Re: Question about IP
On 10 Mar 2007, at 14:58, Akin Nomad wrote: c: 2001:16c8:ffd7::b:33.255.3.2 I would say this one on the basis that (notation of) IPv6 addresses are colon separated and IPv4 addresses are period separated and this uses a mixture of colon an period But I could be wrong. -- Jon Morby FidoNet Registration Services Ltd tel: 0845 004 3050 / fax: 0845 004 3051 web: http://www.fido.net/
Re: Question about IP
On 3/11/07, Jon Morby [EMAIL PROTECTED] wrote: On 10 Mar 2007, at 14:58, Akin Nomad wrote: c: 2001:16c8:ffd7::b:33.255.3.2 I would say this one on the basis that (notation of) IPv6 addresses are colon separated and IPv4 addresses are period separated and this uses a mixture of colon an period No, that's a valid form. The authoritative reference is RFC 2373. On OpenBSD systems, the inet_pton(3) manpage summarizes the accepted forms. Philip Guenther
Re: Question about IP
On 11 Mar 2007, at 12:37, Philip Guenther wrote: On 3/11/07, Jon Morby [EMAIL PROTECTED] wrote: On 10 Mar 2007, at 14:58, Akin Nomad wrote: c: 2001:16c8:ffd7::b:33.255.3.2 I would say this one on the basis that (notation of) IPv6 addresses are colon separated and IPv4 addresses are period separated and this uses a mixture of colon an period No, that's a valid form. The authoritative reference is RFC 2373. On OpenBSD systems, the inet_pton(3) manpage summarizes the accepted forms. *doh* Ok ... so learn something new every day ... :) Yup .. looks like a badly worded / translated question ... oh well back to Sunday lunch :) Philip Guenther -- Jon Morby FidoNet Registration Services Ltd tel: 0845 004 3050 / fax: 0845 004 3051 web: http://www.fido.net/
spamd and MailEnable mta problems
Hi,
MailEnable seem to have problems connecting to OpenBSD spamd in greylisting
mode and stuttering enabled.
MailEnable is unable to detect the 220 . string and timeouts the
connection to spamd after a few seconds with a connection error.
Patched now spamd to send the 220 . as a complete string:
@@ -910,7 +910,7 @@
cp-sr = 1;
else
cp-sr = 0;
- n = write(cp-fd, cp-op, (one cp-stutter) ? 1 :
cp-ol);
+ n = write(cp-fd, cp-op, (one cp-stutter) ? 4 :
cp-ol);
if (n == 0)
closecon(cp);
else if (n == -1) {
Guess this is a MailEnable bug, but maybe anyone has the possibility to test
if this patch helps to workaround the problem.
- Florian
Re: updating installed ports
On Sat, Mar 10, 2007 at 11:36:33PM -0500, Peter wrote: Le Samedi 10 Mars 2007 03:43, Lars Hansson a icrit : Peter wrote: Are you serious? I thought that was only for straight packages. It actually fetches code from third party repositories? What 3rd party repositories? What are straight packages? AFAIK, In this context, a 3rd party repository is a place that dishes out code that is independent of OpenBSD. I just installed the unarj port and I remember it downloading stuff from some weird Russian site. I guess that's one example. A straight package is a binary kit that is put together by the OpenBSD team. Not one that is subsequently built by the port system. Pedro You're confused. Your terminology looks like nothing we use. We don't use the term `straight' package. There is the base system, which is composed of plain tarballs, and pkg_add doesn't have anything to do with it. The binary packages that pkg_add handles come directly from the ports tree. For instance, the unarj package was built from that russian site. In a sense packages all are 3rd party software (in fact, a large part of the OpenBSD systeme originated elsewhere. Perl, gcc, apache, openssl: none of these have been written within OpenBSD proper). As far as your original probleme goes, this looks like a bug in pkg_add in OpenBSD 4.0. The code to pkg_add is rather large, and it gains features as it grows. User-interface issues, like what to ask, what to guess, and failure modes, are notoriously long to get right. The 4.1 version is going to be ways better in the details, and there are plans to improve on that later on.
Re: Patching and/or updating
Hey Lars, Building my own release looks useful when I deal with more machines later. Yup, that's when the real fun kicks in. I didn't this time so, so there is no /usr/src directory to work with. ie. The first step in that document fails: cd /usr/src cvs up -r OPENBSD_4_0 ksh: cd: /usr/src - No such file or directory Which sets did you install? You will need comp40.tgz at least. Anyway, you can create this directory as said before. To speed things up, download src.tar.gz and sys.tar.gz from a local mirror; cd *into* /usr/src/ and untar: tar zxf /path/to/both/files.tar.gz. Then, run the above cvs command. Make sure you have the CVSROOT environment variable set to a local cvs mirror. HTH and good luck... Nico
pkg_add with http?
Hi, how can I make pkg_add work with http? I already have PKG_PATH=http://ftp-stud.fht-esslingen.de/pub/OpenBSD/4.0/packages/i386/; FETCH_CMD=/usr/local/bin/wget but pkg_add -v doesn't work. Best Martin
Re: pkg_add with http?
On Sun, Mar 11, 2007 at 05:07:06PM +0100, Martin Schr?der wrote: Hi, how can I make pkg_add work with http? I already have PKG_PATH=http://ftp-stud.fht-esslingen.de/pub/OpenBSD/4.0/packages/i386/; FETCH_CMD=/usr/local/bin/wget but pkg_add -v doesn't work. why wget? use ftp(1); it supports FTP, HTTP, and HTTPS. reyk
Re: spamd and MailEnable mta problems
Guess this is a MailEnable bug, but maybe anyone has the possibility to test if this patch helps to workaround the problem. This is completely a mailenable bug and should be reported to them. They are assuming that the sending mta can always send the numeric code as one byte. in fact, they're probably only doing one read and not checking for any kind of short read. -Bob
Re: pkg_add with http?
2007/3/11, Reyk Floeter [EMAIL PROTECTED]: why wget? use ftp(1); it supports FTP, HTTP, and HTTPS. - sudo pkg_add -iv wdiff Error from http://ftp-stud.fht-esslingen.de/pub/OpenBSD/4.0/packages/i386/: ftp: Writing -: Broken pipe Can't find wdiff-0.5 /usr/sbin/pkg_add: wdiff-0.5:Fatal error - Best Martin
OpenBSD Soekris NAT Performance?
Greetings everyone!!
I have been using OpenBSD for some time now on my Soekris 4511
router. I have OpenBSD 4.0 installed (off the cd) with all of the OS
on a CompactFlash card which is mounted read-only; I used the
flashdist.sh - script rom http://www.nmedia.net/~chris/soekris/ . I
use the system to connect to my isp via the pptp client (version
1.7.1 with pppd, but I also tested version 1.7.0 from the ports with
the user-ppp) and then do NAT for a mac os x and a windows client
behind my firewall. Except that, I only run sshd on the soekris box.
The hardare setup is as follows: alcatel_modemsoekris_box-
3com 100Mbit HUB--(Mac, Win, ps2)
Everything works fine but for speed; I would get about 1.8 megabit
downstream from my ISP service, but with openBSD i just get about 400
kbit downstream. I am pretty sure the hardware is not the problem as
the speed is as it should be when I install m0n0wall (freebsd-based)
on the same soekris box.
I tried looking at top for system load, system load is about 0.22,
and the idlce counter never goes down 50% even when I try to use full
traffic. The only thing I can think of to hint at the problem is the
ouput of netstat -n -I sis0 with sis0 being the network port
connected to my internal network
===Cut===
# netstat -n -I sis0
NameMtu Network Address Ipkts IerrsOpkts
Oerrs Colls
sis01500 Link 00:00:24:c4:bd:44 124481 0
87665 0 802
sis01500 192.168.2/2 192.168.2.1 124481 0
87665 0 802
sis01500 fe80::%sis0 fe80::200:24ff:fe 124481 0
87665 0 802
===Cut===
Is the number of Collisions maybe the problem?
As cpu load never reaches 100%, the packet filter can't be the problem?
I tried searching the web for my problem, but did not find anything.
Do you perhaps have any idea what did wrong or configured incorrectly?
Please find my pf.conf attached as well:
===Cut===
ext_if=ppp0
int_if=sis0
adsl_if=sis1
wlan_if=wi0
alcatel=_adsl_modem_ip
nat_proto={tcp,i udp, icmp}
protos={tcp, udp}
table home persist const {home_network_ip/24}
set skip on lo
scrub in all
nat on $ext_if from home to any - ($ext_if)
# Redirect Metal Gear Solid 3: Subsistence traffic
rdr on $ext_if inet proto tcp to port 5730:5733 - _ps2_ip_ port 5730:*
rdr on $ext_if inet proto udp to port 5730:5739 - _ps2_ip_ port 5730:*
# Redirect Skype traffic
rdr on $ext_if inet proto udp to port 54045 - _mac_ip_ port 54045
rdr on $ext_if inet proto tcp to port 54045 - _mac_ip_ port 54045
# Redirect Bittorrent traffic
rdr on $ext_if inet proto tcp to port 6881:6999 - _mac_ip_ port 6881:*
block in all
pass out all keep state
pass quick on $int_if
pass quick on $adsl_if
pass quick on $wlan_if
pass in on $ext_if proto tcp to ($ext_if) port ssh keep state
pass in on $ext_if proto tcp to ($ext_if) port 443 keep state
===Cut===
Thank you all so much in advance for trying to help me with this!!
See you,
Christian Fuchs
e-mail: [EMAIL PROTECTED]
UIN: 398213
Re: spamd and MailEnable mta problems
Guess this is a MailEnable bug, but maybe anyone has the possibility to test if this patch helps to workaround the problem. This is completely a mailenable bug and should be reported to them. They are assuming that the sending mta can always send the numeric code as one byte. in fact, they're probably only doing one read and not checking for any kind of short read. Spamd should not be changed to cope with their bugs. People who don't do SMTP or TCP or sockets correctly should receive bug reports, and they should then fix their bugs. Year on year, the number of workarounds for buggy software should decrease, not increase. The same thing is happening with giant mailgateway hosts -- increasingly many of them are ensuring that their their re-attempts come from the same IP address. Greylisting is a fact of life now for them, and these giant operations are learning to cope with following the new thing 451 is used for.
Re: Patching and/or updating
On Sun, 11 Mar 2007, Nico Meijer wrote: To speed things up, download src.tar.gz and sys.tar.gz from a local mirror; cd *into* /usr/src/ and untar: tar zxf /path/to/both/files.tar.gz. Yeah, I noticed that it would take a long time and a lot of disk space to download the whole works. So, I just looked at the patches and then used CVS to check out the smallest unit possible. Seems to have worked so far... Thanks -Lars Lars NoodC)n ([EMAIL PROTECTED]) Ensure access to your data now and in the future http://opendocumentfellowship.org/about_us/contribute
Problem connecting to internet through DSL
Hi, I'm having a DSL router through which I connect to the internet. I have my default gateway specified in /etc/mygate, # cat /etc/mygate 192.168.1.1 I have specified the DNS in /etc/resolv.conf #cat /etc/resolv.conf search intra.informedia.in nameserver 125.22.47.125 nameserver 202.56.250.5 lookup file bind The interface: #cat /etc/hostname.bce0 inet 192.168.1.3 255.255.255.0 NONE The routing tables do not show any problems. But I'm not able to connect or ping my DSL router. Have I missed out anything or is there anything else that has to be done? Thanks, sac.
Re: Problem connecting to internet through DSL
On Mon, Mar 12, 2007 at 12:36:22AM +0530, sac wrote: The interface: #cat /etc/hostname.bce0 inet 192.168.1.3 255.255.255.0 NONE The routing tables do not show any problems. But I'm not able to connect or ping my DSL router. Have I missed out anything or is there anything else that has to be done? can't ping the dsl router from the bce0 machine, or from a lan host behind the bce0 machine? if the latter, maybe you forgot net.inet.ip.forwarding=1, or don't have a nat rule in pf.conf correctly? if the former, what does 'ifconfig bce0' look like, check to see if you're getting any ARP replies for the enet addr of 192.168.1.1, and perhaps watch tcpdump on bce0 after deleting any (incomplete) entries for 192.168.1.1 and then trying to ping 192.168.1.1 -- jared
Re: OBSD4.0 on IBM Thinkpad T60
On 3/8/07, Jonathan Gray [EMAIL PROTECTED] wrote: On Thu, Mar 08, 2007 at 01:35:46PM +0100, Johan P. Lindstr?m wrote: I seem to recall that the new T60's feature the ICH7 (or 6) chipset and thus the HDD connects via SATA interface. This may give you issues, though there is a compatibility mode switch in BIOS (F1) to make the hdd show up as wd instead of sd. The performance is a bit lower as from what i recall, but it works well. I tested this on one of the first T60's to hit the scandinavian markets, so much may have changed since then. There is no need to change anything here. APM should still work like a charm, though I can not comment on the The newer ThinkPads no longer emulate APM so it doesn't work like a charm. Most noteably this means suspend is not yet supported on T60. wifi equipment, to my experiance, it is often intel or broadcom. The Wifi is Intel PRO/Wireless 3945ABG wpi(4) Great update, thanks! -- -- JPL
bgpctl show, performance and softreconfig in -current
I've noticed since updating to current from 4.0-current in January to
-current now that certain commands through bgpctl seem to just
hang .. (we've tried this with various snapshots every 2 weeks or so
since January) as well as trying a full build.
If I do a bgpctl reload (100+ peers per production router) and then
within a minute or so do a bgpctl show then bgpctl's output just
hangs (I've left it for nearly an hour and nothing has appeared
beyond the headers)
Also regardless of a reload, attempting to show rib nei a.b.c.d out
also just seems to hang
bgpctl show rib nei 80.252.124.1 out
flags: * = Valid, = Selected, I = via IBGP, A = Announced
origin: i = IGP, e = EGP, ? = Incomplete
flags destination gateway lpref med aspath origin
and no more output
Whilst the same command on our 4.0-current boxes generates the sort
of output I would expect
[EMAIL PROTECTED] time bgpctl show rib nei 80.252.124.3 out | wc -l
64171
real0m6.374s
user0m1.461s
sys 0m0.086s
What (if anything more) can I do to help diagnose this further?
I have a test setup on a box internally with the following config and
-current as of this morning
AS 65123
fib-update yes
route-collector no
network 80.252.127.0/24
group fidonet {
softreconfig in yes
softreconfig out yes
multihop 3
announce self
set nexthop self
remote-as 8282
neighbor 80.252.124.1
neighbor 80.252.124.3
}
Which hangs
bash-3.2# time bgpctl show rib nei 80.252.124.1 out
flags: * = Valid, = Selected, I = via IBGP, A = Announced
origin: i = IGP, e = EGP, ? = Incomplete
flags destination gateway lpref med aspath origin
^C
real1m50.758s
user0m0.000s
sys 0m0.000s
If I turn off softreconfig then I get mixed results
bash-3.2# time bgpctl show rib nei 80.252.124.1 out
flags: * = Valid, = Selected, I = via IBGP, A = Announced
origin: i = IGP, e = EGP, ? = Incomplete
flags destination gateway lpref med aspath origin
AI* 80.252.127.0/24 0.0.0.0100 0 i
real0m2.083s
user0m0.010s
sys 0m0.000s
bash-3.2# time bgpctl show rib nei 80.252.124.1 out
flags: * = Valid, = Selected, I = via IBGP, A = Announced
origin: i = IGP, e = EGP, ? = Incomplete
flags destination gateway lpref med aspath origin
^C
real5m48.403s
user0m0.000s
sys 0m0.010s
(our border routers are 3Ghz P4-HT .. our test box is an old G4 mac
mini .. so I would expect a slower performance on the mac mini .. all
boxes have at least 1Gb ram)
I have also noticed that if I do a bgpctl show rib nei x out in one
window, and then do a bgpctl reload in another window the output
appears almost instantly after the reload
bash-3.2# time bgpctl show rib nei 80.252.124.3 out
flags: * = Valid, = Selected, I = via IBGP, A = Announced
origin: i = IGP, e = EGP, ? = Incomplete
flags destination gateway lpref med aspath origin
AI* 80.252.127.0/24 0.0.0.0100 0 i
real4m59.767s
user0m0.000s
sys 0m0.000s
bash-3.2# time bgpctl show rib nei 80.252.124.3 out
(JPM - perform reload in another window)
flags: * = Valid, = Selected, I = via IBGP, A = Announced
origin: i = IGP, e = EGP, ? = Incomplete
flags destination gateway lpref med aspath origin
AI* 80.252.127.0/24 0.0.0.0100 0 i
real0m19.509s
user0m0.000s
sys 0m0.010s
Other useful info
bash-3.2# bgpctl show rib mem
RDE memory statistics
211027 IPv4 network entries using 6.4M of memory
422053 prefix entries using 12.9M of memory
75553 BGP path attribute entries using 5.5M of memory
34067 BGP AS-PATH attribute entries using 1.1M of memory,
and holding 75553 references
3889 BGP attributes entries using 91.1K of memory
and holding 90199 references
3888 BGP attributes using 24.4K of memory
RIB using 26.0M of memory
[EMAIL PROTECTED] bgpctl show rib mem
RDE memory statistics
27 IPv4 network entries using 6.4M of memory
1 IPv6 network entries using 44B of memory
1694088 prefix entries using 51.7M of memory
312124 BGP path attribute entries using 22.6M of memory
103442 BGP AS-PATH attribute entries using 3.1M of memory,
and holding 312124 references
12202 BGP attributes entries using 286K of memory
and holding 371302 references
12201 BGP attributes using 432K of memory
RIB using 84.5M of memory
[EMAIL PROTECTED] time bgpctl show rib nei 80.252.124.2 out | wc -l
^C
real8m55.508s
user0m0.016s
sys 0m0.008s
[EMAIL PROTECTED] bgpctl show rib mem
RDE memory statistics
211077 IPv4 network entries using 6.4M of memory
1 IPv6 network entries using 44B of memory
429124 prefix entries using 13.1M of memory
77644 BGP path attribute entries using 5.6M of memory
34162 BGP AS-PATH attribute
Re: pkg_add with http?
John Brooks wrote: first manually download the package to your machine via ftp. then run pkg_add against the file you just downloaded. if something doesn't work, you'll know exactly which part is failing. -- John Brooks [EMAIL PROTECTED] Hi, how can I make pkg_add work with http? I already have PKG_PATH=http://ftp-stud.fht-esslingen.de/pub/OpenBSD/4.0/packages/i386/; FETCH_CMD=/usr/local/bin/wget but pkg_add -v doesn't work. Best Martin pkg_add does all of this for you - without the need for a separate FETCH_CMD or enclosing PKG_PATH in quotes. use pkg_add built in smarts to do both for you - use the PKG_CACHE mechanism to store locally any packages, and pkg_add to do the right thing for you - search first in your downloaded/cached packages, then on the cdrom (if mounted), and finally get from your chosen mirror: mkdir /packages/ PKG_ARCH=`uname -s`/`uname -r`/packages/`uname -m` PKG_PATH=/packages:/cdrom/`uname -r`/packages/`uname -m`/:http://ftp-stud.fht-esslingen.de/pub/$PKG_ARCH/ PKG_CACHE=/packages/ this looks like this on my box: PKG_ARCH=OpenBSD/4.0/packages/i386 PKG_CACHE=/packages/ PKG_PATH=/packages:/cdrom/4.0/packages/i386/:http://ftp-stud.fht-esslingen.de/pub/OpenBSD/4.0/packages/i386/ then you only need to do each time: pkg_add -iv pkgname it will be downloaded/installed as needed. on my box the above works fine - i.e. retrieving packages via http:// is understood by pkg_add - as documented/expected! a+ scorch
ES40 (alpha servers) available for donation in the munich area
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Folks, a friend is in about to scrap several ES40 Alpha servers. The approximate configuration is: - - 4x CPUs (533MHz maybe, 833 is unlikely) - - several gigs of memory (4?) - - 1 or 2 SCSI controllers these things weigh a ton and suck power. you have been warned :) There are three hot-swap power supply bays in the back, two of which must be populated to support 4 CPUs. Each PS is rated at 720W. Aside from the their appetite for power, these were, in their day, some of the nicest alphas DEC ever built. The CPUs are connected to a 5.2GB/sec crossbar switch which made this machine scream. I can make the specs available if anyone is interested... cheers, Rob Urban Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iD8DBQFF9MfT33x7lJjLFm4RAm0vAKCrP7E4UzEhzVm0fks1amPUUL+9bwCgizcE cRvN56fFt3f/Ik8LJ15e5ac= =PGbt -END PGP SIGNATURE-
ifconfig output for 802.11
I'm trying to understand the output of ifconfig for 802.11 interfaces and while most of it is obvious one part isn't (at least not to me). In the below output, what exactly does the 20dB stand for and how do I interpret it? Looking at the ifconfig source it would also appear that it (whatever it is) could also be expressed as a percentage? $ ifconfig ural0 .. ieee80211: nwid unet chan 6 bssid 00:0f:3d:0d:eb:ac 20dB nwkey 0x8353c823e7 100dBm --- Lars Hansson
Re: ifconfig output for 802.11
On Mon, Mar 12, 2007 at 12:05:20PM +0800, Lars Hansson wrote: I'm trying to understand the output of ifconfig for 802.11 interfaces and while most of it is obvious one part isn't (at least not to me). In the below output, what exactly does the 20dB stand for and how do I interpret it? Looking at the ifconfig source it would also appear that it (whatever it is) could also be expressed as a percentage? $ ifconfig ural0 .. ieee80211: nwid unet chan 6 bssid 00:0f:3d:0d:eb:ac 20dB nwkey 0x8353c823e7 100dBm it is the received single strength indicator. take you laptop, move a bit around, go to the next room and you will see that this value increases and decreases. reyk
Re: ifconfig output for 802.11
On 12/03/07, Reyk Floeter [EMAIL PROTECTED] wrote: On Mon, Mar 12, 2007 at 12:05:20PM +0800, Lars Hansson wrote: I'm trying to understand the output of ifconfig for 802.11 interfaces and while most of it is obvious one part isn't (at least not to me). In the below output, what exactly does the 20dB stand for and how do I interpret it? Looking at the ifconfig source it would also appear that it (whatever it is) could also be expressed as a percentage? $ ifconfig ural0 .. ieee80211: nwid unet chan 6 bssid 00:0f:3d:0d:eb:ac 20dB nwkey 0x8353c823e7 100dBm it is the received single strength indicator. I thought it was the transmit power. -- Shane J Pearson
Re: ifconfig output for 802.11
Reyk Floeter wrote: On Mon, Mar 12, 2007 at 12:05:20PM +0800, Lars Hansson wrote: it is the received single strength indicator. Ah, that's what i suspected it was. Thanks. I'm trying to get a small gui wifi monitor working so can i safely assume that 20dB is maximum? When does it show as a percentage, anyway? --- Lars Hansson
Re: ifconfig output for 802.11
On Mon, Mar 12, 2007 at 03:19:29PM +1100, Shane Pearson wrote: On 12/03/07, Reyk Floeter [EMAIL PROTECTED] wrote: On Mon, Mar 12, 2007 at 12:05:20PM +0800, Lars Hansson wrote: I'm trying to understand the output of ifconfig for 802.11 interfaces and while most of it is obvious one part isn't (at least not to me). In the below output, what exactly does the 20dB stand for and how do I interpret it? Looking at the ifconfig source it would also appear that it (whatever it is) could also be expressed as a percentage? $ ifconfig ural0 .. ieee80211: nwid unet chan 6 bssid 00:0f:3d:0d:eb:ac 20dB nwkey 0x8353c823e7 100dBm it is the received single strength indicator. I thought it was the transmit power. the 100dBm is the transmit power. the 20dB rssi should appear as a percentage as well, but some bits are missing in the driver. reyk
