Re: OpenSparc T1

2006-02-24 Thread Daniel Ouellet
Ok guys, Lets kill this one. I did asked that question simply out of curiosity more then a week ago and I got the answer. End of story. Like I said then, I was just curious. Sure I would love to see OpenBSD running on the 32 simultaneous processing threads of the T1 processor, but Theo is

PF and flags

2006-02-24 Thread Stefan
Hi, for several years I've used Linux on some machines while now I'm trying to switch to OpenBSD. With the Linux Firewall called iptables you can easely block all connections which try to establish a new connection. For example your default policy is block and then you could use the

Re: PF and flags

2006-02-24 Thread Otto Moerbeek
On Fri, 24 Feb 2006, Stefan wrote: Hi, for several years I've used Linux on some machines while now I'm trying to switch to OpenBSD. With the Linux Firewall called iptables you can easely block all connections which try to establish a new connection. For example your default policy

Re: PF and flags

2006-02-24 Thread Jason Dixon
On Feb 24, 2006, at 6:29 AM, Otto Moerbeek wrote: On Fri, 24 Feb 2006, Stefan wrote: iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT Does someone know if this is also possible with the OpenBSD PF? Read http://www.openbsd.org/faq/pf/filter.html#state, esp. the flags

Re: PF and flags

2006-02-24 Thread Peter N. M. Hansteen
Stefan [EMAIL PROTECTED] writes: block in inet6 all pass in inet6 proto { tcp, udp } from any to any flags /S 'keep state' would certainly help. I would suggest something along the lines of block all pass inet proto { tcp, udp } from $me to any port $portsiwant keep state with useful

Re: PF and flags

2006-02-24 Thread Joachim Schipper
On Fri, Feb 24, 2006 at 12:15:44PM +0100, Stefan wrote: Hi, for several years I've used Linux on some machines while now I'm trying to switch to OpenBSD. With the Linux Firewall called iptables you can easely block all connections which try to establish a new connection. For example

Re: Tapedrives with USB?

2006-02-24 Thread Michael Schmidt
Michael Schmidt wrote: Hello together, is it impossible to run USB driven tapedrives under OpenBSD? The hardware list shows them to be officially not supported. Thanks to all who replied. I have kape my fingers off USB-tapes and could get a SCSI-tape. SCSI forever ;) -- Michael Schmidt

Re: PF and flags

2006-02-24 Thread Stefan
Thank you for all the help. I've created a new ruleset which I hope is ok. # macros int_if = em0 # tables # options set block-policy return # scrub scrub all # filter rules block log inet6 all pass quick on lo0 inet6 all pass in quick on gif0 inet6 proto icmp6 icmp6-type echoreq keep

boot.conf

2006-02-24 Thread Michael Schmidt
Hello, I would like to run an OpenBSD machine where I want that the boot prompt disappears, reason is that I do not want others having access to the boot prompt. In case you put a boot into boot.conf or set timeout to zero then you do not have the opportunity to boot in single user when it

Re: boot.conf

2006-02-24 Thread mickey
On Fri, Feb 24, 2006 at 02:53:06PM +0100, Michael Schmidt wrote: Hello, I would like to run an OpenBSD machine where I want that the boot prompt disappears, reason is that I do not want others having access to the boot prompt. In case you put a boot into boot.conf or set timeout to zero

Re: boot.conf

2006-02-24 Thread knitti
On 2/24/06, Michael Schmidt [EMAIL PROTECTED] wrote: Hello, I would like to run an OpenBSD machine where I want that the boot prompt disappears, reason is that I do not want others having access to the boot prompt. In case you put a boot into boot.conf or set timeout to zero then you do not

Re: boot.conf

2006-02-24 Thread Tim Donahue
Boot off of the cd38.iso, mount your / partition and remove your /etc/boot.conf is the first way that comes to mind. You could also work some magic with the boot prompt that you get from booting off the CD. Something like boot -s hd0a:/bsd should do it and I'm sure I could find a half

occassional carp incorrect hash message

2006-02-24 Thread James Strandboge
I am trying to use carp in a high availability cluster with an i386 and an amd64 machine and OpenBSD 3.8. Most of the time, everything is working fine, but occasionally on the i386 machine I get: Feb 22 21:24:12 host386 /bsd: carp0: incorrect hash I have switched out network cards, moved the

Problem with freshclam

2006-02-24 Thread Gabriel George POPA
Hello all, I have the following problem when running freshclam: # freshclam ClamAV update process started at Fri Feb 24 17:58:29 2006 ERROR: Can't get information about db.ro.clamav.net: Host not found Connection with db.ro.clamav.net (IP: ???) failed. Trying again in 5 secs...

how to hunt for suspected memory leaks?

2006-02-24 Thread Toni Mueller
Hi, I have a PC running 3.8 which is currently idle (ie, it is powered on, but nobody uses it except me for minor maintenance). The box showed the following behaviour over the last few weeks: w/o much processes running and almost no activity, the amount of free memory shown in 'top' decreases

Re: how to hunt for suspected memory leaks?

2006-02-24 Thread Spruell, Darren-Perot
From: [EMAIL PROTECTED] [... doesn't have idle memory] Is it a real problem, or is this only misleading top output (despite the machine feeling quite sluggish)? Or does OpenBSD put idle memory to productive use elsewhere, making the perception that it is just leaking away? DS

Re: how to hunt for suspected memory leaks?

2006-02-24 Thread Gabriel George POPA
I understand your problem. In fact a closer analysis will show that there is no problem. Probably the memory you are reporting as filled is used for caching/memory. At work I have an OpenBSD 3.8 system (with 1GB RAM, P4 3GHz) and I haven't noticed such a thing. Nevertheless, I don't

OpenBGPd BUG in 3.9-beta 12/02/2006

2006-02-24 Thread Xavier Beaudouin
Hi there, seems I get a bug with openbgpd in 3.9-beta snapshot of 12/02/2006. I get some configuration like this group transit { remote-as x local-address xx.xx.xx.3 neighbor xx.xx.xx.1 { descr transit-1 announce self

Re: boot.conf

2006-02-24 Thread Tobias Weingartner
On Friday, February 24, Michael Schmidt wrote: In case you put a boot into boot.conf or set timeout to zero then you do not have the opportunity to boot in single user when it may be necessary. Are there ways to circumvent the latter? With physical access to the machine, yes, there are

Re: Simple question about appletalk

2006-02-24 Thread Stefek Zaba
Bryan Irvine [EMAIL PROTECTED] wrote: If the laptop only needs www access no appletalk is needed. Appletalk is purely a file serving mechanism, like samba or nfs. If you need appletalk it's pretty easy to set up on OpenBSD. Well... Appletalk itself is a lower-level protocol than samba or

Re: OpenBGPd BUG in 3.9-beta 12/02/2006

2006-02-24 Thread Claudio Jeker
On Fri, Feb 24, 2006 at 06:37:00PM +0100, Xavier Beaudouin wrote: Hi there, seems I get a bug with openbgpd in 3.9-beta snapshot of 12/02/2006. I get some configuration like this group transit { remote-as x local-address xx.xx.xx.3 neighbor xx.xx.xx.1 {

IPSEC tunnels timing out

2006-02-24 Thread Matthew Closson
Hello, I have isakmpd setup talking to about 15 IKE peers and doing about 100 Phase 2 SA's. However, frequently I will attempt to initiate traffic over one of the tunnels and will not get any response. If I issue a command to the FIFO like so : echo S /tmp/isakmpd.fifo and then view the

squid cachemgr: Unknown host: localhost

2006-02-24 Thread Martin Schröder
Hi, I've a firewall/proxy with 3.7 running a named and transparent squid. I want to use cachemgr.cgi, so I've setup apache to listen on port 8080 and copied /usr/local/libexec/cachemgr.cgi to /var/www/cgi-bin Now, the Cache Manager Interface comes up on http://firewall:8080/cgi-bin/cachemgr.cgi,

Re: ADSL modem intern

2006-02-24 Thread poncenby smythe
On 21 Feb 2006, at 13:43, FTP wrote: Hi there, I'm interested to buy an ADSL modem PCI card for OpenBSD and Sangoma informed me that their products are not for xBSD any more! Any alternatives around? I've been using an Thomson (previously Alcatel) Speedtouch USB ADSL modem. ugen0 at

Re: squid cachemgr: Unknown host: localhost

2006-02-24 Thread eric
On Fri, 2006-02-24 at 21:57:24 +0100, Martin Schrvder proclaimed... Now, the Cache Manager Interface comes up on http://firewall:8080/cgi-bin/cachemgr.cgi, but whatever I enter (or if I simply press Continue), I always get an error page: Cache Manager Error

Re: squid cachemgr: Unknown host: localhost

2006-02-24 Thread Ray Lai
On Fri, Feb 24, 2006 at 09:57:24PM +0100, Martin Schr?der wrote: Hi, I've a firewall/proxy with 3.7 running a named and transparent squid. I want to use cachemgr.cgi, so I've setup apache to listen on port 8080 and copied /usr/local/libexec/cachemgr.cgi to /var/www/cgi-bin Now, the Cache

In chroot: /dev/stdin: Device not configured

2006-02-24 Thread Matthias Kilian
Hi, can anyone tell me wtf I'm missing in the commands below? # mkdir foo # cd foo # mkdir bin dev # cp -p /bin/cat bin # cd dev # /dev/MAKEDEV std # cd .. # chroot . /bin/cat /dev/stdin cat: /dev/stdin: Device not configured The reason I ask is that I need to run tar -czf within a chroot

Re: In chroot: /dev/stdin: Device not configured

2006-02-24 Thread Tom Cosgrove
Matthias Kilian 24-Feb-06 21:38 Hi, can anyone tell me wtf I'm missing in the commands below? # mkdir foo # cd foo # mkdir bin dev # cp -p /bin/cat bin # cd dev # /dev/MAKEDEV std # cd .. # chroot . /bin/cat /dev/stdin cat: /dev/stdin: Device not configured The reason I ask is

Re: how to hunt for suspected memory leaks?

2006-02-24 Thread Nick Guenther
On 2/24/06, Gabriel George POPA [EMAIL PROTECTED] wrote: I understand your problem. In fact a closer analysis will show that there is no problem. Probably the memory you are reporting as filled is used for caching/memory. Caching RAM is space reserved for data being used by the

Re: In chroot: /dev/stdin: Device not configured

2006-02-24 Thread Nick Guenther
On 2/24/06, Matthias Kilian [EMAIL PROTECTED] wrote: Hi, can anyone tell me wtf I'm missing in the commands below? # mkdir foo # cd foo # mkdir bin dev # cp -p /bin/cat bin # cd dev # /dev/MAKEDEV std This should say stdin, no? # cd .. # chroot . /bin/cat /dev/stdin cat: /dev/stdin:

Re: In chroot: /dev/stdin: Device not configured

2006-02-24 Thread Nick Holland
On Fri, Feb 24, 2006 at 10:38:13PM +0100, Matthias Kilian wrote: Hi, can anyone tell me wtf I'm missing in the commands below? # mkdir foo # cd foo # mkdir bin dev # cp -p /bin/cat bin # cd dev # /dev/MAKEDEV std # cd .. # chroot . /bin/cat /dev/stdin cat: /dev/stdin: Device not

Re: In chroot: /dev/stdin: Device not configured

2006-02-24 Thread Theo de Raadt
can anyone tell me wtf I'm missing in the commands below? # mkdir foo # cd foo # mkdir bin dev # cp -p /bin/cat bin # cd dev # /dev/MAKEDEV std # cd .. # chroot . /bin/cat /dev/stdin cat: /dev/stdin: Device not configured The reason I ask is that I need to run tar -czf within a

Re: dynamically linked suid binaries - Request for enlightment

2006-02-24 Thread Theo de Raadt
while doing some reading on secure software development (//www.ranum.com/security/computer_security/archives/security-for-developers.pdf) I came across the advice always link your priviliged binaries statically. However a quick check on my system revealed me almost all suid/sgid programs

Re: In chroot: /dev/stdin: Device not configured

2006-02-24 Thread Theo de Raadt
can anyone tell me wtf I'm missing in the commands below? # mkdir foo # cd foo # mkdir bin dev # cp -p /bin/cat bin # cd dev # /dev/MAKEDEV std # cd .. # chroot . /bin/cat /dev/stdin cat: /dev/stdin: Device not configured The reason I ask is that I need to run tar -czf

Re: In chroot: /dev/stdin: Device not configured

2006-02-24 Thread Matthias Kilian
On Fri, Feb 24, 2006 at 04:49:07PM -0500, Nick Holland wrote: cat: /dev/stdin: Device not configured [...] ~ $ mount /dev/wd0a on / type ffs (local, softdep) /dev/wd0h on /home type ffs (local, nodev, nosuid, softdep) /dev/wd0e on /tmp type ffs (local, nodev, nosuid, softdep) /dev/wd0d on

Unsubscription Confirmation

2006-02-24 Thread Subscriber Services
You have been successfully removed and will not receive any more messages.

integrating windows client and server with openbsd servers

2006-02-24 Thread Gustavo Rios
Hey folks, i am in need to make windows and openbsd machines to live together and happy. I have kerberos, nis, storage server in openbsd and would like to them to server windows clients and servers. I have users on my nfs openbsd server and my users are on a nis server too. One very important

Re: integrating windows client and server with openbsd servers

2006-02-24 Thread Will H. Backman
-Original Message- From: [EMAIL PROTECTED] on behalf of Gustavo Rios Sent: Fri 2/24/2006 9:39 PM To: misc@openbsd.org Subject: integrating windows client and server with openbsd servers Hey folks, i am in need to make windows and openbsd machines to live together and happy. I have

pf.conf to log specific but block all

2006-02-24 Thread Harry Putnam
I want to use pf.conf in what may be an unusual place. Not the usual sheild between private net and internet. It would be more as a logging service but will need some config to allow two private net machines to access it. A network picture: INTERNET |

Re: pf.conf to log specific but block all

2006-02-24 Thread Melameth, Daniel D.
Harry Putnam wrote: I want to use pf.conf in what may be an unusual place. Not the usual sheild between private net and internet. It would be more as a logging service but will need some config to allow two private net machines to access it. A network picture:

Re: pf.conf to log specific but block all

2006-02-24 Thread Harry Putnam
Melameth, Daniel D. [EMAIL PROTECTED] writes: There is a facility on the NETGEAR to send all traffic to an inside machine for whatever reason. Its called a DMZ Server although I don't think that is the normal usage of DMZ, but not experienced enough to know for sure. This might not work

Re: pf.conf to log specific but block all

2006-02-24 Thread Mitch Parker
Dan and Harry, Agreed. A consumer-class Netgear device will not be the best choice, as it's got an underpowered CPU and has more than enough issues with its configuration. While many SOHO routers can output to syslog, unless you spend the money for a higher-end product like a Juniper Netscreen,

Re: pf.conf to log specific but block all

2006-02-24 Thread Melameth, Daniel D.
Harry Putnam wrote: Melameth, Daniel D. [EMAIL PROTECTED] writes: There is a facility on the NETGEAR to send all traffic to an inside machine for whatever reason. Its called a DMZ Server although I don't think that is the normal usage of DMZ, but not experienced enough to know for

booter Re: help me

2006-02-24 Thread Tony Sterrett
Somebody should gave him the boot. Respectfully, Tony Sterrett [EMAIL PROTECTED] Consultant in Open Source Software, featuring OpenBSD and Linux. www.sterrett.net (858) 433-1467 San Diego (408) 705-2135 San Jose On Feb 24, 2006, at 5:06 PM, julio perez wrote: hey, umm..i need help. Umm..can

Re: Problem with freshclam

2006-02-24 Thread Peter
--- Gabriel George POPA [EMAIL PROTECTED] wrote: Hello all, I have the following problem when running freshclam: # freshclam ClamAV update process started at Fri Feb 24 17:58:29 2006 ERROR: Can't get information about db.ro.clamav.net: Host not found Connection with

Re: pf.conf to log specific but block all

2006-02-24 Thread Harry Putnam
Melameth, Daniel D. [EMAIL PROTECTED] writes: Thanks for the nifty summary. I want to pester you just a little more then I'll get to work on this and see if I get really stuck somewhere. # Address translation for machines on your LAN nat on $ext_if from $int_if:network to any - ($ext_if)

Anyone see anything overtly obvious in this panic?

2006-02-24 Thread openbsd
Hi everyone. I've been trying to bring up an old Sun Enterprise Ultra 150, with the following results. I keep thinking that there's something obvious staring me in the face, but I don't see it. Can anyone help? Thanks in advance! Dave Klingler Boot device: disk1:3 File and args: OpenBSD IEEE

Re: Anyone see anything overtly obvious in this panic?

2006-02-24 Thread Eric S. Pulley
--On February 24, 2006 11:04:12 PM -0700 [EMAIL PROTECTED] wrote: Hi everyone. I've been trying to bring up an old Sun Enterprise Ultra 150, with the following results. I keep thinking that there's something obvious staring me in the face, but I don't see it. Can anyone help? Thanks in