in userland with little kernel interaction AFAIK...perhaps not the
best thing to judge real-world stability by.

 Is there a similar burn-testing app that I can run on OpenBSD to test 
 the stability of the machines over a 12 day period?

Besides maybe some memory access, does running [EMAIL PROTECTED] really show 
system
stability any more than the following shell script shows system
stability?

while true; do done; 


I would think running an endless 'make build' loop would be a better
indicator than [EMAIL PROTECTED], and thats not to say its necessarily a good
indicator ...



Re: Burn Testing

2005-05-24 Thread Jason Dixon

On May 24, 2005, at 11:43 AM, Gaby vanhegan wrote:


On 24 May 2005, at 16:00, Gaby vanhegan wrote:

Is there a similar burn-testing app that I can run on OpenBSD to test 
the stability of the machines over a 12 day period?


I should have mentioned that there will be a prize* for the most 
creative suggestion.


In that case, I revise my answer.

Build -current nonstop,
On a self-mounted NFS share,
Over a looped-to-self VPN session with 2048-bit keys.

:)

--
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net



Re: Burn Testing

2005-05-24 Thread STeve Andre'
On Tuesday 24 May 2005 11:00, Gaby vanhegan wrote:
 Hi,

 I have acquired some second-hand dual processor servers with the
 intention of putting OpenBSD with on them.  I have put Debian on one of
 them and FreeBSD on another, and am pounding them as hard as I can with
 setiathome to see if they fall over.

 Is there a similar burn-testing app that I can run on OpenBSD to test
 the stability of the machines over a 12 day period?

 Gaby

Building the world is a great test of hardware.  Once you've done that,
you could build all the packages, another test which has proven to me
that hardware I thought was good, was bad.

On my 1.7G package builder it takes about 74 hours to build them all,
and all of OpenBSD takes about 2:20.  You might have to do that several
times depending on the speed of your processor.  I've never done a 
package build on an mp system so I don't know the details of that, but
I can't imagine that isn't a good test.

--STeve Andre'



Re: Weight attribute in openBGPd

2005-05-24 Thread Claudio Jeker
On Tue, May 24, 2005 at 10:22:49AM +0200, Alexander Bochmann wrote:
 ...on Mon, May 23, 2005 at 11:40:00PM +0200, Henning Brauer wrote:
 
-[bgpd.conf(5)-
   weight number
The weight is used to tip prefixes with equally long AS paths in
one or the other direction.  A prefix is weighed at a very late
   this is not the cisco-style weight. whihc maches our choice of the 
   keyword here a bit problematic, if anyone has a better idea please mail 
 
 Sounds kind of like what Cisco does with 
 the router ID, but that isn't really a 
 better name if it's not the priority to 
 be Cisco terminology-compatible :)
 

Actually the router ID is also checked by OpenBSD but it is absolutly
unusable for tossing routes in the right direction. The router ID of your
neighbor is not under your control.

A lot of people abuse the metric|MED for such a thing but that's a hack
and not what the MED is designed for.

-- 
:wq Claudio



auvia and the VT8233/VT8235 for AC97 audio

2005-05-24 Thread Josh Grosse
Way back on 24 Feb 2005, a user wrote about struggling with the auvia 
driver, and began a conversation here on misc@ with Bruno Rohee about 
the use of mixerctl with this particular driver.  Apparently, after 
turning off all outputs.*.mute, they both were able to only get audio 
output only thru the mic port of their soundcards.


An archive of their thread begins here:
http://www.monkey.org/openbsd/archive/misc/0502/msg03142.html

I have a VT8235 southbridge chip, providing integrated AC97 audio.I 
just want 2-channel (stereo) output, but am only able to obtain 
left-channel output from the soundcard.  I'm running 3.7-release,  and 
of course its using the auvia(4) driver. 

In testing my hardware with other OS's, I've found that stereo sound 
works properly with FreeBSD and MEPIS Linux, and a closed source OS from 
Redmond. 

FreeBSD uses the pcm(4) driver, and MEPIS uses alsa vt82xx(4) driver.  
One thing I notice looking at the dmesg outputs, is that auvia sees a 
VT8233, while pcm and vt82xx both see a VT8235.  I'm guessing, of 
course, but I think that PCI device determination might be the root 
cause of my difficulty, since only OBSD thinks the chip is an 8233 for 
sound.


Playing with mixerctl mutes, I am only able to achieve sound output from 
the left channel, only when outputs.surround.mute=off.  No other 
outputs.*.mute setting makes a difference to the function of the right 
channel, it stays silent. 

According to my MB documentation (ASUS A7VT),  the soundcard ports are 
used in various ways, depending on whether one is configured as 2, 4 or 
6-channel sound:


   * Line-out is used for headphones or speakers.  In 4/6 channel  
becomes front speakers out.

   * Line-in  becomes LFE out in 6-channel mode
   * Mic-in used for rear speakers in 4/6 channel mode.

With outputs.surround.mute=off, I could get the left speaker working 
from the Line-out socket.  Testing outputs.headphone.mute, I could turn 
on and off sound through a separate headphone port, but only the left 
channel would produce sound, only when the outputs.surround.mute was set 
to off. No other soundcard port produced sound with any mute settings.


Unfortunately, I don't know enough C to debug 
/usr/src/sys/dev/pci/auvia.c on my own.  I'm willing to assist with 
debugging, if there's an interested developer.  And of course, any 
config(8) device settings or any other suggestions would be most welcome.


-Josh Grosse-
   


- audioctl defaults (left untouched) -

name=VIA VT8233
version=
config=auvia
encodings=ulinear:8,mulaw:8*,alaw:8*,slinear:8*,slinear_le:16,ulinear_le:16*,slinear_be:16*,ulinear_be:16* 


properties=full_duplex,mmap,independent
full_duplex=0
fullduplex=0
blocksize=4096
hiwat=10
lowat=1
monitor_gain=0
mode=
play.rate=44100
play.channels=2
play.precision=16
play.encoding=slinear_le
play.gain=127
play.balance=32
play.port=0x0
play.avail_ports=0x0
play.seek=28672
play.samples=10645504
play.eof=0
play.pause=0
play.error=1
play.waiting=0
play.open=0
play.active=0
play.buffer_size=65536
record.rate=44100
record.channels=2
record.precision=16
record.encoding=slinear_le
record.gain=191
record.balance=32
record.port=0x1
record.avail_ports=0x7
record.seek=0
record.samples=0
record.eof=0
record.pause=0
record.error=0
record.waiting=0
record.open=0
record.active=0
record.buffer_size=65536
record.errors=0

- mixerctl defaults (played with every *.*.mute during testing) -

outputs.master=255,255
outputs.master.mute=off
outputs.mono=255
outputs.mono.mute=on
outputs.mono.source=mixerout
outputs.headphones=255,255
outputs.headphones.mute=on
outputs.bass=255
outputs.treble=255
inputs.speaker=255
inputs.speaker.mute=off
inputs.phone=191
inputs.phone.mute=on
inputs.mic=191
inputs.mic.mute=on
inputs.mic.preamp=off
inputs.mic.source=mic0
inputs.line=191,191
inputs.line.mute=on
inputs.cd=255,255
inputs.cd.mute=off
inputs.video=255,255
inputs.video.mute=off
inputs.aux=191,191
inputs.aux.mute=on
inputs.dac=255,255
inputs.dac.mute=off
record.source=mic
record.volume=255,255
record.volume.mute=off
record.mic=0
record.mic.mute=off
outputs.loudness=off
outputs.spatial=off
outputs.spatial.center=0
outputs.spatial.depth=0
outputs.surround=255,255
outputs.surround.mute=on
outputs.center=255
outputs.center.mute=on
outputs.lfe=255
outputs.lfe.mute=on

- OBSD dmesg (note VT8235 for pcib0, but VT8233 for auvia0) -

OpenBSD 3.7 (GENERIC) #50: Sun Mar 20 00:01:57 MST 2005
   [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: AMD Sempron(tm) 2600+ (AuthenticAMD 686-class) 1.84 GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE 


real mem  = 502833152 (491048K)
avail mem = 451821568 (441232K)
using 4278 buffers containing 25243648 bytes (24652K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(37) BIOS, date 01/07/05, BIOS32 rev. 0 @ 0xfb9b0
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
pcibios0 at bios0: rev 2.1 @ 

Re: Burn Testing

2005-05-24 Thread Will H. Backman
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of
 Gaby vanhegan
 Sent: Tuesday, May 24, 2005 11:43 AM
 To: misc@openbsd.org
 Subject: Re: Burn Testing
 
 On 24 May 2005, at 16:00, Gaby vanhegan wrote:
 
  Is there a similar burn-testing app that I can run on OpenBSD to
test
  the stability of the machines over a 12 day period?
 
 I should have mentioned that there will be a prize* for the most
 creative suggestion.
 

Thermite.

Ok, maybe try replicating what was done here:
http://www.feyrer.de/NetBSD/gmcgarry/



Re: Burn Testing

2005-05-24 Thread Frank Denis \(Jedi/Sector One\)
On Tue, May 24, 2005 at 04:00:20PM +0100, Gaby vanhegan wrote:
 I have acquired some second-hand dual processor servers with the 
 intention of putting OpenBSD with on them.  I have put Debian on one of 
 them and FreeBSD on another, and am pounding them as hard as I can with 
 setiathome to see if they fall over.
 Is there a similar burn-testing app that I can run on OpenBSD to test 
 the stability of the machines over a 12 day period?

  Try blogbench:
  
  http://blogbench.pureftpd.org/
  
  It stresses a lot your hardware and your OS, and if often triggers kernel
panics if something is wrong.



Re: Burn Testing

2005-05-24 Thread Adam Papai

Gaby vanhegan wrote:

On 24 May 2005, at 16:00, Gaby vanhegan wrote:

Is there a similar burn-testing app that I can run on OpenBSD to test 
the stability of the machines over a 12 day period?



I should have mentioned that there will be a prize* for the most 
creative suggestion.


Gaby.

*There is no actual prize


Run john. It really uses CPU.


--
Adam Papai
Digital Influence Inc.
E-mail: [EMAIL PROTECTED]
Phone: +36 30 33-55-735



Re: Certified Hardware

2005-05-24 Thread Matt Provost
On May 24 12:49 PM, Habex Tim wrote:
 Dear,
 
 We are considering replacing our current CheckPoint FireWall-1 with
 openBSD. However our internal policies require us to have certified
 hardware to run on production systems.
 
 Therefore we are looking for certified hardware (+maintenance contract)
 to replace our current (expired) Nokia 440.
 
 I was unable to find this information from your website and on #openbsd
 (irc.freenode.net) they informed me to try this email address. The list
 of supported hardware is insufficient as we need a vendor who is aware
 of openBSD compatibility in case we need a replacement. e.g. Which
 hardware (vendor) are you using?
 
 We need at least 6 NICs in our firewall and our preferred vendor is HP.
 

I'm not sure what kind of traffic you are pushing, but Soekris
Engineering (www.soekris.com) certifies their hardware with OpenBSD. If
you get a net4801 with 3 onboard NICs and one of their lan1641 quad
cards you can get 7 interfaces. It also has room for a VPN accelerator
card if you need one. This way you can get all the hardware from a
single vendor who supports OpenBSD. I'm sure you can find lots of people
talking about it on the archives.

Matt



Re: auvia and the VT8233/VT8235 for AC97 audio

2005-05-24 Thread Can Erkin Acar
Josh Grosse wrote:
[snip]
 I have a VT8235 southbridge chip, providing integrated AC97 audio.I
 just want 2-channel (stereo) output, but am only able to obtain
 left-channel output from the soundcard.  I'm running 3.7-release,  and
 of course its using the auvia(4) driver.
[snip]
 ac97: codec id 0x41445368 (Analog Devices AD1888)
 ac97: codec features headphone, 20 bit DAC, No 3D Stereo

I have a patch for this.  It will be fixed in -current soon.

Can



filesystem snapshots?

2005-05-24 Thread Stephan Wehner
Is mksnap_ffs(8) from FreeBSD available in OpenBSD? (It allows taking
a snapshot of a filesystem.) It seems not available as far as I can
tell. Are there plans?

Stephan



Re: Buying CD's in Calgary

2005-05-24 Thread Roy Morris

Cameron Schaus wrote:


Does anyone know where I could buy OpenBSD CD's in Calgary?  I used to
buy them at Nexus Computer Books, but now that they are gone, I'm not
sure where to buy the CD's in Calgary.

Thanks,
Cam

 


Run over to Theo's house and wake him up, or as
an alternate what about the one they list on the
site.

http://www.openbsd.org/orders.html#cshop



Re: NIC bonding/trunking/802.3ad

2005-05-24 Thread Jim Razmus
* Niall O'Higgins [EMAIL PROTECTED] [050524 11:10]:
 On Tue, May 24, 2005 at 02:01:23PM +0100, Hyb wrote:
  It seems that the topic of 802.3ad support (link
  aggregation|bonding|trunking|whatever you want to call it) seems to come
  every so often, but is often disregarded on the basis that gigE is now
  cheap. I see the redudancy as a much more valuable asset though.
 
 speak of the devil! reyk@ got there already ...
 
 http://marc.theaimsgroup.com/?l=openbsd-cvsm=111690466011478w=2
 

But this requires cooperation on the part of the switch.  The original
poster mentioned connecting to two distinct switches to remove the
switch as a SPOF.  Correct me if I'm wrong, .3ad does not address this.

Jim



Re: Buying CD's in Calgary

2005-05-24 Thread Adam Gleave
why not https://https.openbsd.org/cgi-bin/order ?

On 24/05/05, Cameron Schaus [EMAIL PROTECTED] wrote:
 Does anyone know where I could buy OpenBSD CD's in Calgary?  I used to
 buy them at Nexus Computer Books, but now that they are gone, I'm not
 sure where to buy the CD's in Calgary.
 
 Thanks,
 Cam
 
 


-- 
Adam Gleave
[ OpenBSD 3.7 (GENERIC) #50: Sun Mar 20 00:01:57 MST 2005 ]



Re: kernel pppoe problems

2005-05-24 Thread Can Erkin Acar
Jason Ackley wrote:
 Can you try turning on the debug flag to pppoe0 ?

Good advice, debug mode gives lots of useful output
also tcpdump on the parent interface, eg. 'tcpdump -nei fxp0 no ip'
helps.

 I just tested this in a lab setup and it would not connect unless the
 debug flag was set on the interface. The other side was a cisco and it
 seems that they could not get out of the configuration negotiation
 phase (cisco was never getting far enough along to authenticate via 
 RADIUS server).

 If I had 'debug' set on the interface, it came up instantly.

now, this is not what the debug flag is intended for. it is also
not good for system logs, so instead of discussing such 'workarounds'
which, unfortunately live much longer than the bugs themselves.
I suggest we try to identify the problem.

 This was tested on 3.7-release kernel and a -current as of a day or so 
 ago on i386 and amd64. I am checking my setup now to make sure all my 
 boxes are in sync.

I can't see any problem report about this in my inbox
(which is quite a mess nowadays, so it is equally likely
that I missed it),

If you can spare some time to send me pppoe debug outputs,
tcpdumps with  without the debug flag, and if possible
logs/dumps from the cisco side, I we can do something
about the problem.

Can



Re: filesystem snapshots?

2005-05-24 Thread Pedro Martelletto
On Tue, May 24, 2005 at 11:03:25AM -0700, Stephan Wehner wrote:
 Is mksnap_ffs(8) from FreeBSD available in OpenBSD?

nope

 Are there plans?

yup

-p.



Re: filesystem snapshots?

2005-05-24 Thread Pedro Martelletto
On Tue, May 24, 2005 at 11:41:20AM -0700, Stephan Wehner wrote:
 Is there something usable right now?

nope, but i will let you know as soon as there is

cheers,
-p.



Re: filesystem snapshots?

2005-05-24 Thread Stephan Wehner
Is there something usable right now?

Stephan

On 5/24/05, Pedro Martelletto [EMAIL PROTECTED] wrote:
 On Tue, May 24, 2005 at 11:03:25AM -0700, Stephan Wehner wrote:
  Is mksnap_ffs(8) from FreeBSD available in OpenBSD?
 
 nope
 
  Are there plans?
 
 yup
 
 -p.



Re: Burn Testing

2005-05-24 Thread Frank Bax

At 11:41 AM 5/24/05, Niall O'Higgins wrote:


On Tue, May 24, 2005 at 04:00:20PM +0100, Gaby vanhegan wrote:
 I have acquired some second-hand dual processor servers with the
 intention of putting OpenBSD with on them.  I have put Debian on one of
 them and FreeBSD on another, and am pounding them as hard as I can with
 setiathome to see if they fall over.

[EMAIL PROTECTED] touches pretty narrow parts of the system, doesn't it?
CPU-bound in userland with little kernel interaction AFAIK...perhaps not the
best thing to judge real-world stability by.

 Is there a similar burn-testing app that I can run on OpenBSD to test
 the stability of the machines over a 12 day period?

Besides maybe some memory access, does running [EMAIL PROTECTED] really show 
system stability any more than the following shell script shows system 
stability?


while true; do done;



[EMAIL PROTECTED] writes only about 4K to disk once per minute per 
process.  Minimal network traffic to receive work units (240K)  send 
results as required (about 4-12 times per process per day depending on cpu 
speed). 



Re: auvia and the VT8233/VT8235 for AC97 audio

2005-05-24 Thread Josh Grosse
 Can Erkin Acar wrote:

  I have a patch for this.  It will be fixed in -current soon.
  
  Can

Wonderful news!  If you need it tested, please let me know.

   -Josh-



Re: Buying CD's in Calgary

2005-05-24 Thread Theo de Raadt
 why not https://https.openbsd.org/cgi-bin/order ?
 
 On 24/05/05, Cameron Schaus [EMAIL PROTECTED] wrote:
  Does anyone know where I could buy OpenBSD CD's in Calgary?  I used to
  buy them at Nexus Computer Books, but now that they are gone, I'm not
  sure where to buy the CD's in Calgary.


There are currently no stores in Calgary selling CDs directly.  The
CDs get shipped out of a town about 3 hours drive south of Calgary.
Obviously not by me, since I have my hands full with other things.

Tonight, just tonight, CDs and other things can be bought at 5:30pm
at the CUUG meeting in downtown Calgary.  See http://www.cuug.ab.ca

As an added bonus, besides CDs we are bringing 60 developers along
for a QA after the talk.



Re: Fwd: Xorg problem with Intel 82852GM on OpenBSD 3.7

2005-05-24 Thread Adam Gleave
This might sound stupid, but have you tried changing the default
depth? I know i810 should support 24 bit, but hey it's worth a try.



Re: Email Server

2005-05-24 Thread hellsop
On Tue, May 24, 2005 at 09:18:58AM -0700, Bruno Delbono wrote:
 [EMAIL PROTECTED] wrote:
 
 Ports aren't generally checked for much other than Does it build? and
 Does it work?. 
 
 So, secure by default means that you should only run OpenBSD as it comes 
 and do not touch anything on it. Or else, it won't be secure by default; 
 your warranty is voided and Theo will spank you.

in the base install is a very important phrase. Ports don't get
audited much, if at all. This isn't any sort of slap to the porters;
it's just there's a *lot* of code in the port and examing that code
for correctness isn't their intent.  Ports are a convenience, not a
promise. Postfix and cyrus aren't base install, and therefore aren't
covered. Ain't life terrible?

-- 
83. If I'm eating dinner with the hero, put poison in his goblet, then have to 
leave the table for any reason, I will order new drinks for both of us 
instead of trying to decide whether or not to switch with him.
--Peter Anspach's list of things to do as an Evil Overlord



fwbus gone missing??

2005-05-24 Thread Folkert Saathoff

hello list,
can anyone tell me why there is no fwbus
support in OPENBSD_3_7 anymore? or more
to the point, can anyone tell me how to
use my IEEE1394 pci controller + hdd on
my freshly compiled OPENBSD_3_7 system?

thnx/ cheers,
/folkert


 /*
  _   
_
*
  _|| 
_
*
   ||  
[EMAIL PROTECTED]   *

 */




Re: Certified Hardware

2005-05-24 Thread eric
On Tue, 2005-05-24 at 12:49:43 +0200, Habex Tim proclaimed...

 Therefore we are looking for certified hardware (+maintenance contract)
 to replace our current (expired) Nokia 440.

Keep the IP440's and just run openbsd on them.

works like a champ.



djbdns DNS server? Status, Pros and Cons?

2005-05-24 Thread Anders Jönsson

Hello folks.
I recently bought a very good book: Mastering FreeBSD and OpenBSD security
They have a chapter dealing with DNS servers and there they mention 
djbdns, they think it has some strong point s so I am somewhat curios 
about if anybody out there has any viewpoint about using this instead of 
BIND, especially since the last version djbdns I found was from 2001??! 
I can't believe that it is so good that it is no need to patch it now 
and then?




djbdns DNS server? Status, Pros and Cons?

2005-05-24 Thread Anders Jönsson

Hello folks.
I recently bought a very good book: Mastering FreeBSD and OpenBSD security
They have a chapter dealing with DNS servers and there they mention
djbdns, they think it has some strong point s so I am somewhat curios
about if anybody out there has any viewpoint about using this instead of
BIND, especially since the last version djbdns I found was from 2001??!
I can't believe that it is so good that it is no need to patch it now
and then?



Re: Buying CD's in Calgary

2005-05-24 Thread Jim Henderson
The Calgary Unix Users Group is meeting tonight and they'll be selling
them.  Why not buy a t-shirt too?

http://www.cuug.ab.ca/

Cameron Schaus wrote:
 Does anyone know where I could buy OpenBSD CD's in Calgary?  I used to
 buy them at Nexus Computer Books, but now that they are gone, I'm not
 sure where to buy the CD's in Calgary.
 
 Thanks,
 Cam
 
 

Regards,
Jim



Re: Fwd: Xorg problem with Intel 82852GM on OpenBSD 3.7

2005-05-24 Thread Murat Mamitov
Yes, i tried to change the depth, the same problem.
I tried apg and vesa drivers too, nothing... i recived the same error.

On 5/24/05, Adam Gleave [EMAIL PROTECTED] wrote:
 This might sound stupid, but have you tried changing the default
 depth? I know i810 should support 24 bit, but hey it's worth a try.



Re: fwbus gone missing??

2005-05-24 Thread Stuart Henderson

--On 24 May 2005 22:42 +0200, Folkert Saathoff wrote:


can anyone tell me why there is no fwbus
support in OPENBSD_3_7 anymore?


http://marc.theaimsgroup.com/?l=openbsd-cvsm=111006724728554w=2



Re: Burn Testing

2005-05-24 Thread Francisco de Borja
What about running [EMAIL PROTECTED] on the openbsd box?

I do not test it, but some googling returns interesting urls:

http://www.mwjr.btinternet.co.uk/seti/description.html
http://setiathome.ssl.berkeley.edu/unix.html


On Tue, 24 May 2005 16:00:20 +0100
Gaby vanhegan [EMAIL PROTECTED] wrote:

 Hi,
 
 I have acquired some second-hand dual processor servers with the 
 intention of putting OpenBSD with on them.  I have put Debian on one of 
 them and FreeBSD on another, and am pounding them as hard as I can with 
 setiathome to see if they fall over.
 
 Is there a similar burn-testing app that I can run on OpenBSD to test 
 the stability of the machines over a 12 day period?
 
 Gaby
 
 --
 Junkets for bunterish lickspittles since 1998!
 [EMAIL PROTECTED]
 http://weblog.vanhegan.net


-- 

Perceive that which cannot be seen with the eye. - Miyamoto Musashi
-
Francisco de Borja Lspez Rmo ([EMAIL PROTECTED])
Csdigo23 - Secure Network Solutions
http://www.codigo23.net / http://www.e-shell.org



Re: fwbus gone missing??

2005-05-24 Thread Chris Kuethe
There never was real fwbus support - sure, there was some code being
lightly hacked on, but it was never enabled for real.

Import: Add FireWire to kernel config. (disabled for now, not
production quality yet)
http://www.openbsd.org/cgi-bin/cvsweb/src/sys/arch/i386/conf/GENERIC.diff?r1=1.326r2=1.327f=h

The development code was removed from cvs with this message: Clean up
the tree from incomplete, unreliable and unsupported IEEE1394 code.
http://www.openbsd.org/cgi-bin/cvsweb/src/sys/arch/i386/conf/GENERIC.diff?r1=1.403r2=1.404f=h

This lesson brought to you by cvsweb and the MARC archives of the
source-changes mailing list.

CK

On 5/24/05, Folkert Saathoff [EMAIL PROTECTED] wrote:
 hello list,
 can anyone tell me why there is no fwbus
 support in OPENBSD_3_7 anymore? or more
 to the point, can anyone tell me how to
 use my IEEE1394 pci controller + hdd on
 my freshly compiled OPENBSD_3_7 system?
 
 thnx/ cheers,
 /folkert
 
 
   /*
_
 _
 *
_||
 _
 *
 ||
 [EMAIL PROTECTED]   *
 
   */
 
 


-- 
GDB has a 'break' feature; why doesn't it have 'fix' too?



Re: fwbus gone missing??

2005-05-24 Thread STeve Andre'
On Tuesday 24 May 2005 16:42, Folkert Saathoff wrote:
 hello list,
 can anyone tell me why there is no fwbus
 support in OPENBSD_3_7 anymore? or more
 to the point, can anyone tell me how to
 use my IEEE1394 pci controller + hdd on
 my freshly compiled OPENBSD_3_7 system?

 thnx/ cheers,
 /folkert


   /*
_
 _
 *
_||
 _
 *

 [EMAIL PROTECTED]   *

   */

FireWire was pulled from the tree before 3.7 was finialized.  I used
it, or rather played with it on my ThinkPad and there were problems
with it.  I see why Thierry pulled it.   If you can't live without it, you
could install it again.  The list of files below would give you a real
good clue as to what to do.

--STeve Andre'

[cvs entry from March 5]
CVSROOT:/cvs
Module name:src
Changes by: [EMAIL PROTECTED]  2005/03/05 16:58:44

Modified files:
sys/arch/amd64/conf: GENERIC files.amd64 
sys/arch/i386/conf: GENERIC files.i386 
sys/arch/macppc/conf: GENERIC files.macppc 
sys/arch/sgi/conf: files.sgi 
sys/conf   : files 
sys/dev/cardbus: files.cardbus 
sys/dev/pci: files.pci 
Removed files:
sys/dev/cardbus: fwohci_cardbus.c 
sys/dev/ieee1394: IMPLEMENTATION TODO files.ieee1394 fwnode.c 
  fwnodereg.h fwnodevar.h fwohci.c fwohcireg.h 
  fwohcivar.h fwscsi.c ieee1394reg.h 
  ieee1394var.h 
sys/dev/pci: fwlynx_pci.c fwohci_pci.c 
sys/dev/std: SBP2.roadmap ieee1212.c ieee1212reg.h 
 ieee1212var.h sbp2.c sbp2reg.h sbp2var.h 

Log message:
Clean up the tree from incomplete, unreliable and unsupported IEEE1394 code.
Ok deraadt@, miod@



Re: djbdns DNS server? Status, Pros and Cons?

2005-05-24 Thread Han Boetes
Anders Jvnsson wrote:
 They have a chapter dealing with DNS servers and there they
 mention djbdns, they think it has some strong point s so I am
 somewhat curios about if anybody out there has any viewpoint
 about using this instead of BIND,

*shrug* there is nothing OpenBSD specific about djbdns. If you
like it use it. But the restrictive license makes it unfit to be
included with OpenBSD. But since you probably have an internet
connection that should be no problem.

 especially since the last version djbdns I found was from
 2001??!  I can't believe that it is so good that it is no need
 to patch it now and then?

There are a few patches around, but they add features, they don't
fix problems.




# Han



Re: djbdns DNS server? Status, Pros and Cons?

2005-05-24 Thread Allie D.
I have used djbdns since '02with no issues whatsoever. You'll love the
data file structure compared with BIND.

Anders Jvnsson said:
 Hello folks.
 I recently bought a very good book: Mastering FreeBSD and OpenBSD security
 They have a chapter dealing with DNS servers and there they mention
 djbdns, they think it has some strong point s so I am somewhat curios
 about if anybody out there has any viewpoint about using this instead of
 BIND, especially since the last version djbdns I found was from 2001??!
 I can't believe that it is so good that it is no need to patch it now
 and then?



Re: Certified Hardware

2005-05-24 Thread Aaron Glenn
On 5/24/05, eric [EMAIL PROTECTED] wrote:
 On Tue, 2005-05-24 at 12:49:43 +0200, Habex Tim proclaimed...
 
  Therefore we are looking for certified hardware (+maintenance contract)
  to replace our current (expired) Nokia 440.
 
 Keep the IP440's and just run openbsd on them.
 
 works like a champ.

who will execute a maintenance contract on just the hardware?
certainly not Nokia...



Re: djbdns DNS server? Status, Pros and Cons?

2005-05-24 Thread Stephan Wehner
Is it not just a license problem that keeps djbdns out of the BSD's ?

If it wasn't pretty secure it would be well known; there is a djbdns
security guarantee, http://cr.yp.to/djbdns/guarantee.html

Stephan

On 5/24/05, Anders Jvnsson [EMAIL PROTECTED] wrote:
 Hello folks.
 I recently bought a very good book: Mastering FreeBSD and OpenBSD security
 They have a chapter dealing with DNS servers and there they mention
 djbdns, they think it has some strong point s so I am somewhat curios
 about if anybody out there has any viewpoint about using this instead of
 BIND, especially since the last version djbdns I found was from 2001??!
 I can't believe that it is so good that it is no need to patch it now
 and then?



Re: kernelized pppoe in 3.7

2005-05-24 Thread Chris Zakelj

Can Erkin Acar wrote:


Theo de Raadt wrote:
[snip]
 

2.  Will hostname.pppoe be able to handle special cases like Jens' # 
character in the username without any special devices, will quotes 
(single, double, or otherwise) handle it, or will those people need to 
rely on the userland driver for the moment?
 


i will let canacar answer that.
   


# characters should work just fine, just give it a try.

Can


Mind being the guinea pig, Jens? :)



Re: kernel pppoe problems

2005-05-24 Thread Chris Zakelj

Can Erkin Acar wrote:


I can't see any problem report about this in my inbox
(which is quite a mess nowadays, so it is equally likely
that I missed it),

If you can spare some time to send me pppoe debug outputs,
tcpdumps with  without the debug flag, and if possible
logs/dumps from the cisco side, I we can do something
about the problem.

Can

Time to pull out the I feel stupid hat, as I think I've figured out 
exactly what went wrong... I wasn't able to recreate my problem at all 
on the currently functional system, so I grabbed my 486 and did a fresh 
install on it.  Moved the modem over and rebooted.  Sure enough, it had 
the same problem I originally experienced.  It connected, got an IP 
address, but couldn't ping anything.  Then I remembered that after 
installing, I've always needed to move /etc/mygate out of the way since 
ppp assigns the gateway as part of the connection process.  So I renamed 
it, rebooted, and things worked exactly as they should.  I must have 
done that at the same time I changed /etc/resolv.conf, and just not 
remembered.  I'd be happy to submit a diff to the pppoe(4) manpage about 
this, once I figure out how to write one.


Can, there is no problem report in your inbox from me, as in all cases 
but one so far, the problem has been with me, not with the OS.  I can't 
speak for Jason's Cisco issues, though.




Re: Certified Hardware

2005-05-24 Thread mmiranda
 wrote:
 On 5/24/05, eric [EMAIL PROTECTED] wrote:
 On Tue, 2005-05-24 at 12:49:43 +0200, Habex Tim proclaimed...
 
 Therefore we are looking for certified hardware (+maintenance
 contract) to replace our current (expired) Nokia 440.
 
 Keep the IP440's and just run openbsd on them.
 
 works like a champ.
 
 who will execute a maintenance contract on just the hardware?
 certainly not Nokia...

why not? its their hardware, isnt it?
I have maintenance contracts (gold) with sun for several sunfire 280's,
i dont run slowlaris on any of them.



Re: djbdns DNS server? Status, Pros and Cons?

2005-05-24 Thread Petr Ruzicka
I used to run OpenBSD BIND for a long time. After couple of patches I
decided to try djbdns and it was perfectly OK with me. As for
configuration as for simplicity as for function.
There are some features that are missing in djbdns but otherwise I do
run it for about 4 years (tinydns and dnscache as well) without any
problem.

P.

On 5/24/05, Anders Jvnsson [EMAIL PROTECTED] wrote:
 Hello folks.
 I recently bought a very good book: Mastering FreeBSD and OpenBSD security
 They have a chapter dealing with DNS servers and there they mention
 djbdns, they think it has some strong point s so I am somewhat curios
 about if anybody out there has any viewpoint about using this instead of
 BIND, especially since the last version djbdns I found was from 2001??!
 I can't believe that it is so good that it is no need to patch it now
 and then?



Re: djbdns DNS server? Status, Pros and Cons?

2005-05-24 Thread Emilio Perea
On Tue, May 24, 2005 at 11:25:35PM +0200, Anders Jvnsson wrote:
 Hello folks.
 I recently bought a very good book: Mastering FreeBSD and OpenBSD security
 They have a chapter dealing with DNS servers and there they mention
 djbdns, they think it has some strong point s so I am somewhat curios
 about if anybody out there has any viewpoint about using this instead of
 BIND, especially since the last version djbdns I found was from 2001??!
 I can't believe that it is so good that it is no need to patch it now
 and then?

I use djbdns on OpenBSD, and don't know anything that needs patching for
my uses.  However, I don't do ipv6.  There is a patch to do that, but if
I needed ipv6 support I'd probably stick with OpenBSD's version of BIND.
(At least until djb gets around to supporting ipv6.)

It will never be part of OpenBSD due to license and hier conflicts, but
it's trivial to add it if you'd like to try it.



Re: djbdns DNS server? Status, Pros and Cons?

2005-05-24 Thread jared r r spiegel
On Tue, May 24, 2005 at 03:15:01PM -0700, Allie D. wrote:
 I have used djbdns since '02with no issues whatsoever. You'll love the
 data file structure compared with BIND.

  or you'll hate it and find it wretched.

  but at least his webpage is still up.

  jared

-- 

[ openbsd 3.7 GENERIC ( may 17 ) // i386 ]



Re: djbdns DNS server? Status, Pros and Cons?

2005-05-24 Thread J.C. Roberts
On Tue, 24 May 2005 22:13:34 +0200, Anders Jvnsson
[EMAIL PROTECTED] wrote:

Hello folks.
I recently bought a very good book: Mastering FreeBSD and OpenBSD security
They have a chapter dealing with DNS servers and there they mention 
djbdns, they think it has some strong point s so I am somewhat curios 
about if anybody out there has any viewpoint about using this instead of 
BIND, especially since the last version djbdns I found was from 2001??! 
I can't believe that it is so good that it is no need to patch it now 
and then?

Your innocent, newbie question has proven itself in the past to be an
invitation for a flame war on this list. Check the archives if you're
curious. You're on thin ice and you'll probably get a lot of mail off
list since no one wants a repeat performance.

If a well written complete *_Operating_System_* like OpenBSD can go
the 8 years since 1997 with only one remote hole, a well written
single application like djbdns going the 4 years since 2001 without
issue should not be difficult for you to imagine.

Let me guess, -you're used to running gnu/linux or microsoft products?

The easiest way to sum up previous discussions of the topic is simple:
Many people swear by djbdns because it is well written code but on the
other hand, many people swear at djbdns because of it's poorly written
license.

Both djbdns and the BIND implementation that comes with OpenBSD are
very good ways to do what you want. Take your pick. If you want the
pros and cons of each, search the archives. Asking (again) on the list
for the viewpoints of users on which is better is really just asking
for trouble.

The advice above was given to me off list in 2001 by Chuck Yerkes when
I asked basically the same question that you did. ;-)

JCR



OBSD 3.7 ports -- mysql

2005-05-24 Thread Russell Fulton
Hi Folks,
 I've just installed mysql from the ports on my 3.7 system. All went
well (I did not see any errors) but so far as I can see only the client
stuff was installed.  The server is there in the ports tree
under /usr/local/libexec/mysqld but it is not installed.  Nor does
there appear to be a start up script or safe-mysqld.

Any ideas?

Cheers, Russell

[demime 1.01d removed an attachment of type application/x-pkcs7-signature which 
had a name of smime.p7s]



hostapd(8)

2005-05-24 Thread Chris Zakelj
Ok, I thought I installed everything, but maybe not, because my 3.7 
install doesn't have hostapd(8).  So, doing a bit of googling, it looks 
like the initial commit was on 4/13, which I think was somewhere around 
the time 3.7 was frozen.  So... did hostapd(8) just miss being included 
in RELEASE, or is it hiding in an install set I left out?




Re: hostapd(8) (NEVERMIND)

2005-05-24 Thread Chris Zakelj

Chris Zakelj wrote:

Ok, I thought I installed everything, but maybe not, because my 3.7 
install doesn't have hostapd(8).  So, doing a bit of googling, it 
looks like the initial commit was on 4/13, which I think was somewhere 
around the time 3.7 was frozen.  So... did hostapd(8) just miss being 
included in RELEASE, or is it hiding in an install set I left out?


Nevermind... I just found it in the huge list of things in plus.html.



Re: OBSD 3.7 ports -- mysql

2005-05-24 Thread Bryan Allen

On May 24, 2005, at 9:25 PM, Russell Fulton wrote:


Hi Folks,
 I've just installed mysql from the ports on my 3.7 system. All  
went
well (I did not see any errors) but so far as I can see only the  
client

stuff was installed.  The server is there in the ports tree
under /usr/local/libexec/mysqld but it is not installed.  Nor does
there appear to be a start up script or safe-mysqld.

Any ideas?


env SUBPACKAGE=-server when you make install, or install it from  
the package it compiles and places in:


/usr/ports/packages/ARCH/all/

http://archives.neohapsis.com/archives/openbsd/2001-07/0493.html
--
bda
cyberpunk is dead. long live cyberpunk.



Desktop chrooted

2005-05-24 Thread Stephan Wehner
Does it make sense to run the Desktop (e.g., X11 / Gnome / clients)
chroot'ed? Non-technical users can live without all the rest.

Stephan



Re: OBSD 3.7 ports -- mysql

2005-05-24 Thread Stephen Marley
On Wed, May 25, 2005 at 01:25:48PM +1200, Russell Fulton wrote:
 Hi Folks,
I've just installed mysql from the ports on my 3.7 system. All went
 well (I did not see any errors) but so far as I can see only the client
 stuff was installed.  The server is there in the ports tree
 under /usr/local/libexec/mysqld but it is not installed.  Nor does
 there appear to be a start up script or safe-mysqld.
 
 Any ideas?

This exact example is documented in the ports man page. Basically, the
server portion is a subpackage.

-- 
[EMAIL PROTECTED]



Re: Desktop chrooted

2005-05-24 Thread Steve Shockley

Stephan Wehner wrote:

Does it make sense to run the Desktop (e.g., X11 / Gnome / clients)
chroot'ed? Non-technical users can live without all the rest.


Please don't reply to a message when starting a new thread.

What problem are you trying to solve?  If the user is chrooted into the 
home directory, what programs would they run?




Re: OBSD 3.7 ports -- mysql

2005-05-24 Thread St.Roy

Russell Fulton wrote:


On Tue, 2005-05-24 at 22:31 -0400, Bryan Allen wrote:
 


I would have found it really helpful if the 'make install' had warned me
that there were sub-packages and referred me to the man page.  I'd be
happy to submit a patch to do this if I could figure out where
bsd.port.mk lives.
 


Hope this is of some value to you.

man bsd.port.mk(5)

# find / -name bsd.port* -print
/usr/share/man/cat5/bsd.port.mk.0
/usr/share/mk/bsd.port.mk
/usr/share/mk/bsd.port.subdir.mk
/usr/ports/infrastructure/mk/bsd.port.mk
/usr/ports/infrastructure/mk/bsd.port.subdir.mk

cheers
Roy Morris



Re: OBSD 3.7 ports -- mysql

2005-05-24 Thread Gerardo Santana Gómez Garrido
This can help:

bsd.port.mk(5)

On 5/24/05, Russell Fulton [EMAIL PROTECTED] wrote:
 On Tue, 2005-05-24 at 22:31 -0400, Bryan Allen wrote:
  On May 24, 2005, at 9:25 PM, Russell Fulton wrote:
 
   Hi Folks,
I've just installed mysql from the ports on my 3.7 system. All
   went
   well (I did not see any errors) but so far as I can see only the
   client
   stuff was installed.  The server is there in the ports tree
   under /usr/local/libexec/mysqld but it is not installed.  Nor does
   there appear to be a start up script or safe-mysqld.
  
   Any ideas?
 
  env SUBPACKAGE=-server when you make install, or install it from
  the package it compiles and places in:
 
 Thanks Bryan -- some other kind soul pointed out that this example is in
 the ports man page.  Something I had not found before, sigh... We live
 an learn and sometime even remember what we have learnt!
 
 I would have found it really helpful if the 'make install' had warned me
 that there were sub-packages and referred me to the man page.  I'd be
 happy to submit a patch to do this if I could figure out where
 bsd.port.mk lives.
 
 I spent several hours going though the Makefile and googling but failed
 to find the vital info.  I did see the sub package reference in the make
 file but failed to figure out that these were imported from the
 environment.
 
 Cheers, Russell
 
 [demime 1.01d removed an attachment of type application/x-pkcs7-signature 
 which had a name of smime.p7s]
 
 


-- 
Gerardo Santana



Re: OBSD 3.7 ports -- mysql

2005-05-24 Thread Daniel Ouellet

Just FYI.

I am finishing up a port that hopefully will be put in for MySQL 4.1.12, 
their latest recommended stable version.


So far all works well and pass all the tests suites stuff, with the 
exception that I have to create three hard link to make it work still, 
but I am working on correcting that.


Would be nice to get some testing as well. I use it without problem so far.

I have the packages for i386 and amd64 ready for all clients, servers, 
and test, or the files if you want to make your own compile from source.


I haven't send it in yet to port@ as I am almost all there, not to my 
liking yet, but it does work and is all complete for the clients and 
servers part. I am still struggling with the tests part a bit.


I have amd64 done on stable 3.7 and i386 done on stable 3.6.

Testing if you want, may be good to do!

I can make the packages available if you like, or my files for making 
your own from source. Works for me...


Daniel



Re: Burn Testing

2005-05-24 Thread Sean Brown
On May 24, 2005 9:43 am, Gaby vanhegan wrote:
 On 24 May 2005, at 16:00, Gaby vanhegan wrote:
  Is there a similar burn-testing app that I can run on OpenBSD to test
  the stability of the machines over a 12 day period?

 I should have mentioned that there will be a prize* for the most
 creative suggestion.

What about simply using stress from ports?
 Gaby.

 *There is no actual prize

 --
 Junkets for bunterish lickspittles since 1998!
 [EMAIL PROTECTED]
 http://weblog.vanhegan.net



Re: Buying CD's in Calgary

2005-05-24 Thread Robin Greig
And what an awesome meeting it was. About as many developers as 
attendees


Thanks to Theo  Gang for the talk and QA even though we were a shy 
bunch. Obviously too impressed with the presentation by Ryan.


Henning enjoy your extended stay here.

Now, where can you pick up one of those Zaurus's in Calgary

Robin



Theo de Raadt wrote:


why not https://https.openbsd.org/cgi-bin/order ?

On 24/05/05, Cameron Schaus [EMAIL PROTECTED] wrote:
   


Does anyone know where I could buy OpenBSD CD's in Calgary?  I used to
buy them at Nexus Computer Books, but now that they are gone, I'm not
sure where to buy the CD's in Calgary.
 




There are currently no stores in Calgary selling CDs directly.  The
CDs get shipped out of a town about 3 hours drive south of Calgary.
Obviously not by me, since I have my hands full with other things.

Tonight, just tonight, CDs and other things can be bought at 5:30pm
at the CUUG meeting in downtown Calgary.  See http://www.cuug.ab.ca

As an added bonus, besides CDs we are bringing 60 developers along
for a QA after the talk.

.




Re: djbdns DNS server? Status, Pros and Cons?

2005-05-24 Thread Theo de Raadt
 Is it not just a license problem that keeps djbdns out of the BSD's ?

   just

That word really does not belong there.  That's a phrase used in english
often used to express how small a problem is.

It is not a small problem.  It is fatal.